last executing test programs: 8m20.857602142s ago: executing program 0 (id=3533): r0 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x0) timerfd_gettime(r0, 0x0) 8m20.554631669s ago: executing program 0 (id=3535): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000280)) 8m20.305777094s ago: executing program 0 (id=3537): r0 = semget$private(0x0, 0x4, 0x68) semctl$GETNCNT(r0, 0x4, 0xe, 0x0) 8m20.136005437s ago: executing program 0 (id=3538): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[], 0x3, 0x4b9, &(0x7f0000000940)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8m19.794909596s ago: executing program 0 (id=3541): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") llistxattr(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=""/227, 0xe3) 8m19.198826785s ago: executing program 0 (id=3546): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, 0x1}, 0xc) 8m18.609798229s ago: executing program 32 (id=3546): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, 0x1}, 0xc) 34.909721031s ago: executing program 3 (id=11413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xd23) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) 34.384064943s ago: executing program 3 (id=11417): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x480, &(0x7f000000e6c0)={{{@in6=@local}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) 34.00673822s ago: executing program 3 (id=11421): unshare(0x28000600) r0 = open(&(0x7f0000000240)='.\x00', 0x80000, 0x103) read$qrtrtun(r0, 0x0, 0x0) 33.892756883s ago: executing program 3 (id=11423): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x3004001, &(0x7f0000000180)={[{@showassoc}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@showassoc}, {@map_acorn}, {@overriderock}, {@session={'session', 0x3d, 0x62}}, {@cruft}, {@map_normal}, {}, {@map_acorn}, {@cruft}, {@nocompress}, {}, {@map_off}]}, 0xfe, 0xa43, &(0x7f0000000cc0)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 33.526792214s ago: executing program 3 (id=11426): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[], 0x46, 0xc11, &(0x7f0000000d00)="$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") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='udf\x00', 0x1000040, 0x0) 33.192539953s ago: executing program 3 (id=11431): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) 32.847509132s ago: executing program 33 (id=11431): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) 9.219016412s ago: executing program 4 (id=11617): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000f50000000341", @ANYBLOB="5f188c"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 6.890235572s ago: executing program 4 (id=11630): r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@loopback, @in=@private=0xa010102, 0x4e22, 0x2, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4}}, 0xe8) sendto$inet(r0, &(0x7f0000000b00)="4500002800012000401100007f0000017f000001", 0x14, 0x0, &(0x7f0000000b40)={0x2, 0x0, @loopback}, 0x10) 6.70689341s ago: executing program 4 (id=11632): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, &(0x7f00005b0000/0x4000)=nil) 6.522008646s ago: executing program 4 (id=11633): syz_mount_image$exfat(&(0x7f00000028c0), &(0x7f0000002900)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000002940)={[{@utf8}, {@keep_last_dots}, {@uid={'uid', 0x3d, 0xee00}}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x1}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@allow_utime={'allow_utime', 0x3d, 0xbab5}}, {@utf8}]}, 0x3, 0x1533, &(0x7f0000002a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002340)='./proc\x00', &(0x7f0000002380)='proc\x00', 0x0, 0x0) 6.138075996s ago: executing program 4 (id=11636): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000240)={0x2, 0x0, {&(0x7f0000000180)=""/185, 0xb9, 0x0, 0x3, 0x3}}, 0x48) 4.851798048s ago: executing program 4 (id=11644): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 4.07460799s ago: executing program 34 (id=11644): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 3.718986214s ago: executing program 5 (id=11653): syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, &(0x7f0000000180), 0x1, 0xa07, &(0x7f0000009f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000009e80)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000009ec0)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x0, 0xe, 0x20, 0x0, 0x9}}, 0x0) 2.982291176s ago: executing program 5 (id=11660): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000300)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000003c0)="80", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/288, 0x120}], 0x1, &(0x7f00000005c0)=""/19, 0x13}, 0x40011013) 2.313287952s ago: executing program 2 (id=11666): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0xfd00, 0x0, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}}, 0x0) 1.965695914s ago: executing program 2 (id=11667): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xd7}]}}]}, 0x40}}, 0x4c840) 1.897033858s ago: executing program 1 (id=11668): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) 1.763624051s ago: executing program 5 (id=11669): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6654050000082c00fe80000000000000060000000080a8771ada691c5c00000000000000000000aa3a"], 0x0) 1.487093149s ago: executing program 2 (id=11671): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xe, &(0x7f0000000240)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f00000002c0)="$eJzs28tvG0UYAPBv10lKX8SU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlW0IFSOqBJ3xIEDEn8BJ7gg4ITEFe6oUoV6aeFktPZuYjt2mocTF/z7SdvO7M5q5vPu2DM72QD61kj2TxKxKyJ+j4jhera5wEj9v1s3Lk7/fePidBLV6lt/JbVyN29cnC6KFuftzDOjaUT6aRIH2tQ7f/7C6alKZfZcnh9fOPP++Pz5C8+eOjN1cvbk7NnJY8eOHpl44fnJ57oSZ9amm/s/mju477V3rr4xffzquz9/mxTxt8TRJSMrHXyiWu1ydb21uyGdDPSwIaxJKSKyyzVY6//DUYqlizccr37S08YBm6parVZ3dj58uQr8jyXR6xYAvVH80Gfz32LboqHHHeH6S/UJUBb3rXyrHxmINC8z2DK/7aaRiDh++Z8vsy025zkEAECT77PxzzPtxn9p3N9Q7u58bagcEfdExJ6IuDci9kbEfRG1sg9ExINrrL91kWT5+Ce9tq7AVikb/72Yr201j/+K0V+US3ludy3+weTEqcrs4fwzGY3BbVl+YoU6fnjlt887HWsc/2VbVn8xFszbcW1gW/M5M1MLUxuJudH1jyP2D7SLP1lcCUgiYl9E7F9nHaee+uZgp2O3j38FXVhnqn4V8WT9+l+OlvgLycrrk+N3RWX28HhxVyz3y69X3uxU/4bi74Ls+u9oe/8vxl9OGtdr59dex5U/Pus4p1nd/V+91HhOdv8PJW/X0kP5vg+nFhbOTUQMJa/XG924f3Lp3CJflM/iHz3Uvv/viaVP4kBEZDfxQxHxcEQ8krf90Yh4LCIOrRD/Ty8//t76499cWfwza7r+S4mhaN3TPlE6/eN3TZWW1xJ/dv2P1lKj+Z7VfP+tpl3ru5sBAADgvyeNiF2RpGOL6TQdG6v/vfze2JFW5uYXnj4x98HZmfo7AuUYTIsnXcMNz0Mn8ml9kZ+M+LoxfyR/bvxFaXstPzY9V5npdfDQ53Z26P+ZP0u9bh2w6byvBf1L/4f+pf9D/9L/oX+16f/be9EOYOu1+/2/1IN2AFuvpf9b9oM+Yv4P/Uv/h/6l/0Nfmt8et39JXkJiWSLSO6IZEt1JpBHRtGf5d0W5F19QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/RvAAAA//831udB") setxattr$system_posix_acl(&(0x7f0000000740)='.\x00', &(0x7f0000000780)='system.posix_acl_default\x00', &(0x7f00000007c0), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./debug\x00', 0x1ff) 1.438950363s ago: executing program 6 (id=11672): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') sendfile(r0, r0, 0x0, 0x2000007ff) pread64(r0, &(0x7f0000001f40)=""/4096, 0x1000, 0x7fff) 1.371851046s ago: executing program 1 (id=11673): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xb) 1.144500134s ago: executing program 6 (id=11674): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000002840)=""/4096, &(0x7f0000003840)=0x1000) 961.882725ms ago: executing program 1 (id=11675): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x22f0}, @val={0x2, 0x80, 0x2, 0xc2, 0xffff, 0x1}, @mpls={[{0x3ff}], @ipv6=@icmpv6={0x3, 0x6, "929da6", 0x8, 0x3a, 0xff, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @ndisc_rs}}}}, 0x42) 957.088387ms ago: executing program 2 (id=11676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f00000000c0)={0xcc, 0x0, 0x3}) 918.606846ms ago: executing program 6 (id=11677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000003c0)={0x3, 0xffffffffffffffff, 0x1}) 861.968597ms ago: executing program 5 (id=11678): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000800)={'vlan0\x00', @random='\x00\x00\x00\x00\x00 '}) 616.395663ms ago: executing program 1 (id=11679): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) 573.353087ms ago: executing program 5 (id=11680): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8000000000007ffb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0xfffffffe, 0x1, 0x2}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000540)={0x4, 0x7, 0x4, {0x1, @raw_data="9db463c5bd340181eb27dc90d7156ac0911d350884300cc718700eef1b2f5f8a5f2afeac293a1cfc06938ad041fcc5da7a100d8b3be7ba33e4f82d72ede4ed761f9ac9890578e8017e505d5d9fb7b5b200ad2d4ee93ba649e13d58e3b8edb6c93a759d7c5bba3199696b85dba326ef1b6befe960da1321a900ba581b1a19987a1bb16680ce3b01a1220fe05d9753f4ca089cdfd2f6e04646062201c6447bae763f46e1eba150256de2bd8e000e7389e50c90c4c970e249835366ad7d4919005e188de86c3ebd240a"}, 0xfffffe00}) 537.371835ms ago: executing program 6 (id=11681): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) 395.022008ms ago: executing program 2 (id=11682): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x3564}, 0x18, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) landlock_restrict_self(r0, 0x8) 320.381195ms ago: executing program 5 (id=11683): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000040), 0x3, 0x573, &(0x7f0000000ac0)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000649, &(0x7f00000001c0)={[{@journal_checksum}, {@grpjquota}, {@user_xattr}, {@delalloc}, {@data_writeback}, {@noblock_validity}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@i_version}, {@dioread_nolock}, {@noload}]}, 0x0, 0x614, &(0x7f00000014c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 319.910474ms ago: executing program 1 (id=11684): socketpair(0x21, 0x2, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad0fff9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000014) 287.785776ms ago: executing program 6 (id=11685): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x4000, &(0x7f0000000040)={[{@codepage={'codepage', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}, 0x9, 0x344, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) 89.142731ms ago: executing program 1 (id=11686): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc10, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="16dc45777b4d2781b4978de5409d8c10d17c5cf74334f9969ee50ffb6833602ce44e7f6b54cc19fdefe0a22e7326578689a68ed690c09e2e72595b1e2285279afda7b8bc99fa10af2291e4e7e805959f036474f522aecaec064f3fafc6490925cc0fb5a56da36099f35717a5afb31fa66c021311ae0bc9f29f66c9d4a6a46fa70c62a0fba469ebc800fa22f3f42e1c95187f95fe350c0bebfd29f60c18b41dfa993e61ed783c3345824da61689621508cf85e777cb92f64ff35295f3580af9b0241d2019f4f68f022f3649db0b800b351fc3eb311d24f005117407b688f400f1fc278c89497720655f52fe62d40158596c3bdcba1991968431b692d3f3b8ccd261b1fb2fb6684829048206587044595ce5c7184d2043a215623524658dd8bd451799ebf2b14efdd400c422cd83b4084aee7bc558e63a868e35c780c5e3b8da971178451de93700e7ae3ce7dae2cc8fade7c0c02b82a5ce39d9ff0c0fc3eb109bf2fff3a0435ebb8c35cd16d525a443403de3b9997cb06c5bf1a3085060669b22cbda4c85b46ddb10c7890df72d1f7340ba1e3768e208c0b26f45b1c259d3ee307cc40f7782b05ff2d22f27b67cfd79b0b00644d7a8b27faafc3e473c57d768162035e8dc19b1815952d4c9eb04e1bd9b5aa569c816c1c390435e8dc835a83da0a2de19ad78e82db2dc45e8f1d0b88467554380b75a3f0a9ca98f893c404b0bce25b8a4a0e7dd85fcd878ba5c500e656669d2637e985d37068594b103e914e3eb9a92dd2f280c82cfac8e0f3cbc718b816e55cd887a17863f3bcc53a9d2b1c3dd07f5e0e8ff3a8a5e4b4f8126cde098fe7e911fb859b8c15e8842dae75b29eaa68a2c383c79a92683d066e54cac4ffce1174ff737d43cf4597244c97e0985d0288ebd4e0d6696ae5c3c93d17b77b7ec25c859b1dd45529c4e6922a7307d55b971e773dbd062f2b7e244532c9ac8ee73f295f1b932264d9d654211dfedff852346bf66abb17b094c720214e3f6ef777dd519334697e7e2a320c01ca870907389cafefaa00d32028ac38b655181f6523e562038dc4eb984d42bdcd35101a6eeb21ea6b731f8f38d858cea50a5129f5653da540c2f7033de2d794f6d6b13664abf89838aeb5875285f673ccf70bd83f44a02ae86c3fb5318129343b3459731bd6288a9fadf17ff9b7de5913a2e27aa2a0a2f19e4b0f97995bfbc15de2274de99b2f9af79c0d520a1e1c5e18f9a4a2bb485cf6da27a587f1cbf88b9f5cc72256a95147b0341a985d111f41e94124d3312d0bfa353153548ec24e423bc59b534514efd9d0e769a14453a4a8a50fd8afc0d03a132a89f5d76312b91e25062ef86d98966f28891fd90e1d9d33358e7049243c6602a79002862e7643d160a65435c8b9948b065b9fb04c3f36ba9cd14d69003b343e935628315f2b5f9083d28ab55e583bb1a2fb05fff1876a65a0489cefe209e6324ea8edaab733882ca318cfde9086d73103ce94821b4387f4d19596ff424e5192eed52021938b9a2c5c997a565c195ede1c7333ce481cbeed82ba5154fb624b7cb2ab139560a3727741a776f72b5f930e8bd8598d7fe929834d03a738343001ccb12f8593358a7665a9393845f0e9f20624bd2a36501eb6b17c83189e4b0ec0369488bbcc10b114cc1713de4fef6efd7b4843b1470d24b7033a5e22795cc4fcc8ebcc6d052d5a4c38c643858b4e6b48ece6ae418069cb4fcf7c79c0f3f82bba0b6e9c06639853b4c18fcd6f08a636b551e788666be1144a1d1e785dcfb49b062a26142fe4ea0115c8d51fd922c4a759bb7c406c575cdd5f94c34d7f099c9d718acd462d7ac9d7db9b83af2885421665ec9cf9c09e3f7e53a96ae277c7467dd86a757d3d12bc5d4f89cf68ae9e27eeee413cffa8504a3fb4408174b8ef8a417b526bd16edc0b8aca8c12a2d4b0402d4ca6efd22a5c7dc9621771a2d17c5c6904d3c172db8760478e106a0e3a1be42cd84a6b76a6e8192bfe436ca501778aa114ea6254626bb77952f1e5c606346463896fd485f8b573ef0a387f098e70f092508bc657db5aa2f8f604e5619c1c148c6ff464f92e671339b855327af640d39b5213149c26434c5256ef1c339c279d59736a3f79245384a7a59e02a490a025a220fa933aece52e2f5675d2b9db92e4a464e7019fb574388eb9cad8bdbf99f30eba74356217df6a15eb749ae245ec9222fc9a13dd1f2b98670b111a03e84cb1a8291d7c9f8fef14735fb45fcf284070eb08eec6052d8941e307ec6b0cd1aed96c2d81a76521078ba9c048230c2a0737b5f32e5d61d1505375f07ac4bf82b6ca265f9b5fdd7ce18ff5e61530417171f323aa08a26604f6daf84c6fb600fd8c6a45cfc71f9b984a63b3585aecd70b6d80e97f316da622aa787656d5bc372b0196afe04c0af82b6958f6665bdfe5f0b9d08390dc641fd55b33cc8c43188c99c05c16491123fa9c53f199af519e6ab0e73ad5a176d03ec276520313d37234d1d7266d8007e2eb454514a973bca1e0f4800f232d793e5481ea19e52290c405233867e17d50a36e94d2ce74b7701e6e390e054beba12276e2819ab9d567ee6be64e184c3e5b361a40b77f4d288ade890c8e83770a0095e30b61035e807e3cbd9eecdb87152ef2f5fa178a67bbecfc342f9646331799c203bc8de4db3e9385a215c694b940c0747aec9b283f018419ed34c4cd3012ec95106bac5fd3af50f7b818c7efdb9e2f75ef78c1442a820bc8549f256b48870cb6c7ebe27a2803d9df95c685bf0c3bdb12dc723e3542f2797880f76b2ee356d01e25449922bb1de7feb1625d22d567625f4f974592c1ece64142a87dfd2450b497cad2b57fffed0c069fd24b884fb013db32aa79efb4f4f9a97869364abfcd649deb90c9242ed1e2c63061e5226faee3c119af34d31ffa17f2601137b4c7d5d259d1d5b81c86d9e9fb04af0c99676f003d58ba2ee3f1a8f19b8a8383978bb67dd46a7dd55f24eb3b2f7f293220a4719d4b72d8399059d4632808507381406e16ceb86a22a63422949abbde229500b75cfbe9e326a3c05fd975db8ea7f9915354ad83a6750233402b87f229f67cf64d8f8c150f802fbf97ff102ff889b2e8ca5434a368caa45c06ed1899f3789188ca2e61e7cf679c4a6026d5f9acfe3bb23a894ce42cd5a425bdb7290b37b1917e7eb6ad8b16c49f08d04e2960235570dcee19c86436724def21a2e74edf02c3bceb604030154668d84ac9e3020d632507812dba0ded12e0468aa130c479ffd63afbc86cc944e9bf9a7ab1d8b6fa3268b34c12f3a664e3016f5302a49c307d4e0de8f9dce625d741cbe87854bbfbd9e24aee3f4effcf1c2207c51b266d61b9e12793995919af827ed2d18d1c140f38554e1dafe1dd6cf21ec2faa8785b30b864fe911185539b38a75db430f2d3b9d36e80a1d9c3ee7b7de079283e456c1996f427fc897eee3b25c23abe2eb49480bd7d76f6e362978602eeb02dd4acaf0cd410c817bd5a2ebaf32260490311483039bbb9229c322e75b442caddf5c8ebb031a77c72af04398f5514b5a9d7946dc004f1a46b03d7193776a83e69d7f6323813311efc63f941258a9ccffae9f786743a5b4ab9a2282c228f6e6ca21a5fa997bc7f50e293fa3c3c1255e2c00332383fa8d33d0b09fda16277a4cd7269633b141d17d0259b529afc07a4ee45a4454d1a2d91aeb270c4af9ba5c72ec7ef0836f78429925ec971e979bec126f16e939fa3ac69be9c3174f9e2d3a150c5a7cd7e0921980421eec98102300208daed089982f5704ad0fae36b0bb7cf8147af4591e0533acd90ef228e1d5f7f897ac3c8d8efb112aa95c0f3fcb39a4aad65edadddc6a151ef0432664ac1166cb31345ed0d228e147eded675c451612744f4d3ceff6ad53a63061e761545197492a453d15793a9d2fad11032aaae919864e131d9ce643cfb3f23f728e6a95726403d79f7fecbeafbfb633117620bd9d693ad1383eb0f05c325692b99f793bed9de8388140c97c36ea9ea2f782711e0381399f91e79e9c11751e3b8950465f180751b9bd9969084fa05e9fe0f890d39f6c6813cf3144fddea7d0f02a0d9f5f47e01f8baf115aa1c8baac008c75efc6a055bd832331d9f89d76586f8fac9e3926e2c029e6eb7b061e4d41725853e6403af650b7f793906d1036934add119325d73a7f9ac5b316bc29e290cdfdef1aa3f6734a4a1312a82c0e8b643feeaa37f327d2c3a8201bd062bff7f9ef60fc33cefd9575b8b912db5878cb590643a10fcf8beeb85e7a778d2d965ec4cd9fcf1933592acc0f9bffafe97d1cf845ffe7dd070cc469395c65a7bd1b3f212968eaee988074414ea1904c2ecb303b8bd6fd2553e3a1fa6ce5bc424bacef5b19b4a0fabd689a7d45c73d44e4f4fd158ee69078c26a5e1fb3e66de7edb758265cac1dc7b1e3fea5d11de01a9c193f669e33f351399f9e1b088b3675e9b18a42f372ed3695451202c585488d2197d6e3eba44f361524cd56f0a6a62b662b6e27f749a6d31886fe08575d972d4c8421a7f69b0813618f1e51950bc8366987fb5ea095d6ccef98c4b8701d352b59564fce27eb958b07b6658a33830d4d6fc8f74e7b8e8dd87208332c408000adeae20215e588712034ee8a4446415241335c25da083cf45c8cc7a068acb8997dc0da6f6cb7f681a4102cf1d6089c29fac11427790884cb2181b2e323431738d0bddc0c83478e14fc5563b2a99f1e74b82e75b91ea2e71b1338c833ef365bdc6996f1dc50437b09f2920692e0ba5b4178e114a20e18b991799148b8713c50ccb1b7a1aa9798ea17b23a15e7d544500a9fca5bd072771454b1eea3da6f54473b27d21c071cfb93ec2823332e4b83054fc4c30c3679db6d156e3a975e6ce7d745433ddc4aa9b0489005eb20d8b7c6f1c6a07dece3c087ef2bdbb3cdf83220c750c5141158ec89ad343614d0b74f678177d7f313024f5a9cdb5b2c5d73e8ad645c05ebe52066dd282dc6fe55c95c122bfb07cc3724746e396fb15a2a3f423bdad2c05169f070b71acf1934c6463b2e60cf55a7a36a3c6aa710259a83763bea1b4556094c786668b3bbbf4854758b435ee89a90b4d5fbe343c1e2faebd96b63b1facd31f9cfbf6144f7eb9f2680916aaee809fff4b6aaf012943c4cbcd3a17bba0a2af5fe0de70e0097988555b1f2cea2f78acdf7c2d4ff83d8af33ae573577d49d386afb965c48743aa895909d4655108986d3c17721d09c8ea990beb07412c04934b9c121c55f6be5d7d899b6115255bf33fa9502a656ce1042e9eac6a9d5a60c63babc5281f47b40657a51e900bd563d3a779e534b5f76e4ca7c26d27dd5af0e996ecaf6edf4aad3f180f9b3648f538fc331590d17b083fb464dfc5d21baa959478bedde1a0f764cd041797bd54e04103b484dc790068ee6bfb2f87fb758638b28abf6719228003218db000da9bff768b41f009af4f5f58b2ec87b80b60b430cd27d92cabb845463f5d1852f20adb6f32d2957d4d7fb55a083b33f8f2d4a032ba9e46f616da071b7a4693d93dc3ea5b4cb3f1c78156bda21194a6879f50a0773b566d97a0962147f2e13e558f754ec8dcbae2319394464877370c880d4a2317a2078b012bb9cda8f20b0239e6bcf54382a485cd03a7ff0e47720910bf3611e0777d4a42c9b906d804a58d0bf0bf9df46d6be8a2eca96492c2f0955c13d47f97e0f567fbb4fdf4b9e07feaa7255822574d2a5a443d25b09180d88de659b3cd496cca07b03be604189e76725b423128049d6346ead660a", @ANYRES32, @ANYRES64, @ANYRES64], 0x3, 