last executing test programs: 10m49.902568446s ago: executing program 4 (id=8251): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000004340)=[{&(0x7f0000000e00)="5c6817db84aafc4ba93b3b7b773c1f7c014e2a2c2192542afa9748dcd0a777e403000000290d970e2f9a1d8f527923b0f362103e5bbeda2dca0d9d2b1e5238329691753f1860286f1aaa0786ba5cb644966e7b7566d2960bab4c5ba6da8e730af484c4850e243e0e95803437dfd6b95b5d3ffbb5d9fb8bc5b2358837f79985f063bfb4e982bdbd79b6aff84a010d1a97960158de81236aa66640e348b98794dd9ca277d910243cf4d9c6d38979d81faac0930900"/200, 0xc8}, {&(0x7f0000000f00)="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", 0x13b}, {&(0x7f0000001cc0)="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", 0x192}, {&(0x7f0000000400)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cfe061c4bae7dee66cd87b91713a1247b06da2fdc4a40a406443e0937cec3c2a000000000000", 0xd2}, {&(0x7f0000000280)="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", 0x138}], 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) 10m47.811940527s ago: executing program 4 (id=8283): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000200010000009800088014000780080005000000000008000600450000003c000780080006"], 0xc0}}, 0x30004040) 10m47.461254892s ago: executing program 4 (id=8288): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYBLOB='\x00\x00\x00@'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa0}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m46.932929217s ago: executing program 4 (id=8295): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x1) 10m46.646936211s ago: executing program 4 (id=8299): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0xf, 0x2c436529, 0x0}) 10m44.470068729s ago: executing program 4 (id=8328): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@mask_fadd={0x58, 0x114, 0x8, {{0x6, 0x5}, 0x0, 0x0, 0x4a, 0x9, 0x8, 0x2, 0x4, 0x200}}, @mask_fadd={0x58, 0x114, 0x8, {{0x80, 0x5}, 0x0, 0x0, 0x5, 0x7f, 0xfffffffffffffffa, 0x2d, 0x12, 0x40}}], 0xb0, 0x8004}, 0x0) 10m43.909477881s ago: executing program 32 (id=8328): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@mask_fadd={0x58, 0x114, 0x8, {{0x6, 0x5}, 0x0, 0x0, 0x4a, 0x9, 0x8, 0x2, 0x4, 0x200}}, @mask_fadd={0x58, 0x114, 0x8, {{0x80, 0x5}, 0x0, 0x0, 0x5, 0x7f, 0xfffffffffffffffa, 0x2d, 0x12, 0x40}}], 0xb0, 0x8004}, 0x0) 2m36.82053982s ago: executing program 5 (id=14586): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4) 2m35.900037331s ago: executing program 5 (id=14605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0xffff8000, @empty, 0x9}, 0x1c) 2m35.657588237s ago: executing program 5 (id=14609): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140005"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) 2m35.424247889s ago: executing program 5 (id=14614): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x800000, &(0x7f00000002c0)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_winnt}, {@uni_xlate}, {@utf8no}, {@utf8no}, {@fat=@uid}, {@numtail}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@numtail}, {@shortname_mixed}, {@shortname_lower}, {@utf8no}, {@shortname_mixed}]}, 0x1, 0x2b3, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0x9) 2m34.557604039s ago: executing program 5 (id=14627): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 2m32.898228061s ago: executing program 5 (id=14644): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r0, 0x0, 0x0, 0x100000) read$FUSE(r0, 0x0, 0x0) 2m32.311442808s ago: executing program 33 (id=14644): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r0, 0x0, 0x0, 0x100000) read$FUSE(r0, 0x0, 0x0) 5.044116449s ago: executing program 6 (id=16221): sendmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000100)=@llc={0x1a, 0x304, 0x0, 0x5a, 0x67, 0xff, @remote}, 0x80, 0x0}}], 0x1, 0x4044000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, 0x0, &(0x7f0000000080)) 4.36047041s ago: executing program 0 (id=16230): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) 3.87518369s ago: executing program 0 (id=16234): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 3.656355158s ago: executing program 6 (id=16237): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r3}) 3.249413095s ago: executing program 0 (id=16242): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file1\x00', 0x2000775) write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xfc, 0x0, 0x40, 0x7fff, 0x3, 0x3e, 0xfffbffed, 0x294, 0x40, 0xcf, 0xf, 0x0, 0x38, 0x1, 0x2, 0x2}, [{0x3, 0x3, 0x4, 0xd, 0x1c8, 0xe6, 0x1004, 0x3}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 3.205967141s ago: executing program 6 (id=16243): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000173000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x4, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.980912467s ago: executing program 2 (id=16245): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001680)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000020}], 0x1, 0xc0011) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1}, 0x8dff) 2.980237392s ago: executing program 6 (id=16246): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000e40), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2.639062242s ago: executing program 6 (id=16251): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfffe}, {0xfff2, 0x8}, {0x1, 0x6}}}, 0x24}}, 0x2000c085) accept4$vsock_stream(r1, 0x0, 0x0, 0x800) 2.481665515s ago: executing program 2 (id=16252): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x1, 0x55}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x4e23, 0x2, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.329658193s ago: executing program 0 (id=16254): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x327e, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @remote}], 0x1c) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f00000001c0)={0x7, 0x1, 0x100}) io_uring_enter(r0, 0x5b3, 0x7ecd, 0x17, 0x0, 0x0) 2.296022668s ago: executing program 3 (id=16255): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2.250337191s ago: executing program 6 (id=16256): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f4660066ffe181a27a9f86469722c726f6469722c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c757466383d312c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d6370373381fd2cbf22e2d423616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c00251d3e9c87bf7a47e1801bba36e70dd2d818775e28de02dbbfd314aa8a6e90e4816edc8495a7007f589ee6"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d000905810300020000120904010000020d00000904010102020d0000090582"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x4010, 0x6, 0x10, 0x10, 0x6, 0x8, 0xffffffff, 0x1000, 0x17, 0x7, 0xce2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.134711245s ago: executing program 2 (id=16258): dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, 0x0, 0x0) 2.111888365s ago: executing program 3 (id=16259): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000080), 0x4) 1.935891265s ago: executing program 0 (id=16261): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file1\x00', 0x1008010, &(0x7f0000000440)={[{@nodots}, {@fat=@umask={'umask', 0x3d, 0x5}}, {@fat=@check_strict}, {@dots}, {@nodots}, {@nodots}]}, 0x1, 0x11b2, &(0x7f0000002440)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf251500000008000300", @ANYRES32=r2, @ANYBLOB="28002b801c00038006000300feff000006000100039658fadc00020002000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x2000c894}, 0x4010084) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x20044841) 1.875877933s ago: executing program 3 (id=16262): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0x2000c802, &(0x7f0000000180)={0x2, 0x4e1e, @local}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1.646649347s ago: executing program 3 (id=16265): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0xa, 0x238, &(0x7f0000000100)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d63703933322c706172746974696f6e3d30303030303030303030303030303030303030332c6769643d666f726765742c6769643d666f726765742c6e6f6164696e6963622c756e64656c6574652c7569643d666f726765742c00fb5ebc1bbec00aea8217b7375ace1f91cad4e856ac3ce827902dd91a9a936650ca99205dc1adee73bc464ab6ea2dad7091eea47594f5ef5227a72684b2ed98640aa52eba3e04c81c829036f312ecb1c7483575d32ed9eef652c6b7284dc45cecea6a0ae3a01c5cd7b60af90431eddc00"/225], 0xfe, 0xc24, &(0x7f0000001480)="$eJzs3UFsHNd9B+D/Gy5Fym4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIRtrQvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKeAxcy+lZY0ZcmmSFH299nUbznz3ux7b5YzkqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN976cKpZ9ODbgUAcJAuTX311Gn3fwD4RLnsz/8AAAAAAAAAAAAAAHDYpSjisUixeGkzzVTfdw1fbHdu3Jwen9i92tFU1Ryoypdfw8+ePnP2S8+NnevlB9e/356IV6YuX6i/uHB9cam1vNyaq0932rMLc617PsJe6+80Wg1A/fqrN+auXl2un37mzLbdN0feG3r0+Mj5sadOPtkrOz0+MTHVV6Y2+JHf/X3uNMPjSBRxMlI8/b2fpGZEFLH3sbjLZ2e/Ha06MVp1Ynp8ourIfLvZWSl3TvYGooio91Vq9MboAM7FnjQiVsvmlw0eLbs3tdhcal6Zb9Unm0sr7ZX2QmcydVtb9qceRZxLEWsRsTH0/sMNRhG1SPGdY5vpSkQM9Mbhi9XE4Du3o9jHPt6Dsp31wYi14iE4Z4fYUBTxcqT46dtFzJZjlr/iCxEvl/mDiDfLfCEilR+MsxHv7vI54uFUiyL+vDz/5zfTXHU96F1XLn6t/pXO1YW+sr3rykN/fzhIh/zaNBxFNKsr/mb66L/ZAQAAAAAAAAAAAAAAAOB+OxpFPBEpXvr3P6rmFUc1L/3Y+bHfH/nF/jnjj9/lOGXZZyJitbi3OblH8hTiyTSZ0gOeS/xJNhxF/HGe//fGg24MAAAAAAAAAAAAAAAAAADAJ9yPI8Xz75xIa9G/pni7c61+uXllvrsqbG/t396a6VtbW1v11M1GzpmcqznXcq7n3MgZRa6fs5FzJudqzrWc6zk3csZArp+zkXMm52rOtZzrOTdyRi3Xz9nIOZNzNedazvWcGznjkKzdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwcVJEET+PFN/+xmaKFBGNiJno5vpQrwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CANpSK+Hynqf9C4ta0WEan6v+tE+cvZaBwp89PRGCvzhWhcyNmsstZ44wG0n70ZTEX8KFIMDb9164Tn8z/Y/e7WxyDe/Obt736l1s2B3s6R94YePX7s/NjErz1+p9dptwaMXmx3btysT49PTEz1ba7ld/9037aR/L7F/ek6EbH82uuvNufnW0ufmBdFHIpmPKgXte6LWhyS9hzUi3y9il12FYfhp6BxWAaq9+IBX5g4EOX9/91I8dvv/Efvht+7//9C97tbd/j42Z/cvv8/v/NA+3T/f6xv2/P5dyODtYjhleuLg8cjhpdfe/1k+3rzWutaq3P21Kkvj419+cypwSMRw1fb862+V3seKgAAAAAAAAAAAAAAAICDlYr43UjR/NFmqkfEzWq+1sj5sadOPjkQA9V8q23ztl6Zunyh/uLC9cWl1vJya64+3WnPLsy17vXthqvpXtPjE/vSmbs6us/tPzr84sLia0vta3+4suv+R4YvXFleWWrO7r47jkYR0ejfMlo1eHp8omr0fLvZqapO7jqZ7sMbTEX8Z6SYPVs/0tuW5//tnOG/bf7/6s4D7dP8v0/1bSvfM6UifhYpfusvHo/PV+18JN43Zrnc30SK0XOfy+XiSFmu14bucwW6MwPLsv8bKf7h59vL9uZDPna77LP3Oq4Pi/L8H4sU3/+z78av523bn/+w+/l/ZOeB9un8f6Zv2yPbnlew566Tz//JSPHCY2/Fb+RtH/T8jyK2tra+FXEiF771fI59Ov+f7ds2Et33/c37130AAAAAAAAAAICH1mAq4m8jxZMTtfRc3nYv//5vbueB9unff/1y37a5A1qvaM+DCgAAAACHxGAq4seR4trKW7fmUG+f/903//N3bq+9Pp527K3+nu+XqucG3M+//+s3kt93Zu/dBgAAAAAAAAAAAAAAAAAAgEMlpSKey+upz9xlPfX1SPHSfz+dy6XjZbneOvAj1a/DlxY6Jy/Mzy/MNleaV+Zb9anF5myrrPuZSLH515/LdYtqffXP57rdNd6Ht3prsS9Fiom/65XtrsXeW5u8ux54dy32suynIsV//f32sr11rD97u+zpsuxfRYqv/9PuZY/fLnumLPvdSPHDr9d7ZR8py/aej9p9JulwLeZbz8wuzL/vUagAAAAAAAAAAAAAAAAAAADwYQ2mIv40UvzP9bVYrab9v3FrV85ab8Ob3+xb73+Hm9U6/yPV+v93ev1R1v8fuS+9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh0uKIl6PFIuXNtP6UPl91/DFdufGzenxid2rHU1VzYGqfPk1/OzpM2e/9NzYuV5+cP377Yl4ZeryhfqLC9cXl1rLy625+nSnPbsw17rnI+y1/u2h6xqtBqB+/dUbc1evLtdPP3Nm2+6bI+8NPXp85PzYUyef7JWdHp+YmOorUxv8EO/+oRp325Eo4i8jxdPf+0n656GIIvY+Fnf57Oy3o1UnRqtOTI9PVB2Zbzc7K+XOyd5AFBH1vkqN3hgdwLnYk0bEatn8ssGjZfemFptLzSvzrfpkc2mlvdJe6EymbmvL/tSjiHMpYi0iNob6D3QkZxGvRorvHNtM/zIUMdAbhy9emvrqqdN3bkexr728i29V7awPRqwVD8E5O8SGooh/jBQ/fftE/OtQRC26X/GFiJfL/EHEm2W+EJHKD8bZiHeHHnSruV9qUcT/lef//GZ6eyii+pGprisXv1b/SufqQl/Z3nVl5/1hKyIeqvvDQTrk16bhKOKH1RV/M/2bn2sAAAAAAAAAAAAAAACAQ6SIX40Uz79zIlXzg2/NKW53rtUvN6/Md6f19eb+9eZMb21tbdVTNxs5Z3Ku5lzLuZ5zI2cUuX7ORs6ZnKs513Ku59zIGQO5fs5GzpmcqznXcq7n3MgZtVw/ZyPnTM7VnGs513Nu5IxDMncPAAAAAAAAAAAAAAAAAAD4eCmq/1J8+xubaWuou770THRz3XqgH3v/HwAA//9wn/vk") r0 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0xffff, 0xa}, 0x10001, 0xc}}, 0x0, 0x0) 1.368977138s ago: executing program 2 (id=16267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) 1.358895867s ago: executing program 0 (id=16268): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2800c1e, &(0x7f00000001c0)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1.04516599s ago: executing program 2 (id=16272): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffc8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x1000, @local, 0x13}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 873.370451ms ago: executing program 3 (id=16274): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4, 0x5}]}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 650.106546ms ago: executing program 2 (id=16278): pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) unshare(0x2040400) tee(r1, r0, 0xff, 0x8) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x9) 441.737702ms ago: executing program 1 (id=16279): pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = fanotify_init(0x2, 0x0) fanotify_mark(r2, 0x1, 0x1009, r0, 0x0) unshare(0x22020600) vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) 327.314467ms ago: executing program 1 (id=16280): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000005c0)={0x0, 0x11, "e6ce09bbe96c68e71c6b58ffb321ad5a85"}, &(0x7f00000003c0)=0x19) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000820907"], 0x18}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 207.096358ms ago: executing program 1 (id=16281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendfile(r1, r0, 0x0, 0x8) 178.044878ms ago: executing program 3 (id=16282): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_netfilter(r1, 0x0, 0x1) read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) 78.634933ms ago: executing program 1 (id=16283): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 47.064814ms ago: executing program 1 (id=16284): r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @remote}, 