last executing test programs: 4m34.965995724s ago: executing program 32 (id=277): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0x6, 0x973f, 0x81, 0x1}) 3m49.173798977s ago: executing program 33 (id=710): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000040)={[{@gid}, {}, {@nls={'nls', 0x3d, 'euc-jp'}}]}, 0x1, 0x5ed, &(0x7f0000001440)="$eJzs3U1rXNcZB/D/nRlLHhccJbGT1C1EpFBMTGy9mLSFQtViihbBBLrJVtRyLDx2gjQpkyyKWvxB0oW6yqKbEihdZOF1F/kCgi4LhS5FNy5z585oYsvyqNG8OP798Jl7js495zz38b1XmivBBHhhrX+QM7spsn7lvU63vb+32trfW73XryeZT1Ir/6XRrf4zqT9IFtMr+X6SopqueNo6X658cenrm53LvVatKuX+9ePGjWa3Klmrglw7xfkefuv5isERdie90Z98Fjx6tv+Mcfn6GOfmBIqn/F8sJOeSnK3uA/0TtzbZ6E7fzFyAAAAAMEYvHeQgnZyfdhwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPKk+/7+oSq1fX0zR//z/ueprqerPta+mHQAAAAAAAAAAnII3D3KQTs7324+K8nf+b5WNC+Xr9/JJdrKZ7VxNJxtpp53tLCdZ6I2pV2Pb7e3lEUauHI4szXU22u3tlQkdMAAAAAAAAAB8N/0x64e//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFlQJPXepiwX+vWF1BpJziaZ6+63m/y9X3+efTXtAAAAAGACXjrIQTo5328/Ksr3/K+V7/vP5pPcTztbaaeVzdwqnwX03vXX9vdWW/t7q/e65cl5f/nvE4VRzpjes4ejV14q97g4GLGeX+c3uZLFvJ/tbOV32Ug7m1nMjbK2kSIL1dOLhX6cR8e79o3W+8+K9Y0ykmZuZ6uM7Wp+m4/Syq3UymMo9zl+xT90s1P8ojJijm5V2yIpflAd2bjNj7TXQpmRM4OMLFW572bj5eMzccLz5PGVllMbPIO6MIacn6u2xcw96Ho8EytDZ99rx2cieaf91zfvtO7fvXN758okTqOxejwTq0OZeP2FysRclY3eXfRkd8u3yrHns5Wb+Si3spmf5N2slGW13A7n9eII11rtZNfajy5XlVeSotnbzohuXl8eyuvwnW6h7Bv+ymGWXjn9O1LjUlWpJ0VjENMseDwTy0OZePX4TPzpUfd1p3X/7vadjY9HXO/H1bb7/XB+Qt8PRzNXnb2NsvXNs6Pb9+qRfctl34VBX+2JvouDvmddqXPVz3BPzrRS9r1+ZF9v3BtDfUf9lAPAzDv39rm55r+a/2h+3nzQvNN87+yv5n86/8O5nHnY+Fv9L7U/135evJ3P8/vD9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/b+fTz+5utFqb25OszE9j0RekUstMhDFipZGZCEPlycrR94vGpG9QjNW19r2Pr+18+tk7W/c2Ptz8cPP+9aVm3r2+/LPr125vtTaXeq/TjpJxObzopx0JAAAAAAAAAAAAJzGJPyed9jECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/Fj/IGd2U2R56epSt72/t9rqln79cM9akkZ3+9+k/iBZTK9kYWi64mnrfLnyxaWvb3YuH85V6+9fP27caHarkrUqyLVTnO/ht56vGBxhd9Ib/clh2v4XAAD//3D1GxQ=") syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3204010, &(0x7f00000001c0)={[{@shortname_win95}, {@shortname_mixed}, {@utf8no}, {@shortname_lower}, {@rodir}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@shortname_lower}, {@uni_xlateno}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@utf8}, {@uni_xlateno}, {@numtail}, {@rodir}, {@uni_xlate}, {@uni_xlate}]}, 0xfd, 0x2a9, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) 3m30.748026418s ago: executing program 0 (id=860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 3m30.687173274s ago: executing program 0 (id=861): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000003740)={0x2, 0x1, 0x5, 0xff81, 0x0, 0x81, 0x0}) 3m30.513724431s ago: executing program 0 (id=862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffff7fff000000002f0000000e0001006e"], 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) 3m30.318702671s ago: executing program 0 (id=864): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x2b7, &(0x7f0000000880)="$eJzs3U9LW1kcBuBjVBwcFFfDzGzmMAMDswnqehbKoCATmKE1hbZQuOK1DUkTyc0ikS7suptCl/0GpcvuKqVfwG/RnRTElXRhir3+S6FdaE0sPs8mL3lzwu/cC+cu787fTx9W17LiWtIKhbmhUJgLobA/FKZCIRzbDH89e/z8yc3bd/6dL5UWbsS4OL88MxtjnPztzd1HL39/2/rx1qvJ12Nhe+rezu7su+2ftn/ZOVh+UMliJYv1RismcaXRaCUrtTSuVrJqMcb/a2mSpbFSz9JmT79Wa6yvd2JSX50YX2+mWRaTeidW005sNWKr2YnJ/aRSj8ViMU6MBy6i/GK/2w273dygp6H/3P/r7cyh/kMIe5vtcrucf+b94lJpYTp+Mnq6aq/dLg+f9DN5H3v70TB+1M+GsPnn2f740fJH3h+u/ee/0mfrx8LqJe8dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA66sYT0ydfrvXbpeH8774pT5Pi0ulhemjH/T2I+HXkb5tAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuJOtsVJNaLW0K5w+HF/IKjHG+sLV1Jca45HBwNcb4jsKgTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADov96X2H/Vh25fJgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAQss5GNanV0ua3Cu9/zv/4TDXoPQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADARX0MAAD//2ONa9I=") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000007c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x98, 0x3a, 'max_read', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x30) 3m30.054951975s ago: executing program 0 (id=866): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./bus\x00', 0x94, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x1, 0xdb9, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40106e8c, &(0x7f0000000280)=0x1) 3m29.349047276s ago: executing program 0 (id=871): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0xfe0b) 3m28.556659128s ago: executing program 34 (id=871): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0xfe0b) 2m16.609383084s ago: executing program 1 (id=1626): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 2m16.469636924s ago: executing program 1 (id=1628): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000100)={[{@nogrpid}, {@nogrpid}, {@nomblk_io_submit}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 2m16.079045352s ago: executing program 1 (id=1635): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/293, 0x125}, {&(0x7f0000005180)=""/4111, 0x100f}, {&(0x7f00000007c0)=""/203, 0xcb}, {&(0x7f0000000100)=""/122, 0x7a}, {&(0x7f0000000240)=""/132, 0x84}, {&(0x7f00000009c0)=""/234, 0xea}, {&(0x7f0000000180)=""/164, 0xa4}, {&(0x7f0000000580)=""/153, 0x99}, {&(0x7f0000000000)=""/60, 0x3c}], 0x9}, 0x4140}], 0x1, 0x10000, 0x0) 2m15.780486628s ago: executing program 1 (id=1641): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@user_xattr}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0x400fff}}]}, 0xfa, 0x47a, &(0x7f0000000340)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m14.702100867s ago: executing program 1 (id=1656): setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0x1, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x1, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000780), 0xcff5, r0}, 0x38) 2m13.237855955s ago: executing program 1 (id=1671): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x4004012, r0, 0x0) ftruncate(r0, 0x0) 2m12.103449855s ago: executing program 35 (id=1671): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x4004012, r0, 0x0) ftruncate(r0, 0x0) 1m48.046863037s ago: executing program 8 (id=1879): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05080000000000000000010000000900010073797a300000000040000000030a0101000000000000000001000000090003"], 0xd4}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000009300004800800010000001234140002"], 0xb0}}, 0x0) 1m47.683072886s ago: executing program 8 (id=1885): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1m47.109848473s ago: executing program 8 (id=1887): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010) 1m46.571984111s ago: executing program 8 (id=1894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 1m45.997457429s ago: executing program 8 (id=1899): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) 1m45.440038025s ago: executing program 8 (id=1904): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r1 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1) 1m30.090858245s ago: executing program 36 (id=1904): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r1 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1) 54.789655452s ago: executing program 7 (id=2330): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYRES32], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000280)) 51.259978895s ago: executing program 7 (id=2363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1c"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 51.081342968s ago: executing program 7 (id=2365): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@cswp={0x57, 0x114, 0x7, {{0x8c, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x8002, 0x1, 0x4, 0x21, 0x9}}], 0x58, 0x8004}, 0x0) 50.428293879s ago: executing program 7 (id=2371): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f0000000240)={[{@block_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xe}}, {@orlov}, {@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 49.781715779s ago: executing program 7 (id=2375): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000180)={[{@nodecompose}, {@barrier}, {@nls={'nls', 0x3d, 'cp860'}}, {@part={'part', 0x3d, 0xcfed}}, {@type={'type', 0x3d, "e481e91c"}}, {@gid}, {@nobarrier}, {@umask={'umask', 0x3d, 0x37}}]}, 0xfe, 0x5e5, &(0x7f0000000c80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 48.54924687s ago: executing program 7 (id=2386): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x1f, &(0x7f0000001000)) syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000002000)="03") 47.462371464s ago: executing program 37 (id=2386): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x1f, &(0x7f0000001000)) syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000002000)="03") 5.708390687s ago: executing program 6 (id=2743): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x1c3c, 0x80, 0x3, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_SOCKET={0x2d, 0x0, 0x0, 0x2, 0x5, 0x0, 0x8, 0x0, 0x0, {0x0, 0x0, 0x5}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 4.829198867s ago: executing program 6 (id=2753): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0xbf}, 0x1c) 4.544000334s ago: executing program 2 (id=2755): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000100)={0x1, 0x0, {0x3, 0xfffff801, 0x9, 0x4}}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0x920) 4.518959229s ago: executing program 6 (id=2757): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@user_xattr}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@nombcache}, {@noinit_itable}]}, 0x3, 0x447, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x8, 0x2000, 0x8000) 4.244152232s ago: executing program 2 (id=2759): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x0) r1 = socket(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x804000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.885179669s ago: executing program 2 (id=2762): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) 3.797644012s ago: executing program 6 (id=2764): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000080)={'vlan0\x00', 0x2000}) 3.369691656s ago: executing program 6 (id=2769): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1532, 0x11b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0xf6, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 2.148905544s ago: executing program 4 (id=2778): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f00000001c0)=[{0x1, 0x1004, 0x1800}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 2.138742313s ago: executing program 2 (id=2780): io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x2, 0x80800) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x300, 0x800002, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r1, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r1}]) 2.062365581s ago: executing program 5 (id=2781): socket(0x2, 0x805, 0x0) r0 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x1d6000) 1.933125955s ago: executing program 4 (id=2783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000440ffffffff0800064017000001080007400000000108000240000000170900010073797a30000000000900020073797a32"], 0x8c}}, 0x40) 1.799713934s ago: executing program 9 (id=2784): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000680)=[{&(0x7f00000001c0)="8dbe9de29a1823474186f72aea11678235a71ee4828c75d76df69110ae2b2baa4ca3f238a147af68c7999e831fc3594436dea27d", 0x34}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20044000) syz_emit_ethernet(0x5e, &(0x7f0000000640)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c30010", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0xff, 0x3}, @empty}}}}}}, 0x0) 1.729335527s ago: executing program 3 (id=2785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x2008040) 1.728345048s ago: executing program 5 (id=2786): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)={0x5, 0xc06, 0xffffffff, {}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x1a, 0x1, 0x0, 0x0, "8aee974fff186584d25af3abfe3e407370d621fd21a4b939372d2e9563a75eb616e70c2d99a8440a163e7e88f2e01967c14cf0c34c9258ec7685ffc3aba57e0f"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x30004084) 1.709422628s ago: executing program 4 (id=2787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x14, r1, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1.646533743s ago: executing program 2 (id=2788): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x14100) 1.50934862s ago: executing program 9 (id=2789): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000940)=""/4117, 0x1015}, {&(0x7f0000001980)=""/4105, 0x1009}, {&(0x7f00000004c0)=""/240, 0xf0}, {&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f0000000240)=""/83, 0x53}], 0x5}, 0x22) 1.489887042s ago: executing program 3 (id=2790): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="8588fa25ba61", 0x0, 0x100004, 0x10026, 0x3, 0x0}) 1.459241973s ago: executing program 5 (id=2791): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$tcp_mem(r0, &(0x7f0000000040)={0x9, 0x20, 0x6, 0x20, 0x401008000000003}, 0x48) 1.357648097s ago: executing program 4 (id=2792): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x586, &(0x7f0000009ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0x40086604, 0x0) 1.330272631s ago: executing program 2 (id=2793): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.262259682s ago: executing program 3 (id=2794): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000d40)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800714, &(0x7f00000000c0)={[{@usrjquota}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x200) 1.179522544s ago: executing program 9 (id=2795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={0x68, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x80000003, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4040014}, 0x40804) 1.025692719s ago: executing program 5 (id=2796): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x242, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000004c0)={0x77, 0x6, 0x0, 0x9, 0x7, 0xb, 0xfffffffffffffffc, 0xb, 0x9657, 0x3, 0x7fffffff, 0xfffffffffffffffb, 0x1000000000000020, 0x9, 0x40, 0xcc0, 0x10048, 0x3, 0x94d6, 0xd, 0x2, 0x10000000010000c, 0x6, 0xbc0, 0x8, 0x2000000000000}) 966.439284ms ago: executing program 9 (id=2797): r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r0) keyctl$search(0xb, r0, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0) 927.804433ms ago: executing program 3 (id=2798): r0 = fsopen(&(0x7f0000000300)='ramfs\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) 812.248542ms ago: executing program 5 (id=2799): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@numtail}, {@shortname_lower}, {@shortname_win95}, {@rodir}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_win95}, {@shortname_mixed}, {@shortname_win95}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_win95}, {@numtail}, {@numtail}, {@fat=@discard}, {@nonumtail}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x1, 0x36b, &(0x7f0000000a00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xb6) 654.537644ms ago: executing program 9 (id=2800): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) 653.957839ms ago: executing program 4 (id=2801): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r1}]}, 0x24}}, 0x0) 407.387308ms ago: executing program 3 (id=2802): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x4}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000040)=""/2, &(0x7f0000000080)=0x2) 378.781198ms ago: executing program 9 (id=2803): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc41, &(0x7f0000001b80)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x80086c41, &(0x7f0000000080)) 206.340671ms ago: executing program 5 (id=2804): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000078c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd24, 0x0, {0x2, 0x20, 0x14, 0x0, 0xff, 0x0, 0x0, 0x7, 0x2400}, [@RTA_DST={0x8, 0x1, @multicast1}]}, 0x24}}, 0xea5bc50b4199d7ae) 77.949466ms ago: executing program 4 (id=2805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31030400008000000000380000000e0001"], 0x3c}, 0x1, 0x2, 0x0, 0x40000c1}, 0x1c810) 77.666044ms ago: executing program 6 (id=2806): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 0s ago: executing program 3 (id=2807): setns(0xc9, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socketpair(0x24, 0x3, 0x0, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 633094][ T5628] hci_event_packet+0x6cd/0xf10 [ 300.633145][ T5628] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 300.633190][ T5628] ? __pfx_hci_event_packet+0x10/0x10 [ 300.633233][ T5628] ? __pfx_hci_cmd_sync_complete+0x10/0x10 [ 300.633281][ T5628] ? audit_filter_rules+0x4f90/0x5d10 [ 300.633324][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 300.633355][ T5628] ? hci_send_to_monitor+0xe2/0x590 [ 300.633396][ T5628] hci_rx_work+0x3ee/0x1020 [ 300.633448][ T5628] ? process_scheduled_works+0x97a/0x1630 [ 300.633486][ T5628] process_scheduled_works+0xc3d/0x1630 [ 300.633522][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 300.633592][ T5628] ? __pfx_process_scheduled_works+0x10/0x10 [ 300.633636][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 300.633666][ T5628] ? assign_work+0x3cf/0x5d0 [ 300.633709][ T5628] worker_thread+0xa47/0xfb0 [ 300.633781][ T5628] kthread+0x38b/0x480 [ 300.633810][ T5628] ? __pfx_worker_thread+0x10/0x10 [ 300.633846][ T5628] ? __pfx_kthread+0x10/0x10 [ 300.633876][ T5628] ret_from_fork+0x514/0xb70 [ 300.633906][ T5628] ? __pfx_ret_from_fork+0x10/0x10 [ 300.633932][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 300.633963][ T5628] ? __switch_to+0xc89/0x1420 [ 300.634005][ T5628] ? __pfx_kthread+0x10/0x10 [ 300.634044][ T5628] ret_from_fork_asm+0x1a/0x30 [ 300.634107][ T5628] [ 300.634173][ T5628] kobject: kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 300.634212][ T5628] Bluetooth: hci4: failed to register connection device [ 300.707599][ T1583] usb 4-1: Using ep0 maxpacket: 16 [ 300.709369][ T1583] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 300.710903][ T1583] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.710953][ T1583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.710985][ T1583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 300.711011][ T1583] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 300.711038][ T1583] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.712413][ T1583] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 300.712439][ T1583] usb 4-1: Manufacturer: syz [ 300.725301][ T1583] usb 4-1: config 0 descriptor?? [ 301.207608][ T1583] rc_core: IR keymap rc-hauppauge not found [ 301.207629][ T1583] Registered IR keymap rc-empty [ 301.207781][ T1583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.239465][ T1583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.260870][ T1583] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 301.297006][ T1583] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22 [ 301.317855][ T1583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.340599][ T1583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.358135][ T1583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.378663][ T1583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.398083][ T1583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.419829][ T1583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.439659][ T1583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.457832][ T1583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.477835][ T1583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.501678][ T1583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.549328][ T1583] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 301.549360][ T1583] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 301.592930][ T1583] usb 4-1: USB disconnect, device number 16 [ 301.826348][T11422] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 301.826496][T11422] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 302.001276][T11422] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 302.001382][T11422] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 302.178761][T11422] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 302.178868][T11422] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 302.214590][T11422] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 302.214721][T11422] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 302.250538][T11422] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 302.287898][T11422] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 302.289915][T11422] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 302.450425][T11422] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 302.543366][T11422] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 302.556146][T11422] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 302.583447][T11422] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 302.627181][T11422] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 302.638301][T11430] loop7: detected capacity change from 0 to 32768 [ 302.680268][T11430] JBD2: Ignoring recovery information on journal [ 302.716265][T11440] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2006'. [ 302.803864][T11430] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 302.963084][T11448] Bluetooth: hci0: unsupported parameter 5134 [ 302.963114][T11448] Bluetooth: hci0: unsupported parameter 8192 [ 302.963130][T11448] Bluetooth: hci0: unsupported parameter 5134 [ 302.963146][T11448] Bluetooth: hci0: unsupported parameter 8192 [ 303.214071][ T7780] ocfs2: Unmounting device (7,7) on (node local) [ 303.632508][T11436] loop6: detected capacity change from 0 to 32768 [ 303.673548][T11459] loop3: detected capacity change from 0 to 4096 [ 303.716048][T11436] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 303.779364][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 303.842841][T11470] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.880815][T11436] XFS (loop6): Ending clean mount [ 304.028327][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 304.171946][T11450] loop9: detected capacity change from 0 to 32768 [ 304.192332][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 304.258454][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 304.299276][T11450] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 304.334768][ T6564] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 304.337634][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 304.588020][ T5628] Bluetooth: hci4: command 0x041b tx timeout [ 304.762116][T11489] loop7: detected capacity change from 0 to 512 [ 304.829520][T11450] XFS (loop9): Ending clean mount [ 304.935524][ T5620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 304.942360][ T5620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 304.944977][ T5620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 304.966927][ T5620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 304.967909][ T5620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 305.161663][T10454] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 305.166850][T11489] EXT4-fs (loop7): 1 orphan inode deleted [ 305.176979][T11489] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.185132][T11489] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.207964][ T84] __quota_error: 15 callbacks suppressed [ 305.207984][ T84] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 305.208088][ T84] EXT4-fs error (device loop7): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 1 [ 305.502105][T11473] loop4: detected capacity change from 0 to 32768 [ 305.518977][T11473] (syz.4.2016,11473,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 305.521517][T11473] (syz.4.2016,11473,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 305.559211][T11473] (syz.4.2016,11473,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 305.610373][ T7780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.667345][T11473] JBD2: Ignoring recovery information on journal [ 305.811964][T11473] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 305.859737][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 305.979449][ T1004] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.099717][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 306.272028][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 306.336135][T11521] loop7: detected capacity change from 0 to 512 [ 306.337224][T11521] EXT4-fs: Ignoring removed nobh option [ 306.337645][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 306.410673][ T5612] ocfs2: Unmounting device (7,4) on (node local) [ 306.412857][ T1004] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.468227][T11521] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.2028: corrupted inode contents [ 306.468267][T11521] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 306.472070][T11521] EXT4-fs error (device loop7): ext4_dirty_inode:6736: inode #3: comm syz.7.2028: mark_inode_dirty error [ 306.472103][T11521] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 306.486538][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 306.486564][ C0] EXT4-fs (loop7): initial error at time 1790051604: ext4_do_update_inode:5801: inode 3 [ 306.486599][ C0] EXT4-fs (loop7): last error at time 1790051604: ext4_dirty_inode:6736: inode 3 [ 306.584950][T11521] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #3: comm syz.7.2028: corrupted inode contents [ 306.584988][T11521] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 306.586493][T11521] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.2028: mark_inode_dirty error [ 306.586527][T11521] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 306.586954][T11521] Quota error (device loop7): write_blk: dquota write failed [ 306.587094][T11521] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 306.587141][T11521] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.2028: Failed to acquire dquot type 0 [ 306.587167][T11521] loop7: lost filesystem error report for type 5 error -117 [ 306.664863][ T5628] Bluetooth: hci4: command 0x041b tx timeout [ 306.664975][T11521] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.2028: corrupted inode contents [ 306.665005][T11521] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 306.669499][T11521] EXT4-fs error (device loop7): ext4_dirty_inode:6736: inode #16: comm syz.7.2028: mark_inode_dirty error [ 306.669530][T11521] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 306.672591][T11521] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.2028: corrupted inode contents [ 306.672621][T11521] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 306.682609][T11521] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.2028: mark_inode_dirty error [ 306.682645][T11521] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 306.685597][T11521] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.2028: corrupted inode contents [ 306.685629][T11521] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 306.686115][T11521] EXT4-fs error (device loop7) in ext4_orphan_del:304: Corrupt filesystem [ 306.686138][T11521] loop7: lost filesystem error report for type 5 error -117 [ 306.691549][T11521] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #16: comm syz.7.2028: corrupted inode contents [ 306.691582][T11521] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 306.695271][T11521] EXT4-fs error (device loop7): ext4_truncate:4721: inode #16: comm syz.7.2028: mark_inode_dirty error [ 306.696825][T11521] EXT4-fs error (device loop7) in ext4_process_orphan:346: Corrupt filesystem [ 306.696848][T11521] loop7: lost filesystem error report for type 5 error -117 [ 306.703628][T11521] EXT4-fs (loop7): 1 truncate cleaned up [ 306.757622][T11521] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.757744][T11521] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.886903][ T1004] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.057750][ T5628] Bluetooth: hci6: command tx timeout [ 307.096489][T11536] loop3: detected capacity change from 0 to 1024 [ 307.129091][T11536] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 307.159797][ T7780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.179103][ T1004] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.228312][T11539] loop6: detected capacity change from 0 to 512 [ 307.229344][T11539] EXT4-fs: Ignoring removed oldalloc option [ 307.233118][T11539] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4702: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 307.233146][T11539] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 307.236839][T11536] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.2036: Freeing blocks not in datazone - block = 0, count = 4096 [ 307.236868][T11536] loop3: lost filesystem error report for type 5 error -117 [ 307.244540][T11536] EXT4-fs (loop3): Remounting filesystem read-only [ 307.244661][T11536] EXT4-fs (loop3): 1 orphan inode deleted [ 307.260214][T11536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.289456][ T3362] EXT4-fs (loop3): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 307.289489][ T3362] Quota error (device loop3): write_blk: dquota write failed [ 307.289506][ T3362] Quota error (device loop3): remove_free_dqentry: Can't write block (2) with free entries [ 307.289528][ T3362] EXT4-fs (loop3): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 307.289551][ T3362] Quota error (device loop3): write_blk: dquota write failed [ 307.289567][ T3362] Quota error (device loop3): free_dqentry: Can't move quota data block (2) to free list [ 307.289689][ T3362] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 307.289711][ T3362] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 307.466507][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.957572][ T5768] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 308.109086][ T5768] usb 10-1: Using ep0 maxpacket: 16 [ 308.109840][ T5768] usb 10-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 308.113945][ T5768] usb 10-1: config 0 interface 0 has no altsetting 0 [ 308.113987][ T5768] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.152242][ T5768] usb 10-1: config 0 descriptor?? [ 308.315337][T11563] loop4: detected capacity change from 0 to 32768 [ 308.367077][T11563] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 308.428435][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 308.471357][T11563] XFS (loop4): Ending clean mount [ 308.690869][ T5612] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 308.693169][ T5768] uclogic 0003:28BD:0042.0017: interface is invalid, ignoring [ 308.739253][ T5628] Bluetooth: hci4: command 0x041b tx timeout [ 308.798007][T11581] netlink: 288 bytes leftover after parsing attributes in process `syz.7.2050'. [ 308.822381][ T1004] bridge_slave_1: left allmulticast mode [ 308.822414][ T1004] bridge_slave_1: left promiscuous mode [ 308.822640][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.854933][ T5768] usb 10-1: USB disconnect, device number 3 [ 308.906346][ T1004] bridge_slave_0: left allmulticast mode [ 308.906377][ T1004] bridge_slave_0: left promiscuous mode [ 308.935272][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.142100][ T5628] Bluetooth: hci6: command tx timeout [ 309.630018][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.651293][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.655696][ T1004] bond0 (unregistering): Released all slaves [ 310.065882][T11611] loop4: detected capacity change from 0 to 1024 [ 310.091583][T11611] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 310.141815][T11611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.481085][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.678058][T11629] loop3: detected capacity change from 0 to 512 [ 310.803427][ T1004] hsr_slave_0: left promiscuous mode [ 310.806515][ T1004] hsr_slave_1: left promiscuous mode [ 310.822012][ T5628] Bluetooth: hci4: command 0x041b tx timeout [ 310.828814][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.846388][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.893325][T11629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.230205][ T5628] Bluetooth: hci6: command tx timeout [ 311.462746][T11629] EXT4-fs error (device loop3): ext4_get_first_dir_block:3539: inode #12: comm syz.3.2065: Directory block failed checksum [ 311.525032][T11613] loop9: detected capacity change from 0 to 32768 [ 311.530150][T11625] loop6: detected capacity change from 0 to 131072 [ 311.544717][T11613] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2063 (11613) [ 311.557539][T11625] F2FS-fs (loop6): Invalid segment count (0) [ 311.557566][T11625] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 311.580812][T11625] F2FS-fs (loop6): invalid crc value [ 311.657923][T11625] F2FS-fs (loop6): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:393219,ofs:0,cpver:1219692001,blkaddr:4098] [ 311.661169][T11625] fserror_report: 1 callbacks suppressed [ 311.661189][T11625] loop6: lost file I/O error report for ino 1 type 5 pos 0x0 len 0x0 error -117 [ 311.661365][T11625] F2FS-fs (loop6): Failed to read root inode [ 311.665163][T11613] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 311.665198][T11613] BTRFS info (device loop9): using crc32c checksum algorithm [ 311.780645][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.831411][T11651] Bluetooth: hci0: unsupported parameter 5135 [ 311.831438][T11651] Bluetooth: hci0: unsupported parameter 8192 [ 311.831454][T11651] Bluetooth: hci0: unsupported parameter 5135 [ 311.831470][T11651] Bluetooth: hci0: unsupported parameter 8192 [ 311.895351][T11644] netlink: 'syz.7.2067': attribute type 1 has an invalid length. [ 312.212008][T11613] BTRFS info (device loop9): enabling ssd optimizations [ 312.212041][T11613] BTRFS