0x305, &(0x7f0000001600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 59.098018ms ago: executing program 2 (id=11687): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 0s ago: executing program 6 (id=11688): r0 = msgget$private(0x0, 0x3ac) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x4800) kernel console output (not intermixed with test programs): 860][T30422] BTRFS info (device loop5): enabling free space tree [ 757.711877][T30422] BTRFS info (device loop5): enabling auto defrag [ 757.711906][T30422] BTRFS info (device loop5): use lzo compression, level 1 [ 757.711928][T30422] BTRFS info (device loop5): max_inline set to 4096 [ 757.818197][T30465] netlink: 'syz.3.10885': attribute type 29 has an invalid length. [ 757.819266][T30465] netlink: 'syz.3.10885': attribute type 29 has an invalid length. [ 758.098536][T13994] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 758.129440][T30471] loop2: detected capacity change from 0 to 8192 [ 758.155914][T30471] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 758.218336][ T32] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 758.243966][T30480] ip_tables: iptables: counters copy to user failed while replacing table [ 758.365208][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 758.366058][ T32] usb 4-1: New USB device found: idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 758.367344][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.370107][ T32] usb 4-1: config 0 descriptor?? [ 758.404391][ T32] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 758.814675][T30492] loop5: detected capacity change from 0 to 512 [ 758.821206][T30492] EXT4-fs: Ignoring removed bh option [ 758.836310][T30492] EXT4-fs (loop5): Test dummy encryption mode enabled [ 758.858907][T30492] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.10898: corrupted in-inode xattr: invalid ea_ino [ 758.858946][T30492] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 758.861011][T30492] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.10898: couldn't read orphan inode 15 (err -117) [ 758.861046][T30492] loop5: lost filesystem error report for type 5 error -117 [ 758.869448][T30492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 758.986480][ T32] gspca_vc032x: reg_w err -71 [ 758.986503][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986517][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986528][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986539][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986550][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986561][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986572][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986583][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986594][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986605][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986616][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986627][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986638][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986648][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986658][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986669][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986679][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986690][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 758.986719][ T32] gspca_vc032x: Unknown sensor... [ 758.986800][ T32] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 758.990829][ T32] usb 4-1: USB disconnect, device number 50 [ 759.278911][T13994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.796211][T30533] [U] ¥ [ 759.796263][T30533] [U] [ 759.796307][T30533] [U] [ 759.796360][T30533] [U] [ 759.796411][T30533] [U] [ 759.796455][T30533] [U] [ 759.796497][T30533] [U] [ 759.796540][T30533] [U] [ 759.796597][T30533] [U] [ 759.796639][T30533] [U] [ 759.796682][T30533] [U] [ 759.796724][T30533] [U] [ 759.796795][T30533] [U] [ 759.796839][T30533] [U] [ 759.796880][T30533] [U] [ 759.796923][T30533] [U] [ 759.796968][T30533] [U] [ 759.797010][T30533] [U] [ 759.797051][T30533] [U] [ 759.797092][T30533] [U] [ 759.797151][T30533] [U] [ 759.797193][T30533] [U] [ 759.797234][T30533] [U] [ 759.797278][T30533] [U] [ 759.797324][T30533] [U] [ 759.797374][T30533] [U] [ 759.797417][T30533] [U] [ 759.797460][T30533] [U] [ 759.797518][T30533] [U] [ 759.797559][T30533] [U] [ 759.797601][T30533] [U] [ 759.797642][T30533] [U] [ 759.797771][T30533] [U] [ 759.797820][T30533] [U] [ 759.797861][T30533] [U] [ 759.797903][T30533] [U] [ 759.797975][T30533] [U] [ 759.798018][T30533] [U] [ 759.798061][T30533] [U] [ 759.798102][T30533] [U] [ 759.798149][T30533] [U] [ 759.798190][T30533] [U] [ 759.798230][T30533] [U] [ 759.798270][T30533] [U] [ 759.798327][T30533] [U] [ 759.798377][T30533] [U] [ 759.798420][T30533] [U] [ 759.798464][T30533] [U] [ 759.798510][T30533] [U] [ 759.798553][T30533] [U] [ 759.798593][T30533] [U] [ 759.798635][T30533] [U] [ 759.798693][T30533] [U] [ 759.798736][T30533] [U] [ 759.798777][T30533] [U] [ 759.798819][T30533] [U] [ 759.798864][T30533] [U] [ 759.798906][T30533] [U] [ 759.798947][T30533] [U] [ 759.798987][T30533] [U] [ 759.972643][T30533] [U] [ 759.972693][T30533] [U] [ 759.972738][T30533] [U] [ 759.972781][T30533] [U] [ 759.972827][T30533] [U] [ 759.972869][T30533] [U] [ 759.972912][T30533] [U] [ 759.972954][T30533] [U] [ 759.973013][T30533] [U] [ 759.973054][T30533] [U] [ 759.973095][T30533] [U] [ 759.973138][T30533] [U] [ 759.973183][T30533] [U] [ 759.973223][T30533] [U] [ 759.973266][T30533] [U] [ 759.973308][T30533] [U] [ 759.973373][T30533] [U] [ 759.973418][T30533] [U] [ 759.973460][T30533] [U] [ 759.973503][T30533] [U] [ 759.973550][T30533] [U] [ 759.973592][T30533] [U] [ 759.973635][T30533] [U] [ 759.973677][T30533] [U] [ 759.973735][T30533] [U] [ 759.973777][T30533] [U] [ 759.973818][T30533] [U] [ 759.973862][T30533] [U] [ 759.973909][T30533] [U] [ 759.973949][T30533] [U] [ 759.973992][T30533] [U] [ 759.974033][T30533] [U] [ 759.974090][T30533] [U] [ 759.974132][T30533] [U] [ 759.974176][T30533] [U] [ 759.974215][T30533] [U] [ 759.974261][T30533] [U] [ 759.974303][T30533] [U] [ 759.974352][T30533] [U] [ 759.974393][T30533] [U] [ 759.974452][T30533] [U] [ 759.974494][T30533] [U] [ 759.974534][T30533] [U] [ 759.974576][T30533] [U] [ 759.974622][T30533] [U] [ 759.974666][T30533] [U] [ 759.974708][T30533] [U] [ 759.974749][T30533] [U] [ 759.974806][T30533] [U] [ 759.974848][T30533] [U] [ 759.974890][T30533] [U] [ 759.974930][T30533] [U] [ 759.974974][T30533] [U] [ 759.975016][T30533] [U] [ 759.975057][T30533] [U] [ 759.975099][T30533] [U] [ 759.991851][T30533] [U] [ 759.991896][T30533] [U] [ 759.991935][T30533] [U] [ 759.991973][T30533] [U] [ 759.992020][T30533] [U] [ 759.992060][T30533] [U] [ 759.992102][T30533] [U] [ 759.992141][T30533] [U] [ 759.992186][T30533] [U] [ 759.992225][T30533] [U] [ 759.992267][T30533] [U] [ 760.174388][T30531] [U] [ 760.324663][T30547] loop4: detected capacity change from 0 to 256 [ 760.335750][T30547] exfat: Deprecated parameter 'namecase' [ 760.335835][T30547] exfat: Deprecated parameter 'utf8' [ 760.384345][T30549] loop2: detected capacity change from 0 to 256 [ 760.404806][T30547] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 760.714577][T30561] macvlan0: entered promiscuous mode [ 760.815339][ T32] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 760.819309][T30565] vlan2: entered promiscuous mode [ 760.819332][T30565] dummy0: entered promiscuous mode [ 760.970412][ T32] usb 6-1: unable to get BOS descriptor or descriptor too short [ 760.970468][ T32] usb 6-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 760.973983][ T32] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 760.974011][ T32] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 761.023096][ T32] usb 6-1: string descriptor 0 read error: -22 [ 761.023271][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.050684][ T32] usb 6-1: selecting invalid altsetting 1 [ 761.051595][ T32] usb 6-1: unit 6 not found! [ 761.404769][ T33] audit: type=1326 audit(2000000180.160:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30590 comm="syz.1.10945" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fef9fb19 code=0x7ffc0000 [ 761.404833][ T33] audit: type=1326 audit(2000000180.160:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30590 comm="syz.1.10945" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fef9fb19 code=0x7ffc0000 [ 761.458280][ T33] audit: type=1326 audit(2000000180.200:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30590 comm="syz.1.10945" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7ff4fef9fb19 code=0x7ffc0000 [ 761.458343][ T33] audit: type=1326 audit(2000000180.200:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30590 comm="syz.1.10945" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fef9fb19 code=0x7ffc0000 [ 761.458420][ T33] audit: type=1326 audit(2000000180.200:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30590 comm="syz.1.10945" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fef9fb19 code=0x7ffc0000 [ 761.635648][ T1226] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 761.714931][ T32] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 761.790297][ T6329] udevd[6329]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 761.792120][ T32] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 761.820525][ T1226] usb 3-1: Using ep0 maxpacket: 8 [ 761.821359][ T1226] usb 3-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 761.821550][ T32] usb 6-1: USB disconnect, device number 26 [ 761.824541][ T1226] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.824577][ T1226] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 761.824639][ T1226] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.824680][ T1226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.899456][ T1226] hub 3-1:1.0: bad descriptor, ignoring hub [ 761.899486][ T1226] hub 3-1:1.0: probe with driver hub failed with error -5 [ 761.900099][ T1226] cdc_wdm 3-1:1.0: skipping garbage [ 761.900116][ T1226] cdc_wdm 3-1:1.0: skipping garbage [ 761.900200][ T1226] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 762.060880][T30606] 0ªX¹¦Dö»: entered promiscuous mode [ 762.061151][T30606] macvlan2: entered promiscuous mode [ 762.064383][T30606] 0ªX¹¦Dö»: left promiscuous mode [ 762.270092][T27257] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 762.415265][T27257] usb 5-1: Using ep0 maxpacket: 16 [ 762.416138][T27257] usb 5-1: New USB device found: idVendor=0810, idProduct=0001, bcdDevice=0.00 [ 762.417399][T27257] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.417431][T27257] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 762.417460][T27257] usb 5-1: config 0 interface 0 has no altsetting 0 [ 762.417496][T27257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.424409][T27257] usb 5-1: config 0 descriptor?? [ 762.621880][T27267] usb 3-1: reset high-speed USB device number 49 using dummy_hcd [ 762.920124][T27257] pantherlord 0003:0810:0001.0008: unknown main item tag 0x0 [ 762.920165][T27257] pantherlord 0003:0810:0001.0008: unknown main item tag 0x0 [ 762.920196][T27257] pantherlord 0003:0810:0001.0008: unknown main item tag 0x0 [ 762.920226][T27257] pantherlord 0003:0810:0001.0008: unknown main item tag 0x0 [ 762.920256][T27257] pantherlord 0003:0810:0001.0008: unknown main item tag 0x0 [ 762.920285][T27257] pantherlord 0003:0810:0001.0008: unknown main item tag 0x0 [ 762.920314][T27257] pantherlord 0003:0810:0001.0008: unknown main item tag 0x0 [ 762.920353][T27257] pantherlord 0003:0810:0001.0008: unknown main item tag 0x0 [ 762.920382][T27257] pantherlord 0003:0810:0001.0008: unknown main item tag 0x0 [ 762.920411][T27257] pantherlord 0003:0810:0001.0008: unknown main item tag 0x0 [ 762.920441][T27257] pantherlord 0003:0810:0001.0008: unbalanced collection at end of report description [ 762.921193][T27257] pantherlord 0003:0810:0001.0008: parse failed [ 762.921270][T27257] pantherlord 0003:0810:0001.0008: probe with driver pantherlord failed with error -22 [ 763.095042][T27257] usb 5-1: USB disconnect, device number 36 [ 763.182032][T27267] usb 3-1: USB disconnect, device number 49 [ 763.279390][T30628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10962'. [ 763.279417][T30628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10962'. [ 763.279445][T30628] netlink: 'syz.5.10962': attribute type 19 has an invalid length. [ 763.279461][T30628] netlink: 'syz.5.10962': attribute type 20 has an invalid length. [ 763.346381][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.346716][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.346758][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.346796][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.789860][T30638] loop3: detected capacity change from 0 to 32768 [ 763.801898][T30638] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.10967 (30638) [ 763.824589][T30638] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 763.824623][T30638] BTRFS info (device loop3): using sha256 checksum algorithm [ 763.844419][T30645] loop1: detected capacity change from 0 to 2048 [ 763.869890][T30645] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 763.959155][T30638] BTRFS info (device loop3): rebuilding free space tree [ 764.245347][T27257] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 764.299262][T30638] BTRFS info (device loop3): enabling ssd optimizations [ 764.299300][T30638] BTRFS info (device loop3): using spread ssd allocation scheme [ 764.299321][T30638] BTRFS info (device loop3): turning on async discard [ 764.299340][T30638] BTRFS info (device loop3): enabling free space tree [ 764.299358][T30638] BTRFS info (device loop3): force clearing of disk cache [ 764.301352][T30673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10977'. [ 764.356084][T30638] BTRFS info (device loop3): Snapshot src from another FS [ 764.399182][T27257] usb 5-1: New USB device found: idVendor=1020, idProduct=0006, bcdDevice=0.00 [ 764.402137][T27257] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 764.402162][T27257] usb 5-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 764.402182][T27257] usb 5-1: config 0 interface 0 has no altsetting 0 [ 764.402207][T27257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.423411][T27257] usb 5-1: config 0 descriptor?? [ 764.462503][T30663] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 764.480481][ T5644] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 764.934952][T27257] belkin 0003:1020:0006.0009: ignoring exceeding usage max [ 764.998203][T27257] belkin 0003:1020:0006.0009: hidraw0: USB HID v0.11 Joystick [HID 1020:0006] on usb-dummy_hcd.4-1/input0 [ 765.109345][T30692] raw_sendmsg: syz.1.10986 forgot to set AF_INET. Fix it! [ 765.192485][ T32] usb 5-1: USB disconnect, device number 37 [ 765.733347][T30690] loop3: detected capacity change from 0 to 32768 [ 765.745726][T30690] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.10985 (30690) [ 765.771264][T30690] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 765.771301][T30690] BTRFS info (device loop3): using crc32c checksum algorithm [ 765.820901][T30711] loop5: detected capacity change from 0 to 4096 [ 765.841739][T30711] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 765.893968][T30690] BTRFS info (device loop3): enabling ssd optimizations [ 765.893997][T30690] BTRFS info (device loop3): turning on flush-on-commit [ 765.894016][T30690] BTRFS info (device loop3): enabling free space tree [ 765.894033][T30690] BTRFS info (device loop3): enabling auto defrag [ 765.894052][T30690] BTRFS info (device loop3): use lzo compression, level 1 [ 765.894074][T30690] BTRFS info (device loop3): max_inline set to 4096 [ 766.016203][T30711] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 766.177242][ T5644] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 766.406535][T30743] loop4: detected capacity change from 0 to 512 [ 766.409872][T30734] loop2: detected capacity change from 0 to 4096 [ 766.456651][T30743] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 766.456789][T30743] System zones: 1-12 [ 766.531453][T30734] ntfs3(loop2): ino=19, mi_enum_attr [ 766.531488][T30734] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 766.575063][T30743] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.11003: missing EA_INODE flag [ 766.575184][T30743] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 766.587272][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 766.587301][ C1] EXT4-fs (loop4): initial error at time 2000000185: ext4_xattr_inode_iget:437: inode 12 [ 766.587338][ C1] EXT4-fs (loop4): last error at time 2000000185: ext4_xattr_inode_iget:437: inode 12 [ 766.606134][T30743] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.11003: error while reading EA inode 12 err=-117 [ 766.606236][T30743] loop4: lost filesystem error report for type 5 error -117 [ 766.609388][T30743] EXT4-fs (loop4): 1 orphan inode deleted [ 766.621395][T30743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.921761][ T5642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.017322][T30755] loop5: detected capacity change from 0 to 1024 [ 767.062447][T30755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.091657][T30755] EXT4-fs error (device loop5): ext4_get_first_dir_block:3563: inode #11: comm syz.5.11009: directory missing '..' [ 767.259150][T13994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.445267][ T32] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 767.503806][T30773] loop4: detected capacity change from 0 to 512 [ 767.552424][T30773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 767.601465][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 767.601521][ T32] usb 4-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40 [ 767.603248][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.603274][ T32] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 767.603322][ T32] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 767.603367][ T32] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 767.603409][ T32] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 767.603438][ T32] usb 4-1: config 1 interface 1 has no altsetting 0 [ 767.694510][ T32] usb 4-1: string descriptor 0 read error: -22 [ 767.694653][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.776929][ T5642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.870495][T30778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11016'. [ 