0x18, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000480)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 0s ago: executing program 1 (id=16285): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000fc0)={0x34, &(0x7f0000000e00)={0x0, 0x7, 0x2, "e80e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): mber 22 using dummy_hcd [ 1101.147715][ T881] usb 6-1: Using ep0 maxpacket: 8 [ 1101.152903][ T881] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1101.171625][ T881] usb 6-1: config 86 has an invalid interface number: 149 but max is 0 [ 1101.171656][ T881] usb 6-1: config 86 has no interface number 0 [ 1101.171691][ T881] usb 6-1: config 86 interface 149 has no altsetting 0 [ 1101.214160][ T881] usb 6-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice= a.5c [ 1101.214193][ T881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.214215][ T881] usb 6-1: Product: syz [ 1101.214231][ T881] usb 6-1: Manufacturer: syz [ 1101.214266][ T881] usb 6-1: SerialNumber: syz [ 1101.525034][ T861] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 1101.527334][ T881] belkin_sa 6-1:86.149: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 1101.561847][ T881] usb 6-1: bcdDevice: 0a5c, bfc: 0 [ 1101.592740][ T881] usb 6-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 1101.644912][ T881] usb 6-1: USB disconnect, device number 22 [ 1101.690210][ T881] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 1101.691122][ T881] belkin_sa 6-1:86.149: device disconnected [ 1102.314826][ T888] tipc: Enabled bearer , priority 0 [ 1102.977104][ T906] vlan2: entered promiscuous mode [ 1102.977131][ T906] bridge0: entered promiscuous mode [ 1103.246950][ T5742] tipc: Node number set to 4269801642 [ 1103.870851][ T5604] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1103.961492][ T953] loop5: detected capacity change from 0 to 8192 [ 1104.035816][ T5604] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1104.037691][ T5604] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 1104.074236][ T5604] usb 1-1: string descriptor 0 read error: -22 [ 1104.074387][ T5604] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1104.074411][ T5604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.175476][ T966] lo: entered promiscuous mode [ 1104.206218][ T966] lo: left promiscuous mode [ 1104.533984][ T968] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1104.534086][ T968] FAT-fs (loop5): Filesystem has been set read-only [ 1104.991395][ T5604] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1105.042856][ T5604] usb 1-1: USB disconnect, device number 97 [ 1105.668683][ T881] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1105.808762][ T881] usb 6-1: Using ep0 maxpacket: 16 [ 1105.811285][ T881] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.811321][ T881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1105.811339][ T881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1105.811352][ T881] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1105.811367][ T881] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1105.812483][ T881] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1105.812507][ T881] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1105.812528][ T881] usb 6-1: Manufacturer: syz [ 1105.868282][ T5742] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1105.923038][ T881] usb 6-1: config 0 descriptor?? [ 1106.004500][ T5749] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1106.041953][ T5742] usb 1-1: Using ep0 maxpacket: 32 [ 1106.046226][ T5742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.046327][ T5742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.046372][ T5742] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1106.046396][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.128237][ T5742] usb 1-1: config 0 descriptor?? [ 1106.175573][ T5749] usb 3-1: config 0 has an invalid interface number: 5 but max is 0 [ 1106.175603][ T5749] usb 3-1: config 0 has no interface number 0 [ 1106.175655][ T5749] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1106.175680][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.191280][ T5749] usb 3-1: config 0 descriptor?? [ 1106.220000][ T5749] ums-realtek 3-1:0.5: USB Mass Storage device detected [ 1106.302174][ T881] rc_core: IR keymap rc-hauppauge not found [ 1106.302197][ T881] Registered IR keymap rc-empty [ 1106.302478][ T881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1106.370203][ T881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1106.444158][ T5749] usb 3-1: USB disconnect, device number 83 [ 1106.444229][ T881] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1106.486153][ T881] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input40 [ 1106.590089][ T881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1106.601953][ T881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1106.623947][ T881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1106.637760][ T881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1106.672044][ T881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1106.673579][ T5742] hid_parser_main: 91 callbacks suppressed [ 1106.673669][ T5742] koneplus 0003:1E7D:2D51.002C: unknown main item tag 0x0 [ 1106.673705][ T5742] koneplus 0003:1E7D:2D51.002C: unknown main item tag 0x0 [ 1106.673731][ T5742] koneplus 0003:1E7D:2D51.002C: collection stack underflow [ 1106.673755][ T5742] koneplus 0003:1E7D:2D51.002C: item 0 0 0 12 parsing failed [ 1106.684328][ T881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1106.707079][ T881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1106.735496][ T881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1106.749531][ T881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1106.760796][ T5742] koneplus 0003:1E7D:2D51.002C: parse failed [ 1106.760943][ T5742] koneplus 0003:1E7D:2D51.002C: probe with driver koneplus failed with error -22 [ 1106.775998][ T881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1106.862100][ T5742] usb 1-1: USB disconnect, device number 98 [ 1106.881992][ T881] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1106.882022][ T881] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1106.925716][ T881] usb 6-1: USB disconnect, device number 23 [ 1107.444742][ T1073] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12924'. [ 1107.482494][ T1075] fuse: Bad value for 'user_id' [ 1107.482515][ T1075] fuse: Bad value for 'user_id' [ 1107.871070][ T1089] trusted_key: encrypted_key: keyword 'updatP' not recognized [ 1108.343242][ T1109] loop2: detected capacity change from 0 to 512 [ 1108.349520][ T1109] EXT4-fs: Ignoring removed orlov option [ 1108.387957][ T1109] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1108.532832][ T1109] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1108.534084][ T1109] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.12936: corrupted in-inode xattr: e_value size too large [ 1108.534121][ T1109] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1108.534772][ T1109] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.12936: couldn't read orphan inode 15 (err -117) [ 1108.534805][ T1109] loop2: lost filesystem error report for type 5 error -117 [ 1108.573966][ T1109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1108.869375][ T1070] loop3: detected capacity change from 0 to 32768 [ 1110.001849][ T1143] loop5: detected capacity change from 0 to 2048 [ 1110.101057][ T1143] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1110.127428][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.297193][T23403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.429143][T28594] Bluetooth: hci2: command 0x0405 tx timeout [ 1111.021399][ T5742] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1111.158349][ T5742] usb 1-1: Using ep0 maxpacket: 8 [ 1111.160877][ T5742] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1111.160909][ T5742] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1111.160935][ T5742] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1111.160961][ T5742] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1111.161007][ T5742] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1111.161032][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.391826][ T5742] usb 1-1: GET_CAPABILITIES returned 0 [ 1111.391885][ T5742] usbtmc 1-1:16.0: can't read capabilities [ 1111.724143][ T5749] usb 1-1: USB disconnect, device number 99 [ 1112.699829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.926069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.976189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.987510][ T1219] loop3: detected capacity change from 0 to 256 [ 1113.174892][ T1219] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 1113.219816][ T1219] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff) [ 1113.246836][ T1225] loop0: detected capacity change from 0 to 136 [ 1113.253098][ T1225] iso9660: Unknown parameter 'overockperm' [ 1113.429555][ T1225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12982'. [ 1114.314954][ T1272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13004'. [ 1114.628634][ T1276] loop5: detected capacity change from 0 to 4096 [ 1114.869824][ T1287] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1115.491052][ T1308] loop3: detected capacity change from 0 to 256 [ 1115.494642][ T1308] exfat: Deprecated parameter 'utf8' [ 1115.494849][ T1308] exfat: Deprecated parameter 'namecase' [ 1115.506719][ T1308] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1115.967578][ T1320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13023'. [ 1115.967615][ T1320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13023'. [ 1116.021068][ T1325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13023'. [ 1116.021103][ T1325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13023'. [ 1117.155584][ T1351] loop5: detected capacity change from 0 to 4096 [ 1117.171819][ T1351] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1117.342212][ T1351] ntfs3(loop5): ino=19, mi_enum_attr [ 1117.342252][ T1351] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1117.730104][ T1363] sctp: Trying to GSO but underlying device doesn't support it. [ 1118.612413][ T1395] program syz.0.13059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1119.024815][ T881] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1119.177297][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1119.177431][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.178101][ T881] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1119.178130][ T881] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1119.178153][ T881] usb 3-1: Product: syz [ 1119.227235][ T881] usb 3-1: config 0 descriptor?? [ 1119.264080][ T881] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1119.280840][ T881] usb 3-1: Detected FT232H [ 1119.463264][ T881] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1119.843339][ T881] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1120.042279][ T881] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1120.052723][ T881] usb 3-1: USB disconnect, device number 84 [ 1120.084712][ T881] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1120.087942][ T881] ftdi_sio 3-1:0.0: device disconnected [ 1120.318334][ T1440] loop5: detected capacity change from 0 to 128 [ 1120.350834][ T1440] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1120.738303][T23403] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1120.753097][ T1455] loop0: detected capacity change from 0 to 64 [ 1121.863505][ T1479] loop2: detected capacity change from 0 to 8192 [ 1122.535247][ T1513] loop0: detected capacity change from 0 to 512 [ 1122.552586][ T1513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1122.672838][ T1513] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.13112: bg 0: block 5: invalid block bitmap [ 1122.672880][ T1513] loop0: lost filesystem error report for type 5 error -117 [ 1122.682901][ C1] EXT4-fs (loop0): initial error at time 1186: ext4_validate_block_bitmap:432 [ 1122.682939][ C1] EXT4-fs (loop0): last error at time 1186: ext4_validate_block_bitmap:432 [ 1122.885068][ T1513] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1122.885100][ T1513] loop0: lost filesystem error report for type 5 error -117 [ 1122.936497][ T1513] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.13112: invalid indirect mapped block 3 (level 2) [ 1122.936539][ T1513] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1122.937492][ T1513] EXT4-fs (loop0): 1 orphan inode deleted [ 1122.937516][ T1513] EXT4-fs (loop0): 1 truncate cleaned up [ 1122.987713][ T1513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.201799][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.166642][ T1560] loop5: detected capacity change from 0 to 1024 [ 1124.177225][ T1560] EXT4-fs: Ignoring removed bh option [ 1124.260401][ T1560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1124.446929][T23403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1125.066893][ T1592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13144'. [ 1125.603707][ T1602] loop3: detected capacity change from 0 to 512 [ 1125.604636][ T1602] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1125.652540][ T1602] EXT4-fs: Ignoring removed mblk_io_submit option [ 1125.656829][ T1592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13144'. [ 1125.675049][ T1602] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1125.675087][ T1602] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 