info (device loop9): turning on flush-on-commit [ 312.212063][T11613] BTRFS info (device loop9): enabling free space tree [ 312.212083][T11613] BTRFS info (device loop9): enabling auto defrag [ 312.212105][T11613] BTRFS info (device loop9): use lzo compression, level 1 [ 312.212137][T11613] BTRFS info (device loop9): max_inline set to 4096 [ 312.294672][T11668] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 312.510648][T11673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.555164][T10454] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 312.623033][ T1004] team0 (unregistering): Port device team_slave_1 removed [ 312.791875][ T1004] team0 (unregistering): Port device team_slave_0 removed [ 312.900254][ T5628] Bluetooth: hci4: command 0x041b tx timeout [ 313.297619][ T5628] Bluetooth: hci6: command tx timeout [ 313.960016][ T5272] 8021q: adding VLAN 0 to HW filter on device eth18 [ 314.059885][T11690] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 314.060150][T11690] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 314.060392][T11690] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 314.060637][T11690] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 314.060879][T11690] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 314.062743][T11690] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 314.062864][T11690] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 314.145225][T11493] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.148485][T11493] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.148644][T11493] bridge_slave_0: entered allmulticast mode [ 314.174238][T11493] bridge_slave_0: entered promiscuous mode [ 314.192348][T11493] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.200105][T11712] loop4: detected capacity change from 0 to 512 [ 314.203495][T11493] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.203657][T11493] bridge_slave_1: entered allmulticast mode [ 314.203920][T11712] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 314.205951][T11712] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 314.206224][T11712] EXT4-fs (loop4): orphan cleanup on readonly fs [ 314.253523][T11493] bridge_slave_1: entered promiscuous mode [ 314.264181][T11712] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.2089: Allocating blocks 41-42 which overlap fs metadata [ 314.264228][T11712] loop4: lost filesystem error report for type 5 error -117 [ 314.270651][T11690] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 314.272419][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 314.272438][ C1] EXT4-fs (loop4): initial error at time 1790051612: ext4_mb_mark_diskspace_used:4223 [ 314.272463][ C1] EXT4-fs (loop4): last error at time 1790051612: ext4_mb_mark_diskspace_used:4223 [ 314.316155][T11712] Quota error (device loop4): write_blk: dquota write failed [ 314.316257][T11712] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 314.316297][T11712] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.2089: Failed to acquire dquot type 0 [ 314.316324][T11712] loop4: lost filesystem error report for type 5 error -117 [ 314.317803][T11712] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 314.317907][T11712] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #12: comm syz.4.2089: corrupted inode contents [ 314.317935][T11712] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 314.325354][T11712] EXT4-fs error (device loop4): ext4_dirty_inode:6736: inode #12: comm syz.4.2089: mark_inode_dirty error [ 314.325387][T11712] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 314.325892][T11712] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #12: comm syz.4.2089: corrupted inode contents [ 314.325923][T11712] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 314.338033][T11712] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.2089: mark_inode_dirty error [ 314.338073][T11712] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 314.340600][T11712] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #12: comm syz.4.2089: corrupted inode contents [ 314.340634][T11712] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 314.349753][T11712] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem [ 314.349783][T11712] loop4: lost filesystem error report for type 5 error -117 [ 314.353139][T11712] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #12: comm syz.4.2089: corrupted inode contents [ 314.353171][T11712] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 314.356685][T11712] EXT4-fs error (device loop4): ext4_truncate:4721: inode #12: comm syz.4.2089: mark_inode_dirty error [ 314.356724][T11712] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 314.361698][T11712] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem [ 314.361730][T11712] loop4: lost filesystem error report for type 5 error -117 [ 314.392745][T11712] EXT4-fs (loop4): 1 truncate cleaned up [ 314.392867][T11712] EXT4-fs (loop4): pa ffff888078534d98: logic 1, phys. 41, len 23 [ 314.392894][T11712] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23 [ 314.395685][T11712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 314.799035][T11712] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 314.799061][T11712] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 314.833713][T11712] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 314.842938][T11712] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c098, mo2=0003] [ 314.973372][T11493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.991462][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.011806][T11493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.260850][ T1004] IPVS: stop unused estimator thread 0... [ 315.402124][T11493] team0: Port device team_slave_0 added [ 315.416655][T11493] team0: Port device team_slave_1 added [ 315.548432][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 315.576920][T11493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.576942][T11493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.576975][T11493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.591085][T11493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.591103][T11493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.591135][T11493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.698804][ T10] usb 10-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 315.700473][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 315.700525][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.722434][ T10] usb 10-1: config 0 descriptor?? [ 315.726432][T11734] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 316.003220][T11493] hsr_slave_0: entered promiscuous mode [ 316.010228][T11493] hsr_slave_1: entered promiscuous mode [ 316.018179][T11493] debugfs: 'hsr0' already exists in 'hsr' [ 316.018205][T11493] Cannot create hsr debugfs directory [ 316.100409][ T5628] Bluetooth: hci6: command 0x0c1a tx timeout [ 316.100451][ T5620] Bluetooth: hci4: command 0x041b tx timeout [ 316.100492][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 316.100504][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 316.100524][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 316.100535][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 316.156466][T11729] loop7: detected capacity change from 0 to 32768 [ 316.176739][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2099'. [ 316.216479][T11729] [ 316.216479][T11729] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.216479][T11729] [ 316.270710][ T10] wacom 0003:056A:0003.0018: unknown main item tag 0x0 [ 316.270747][ T10] wacom 0003:056A:0003.0018: unknown main item tag 0x0 [ 316.270773][ T10] wacom 0003:056A:0003.0018: unknown main item tag 0x0 [ 316.270797][ T10] wacom 0003:056A:0003.0018: unknown main item tag 0x0 [ 316.270821][ T10] wacom 0003:056A:0003.0018: unknown main item tag 0x0 [ 316.270863][ T10] wacom 0003:056A:0003.0018: unknown main item tag 0x0 [ 316.270887][ T10] wacom 0003:056A:0003.0018: unknown main item tag 0x0 [ 316.287773][ T10] wacom 0003:056A:0003.0018: unknown main item tag 0x0 [ 316.287804][ T10] wacom 0003:056A:0003.0018: unknown main item tag 0x0 [ 316.287828][ T10] wacom 0003:056A:0003.0018: unknown main item tag 0x0 [ 316.288407][ T10] wacom 0003:056A:0003.0018: reserved main item tag 0xd [ 316.288431][ T10] wacom 0003:056A:0003.0018: unexpected long global item [ 316.289141][ T10] wacom 0003:056A:0003.0018: parse failed [ 316.324652][ T10] wacom 0003:056A:0003.0018: probe with driver wacom failed with error -22 [ 316.384782][T11729] read_mapping_page failed! [ 316.384805][T11729] ERROR: (device loop7): txCommit: [ 316.384805][T11729] [ 316.415532][T11758] loop3: detected capacity change from 0 to 128 [ 316.463581][ T10] usb 10-1: USB disconnect, device number 4 [ 316.491243][ T31] audit: type=1800 audit(1790051614.628:173): pid=11758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2100" name="file1" dev="loop3" ino=1048761 res=0 errno=0 [ 316.552116][T11758] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 316.552151][T11758] FAT-fs (loop3): Filesystem has been set read-only [ 316.671556][ T84] ERROR: (device loop7): diWrite: ixpxd invalid [ 316.671556][ T84] [ 316.671601][ T84] ERROR: (device loop7): txCommit: [ 316.671601][ T84] [ 316.671963][ T84] jfs_write_inode: jfs_commit_inode failed! [ 316.672152][ T7780] [ 316.672152][ T7780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.672152][ T7780] [ 316.672422][ T7780] [ 316.672422][ T7780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.672422][ T7780] [ 316.988386][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.110830][ T5272] 8021q: adding VLAN 0 to HW filter on device eth17 [ 317.319554][T11772] loop9: detected capacity change from 0 to 512 [ 317.345104][T11772] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 317.366917][T11772] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 317.367204][T11772] EXT4-fs (loop9): orphan cleanup on readonly fs [ 317.407264][T11772] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4223: comm syz.9.2106: Allocating blocks 41-42 which overlap fs metadata [ 317.407308][T11772] loop9: lost filesystem error report for type 5 error -117 [ 317.407513][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 317.407536][ C1] EXT4-fs (loop9): initial error at time 1790051615: ext4_mb_mark_diskspace_used:4223 [ 317.407564][ C1] EXT4-fs (loop9): last error at time 1790051615: ext4_mb_mark_diskspace_used:4223 [ 317.483084][T11772] Quota error (device loop9): write_blk: dquota write failed [ 317.483189][T11772] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 317.483229][T11772] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.2106: Failed to acquire dquot type 0 [ 317.483256][T11772] loop9: lost filesystem error report for type 5 error -117 [ 317.487663][T11772] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 317.487777][T11772] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.2106: corrupted inode contents [ 317.487805][T11772] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 317.502735][T11772] EXT4-fs error (device loop9): ext4_dirty_inode:6736: inode #12: comm syz.9.2106: mark_inode_dirty error [ 317.502777][T11772] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 317.510061][T11772] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.2106: corrupted inode contents [ 317.510096][T11772] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 317.510571][T11772] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #12: comm syz.9.2106: mark_inode_dirty error [ 317.510601][T11772] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 317.511339][T11772] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.2106: corrupted inode contents [ 317.511369][T11772] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 317.516183][T11772] EXT4-fs error (device loop9) in ext4_orphan_del:304: Corrupt filesystem [ 317.516209][T11772] loop9: lost filesystem error report for type 5 error -117 [ 317.517693][T11772] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.2106: corrupted inode contents [ 317.517730][T11772] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 317.518652][T11772] EXT4-fs error (device loop9): ext4_truncate:4721: inode #12: comm syz.9.2106: mark_inode_dirty error [ 317.518681][T11772] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 317.519287][T11772] EXT4-fs error (device loop9) in ext4_process_orphan:346: Corrupt filesystem [ 317.519311][T11772] loop9: lost filesystem error report for type 5 error -117 [ 317.519981][T11772] EXT4-fs (loop9): 1 truncate cleaned up [ 317.520099][T11772] EXT4-fs (loop9): pa ffff888078534cb0: logic 1, phys. 41, len 23 [ 317.520126][T11772] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23 [ 317.592745][T11776] loop7: detected capacity change from 0 to 2048 [ 317.631660][T11772] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 317.715293][T11776] NILFS (loop7): invalid segment: Magic number mismatch [ 317.715323][T11776] NILFS (loop7): trying rollback from an earlier position [ 317.821308][T11776] NILFS (loop7): recovery complete [ 317.851579][T11783] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.891381][T11772] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 317.891409][T11772] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 317.914942][T11772] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 317.915424][T11772] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c098, mo2=0003] [ 317.958776][T11776] NILFS (loop7): bad btree node (ino=3, blocknr=8): level = 0, flags = 0x1, nchildren = 0 [ 317.958819][T11776] NILFS (loop7): error -5 preparing GC: cannot read source blocks [ 318.166270][T11791] loop6: detected capacity change from 0 to 128 [ 318.179102][ T5616] Bluetooth: hci6: command 0x0c1a tx timeout [ 318.222997][T10454] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.624536][T11809] loop6: detected capacity change from 0 to 256 [ 318.677057][T11809] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x605ad3ec, utbl_chksum : 0xe619d30d) [ 318.745463][ T31] audit: type=1800 audit(1790051616.878:174): pid=11809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2120" name="file1" dev="loop6" ino=1048762 res=0 errno=0 [ 319.197612][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 319.240036][T11822] loop9: detected capacity change from 0 to 4096 [ 319.358813][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 319.361666][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 319.363941][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.363978][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.364024][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.417235][ T10] usb 4-1: config 0 descriptor?? [ 319.435329][ T10] hub 4-1:0.0: USB hub found [ 319.441644][T11832] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.635993][ T10] hub 4-1:0.0: 1 port detected [ 319.841390][ T10] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 319.866542][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 319.866641][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 319.910902][T11840] loop7: detected capacity change from 0 to 512 [ 319.932077][ T10] usb 4-1: USB disconnect, device number 17 [ 319.999685][T11840] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 320.000064][T11840] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.2132: corrupted in-inode xattr: e_value size too large [ 320.000099][T11840] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 320.000411][T11840] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.2132: couldn't read orphan inode 15 (err -117) [ 320.000460][T11840] loop7: lost filesystem error report for type 5 error -117 [ 320.012905][T11840] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.157159][T11493] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 320.189433][T11493] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 320.190710][T11493] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 320.217169][T11493] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 320.225667][T11493] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 320.242324][T11493] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 320.244536][T11493] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 320.261678][ T5616] Bluetooth: hci6: command 0x0c1a tx timeout [ 320.274298][T11493] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 320.450273][ T7780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.481886][T11845] loop9: detected capacity change from 0 to 8192 [ 320.496601][T11845] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 320.509360][ T5272] 8021q: adding VLAN 0 to HW filter on device eth19 [ 320.716627][T11493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.810195][T11493] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.862327][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.862439][ T8744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.921967][T11865] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 320.945911][ T8744] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.946028][ T8744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.262369][T11873] loop3: detected capacity change from 0 to 164 [ 321.800048][T11891] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 321.800577][T11891] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 321.801160][T11891] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 321.801844][T11891] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 321.803389][T11891] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 321.803987][T11891] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 321.814252][T11893] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 321.824261][T11893] ALSA: mixer_oss: invalid index 137438 [ 322.124905][T11903] loop3: detected capacity change from 0 to 2048 [ 322.167003][T11903] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 322.220697][T11903] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.663158][T11919] loop4: detected capacity change from 0 to 256 [ 322.700863][T11919] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 322.922904][T11923] /dev/loop0: Can't open blockdev [ 323.000362][T11493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.083359][T11935] netlink: Invalid conntrack timeout [ 323.083394][T11935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.365222][T11493] veth0_vlan: entered promiscuous mode [ 323.422248][T11493] veth1_vlan: entered promiscuous mode [ 323.475649][T11946] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 323.488393][T11946] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 323.488644][T11946] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 323.488883][T11946] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 323.489126][T11946] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 323.489376][T11946] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 323.490049][ T5272] 8021q: adding VLAN 0 to HW filter on device eth20 [ 323.597620][T11493] veth0_macvtap: entered promiscuous mode [ 323.626160][T11493] veth1_macvtap: entered promiscuous mode [ 323.686178][T11955] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2166'. [ 323.772584][T11493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.845548][T11493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.919108][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.920034][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.920080][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.920120][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.143855][T11974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2169'. [ 324.327321][T11978] binder: BC_ACQUIRE_RESULT not supported [ 324.327344][T11978] binder: 11977:11978 ioctl c0306201 200000000100 returned -22 [ 324.499440][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.499465][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.636560][T11990] netlink: 'syz.3.2180': attribute type 10 has an invalid length. [ 324.674465][ T8744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.674491][ T8744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.959897][T11999] [U]  [ 325.156330][T12010] loop3: detected capacity change from 0 to 512 [ 325.210037][ T5740] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 325.272136][T12010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.272261][T12010] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 325.329137][T12012] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2188'. [ 325.329232][T12012] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2188'. [ 325.332610][ T5616] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 325.377560][ T5740] usb 3-1: Using ep0 maxpacket: 16 [ 325.378477][ T5740] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 325.379572][ T5740] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.379623][ T5740] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 325.379656][ T5740] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 325.379688][ T5740] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 325.379716][ T5740] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.382163][ T5740] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 325.382187][ T5740] usb 3-1: Manufacturer: syz [ 325.386365][ T5740] usb 3-1: config 0 descriptor?? [ 325.523010][T12025] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2191'. [ 325.537980][ T5616] Bluetooth: hci6: command 0x0c1a tx timeout [ 325.537986][ T5620] Bluetooth: hci4: command 0x041b tx timeout [ 325.538026][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 325.538030][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 325.538061][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 325.538083][ T5616] Bluetooth: hci5: command 0x0406 tx timeout [ 325.803384][ T5740] rc_core: IR keymap rc-hauppauge not found [ 325.803406][ T5740] Registered IR keymap rc-empty [ 325.803549][ T5740] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 325.808285][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.818535][ T5740] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 325.849046][ T5740] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 325.853033][ T5740] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 325.884736][ T5740] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 325.897733][ T5740] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 325.938868][ T5740] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 325.957648][ T5740] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 325.977694][ T5740] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 325.997981][ T5740] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 326.017639][ T5740] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 326.037719][ T5740] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 326.059793][ T5740] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 326.088384][ T5740] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 326.158293][ T5740] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 326.158347][ T5740] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 326.236689][ T5740] usb 3-1: USB disconnect, device number 3 [ 326.405367][T12050] program syz.4.2200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.750351][T12094] loop6: detected capacity change from 0 to 512 [ 327.785478][T12094] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 327.785744][T12094] EXT4-fs (loop6): orphan cleanup on readonly fs [ 327.785774][T12094] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.2217: bad orphan inode 15 [ 327.785823][T12094] loop6: lost filesystem error report for type 5 error -117 [ 327.786095][T12094] ext4_test_bit(bit=14, block=5) = 0 [ 327.856698][T12094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 328.022285][ T6564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.655872][T12106] loop6: detected capacity change from 0 to 32768 [ 329.844164][ T5628] Bluetooth: hci1: SCO packet too small [ 330.077011][T12163] loop4: detected capacity change from 0 to 128 [ 330.113253][T12163] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 330.113301][T12163] hpfs: filesystem error: improperly stopped [ 330.113318][T12163] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 330.113337][T12163] hpfs: You really don't want any checks? You are crazy... [ 330.113351][T12163] hpfs: Code page index out of array [ 330.113360][T12163] hpfs: code page support is disabled [ 330.113657][T12163] hpfs: hpfs_map_4sectors(): unaligned read [ 330.113730][T12163] hpfs: hpfs_map_4sectors(): unaligned read [ 330.113743][T12163] hpfs: filesystem error: unable to find root dir [ 330.454813][T12174] loop4: detected capacity change from 0 to 128 [ 330.520015][T12174] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 330.547824][T12174] ext4 filesystem being mounted at /432/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 330.768632][ T5612] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 331.308400][T12204] loop3: detected capacity change from 0 to 1024 [ 331.309612][T12204] EXT4-fs: Ignoring removed bh option [ 331.330536][T12204] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 331.372515][T12204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.454282][T12203] loop4: detected capacity change from 0 to 4096 [ 331.616201][T12203] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 331.746882][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.810722][T12179] loop2: detected capacity change from 0 to 32768 [ 331.814163][T12179] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2249 (12179) [ 331.865163][T12179] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 331.865194][T12179] BTRFS info (device loop2): using blake2b checksum algorithm [ 332.074190][T12179] BTRFS info (device loop2): enabling ssd optimizations [ 332.074223][T12179] BTRFS info (device loop2): turning on async discard [ 332.074244][T12179] BTRFS info (device loop2): enabling free space tree [ 332.074266][T12179] BTRFS info (device loop2): use zstd compression, level 3 [ 332.419164][T12240] loop4: detected capacity change from 0 to 256 [ 332.486309][T11493] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 333.034135][T12257] loop9: detected capacity change from 0 to 1024 [ 333.038343][T12257] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 333.038444][T12257] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 333.121663][T12257] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 333.447036][T10454] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.981439][T12235] loop6: detected capacity change from 0 to 32768 [ 334.044110][T12235] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 334.080397][T12283] netlink: 'syz.7.2279': attribute type 8 has an invalid length. [ 334.315358][T12235] XFS (loop6): Ending clean mount [ 334.563539][ T6564] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 334.612543][T12302] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 334.612543][T12302] Please contact the netfilter-devel mailing list or update your nftables rules. [ 335.030386][T12268] loop2: detected capacity change from 0 to 32768 [ 335.066509][T12268] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2274 (12268) [ 335.074656][T12269] loop3: detected capacity change from 0 to 32768 [ 335.130769][T12310] loop4: detected capacity change from 0 to 4096 [ 335.175837][T12310] NILFS (loop4): invalid segment: Checksum error in segment payload [ 335.175869][T12310] NILFS (loop4): trying rollback from an earlier position [ 335.228545][T12268] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 335.228586][T12268] BTRFS info (device loop2): using crc32c checksum algorithm [ 335.292526][T12269] non-latin1 character 0x3ff found in JFS file name [ 335.292548][T12269] mount with iocharset=utf8 to access [ 335.306379][T12310] NILFS (loop4): recovery complete [ 335.315421][T12317] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 335.453073][T12310] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 4096 already freed [ 335.453696][T12310] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 335.602145][T12268] BTRFS info (device loop2): enabling ssd optimizations [ 335.602179][T12268] BTRFS info (device loop2): turning on flush-on-commit [ 335.602200][T12268] BTRFS info (device loop2): enabling free space tree [ 335.602219][T12268] BTRFS info (device loop2): enabling auto defrag [ 335.602240][T12268] BTRFS info (device loop2): use lzo compression, level 1 [ 335.602264][T12268] BTRFS info (device loop2): max_inline set to 4096 [ 335.732205][ T5740] logitech-hidpp-device 0005:046D:B012.0019: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 335.830418][T11493] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 336.074510][T12337] loop4: detected capacity change from 0 to 512 [ 336.088255][T12337] EXT4-fs: Ignoring removed nomblk_io_submit option [ 336.094692][T12337] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 336.094717][T12337] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 336.224922][T12337] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.2291: Allocating blocks 41-42 which overlap fs metadata [ 336.224960][T12331] fido_id[12331]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 336.224965][T12337] loop4: lost filesystem error report for type 5 error -117 [ 336.227478][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 336.227501][ C1] EXT4-fs (loop4): initial error at time 1790051634: ext4_mb_mark_diskspace_used:4223 [ 336.227529][ C1] EXT4-fs (loop4): last error at time 1790051634: ext4_mb_mark_diskspace_used:4223 [ 336.276479][T12337] EXT4-fs (loop4): Remounting filesystem read-only [ 336.276628][T12337] Quota error (device loop4): write_blk: dquota write failed [ 336.276646][T12337] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 336.404077][T12337] Quota error (device loop4): write_blk: dquota write failed [ 336.404205][T12337] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 336.404359][T12337] EXT4-fs (loop4): 1 truncate cleaned up [ 336.429837][T12337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.623820][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.761245][T12352] loop3: detected capacity change from 0 to 1024 [ 336.942630][T12355] xt_l2tp: invalid flags combination: 4 [ 337.188893][ T1583] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 337.340182][ T1583] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 337.351317][ T1583] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.351407][ T1583] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 337.351434][ T1583] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 337.351459][ T1583] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.351507][ T1583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.410764][ T1583] usb 5-1: config 0 descriptor?? [ 337.647727][ T1583] usb 5-1: USB disconnect, device number 16 [ 337.865017][T12383] bond1: entered promiscuous mode [ 337.865091][T12383] bond1: entered allmulticast mode [ 337.865497][T12383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.136670][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2310'. [ 338.843505][T12414] netlink: 'syz.6.2319': attribute type 29 has an invalid length. [ 338.849489][T12414] netlink: 'syz.6.2319': attribute type 29 has an invalid length. [ 339.637514][ T5791] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 339.793386][ T5791] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 339.796844][ T5791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 339.796880][ T5791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 339.796922][ T5791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.886547][T12458] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2335'. [ 339.886583][T12458] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2335'. [ 340.116690][T12421] loop2: detected capacity change from 0 to 32768 [ 340.230336][ T31] audit: type=1800 audit(1790051638.368:175): pid=12421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2321" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 340.354879][ T5791] lg-g15 0003:046D:C222.001A: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 340.407906][ T5791] lg-g15 0003:046D:C222.001A: Error -90 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 340.565610][ T5733] usb 4-1: USB disconnect, device number 18 [ 340.920731][T12479] fido_id[12479]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 341.400608][T12460] loop4: detected capacity change from 0 to 40427 [ 341.412681][T12460] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 341.412711][T12460] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 341.414096][T12460] F2FS-fs (loop4): invalid crc value [ 341.511119][T12500] binder: 12499:12500 ioctl c0306201 2000000001c0 returned -14 [ 341.635950][ T5628] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 341.842996][T12492] loop6: detected capacity change from 0 to 32768 [ 341.846309][T12492] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2347 (12492) [ 341.890641][T12492] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 341.890679][T12492] BTRFS info (device loop6): using xxhash64 checksum algorithm [ 341.927241][T12460] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 341.975935][T12515] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[11493] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ [ 342.049430][T12460] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 342.049464][T12460] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 342.233362][T12492] BTRFS info (device loop6): setting nodatasum [ 342.233395][T12492] BTRFS info (device loop6): allowing degraded mounts [ 342.233416][T12492] BTRFS info (device loop6): turning on async discard [ 342.233436][T12492] BTRFS info (device loop6): enabling free space tree [ 342.233457][T12492] BTRFS info (device loop6): force zlib compression, level 3 [ 342.570243][ T6564] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 342.576606][ T5612] syz-executor: attempt to access beyond end of device [ 342.576606][ T5612] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 342.606244][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 342.606294][ T5612] Tainted: [L]=SOFTLOCKUP [ 342.606304][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 342.606320][ T5612] Call Trace: [ 342.606331][ T5612] [ 342.606342][ T5612] dump_stack_lvl+0xe8/0x150 [ 342.606384][ T5612] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 342.606428][ T5612] f2fs_write_end_bio+0x1211/0x16e0 [ 342.606458][ T5612] ? blkg_put+0x22/0x240 [ 342.606513][ T5612] __submit_merged_bio+0x258/0x6a0 [ 342.606547][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.606577][ T5612] ? rcu_is_watching+0x16/0xb0 [ 342.606616][ T5612] __submit_merged_write_cond+0x3c9/0x4e0 [ 342.606663][ T5612] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 342.606715][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.606755][ T5612] f2fs_write_data_pages+0x2a27/0x36f0 [ 342.606795][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.606824][ T5612] ? __lock_acquire+0x747/0x2de0 [ 342.606893][ T5612] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 342.606985][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.607014][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.607044][ T5612] ? __bfs+0x153/0x290 [ 342.607070][ T5612] ? __pfx_hlock_conflict+0x10/0x10 [ 342.607107][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.607150][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.607180][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.607209][ T5612] ? __lock_acquire+0x1511/0x2de0 [ 342.607266][ T5612] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 342.607316][ T5612] do_writepages+0x338/0x560 [ 342.607346][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.607377][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.607415][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.607446][ T5612] ? do_raw_spin_unlock+0xf5/0x200 [ 342.607487][ T5612] filemap_fdatawrite+0x1e9/0x2f0 [ 342.607520][ T5612] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 342.607590][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.607623][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.607657][ T5612] ? do_raw_spin_unlock+0xf5/0x200 [ 342.607698][ T5612] f2fs_sync_dirty_inodes+0x30e/0x830 [ 342.607741][ T5612] f2fs_write_checkpoint+0xa3d/0x2710 [ 342.607767][ T5612] ? __lock_acquire+0x747/0x2de0 [ 342.607829][ T5612] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 342.607854][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.607945][ T5612] kill_f2fs_super+0x2dd/0x700 [ 342.607980][ T5612] ? __pfx_kill_f2fs_super+0x10/0x10 [ 342.608036][ T5612] ? call_rcu+0x64d/0x8b0 [ 342.608065][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.608094][ T5612] ? lockdep_hardirqs_on+0x7b/0x110 [ 342.608123][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.608170][ T5612] deactivate_locked_super+0xbc/0x110 [ 342.608209][ T5612] cleanup_mnt+0x3d3/0x460 [ 342.608240][ T5612] task_work_run+0x1d9/0x270 [ 342.608273][ T5612] ? __pfx_task_work_run+0x10/0x10 [ 342.608358][ T5612] exit_to_user_mode_loop+0x204/0x770 [ 342.608384][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.608413][ T5612] ? rcu_is_watching+0x16/0xb0 [ 342.608448][ T5612] do_syscall_64+0x328/0x520 [ 342.608475][ T5612] ? trace_irq_disable+0x3b/0x140 [ 342.608502][ T5612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.608534][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.608561][ T5612] RIP: 0033:0x7fbba9f9f397 [ 342.608584][ T5612] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 342.608607][ T5612] RSP: 002b:00007ffc4bf4b908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 342.608635][ T5612] RAX: 0000000000000000 RBX: 00007fbbaa0344bb RCX: 00007fbba9f9f397 [ 342.608653][ T5612] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4bf4b9c0 [ 342.608670][ T5612] RBP: 00007ffc4bf4b9c0 R08: 00007ffc4bf4c9c0 R09: 00000000ffffffff [ 342.608688][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4bf4ca50 [ 342.608706][ T5612] R13: 00007fbbaa0344bb R14: 0000000000053720 R15: 00007ffc4bf4ca90 [ 342.608747][ T5612] [ 342.631844][ T5612] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 342.858700][ T5791] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 343.078318][ T5791] usb 4-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 343.080902][ T5791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.080944][ T5791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.080995][ T5791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.626874][ T5791] hid_parser_main: 111 callbacks suppressed [ 343.626903][ T5791] hid-sensor-hub 0003:8086:0000.001B: unknown main item tag 0x0 [ 343.626932][ T5791] hid-sensor-hub 0003:8086:0000.001B: unknown main item tag 0x0 [ 343.626956][ T5791] hid-sensor-hub 0003:8086:0000.001B: unknown main item tag 0x0 [ 343.626981][ T5791] hid-sensor-hub 0003:8086:0000.001B: unknown main item tag 0x0 [ 343.627006][ T5791] hid-sensor-hub 0003:8086:0000.001B: unknown main item tag 0x0 [ 343.627030][ T5791] hid-sensor-hub 0003:8086:0000.001B: unknown main item tag 0x0 [ 343.627055][ T5791] hid-sensor-hub 0003:8086:0000.001B: unknown main item tag 0x0 [ 343.627079][ T5791] hid-sensor-hub 0003:8086:0000.001B: unknown main item tag 0x0 [ 343.627103][ T5791] hid-sensor-hub 0003:8086:0000.001B: unknown main item tag 0x0 [ 343.627127][ T5791] hid-sensor-hub 0003:8086:0000.001B: unknown main item tag 0x0 [ 343.685158][ T5791] hid-sensor-hub 0003:8086:0000.001B: unbalanced collection at end of report description [ 343.728749][ T5791] hid-sensor-hub 0003:8086:0000.001B: parse failed [ 343.728866][ T5791] hid-sensor-hub 0003:8086:0000.001B: probe with driver hid-sensor-hub failed with error -22 [ 343.814309][ T5733] usb 4-1: USB disconnect, device number 19 [ 343.963521][T12572] loop7: detected capacity change from 0 to 1024 [ 343.964821][T12572] EXT4-fs: Ignoring removed orlov option [ 344.029507][T12572] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.084444][T12572] EXT4-fs error (device loop7): __ext4_new_inode:1289: comm syz.7.2371: failed to insert inode 12: doubly allocated? [ 344.283979][T12572] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only [ 344.284265][T12572] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 344.546067][ T7780] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 344.632398][T12583] loop9: detected capacity change from 0 to 4096 [ 344.653468][ T7780] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 344.687295][ T7780] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 344.712411][ T7780] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 344.743887][ T7780] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 344.916006][ T7780] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 344.924097][ T7780] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 344.925766][ T7780] EXT4-fs error (device loop7): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extra_isize 14 (inode size 256) [ 344.948792][ T7780] EXT4-fs error (device loop7): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extra_isize 14 (inode size 256) [ 345.486782][T12612] loop6: detected capacity change from 0 to 256 [ 345.491750][T12612] exfat: Deprecated parameter 'utf8' [ 345.563183][ T7780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.577294][T12612] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 346.030643][T12622] loop3: detected capacity change from 0 to 1024 [ 346.051613][T12622] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 346.117329][T12622] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.2387: lblock 2 mapped to illegal pblock 2 (length 1) [ 346.117378][T12622] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 346.139790][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 346.139817][ C0] EXT4-fs (loop3): initial error at time 1790051644: ext4_map_blocks:790: inode 3: block 2 [ 346.139859][ C0] EXT4-fs (loop3): last error at time 1790051644: ext4_map_blocks:790: inode 3: block 2 [ 346.190692][T12622] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 346.190801][T12622] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.2387: Invalid inode table block 1 in block_group 0 [ 346.190832][T12622] loop3: lost filesystem error report for type 5 error -117 [ 346.192501][T12622] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 346.192529][T12622] loop3: lost filesystem error report for type 5 error -117 [ 346.192846][T12622] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.2387: mark_inode_dirty error [ 346.192877][T12622] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 346.193241][T12622] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 346.193268][T12622] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.2387: Failed to acquire dquot type 0 [ 346.193294][T12622] loop3: lost filesystem error report for type 5 error -117 [ 346.196236][T12622] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 346.196260][T12622] loop3: lost filesystem error report for type 5 error -117 [ 346.234372][T12622] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.2387: mark_inode_dirty error [ 346.234411][T12622] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 346.237852][T12622] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 346.237962][T12622] EXT4-fs (loop3): 1 orphan inode deleted [ 346.260064][T12622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.279255][ T3400] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 346.280406][ T3400] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 346.280446][ T3400] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:10: Failed to release dquot type 0 [ 346.379940][T12622] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.2387: Invalid inode table block 1 in block_group 0 [ 346.399243][T12622] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 346.484247][ T978] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.574705][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.589554][ T5611] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 346.589591][ T5611] loop3: lost filesystem error report for type 5 error -117 [ 346.625250][ T5611] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 346.625283][ T5611] loop3: lost filesystem error report for type 5 error -117 [ 346.625503][ T5611] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 346.625534][ T5611] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 346.625751][ T5611] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 346.625782][ T5611] loop3: lost filesystem error report for type 5 error -117 [ 346.708766][ T978] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.927313][T12638] netlink: 'syz.2.2391': attribute type 2 has an invalid length. [ 347.084526][ T978] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.333678][T12652] loop9: detected capacity change from 0 to 512 [ 347.348215][T12652] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 347.410212][T12653] loop4: detected capacity change from 0 to 1024 [ 347.412170][T12653] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 347.412262][T12653] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 347.415505][T12653] EXT4-fs error (device loop4): ext4_get_journal_inode:5927: inode #32: comm syz.4.2399: iget: special inode unallocated [ 347.415538][T12653] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 347.415800][T12653] EXT4-fs (loop4): Remounting filesystem read-only [ 347.415880][T12653] EXT4-fs (loop4): no journal found [ 347.415895][T12653] EXT4-fs (loop4): can't get journal size [ 347.417243][T12652] EXT4-fs (loop9): 1 truncate cleaned up [ 347.417471][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 347.417490][ C0] EXT4-fs (loop4): initial error at time 1790051645: ext4_get_journal_inode:5927: inode 32 [ 347.417525][ C0] EXT4-fs (loop4): last error at time 1790051645: ext4_get_journal_inode:5927: inode 32 [ 347.526714][ T978] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.539369][T12653] EXT4-fs (loop4): filesystem is read-only [ 347.554355][T12652] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.563714][T12659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2400'. [ 347.650432][T12653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 347.738457][T10454] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.760403][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.775413][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.779229][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.780705][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.781422][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.997100][T12666] loop9: detected capacity change from 0 to 512 [ 348.045291][T12666] EXT4-fs error (device loop9): __ext4_iget:5592: inode #11: block 1: comm syz.9.2402: invalid block [ 348.045335][T12666] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 348.047290][T12666] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.2402: couldn't read orphan inode 11 (err -117) [ 348.047327][T12666] loop9: lost filesystem error report for type 5 error -117 [ 348.047480][ C1] EXT4-fs (loop9): error count since last fsck: 2 [ 348.047503][ C1] EXT4-fs (loop9): initial error at time 1790051646: __ext4_iget:5592: inode 11: block 1 [ 348.047546][ C1] EXT4-fs (loop9): last error at time 1790051646: ext4_orphan_get:1408 [ 348.125971][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.238043][T12666] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.304305][T12666] EXT4-fs error (device loop9): htree_dirblock_to_tree:1051: inode #2: comm syz.9.2402: Directory hole found for htree leaf block 0 [ 348.307186][T12650] loop3: detected capacity change from 0 to 32768 [ 348.363910][T12650] XFS (loop3): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 348.486341][ T5611] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 348.540752][T10454] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.100497][T12695] loop3: detected capacity change from 0 to 4096 [ 349.195917][T12695] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 349.262625][T12695] ntfs3(loop3): ino=1a, mi_enum_attr [ 349.262764][T12695] ntfs3(loop3): ino=1a, mi_enum_attr [ 349.262809][T12695] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 349.374340][ T978] dummy0: left allmulticast mode [ 349.427903][ T978] bridge0: port 3(dummy0) entered disabled state [ 349.487363][ T978] bridge_slave_1: left allmulticast mode [ 349.487395][ T978] bridge_slave_1: left promiscuous mode [ 349.505197][ T978] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.506276][T12710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2411'. [ 349.652201][ T978] bridge_slave_0: left allmulticast mode [ 349.652234][ T978] bridge_slave_0: left promiscuous mode [ 349.652449][ T978] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.671208][T12695] ntfs3(loop3): ino=1e, "file1" attr_set_size_ex [ 349.858475][ T5616] Bluetooth: hci0: command tx timeout [ 350.461956][T12739] loop9: detected capacity change from 0 to 1024 [ 350.533979][T12739] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 350.534097][T12739] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.721268][T10454] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 350.893071][T12736] loop6: detected capacity change from 0 to 32768 [ 350.945897][ T978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.958536][T12736] JBD2: Ignoring recovery information on journal [ 350.997360][ T978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.024068][T12736] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 351.043953][ T978] bond0 (unregistering): Released all slaves [ 351.837948][ T6564] ocfs2: Unmounting device (7,6) on (node local) [ 351.952388][ T5616] Bluetooth: hci0: command tx timeout [ 353.027574][ T5733] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 353.183544][ T5733] usb 4-1: Using ep0 maxpacket: 8 [ 353.186401][ T5733] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 353.203744][ T5733] usb 4-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 353.203783][ T5733] usb 4-1: config 0 interface 0 has no altsetting 0 [ 353.203830][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.242631][ T5733] usb 4-1: config 0 descriptor?? [ 353.291539][ T978] hsr_slave_0: left promiscuous mode [ 353.314538][ T978] hsr_slave_1: left promiscuous mode [ 353.315565][ T978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.315589][ T978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.385097][ T978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.385126][ T978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.409333][T12779] loop2: detected capacity change from 0 to 32768 [ 353.418296][T12779] BTRFS warning: excessive commit interval 3581, use with care [ 353.434088][T12779] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2432 (12779) [ 353.435022][ T978] veth1_macvtap: left promiscuous mode [ 353.435945][ T978] veth0_macvtap: left promiscuous mode [ 353.436060][ T978] veth1_vlan: left promiscuous mode [ 353.436136][ T978] veth0_vlan: left promiscuous mode [ 353.477539][T12779] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 353.477577][T12779] BTRFS info (device loop2): using crc32c checksum algorithm [ 353.670401][T12779] BTRFS info (device loop2): enabling ssd optimizations [ 353.670434][T12779] BTRFS info (device loop2): turning on flush-on-commit [ 353.670454][T12779] BTRFS info (device loop2): enabling free space tree [ 353.670476][T12779] BTRFS info (device loop2): force zlib compression, level 3 [ 353.670500][T12779] BTRFS info (device loop2): max_inline set to 4096 [ 353.738814][ T5733] hid_parser_main: 62 callbacks suppressed [ 353.738842][ T5733] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 353.738871][ T5733] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 353.738895][ T5733] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 353.738919][ T5733] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 353.738942][ T5733] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 353.738966][ T5733] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 353.738989][ T5733] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 353.739013][ T5733] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 353.739037][ T5733] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 353.739061][ T5733] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 353.791895][ T5733] isku 0003:1E7D:319C.001C: hidraw0: USB HID v0.09 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 353.863793][T11493] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 353.987234][ T1583] usb 4-1: USB disconnect, device number 20 [ 354.031881][ T5616] Bluetooth: hci0: command tx timeout [ 354.187229][T12839] fido_id[12839]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 354.879437][ T978] team0 (unregistering): Port device team_slave_1 removed [ 354.897698][ T5733] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 354.904941][ T978] team0 (unregistering): Port device team_slave_0 removed [ 355.068020][ T5733] usb 3-1: Using ep0 maxpacket: 32 [ 355.069455][ T5733] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 355.071618][ T5733] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 355.071646][ T5733] usb 3-1: config 0 has no interface number 1 [ 355.074424][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.074452][ T5733] usb 3-1: Product: syz [ 355.074470][ T5733] usb 3-1: Manufacturer: syz [ 355.074488][ T5733] usb 3-1: SerialNumber: syz [ 355.130741][ T5733] usb 3-1: config 0 descriptor?? [ 355.239108][ T5733] viperboard 3-1:0.61: version 0.00 found at bus 003 address 004 [ 355.460730][ T5733] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 355.460769][ T5733] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 355.520545][ T5733] viperboard 3-1:0.0: version 0.00 found at bus 003 address 004 [ 355.554463][ T5733] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 355.554500][ T5733] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 355.603220][ T5733] usb 3-1: USB disconnect, device number 4 [ 355.807972][T12654] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.808770][T12654] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.808945][T12654] bridge_slave_0: entered allmulticast mode [ 355.817499][T12654] bridge_slave_0: entered promiscuous mode [ 355.879468][T12654] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.879587][T12654] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.879769][T12654] bridge_slave_1: entered allmulticast mode [ 355.907623][T12654] bridge_slave_1: entered promiscuous mode [ 355.934715][T12878] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2456'. [ 356.099408][ T5616] Bluetooth: hci0: command tx timeout [ 356.223608][T12654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.226989][T12654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.485809][T12654] team0: Port device team_slave_0 added [ 356.498299][T12654] team0: Port device team_slave_1 added [ 356.727929][T12654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.727950][T12654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.727983][T12654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.741681][T12654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.741701][T12654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.741734][T12654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.985714][T12885] loop3: detected capacity change from 0 to 40427 [ 356.996971][T12885] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 356.996999][T12885] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 357.028065][T12885] F2FS-fs (loop3): invalid crc value [ 357.166395][T12654] hsr_slave_0: entered promiscuous mode [ 357.175988][T12654] hsr_slave_1: entered promiscuous mode [ 357.227196][T12885] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 357.249477][T12885] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 357.249510][T12885] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 357.640889][T12912] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2467'. [ 357.712625][T12890] loop6: detected capacity change from 0 to 32768 [ 358.658736][ T5628] Bluetooth: hci4: command 0x041b tx timeout [ 358.810738][T12940] loop9: detected capacity change from 0 to 512 [ 358.846196][T12940] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 358.869109][T12940] EXT4-fs (loop9): 1 truncate cleaned up [ 358.926549][T12940] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.044344][T12940] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 359.224125][T10454] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.538957][T12956] loop3: detected capacity change from 0 to 4096 [ 359.758885][T12956] ntfs3(loop3): ino=5, "/" The size of extended attributes must not exceed 64KiB [ 359.791997][T12956] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB [ 360.011692][T12948] loop4: detected capacity change from 0 to 32768 [ 360.069282][T12948] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 360.133789][T12948] XFS (loop4): Ending clean mount [ 360.152908][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2487'. [ 360.304665][ T5612] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 360.341047][T12986] loop2: detected capacity change from 0 to 128 [ 360.739732][ T5628] Bluetooth: hci4: command 0x041b tx timeout [ 360.803442][ T31] audit: type=1326 audit(1790051658.938:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12995 comm="syz.2.2493" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63dd39e159 code=0x7ffc0000 [ 360.803510][ T31] audit: type=1326 audit(1790051658.938:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12995 comm="syz.2.2493" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63dd39e159 code=0x7ffc0000 [ 360.804923][ T31] audit: type=1326 audit(1790051658.938:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12995 comm="syz.2.2493" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63dd39e159 code=0x7ffc0000 [ 360.868148][ T31] audit: type=1326 audit(1790051659.008:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12995 comm="syz.2.2493" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f63dd39e159 code=0x7ffc0000 [ 360.868217][ T31] audit: type=1326 audit(1790051659.008:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12995 comm="syz.2.2493" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63dd39e159 code=0x7ffc0000 [ 360.868271][ T31] audit: type=1326 audit(1790051659.008:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12995 comm="syz.2.2493" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63dd39e159 code=0x7ffc0000 [ 360.924422][ T31] audit: type=1326 audit(1790051659.058:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12995 comm="syz.2.2493" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63dd39e159 code=0x7ffc0000 [ 360.924488][ T31] audit: type=1326 audit(1790051659.058:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12995 comm="syz.2.2493" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63dd39e159 code=0x7ffc0000 [ 360.924542][ T31] audit: type=1326 audit(1790051659.058:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12995 comm="syz.2.2493" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63dd39e159 code=0x7ffc0000 [ 360.933277][ T31] audit: type=1326 audit(1790051659.068:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12995 comm="syz.2.2493" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f63dd39e159 code=0x7ffc0000 [ 360.951087][T12997] loop3: detected capacity change from 0 to 512 [ 360.965741][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 360.972349][T12997] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 361.019999][T12997] EXT4-fs (loop3): 1 truncate cleaned up [ 361.053440][T12997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.215440][T12997] EXT4-fs error (device loop3): __ext4_expand_extra_isize:6542: inode #12: comm syz.3.2492: bad extra_isize 62 (inode size 256) [ 361.277037][T12997] EXT4-fs (loop3): Remounting filesystem read-only [ 361.482419][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.794893][T13017] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2497'. [ 362.063400][T12998] loop4: detected capacity change from 0 to 32768 [ 362.077165][T12998] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2494 (12998) [ 362.104095][T12654] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 362.122283][T12998] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 362.122321][T12998] BTRFS info (device loop4): using crc32c checksum algorithm [ 362.129292][T13022] loop9: detected capacity change from 0 to 4096 [ 362.180932][T12654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.181880][T12654] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 362.226428][T12654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.240912][T12654] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 362.281839][T12654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.297277][T12654] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 362.337166][T12654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.364631][T13022] ntfs3(loop9): Failed to initialize $Extend/$ObjId. [ 362.454894][T12998] BTRFS info (device loop4): enabling ssd optimizations [ 362.454926][T12998] BTRFS info (device loop4): turning on flush-on-commit [ 362.454947][T12998] BTRFS info (device loop4): enabling free space tree [ 362.454967][T12998] BTRFS info (device loop4): enabling auto defrag [ 362.454988][T12998] BTRFS info (device loop4): use lzo compression, level 1 [ 362.455012][T12998] BTRFS info (device loop4): max_inline set to 4096 [ 362.749252][ T5612] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 363.236957][T12654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.243959][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 363.401474][T12654] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.455594][ T3362] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.455705][ T3362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.651361][T13060] loop3: detected capacity change from 0 to 32768 [ 363.671798][ T3362] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.671916][ T3362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.019045][T13060] ERROR: (device loop3): diWrite: ixpxd invalid [ 364.019045][T13060] [ 364.050544][T13092] loop2: detected capacity change from 0 to 256 [ 364.116568][T13092] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbecade97, utbl_chksum : 0xe619d30d) [ 364.150307][T13060] ERROR: (device loop3): remounting filesystem as read-only [ 364.150342][T13060] ERROR: (device loop3): txCommit: [ 364.150342][T13060] [ 365.602372][T13135] loop2: detected capacity change from 0 to 4096 [ 365.706509][T13139] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 365.765306][T13101] loop6: detected capacity change from 0 to 40427 [ 365.785583][T13101] F2FS-fs (loop6): build fault injection rate: 771 [ 365.795211][T12654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.796814][T13101] F2FS-fs (loop6): invalid crc value [ 365.924018][T13135] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 366.333323][T13101] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 366.456144][T13101] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 366.610125][T13101] F2FS-fs (loop6): Stopped filesystem due to reason: 0 [ 366.613386][T13129] loop9: detected capacity change from 0 to 32768 [ 366.636489][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 366.649984][ T9680] kernel write not supported for file /sg0 (pid: 9680 comm: kworker/0:8) [ 366.683790][T13156] loop2: detected capacity change from 0 to 4096 [ 366.712689][T13156] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 366.871432][T13129] lbmIODone: I/O error in JFS log [ 366.871453][T13129] *** Log Format Error ! *** [ 366.876920][T13129] lmLogInit: exit(-22) [ 366.876972][T13129] lmLogOpen: exit(-22) [ 366.980820][T13156] ntfs3(loop2): ino=19, mi_enum_attr [ 366.980856][T13156] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 367.023478][T13123] loop4: detected capacity change from 0 to 40427 [ 367.028736][T13123] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 367.028762][T13123] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 367.034163][T12654] veth0_vlan: entered promiscuous mode [ 367.035062][T13123] F2FS-fs (loop4): invalid crc value [ 367.110056][T13165] sctp: [Deprecated]: syz.3.2539 (pid 13165) Use of int in maxseg socket option. [ 367.110056][T13165] Use struct sctp_assoc_value instead [ 367.143072][T12654] veth1_vlan: entered promiscuous mode [ 367.441516][T12654] veth0_macvtap: entered promiscuous mode [ 367.505570][T12654] veth1_macvtap: entered promiscuous mode [ 367.615800][T12654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.649507][T12654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.681710][ T1004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.763365][T13123] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 367.850333][ T3362] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.927597][T13123] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 367.927630][T13123] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 367.947674][ T84] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.947726][ T84] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.068211][T13181] netlink: 'syz.9.2545': attribute type 3 has an invalid length. [ 368.068239][T13181] netlink: 'syz.9.2545': attribute type 1 has an invalid length. [ 368.068255][T13181] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2545'. [ 368.155221][T13184] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2542'. [ 368.174643][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.174669][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.531525][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.531551][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.509708][T13219] loop6: detected capacity change from 0 to 256 [ 369.510755][T13219] exfat: Deprecated parameter 'utf8' [ 369.524699][T13219] exfat: Deprecated parameter 'namecase' [ 369.524821][T13219] exfat: Deprecated parameter 'namecase' [ 369.524850][T13219] exfat: Deprecated parameter 'utf8' [ 369.617143][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 369.645741][T13223] loop5: detected capacity change from 0 to 256 [ 369.733379][T13223] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 369.736516][T13219] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 369.736913][T13219] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 369.793695][T13219] exFAT-fs (loop6): start_clu is invalid cluster(0x400) [ 369.825385][T13228] loop9: detected capacity change from 0 to 128 [ 369.951796][T13228] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.960752][T13228] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 370.260141][T10454] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.464341][T13247] loop5: detected capacity change from 0 to 128 [ 370.529544][T13247] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 370.533807][T13247] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 370.630718][T13252] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2565'. [ 370.630748][T13252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2565'. [ 370.630766][T13252] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2565'. [ 370.688628][T13253] loop9: detected capacity