767.949872][T30780] sctp: [Deprecated]: syz.4.11018 (pid 30780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 767.949872][T30780] Use struct sctp_sack_info instead [ 768.235928][T30786] loop4: detected capacity change from 0 to 4096 [ 768.240959][T30786] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 768.326221][T27257] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 768.344971][ T32] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 768.369185][T30786] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 768.445616][ T32] usb 4-1: USB disconnect, device number 51 [ 768.478638][T27257] usb 3-1: Using ep0 maxpacket: 32 [ 768.484814][T27257] usb 3-1: New USB device found: idVendor=06cb, idProduct=73f5, bcdDevice=0.00 [ 768.508358][T27257] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.508398][T27257] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 768.508427][T27257] usb 3-1: config 0 interface 0 has no altsetting 0 [ 768.508462][T27257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.537219][T27257] usb 3-1: config 0 descriptor?? [ 768.969773][T30801] loop4: detected capacity change from 0 to 512 [ 768.985795][T30801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 768.987173][T27257] hid (null): bogus close delimiter [ 769.022016][T27257] itetech 0003:06CB:73F5.000A: bogus close delimiter [ 769.022042][T27257] itetech 0003:06CB:73F5.000A: item 0 0 2 10 parsing failed [ 769.025938][T30801] EXT4-fs (loop4): orphan cleanup on readonly fs [ 769.026084][T30801] EXT4-fs warning (device loop4): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 769.026117][T30801] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 769.026134][T30801] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.11028: bad orphan inode 768 [ 769.026160][T30801] loop4: lost filesystem error report for type 5 error -117 [ 769.028675][T27257] itetech 0003:06CB:73F5.000A: probe with driver itetech failed with error -22 [ 769.042096][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 769.042120][ C1] EXT4-fs (loop4): initial error at time 2000000187: ext4_orphan_get:1430 [ 769.042148][ C1] EXT4-fs (loop4): last error at time 2000000187: ext4_orphan_get:1430 [ 769.106470][T30801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 769.228648][ T32] usb 3-1: USB disconnect, device number 50 [ 769.260469][T30801] EXT4-fs: Ignoring sb option on remount [ 769.260647][T30801] EXT4-fs (loop4): can't disable delalloc during remount [ 769.341057][ T5642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.665823][ T1226] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 769.699698][T30825] loop3: detected capacity change from 0 to 512 [ 769.825380][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 769.843361][ T1226] usb 5-1: Using ep0 maxpacket: 32 [ 769.844213][ T1226] usb 5-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 769.862340][T30829] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11050'. [ 769.883690][ T1226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.883720][ T1226] usb 5-1: Product: syz [ 769.883738][ T1226] usb 5-1: Manufacturer: syz [ 769.883754][ T1226] usb 5-1: SerialNumber: syz [ 769.912128][ T1226] usb 5-1: config 0 descriptor?? [ 769.924070][ T1226] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 769.924306][ T1226] dvb-usb: bulk message failed: -22 (4/0) [ 769.924326][ T1226] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 769.924456][ T1226] dvb-usb: bulk message failed: -22 (5/0) [ 769.924472][ T1226] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 769.968146][ T1226] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 769.969417][ T1226] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 769.969475][ T1226] usb 5-1: media controller created [ 770.006161][ T1226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 770.039480][ T1226] usb 5-1: selecting invalid altsetting 3 [ 770.039503][ T1226] ttusb2: set interface to alts=3 failed [ 770.092720][ T1226] DVB: Unable to find symbol tda10086_attach() [ 770.092739][ T1226] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 770.093681][ T1226] dvb-usb: bulk message failed: -22 (4/0) [ 770.093702][ T1226] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 770.093832][ T1226] dvb-usb: bulk message failed: -22 (5/0) [ 770.093850][ T1226] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 770.093922][ T1226] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 770.246469][T27257] usb 5-1: USB disconnect, device number 38 [ 770.375826][T27257] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 770.538606][T30844] loop5: detected capacity change from 0 to 256 [ 771.014543][T30858] use of bytesused == 0 is deprecated and will be removed in the future, [ 771.014564][T30858] use the actual size instead. [ 771.403278][T30873] loop4: detected capacity change from 0 to 512 [ 771.418766][T30873] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 771.418786][T30873] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 771.457878][T30873] EXT4-fs (loop4): 1 truncate cleaned up [ 771.476827][T30873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.651892][ T5642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.681766][T30852] loop3: detected capacity change from 0 to 32768 [ 771.698313][T30852] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.11049 (30852) [ 771.721967][T30852] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 771.722002][T30852] BTRFS info (device loop3): using blake2b checksum algorithm [ 771.865901][T30852] BTRFS info (device loop3): enabling ssd optimizations [ 771.865930][T30852] BTRFS info (device loop3): turning on async discard [ 771.865950][T30852] BTRFS info (device loop3): enabling free space tree [ 772.063532][T30905] Bluetooth: hci0: unsupported parameter 5135 [ 772.063557][T30905] Bluetooth: hci0: unsupported parameter 8192 [ 772.063573][T30905] Bluetooth: hci0: unsupported parameter 5135 [ 772.063587][T30905] Bluetooth: hci0: unsupported parameter 8192 [ 772.148882][ T5644] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 772.262743][T30911] tipc: Enabling of bearer rejected, failed to enable media [ 772.964480][T27257] bridge0: entered promiscuous mode [ 773.154455][T30945] device-mapper: ioctl: Geometry exceeds range limits. [ 773.190700][T30948] CUSE: unknown device info "€" [ 773.190718][T30948] CUSE: unknown device info "Ö" [ 773.190729][T30948] CUSE: unknown device info "" [ 773.190739][T30948] CUSE: unknown device info "€" [ 773.190749][T30948] CUSE: unknown device info "ðÿÿÿ" [ 773.190760][T30948] CUSE: unknown device info "" [ 773.190769][T30948] CUSE: unknown device info "" [ 773.190780][T30948] CUSE: unknown device info "" [ 773.190789][T30948] CUSE: unknown device info "" [ 773.190810][T30948] CUSE: zero length info key specified [ 773.235989][T30949] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 773.314535][T30932] loop2: detected capacity change from 0 to 32768 [ 773.362615][T30932] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 773.383604][T30932] JBD2: Ignoring recovery information on journal [ 773.498571][T30932] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 773.629162][T30965] loop4: detected capacity change from 0 to 1024 [ 773.630644][ T5641] ocfs2: Unmounting device (7,2) on (node local) [ 773.644033][T30965] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 773.697196][T30965] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #3: block 2: comm syz.4.11095: lblock 2 mapped to illegal pblock 2 (length 1) [ 773.697241][T30965] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 773.697503][T30965] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 773.697547][T30965] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #3: block 48: comm syz.4.11095: lblock 0 mapped to illegal pblock 48 (length 1) [ 773.697580][T30965] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 773.699008][T30965] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 773.699033][T30965] EXT4-fs error (device loop4): ext4_acquire_dquot:7120: comm syz.4.11095: Failed to acquire dquot type 0 [ 773.699059][T30965] loop4: lost filesystem error report for type 5 error -117 [ 773.701148][T30965] EXT4-fs error (device loop4) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 773.701174][T30965] loop4: lost filesystem error report for type 5 error -117 [ 773.705182][ C0] EXT4-fs (loop4): error count since last fsck: 4 [ 773.705202][ C0] EXT4-fs (loop4): initial error at time 2000000192: ext4_map_blocks:867: inode 3: block 2 [ 773.705235][ C0] EXT4-fs (loop4): last error at time 2000000192: ext4_reserve_inode_write:7459 [ 773.706407][T30965] EXT4-fs error (device loop4): ext4_evict_inode:336: inode #11: comm syz.4.11095: mark_inode_dirty error [ 773.706436][T30965] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 773.707888][T30965] EXT4-fs warning (device loop4): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 773.707978][T30965] EXT4-fs (loop4): 1 orphan inode deleted [ 773.718513][ T474] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 773.718616][ T474] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 773.721351][T30965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 773.783865][ T474] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 773.783987][ T474] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:7: Failed to release dquot type 0 [ 774.039337][T30965] EXT4-fs: Ignoring removed bh option [ 774.039463][T30965] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 774.062841][T30965] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #3: block 48: comm syz.4.11095: lblock 0 mapped to illegal pblock 48 (length 1) [ 774.084178][T30965] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 774.197947][T30980] loop1: detected capacity change from 0 to 512 [ 774.260627][ T5642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.271431][T30980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.277242][T30980] ext4 filesystem being mounted at /2204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 774.336526][T30980] EXT4-fs error (device loop1): ext4_resize_begin:60: comm syz.1.11106: resize_inode disabled but reserved GDT blocks non-zero [ 774.468386][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.529558][T30988] netlink: 'syz.4.11107': attribute type 1 has an invalid length. [ 774.529616][T30988] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11107'. [ 774.529656][T30988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11107'. [ 774.981859][T31005] loop4: detected capacity change from 0 to 4096 [ 775.004690][T31005] ntfs3(loop4): ino=0, mi_enum_attr [ 775.069142][T31005] ntfs3(loop4): ino=0, mi_enum_attr [ 775.069179][T31005] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 775.069725][T31005] ntfs3(loop4): ino=0, mi_enum_attr [ 775.757335][T31002] loop1: detected capacity change from 0 to 32768 [ 775.796927][T31002] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 775.853332][T31002] XFS (loop1): Ending clean mount [ 775.872763][T30978] loop5: detected capacity change from 0 to 65536 [ 775.922781][T30978] XFS (loop5): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 775.987306][T30978] XFS (loop5): Ending clean mount [ 776.122615][ T5643] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 776.141485][T13994] XFS (loop5): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 776.447248][T31044] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 776.949499][T31042] loop2: detected capacity change from 0 to 32768 [ 777.003880][T31042] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 777.023622][T31042] JBD2: Ignoring recovery information on journal [ 777.127150][T31042] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 777.543756][ T5641] ocfs2: Unmounting device (7,2) on (node local) [ 777.686759][T31051] loop4: detected capacity change from 0 to 40427 [ 777.711827][T31051] F2FS-fs (loop4): invalid crc value [ 777.932024][T31051] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 777.991064][T31051] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 777.991099][T31051] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 777.991128][T31051] F2FS-fs (loop4): Start checkpoint disabled! [ 778.062558][T31051] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 778.077792][T31051] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 778.208815][ T474] kworker/u8:7: attempt to access beyond end of device [ 778.208815][ T474] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 778.208913][ T474] CPU: 1 UID: 0 PID: 474 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.208946][ T474] Tainted: [L]=SOFTLOCKUP [ 778.208955][ T474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 778.208975][ T474] Workqueue: writeback wb_workfn (flush-7:4) [ 778.209063][ T474] Call Trace: [ 778.209074][ T474] [ 778.209085][ T474] dump_stack_lvl+0xe8/0x150 [ 778.209127][ T474] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 778.209162][ T474] f2fs_write_end_bio+0xf7d/0x1310 [ 778.209220][ T474] __submit_merged_bio+0x258/0x6a0 [ 778.209247][ T474] ? rcu_is_watching+0x16/0xb0 [ 778.209291][ T474] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 778.209322][ T474] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 778.209379][ T474] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 778.209415][ T474] ? __dev_queue_xmit+0x14d1/0x3920 [ 778.209524][ T474] ? ip6_output+0x337/0x540 [ 778.209589][ T474] ? ndisc_send_skb+0xcb2/0x1650 [ 778.209646][ T474] ? ndisc_solicit+0x374/0x670 [ 778.209679][ T474] ? wg_packet_handshake_send_worker+0x204/0x370 [ 778.209807][ T474] ? kasan_quarantine_put+0xbb/0x1f0 [ 778.209842][ T474] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 778.209945][ T474] ? lock_release+0x4b/0x3c0 [ 778.209974][ T474] ? unwind_next_frame+0x1baf/0x2550 [ 778.210005][ T474] ? deref_stack_reg+0x18e/0x220 [ 778.210043][ T474] ? unwind_next_frame+0x1baf/0x2550 [ 778.210090][ T474] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 778.210122][ T474] ? arch_stack_walk+0x11b/0x150 [ 778.210160][ T474] ? ret_from_fork_asm+0x1a/0x30 [ 778.210204][ T474] ? stack_trace_save+0xa9/0x100 [ 778.210231][ T474] ? __pfx_stack_trace_save+0x10/0x10 [ 778.210266][ T474] ? check_path+0x21/0x40 [ 778.210296][ T474] ? check_noncircular+0xdb/0x150 [ 778.210339][ T474] ? look_up_lock_class+0x57/0x110 [ 778.210372][ T474] ? register_lock_class+0x31/0x2e0 [ 778.210408][ T474] ? __lock_acquire+0x747/0x2de0 [ 778.210443][ T474] ? __lock_acquire+0x747/0x2de0 [ 778.210488][ T474] ? __lock_acquire+0x747/0x2de0 [ 778.210543][ T474] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 778.210578][ T474] do_writepages+0x338/0x560 [ 778.210608][ T474] ? __lock_acquire+0x747/0x2de0 [ 778.210640][ T474] ? reacquire_held_locks+0x117/0x1a0 [ 778.210671][ T474] ? writeback_sb_inodes+0x450/0x1af0 [ 778.210707][ T474] __writeback_single_inode+0x136/0x1220 [ 778.210742][ T474] ? do_raw_spin_unlock+0xf5/0x200 [ 778.210771][ T474] writeback_sb_inodes+0x9de/0x1af0 [ 778.210801][ T474] ? __lock_acquire+0x747/0x2de0 [ 778.210861][ T474] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 778.210954][ T474] ? rcu_is_watching+0x16/0xb0 [ 778.210990][ T474] ? queue_io+0x2d3/0x470 [ 778.211026][ T474] wb_writeback+0x41c/0xad0 [ 778.211060][ T474] ? queue_io+0x211/0x470 [ 778.211099][ T474] ? __pfx_wb_writeback+0x10/0x10 [ 778.211127][ T474] ? do_raw_spin_lock+0x12b/0x2f0 [ 778.211174][ T474] wb_workfn+0x431/0x10f0 [ 778.211225][ T474] ? __pfx_wb_workfn+0x10/0x10 [ 778.211257][ T474] ? trace_hrtimer_start+0x82/0x200 [ 778.211293][ T474] ? do_raw_spin_lock+0x12b/0x2f0 [ 778.211329][ T474] ? lock_acquire+0x115/0x350 [ 778.211370][ T474] ? rcu_is_watching+0x16/0xb0 [ 778.211407][ T474] ? process_scheduled_works+0x97a/0x1630 [ 778.211443][ T474] process_scheduled_works+0xc3d/0x1630 [ 778.211520][ T474] ? __pfx_process_scheduled_works+0x10/0x10 [ 778.211564][ T474] ? assign_work+0x3cf/0x5d0 [ 778.211625][ T474] worker_thread+0xa47/0xfb0 [ 778.211687][ T474] kthread+0x38b/0x480 [ 778.211716][ T474] ? __pfx_worker_thread+0x10/0x10 [ 778.211737][ T474] ? __pfx_kthread+0x10/0x10 [ 778.211766][ T474] ret_from_fork+0x514/0xb70 [ 778.211820][ T474] ? __pfx_ret_from_fork+0x10/0x10 [ 778.211847][ T474] ? __switch_to+0xc78/0x1410 [ 778.211875][ T474] ? __pfx_kthread+0x10/0x10 [ 778.211913][ T474] ret_from_fork_asm+0x1a/0x30 [ 778.211962][ T474] [ 778.269957][ T474] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 778.676498][T31073] loop5: detected capacity change from 0 to 40427 [ 778.682940][T31073] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 778.682967][T31073] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 778.716571][T31073] F2FS-fs (loop5): invalid crc value [ 778.999623][T31073] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 779.030705][T31073] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 779.030738][T31073] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 779.461732][T31115] bridge0: entered promiscuous mode [ 779.461806][T31115] bridge0: entered allmulticast mode [ 779.553198][T31119] loop3: detected capacity change from 0 to 128 [ 779.610966][T31120] ip_tables: iptables: counters copy to user failed while replacing table [ 779.904463][T31128] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 780.115238][T27257] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 780.265514][T27257] usb 5-1: Using ep0 maxpacket: 32 [ 780.268569][T27257] usb 5-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 780.270208][T27257] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 780.270234][T27257] usb 5-1: config 0 has no interface number 0 [ 780.274435][T31143] device-mapper: table: 248:7: crypt: Error creating IV (-EINVAL) [ 780.274459][T31143] device-mapper: ioctl: error adding target to table [ 780.321216][T27257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.321245][T27257] usb 5-1: Product: syz [ 780.321261][T27257] usb 5-1: Manufacturer: syz [ 780.321278][T27257] usb 5-1: SerialNumber: syz [ 780.349533][T27257] usb 5-1: config 0 descriptor?? [ 780.364858][T27257] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 780.364947][T27257] usb 5-1: selecting invalid altsetting 1 [ 780.364991][T27257] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 780.401917][T27257] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 780.402335][T27257] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 780.402389][T27257] usb 5-1: media controller created [ 780.447973][T27257] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 