1125.677424][ T1602] EXT4-fs (loop3): 1 truncate cleaned up [ 1125.682821][ T1602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1125.717132][ T1602] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.468716][ T1625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13158'. [ 1127.046778][ T1638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1127.046798][ T1638] IPv6: NLM_F_CREATE should be set when creating new route [ 1127.046920][ T1638] IPv6: NLM_F_CREATE should be set when creating new route [ 1127.046952][ T1638] IPv6: NLM_F_CREATE should be set when creating new route [ 1127.428669][ T1644] input: syz0 as /devices/virtual/input/input41 [ 1127.474520][ T1651] loop5: detected capacity change from 0 to 512 [ 1127.475739][ T1651] EXT4-fs: Ignoring removed orlov option [ 1127.545282][ T1651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1127.864166][T23403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.677886][ T1682] program syz.3.13183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1129.008983][ T1695] loop5: detected capacity change from 0 to 512 [ 1129.815431][ T1720] netlink: 'syz.3.13202': attribute type 11 has an invalid length. [ 1129.815456][ T1720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13202'. [ 1129.815547][ T1720] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1129.901851][ T8665] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1130.041599][ T8665] usb 3-1: Using ep0 maxpacket: 8 [ 1130.045544][ T8665] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.045574][ T8665] usb 3-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1130.048505][ T8665] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.048534][ T8665] usb 3-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1130.098834][ T8665] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.098864][ T8665] usb 3-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1130.102232][ T8665] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1130.102266][ T8665] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.102296][ T8665] usb 3-1: Product: syz [ 1130.102311][ T8665] usb 3-1: Manufacturer: syz [ 1130.102327][ T8665] usb 3-1: SerialNumber: syz [ 1130.488441][ T8665] usb 3-1: USB disconnect, device number 85 [ 1133.245897][ T1828] loop2: detected capacity change from 0 to 512 [ 1133.265309][ T1828] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1133.278422][ T1828] EXT4-fs (loop2): 1 truncate cleaned up [ 1133.294911][ T1828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1133.452174][ T1835] loop5: detected capacity change from 0 to 2048 [ 1133.475736][ T1835] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1133.602005][ T6702] udevd[6702]: incorrect nilfs2 checksum on /dev/loop5 [ 1133.662744][ T1840] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1133.689167][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.989758][ T1822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1133.989924][ T1822] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1134.488419][ T1822] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1134.700087][ T1866] program syz.2.13265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1134.882647][ T1870] loop2: detected capacity change from 0 to 256 [ 1134.929433][ T1870] exfat: Deprecated parameter 'namecase' [ 1134.929477][ T1870] exfat: Deprecated parameter 'namecase' [ 1135.048031][ T1870] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8300b014, utbl_chksum : 0xe619d30d) [ 1135.775110][ T1891] loop3: detected capacity change from 0 to 512 [ 1135.790215][ T1891] EXT4-fs: Ignoring removed i_version option [ 1135.876246][T28594] Bluetooth: hci2: command 0x0405 tx timeout [ 1135.950014][ T1891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1136.098314][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.375359][ T1906] loop2: detected capacity change from 0 to 512 [ 1136.390315][ T1906] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.13285: bg 0: block 5: invalid block bitmap [ 1136.390366][ T1906] loop2: lost filesystem error report for type 5 error -117 [ 1136.390835][ T1906] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1136.391005][ T1906] loop2: lost filesystem error report for type 5 error -117 [ 1136.391653][ T1906] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.13285: invalid indirect mapped block 3 (level 2) [ 1136.391686][ T1906] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1136.392312][ T1906] EXT4-fs (loop2): 2 truncates cleaned up [ 1136.395668][ T1906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1136.471048][ T1906] EXT4-fs (loop2): shut down requested (2) [ 1136.876335][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.551477][ T1934] loop2: detected capacity change from 0 to 256 [ 1137.824023][T28594] Bluetooth: hci2: command 0x0405 tx timeout [ 1139.024674][ T1980] loop2: detected capacity change from 0 to 512 [ 1139.044540][ T1975] input: syz0 as /devices/virtual/input/input42 [ 1139.056202][ T1980] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1139.081421][ T1980] EXT4-fs (loop2): 1 orphan inode deleted [ 1139.081448][ T1980] EXT4-fs (loop2): 1 truncate cleaned up [ 1139.104274][ T1980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1139.348166][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.516408][ T1994] loop0: detected capacity change from 0 to 128 [ 1139.753363][T28594] Bluetooth: hci2: command 0x0405 tx timeout [ 1140.445595][ T5604] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1140.598236][ T5604] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.598297][ T5604] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.598325][ T5604] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.598351][ T5604] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1140.598387][ T5604] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1140.598412][ T5604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.618888][ T5604] usb 3-1: config 0 descriptor?? [ 1141.092639][ T5604] kye 0003:0458:5015.002D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1141.093516][ T5604] kye 0003:0458:5015.002D: unknown main item tag 0x0 [ 1141.093551][ T5604] kye 0003:0458:5015.002D: unknown main item tag 0x0 [ 1141.500365][ T5604] kye 0003:0458:5015.002D: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 1141.500403][ T5604] kye 0003:0458:5015.002D: tablet-enabling feature report not found [ 1141.500420][ T5604] kye 0003:0458:5015.002D: tablet enabling failed [ 1141.555734][ T2049] loop5: detected capacity change from 0 to 128 [ 1141.699208][ T5604] usb 3-1: USB disconnect, device number 86 [ 1141.899663][ T2052] fido_id[2052]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1142.289959][ T5604] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1142.319997][ T2071] loop3: detected capacity change from 0 to 2048 [ 1142.350544][ T2071] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1142.409932][ T2071] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1142.476504][ T5604] usb 3-1: Using ep0 maxpacket: 8 [ 1142.478919][ T5604] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.478981][ T5604] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1142.479016][ T5604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.520296][ T5604] usb 3-1: config 0 descriptor?? [ 1142.952078][ T5604] uvcvideo 3-1:0.0: Found UVC 0.00 device (2833:0201) [ 1142.952193][ T5604] uvcvideo 3-1:0.0: No valid video chain found. [ 1143.017698][ T5604] usb 3-1: USB disconnect, device number 87 [ 1143.089835][ T2089] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13367'. [ 1143.147574][ T2091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13368'. [ 1143.272210][ T2097] loop0: detected capacity change from 0 to 16 [ 1143.274487][ T2097] erofs (device loop0): DAX unsupported by block device. Turning off DAX. [ 1143.982307][ T2097] erofs (device loop0): mounted with root inode @ nid 36. [ 1144.143289][T28594] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 1144.147377][ T2097] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 1144.147443][ T2097] erofs (device loop0): read error -117 @ 0 of nid 89 [ 1144.151779][ T37] audit: type=1800 audit(1465.242:464): pid=2097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13371" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1144.671438][ T2129] vxcan0: tx drop: invalid da for name 0x0000000000000010 [ 1145.232876][ T2154] loop0: detected capacity change from 0 to 512 [ 1145.251811][ T2154] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1145.286795][ T2154] EXT4-fs (loop0): 1 truncate cleaned up [ 1145.312431][ T2154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1145.366298][ T2154] EXT4-fs (loop0): shut down requested (2) [ 1145.471800][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.615569][ T2164] loop5: detected capacity change from 0 to 128 [ 1145.706459][ T2164] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1145.901753][ T2169] loop2: detected capacity change from 0 to 4096 [ 1145.914032][ T2169] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1146.010284][ T2169] ntfs3(loop2): ino=19, mi_enum_attr [ 1146.010324][ T2169] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1146.219407][T23403] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1146.432151][ T2184] binfmt_misc: register: failed to install interpreter file ./file1 [ 1146.632146][ T2194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13413'. [ 1146.759440][ T37] audit: type=1800 audit(1468.043:465): pid=2169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13403" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 1146.793330][ T2187] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 [ 1147.017107][ T2203] vivid-006: disconnect [ 1147.059935][ T2203] vivid-006: reconnect [ 1147.673846][ T2218] loop0: detected capacity change from 0 to 2048 [ 1147.867072][ T2218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1148.569714][ T2229] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1148.748327][ T5604] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1148.887653][ T5604] usb 3-1: Using ep0 maxpacket: 16 [ 1148.889926][ T5604] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.889963][ T5604] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1148.892699][ T5604] usb 3-1: New USB device found, idVendor=1235, idProduct=0012, bcdDevice= 0.40 [ 1148.892728][ T5604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.892747][ T5604] usb 3-1: Product: syz [ 1148.892761][ T5604] usb 3-1: Manufacturer: syz [ 1148.892777][ T5604] usb 3-1: SerialNumber: syz [ 1149.200543][ T5604] usb 3-1: USB disconnect, device number 88 [ 1149.496879][ T2264] loop3: detected capacity change from 0 to 256 [ 1149.573550][ T2218] overlayfs: failed to verify upper root origin [ 1149.775970][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.868692][ T2269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13447'. [ 1150.088210][ T5604] kernel read not supported for file /media3 (pid: 5604 comm: kworker/1:4) [ 1150.187666][ T2279] loop0: detected capacity change from 0 to 512 [ 1150.463361][ T2279] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1150.463393][ T2279] FAT-fs (loop0): Filesystem has been set read-only [ 1150.906857][ T2299] loop2: detected capacity change from 0 to 8 [ 1150.994267][ T2299] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1151.116287][ T2306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13462'. [ 1152.746229][ T2361] C: renamed from veth1_to_team (while UP) [ 1152.964513][ T2358] gfs2: path_lookup on usrquota returned error -2 [ 1153.044744][ T2361] netlink: 'syz.5.13481': attribute type 1 has an invalid length. [ 1153.044773][ T2361] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1153.169514][ T37] audit: type=1800 audit(1474.920:466): pid=2368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13485" name="file1" dev="tmpfs" ino=11238 res=0 errno=0 [ 1153.248126][ T2370] netlink: 'syz.0.13484': attribute type 12 has an invalid length. [ 1153.248150][ T2370] netlink: 'syz.0.13484': attribute type 29 has an invalid length. [ 1153.248165][ T2370] netlink: 148 bytes leftover after parsing attributes in process `syz.0.13484'. [ 1153.248200][ T2370] netlink: 'syz.0.13484': attribute type 2 has an invalid length. [ 1153.248215][ T2370] netlink: 'syz.0.13484': attribute type 3 has an invalid length. [ 1153.248229][ T2370] netlink: 19 bytes leftover after parsing attributes in process `syz.0.13484'. [ 1154.613900][ T2412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.165603][ T2464] loop0: detected capacity change from 0 to 2048 [ 1156.200735][ T2464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1156.240481][ T2464] EXT4-fs (loop0): shut down requested (2) [ 1156.430106][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.020748][ T2558] loop0: detected capacity change from 0 to 16 [ 1158.086038][ T2558] erofs (device loop0): mounted with root inode @ nid 36. [ 1158.145494][ T2557] isofs_fill_super: bread failed, dev=loop11, iso_blknum=16, block=32 [ 1158.319447][ T2568] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13552'. [ 1158.355771][ T2570] program syz.5.13553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1158.488480][ T2576] program syz.2.13558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1160.599265][ T2654] netlink: 'syz.3.13583': attribute type 4 has an invalid length. [ 1160.599290][ T2654] netlink: 17 bytes leftover after parsing attributes in process `syz.3.13583'. [ 1160.619473][ T2654] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.13583'. [ 