change from 0 to 1024 [ 370.690298][T13205] loop3: detected capacity change from 0 to 32768 [ 370.781814][T13205] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 370.801210][T13253] hfsplus: bad catalog file entry [ 370.806947][T12654] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.891634][T13271] loop6: detected capacity change from 0 to 1024 [ 370.899339][T13253] hfsplus: bad catalog file entry [ 370.934217][T13271] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 371.000244][T13271] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.052766][T13275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2571'. [ 371.052808][T13275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2571'. [ 371.066149][T13205] XFS (loop3): Ending clean mount [ 371.084700][ T978] hfsplus: bad catalog file entry [ 371.190270][ T6564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.219075][T13205] XFS (loop3): Quotacheck needed: Please wait. [ 371.244594][T13280] CUSE: unknown device info "" [ 371.244614][T13280] CUSE: unknown device info "" [ 371.244625][T13280] CUSE: unknown device info "ÿ" [ 371.244635][T13280] CUSE: unknown device info "" [ 371.244644][T13280] CUSE: unknown device info "ÿ" [ 371.244654][T13280] CUSE: unknown device info "" [ 371.244665][T13280] CUSE: unknown device info "" [ 371.244675][T13280] CUSE: unknown device info "" [ 371.244685][T13280] CUSE: DEVNAME unspecified [ 371.432791][T13278] bridge0: port 3(macsec1) entered blocking state [ 371.432916][T13278] bridge0: port 3(macsec1) entered disabled state [ 371.434481][T13278] macsec1: entered allmulticast mode [ 371.434503][T13278] bridge0: entered allmulticast mode [ 371.434546][T13278] bridge0: entered promiscuous mode [ 371.493573][T13278] macsec1: left allmulticast mode [ 371.493600][T13278] bridge0: left allmulticast mode [ 371.563102][T13289] loop4: detected capacity change from 0 to 512 [ 371.586219][ T5790] bridge0: left promiscuous mode [ 371.603365][T13289] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 371.692526][T13291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2575'. [ 371.762155][ T5612] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 371.765089][T13205] XFS (loop3): Quotacheck: Done. [ 371.960922][T13295] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 372.051199][ T5611] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 372.321038][T13305] CacheFiles: Failed to register: -95 [ 372.534586][T13313] loop5: detected capacity change from 0 to 128 [ 372.665612][T13313] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.680263][T13313] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 372.779154][T13319] loop4: detected capacity change from 0 to 2048 [ 372.785491][T13319] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 372.821044][T13319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 373.031473][T12654] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.198219][ T5740] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 373.358333][ T5740] usb 3-1: Using ep0 maxpacket: 32 [ 373.359153][ T5740] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 373.360336][ T5740] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.360375][ T5740] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.360419][ T5740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.364372][ T5740] usb 3-1: config 0 descriptor?? [ 373.430742][ T5740] hub 3-1:0.0: USB hub found [ 373.536891][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2596'. [ 373.536931][T13342] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2596'. [ 373.625251][ T5740] hub 3-1:0.0: 1 port detected [ 373.730217][T13347] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 373.796326][T13351] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 373.796716][T13351] overlayfs: overlapping lowerdir path [ 373.820898][T13338] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=77 [ 373.846861][ T5740] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 373.860218][T13338] Remounting filesystem read-only [ 373.861400][ T5740] usbhid 3-1:0.0: can't add hid device: -71 [ 373.861500][ T5740] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 373.927176][ T5740] usb 3-1: USB disconnect, device number 5 [ 374.637135][T13371] set_capacity_and_notify: 2 callbacks suppressed [ 374.637159][T13371] loop6: detected capacity change from 0 to 128 [ 374.650990][T13371] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 374.651027][T13371] hpfs: filesystem error: improperly stopped [ 374.651045][T13371] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 374.651062][T13371] hpfs: You really don't want any checks? You are crazy... [ 374.651077][T13371] hpfs: Code page index out of array [ 374.651086][T13371] hpfs: code page support is disabled [ 374.651390][T13371] hpfs: hpfs_map_4sectors(): unaligned read [ 374.651471][T13371] hpfs: hpfs_map_4sectors(): unaligned read [ 374.651483][T13371] hpfs: filesystem error: unable to find root dir [ 375.056791][T13386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2613'. [ 375.056854][T13386] nbd: socks must be embedded in a SOCK_ITEM attr [ 375.402375][T13395] loop3: detected capacity change from 0 to 512 [ 375.445347][T13395] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.2616: bg 0: block 5: invalid block bitmap [ 375.445391][T13395] loop3: lost filesystem error report for type 5 error -117 [ 375.447460][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 375.447484][ C1] EXT4-fs (loop3): initial error at time 1790051673: ext4_validate_block_bitmap:436 [ 375.447511][ C1] EXT4-fs (loop3): last error at time 1790051673: ext4_validate_block_bitmap:436 [ 375.468945][T13395] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 375.468973][T13395] loop3: lost filesystem error report for type 5 error -117 [ 375.486279][T13395] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2616: invalid indirect mapped block 3 (level 2) [ 375.486320][T13395] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 375.487936][T13395] EXT4-fs (loop3): 1 orphan inode deleted [ 375.487958][T13395] EXT4-fs (loop3): 1 truncate cleaned up [ 375.499759][T13395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.578578][T13354] loop4: detected capacity change from 0 to 32768 [ 375.640979][T13354] [ 375.640979][T13354] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 375.640979][T13354] [ 375.776829][T13407] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2621'. [ 375.828866][T13354] ERROR: (device loop4): diWrite: ixpxd invalid [ 375.828866][T13354] [ 375.837214][T13354] ERROR: (device loop4): txCommit: [ 375.837214][T13354] [ 375.851565][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.994482][T13354] jfs_mkdir: dtSearch returned -17 [ 376.177052][ T5612] [ 376.177052][ T5612] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 376.177052][ T5612] [ 376.193900][ T5612] [ 376.193900][ T5612] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 376.193900][ T5612] [ 376.940690][T13440] loop3: detected capacity change from 0 to 512 [ 376.941893][T13440] EXT4-fs: Ignoring removed nobh option [ 376.960507][T13440] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 376.988537][T13440] EXT4-fs (loop3): 1 truncate cleaned up [ 377.011339][T13440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.075368][T13393] loop5: detected capacity change from 0 to 32768 [ 377.104629][T13393] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 377.219038][T13422] loop2: detected capacity change from 0 to 32768 [ 377.223893][T13422] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2626 (13422) [ 377.255205][T13422] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 377.255244][T13422] BTRFS info (device loop2): using crc32c checksum algorithm [ 377.413007][T13473] loop6: detected capacity change from 0 to 128 [ 377.432710][T13473] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 377.469599][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.488588][T13422] BTRFS info (device loop2): enabling ssd optimizations [ 377.488612][T13422] BTRFS info (device loop2): turning on async discard [ 377.488627][T13422] BTRFS info (device loop2): enabling free space tree [ 377.504296][T13473] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.539342][T13393] XFS (loop5): Ending clean mount [ 377.580029][T13393] XFS (loop5): Quotacheck needed: Please wait. [ 377.811798][T11493] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 377.996092][T13393] XFS (loop5): Quotacheck: Done. [ 378.077534][T13482] tipc: Enabled bearer , priority 0 [ 378.182496][T13487] netlink: 'syz.6.2642': attribute type 4 has an invalid length. [ 378.182527][T13487] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2642'. [ 378.267893][T12654] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 378.430005][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.706794][T13501] vlan2: entered allmulticast mode [ 378.706822][T13501] bond0: entered allmulticast mode [ 378.706846][T13501] bond_slave_0: entered allmulticast mode [ 378.706867][T13501] bond_slave_1: entered allmulticast mode [ 379.078260][ T9680] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 379.173940][T13445] loop9: detected capacity change from 0 to 40427 [ 379.188183][ T1583] tipc: Node number set to 16842751 [ 379.230884][ T9680] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 379.233566][ T9680] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 379.233596][ T9680] usb 5-1: config 0 has no interface number 0 [ 379.233642][ T9680] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 379.233672][ T9680] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 379.235730][ T9680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.235758][ T9680] usb 5-1: Product: syz [ 379.235776][ T9680] usb 5-1: Manufacturer: syz [ 379.235794][ T9680] usb 5-1: SerialNumber: syz [ 379.292541][T13445] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 379.292570][T13445] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 379.322264][T13445] F2FS-fs (loop9): invalid crc value [ 379.346054][ T9680] usb 5-1: config 0 descriptor?? [ 379.360176][T13504] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 379.367792][ T9680] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 379.395494][ T9680] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 379.852221][ T5791] usb 5-1: USB disconnect, device number 17 [ 379.881398][ T5791] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 379.882135][ T5791] cyberjack 5-1:0.69: device disconnected [ 379.921485][T13445] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 380.219831][T13531] loop2: detected capacity change from 0 to 2048 [ 380.249520][T13520] loop6: detected capacity change from 0 to 32768 [ 380.285497][T13511] loop3: detected capacity change from 0 to 32768 [ 380.297321][T13520] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2654 (13520) [ 380.347159][T13534] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 380.391525][T13511] JBD2: Ignoring recovery information on journal [ 380.443724][T13520] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 380.443769][T13520] BTRFS info (device loop6): using crc32c checksum algorithm [ 380.587185][T13544] loop5: detected capacity change from 0 to 128 [ 380.634352][T13544] FAT-fs (loop5): Directory bread(block 1048) failed [ 380.634394][T13544] FAT-fs (loop5): Directory bread(block 1049) failed [ 380.634422][T13544] FAT-fs (loop5): Directory bread(block 1050) failed [ 380.634451][T13544] FAT-fs (loop5): Directory bread(block 1051) failed [ 380.634479][T13544] FAT-fs (loop5): Directory bread(block 1052) failed [ 380.634507][T13544] FAT-fs (loop5): Directory bread(block 1053) failed [ 380.634534][T13544] FAT-fs (loop5): Directory bread(block 1054) failed [ 380.634563][T13544] FAT-fs (loop5): Directory bread(block 1055) failed [ 380.735450][T13511] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 380.897125][T13520] BTRFS info (device loop6): setting nodatasum [ 380.897158][T13520] BTRFS info (device loop6): setting nodatacow [ 380.897180][T13520] BTRFS info (device loop6): turning on async discard [ 380.897200][T13520] BTRFS info (device loop6): enabling free space tree [ 381.506414][ T5611] ocfs2: Unmounting device (7,3) on (node local) [ 381.721961][ T6564] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 382.239948][ T5790] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 382.404997][ T5790] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 382.406419][ T5790] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 382.406449][ T5790] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 382.406471][ T5790] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 382.406495][ T5790] usb 3-1: config 220 has no interface number 2 [ 382.406569][ T5790] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 382.406603][ T5790] usb 3-1: config 220 interface 0 has no altsetting 0 [ 382.406625][ T5790] usb 3-1: config 220 interface 76 has no altsetting 0 [ 382.406648][ T5790] usb 3-1: config 220 interface 1 has no altsetting 0 [ 382.491307][ T5790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.491338][ T5790] usb 3-1: Product: syz [ 382.491354][ T5790] usb 3-1: Manufacturer: syz [ 382.491372][ T5790] usb 3-1: SerialNumber: syz [ 382.644202][T13600] loop5: detected capacity change from 0 to 764 [ 382.796467][T13602] loop6: detected capacity change from 0 to 2048 [ 382.853820][ T5790] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 382.853862][ T5790] uvcvideo 3-1:220.0: No valid video chain found. [ 382.853923][ T5790] usb 3-1: selecting invalid altsetting 0 [ 382.886047][ T5790] usb 3-1: selecting invalid altsetting 0 [ 382.886082][ T5790] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 382.985505][ T5790] usb 3-1: USB disconnect, device number 6 [ 383.029721][T13602] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.256350][ T6564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.341855][T13625] loop5: detected capacity change from 0 to 64 [ 383.460672][T13625] hfs: bad catalog entry type 0 [ 383.746887][T13633] can0: slcan on ttyS3. [ 383.943372][T13632] loop6: detected capacity change from 0 to 4096 [ 383.957059][T13632] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 384.021079][T13644] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4 [ 384.035879][T13632] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 384.185925][T13646] tipc: Enabling of bearer rejected, failed to enable media [ 384.242636][T13631] can0 (unregistered): slcan off ttyS3. [ 384.441101][T13657] loop6: detected capacity change from 0 to 256 [ 384.558851][T13661] loop5: detected capacity change from 0 to 64 [ 385.027828][ T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 385.036949][T13680] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 385.179051][ T25] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 385.180735][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.180788][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 385.180814][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 385.180843][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.180889][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.379231][T13684] set_capacity_and_notify: 1 callbacks suppressed [ 385.379256][T13684] loop2: detected capacity change from 0 to 4096 [ 385.527962][T13696] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 385.890995][ T25] gud 5-1:1.0: Failed to add properties (error=-71) [ 385.891033][ T25] gud 5-1:1.0: probe with driver gud failed with error -71 [ 385.984318][ T25] usb 5-1: USB disconnect, device number 18 [ 386.799964][T13738] loop4: detected capacity change from 0 to 1024 [ 386.815981][T13738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 386.874793][T13738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.170107][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.335532][T13730] loop2: detected capacity change from 0 to 16384 [ 387.408488][T13758] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 387.463590][T13756] loop4: detected capacity change from 0 to 512 [ 387.501239][T13756] EXT4-fs (loop4): 1 truncate cleaned up [ 387.530600][T13756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.694297][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.787979][T13731] loop5: detected capacity change from 0 to 32768 [ 387.926546][T13731] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 388.250975][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 388.250999][ T31] audit: type=1800 audit(1790051686.388:192): pid=13731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2719" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 388.632876][T12654] ocfs2: Unmounting device (7,5) on (node local) [ 389.248799][T13815] usb usb8: usbfs: process 13815 (syz.2.2749) did not claim interface 9 before use [ 389.407323][T13817] netlink: 'syz.9.2750': attribute type 322 has an invalid length. [ 