780.653766][T31155] loop5: detected capacity change from 0 to 256 [ 780.667172][T31155] exfat: Deprecated parameter 'utf8' [ 780.667292][T31155] exfat: Deprecated parameter 'namecase' [ 780.667353][T31155] exfat: Deprecated parameter 'namecase' [ 780.731007][T31155] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 780.807745][T31139] loop3: detected capacity change from 0 to 32768 [ 780.817708][T31139] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.11165 (31139) [ 780.839806][T31139] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 780.839842][T31139] BTRFS info (device loop3): using crc32c checksum algorithm [ 780.956411][T31139] BTRFS info (device loop3): enabling ssd optimizations [ 780.956442][T31139] BTRFS info (device loop3): turning on flush-on-commit [ 780.956465][T31139] BTRFS info (device loop3): enabling free space tree [ 780.956483][T31139] BTRFS info (device loop3): enabling auto defrag [ 780.956502][T31139] BTRFS info (device loop3): use lzo compression, level 1 [ 780.956525][T31139] BTRFS info (device loop3): max_inline set to 4096 [ 781.097548][ T5644] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 781.375276][ T32] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 781.507340][T27257] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 781.514158][T27257] zl10353_read_register: readreg error (reg=127, ret==-110) [ 781.530505][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 781.531485][ T32] usb 3-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 781.532469][ T32] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 781.532496][ T32] usb 3-1: config 0 has no interface number 0 [ 781.541139][T31183] program syz.5.11175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 781.594348][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.594379][ T32] usb 3-1: Product: syz [ 781.594396][ T32] usb 3-1: Manufacturer: syz [ 781.594412][ T32] usb 3-1: SerialNumber: syz [ 781.624784][ T32] usb 3-1: config 0 descriptor?? [ 781.634726][ T32] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 781.634753][ T32] usb 3-1: selecting invalid altsetting 1 [ 781.634768][ T32] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 781.677276][ T32] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 781.677640][ T32] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 781.677697][ T32] usb 3-1: media controller created [ 781.683005][T31127] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 781.742022][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 781.850682][ T32] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 781.850741][ T32] zl10353_read_register: readreg error (reg=127, ret==-71) [ 781.852420][ T32] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 781.864850][T27257] usb 5-1: USB disconnect, device number 39 [ 781.986741][ T32] usb 3-1: USB disconnect, device number 51 [ 782.191031][T31197] loop5: detected capacity change from 0 to 1024 [ 782.195067][T31197] EXT4-fs: Ignoring removed bh option [ 782.209532][T31198] netlink: 'syz.3.11182': attribute type 8 has an invalid length. [ 782.209553][T31198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11182'. [ 782.209635][T31198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11182'. [ 782.262048][T31197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 782.340793][T13994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.409712][T31203] sctp: [Deprecated]: syz.3.11183 (pid 31203) Use of int in max_burst socket option. [ 782.409712][T31203] Use struct sctp_assoc_value instead [ 782.716239][T31220] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 2, 0, 0) RGB/YUV Capture:snk:16x16 (0x32314752, 8, 0, 0, 0) [ 783.032471][T31238] loop4: detected capacity change from 0 to 512 [ 783.058789][T31238] EXT4-fs (loop4): invalid journal inode [ 783.058878][T31238] EXT4-fs (loop4): can't get journal size [ 783.082330][T31238] EXT4-fs (loop4): 1 truncate cleaned up [ 783.094368][T31238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.122938][ T33] audit: type=1800 audit(2000000201.880:470): pid=31238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11200" name="file1" dev="loop4" ino=15 res=0 errno=-22 [ 783.273166][ T5642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.312463][T31230] loop3: detected capacity change from 0 to 32768 [ 783.322093][T31230] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.11195 (31230) [ 783.358144][T31230] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 783.358181][T31230] BTRFS info (device loop3): using blake2b checksum algorithm [ 783.488856][T31230] BTRFS info (device loop3): enabling ssd optimizations [ 783.488886][T31230] BTRFS info (device loop3): turning on async discard [ 783.488906][T31230] BTRFS info (device loop3): enabling free space tree [ 783.596328][ T33] audit: type=1800 audit(2000000202.360:471): pid=31230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11195" name="file1" dev="loop3" ino=260 res=0 errno=-22 [ 783.739544][ T5644] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 784.735238][T27257] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 784.886010][T27257] usb 4-1: New USB device found: idVendor=060b, idProduct=700a, bcdDevice=0.00 [ 784.887425][T27257] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.887459][T27257] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 784.887489][T27257] usb 4-1: config 0 interface 0 has no altsetting 0 [ 784.887525][T27257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.894006][T27257] usb 4-1: config 0 descriptor?? [ 785.315795][ T32] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 785.337579][T27257] cougar 0003:060B:700A.000B: unknown main item tag 0x5 [ 785.337629][T27257] cougar 0003:060B:700A.000B: unknown main item tag 0x0 [ 785.353061][T27257] cougar 0003:060B:700A.000B: hidraw0: USB HID v0.00 Keyboard [HID 060b:700a] on usb-dummy_hcd.3-1/input0 [ 785.479186][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 785.479944][ T32] usb 3-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 785.482304][ T32] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 785.484529][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.484555][ T32] usb 3-1: Product: syz [ 785.484573][ T32] usb 3-1: Manufacturer: syz [ 785.484590][ T32] usb 3-1: SerialNumber: syz [ 785.519667][ T32] usb 3-1: config 0 descriptor?? [ 785.526285][T31298] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 785.532312][ T32] hub 3-1:0.0: bad descriptor, ignoring hub [ 785.532343][ T32] hub 3-1:0.0: probe with driver hub failed with error -5 [ 785.564610][ T32] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input51 [ 785.643511][T31305] device-mapper: table: 248:8: multipath: unknown path selector type (-EINVAL) [ 785.643532][T31305] device-mapper: ioctl: error adding target to table [ 785.668000][ T32] usb 4-1: USB disconnect, device number 52 [ 785.823607][ T1226] usb 3-1: USB disconnect, device number 52 [ 785.823704][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 785.899026][T31314] xt_hashlimit: size too large, truncated to 1048576 [ 786.190117][T31331] netlink: 'syz.4.11233': attribute type 1 has an invalid length. [ 786.407251][T31339] loop5: detected capacity change from 0 to 512 [ 786.419080][T31339] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 786.419102][T31339] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 786.429160][T31339] EXT4-fs (loop5): 1 truncate cleaned up [ 786.436597][T31339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.543630][T31337] loop4: detected capacity change from 0 to 4096 [ 786.595311][T27257] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 786.595480][T31337] ntfs3(loop4): ino=3, mi_enum_attr [ 786.599012][T13994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.687918][T31346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11240'. [ 786.688012][T31346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11240'. [ 786.746172][T27257] usb 4-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 786.747673][T27257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.753435][T27257] usb 4-1: config 0 descriptor?? [ 786.781248][T27257] cp210x 4-1:0.0: cp210x converter detected [ 786.868230][T31337] ntfs3(loop4): ino=9, attr_set_size_ex [ 786.919349][T31349] loop1: detected capacity change from 0 to 512 [ 786.937056][T31349] EXT4-fs (loop1): invalid journal inode [ 786.937130][T31349] EXT4-fs (loop1): can't get journal size [ 786.959588][T31349] EXT4-fs (loop1): 1 truncate cleaned up [ 786.975027][T31349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.047294][T31355] ieee802154 phy0 wpan0: encryption failed: -22 [ 787.164875][T27257] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 787.173010][T27257] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 787.173041][T27257] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 787.210187][T27257] usb 4-1: cp210x converter now attached to ttyUSB0 [ 787.223970][T27257] usb 4-1: USB disconnect, device number 53 [ 787.237935][T27257] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 787.238548][T27257] cp210x 4-1:0.0: device disconnected [ 787.608678][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.208864][T31374] loop2: detected capacity change from 0 to 32768 [ 788.464868][T31413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11272'. [ 788.464895][T31413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11272'. [ 789.065954][T31441] loop3: detected capacity change from 0 to 512 [ 789.084992][T31441] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 789.162081][T31441] EXT4-fs (loop3): 1 orphan inode deleted [ 789.174246][T31441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.177761][T31441] ext4 filesystem being mounted at /2229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 789.201836][ T13] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 789.201946][ T13] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:0: Failed to release dquot type 1 [ 789.361163][ T5644] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.461265][T31456] loop1: detected capacity change from 0 to 164 [ 789.533375][T31456] rock: directory entry would overflow storage [ 789.533394][T31456] rock: sig=0x4f50, size=4, remaining=3 [ 789.533413][T31456] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 789.674366][T31462] loop3: detected capacity change from 0 to 512 [ 789.717462][T31462] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.11291: casefold flag without casefold feature [ 789.717500][T31462] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 789.718172][T31462] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.11291: couldn't read orphan inode 15 (err -117) [ 789.718267][T31462] loop3: lost filesystem error report for type 5 error -117 [ 789.750022][T31462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.865362][T27257] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 789.923526][ T5644] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.019809][T27257] usb 3-1: Using ep0 maxpacket: 32 [ 790.029635][T27257] usb 3-1: New USB device found: idVendor=056a, idProduct=0000, bcdDevice=0.00 [ 790.037982][T27257] usb 3-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 790.038117][T27257] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.038191][T27257] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.038248][T27257] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 790.038331][T27257] usb 3-1: config 0 interface 0 has no altsetting 0 [ 790.038476][T27257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.082112][T27257] usb 3-1: config 0 descriptor?? [ 790.414764][T31488] sctp: [Deprecated]: syz.1.11303 (pid 31488) Use of int in max_burst socket option. [ 790.414764][T31488] Use struct sctp_assoc_value instead [ 790.518291][T31493] tipc: Enabled bearer , priority 10 [ 790.554920][T27257] wacom 0003:056A:0000.000C: ignoring exceeding usage max [ 790.572456][T27257] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 790.572495][T27257] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 790.572525][T27257] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 790.572554][T27257] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 790.572583][T27257] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 790.572612][T27257] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 790.572641][T27257] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 790.572670][T27257] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 790.572698][T27257] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 790.572727][T27257] wacom 0003:056A:0000.000C: unknown main item tag 0x0 [ 790.603307][T27257] wacom 0003:056A:0000.000C: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 790.630101][T27257] wacom 0003:056A:0000.000C: hidraw0: USB HID v0.81 Device [HID 056a:0000] on usb-dummy_hcd.2-1/input0 [ 790.702839][T27257] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0000.000C/input/input52 [ 790.906969][T27257] usb 3-1: USB disconnect, device number 53 [ 791.168402][T31503] loop3: detected capacity change from 0 to 16 [ 791.184753][T31503] erofs (device loop3): mounted with root inode @ nid 36. [ 791.212119][ T33] audit: type=1800 audit(2000000209.970:472): pid=31503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11309" name="file1" dev="loop3" ino=86 res=0 errno=-22 [ 791.483453][T31490] loop4: detected capacity change from 0 to 32768 [ 791.635336][T27257] tipc: Node number set to 4278255617 [ 791.730018][ T33] audit: type=1800 audit(2000000210.490:473): pid=31510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11302" name="file1" dev="loop4" ino=4 res=0 errno=-4 [ 792.078959][T31523] loop5: detected capacity change from 0 to 1024 [ 792.093436][T31523] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 792.113232][T31523] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #3: block 2: comm syz.5.11316: lblock 2 mapped to illegal pblock 2 (length 1) [ 792.113276][T31523] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 792.115189][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 792.115233][ C0] EXT4-fs (loop5): initial error at time 2000000210: ext4_map_blocks:867: inode 3: block 2 [ 792.115373][ C0] EXT4-fs (loop5): last error at time 2000000210: ext4_map_blocks:867: inode 3: block 2 [ 792.134040][T31523] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 792.134191][T31523] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #3: block 48: comm syz.5.11316: lblock 0 mapped to illegal pblock 48 (length 1) [ 792.134286][T31523] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 792.153115][T31523] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 792.153193][T31523] EXT4-fs error (device loop5): ext4_acquire_dquot:7120: comm syz.5.11316: Failed to acquire dquot type 0 [ 792.153259][T31523] loop5: lost filesystem error report for type 5 error -117 [ 792.160225][T31523] EXT4-fs error (device loop5) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 792.160301][T31523] loop5: lost filesystem error report for type 5 error -117 [ 792.161958][T31523] EXT4-fs error (device loop5): ext4_evict_inode:336: inode #11: comm syz.5.11316: mark_inode_dirty error [ 792.162044][T31523] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 792.164442][T31523] EXT4-fs warning (device loop5): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 792.164716][T31523] EXT4-fs (loop5): 1 orphan inode deleted [ 792.181542][ T13] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 792.181666][ T13] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 792.189679][ T13] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 792.189791][ T13] EXT4-fs error (device loop5): ext4_release_dquot:7156: comm kworker/u8:0: Failed to release dquot type 0 [ 792.189857][ T13] loop5: lost filesystem error report for type 5 error -117 [ 792.214121][T31529] loop1: detected capacity change from 0 to 512 [ 792.229378][T31523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.305475][ T5654] Bluetooth: hci4: command 0x0406 tx timeout [ 792.417112][T31529] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.11321: bg 0: block 5: invalid block bitmap [ 792.417150][T31529] loop1: lost filesystem error report for type 5 error -117 [ 792.425237][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 792.425321][ C0] EXT4-fs (loop1): initial error at time 2000000211: ext4_validate_block_bitmap:436 [ 792.425402][ C0] EXT4-fs (loop1): last error at time 2000000211: ext4_validate_block_bitmap:436 [ 792.429502][T31523] EXT4-fs: Ignoring removed oldalloc option [ 792.429689][T31523] EXT4-fs: Cannot change journaled quota options when quota turned on [ 792.449065][T31529] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 792.449133][T31529] loop1: lost filesystem error report for type 5 error -117 [ 792.499719][T31529] EXT4-fs error (device loop1): ext4_free_branches:1040: inode #11: comm syz.1.11321: invalid indirect mapped block 3 (level 2) [ 792.499756][T31529] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 792.517106][T31529] EXT4-fs (loop1): 1 orphan inode deleted [ 792.517168][T31529] EXT4-fs (loop1): 1 truncate cleaned up [ 792.556072][T31529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.638121][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.721819][T13994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.736938][T13994] EXT4-fs error (device loop5): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 792.736981][T13994] loop5: lost filesystem error report for type 5 error -117 [ 792.737380][T13994] EXT4-fs error (device loop5) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 792.737403][T13994] loop5: lost filesystem error report for type 5 error -117 [ 792.737670][T13994] EXT4-fs error (device loop5): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 792.737713][T13994] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 792.738079][T13994] EXT4-fs error (device loop5): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 792.738108][T13994] loop5: lost filesystem error report for type 5 error -117 [ 792.885702][ T1226] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 793.035842][ T1226] usb 4-1: Using ep0 maxpacket: 16 [ 793.036617][ T1226] usb 4-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 793.037766][ T1226] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 793.037792][ T1226] usb 4-1: config 0 has no interface number 0 [ 793.037836][ T1226] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 793.037864][ T1226] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 793.039701][ T1226] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 793.039728][ T1226] usb 4-1: Product: syz [ 793.039744][ T1226] usb 4-1: SerialNumber: syz [ 793.122249][ T1226] usb 4-1: config 0 descriptor?? [ 793.133546][ T1226] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 793.143574][ T1226] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input55 [ 793.382285][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 793.382634][T27257] usb 4-1: USB disconnect, device number 54 [ 793.392835][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 793.392864][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 793.419025][T27257] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 794.032311][T31540] loop2: detected capacity change from 0 to 32768 [ 794.075953][T31540] XFS (loop2): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 794.264600][ T5641] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 794.280873][T31556] loop5: detected capacity change from 0 to 32768 [ 794.323605][T31556] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 794.409790][T31583] loop3: detected capacity change from 0 to 4096 [ 794.436207][T31583] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 794.513209][T31556] XFS (loop5): Ending clean mount [ 794.603078][T31583] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 794.648877][T31567] loop1: detected capacity change from 0 to 32768 [ 794.657831][T31567] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.11334 (31567) [ 794.839555][T31567] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 794.839594][T31567] BTRFS info (device loop1): using crc32c checksum algorithm [ 794.884628][T13994] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 795.085677][T31567] BTRFS info (device loop1): enabling ssd optimizations [ 795.085706][T31567] BTRFS info (device loop1): turning on flush-on-commit [ 795.085727][T31567] BTRFS info (device loop1): enabling free space tree [ 795.085746][T31567] BTRFS info (device loop1): enabling auto defrag [ 795.085765][T31567] BTRFS info (device loop1): use lzo compression, level 1 [ 795.085787][T31567] BTRFS info (device loop1): max_inline set to 4096 [ 795.450922][ T5643] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 796.624085][T31629] loop5: detected capacity change from 0 to 32768 [ 796.655657][T31629] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 796.809432][T31629] XFS (loop5): Ending clean mount [ 796.930293][T13994] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 797.736837][T31687] vlan1: entered promiscuous mode [ 797.736864][T31687] gretap0: entered promiscuous mode [ 797.985386][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 798.269704][T31690] loop3: detected capacity change from 0 to 32768 [ 798.283975][T31690] xfs: Deprecated parameter 'ikeep' [ 798.283996][T31690] XFS: ikeep mount option is deprecated. [ 798.335078][T31690] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 798.337623][T31690] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 798.385429][ T5648] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 798.562249][T31690] XFS (loop3): Ending clean mount [ 798.573496][T31690] XFS (loop3): Quotacheck needed: Please wait. [ 798.684919][T31717] netlink: 128 bytes leftover after parsing attributes in process `syz.5.11368'. [ 798.854771][T31690] XFS (loop3): Quotacheck: Done. [ 799.002848][ T5644] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 799.363665][T31699] loop2: detected capacity change from 0 to 32768 [ 799.436440][T31736] loop1: detected capacity change from 0 to 256 [ 799.451008][T31699] find_entry called with index = 0 [ 799.451027][T31699] find_entry called with index >= next_index [ 799.451038][T31699] find_entry called with index >= next_index [ 799.451053][T31699] find_entry called with index = 0 [ 799.451065][T31699] find_entry called with index >= next_index [ 799.451074][T31699] find_entry called with index >= next_index [ 799.504190][T31735] ip_tables: iptables: counters copy to user failed while replacing table [ 799.620935][T31699] Bad stbl[4] index:0 (stblindex 9) in dtpage [ 799.620935][T31699] [ 799.620971][T31699] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt [ 799.620971][T31699] [ 799.816463][T31699] jfs_lookup: dtSearch returned -5 [ 800.113022][T31727] loop5: detected capacity change from 0 to 32768 [ 800.403468][T31744] loop3: detected capacity change from 0 to 32768 [ 800.419797][T31744] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.11377 (31744) [ 800.445988][T31744] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 800.446029][T31744] BTRFS info (device loop3): using crc32c checksum algorithm [ 800.613571][T31744] BTRFS info (device loop3): enabling ssd optimizations [ 800.613602][T31744] BTRFS info (device loop3): turning on flush-on-commit [ 800.613623][T31744] BTRFS info (device loop3): enabling free space tree [ 800.613642][T31744] BTRFS info (device loop3): enabling auto defrag [ 800.613662][T31744] BTRFS info (device loop3): use lzo compression, level 1 [ 800.613685][T31744] BTRFS info (device loop3): max_inline set to 4096 [ 800.908386][ T5644] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 800.931468][T31782] loop1: detected capacity change from 0 to 2048 [ 801.063512][T31782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.414485][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.681341][T31811] loop5: detected capacity change from 0 to 512 [ 801.686773][T31811] EXT4-fs: Ignoring removed nobh option [ 801.725993][T31811] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 801.782100][T31811] EXT4-fs error (device loop5): ext4_do_update_inode:6707: inode #3: comm syz.5.11400: corrupted inode contents [ 801.782138][T31811] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 801.785232][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 801.785288][ C0] EXT4-fs (loop5): initial error at time 2000000220: ext4_do_update_inode:6707: inode 3 [ 801.785381][ C0] EXT4-fs (loop5): last error at time 2000000220: ext4_do_update_inode:6707: inode 3 [ 801.790844][T31811] EXT4-fs (loop5): Remounting filesystem read-only [ 801.800661][T31811] Quota error (device loop5): write_blk: dquota write failed [ 801.800804][T31811] Quota error (device loop5): qtree_write_dquot: Error -30 occurred while creating quota [ 801.812895][T31811] EXT4-fs (loop5): 1 truncate cleaned up [ 801.873266][T31811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.873382][T31811] ext4 filesystem being mounted at /1617/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 801.933205][T31750] loop4: detected capacity change from 0 to 40427 [ 801.950877][T31750] F2FS-fs (loop4): invalid crc value [ 801.987276][T13994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.282518][T31822] loop1: detected capacity change from 0 to 8 [ 802.374422][T31750] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 802.413043][T31750] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 802.413075][T31750] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 802.413106][T31750] F2FS-fs (loop4): Start checkpoint disabled! [ 802.488655][T31826] vivid-001: ================= START STATUS ================= [ 802.488679][T31826] vivid-001: Radio HW Seek Mode: Bounded [ 802.488706][T31826] vivid-001: Radio Programmable HW Seek: false [ 802.488729][T31826] vivid-001: RDS Rx I/O Mode: Block I/O [ 802.488754][T31826] vivid-001: Generate RBDS Instead of RDS: false [ 802.488777][T31826] vivid-001: RDS Reception: true [ 802.488799][T31826] vivid-001: RDS Program Type: 0 inactive [ 802.488827][T31826] vivid-001: RDS PS Name: inactive [ 802.488853][T31826] vivid-001: RDS Radio Text: inactive [ 802.488879][T31826] vivid-001: RDS Traffic Announcement: false inactive [ 802.488906][T31826] vivid-001: RDS Traffic Program: false inactive [ 802.488933][T31826] vivid-001: RDS Music: false inactive [ 802.488959][T31826] vivid-001: ================== END STATUS ================== [ 802.708504][T31750] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 802.709390][T31750] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 802.849962][ T13] kworker/u8:0: attempt to access beyond end of device [ 802.849962][ T13] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 802.850049][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 802.850081][ T13] Tainted: [L]=SOFTLOCKUP [ 802.850091][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 802.850106][ T13] Workqueue: writeback wb_workfn (flush-7:4) [ 802.850143][ T13] Call Trace: [ 802.850152][ T13] [ 802.850162][ T13] dump_stack_lvl+0xe8/0x150 [ 802.850212][ T13] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 802.850245][ T13] f2fs_write_end_bio+0xf7d/0x1310 [ 802.850298][ T13] __submit_merged_bio+0x258/0x6a0 [ 802.850323][ T13] ? rcu_is_watching+0x16/0xb0 [ 802.850364][ T13] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 802.850404][ T13] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 802.850460][ T13] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 802.850502][ T13] ? __dev_queue_xmit+0x14d1/0x3920 [ 802.850531][ T13] ? ip6_output+0x337/0x540 [ 802.850560][ T13] ? ndisc_send_skb+0xcb2/0x1650 [ 802.850584][ T13] ? ndisc_solicit+0x374/0x670 [ 802.850647][ T13] ? __lock_acquire+0x740/0x2de0 [ 802.850689][ T13] ? __lock_acquire+0x747/0x2de0 [ 802.850719][ T13] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 802.850806][ T13] ? __lock_acquire+0x747/0x2de0 [ 802.850872][ T13] ? f2fs_inode_chksum_verify+0x15e/0x850 [ 802.851000][ T13] ? __pfx_f2fs_inode_chksum_verify+0x10/0x10 [ 802.851042][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 802.851072][ T13] ? __lock_acquire+0x747/0x2de0 [ 802.851106][ T13] ? look_up_lock_class+0x57/0x110 [ 802.851138][ T13] ? register_lock_class+0x31/0x2e0 [ 802.851175][ T13] ? __lock_acquire+0x747/0x2de0 [ 802.851209][ T13] ? __lock_acquire+0x747/0x2de0 [ 802.851253][ T13] ? __lock_acquire+0x747/0x2de0 [ 802.851309][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 802.851344][ T13] do_writepages+0x338/0x560 [ 802.851375][ T13] ? __lock_acquire+0x747/0x2de0 [ 802.851409][ T13] ? reacquire_held_locks+0x117/0x1a0 [ 802.851442][ T13] ? writeback_sb_inodes+0x450/0x1af0 [ 802.851479][ T13] __writeback_single_inode+0x136/0x1220 [ 802.851525][ T13] ? do_raw_spin_unlock+0xf5/0x200 [ 802.851555][ T13] writeback_sb_inodes+0x9de/0x1af0 [ 802.851586][ T13] ? __lock_acquire+0x747/0x2de0 [ 802.851645][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 802.851734][ T13] ? rcu_is_watching+0x16/0xb0 [ 802.851770][ T13] ? queue_io+0x2d3/0x470 [ 802.851805][ T13] wb_writeback+0x41c/0xad0 [ 802.851839][ T13] ? queue_io+0x211/0x470 [ 802.851877][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 802.851905][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 802.851948][ T13] wb_workfn+0x431/0x10f0 [ 802.851997][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 802.852030][ T13] ? trace_hrtimer_start+0x82/0x200 [ 802.852066][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 802.852101][ T13] ? lock_acquire+0x115/0x350 [ 802.852141][ T13] ? rcu_is_watching+0x16/0xb0 [ 802.852186][ T13] ? process_scheduled_works+0x97a/0x1630 [ 802.852223][ T13] process_scheduled_works+0xc3d/0x1630 [ 802.852296][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 802.852340][ T13] ? assign_work+0x3cf/0x5d0 [ 802.852382][ T13] worker_thread+0xa47/0xfb0 [ 802.852437][ T13] kthread+0x38b/0x480 [ 802.852466][ T13] ? __pfx_worker_thread+0x10/0x10 [ 802.852494][ T13] ? __pfx_kthread+0x10/0x10 [ 802.852523][ T13] ret_from_fork+0x514/0xb70 [ 802.852555][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 802.852581][ T13] ? __switch_to+0xc78/0x1410 [ 802.852607][ T13] ? __pfx_kthread+0x10/0x10 [ 802.852637][ T13] ret_from_fork_asm+0x1a/0x30 [ 802.852682][ T13] [ 802.855045][ T13] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 802.907409][T27257] loop4: lost filesystem error report for type 5 error -108 [ 803.705714][ T32] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 803.856087][ T32] usb 6-1: New USB device found: idVendor=046d, idProduct=c222, bcdDevice=0.00 [ 803.874837][ T32] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 803.874892][ T32] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.874921][ T32] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.874945][ T32] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 803.874991][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.967212][T31862] loop3: detected capacity change from 0 to 1764 [ 804.058379][T31862] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 804.115715][ T5644] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 804.117588][ T5644] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 804.243349][T31871] xt_policy: neither incoming nor outgoing policy selected [ 804.384760][ T32] lg-g15 0003:046D:C222.000D: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0 [ 804.465958][ T32] lg-g15 0003:046D:C222.000D: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 804.591191][T31877] loop4: detected capacity change from 0 to 4096 [ 804.594007][ T32] usb 6-1: USB disconnect, device number 27 [ 804.660581][T31881] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 805.123994][ T5654] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 805.142761][ T5654] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 805.153906][ T5654] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 805.167347][ T5654] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 805.170056][ T5654] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 805.507143][T31900] netlink: 'syz.2.11440': attribute type 3 has an invalid length. [ 805.651829][T31908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11443'. [ 805.967298][ T64] team0: left allmulticast mode [ 805.967322][ T64] team_slave_0: left allmulticast mode [ 805.967356][ T64] team_slave_1: left allmulticast mode [ 805.967395][ T64] team0: left promiscuous mode [ 805.967409][ T64] team_slave_0: left promiscuous mode [ 805.967628][ T64] team_slave_1: left promiscuous mode [ 805.970656][ T64] bridge0: port 1(team0) entered disabled state [ 806.006848][T27257] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 806.033028][ T64] bridge_slave_1: left allmulticast mode [ 806.033064][ T64] bridge_slave_1: left promiscuous mode [ 806.037425][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.196146][T27257] usb 6-1: New USB device found: idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 806.201893][T27257] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 806.201985][T27257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 36601, setting to 64 [ 806.234374][T27257] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.234414][T27257] usb 6-1: Product: syz [ 806.234425][T27257] usb 6-1: Manufacturer: syz [ 806.234437][T27257] usb 6-1: SerialNumber: syz [ 806.253827][T27257] usb 6-1: config 0 descriptor?? [ 806.269090][T31913] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 806.340767][T31927] loop2: detected capacity change from 0 to 512 [ 806.352700][T31927] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 806.376934][T31927] EXT4-fs (loop2): orphan cleanup on readonly fs [ 806.378927][T31927] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.11449: corrupted in-inode xattr: invalid size in ea xattr [ 806.378964][T31927] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 806.382770][T31927] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.11449: couldn't read orphan inode 15 (err -117) [ 806.382806][T31927] loop2: lost filesystem error report for type 5 error -117 [ 806.451370][T31927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 806.512441][T27257] powermate: unknown product id 0240 [ 806.512456][T27257] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 806.536794][T27257] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input57 [ 806.571528][ C0] powermate: config urb returned -71 [ 806.571860][ C0] powermate: config urb returned -71 [ 806.572121][ C0] powermate: config urb returned -71 [ 806.572284][ C0] powermate: config urb returned -71 [ 806.628143][T27257] usb 6-1: USB disconnect, device number 28 [ 806.628210][ C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 806.748343][ T5641] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.241908][ T64] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 807.265331][ T5654] Bluetooth: hci2: command tx timeout [ 807.286216][T31919] loop4: detected capacity change from 0 to 32768 [ 807.322865][T31919] XFS (loop4): filesystem is marked as having an internal log; do not specify logdev on the mount command line. [ 807.373554][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.389390][T31944] loop5: detected capacity change from 0 to 4096 [ 807.394388][T31944] ntfs3(loop5): ino=3, mi_enum_attr [ 807.525519][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.529842][ T64] bond0 (unregistering): Released all slaves [ 807.578919][T31944] ntfs3(loop5): ino=9, attr_set_size_ex [ 807.581034][ T64] bond1 (unregistering): Released all slaves [ 807.698600][ T64] bond2 (unregistering): Released all slaves [ 807.809447][ T64] bond3 (unregistering): Released all slaves [ 807.924434][ T64] bond4 (unregistering): Released all slaves [ 808.018074][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1 [ 808.064975][T31958] loop2: detected capacity change from 0 to 128 [ 808.167198][T31958] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 808.167235][T31958] hpfs: filesystem error: improperly stopped [ 808.167252][T31958] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 808.167269][T31958] hpfs: You really don't want any checks? You are crazy... [ 808.167284][T31958] hpfs: Code page index out of array [ 808.167293][T31958] hpfs: code page support is disabled [ 808.167400][T31958] hpfs: hpfs_map_4sectors(): unaligned read [ 808.167495][T31958] hpfs: hpfs_map_4sectors(): unaligned read [ 808.167507][T31958] hpfs: filesystem error: unable to find root dir [ 808.329101][ T32] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 808.407509][ T64] !;: left promiscuous mode [ 808.525234][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 808.525843][ T32] usb 6-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 808.527022][ T32] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 808.527049][ T32] usb 6-1: config 0 has no interface number 0 [ 808.533185][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.533214][ T32] usb 