1161.106822][ T5604] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1161.253228][ T5604] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1161.253263][ T5604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.253286][ T5604] usb 1-1: Product: syz [ 1161.253302][ T5604] usb 1-1: Manufacturer: syz [ 1161.253319][ T5604] usb 1-1: SerialNumber: syz [ 1162.252618][ T2713] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1162.421807][ T2710] loop5: detected capacity change from 0 to 32768 [ 1162.432082][ T2710] btrfs: Deprecated parameter 'usebackuproot' [ 1162.432108][ T2710] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1162.433564][ T2710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13603 (2710) [ 1162.460827][ T5604] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1162.460894][ T5604] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1162.467553][ T2710] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1162.467592][ T2710] BTRFS info (device loop5): using crc32c checksum algorithm [ 1162.650791][ T5604] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1162.669148][T23649] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1162.669256][ T2710] BTRFS error (device loop5): failed to load root extent [ 1162.669298][ T2710] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1162.677649][T21401] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1162.677793][ T2710] BTRFS warning (device loop5): couldn't read tree root [ 1162.677814][ T2710] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1162.716700][T21401] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1162.716845][ T2710] BTRFS warning (device loop5): couldn't read tree root [ 1162.716875][ T2710] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1162.751145][ T5604] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1162.790988][ T2710] BTRFS info (device loop5): rebuilding free space tree [ 1162.878495][ T5604] usb 1-1: USB disconnect, device number 100 [ 1162.993465][ T2752] loop2: detected capacity change from 0 to 64 [ 1163.006128][ T2752] hfs: unable to locate alternate MDB [ 1163.006146][ T2752] hfs: continuing without an alternate MDB [ 1163.528928][ T2710] BTRFS info (device loop5): checking UUID tree [ 1163.531109][ T2710] BTRFS info (device loop5): enabling ssd optimizations [ 1163.531136][ T2710] BTRFS info (device loop5): turning on async discard [ 1163.531152][ T2710] BTRFS info (device loop5): enabling free space tree [ 1163.531176][ T2710] BTRFS info (device loop5): force clearing of disk cache [ 1163.531192][ T2710] BTRFS info (device loop5): enabling auto defrag [ 1163.531208][ T2710] BTRFS info (device loop5): trying to use backup root at mount time [ 1163.531225][ T2710] BTRFS info (device loop5): use zlib compression, level 3 [ 1165.614135][T23403] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1168.421401][ T2908] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 1168.953950][ T2922] loop0: detected capacity change from 0 to 512 [ 1168.973278][ T2922] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1169.035711][ T2922] EXT4-fs (loop0): 1 truncate cleaned up [ 1169.071822][ T2922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1169.511542][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.710872][ T2983] netlink: 'syz.3.13688': attribute type 1 has an invalid length. [ 1170.710898][ T2983] netlink: 'syz.3.13688': attribute type 2 has an invalid length. [ 1170.720304][ T2983] netlink: 'syz.3.13688': attribute type 1 has an invalid length. [ 1170.720327][ T2983] netlink: 'syz.3.13688': attribute type 2 has an invalid length. [ 1171.734027][ T2981] loop5: detected capacity change from 0 to 32768 [ 1171.796112][ T2981] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1172.140595][ T2981] XFS (loop5): Ending clean mount [ 1172.598540][ T3032] netlink: 332 bytes leftover after parsing attributes in process `syz.2.13705'. [ 1172.598608][ T3032] netlink: 'syz.2.13705': attribute type 9 has an invalid length. [ 1173.025922][T23403] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1173.989592][ T5749] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1174.238472][ T5749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.238513][ T5749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.238555][ T5749] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1174.238581][ T5749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.294370][ T5749] usb 1-1: config 0 descriptor?? [ 1174.758432][ T5749] arvo 0003:1E7D:30D4.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 1174.784789][ T3089] loop5: detected capacity change from 0 to 64 [ 1175.436306][ T5749] usb 1-1: USB disconnect, device number 101 [ 1175.451185][ T3089] UBIFS error (pid: 3089): cannot open "c:::", error -22 [ 1175.461923][ T3103] loop2: detected capacity change from 0 to 256 [ 1176.327180][ T8665] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1176.454361][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.454476][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.481064][ T1336] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1176.488988][ T8665] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1176.489020][ T8665] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.503343][ T8665] usb 1-1: config 0 descriptor?? [ 1177.176823][ T3153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13762'. [ 1177.318443][ T8665] usb 1-1: Cannot set autoneg [ 1177.320717][ T8665] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1177.391534][ T8665] usb 1-1: USB disconnect, device number 102 [ 1178.178162][ T3188] program syz.0.13779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1178.794331][ T5742] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1178.937372][ T5742] usb 6-1: Using ep0 maxpacket: 32 [ 1178.941854][ T5742] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1178.941884][ T5742] usb 6-1: config 0 has no interface number 0 [ 1178.948382][ T5742] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1178.948411][ T5742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.948430][ T5742] usb 6-1: Product: syz [ 1178.948445][ T5742] usb 6-1: Manufacturer: syz [ 1178.948458][ T5742] usb 6-1: SerialNumber: syz [ 1179.053859][ T3220] input: syz0 as /devices/virtual/input/input43 [ 1179.081610][ T5742] usb 6-1: config 0 descriptor?? [ 1179.171715][ T5742] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1179.295165][ T3232] loop0: detected capacity change from 0 to 256 [ 1179.433286][ T5742] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1179.509820][ T3232] FAT-fs (loop0): Directory bread(block 64) failed [ 1179.509856][ T3232] FAT-fs (loop0): Directory bread(block 65) failed [ 1179.510093][ T3232] FAT-fs (loop0): Directory bread(block 66) failed [ 1179.510121][ T3232] FAT-fs (loop0): Directory bread(block 67) failed [ 1179.510229][ T3232] FAT-fs (loop0): Directory bread(block 68) failed [ 1179.510255][ T3232] FAT-fs (loop0): Directory bread(block 69) failed [ 1179.510361][ T3232] FAT-fs (loop0): Directory bread(block 70) failed [ 1179.510388][ T3232] FAT-fs (loop0): Directory bread(block 71) failed [ 1179.510494][ T3232] FAT-fs (loop0): Directory bread(block 72) failed [ 1179.510519][ T3232] FAT-fs (loop0): Directory bread(block 73) failed [ 1179.611152][ T5742] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1179.705598][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1179.778288][ T5742] usb 6-1: USB disconnect, device number 24 [ 1179.985539][ T5742] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1180.004302][ T5742] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1180.005710][ T5742] quatech2 6-1:0.51: device disconnected [ 1180.279730][ T3257] loop2: detected capacity change from 0 to 1024 [ 1183.042367][ T3359] netlink: 'syz.2.13856': attribute type 2 has an invalid length. [ 1183.156200][ T3368] fuse: Bad value for 'fd' [ 1183.413320][ T3378] loop0: detected capacity change from 0 to 256 [ 1183.562220][ T3378] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x00949fb8, utbl_chksum : 0x7319d30d) [ 1184.308930][ T5749] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1184.457761][ T5749] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1184.457792][ T5749] usb 6-1: config 0 has no interface number 0 [ 1184.461756][ T5749] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1184.461789][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.461810][ T5749] usb 6-1: Product: syz [ 1184.461825][ T5749] usb 6-1: Manufacturer: syz [ 1184.461947][ T5749] usb 6-1: SerialNumber: syz [ 1184.538827][ T5749] usb 6-1: config 0 descriptor?? [ 1185.154198][ T5749] asix 6-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 1185.154742][ T5749] asix 6-1:0.251: probe with driver asix failed with error -524 [ 1185.341285][ T5749] usb 6-1: USB disconnect, device number 25 [ 1186.448586][ T3456] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13900'. [ 1187.386757][ T3495] loop3: detected capacity change from 0 to 256 [ 1187.567293][ T3497] loop5: detected capacity change from 0 to 512 [ 1187.725114][ T3497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1188.059583][T23403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.785887][ T3524] serio: Serial port ttynull [ 1190.537952][ T3593] IPv6: NLM_F_CREATE should be specified when creating new route [ 1190.694701][ T3598] loop0: detected capacity change from 0 to 512 [ 1190.903807][ T3598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1191.065826][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.102801][ T3615] netlink: 27 bytes leftover after parsing attributes in process `syz.2.13968'. [ 1191.562727][ T3628] loop5: detected capacity change from 0 to 512 [ 1191.945730][ T3628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1192.338814][T23403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.941298][ T3678] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13997'. [ 1192.941324][ T3678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13997'. [ 1192.941339][ T3678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13997'. [ 1194.999616][ T3746] loop0: detected capacity change from 0 to 512 [ 1195.230463][ T3746] EXT4-fs (loop0): 1 truncate cleaned up [ 1195.257176][ T3746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1195.289562][ T3760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14036'. [ 1195.608256][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.852396][ T3773] loop5: detected capacity change from 0 to 4096 [ 1195.902545][ T3773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1196.206922][T23403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.567532][ T3799] loop5: detected capacity change from 0 to 256 [ 1196.647025][ T3800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1196.757342][ T3799] FAT-fs (loop5): Directory bread(block 64) failed [ 1196.757378][ T3799] FAT-fs (loop5): Directory bread(block 65) failed [ 1196.757473][ T3799] FAT-fs (loop5): Directory bread(block 66) failed [ 1196.758404][ T3799] FAT-fs (loop5): Directory bread(block 67) failed [ 1196.758513][ T3799] FAT-fs (loop5): Directory bread(block 68) failed [ 1196.758536][ T3799] FAT-fs (loop5): Directory bread(block 69) failed [ 1196.758631][ T3799] FAT-fs (loop5): Directory bread(block 70) failed [ 1196.758652][ T3799] FAT-fs (loop5): Directory bread(block 71) failed [ 1196.758870][ T3799] FAT-fs (loop5): Directory bread(block 72) failed [ 1196.758893][ T3799] FAT-fs (loop5): Directory bread(block 73) failed [ 1197.983933][ T3853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14078'. [ 1198.247732][ T3861] loop3: detected capacity change from 0 to 1024 [ 1198.681215][ T3870] sctp: [Deprecated]: syz.0.14084 (pid 3870) Use of int in maxseg socket option. [ 1198.681215][ T3870] Use struct sctp_assoc_value instead [ 1199.901666][ T3910] loop0: detected capacity change from 0 to 128 [ 1200.006290][ T3910] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1200.780255][ T5616] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1201.862413][ T3970] netlink: 47 bytes leftover after parsing attributes in process `syz.0.14130'. [ 1202.164994][ T3978] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1202.218010][ T3985] netlink: 'syz.2.14137': attribute type 6 has an invalid length. [ 1202.692550][ T4000] loop5: detected capacity change from 0 to 512 [ 1202.694456][ T4000] EXT4-fs: Ignoring removed oldalloc option [ 1202.700469][ T4000] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1202.728791][ T4000] EXT4-fs (loop5): 1 truncate cleaned up [ 1202.762784][ T4000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1203.199109][ T4019] loop0: detected capacity change from 0 to 256 [ 1203.427764][ T4019] FAT-fs (loop0): Directory bread(block 64) failed [ 1203.427803][ T4019] FAT-fs (loop0): Directory bread(block 65) failed [ 1203.427937][ T4019] FAT-fs (loop0): Directory bread(block 66) failed [ 1203.427962][ T4019] FAT-fs (loop0): Directory bread(block 67) failed [ 1203.428069][ T4019] FAT-fs (loop0): Directory bread(block 68) failed [ 1203.428096][ T4019] FAT-fs (loop0): Directory bread(block 69) failed [ 1203.428213][ T4019] FAT-fs (loop0): Directory bread(block 70) failed [ 1203.428237][ T4019] FAT-fs (loop0): Directory bread(block 71) failed [ 1203.428347][ T4019] FAT-fs (loop0): Directory bread(block 72) failed [ 1203.428371][ T4019] FAT-fs (loop0): Directory bread(block 73) failed [ 1203.435981][T23403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.681087][ T4031] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14159'. [ 