390.010600][T13841] loop6: detected capacity change from 0 to 512 [ 390.024470][T13841] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 390.072045][T13841] EXT4-fs (loop6): 1 truncate cleaned up [ 390.081994][T13841] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.227950][ T5790] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 390.286578][ T31] audit: type=1326 audit(1790051688.418:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.3.2760" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa880f9e159 code=0x7ffc0000 [ 390.286888][ T31] audit: type=1326 audit(1790051688.418:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.3.2760" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa880f9e159 code=0x7ffc0000 [ 390.339065][ T31] audit: type=1326 audit(1790051688.458:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.3.2760" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa880f9e159 code=0x7ffc0000 [ 390.339140][ T31] audit: type=1326 audit(1790051688.458:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.3.2760" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa880f9e159 code=0x7ffc0000 [ 390.437509][ T5790] usb 10-1: Using ep0 maxpacket: 8 [ 390.439462][ T5790] usb 10-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 390.442519][ T5790] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 390.442568][ T5790] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.442599][ T5790] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.442625][ T5790] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 390.442672][ T5790] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.540811][ T5790] usb 10-1: config 0 descriptor?? [ 390.562516][ T6564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.720530][T13861] loop4: detected capacity change from 0 to 256 [ 391.013566][ T5790] hid_parser_main: 34 callbacks suppressed [ 391.013595][ T5790] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 391.013624][ T5790] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 391.013649][ T5790] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 391.013680][ T5790] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 391.013704][ T5790] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 391.013728][ T5790] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 391.013753][ T5790] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 391.014980][ T5790] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 391.015025][ T5790] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 391.015050][ T5790] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 391.105031][ T5790] redragon 0003:0C45:760B.001D: hidraw0: USB HID v0.04 Device [HID 0c45:760b] on usb-dummy_hcd.9-1/input0 [ 391.200234][ T5740] usb 10-1: USB disconnect, device number 5 [ 391.356161][T13873] fido_id[13873]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 391.792101][T13886] [U] ŠI [ 391.840234][T13860] syz.5.2766 (13860): drop_caches: 2 [ 392.216436][T13899] program syz.3.2777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.957982][T13931] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2789'. [ 392.963867][T13931] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2789'. [ 393.074023][T13939] loop3: detected capacity change from 0 to 512 [ 393.083877][T13939] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 393.120099][T13939] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.2794: inode has both inline data and extents flags [ 393.120141][T13939] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 393.120692][T13939] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.2794: couldn't read orphan inode 15 (err -117) [ 393.120729][T13939] loop3: lost filesystem error report for type 5 error -117 [ 393.170667][T13940] loop4: detected capacity change from 0 to 1024 [ 393.200250][T13939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.307516][T13940] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 393.307635][T13940] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 393.307658][T13940] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.2792: Failed to acquire dquot type 0 [ 393.307685][T13940] loop4: lost filesystem error report for type 5 error -5 [ 393.316011][T13940] EXT4-fs (loop4): 1 truncate cleaned up [ 393.372732][T13940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.414424][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.508558][ T5740] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 393.608524][T13954] loop5: detected capacity change from 0 to 512 [ 393.617040][T13954] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 393.670405][ T5740] usb 3-1: Using ep0 maxpacket: 16 [ 393.674990][ T5740] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 393.677250][ T5740] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 393.677276][ T5740] usb 3-1: config 0 has no interface number 0 [ 393.677317][ T5740] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 393.680530][ T5740] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 393.680558][ T5740] usb 3-1: Product: syz [ 393.680576][ T5740] usb 3-1: SerialNumber: syz [ 393.686919][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.696649][ T5740] usb 3-1: config 0 descriptor?? [ 393.714724][ T5740] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 393.732173][ T5740] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input26 [ 393.824920][T13954] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 393.824958][T13954] FAT-fs (loop5): Filesystem has been set read-only [ 393.843125][T13954] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 394.309429][T13968] loop9: detected capacity change from 0 to 2048 [ 394.405184][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 394.405230][ C0] ------------[ cut here ]------------ [ 394.405242][ C0] URB ffff88807449d100 submitted while active [ 394.405256][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: syz.4.2805/13975 [ 394.406187][ T25] usb 3-1: USB disconnect, device number 7 [ 394.439669][ C0] Modules linked in: [ 394.443579][ C0] CPU: 0 UID: 0 PID: 13975 Comm: syz.4.2805 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.454553][ C0] Tainted: [L]=SOFTLOCKUP [ 394.458873][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 394.468943][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 394.474434][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 99 31 c9 fa 49 83 3e 00 74 40 e8 ae 29 59 fa 48 8d 3d 37 4a 19 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 93 29 59 fa eb 05 e8 8c 29 [ 394.494065][ C0] RSP: 0000:ffffc900000079f8 EFLAGS: 00010087 [ 394.500157][ C0] RAX: ffffffff876ea8b2 RBX: ffff88807449d100 RCX: 0000000000040000 [ 394.508135][ C0] RDX: ffffc900020a1000 RSI: ffff88807449d100 RDI: ffffffff9087f2f0 [ 394.516123][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000004 [ 394.524100][ C0] R10: dffffc0000000000 R11: fffff52000000f3c R12: ffff888027ccc048 [ 394.532079][ C0] R13: ffff888027ccc030 R14: ffff88807449d108 R15: 0000000000000820 [ 394.540076][ C0] FS: 00007fbbaae126c0(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 394.549005][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.555587][ C0] CR2: 00007fbbaae11ff8 CR3: 0000000054e4c000 CR4: 0000000000350ef0 [ 394.563557][ C0] Call Trace: [ 394.566831][ C0] [ 394.569703][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.575352][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 394.581183][ C0] cm109_urb_irq_callback+0x6fb/0xca0 [ 394.586567][ C0] __usb_hcd_giveback_urb+0x378/0x540 [ 394.591973][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.597642][ C0] dummy_timer+0xa91/0x4cf0 [ 394.602193][ C0] ? __lock_acquire+0x747/0x2de0 [ 394.607151][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.612804][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 394.618200][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 394.623157][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 394.628974][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 394.633928][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 394.639159][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 394.644286][ C0] handle_softirqs+0x226/0x860 [ 394.649061][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 394.653842][ C0] __irq_exit_rcu+0xcb/0x220 [ 394.658447][ C0] irq_exit_rcu+0x9/0x30 [ 394.662697][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 394.668340][ C0] [ 394.671263][ C0] [ 394.674186][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 394.680170][ C0] RIP: 0010:folio_add_new_anon_rmap+0x2df/0x1370 [ 394.686505][ C0] Code: be 08 00 00 00 e8 f1 95 13 00 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 18 80 3c 01 00 74 08 48 89 df e8 64 93 13 00 4c 8b 33 <4c> 89 f6 48 83 e6 40 31 ff e8 33 91 a3 ff 49 83 e6 40 48 89 5c 24 [ 394.706116][ C0] RSP: 0000:ffffc9000323fa20 EFLAGS: 00000246 [ 394.712197][ C0] RAX: dffffc0000000000 RBX: ffffea000142e280 RCX: 1ffffd4000285c50 [ 394.720178][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea000142e280 [ 394.728160][ C0] RBP: 0000000000000001 R08: ffffea000142e287 R09: 1ffffd4000285c50 [ 394.736134][ C0] R10: dffffc0000000000 R11: fffff94000285c51 R12: ffff888071b02dc0 [ 394.744108][ C0] R13: 1ffffd4000285c56 R14: 00fff00000020008 R15: ffffea000142e2b0 [ 394.752113][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 394.757509][ C0] map_anon_folio_pte_nopf+0x2e3/0x5e0 [ 394.763024][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.768670][ C0] map_anon_folio_pte_pf+0xbe/0x260 [ 394.773876][ C0] do_pte_missing+0x2d5a/0x34b0 [ 394.778752][ C0] handle_mm_fault+0x1a53/0x3750 [ 394.783713][ C0] ? handle_mm_fault+0xf1/0x3750 [ 394.788670][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 394.793962][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 394.799188][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.804837][ C0] do_user_addr_fault+0xa4f/0x1340 [ 394.809996][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.815635][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 394.821270][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 394.826648][ C0] exc_page_fault+0x6a/0xc0 [ 394.831158][ C0] asm_exc_page_fault+0x26/0x30 [ 394.836010][ C0] RIP: 0033:0x7fbba9f4c69f [ 394.840425][ C0] Code: b0 00 00 00 0f 29 bc 24 c0 00 00 00 64 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 48 8d 84 24 e0 00 00 00 45 31 c0 48 89 e1 <48> 89 44 24 08 48 8d 44 24 20 c7 04 24 18 00 00 00 c7 44 24 04 30 [ 394.860058][ C0] RSP: 002b:00007fbbaae11ff0 EFLAGS: 00010246 [ 394.866131][ C0] RAX: 00007fbbaae120d0 RBX: 0000000000020000 RCX: 00007fbbaae11ff0 [ 394.874101][ C0] RDX: 00007fbbaa0518ad RSI: 0000000000000023 RDI: 00007fbbaae120d0 [ 394.882076][ C0] RBP: 00007fbbaadf3000 R08: 0000000000000000 R09: 00007ffc4bf4c697 [ 394.890048][ C0] R10: 0000000000000008 R11: 0000000000000202 R12: 00007fbbaae120d0 [ 394.898020][ C0] R13: 000000000000000b R14: 00007ffc4bf4c5b0 R15: 00007ffc4bf4c698 [ 394.906016][ C0] [ 394.909031][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 394.916335][ C0] CPU: 0 UID: 0 PID: 13975 Comm: syz.4.2805 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.927281][ C0] Tainted: [L]=SOFTLOCKUP [ 394.931604][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 394.941654][ C0] Call Trace: [ 394.944928][ C0] [ 394.947805][ C0] vpanic+0x56d/0xa60 [ 394.951804][ C0] ? __pfx__printk+0x10/0x10 [ 394.956398][ C0] ? __pfx_vpanic+0x10/0x10 [ 394.960910][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 394.966206][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 394.971423][ C0] panic+0xc5/0xd0 [ 394.975168][ C0] ? __pfx_panic+0x10/0x10 [ 394.979626][ C0] __warn+0x315/0x4c0 [ 394.983637][ C0] ? usb_submit_urb+0x79/0x18b0 [ 394.988496][ C0] ? usb_submit_urb+0x79/0x18b0 [ 394.993351][ C0] __report_bug+0x276/0x570 [ 394.997868][ C0] ? usb_submit_urb+0x79/0x18b0 [ 395.002727][ C0] ? __pfx___report_bug+0x10/0x10 [ 395.007855][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.013489][ C0] ? __lock_acquire+0x747/0x2de0 [ 395.018432][ C0] report_bug_entry+0x19b/0x290 [ 395.023288][ C0] ? usb_submit_urb+0x7c/0x18b0 [ 395.028143][ C0] ? usb_submit_urb+0x81/0x18b0 [ 395.032992][ C0] handle_bug+0xce/0x200 [ 395.037265][ C0] exc_invalid_op+0x1a/0x50 [ 395.041774][ C0] asm_exc_invalid_op+0x1a/0x20 [ 395.046621][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 395.052079][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 99 31 c9 fa 49 83 3e 00 74 40 e8 ae 29 59 fa 48 8d 3d 37 4a 19 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 93 29 59 fa eb 05 e8 8c 29 [ 395.071688][ C0] RSP: 0000:ffffc900000079f8 EFLAGS: 00010087 [ 395.077766][ C0] RAX: ffffffff876ea8b2 RBX: ffff88807449d100 RCX: 0000000000040000 [ 395.085742][ C0] RDX: ffffc900020a1000 RSI: ffff88807449d100 RDI: ffffffff9087f2f0 [ 395.093714][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000004 [ 395.101681][ C0] R10: dffffc0000000000 R11: fffff52000000f3c R12: ffff888027ccc048 [ 395.109649][ C0] R13: ffff888027ccc030 R14: ffff88807449d108 R15: 0000000000000820 [ 395.117662][ C0] ? usb_submit_urb+0x72/0x18b0 [ 395.122526][ C0] ? usb_submit_urb+0x72/0x18b0 [ 395.127380][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.133030][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 395.138843][ C0] cm109_urb_irq_callback+0x6fb/0xca0 [ 395.144260][ C0] __usb_hcd_giveback_urb+0x378/0x540 [ 395.149640][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.155282][ C0] dummy_timer+0xa91/0x4cf0 [ 395.159816][ C0] ? __lock_acquire+0x747/0x2de0 [ 395.164770][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.170424][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 395.175820][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 395.180771][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 395.186578][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 395.191528][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 395.196755][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 395.201880][ C0] handle_softirqs+0x226/0x860 [ 395.206660][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 395.211437][ C0] __irq_exit_rcu+0xcb/0x220 [ 395.216042][ C0] irq_exit_rcu+0x9/0x30 [ 395.220294][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 395.225947][ C0] [ 395.228865][ C0] [ 395.231790][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 395.237769][ C0] RIP: 0010:folio_add_new_anon_rmap+0x2df/0x1370 [ 395.244101][ C0] Code: be 08 00 00 00 e8 f1 95 13 00 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 18 80 3c 01 00 74 08 48 89 df e8 64 93 13 00 4c 8b 33 <4c> 89 f6 48 83 e6 40 31 ff e8 33 91 a3 ff 49 83 e6 40 48 89 5c 24 [ 395.263705][ C0] RSP: 0000:ffffc9000323fa20 EFLAGS: 00000246 [ 395.269777][ C0] RAX: dffffc0000000000 RBX: ffffea000142e280 RCX: 1ffffd4000285c50 [ 395.277746][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea000142e280 [ 395.285709][ C0] RBP: 0000000000000001 R08: ffffea000142e287 R09: 1ffffd4000285c50 [ 395.293705][ C0] R10: dffffc0000000000 R11: fffff94000285c51 R12: ffff888071b02dc0 [ 395.301683][ C0] R13: 1ffffd4000285c56 R14: 00fff00000020008 R15: ffffea000142e2b0 [ 395.309678][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 395.315078][ C0] map_anon_folio_pte_nopf+0x2e3/0x5e0 [ 395.320553][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.326201][ C0] map_anon_folio_pte_pf+0xbe/0x260 [ 395.331410][ C0] do_pte_missing+0x2d5a/0x34b0 [ 395.336283][ C0] handle_mm_fault+0x1a53/0x3750 [ 395.341240][ C0] ? handle_mm_fault+0xf1/0x3750 [ 395.346200][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 395.351494][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 395.356728][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.362379][ C0] do_user_addr_fault+0xa4f/0x1340 [ 395.367516][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.373159][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.378798][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 395.384173][ C0] exc_page_fault+0x6a/0xc0 [ 395.388678][ C0] asm_exc_page_fault+0x26/0x30 [ 395.393527][ C0] RIP: 0033:0x7fbba9f4c69f [ 395.397946][ C0] Code: b0 00 00 00 0f 29 bc 24 c0 00 00 00 64 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 48 8d 84 24 e0 00 00 00 45 31 c0 48 89 e1 <48> 89 44 24 08 48 8d 44 24 20 c7 04 24 18 00 00 00 c7 44 24 04 30 [ 395.417563][ C0] RSP: 002b:00007fbbaae11ff0 EFLAGS: 00010246 [ 395.423646][ C0] RAX: 00007fbbaae120d0 RBX: 0000000000020000 RCX: 00007fbbaae11ff0 [ 395.431646][ C0] RDX: 00007fbbaa0518ad RSI: 0000000000000023 RDI: 00007fbbaae120d0 [ 395.439664][ C0] RBP: 00007fbbaadf3000 R08: 0000000000000000 R09: 00007ffc4bf4c697 [ 395.447639][ C0] R10: 0000000000000008 R11: 0000000000000202 R12: 00007fbbaae120d0 [ 395.455607][ C0] R13: 000000000000000b R14: 00007ffc4bf4c5b0 R15: 00007ffc4bf4c698 [ 395.463600][ C0] [ 395.466844][ C0] Kernel Offset: disabled [ 395.471159][ C0] Rebooting in 86400 seconds..