6-1: Product: syz [ 808.533232][ T32] usb 6-1: Manufacturer: syz [ 808.533248][ T32] usb 6-1: SerialNumber: syz [ 808.605866][ T32] usb 6-1: config 0 descriptor?? [ 808.614422][ T32] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 808.614454][ T32] usb 6-1: selecting invalid altsetting 1 [ 808.614484][ T32] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 808.648994][ T32] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 808.649337][ T32] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 808.649419][ T32] usb 6-1: media controller created [ 808.687874][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.876952][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.895747][T31885] rxe_eth0 speed is unknown, defaulting to 1000 [ 808.941601][T31954] loop4: detected capacity change from 0 to 32768 [ 808.962788][T31954] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 808.974076][T31954] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.11455 (31954) [ 809.036250][T31954] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 809.036283][T31954] BTRFS info (device loop4): using sha256 checksum algorithm [ 809.227813][T31954] BTRFS info (device loop4): rebuilding free space tree [ 809.349184][ T5654] Bluetooth: hci2: command tx timeout [ 809.408828][T31954] BTRFS info (device loop4): disabling free space tree [ 809.408965][T31954] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 809.408992][T31954] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 809.466234][T31941] loop1: detected capacity change from 0 to 40427 [ 809.482896][T31941] F2FS-fs (loop1): Mismatch start address, segment0(0) cp_blkaddr(512) [ 809.482926][T31941] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 809.513127][T31941] F2FS-fs (loop1): build fault injection rate: 11 [ 809.513153][T31941] F2FS-fs (loop1): build fault injection type: 0x7698c [ 809.527925][T31941] F2FS-fs (loop1): invalid crc value [ 809.542744][T31954] BTRFS info (device loop4): enabling ssd optimizations [ 809.542772][T31954] BTRFS info (device loop4): force clearing of disk cache [ 809.542814][T31954] BTRFS info (device loop4): enabling auto defrag [ 809.542834][T31954] BTRFS info (device loop4): max_inline set to 0 [ 809.584487][T31941] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_caches+0x23a/0x960 [ 809.682804][T31941] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_cache_read+0x158/0x340 [ 809.683149][T31941] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_caches+0x23a/0x960 [ 809.745797][ T32] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 809.745937][ T32] zl10353_read_register: readreg error (reg=127, ret==-110) [ 809.770577][T31961] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 809.822882][ C0] F2FS-fs (loop1): inject read IO error in f2fs_cache_read_end_io of blk_update_request+0x57b/0xe50 [ 809.857320][ T5642] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 809.857989][T31941] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 809.898746][T31941] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 809.898778][T31941] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 809.898806][T31941] F2FS-fs (loop1): Start checkpoint disabled! [ 809.899347][T31941] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_cache_write+0x57e/0x1160 [ 809.899393][T31941] F2FS-fs (loop1): invalid blkaddr: 1025, type: 10, run fsck to fix. [ 809.955932][T31941] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 809.994244][T31941] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 809.994274][T31941] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 810.352557][T31885] erspan0 speed is unknown, defaulting to 1000 [ 810.362540][T31885] wg1 speed is unknown, defaulting to 1000 [ 810.376379][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 810.420425][ T32] usb 6-1: USB disconnect, device number 29 [ 811.046753][T32007] overlayfs: workdir and upperdir must be separate subtrees [ 811.247471][T31994] loop2: detected capacity change from 0 to 32768 [ 811.264740][T31994] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.11460 (31994) [ 811.291829][T31994] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 811.291864][T31994] BTRFS info (device loop2): using sha256 checksum algorithm [ 811.375694][T32013] program syz.5.11466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 811.425908][ T5654] Bluetooth: hci2: command tx timeout [ 811.478146][T32000] loop4: detected capacity change from 0 to 32768 [ 811.521672][T31994] BTRFS info (device loop2 state E): enabling free space tree [ 811.521705][T31994] BTRFS info (device loop2 state E): force clearing of disk cache [ 811.521729][T31994] BTRFS info (device loop2 state E): ignoring unknown super block flags [ 811.705741][ T5641] BTRFS info (device loop2 state E): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 811.767582][T32000] read_mapping_page failed! [ 811.767604][T32000] ERROR: (device loop4): txCommit: [ 811.767604][T32000] [ 812.506505][T32052] loop1: detected capacity change from 0 to 16 [ 812.518823][T32052] erofs (device loop1): mounted with root inode @ nid 36. [ 812.599089][T32052] Invalid ELF header len 10 [ 812.988278][ T5298] 8021q: adding VLAN 0 to HW filter on device eth3 [ 813.002402][T31885] C speed is unknown, defaulting to 1000 [ 813.279445][T32075] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 813.505700][ T5654] Bluetooth: hci2: command tx timeout [ 813.988049][T32103] loop1: detected capacity change from 0 to 128 [ 814.006436][T32103] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 814.006473][T32103] hpfs: filesystem error: improperly stopped [ 814.006490][T32103] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 814.006506][T32103] hpfs: You really don't want any checks? You are crazy... [ 814.006521][T32103] hpfs: Code page index out of array [ 814.006530][T32103] hpfs: code page support is disabled [ 814.008082][T32103] hpfs: hpfs_map_4sectors(): unaligned read [ 814.008163][T32103] hpfs: hpfs_map_4sectors(): unaligned read [ 814.008176][T32103] hpfs: filesystem error: unable to find root dir [ 814.293523][T32109] xt_LOG: level 16 >= 8 [ 814.381505][T32116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11498'. [ 814.517832][T32116] macsec1: entered promiscuous mode [ 814.658132][T32123] netlink: 'syz.1.11499': attribute type 322 has an invalid length. [ 814.820423][T32134] loop2: detected capacity change from 0 to 2048 [ 814.869855][T32136] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11503'. [ 814.874154][T32137] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 815.113673][ T5298] 8021q: adding VLAN 0 to HW filter on device eth4 [ 815.126785][T31885] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.126976][T31885] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.127138][T31885] bridge_slave_0: entered allmulticast mode [ 815.186701][T31885] bridge_slave_0: entered promiscuous mode [ 815.204790][T31885] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.204913][T31885] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.205055][T31885] bridge_slave_1: entered allmulticast mode [ 815.246796][T31885] bridge_slave_1: entered promiscuous mode [ 815.552695][T31885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.623384][T31885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.649268][T32151] loop5: detected capacity change from 0 to 4096 [ 815.671925][T32151] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 815.710755][T32156] ALSA: seq fatal error: cannot create timer (-19) [ 815.850073][T32151] ntfs3(loop5): ino=19, mi_enum_attr [ 815.850112][T32151] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 815.861292][T32151] ntfs3(loop5): ino=1a, mi_enum_attr [ 815.861675][T32151] ntfs3(loop5): ino=1a, mi_enum_attr [ 815.861755][T32151] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 815.929828][ T64] hsr_slave_0: left promiscuous mode [ 815.941303][ T64] hsr_slave_1: left promiscuous mode [ 815.942521][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.962974][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.079707][T32166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11514'. [ 816.079762][T32166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11514'. [ 816.444433][ T64] team0 (unregistering): Port device team_slave_1 removed [ 816.490821][ T64] team0 (unregistering): Port device team_slave_0 removed [ 816.647122][ T66] smc: removing ib device syz2 [ 816.669397][T32163] loop1: detected capacity change from 0 to 32768 [ 816.691536][T32163] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.11513 (32163) [ 816.734351][T32163] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 816.734390][T32163] BTRFS info (device loop1): using crc32c checksum algorithm [ 816.770800][T32163] workqueue: max_active 3006 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 816.771991][T32163] workqueue: max_active 3006 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 816.805769][T32163] workqueue: max_active 3006 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 816.806660][T32163] workqueue: max_active 3006 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 816.822393][T32163] workqueue: max_active 3006 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 816.842979][T32163] workqueue: max_active 3006 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 816.952131][T32163] BTRFS info (device loop1): setting nodatasum [ 816.952176][T32163] BTRFS info (device loop1): setting nodatacow [ 816.952194][T32163] BTRFS info (device loop1): enabling ssd optimizations [ 816.952213][T32163] BTRFS info (device loop1): disabling tree log [ 816.952232][T32163] BTRFS info (device loop1): turning on async discard [ 816.952252][T32163] BTRFS info (device loop1): enabling free space tree [ 816.952265][T32163] BTRFS info (device loop1): max_inline set to 0 [ 817.020301][ T66] smbdirect: ib_dev[syz2] removed [ 817.090288][ T5643] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 817.111616][T31885] team0: Port device team_slave_0 added [ 817.142493][T31885] team0: Port device team_slave_1 added [ 817.178670][T32180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 817.363837][T32169] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 817.364030][T32169] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 817.648259][T31885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.648279][T31885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.648307][T31885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.702039][T31885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.702058][T31885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.702086][T31885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.212183][T31885] hsr_slave_0: entered promiscuous mode [ 818.230474][T31885] hsr_slave_1: entered promiscuous mode [ 818.248865][T31885] debugfs: 'hsr0' already exists in 'hsr' [ 818.248886][T31885] Cannot create hsr debugfs directory [ 818.318389][T32169] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 818.318520][T32169] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 818.323771][T32222] ip_tables: iptables: counters copy to user failed while replacing table [ 818.411132][T32169] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 819.085353][T27257] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 819.237002][T27257] usb 6-1: New USB device found: idVendor=0458, idProduct=0087, bcdDevice=0.00 [ 819.238258][T27257] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 819.238293][T27257] usb 6-1: config 0 interface 0 has no altsetting 0 [ 819.238329][T27257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.266998][T27257] usb 6-1: config 0 descriptor?? [ 819.345292][ T5654] Bluetooth: hci4: command 0x0406 tx timeout [ 819.612504][T32254] netlink: 'syz.2.11541': attribute type 5 has an invalid length. [ 819.869916][T27257] kye 0003:0458:0087.000E: hidraw0: USB HID v0.08 Device [HID 0458:0087] on usb-dummy_hcd.5-1/input0 [ 819.931300][T27257] usb 6-1: USB disconnect, device number 30 [ 820.032252][T32272] fido_id[32272]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 820.075598][ T32] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 820.226670][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 820.227532][ T32] usb 5-1: New USB device found: idVendor=05ac, idProduct=0249, bcdDevice=0.00 [ 820.228719][ T32] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.228750][ T32] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.228775][ T32] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 820.228801][ T32] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 820.228823][ T32] usb 5-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 820.228848][ T32] usb 5-1: config 0 interface 0 has no altsetting 0 [ 820.228909][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.328458][ T32] usb 5-1: config 0 descriptor?? [ 820.360658][T32278] loop1: detected capacity change from 0 to 512 [ 820.385643][ T5648] Bluetooth: hci2: command 0x0c1a tx timeout [ 820.410154][T32278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.443464][T32278] fs-verity (loop1, inode 15): Unsupported log_blocksize: 12 [ 820.604053][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.813044][ T32] apple 0003:05AC:0249.000F: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 820.871985][ T32] input: HID 05ac:0249 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:0249.000F/input/input58 [ 820.908821][T32293] loop2: detected capacity change from 0 to 512 [ 820.913568][T32293] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 820.913588][T32293] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 820.957211][T31885] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 820.961319][T32293] EXT4-fs (loop2): 1 truncate cleaned up [ 820.981662][T32293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.014330][T31885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 821.022327][T31885] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 821.114948][T31885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 821.133216][T31885] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 821.193648][T31885] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 821.207054][T31885] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 821.253234][ T32] apple 0003:05AC:0249.000F: input,hiddev0,hidraw0: USB HID v0.07 Device [HID 05ac:0249] on usb-dummy_hcd.4-1/input0 [ 821.273063][T31885] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 821.321268][ T32] usb 5-1: USB disconnect, device number 40 [ 821.369765][ T5641] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.429892][ T5654] Bluetooth: hci4: command 0x0406 tx timeout [ 821.634630][T32307] fido_id[32307]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 821.741768][T31885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.850549][T31885] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.881103][ T2247] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.881215][ T2247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.933722][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.933834][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.004464][T32320] loop4: detected capacity change from 0 to 128 [ 822.024409][T32320] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 822.024445][T32320] hpfs: filesystem error: improperly stopped [ 822.024461][T32320] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 822.024478][T32320] hpfs: You really don't want any checks? You are crazy... [ 822.024498][T32320] hpfs: Code page index out of array [ 822.024507][T32320] hpfs: code page support is disabled [ 822.032692][T32320] hpfs: hpfs_map_4sectors(): unaligned read [ 822.033033][T32320] hpfs: hpfs_map_4sectors(): unaligned read [ 822.033067][T32320] hpfs: filesystem error: unable to find root dir [ 822.152638][T32320] hpfs: hpfs_map_4sectors(): unaligned read [ 822.465996][ T5654] Bluetooth: hci2: command 0x0c1a tx timeout [ 822.556039][T32332] loop1: detected capacity change from 0 to 512 [ 822.590685][T32332] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.11569: bg 0: block 5: invalid block bitmap [ 822.590724][T32332] loop1: lost filesystem error report for type 5 error -117 [ 822.594505][T32332] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 822.594534][T32332] loop1: lost filesystem error report for type 5 error -117 [ 822.595142][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 822.595163][ C1] EXT4-fs (loop1): initial error at time 2000000241: ext4_validate_block_bitmap:436 [ 822.595187][ C1] EXT4-fs (loop1): last error at time 2000000241: ext4_mb_clear_bb:6678 [ 822.668153][T32332] EXT4-fs error (device loop1): ext4_free_branches:1040: inode #11: comm syz.1.11569: invalid indirect mapped block 3 (level 2) [ 822.668193][T32332] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 822.670354][T32332] EXT4-fs (loop1): 1 orphan inode deleted [ 822.670379][T32332] EXT4-fs (loop1): 1 truncate cleaned up [ 822.777019][T32332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.860562][T32332] EXT4-fs warning (device loop1): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 822.972369][T32323] loop5: detected capacity change from 0 to 32768 [ 823.037065][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.040346][T32323] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 823.196487][T32323] XFS (loop5): Ending clean mount [ 823.221929][T32323] XFS (loop5): Quotacheck needed: Please wait. [ 823.278856][T32353] input input59: cannot allocate more than FF_MAX_EFFECTS effects [ 823.396206][T31885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.547657][T32323] XFS (loop5): Quotacheck: Done. [ 823.657788][T32366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11576'. [ 823.707147][T13994] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 823.836135][T32369] loop1: detected capacity change from 0 to 512 [ 823.873698][T32369] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 823.873721][T32369] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 823.948337][T32369] EXT4-fs (loop1): 1 truncate cleaned up [ 823.961844][T32369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.094026][T32377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11580'. [ 824.289301][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.435769][T32385] Bluetooth: MGMT ver 1.23 [ 824.558910][ T5654] Bluetooth: hci2: command 0x0c1a tx timeout [ 824.804678][T31885] veth0_vlan: entered promiscuous mode [ 