1204.244161][ T4057] netlink: 'syz.2.14170': attribute type 49 has an invalid length. [ 1204.758304][ T5603] hid-generic 0003:0004:FFFFFFFE.002F: unknown main item tag 0x0 [ 1204.758342][ T5603] hid-generic 0003:0004:FFFFFFFE.002F: unknown main item tag 0x0 [ 1204.758368][ T5603] hid-generic 0003:0004:FFFFFFFE.002F: unknown main item tag 0x0 [ 1204.957024][ T4077] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0) [ 1205.110210][ T5603] hid-generic 0003:0004:FFFFFFFE.002F: hidraw0: USB HID v4.00 Device [syz0] on syz1 [ 1205.231409][ T4089] loop5: detected capacity change from 0 to 512 [ 1205.247835][ T4089] EXT4-fs: Ignoring removed oldalloc option [ 1205.247962][ T4089] EXT4-fs: Ignoring removed mblk_io_submit option [ 1205.294671][ T4089] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1205.370878][ T4089] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.14185: corrupted in-inode xattr: e_value size too large [ 1205.370919][ T4089] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1205.392286][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1205.392310][ C1] EXT4-fs (loop5): initial error at time 1530: ext4_iget_extra_inode:5128: inode 15 [ 1205.392338][ C1] EXT4-fs (loop5): last error at time 1530: ext4_iget_extra_inode:5128: inode 15 [ 1205.540211][ T4089] EXT4-fs (loop5): Remounting filesystem read-only [ 1205.629495][ T4093] fido_id[4093]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1205.666349][ T4095] loop3: detected capacity change from 0 to 512 [ 1205.717874][ T4089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1205.722750][ T4099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14189'. [ 1205.748125][ T4089] EXT4-fs (loop5): shut down requested (2) [ 1205.954955][T23403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.087576][ T4095] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1206.362228][ T4095] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.14188: bg 0: block 104: invalid block bitmap [ 1206.362269][ T4095] loop3: lost filesystem error report for type 5 error -117 [ 1206.362960][ T4095] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1206.362987][ T4095] loop3: lost filesystem error report for type 5 error -117 [ 1206.367183][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 1206.367209][ C1] EXT4-fs (loop3): initial error at time 1531: ext4_validate_block_bitmap:432 [ 1206.367236][ C1] EXT4-fs (loop3): last error at time 1531: ext4_mb_clear_bb:6679 [ 1206.404575][ T4095] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.14188: invalid indirect mapped block 1 (level 1) [ 1206.404611][ T4095] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1206.407363][ T4095] EXT4-fs (loop3): 1 truncate cleaned up [ 1206.552377][ T4095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1206.582670][ T5604] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1206.582989][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1206.715069][ T5604] usb 6-1: device descriptor read/64, error -32 [ 1206.964331][ T5604] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1207.161672][ T5604] usb 6-1: Using ep0 maxpacket: 16 [ 1207.165555][ T5604] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.165626][ T5604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1207.165721][ T5604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1207.165745][ T5604] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1207.165771][ T5604] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1207.167329][ T5604] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1207.167359][ T5604] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1207.167382][ T5604] usb 6-1: Manufacturer: syz [ 1207.174917][ T5604] usb 6-1: config 0 descriptor?? [ 1207.184255][ T4134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14205'. [ 1207.400630][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.504448][ T5604] rc_core: IR keymap rc-hauppauge not found [ 1207.504473][ T5604] Registered IR keymap rc-empty [ 1207.504731][ T5604] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1207.532714][ T5604] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1207.562475][ T5604] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1207.584353][ T5604] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input44 [ 1207.593664][ T5604] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1207.616635][ T5604] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1207.645747][ T5604] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1207.665640][ T5604] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1207.689050][ T5604] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1207.705893][ T5604] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1207.728242][ T5604] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1207.756634][ T5604] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1207.775568][ T5604] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1207.797982][ T5604] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1207.855597][ T5604] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1207.855628][ T5604] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1207.889676][ T5604] usb 6-1: USB disconnect, device number 27 [ 1208.250511][ T4158] loop3: detected capacity change from 0 to 2048 [ 1208.337734][ T4158] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1208.915779][ T4175] loop5: detected capacity change from 0 to 4096 [ 1209.018027][ T4182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14226'. [ 1209.350170][ T4193] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1209.908040][ T4205] overlayfs: failed to clone upperpath [ 1210.286105][ T4214] loop0: detected capacity change from 0 to 256 [ 1210.307728][ T4214] exfat: Deprecated parameter 'namecase' [ 1210.307808][ T4214] exfat: Deprecated parameter 'namecase' [ 1210.408024][ T4214] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d) [ 1210.913965][ T1885] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1211.074036][ T1885] usb 1-1: Using ep0 maxpacket: 8 [ 1211.076658][ T1885] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1211.076731][ T1885] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1211.076755][ T1885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1211.076783][ T1885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1211.076808][ T1885] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1211.076864][ T1885] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1211.076888][ T1885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.422083][ T4267] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14264'. [ 1213.461650][ T1885] usb 1-1: USB disconnect, device number 103 [ 1213.594162][ T4311] input: syz1 as /devices/virtual/input/input45 [ 1214.067995][ T5749] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1214.208446][ T5749] usb 6-1: Using ep0 maxpacket: 16 [ 1214.210875][ T5749] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1214.210904][ T5749] usb 6-1: config 0 has no interface number 0 [ 1214.221805][ T5749] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1214.221856][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.221877][ T5749] usb 6-1: Product: syz [ 1214.221892][ T5749] usb 6-1: Manufacturer: syz [ 1214.221909][ T5749] usb 6-1: SerialNumber: syz [ 1214.243980][ T5749] usb 6-1: config 0 descriptor?? [ 1214.275913][ T5749] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1214.992592][ T4359] loop0: detected capacity change from 0 to 512 [ 1215.006980][ T4359] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1215.048810][ T5749] gspca_spca1528: reg_w err -71 [ 1215.063537][ T5749] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 1215.070921][ T5749] usb 6-1: USB disconnect, device number 28 [ 1215.130137][ T4359] EXT4-fs (loop0): 1 truncate cleaned up [ 1215.188279][ T4359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1215.428125][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.676508][ T4379] loop0: detected capacity change from 0 to 256 [ 1215.778187][ T4379] FAT-fs (loop0): Directory bread(block 64) failed [ 1215.778227][ T4379] FAT-fs (loop0): Directory bread(block 65) failed [ 1215.778336][ T4379] FAT-fs (loop0): Directory bread(block 66) failed [ 1215.778360][ T4379] FAT-fs (loop0): Directory bread(block 67) failed [ 1215.778465][ T4379] FAT-fs (loop0): Directory bread(block 68) failed [ 1215.778491][ T4379] FAT-fs (loop0): Directory bread(block 69) failed [ 1215.778599][ T4379] FAT-fs (loop0): Directory bread(block 70) failed [ 1215.778623][ T4379] FAT-fs (loop0): Directory bread(block 71) failed [ 1215.778766][ T4379] FAT-fs (loop0): Directory bread(block 72) failed [ 1215.778791][ T4379] FAT-fs (loop0): Directory bread(block 73) failed [ 1216.085686][ T4388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.403930][ T4402] loop0: detected capacity change from 0 to 64 [ 1216.529573][ T4402] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1217.547434][ T4434] loop5: detected capacity change from 0 to 2048 [ 1217.551875][ T8665] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 1217.659763][ T4434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1217.694172][ T8665] usb 1-1: config 0 has an invalid interface number: 37 but max is 1 [ 1217.694204][ T8665] usb 1-1: config 0 has an invalid interface number: 255 but max is 1 [ 1217.694226][ T8665] usb 1-1: config 0 has no interface number 0 [ 1217.694243][ T8665] usb 1-1: config 0 has no interface number 1 [ 1217.694291][ T8665] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1217.694334][ T8665] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1217.694364][ T8665] usb 1-1: config 0 interface 255 has no altsetting 0 [ 1217.698925][ T8665] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1217.698960][ T8665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.698982][ T8665] usb 1-1: Product: syz [ 1217.698997][ T8665] usb 1-1: Manufacturer: syz [ 1217.699012][ T8665] usb 1-1: SerialNumber: syz [ 1217.807752][ T8665] usb 1-1: config 0 descriptor?? [ 1217.976723][T23403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.133062][ T1885] usb 1-1: USB disconnect, device number 104 [ 1218.563200][ T4468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14355'. [ 1218.911236][ T4475] loop0: detected capacity change from 0 to 128 [ 1219.274323][ T37] audit: type=1804 audit(1545.710:467): pid=4475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.14360" name="/newroot/2342/file0/bus" dev="loop0" ino=1048820 res=1 errno=0 [ 1220.501118][ T4528] loop5: detected capacity change from 0 to 128 [ 1222.215984][ T4572] loop5: detected capacity change from 0 to 1024 [ 1222.237630][ T4572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1222.391020][ T4572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1222.591944][T23403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.097666][ T5749] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1223.237595][ T5749] usb 6-1: Using ep0 maxpacket: 8 [ 1223.240216][ T5749] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.240253][ T5749] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.240279][ T5749] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1223.240309][ T5749] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1223.240346][ T5749] usb 6-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 1223.240370][ T5749] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.246409][ T5749] usb 6-1: config 0 descriptor?? [ 1223.548930][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.708594][ T4596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.709273][ T4596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.748281][ T5749] lenovo 0003:17EF:60FE.0030: unknown main item tag 0x0 [ 1223.748321][ T5749] lenovo 0003:17EF:60FE.0030: unknown main item tag 0x0 [ 1223.748348][ T5749] lenovo 0003:17EF:60FE.0030: unknown main item tag 0x0 [ 1223.748385][ T5749] lenovo 0003:17EF:60FE.0030: unknown main item tag 0x0 [ 1223.748411][ T5749] lenovo 0003:17EF:60FE.0030: unknown main item tag 0x0 [ 1223.748436][ T5749] lenovo 0003:17EF:60FE.0030: unknown main item tag 0x0 [ 1223.748535][ T5749] lenovo 0003:17EF:60FE.0030: unknown main item tag 0x0 [ 1223.748560][ T5749] lenovo 0003:17EF:60FE.0030: unknown main item tag 0x0 [ 1223.748586][ T5749] lenovo 0003:17EF:60FE.0030: unknown main item tag 0x0 [ 1223.748611][ T5749] lenovo 0003:17EF:60FE.0030: unknown main item tag 0x0 [ 1223.831675][ T4621] loop0: detected capacity change from 0 to 256 [ 1223.849414][ T5749] lenovo 0003:17EF:60FE.0030: hidraw0: USB HID v0.00 Device [HID 17ef:60fe] on usb-dummy_hcd.5-1/input0 [ 1223.913924][ T5742] usb 6-1: USB disconnect, device number 29 [ 1223.993807][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.995820][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.997765][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.999664][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.001519][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.003442][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.005331][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.007184][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.009065][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.164259][ T4622] fido_id[4622]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1225.067512][ T4631] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1226.876890][ T4676] vxcan0: tx address claim with dlc 0 [ 1227.252259][ T4684] loop3: detected capacity change from 0 to 2048 [ 1227.384021][ T4696] loop5: detected capacity change from 0 to 512 [ 1227.419666][ T4696] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.14460: Invalid inode bitmap blk 4 in block_group 0 [ 1227.419704][ T4696] loop5: lost filesystem error report for type 5 error -117 [ 1227.464488][ T4696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1227.726656][T23403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.275039][ T4719] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14471'. [ 1229.635875][ T37] audit: type=1326 audit(1556.964:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.0.14478" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6f2ace59 code=0x7fc00000 [ 1229.900275][ T4770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14495'. [ 1230.068874][ T37] audit: type=1800 audit(1557.426:469): pid=4774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.14496" name="file1" dev="tmpfs" ino=4413 res=0 errno=0 [ 1230.382722][ T4790] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14504'. [ 1230.456838][ T4790] ip6gre1: entered promiscuous mode [ 1230.456867][ T4790] ip6gre1: entered allmulticast mode [ 1231.446445][ T4836] loop5: detected capacity change from 0 to 512 [ 1231.653761][ T1885] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1231.797657][ T1885] usb 1-1: Using ep0 maxpacket: 16 [ 1231.801137][ T1885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.802627][ T1885] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1231.802655][ T1885] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1231.808294][ T1885] usb 1-1: Manufacturer: syz [ 1231.830127][ T1885] usb 1-1: config 0 descriptor?? [ 1232.025840][ T5742] usb 1-1: USB disconnect, device number 105 [ 1232.248214][ T4868] net_ratelimit: 950 callbacks suppressed [ 1232.248230][ T4868] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 261 [ 1232.934766][ T4899] loop0: detected capacity change from 0 to 512 [ 1232.951666][ T4899] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1232.951690][ T4899] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1232.981325][ T4899] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.14558: bad orphan inode 131083 [ 1232.981357][ T4899] loop0: lost filesystem error report for type 5 error -117 [ 1232.999955][ T4899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1233.338165][ T4913] loop3: detected capacity change from 0 to 512 [ 1233.348809][ T4913] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1233.391985][ T4913] EXT4-fs (loop3): 1 truncate cleaned up [ 1233.410984][ T4913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1233.472502][ T4899] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 1233.475612][ T4899] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 13: comm syz.0.14558: path /2364/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1233.751212][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.751310][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.770937][ T1336] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1233.777511][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1233.910624][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.097040][ T4938] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1234.097071][ T4938] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1234.119673][ T4938] vhci_hcd vhci_hcd.0: Device attached [ 1234.143475][ T4946] netlink: 'syz.0.14569': attribute type 5 has an invalid length. [ 1234.431296][ T5749] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1236.114972][ T5029] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14609'. [ 1236.373020][ T5039] loop5: detected capacity change from 0 to 256 [ 1236.720446][ T37] audit: type=1326 audit(1564.561:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596742ce59 code=0x7ffc0000 [ 1236.720509][ T37] audit: type=1326 audit(1564.561:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596742ce59 code=0x7ffc0000 [ 1236.784726][ T37] audit: type=1326 audit(1564.636:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596742ce59 code=0x7ffc0000 [ 1236.787929][ T37] audit: type=1326 audit(1564.636:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596742ce59 code=0x7ffc0000 [ 1236.788043][ T37] audit: type=1326 audit(1564.636:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f596742ce59 code=0x7ffc0000 [ 1236.788257][ T37] audit: type=1326 audit(1564.636:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596742ce59 code=0x7ffc0000 [ 1236.793113][ T37] audit: type=1326 audit(1564.646:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596742ce59 code=0x7ffc0000 [ 1236.793164][ T37] audit: type=1326 audit(1564.646:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596742ce59 code=0x7ffc0000 [ 1236.793206][ T37] audit: type=1326 audit(1564.646:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f596742ce59 code=0x7ffc0000 [ 1236.793246][ T37] audit: type=1326 audit(1564.646:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14620" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596742ce59 code=0x7ffc0000 [ 1236.912927][ T4940] vhci_hcd: connection reset by peer [ 1236.951750][ T1042] vhci_hcd vhci_hcd.3: stop threads [ 1236.951776][ T1042] vhci_hcd vhci_hcd.3: release socket [ 1236.952440][ T1042] vhci_hcd vhci_hcd.3: disconnect device [ 1237.060264][T23403] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1237.060290][T23403] FAT-fs (loop5): Filesystem has been set read-only [ 1237.091679][T23403] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1239.315978][ T5749] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1240.548268][ T4979] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1240.680039][ T4979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1240.706286][ T4979] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1240.713738][ T4979] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1240.724585][ T4979] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1241.436295][ T5142] loop3: detected capacity change from 0 to 128 [ 1241.482071][ T5142] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1241.547218][ T5142] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes [ 1241.699282][ T5621] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1242.205898][T21401] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.956207][T28594] Bluetooth: hci2: command tx timeout [ 1244.399613][T21401] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.315097][ T5237] loop3: detected capacity change from 0 to 40427 [ 1245.317361][ T5237] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 1245.317390][ T5237] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1245.318826][T28594] Bluetooth: hci2: command tx timeout [ 1245.359244][ T5237] F2FS-fs (loop3): build fault injection rate: 2 [ 1245.359264][ T5237] F2FS-fs (loop3): build fault injection type: 0x1f8 [ 1245.378361][ T5237] F2FS-fs (loop3): invalid crc value [ 1245.610257][ T5237] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1245.651127][ T5237] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1245.651166][ T5237] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1245.740946][ T5237] F2FS-fs (loop3): inject orphan in f2fs_acquire_orphan_inode of __f2fs_tmpfile+0x28d/0x460 [ 1246.373090][T21401] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.926283][ T5271] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1247.211998][T28594] Bluetooth: hci2: command tx timeout [ 1247.732446][T21401] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.114892][ T5355] netlink: 84 bytes leftover after parsing attributes in process `syz.2.14751'. [ 1249.114916][ T5355] netlink: 84 bytes leftover after parsing attributes in process `syz.2.14751'. [ 1249.115289][ T5355] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1249.148951][T28594] Bluetooth: hci2: command tx timeout [ 1249.283501][ T5360] binder: 5358:5360 ioctl c0306201 0 returned -14 [ 1249.284193][ T5360] binder: 5358:5360 ioctl c0306201 200000000640 returned -22 [ 1250.819117][ T5404] loop0: detected capacity change from 0 to 4096 [ 1250.828485][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.831318][ T5404] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 1250.834707][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.835024][ T5117] bridge_slave_0: entered allmulticast mode [ 1250.868163][ T5117] bridge_slave_0: entered promiscuous mode [ 1251.284462][ T5404] ntfs3(loop0): Failed to load $Extend (-2). [ 1251.284490][ T5404] ntfs3(loop0): Failed to initialize $Extend. [ 1251.649382][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.649727][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.650008][ T5117] bridge_slave_1: entered allmulticast mode [ 1251.653902][ T5117] bridge_slave_1: entered promiscuous mode [ 1253.095766][ T5434] loop3: detected capacity change from 0 to 131072 [ 1253.121781][ T5434] F2FS-fs (loop3): Test dummy encryption mode enabled [ 1253.141703][ T5434] F2FS-fs (loop3): invalid crc value [ 1253.230003][ T5434] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1253.274239][ T5434] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1253.374258][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1253.393228][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.429668][ T5434] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 1253.729345][ T5480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14786'. [ 1253.816435][T21401] bridge_slave_1: left allmulticast mode [ 1253.816477][T21401] bridge_slave_1: left promiscuous mode [ 1253.816790][T21401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.027062][T21401] bridge_slave_0: left allmulticast mode [ 1254.027101][T21401] bridge_slave_0: left promiscuous mode [ 1254.027429][T21401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.418842][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 1256.418864][ T37] audit: type=1326 audit(1585.707:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.2.14832" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f596742ce59 code=0x0 [ 1256.650342][ T5549] loop3: detected capacity change from 0 to 256 [ 1256.777215][ T5549] FAT-fs (loop3): Directory bread(block 64) failed [ 1256.777256][ T5549] FAT-fs (loop3): Directory bread(block 65) failed [ 1256.777387][ T5549] FAT-fs (loop3): Directory bread(block 66) failed [ 1256.777412][ T5549] FAT-fs (loop3): Directory bread(block 67) failed [ 1256.777541][ T5549] FAT-fs (loop3): Directory bread(block 68) failed [ 1256.777566][ T5549] FAT-fs (loop3): Directory bread(block 69) failed [ 1256.777665][ T5549] FAT-fs (loop3): Directory bread(block 70) failed [ 1256.777688][ T5549] FAT-fs (loop3): Directory bread(block 71) failed [ 1256.777784][ T5549] FAT-fs (loop3): Directory bread(block 72) failed [ 1256.777806][ T5549] FAT-fs (loop3): Directory bread(block 73) failed [ 1256.834504][ T5549] syz.3.14805: attempt to access beyond end of device [ 1256.834504][ T5549] loop3: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 1256.834937][ T5549] syz.3.14805: attempt to access beyond end of device [ 1256.834937][ T5549] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1256.845625][ T5549] syz.3.14805: attempt to access beyond end of device [ 1256.845625][ T5549] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1256.846873][ T37] audit: type=1800 audit(1586.147:484): pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.14805" name="file1" dev="loop3" ino=1048832 res=0 errno=0 [ 1256.847916][ T37] audit: type=1800 audit(1586.158:485): pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14805" name="file1" dev="loop3" ino=1048832 res=0 errno=0 [ 1256.850507][ T5549] syz.3.14805: attempt to access beyond end of device [ 1256.850507][ T5549] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1257.659479][T21401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1257.756356][T21401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1257.841405][T21401] bond0 (unregistering): Released all slaves [ 1257.861236][T21401] bond1 (unregistering): Released all slaves [ 1257.981765][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1257.981801][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1258.016292][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1258.016324][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1258.584832][ T5117] team0: Port device team_slave_0 added [ 1258.595384][ T5615] loop3: detected capacity change from 0 to 512 [ 1258.598147][ T5615] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1258.598167][ T5615] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1258.604988][ T5615] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.14865: bad orphan inode 131083 [ 1258.605022][ T5615] loop3: lost filesystem error report for type 5 error -117 [ 1258.643415][ T5615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1258.799504][ T5117] team0: Port device team_slave_1 added [ 1258.799816][T21401] tipc: Disabling bearer [ 1258.801033][T21401] tipc: Left network mode [ 1259.009327][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.009346][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.009374][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.176415][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.176434][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.176463][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.819852][T21401] IPVS: stopping backup sync thread 27244 ... [ 1259.834698][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.170199][ T5117] hsr_slave_0: entered promiscuous mode [ 1260.172746][ T5117] hsr_slave_1: entered promiscuous mode [ 1260.174494][ T5117] debugfs: 'hsr0' already exists in 'hsr' [ 1260.174522][ T5117] Cannot create hsr debugfs directory [ 1260.177837][ T5662] 9p: Bad value for 'rfdno' [ 1260.985928][ T5688] loop3: detected capacity change from 0 to 128 [ 1261.386607][ T5703] loop0: detected capacity change from 0 to 64 [ 1261.883986][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1262.032030][ T5714] geneve2: entered promiscuous mode [ 1262.677571][ T5755] loop3: detected capacity change from 0 to 32768 [ 1262.796868][ T5755] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1263.303025][ T5769] loop0: detected capacity change from 0 to 256 [ 1263.304219][ T5769] exfat: Deprecated parameter 'utf8' [ 1263.304337][ T5769] exfat: Deprecated parameter 'utf8' [ 1263.506545][ T5769] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1263.890107][ T5621] ocfs2: Unmounting device (7,3) on (node local) [ 1264.160614][ T5791] loop0: detected capacity change from 0 to 256 [ 1264.244531][ T5791] FAT-fs (loop0): Directory bread(block 64) failed [ 1264.244570][ T5791] FAT-fs (loop0): Directory bread(block 65) failed [ 1264.244675][ T5791] FAT-fs (loop0): Directory bread(block 66) failed [ 1264.244701][ T5791] FAT-fs (loop0): Directory bread(block 67) failed [ 1264.244807][ T5791] FAT-fs (loop0): Directory bread(block 68) failed [ 1264.244832][ T5791] FAT-fs (loop0): Directory bread(block 69) failed [ 1264.244934][ T5791] FAT-fs (loop0): Directory bread(block 70) failed [ 1264.244959][ T5791] FAT-fs (loop0): Directory bread(block 71) failed [ 1264.245187][ T5791] FAT-fs (loop0): Directory bread(block 72) failed [ 1264.245214][ T5791] FAT-fs (loop0): Directory bread(block 73) failed [ 1265.610358][T21401] hsr_slave_0: left promiscuous mode [ 1265.647843][T21401] hsr_slave_1: left promiscuous mode [ 1265.743256][T21401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1265.743286][T21401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1265.782650][T21401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1265.782681][T21401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1266.269106][T21401] veth1_macvtap: left promiscuous mode [ 1266.269219][T21401] veth0_macvtap: left promiscuous mode [ 1266.269718][T21401] veth1_vlan: left promiscuous mode [ 1266.269806][T21401] veth0_vlan: left promiscuous mode [ 1267.610336][ T37] audit: type=1800 audit(1597.702:486): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14949" name="file1" dev="tmpfs" ino=12146 res=0 errno=0 [ 1269.235411][T21401] team0 (unregistering): Port device team_slave_1 removed [ 1269.319205][T21401] team0 (unregistering): Port device team_slave_0 removed [ 1269.801295][ T5276] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1272.146617][ T5276] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1273.605100][ T6041] netlink: 'syz.2.15012': attribute type 29 has an invalid length. [ 1273.615831][ T6041] netlink: 'syz.2.15012': attribute type 29 has an invalid length. [ 1273.617305][ T6041] netlink: 148 bytes leftover after parsing attributes in process `syz.2.15012'. [ 1273.676886][ T5117] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1273.919923][ T5117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1273.940373][ T5117] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1273.958640][ T6048] ./file0: Can't open blockdev [ 1274.236098][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15019'. [ 1274.274394][ T5117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1274.331483][ T5117] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1274.507955][T21401] IPVS: stop unused estimator thread 0... [ 1274.552664][ T5117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1274.577726][ T5117] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1274.883912][ T5117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1275.787872][ T5276] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1275.904321][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.198350][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.565108][T23649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.565853][T23649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.960496][T23649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.962430][T23649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1277.315351][ T6146] loop3: detected capacity change from 0 to 512 [ 1277.369542][ T6146] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1277.439972][ T6146] EXT4-fs (loop3): 1 truncate cleaned up [ 1277.455364][ T6146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1278.056722][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.202240][ T6203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15072'. [ 1279.257829][ T6203] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15072'. [ 1279.985624][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1280.463287][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15086'. [ 1280.714821][ T6249] loop8: detected capacity change from 0 to 7 [ 1281.165414][ T6249] Dev loop8: unable to read RDB block 7 [ 1281.165450][ T6249] loop8: AHDI p1 p2 [ 1281.165484][ T6249] loop8: partition table partially beyond EOD, truncated [ 1281.165780][ T6249] loop8: p1 start 1702000233 is beyond EOD, truncated [ 1282.369714][ T5117] veth0_vlan: entered promiscuous mode [ 1282.535835][ T5117] veth1_vlan: entered promiscuous mode [ 1282.734864][ T6310] loop3: detected capacity change from 0 to 64 [ 1283.118827][ T5117] veth0_macvtap: entered promiscuous mode [ 1283.253620][ T5117] veth1_macvtap: entered promiscuous mode [ 1283.640327][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1283.770149][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.016894][ T1042] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.030784][ T1042] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.161694][ T1042] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.163578][ T1042] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.568687][ T6379] loop0: detected capacity change from 0 to 8 [ 1286.985083][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.985105][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.120303][ T1885] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1287.288021][ T1885] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1287.288059][ T1885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.302604][ T1885] usb 1-1: config 0 descriptor?? [ 1287.313691][ T1885] cp210x 1-1:0.0: cp210x converter detected [ 1287.531998][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a823000: rx timeout, send abort [ 1287.543664][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a823000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1287.878800][ T1885] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1287.878862][ T1885] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1287.891710][ T1885] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1287.904632][ T1885] usb 1-1: USB disconnect, device number 106 [ 1288.010975][ T1885] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1288.039316][ T1885] cp210x 1-1:0.0: device disconnected [ 1288.070058][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.070091][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.415107][ T6422] loop3: detected capacity change from 0 to 128 [ 1288.445835][ T6422] FAT-fs (loop3): bogus sectors per cluster 7 [ 1288.445862][ T6422] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1288.445879][ T6422] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1288.888080][ T37] audit: type=1326 audit(1620.534:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.15144" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6f2ace59 code=0x7ffc0000 [ 1288.888268][ T37] audit: type=1326 audit(1620.534:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.15144" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6f2ace59 code=0x7ffc0000 [ 1288.949793][ T37] audit: type=1326 audit(1620.598:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.15144" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae6f2ace59 code=0x7ffc0000 [ 1288.949938][ T37] audit: type=1326 audit(1620.598:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.15144" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6f2ace59 code=0x7ffc0000 [ 1288.950107][ T37] audit: type=1326 audit(1620.598:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.15144" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6f2ace59 code=0x7ffc0000 [ 1289.002230][ T37] audit: type=1326 audit(1620.609:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.15144" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fae6f2ace59 code=0x7ffc0000 [ 1289.003265][ T37] audit: type=1326 audit(1620.652:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.15144" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6f2ace59 code=0x7ffc0000 [ 1289.003314][ T37] audit: type=1326 audit(1620.652:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.15144" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6f2ace59 code=0x7ffc0000 [ 1289.036821][ T37] audit: type=1326 audit(1620.684:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.15144" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fae6f2ace59 code=0x7ffc0000 [ 1289.036877][ T37] audit: type=1326 audit(1620.684:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.0.15144" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6f2ace59 code=0x7ffc0000 [ 1289.362333][ T6449] Invalid argument reading file caps for ./file0 [ 1289.665236][ T6457] loop0: detected capacity change from 0 to 512 [ 1289.698642][ T6457] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1289.793685][ T6457] EXT4-fs (loop0): 1 truncate cleaned up [ 1289.820702][ T6457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1290.977104][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1290.977238][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1290.986234][ T1336] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1291.595518][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1292.417295][ T6502] loop6: detected capacity change from 0 to 131072 [ 1292.576948][ T6502] F2FS-fs (loop6): invalid crc value [ 1292.892276][ T6502] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1292.970293][ T6502] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1293.236835][ T6502] F2FS-fs (loop6): f2fs_lookup: inode (ino=4) has zero i_nlink [ 1295.451205][ T6567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15183'. [ 1297.436155][ T6615] loop0: detected capacity change from 0 to 256 [ 1300.524465][ T6112] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1300.712585][ T6112] usb 1-1: config 9 has an invalid interface number: 203 but max is 0 [ 1300.712619][ T6112] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.712641][ T6112] usb 1-1: config 9 has no interface number 0 [ 1300.712691][ T6112] usb 1-1: config 9 interface 203 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1300.712720][ T6112] usb 1-1: config 9 interface 203 altsetting 8 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1300.712751][ T6112] usb 1-1: config 9 interface 203 altsetting 8 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 1300.712780][ T6112] usb 1-1: config 9 interface 203 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1300.712814][ T6112] usb 1-1: config 9 interface 203 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 1300.712842][ T6112] usb 1-1: config 9 interface 203 has no altsetting 0 [ 1300.716053][ T6112] usb 1-1: New USB device found, idVendor=166a, idProduct=0304, bcdDevice=63.85 [ 1300.716084][ T6112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.716106][ T6112] usb 1-1: Product: syz [ 1300.716122][ T6112] usb 1-1: Manufacturer: syz [ 1300.716138][ T6112] usb 1-1: SerialNumber: syz [ 1301.176730][ T6112] cp210x 1-1:9.203: cp210x converter detected [ 1301.179700][ T6112] cp210x 1-1:9.203: failed to get vendor val 0x370b size 1: -71 [ 1301.179731][ T6112] cp210x 1-1:9.203: querying part number failed [ 1301.254625][ T6112] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1301.475169][ T6112] usb 1-1: USB disconnect, device number 107 [ 1301.563743][ T6112] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1301.565736][ T6112] cp210x 1-1:9.203: device disconnected [ 1302.223677][ T6715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15241'. [ 1303.545893][ T6755] loop8: detected capacity change from 0 to 7 [ 1303.586889][ T6755] Dev loop8: unable to read RDB block 7 [ 1303.586939][ T6755] loop8: unable to read partition table [ 1303.587191][ T6755] loop8: partition table beyond EOD, truncated [ 1303.587237][ T6755] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1303.964823][ T1885] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 1304.090778][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 1304.090799][ T37] audit: type=1326 audit(1636.842:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6771 comm="syz.6.15262" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc5aa0ce59 code=0x0 [ 1304.142458][ T1885] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1304.142492][ T1885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.142514][ T1885] usb 1-1: Product: syz [ 1304.142530][ T1885] usb 1-1: Manufacturer: syz [ 1304.142546][ T1885] usb 1-1: SerialNumber: syz [ 1304.181643][ T1885] usb 1-1: config 0 descriptor?? [ 1304.500968][ T1885] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1305.211107][ T1885] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1305.236689][ T1885] usb 