824.833093][T31885] veth1_vlan: entered promiscuous mode [ 824.858568][T32364] loop4: detected capacity change from 0 to 40427 [ 824.872233][T32364] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 824.872804][T32364] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 824.874946][T32364] F2FS-fs (loop4): build fault injection rate: 17008 [ 824.874968][T32364] F2FS-fs (loop4): build fault injection type: 0x1f8 [ 824.876450][T32364] F2FS-fs (loop4): invalid crc value [ 824.959865][T31885] veth0_macvtap: entered promiscuous mode [ 824.976090][T31885] veth1_macvtap: entered promiscuous mode [ 825.012545][T31885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.046184][T31885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.115597][ T2247] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.115647][ T2247] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.115685][ T2247] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.115722][ T2247] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.452765][T32364] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 825.550923][ T2247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.550948][ T2247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.560698][T32364] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 825.560772][T32364] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 825.634054][ T2247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.634079][ T2247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.680377][T32414] loop2: detected capacity change from 0 to 512 [ 825.733506][T32414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.765041][T32414] ext4 filesystem being mounted at /2338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 825.874981][ T5642] syz-executor: attempt to access beyond end of device [ 825.874981][ T5642] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 825.929614][ T5642] CPU: 1 UID: 0 PID: 5642 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 825.929642][ T5642] Tainted: [L]=SOFTLOCKUP [ 825.929649][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 825.929659][ T5642] Call Trace: [ 825.929666][ T5642] [ 825.929673][ T5642] dump_stack_lvl+0xe8/0x150 [ 825.929738][ T5642] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 825.929763][ T5642] f2fs_write_end_bio+0xf7d/0x1310 [ 825.929803][ T5642] __submit_merged_bio+0x258/0x6a0 [ 825.929821][ T5642] ? rcu_is_watching+0x16/0xb0 [ 825.929858][ T5642] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 825.929886][ T5642] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 825.929925][ T5642] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 825.929967][ T5642] ? __lock_acquire+0x747/0x2de0 [ 825.930004][ T5642] ? __lock_acquire+0x747/0x2de0 [ 825.930028][ T5642] ? __lock_acquire+0x747/0x2de0 [ 825.930049][ T5642] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 825.930129][ T5642] ? rcu_is_watching+0x16/0xb0 [ 825.930153][ T5642] ? __kasan_check_byte+0x12/0x40 [ 825.930172][ T5642] ? rcu_is_watching+0x16/0xb0 [ 825.930198][ T5642] ? lock_release+0x4b/0x3c0 [ 825.930218][ T5642] ? lock_release+0x4b/0x3c0 [ 825.930243][ T5642] ? is_bpf_text_address+0x292/0x2b0 [ 825.930261][ T5642] ? is_bpf_text_address+0x26/0x2b0 [ 825.930281][ T5642] ? kernel_text_address+0xa5/0xe0 [ 825.930304][ T5642] ? __kernel_text_address+0xd/0x30 [ 825.930327][ T5642] ? unwind_get_return_address+0x4d/0x90 [ 825.930351][ T5642] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 825.930374][ T5642] ? arch_stack_walk+0xfb/0x150 [ 825.930406][ T5642] ? stack_trace_save+0xa9/0x100 [ 825.930426][ T5642] ? __pfx_stack_trace_save+0x10/0x10 [ 825.930451][ T5642] ? check_path+0x21/0x40 [ 825.930478][ T5642] ? add_lock_to_list+0xc7/0x100 [ 825.930504][ T5642] ? lockdep_unlock+0x5c/0xd0 [ 825.930521][ T5642] ? __lock_acquire+0x1511/0x2de0 [ 825.930566][ T5642] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 825.930591][ T5642] do_writepages+0x338/0x560 [ 825.930620][ T5642] ? do_raw_spin_unlock+0xf5/0x200 [ 825.930642][ T5642] filemap_fdatawrite+0x1e9/0x2f0 [ 825.930665][ T5642] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 825.930722][ T5642] ? do_raw_spin_unlock+0xf5/0x200 [ 825.930742][ T5642] f2fs_sync_dirty_inodes+0x471/0x970 [ 825.930778][ T5642] f2fs_write_checkpoint+0x867/0x24d0 [ 825.930836][ T5642] kill_f2fs_super+0x2df/0x700 [ 825.930863][ T5642] ? rcu_do_enqueue+0x616/0x870 [ 825.930884][ T5642] ? lockdep_hardirqs_on+0x7b/0x110 [ 825.930906][ T5642] ? __pfx_kill_f2fs_super+0x10/0x10 [ 825.930941][ T5642] ? __pfx_call_rcu+0x10/0x10 [ 825.930960][ T5642] ? shrinker_free+0x2a7/0x3b0 [ 825.930983][ T5642] deactivate_locked_super+0xbe/0x110 [ 825.931009][ T5642] cleanup_mnt+0x204/0x2a0 [ 825.931030][ T5642] task_work_run+0x1d9/0x260 [ 825.931053][ T5642] ? __pfx_task_work_run+0x10/0x10 [ 825.931082][ T5642] exit_to_user_mode_loop+0x204/0x770 [ 825.931104][ T5642] ? rcu_is_watching+0x16/0xb0 [ 825.931132][ T5642] do_syscall_64+0x32c/0x530 [ 825.931154][ T5642] ? trace_irq_disable+0x3b/0x140 [ 825.931176][ T5642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.931193][ T5642] ? clear_bhb_loop+0x70/0xc0 [ 825.931213][ T5642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.931229][ T5642] RIP: 0033:0x00007f70899a0d57 [ 825.931247][ T5642] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 825.931261][ T5642] RSP: 002b:00007ffd01c9a7b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 825.931278][ T5642] RAX: 0000000000000000 RBX: 00007f7089a36fb3 RCX: 00007f70899a0d57 [ 825.931290][ T5642] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd01c9a870 [ 825.931300][ T5642] RBP: 00007ffd01c9a870 R08: 00007ffd01c9b870 R09: 00000000ffffffff [ 825.931312][ T5642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd01c9b900 [ 825.931323][ T5642] R13: 00007f7089a36fb3 R14: 00000000000c99bb R15: 00007ffd01c9b940 [ 825.931351][ T5642] [ 825.942814][ T5642] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 826.100624][ T5641] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.869874][T32441] loop6: detected capacity change from 0 to 512 [ 826.883521][T32441] EXT4-fs: Ignoring removed oldalloc option [ 827.008532][T32441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.063866][T32441] EXT4-fs (loop6): shut down requested (1) [ 827.199051][T31885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.488278][T32457] loop5: detected capacity change from 0 to 256 [ 827.561998][T32457] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fcb6, chksum : 0xbbf39601, utbl_chksum : 0xe619d30d) [ 827.597639][T32457] exFAT-fs (loop5): valid_size(150994954) is greater than size(10) [ 827.615649][ T33] audit: type=1800 audit(2000000246.380:474): pid=32457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11605" name="file1" dev="loop5" ino=225 res=0 errno=-22 [ 828.083015][T32459] loop4: detected capacity change from 0 to 32768 [ 828.095302][T32459] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.11606 (32459) [ 828.125047][T32459] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 828.129392][T32459] BTRFS info (device loop4): using crc32c checksum algorithm [ 828.294762][T32459] BTRFS info (device loop4): enabling ssd optimizations [ 828.294792][T32459] BTRFS info (device loop4): turning on flush-on-commit [ 828.294812][T32459] BTRFS info (device loop4): enabling free space tree [ 828.294831][T32459] BTRFS info (device loop4): enabling auto defrag [ 828.294851][T32459] BTRFS info (device loop4): use lzo compression, level 1 [ 828.294871][T32459] BTRFS info (device loop4): max_inline set to 4096 [ 828.473716][ T5642] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 828.893493][T32508] loop5: detected capacity change from 0 to 512 [ 828.911299][T32508] EXT4-fs: Ignoring removed bh option [ 828.922201][T32508] EXT4-fs (loop5): Test dummy encryption mode enabled [ 828.922224][T32508] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 828.922237][T32508] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 828.991693][T32508] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.11619: corrupted in-inode xattr: overlapping e_value [ 828.991732][T32508] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 829.008350][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 829.008378][ C1] EXT4-fs (loop5): initial error at time 2000000247: ext4_iget_extra_inode:6027: inode 15 [ 829.008413][ C1] EXT4-fs (loop5): last error at time 2000000247: ext4_iget_extra_inode:6027: inode 15 [ 829.032172][T32508] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.11619: couldn't read orphan inode 15 (err -117) [ 829.032206][T32508] loop5: lost filesystem error report for type 5 error -117 [ 829.075750][T32508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 829.081498][T27256] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 829.198054][T32508] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 829.204933][T32508] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 829.236886][T27256] usb 5-1: Using ep0 maxpacket: 8 [ 829.238857][T27256] usb 5-1: New USB device found: idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 829.262495][T27256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.262526][T27256] usb 5-1: Product: syz [ 829.262542][T27256] usb 5-1: Manufacturer: syz [ 829.262559][T27256] usb 5-1: SerialNumber: syz [ 829.264802][T27256] usb 5-1: config 0 descriptor?? [ 829.307301][T27256] gspca_main: se401-2.14.0 probing 047d:5003 [ 829.311292][T32461] loop6: detected capacity change from 0 to 40427 [ 829.365245][T32461] F2FS-fs (loop6): Wrong SSA boundary, start(3584) end(4096) blocks(301990400) [ 829.365274][T32461] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 829.391121][T32461] F2FS-fs (loop6): build fault injection rate: 174 [ 829.391149][T32461] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 829.409098][T32461] F2FS-fs (loop6): invalid crc value [ 829.462501][T13994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.782424][T32461] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 829.797162][T27256] gspca_se401: ExtraFeatures: 24 [ 829.797177][T27256] gspca_se401: Too many frame sizes [ 829.861467][T32461] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 829.861498][T32461] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 830.004584][T27256] usb 5-1: USB disconnect, device number 41 [ 830.158307][T31885] syz-executor: attempt to access beyond end of device [ 830.158307][T31885] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 830.212627][T31885] CPU: 0 UID: 0 PID: 31885 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 830.212665][T31885] Tainted: [L]=SOFTLOCKUP [ 830.212674][T31885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 830.212689][T31885] Call Trace: [ 830.212699][T31885] [ 830.212709][T31885] dump_stack_lvl+0xe8/0x150 [ 830.212754][T31885] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 830.212789][T31885] f2fs_write_end_bio+0xf7d/0x1310 [ 830.212848][T31885] __submit_merged_bio+0x258/0x6a0 [ 830.212874][T31885] ? rcu_is_watching+0x16/0xb0 [ 830.212916][T31885] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 830.212947][T31885] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 830.213012][T31885] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 830.213072][T31885] ? __lock_acquire+0x747/0x2de0 [ 830.213124][T31885] ? __lock_acquire+0x747/0x2de0 [ 830.213162][T31885] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 830.213197][T31885] ? __lock_acquire+0x747/0x2de0 [ 830.213303][T31885] ? rcu_is_watching+0x16/0xb0 [ 830.213337][T31885] ? __kasan_check_byte+0x12/0x40 [ 830.213364][T31885] ? rcu_is_watching+0x16/0xb0 [ 830.213400][T31885] ? lock_release+0x4b/0x3c0 [ 830.213427][T31885] ? lock_release+0x4b/0x3c0 [ 830.213463][T31885] ? is_bpf_text_address+0x292/0x2b0 [ 830.213490][T31885] ? is_bpf_text_address+0x26/0x2b0 [ 830.213518][T31885] ? kernel_text_address+0xa5/0xe0 [ 830.213551][T31885] ? __kernel_text_address+0xd/0x30 [ 830.213580][T31885] ? unwind_get_return_address+0x4d/0x90 [ 830.213613][T31885] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 830.213643][T31885] ? arch_stack_walk+0xfb/0x150 [ 830.213689][T31885] ? stack_trace_save+0xa9/0x100 [ 830.213718][T31885] ? __pfx_stack_trace_save+0x10/0x10 [ 830.213755][T31885] ? check_path+0x21/0x40 [ 830.213793][T31885] ? add_lock_to_list+0xc7/0x100 [ 830.213830][T31885] ? lockdep_unlock+0x5c/0xd0 [ 830.213855][T31885] ? __lock_acquire+0x1511/0x2de0 [ 830.213913][T31885] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 830.213949][T31885] do_writepages+0x338/0x560 [ 830.214000][T31885] ? do_raw_spin_unlock+0xf5/0x200 [ 830.214030][T31885] filemap_fdatawrite+0x1e9/0x2f0 [ 830.214064][T31885] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 830.214148][T31885] ? do_raw_spin_unlock+0xf5/0x200 [ 830.214177][T31885] f2fs_sync_dirty_inodes+0x471/0x970 [ 830.214230][T31885] f2fs_write_checkpoint+0x867/0x24d0 [ 830.214306][T31885] kill_f2fs_super+0x2df/0x700 [ 830.214343][T31885] ? rcu_do_enqueue+0x616/0x870 [ 830.214372][T31885] ? lockdep_hardirqs_on+0x7b/0x110 [ 830.214403][T31885] ? __pfx_kill_f2fs_super+0x10/0x10 [ 830.214454][T31885] ? __pfx_call_rcu+0x10/0x10 [ 830.214483][T31885] ? shrinker_free+0x2a7/0x3b0 [ 830.214516][T31885] deactivate_locked_super+0xbe/0x110 [ 830.214553][T31885] cleanup_mnt+0x204/0x2a0 [ 830.214583][T31885] task_work_run+0x1d9/0x260 [ 830.214617][T31885] ? __pfx_task_work_run+0x10/0x10 [ 830.214658][T31885] exit_to_user_mode_loop+0x204/0x770 [ 830.214691][T31885] ? rcu_is_watching+0x16/0xb0 [ 830.214730][T31885] do_syscall_64+0x32c/0x530 [ 830.214760][T31885] ? trace_irq_disable+0x3b/0x140 [ 830.214792][T31885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.214817][T31885] ? clear_bhb_loop+0x70/0xc0 [ 830.214845][T31885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.214868][T31885] RIP: 0033:0x00007f4da8fa0d57 [ 830.214893][T31885] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 830.214926][T31885] RSP: 002b:00007fffc6293928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 830.214951][T31885] RAX: 0000000000000000 RBX: 00007f4da9036fb3 RCX: 00007f4da8fa0d57 [ 830.214974][T31885] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc62939e0 [ 830.214989][T31885] RBP: 00007fffc62939e0 R08: 00007fffc62949e0 R09: 00000000ffffffff [ 830.215006][T31885] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc6294a70 [ 830.215021][T31885] R13: 00007f4da9036fb3 R14: 00000000000caa48 R15: 00007fffc6294ab0 [ 830.215060][T31885] [ 830.295988][T31885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 831.280376][T32566] loop4: detected capacity change from 0 to 256 [ 831.284962][T32566] exfat: Deprecated parameter 'utf8' [ 831.285033][T32566] exfat: Deprecated parameter 'namecase' [ 831.308772][T32566] exfat: Deprecated parameter 'utf8' [ 831.326698][T32566] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 831.767393][T32541] loop5: detected capacity change from 0 to 32768 [ 831.807781][T32541] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 831.848309][T32588] loop6: detected capacity change from 0 to 512 [ 831.883614][T32588] EXT4-fs error (device loop6): ext4_iget_extra_inode:6027: inode #15: comm syz.6.11638: corrupted in-inode xattr: invalid ea_ino [ 831.883653][T32588] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 831.897640][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 831.897667][ C0] EXT4-fs (loop6): initial error at time 2000000250: ext4_iget_extra_inode:6027: inode 15 [ 831.897703][ C0] EXT4-fs (loop6): last error at time 2000000250: ext4_iget_extra_inode:6027: inode 15 [ 831.915749][T32588] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.11638: couldn't read orphan inode 15 (err -117) [ 831.915786][T32588] loop6: lost filesystem error report for type 5 error -117 [ 831.957127][T32588] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 832.025252][T32541] XFS (loop5): Ending clean mount [ 832.292187][T31885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.547522][T13994] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 832.911479][T32608] loop1: detected capacity change from 0 to 2048 [ 832.979010][T32608] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 833.044500][ T474] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.149535][T32615] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 28 bytes [ 833.479283][ T474] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.612639][ T474] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.787793][ T474] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.892293][ T5648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 833.915803][ T5648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 833.924460][ T5648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 833.944039][ T5648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 833.953317][ T5648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 834.029410][T32638] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11652'. [ 834.030650][T32638] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11652'. [ 834.282557][T32642] loop5: detected capacity change from 0 to 2048 [ 834.313228][T32642] NILFS (loop5): invalid segment: Inconsistency found [ 834.313259][T32642] NILFS (loop5): trying rollback from an earlier position [ 834.488987][T32642] NILFS (loop5): recovery complete [ 834.741431][ T474] bridge_slave_1: left allmulticast mode [ 834.741461][ T474] bridge_slave_1: left promiscuous mode [ 834.741691][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.771326][ T474] bridge_slave_0: left allmulticast mode [ 834.771354][ T474] bridge_slave_0: left promiscuous mode [ 834.773816][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.909372][ T474] pimreg: left allmulticast mode [ 835.481002][ T474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.482751][ T474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.484541][ T474] bond0 (unregistering): Released all slaves [ 835.519925][ T474] bond1 (unregistering): Released all slaves [ 835.538774][ T474] bond2 (unregistering): Released all slaves [ 835.567846][ T474] bond3 (unregistering): Released all slaves [ 835.584977][ T474] bond4 (unregistering): Released all slaves [ 835.602527][ T474] bond5 (unregistering): Released all slaves [ 835.628756][ T474] bond6 (unregistering): Released all slaves [ 835.770244][ T474] !;: left promiscuous mode [ 835.993016][ T474] IPVS: stopping backup sync thread 6108 ... [ 836.008049][T32693] xt_hashlimit: size too large, truncated to 1048576 [ 836.085739][ T5648] Bluetooth: hci1: command tx timeout [ 836.278927][T32632] rxe_eth0 speed is unknown, defaulting to 1000 [ 836.359426][T32702] loop2: detected capacity change from 0 to 512 [ 836.363567][T32702] EXT4-fs: Ignoring removed oldalloc option [ 836.370133][T32702] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 836.370178][T32702] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 836.444679][T32702] EXT4-fs (loop2): 1 truncate cleaned up [ 836.490253][T32702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 836.777340][ T5641] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.895018][T32715] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 836.895018][T32715] program syz.1.11675 not setting count and/or reply_len properly [ 837.458908][T32632] erspan0 speed is unknown, defaulting to 1000 [ 837.490800][T32740] loop6: detected capacity change from 0 to 64 [ 837.550433][ T5298] 8021q: adding VLAN 0 to HW filter on device eth5 [ 837.571065][T32742] loop5: detected capacity change from 0 to 512 [ 837.678134][T32742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.678401][T32742] ext4 filesystem being mounted at /1685/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 837.736189][T32747] loop1: detected capacity change from 0 to 64 [ 837.871390][T32747] [ 837.873807][T32747] ====================================================== [ 837.880945][T32747] WARNING: possible circular locking dependency detected [ 837.888097][T32747] syzkaller #0 Tainted: G L [ 837.894117][T32747] ------------------------------------------------------ [ 837.901170][T32747] syz.1.11686/32747 is trying to acquire lock: [ 837.907352][T32747] ffff888068a2aea0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf9/0x1680 [ 837.918328][T32747] [ 837.918328][T32747] but task is already holding lock: [ 837.925715][T32747] ffff888034ddc0a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x18d/0x300 [ 837.935291][T32747] [ 837.935291][T32747] which lock already depends on the new lock. [ 837.935291][T32747] [ 837.945748][T32747] [ 837.945748][T32747] the existing dependency chain (in reverse order) is: [ 837.954787][T32747] [ 837.954787][T32747] -> #1 (&tree->tree_lock#2/1){+.+.}-{4:4}: [ 837.962995][T32747] __mutex_lock+0x197/0x15a0 [ 837.968162][T32747] hfs_find_init+0x18d/0x300 [ 837.973324][T32747] hfs_extend_file+0x367/0x1680 [ 837.978739][T32747] hfs_bmap_reserve+0x108/0x430 [ 837.984184][T32747] hfs_cat_create+0x23d/0x870 [ 837.989432][T32747] hfs_mkdir+0x73/0xe0 [ 837.994047][T32747] vfs_mkdir+0x411/0x660 [ 837.998902][T32747] filename_mkdirat+0x284/0x550 [ 838.004310][T32747] __se_sys_mkdirat+0x35/0x150 [ 838.009628][T32747] do_syscall_64+0x16a/0x530 [ 838.014794][T32747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.021256][T32747] [ 838.021256][T32747] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 838.030518][T32747] __lock_acquire+0x164c/0x2de0 [ 838.035929][T32747] lock_acquire+0x115/0x350 [ 838.041435][T32747] __mutex_lock+0x197/0x15a0 [ 838.046585][T32747] hfs_extend_file+0xf9/0x1680 [ 838.051911][T32747] hfs_bmap_reserve+0x108/0x430 [ 838.057325][T32747] __hfs_ext_write_extent+0x200/0x620 [ 838.063243][T32747] __hfs_ext_cache_extent+0x6e/0x9b0 [ 838.069076][T32747] hfs_extend_file+0x3ad/0x1680 [ 838.074476][T32747] hfs_get_block+0x401/0xbf0 [ 838.079615][T32747] __block_write_begin_int+0x6c1/0x1930 [ 838.085820][T32747] cont_write_begin+0x71b/0xac0 [ 838.091229][T32747] hfs_write_begin+0x123/0x1c0 [ 838.096548][T32747] generic_perform_write+0x2d5/0x8e0 [ 838.102383][T32747] generic_file_write_iter+0xae/0x330 [ 838.108312][T32747] vfs_write+0x612/0xba0 [ 838.113136][T32747] ksys_write+0x150/0x270 [ 838.118018][T32747] do_syscall_64+0x16a/0x530 [ 838.123167][T32747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.129693][T32747] [ 838.129693][T32747] other info that might help us debug this: [ 838.129693][T32747] [ 838.139940][T32747] Possible unsafe locking scenario: [ 838.139940][T32747] [ 838.147410][T32747] CPU0 CPU1 [ 838.152797][T32747] ---- ---- [ 838.158204][T32747] lock(&tree->tree_lock#2/1); [ 838.163099][T32747] lock(&HFS_I(tree->inode)->extents_lock); [ 838.171630][T32747] lock(&tree->tree_lock#2/1); [ 838.179047][T32747] lock(&HFS_I(tree->inode)->extents_lock); [ 838.185074][T32747] [ 838.185074][T32747] *** DEADLOCK *** [ 838.185074][T32747] [ 838.193242][T32747] locks held by syz.1.11686/32747: 5, last CPU#0: [ 838.199781][T32747] #0: ffff88807eaa82b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 838.208934][T32747] #1: ffff88807c4b0478 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 838.217959][T32747] #2: ffff888068a2aa80 (&sb->s_type->i_mutex_key#52){+.+.}-{4:4}, at: generic_file_write_iter+0x82/0x330 [ 838.229323][T32747] #3: ffff888068a2a8e0 (&HFS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf9/0x1680 [ 838.240068][T32747] #4: ffff888034ddc0a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x18d/0x300 [ 838.250134][T32747] [ 838.250134][T32747] stack backtrace: [ 838.256060][T32747] CPU: 0 UID: 0 PID: 32747 Comm: syz.1.11686 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.267127][T32747] Tainted: [L]=SOFTLOCKUP [ 838.271477][T32747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 838.281556][T32747] Call Trace: [ 838.284863][T32747] [ 838.287825][T32747] dump_stack_lvl+0xe8/0x150 [ 838.292455][T32747] print_circular_bug+0x2e2/0x300 [ 838.297515][T32747] check_noncircular+0x12f/0x150 [ 838.302515][T32747] __lock_acquire+0x164c/0x2de0 [ 838.307405][T32747] ? rcu_is_watching+0x16/0xb0 [ 838.312201][T32747] ? __kasan_check_byte+0x12/0x40 [ 838.317245][T32747] ? rcu_is_watching+0x16/0xb0 [ 838.322045][T32747] ? lock_release+0x4b/0x3c0 [ 838.326672][T32747] ? lock_release+0x4b/0x3c0 [ 838.331300][T32747] lock_acquire+0x115/0x350 [ 838.335847][T32747] ? hfs_extend_file+0xf9/0x1680 [ 838.340814][T32747] __mutex_lock+0x197/0x15a0 [ 838.345437][T32747] ? hfs_extend_file+0xf9/0x1680 [ 838.350402][T32747] ? stack_trace_save+0xa9/0x100 [ 838.355388][T32747] ? __pfx_stack_trace_save+0x10/0x10 [ 838.360789][T32747] ? hfs_extend_file+0xf9/0x1680 [ 838.365749][T32747] ? __pfx___mutex_lock+0x10/0x10 [ 838.370805][T32747] ? lockdep_unlock+0x5c/0xd0 [ 838.375507][T32747] ? __lock_acquire+0x1511/0x2de0 [ 838.380575][T32747] hfs_extend_file+0xf9/0x1680 [ 838.385375][T32747] ? __pfx_hfs_extend_file+0x10/0x10 [ 838.390685][T32747] ? __mutex_trylock_common+0x15f/0x270 [ 838.396285][T32747] ? __pfx___mutex_trylock_common+0x10/0x10 [ 838.402241][T32747] ? rcu_is_watching+0x16/0xb0 [ 838.407057][T32747] ? __asan_memset+0x22/0x50 [ 838.411692][T32747] ? hfs_brec_find+0x19a/0x510 [ 838.416493][T32747] hfs_bmap_reserve+0x108/0x430 [ 838.421389][T32747] __hfs_ext_write_extent+0x200/0x620 [ 838.426792][T32747] ? __kmalloc_noprof+0x1a6/0x710 [ 838.431851][T32747] ? hfs_find_init+0x9d/0x300 [ 838.436561][T32747] __hfs_ext_cache_extent+0x6e/0x9b0 [ 838.441871][T32747] ? hfs_find_init+0x18d/0x300 [ 838.446664][T32747] hfs_extend_file+0x3ad/0x1680 [ 838.451558][T32747] ? __pfx_hfs_extend_file+0x10/0x10 [ 838.456866][T32747] ? __lock_acquire+0x747/0x2de0 [ 838.461838][T32747] ? __lock_acquire+0x747/0x2de0 [ 838.466806][T32747] ? rcu_is_watching+0x16/0xb0 [ 838.471607][T32747] ? trace_kmem_cache_alloc+0x29/0xe0 [ 838.477007][T32747] hfs_get_block+0x401/0xbf0 [ 838.481645][T32747] ? __pfx_hfs_get_block+0x10/0x10 [ 838.486781][T32747] ? do_raw_spin_unlock+0xf5/0x200 [ 838.491924][T32747] ? _raw_spin_unlock+0x28/0x50 [ 838.496797][T32747] ? create_empty_buffers+0x41e/0x4d0 [ 838.502207][T32747] __block_write_begin_int+0x6c1/0x1930 [ 838.507791][T32747] ? __pfx_hfs_get_block+0x10/0x10 [ 838.512942][T32747] ? __pfx___block_write_begin_int+0x10/0x10 [ 838.518988][T32747] cont_write_begin+0x71b/0xac0 [ 838.523915][T32747] ? __pfx_cont_write_begin+0x10/0x10 [ 838.529427][T32747] ? rcu_is_watching+0x16/0xb0 [ 838.534255][T32747] hfs_write_begin+0x123/0x1c0 [ 838.539040][T32747] ? __pfx_hfs_get_block+0x10/0x10 [ 838.544190][T32747] generic_perform_write+0x2d5/0x8e0 [ 838.549534][T32747] ? __pfx_generic_perform_write+0x10/0x10 [ 838.555363][T32747] ? file_update_time_flags+0x1e0/0x440 [ 838.560932][T32747] ? __generic_file_write_iter+0xf9/0x230 [ 838.566674][T32747] ? generic_file_write_iter+0x9a/0x330 [ 838.572243][T32747] generic_file_write_iter+0xae/0x330 [ 838.577641][T32747] vfs_write+0x612/0xba0 [ 838.581908][T32747] ? __pfx_vfs_write+0x10/0x10 [ 838.586757][T32747] ? __fget_files+0x3a2/0x420 [ 838.591464][T32747] ? __fget_files+0x2a/0x420 [ 838.596102][T32747] ? fdget+0x1ac/0x250 [ 838.600204][T32747] ksys_write+0x150/0x270 [ 838.604578][T32747] ? __pfx_ksys_write+0x10/0x10 [ 838.609500][T32747] do_syscall_64+0x16a/0x530 [ 838.614125][T32747] ? trace_irq_disable+0x3b/0x140 [ 838.619181][T32747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.625275][T32747] ? clear_bhb_loop+0x70/0xc0 [ 838.629980][T32747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.635889][T32747] RIP: 0033:0x00007ff4fef9fb19 [ 838.640761][T32747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.660384][T32747] RSP: 002b:00007ff4ffdac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 838.668825][T32747] RAX: ffffffffffffffda RBX: 00007ff4ff225fa0 RCX: 00007ff4fef9fb19 [ 838.676991][T32747] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000004 [ 838.684980][T32747] RBP: 00007ff4ff037b70 R08: 0000000000000000 R09: 0000000000000000 [ 838.692965][T32747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.700955][T32747] R13: 00007ff4ff226038 R14: 00007ff4ff225fa0 R15: 00007ffec3c1a6f8 [ 838.708963][T32747] [ 838.743473][ T5648] Bluetooth: hci1: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 838.818386][ T474] team0: Port device wlan0 removed [ 838.874515][T32632] C speed is unknown, defaulting to 1000 [ 838.935619][T32742] EXT4-fs: Ignoring removed i_version option [ 838.935684][T32742] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 838.935701][T32742] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 838.969331][T32742] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring [ 838.969688][T32742] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 839.661109][ T474] hsr_slave_0: left promiscuous mode [ 839.673299][ T474] hsr_slave_1: left promiscuous mode [ 839.673942][ T474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 839.673971][ T474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.699045][ T474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.699068][ T474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.726656][ T474] veth1_macvtap: left promiscuous mode [ 839.726715][ T474] veth0_macvtap: left promiscuous mode [ 839.726861][ T474] veth1_vlan: left promiscuous mode [ 840.100857][ T474] team0 (unregistering): Port device team_slave_0 removed [ 840.245613][ T5298] 8021q: adding VLAN 0 to HW filter on device eth6 [ 840.263648][T32747] hfs: node 4:3 still has 1 user(s)! [ 840.309487][T32742] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.482754][ T474] IPVS: stop unused estimator thread 0... [ 840.573291][ T474] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.641881][ T474] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.694593][ T474] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.731751][ T474] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.849167][ T474] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.849205][ T474] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.918279][ T474] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.918317][ T474] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.921033][ T5298] 8021q: adding VLAN 0 to HW filter on device eth7 [ 840.977264][ T474] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.977303][ T474] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.037032][ T474] tipc: Disabling bearer [ 841.037387][ T474] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.037423][ T474] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.134187][ T474] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.211657][ T474] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.254881][ T474] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.378730][ T474] bridge_slave_1: left allmulticast mode [ 841.378756][ T474] bridge_slave_1: left promiscuous mode [ 841.378954][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.381906][ T474] bridge_slave_0: left allmulticast mode [ 841.381930][ T474] bridge_slave_0: left promiscuous mode [ 841.382076][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.429562][ T474] bridge_slave_1: left allmulticast mode [ 841.429582][ T474] bridge_slave_1: left promiscuous mode [ 841.429690][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.430771][ T474] : left allmulticast mode [ 841.430785][ T474] : left promiscuous mode [ 841.430887][ T474] bridge0: port 1() entered disabled state [ 841.454656][ T474] pimreg9: left allmulticast mode [ 841.463685][ T474] bridge_slave_1: left allmulticast mode [ 841.463744][ T474] bridge_slave_1: left promiscuous mode [ 841.464091][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.498478][ T474] lo: left allmulticast mode [ 841.500874][ T474] bridge_slave_1: left allmulticast mode [ 841.500890][ T474] bridge_slave_1: left promiscuous mode [ 841.500996][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.502100][ T474] bridge_slave_0: left allmulticast mode [ 841.502114][ T474] bridge_slave_0: left promiscuous mode [ 841.502208][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.553900][ T474] tipc: Resetting bearer [ 841.681713][ T474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.683123][ T474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.683988][ T474] bond0 (unregistering): Released all slaves [ 841.864334][ T474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.876423][ T474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.877464][ T474] bond0 (unregistering): Released all slaves [ 841.881039][ T474] bond1 (unregistering): Released all slaves [ 841.884170][ T474] bond2 (unregistering): Released all slaves [ 841.900171][ T474] bond3 (unregistering): Released all slaves [ 841.999072][ T474] tipc: Disabling bearer [ 842.164334][ T474] team0: Port device bond0 removed [ 842.173545][ T474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.183894][ T474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.194801][ T474] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 842.204773][ T474] bond0 (unregistering): Released all slaves [ 842.213476][ T474] bond1 (unregistering): Released all slaves [ 842.223253][ T474] bond2 (unregistering): Released all slaves [ 842.232488][ T474] bond3 (unregistering): Released all slaves [ 842.238218][ T474] bond4 (unregistering): Released all slaves [ 842.322843][ T13] smbdirect: ib_dev[syz0] removed [ 842.402208][ T474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.402759][ T474] bond0 (unregistering): Released all slaves [ 842.405062][ T474] bond1 (unregistering): Released all slaves [ 842.420503][ T474] bond2 (unregistering): Released all slaves [ 842.454736][ T5298] 8021q: adding VLAN 0 to HW filter on device eth8 [ 842.615616][ T474] ovs-dp0: left promiscuous mode [ 842.695199][ T474] tipc: Left network mode [ 842.699048][ T474] tipc: Left network mode [ 842.749187][ T474] IPVS: stopping backup sync thread 30025 ... [ 842.892937][ T5298] 8021q: adding VLAN 0 to HW filter on device eth10 [ 843.213951][ T5298] 8021q: adding VLAN 0 to HW filter on device eth11 [ 843.522245][ T5298] 8021q: adding VLAN 0 to HW filter on device eth9 [ 843.843521][ T5298] 8021q: adding VLAN 0 to HW filter on device eth12 [ 844.181785][ T5298] 8021q: adding VLAN 0 to HW filter on device eth13 [ 844.641658][ T5298] 8021q: adding VLAN 0 to HW filter on device eth14 [ 845.080554][ T5298] 8021q: adding VLAN 0 to HW filter on device eth15 [ 845.210645][ T474] hsr_slave_0: left promiscuous mode [ 845.211073][ T474] hsr_slave_1: left promiscuous mode [ 845.211523][ T474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.211537][ T474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.212001][ T474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.212022][ T474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.260761][ T474] hsr_slave_0: left promiscuous mode [ 845.261259][ T474] hsr_slave_1: left promiscuous mode [ 845.261827][ T474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.263802][ T474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.278790][ T474] hsr_slave_0: left promiscuous mode [ 845.279421][ T474] hsr_slave_1: left promiscuous mode [ 845.282572][ T474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.282618][ T474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.291997][ T474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.292050][ T474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.333773][ T474] hsr_slave_0: left promiscuous mode [ 845.334288][ T474] hsr_slave_1: left promiscuous mode [ 845.334908][ T474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.345208][ T474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.368536][ T474] veth1_macvtap: left promiscuous mode [ 845.368591][ T474] veth0_macvtap: left promiscuous mode [ 845.368727][ T474] veth1_vlan: left promiscuous mode [ 845.368807][ T474] veth0_vlan: left promiscuous mode [ 845.370239][ T474] veth0_macvtap: left promiscuous mode [ 845.370509][ T474] veth1_vlan: left promiscuous mode [ 845.370597][ T474] veth0_vlan: left promiscuous mode [ 845.623829][ T474] team0 (unregistering): Port device team_slave_1 removed [ 845.642008][ T474] team0 (unregistering): Port device team_slave_0 removed [ 845.826453][ T474] team0 (unregistering): Port device team_slave_1 removed [ 845.830526][ T474] team0 (unregistering): Port device team_slave_0 removed [ 846.018808][ T474] team0 (unregistering): Port device team_slave_1 removed [ 846.022941][ T474] team0 (unregistering): Port device team_slave_0 removed [ 846.274267][ T5298] 8021q: adding VLAN 0 to HW filter on device eth16 [ 846.288428][ T13] smbdirect: ib_dev[!!0] removed [ 846.718749][ T5298] 8021q: adding VLAN 0 to HW filter on device eth17 [ 847.028620][ T474] IPVS: stop unused estimator thread 0... [ 847.037322][ T474] IPVS: stop unused estimator thread 0... [ 847.043712][ T474] IPVS: stop unused estimator thread 0... [ 847.137090][ T5298] 8021q: adding VLAN 0 to HW filter on device eth18 [ 847.430067][ T5298] 8021q: adding VLAN 0 to HW filter on device eth19 [ 847.713992][ T5298] 8021q: adding VLAN 0 to HW filter on device eth20