1-1: USB disconnect, device number 108 [ 1306.278106][ T6830] sg_read: process 5097 (syz.0.15283) changed security contexts after opening file descriptor, this is not allowed. [ 1306.552552][ T6838] netlink: 'syz.2.15288': attribute type 1 has an invalid length. [ 1306.648050][ T1885] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 1306.707526][ T6838] bond2: entered promiscuous mode [ 1306.707550][ T6838] bond2: entered allmulticast mode [ 1306.708151][ T6838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1306.800590][ T1885] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 1306.800623][ T1885] usb 1-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.800646][ T1885] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1306.800669][ T1885] usb 1-1: config 150 has no interface number 0 [ 1306.800704][ T1885] usb 1-1: config 150 interface 204 has no altsetting 0 [ 1306.849436][ T1885] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1306.849471][ T1885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.849494][ T1885] usb 1-1: Product: syz [ 1306.849509][ T1885] usb 1-1: Manufacturer: syz [ 1306.849526][ T1885] usb 1-1: SerialNumber: syz [ 1307.173335][ T6835] netlink: 79 bytes leftover after parsing attributes in process `syz.0.15286'. [ 1307.189667][ T5604] usb 1-1: USB disconnect, device number 109 [ 1307.748337][ T6865] loop6: detected capacity change from 0 to 512 [ 1307.985832][ T6865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1308.376832][ T5117] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.139726][ T6905] loop0: detected capacity change from 0 to 512 [ 1309.143595][ T6905] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1309.350595][ T6905] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.15318: inode has both inline data and extents flags [ 1309.350635][ T6905] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1309.362772][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1309.362795][ C1] EXT4-fs (loop0): initial error at time 1642: ext4_orphan_get:1397: inode 15 [ 1309.362823][ C1] EXT4-fs (loop0): last error at time 1642: ext4_orphan_get:1397: inode 15 [ 1309.366574][ T6905] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.15318: couldn't read orphan inode 15 (err -117) [ 1309.366607][ T6905] loop0: lost filesystem error report for type 5 error -117 [ 1309.383036][ T6905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1309.684545][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.842796][ T6880] loop3: detected capacity change from 0 to 40427 [ 1309.872843][ T6880] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1309.872875][ T6880] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1309.898403][ T6880] F2FS-fs (loop3): invalid crc value [ 1310.167282][ T6932] netlink: 104 bytes leftover after parsing attributes in process `syz.0.15325'. [ 1310.605336][ T6880] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1310.899138][ T6880] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1310.899182][ T6880] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1311.327131][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15342'. [ 1312.680900][ T6995] loop0: detected capacity change from 0 to 8192 [ 1313.114999][ T7009] loop6: detected capacity change from 0 to 512 [ 1313.138538][ T7005] loop0: detected capacity change from 0 to 1024 [ 1313.174025][ T7005] hfsplus: failed to load extents file [ 1314.719961][ T7051] loop3: detected capacity change from 0 to 32768 [ 1314.731386][ T7051] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.15382 (7051) [ 1315.076573][ T7055] loop6: detected capacity change from 0 to 32768 [ 1315.100507][ T7051] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1315.100547][ T7051] BTRFS info (device loop3): using sha256 checksum algorithm [ 1315.180126][ T7055] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1315.349387][ T7055] XFS (loop6): Ending clean mount [ 1315.388355][ T7055] XFS (loop6): Quotacheck needed: Please wait. [ 1315.621796][ T7051] BTRFS info (device loop3): setting nodatasum [ 1315.621827][ T7051] BTRFS info (device loop3): enabling ssd optimizations [ 1315.621847][ T7051] BTRFS info (device loop3): turning on async discard [ 1315.621865][ T7051] BTRFS info (device loop3): enabling free space tree [ 1317.149798][ T7055] XFS (loop6): Quotacheck: Done. [ 1319.152799][ T7145] veth0_to_bond: left allmulticast mode [ 1319.179196][ T5621] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1319.305223][ T7145] tipc: Resetting bearer [ 1319.337444][ T7145] tipc: Resetting bearer [ 1319.475251][ T7145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.539904][ T7145] geneve2: left promiscuous mode [ 1319.571851][ T7145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1319.573797][ T7145] ip6tnl2: left allmulticast mode [ 1319.589870][ T7145] bridge2: left allmulticast mode [ 1319.608801][ T7145] sit1: left allmulticast mode [ 1319.610651][ T7145] sit2: left allmulticast mode [ 1319.629554][ T7145] xfrm1: left allmulticast mode [ 1319.662705][ T7145] macsec1: left allmulticast mode [ 1319.662730][ T7145] hsr0: left allmulticast mode [ 1319.662745][ T7145] hsr_slave_0: left allmulticast mode [ 1319.662770][ T7145] hsr_slave_1: left allmulticast mode [ 1319.716751][ T7145] vlan0: left promiscuous mode [ 1319.716774][ T7145] geneve1: left promiscuous mode [ 1319.717021][ T7145] vlan0: left allmulticast mode [ 1319.717035][ T7145] geneve1: left allmulticast mode [ 1321.786428][ T5117] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1322.169241][ T7188] loop3: detected capacity change from 0 to 512 [ 1322.421311][ T7188] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.15392: bad orphan inode 11862016 [ 1322.421346][ T7188] loop3: lost filesystem error report for type 5 error -117 [ 1322.477749][ T7188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1322.539552][ T7188] EXT4-fs (loop3): shut down requested (1) [ 1322.720598][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1323.118544][ T7214] loop3: detected capacity change from 0 to 512 [ 1323.124932][ T7214] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1323.329336][ T7214] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 1323.329601][ T7214] System zones: 1-12 [ 1323.379796][ T7214] EXT4-fs (loop3): 1 truncate cleaned up [ 1323.399745][ T7214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1324.317744][ T37] audit: type=1800 audit(1658.257:501): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.15436" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1324.689894][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1325.473466][ T7246] loop3: detected capacity change from 0 to 4096 [ 1325.480496][ T7246] EXT4-fs: Ignoring removed orlov option [ 1325.498603][ T7246] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1325.570279][ T7246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1326.673758][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1327.377163][ T7304] loop0: detected capacity change from 0 to 128 [ 1327.410918][ T7304] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1327.410977][ T7304] hpfs: filesystem error: improperly stopped [ 1327.410993][ T7304] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1327.411008][ T7304] hpfs: You really don't want any checks? You are crazy... [ 1327.411474][ T7304] hpfs: hpfs_map_sector(): read error [ 1327.411488][ T7304] hpfs: code page support is disabled [ 1327.411843][ T7304] hpfs: hpfs_map_4sectors(): unaligned read [ 1327.411953][ T7304] hpfs: hpfs_map_4sectors(): unaligned read [ 1327.411964][ T7304] hpfs: filesystem error: unable to find root dir [ 1327.523174][ T7308] syz.3.15481 (7308): /proc/7305/oom_adj is deprecated, please use /proc/7305/oom_score_adj instead. [ 1329.003160][ T7363] syzkaller1: entered promiscuous mode [ 1329.003191][ T7363] syzkaller1: entered allmulticast mode [ 1329.876930][ T7393] loop0: detected capacity change from 0 to 256 [ 1329.881294][ T7393] exfat: Deprecated parameter 'namecase' [ 1329.886135][ T7393] exFAT-fs (loop0): failed to read boot sector [ 1329.886151][ T7393] exFAT-fs (loop0): failed to recognize exfat type [ 1331.083056][ T7437] loop8: detected capacity change from 0 to 8 [ 1331.102763][ T7437] Dev loop8: unable to read RDB block 8 [ 1331.102811][ T7437] loop8: unable to read partition table [ 1331.103202][ T7437] loop8: partition table beyond EOD, truncated [ 1331.126291][ T7437] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1331.181285][ T7436] loop0: detected capacity change from 0 to 2048 [ 1331.227158][ T7436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1331.351514][ T7436] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1331.571272][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.683980][ T7458] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15549'. [ 1332.395214][ T7482] loop0: detected capacity change from 0 to 1764 [ 1333.266887][ T7503] loop3: detected capacity change from 0 to 256 [ 1333.493081][ T7503] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1333.802676][ T7519] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15578'. [ 1334.104074][ T7530] loop8: detected capacity change from 0 to 7 [ 1334.137292][ T7530] Dev loop8: unable to read RDB block 7 [ 1334.137341][ T7530] loop8: unable to read partition table [ 1334.137583][ T7530] loop8: partition table beyond EOD, truncated [ 1334.137604][ T7530] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1334.523288][ T7543] loop6: detected capacity change from 0 to 256 [ 1334.733058][ T7526] Process accounting resumed [ 1334.958177][ T7543] FAT-fs (loop6): Directory bread(block 64) failed [ 1334.958215][ T7543] FAT-fs (loop6): Directory bread(block 65) failed [ 1334.958334][ T7543] FAT-fs (loop6): Directory bread(block 66) failed [ 1334.958359][ T7543] FAT-fs (loop6): Directory bread(block 67) failed [ 1334.958467][ T7543] FAT-fs (loop6): Directory bread(block 68) failed [ 1334.958491][ T7543] FAT-fs (loop6): Directory bread(block 69) failed [ 1334.958598][ T7543] FAT-fs (loop6): Directory bread(block 70) failed [ 1334.958623][ T7543] FAT-fs (loop6): Directory bread(block 71) failed [ 1334.958730][ T7543] FAT-fs (loop6): Directory bread(block 72) failed [ 1334.958755][ T7543] FAT-fs (loop6): Directory bread(block 73) failed [ 1335.398154][ T7562] loop0: detected capacity change from 0 to 128 [ 1335.418671][ T7562] vfat: Unknown parameter 'shrtname' [ 1335.447993][ T7563] loop3: detected capacity change from 0 to 256 [ 1335.448843][ T7563] exfat: Deprecated parameter 'namecase' [ 1335.448868][ T7563] exfat: Deprecated parameter 'namecase' [ 1335.596650][ T7563] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1335.641592][ T7572] loop6: detected capacity change from 0 to 512 [ 1335.650270][ T7572] EXT4-fs: Ignoring removed nobh option [ 1335.670028][ T7572] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 1335.670103][ T7572] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61 [ 1335.670525][ T7572] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #13: comm syz.6.15602: inode has both inline data and extents flags [ 1335.670557][ T7572] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1335.671560][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1335.671584][ C1] EXT4-fs (loop6): initial error at time 1670: ext4_orphan_get:1397: inode 13 [ 1335.671617][ C1] EXT4-fs (loop6): last error at time 1670: ext4_orphan_get:1397: inode 13 [ 1335.747299][ T7572] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.15602: couldn't read orphan inode 13 (err -117) [ 1335.747356][ T7572] loop6: lost filesystem error report for type 5 error -117 [ 1335.803215][ T7572] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1335.837586][ T7572] EXT4-fs (loop6): shut down requested (1) [ 1336.113238][ T5117] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.121315][ T7609] loop3: detected capacity change from 0 to 4096 [ 1337.137381][ T7609] ntfs3(loop3): ino=3, mi_enum_attr [ 1337.339875][ T881] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1337.525240][ T881] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.525311][ T881] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1337.525339][ T881] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1337.562947][ T881] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1337.562984][ T881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.563044][ T881] usb 1-1: Product: syz [ 1337.563061][ T881] usb 1-1: Manufacturer: syz [ 1337.563077][ T881] usb 1-1: SerialNumber: syz [ 1338.452337][ T7652] loop3: detected capacity change from 0 to 2048 [ 1338.553711][ T881] cdc_ncm 1-1:1.0: bind() failure [ 1338.601627][ T881] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1338.607864][ T881] usb 1-1: USB disconnect, device number 110 [ 1338.695391][ T7659] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1341.238528][ T7747] input: syz1 as /devices/virtual/input/input46 [ 1341.260660][ T7750] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 1343.020653][ T6112] IPVS: starting estimator thread 0... [ 1343.299205][ T7813] IPVS: using max 7 ests per chain, 16800 per kthread [ 1344.827482][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15729'. [ 1345.591729][ T7881] loop6: detected capacity change from 0 to 512 [ 1345.607679][ T7881] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1345.607704][ T7881] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1345.607722][ T7881] EXT4-fs (loop6): SIPHASH is not a valid default hash value [ 1345.731131][ T7888] loop3: detected capacity change from 0 to 512 [ 1345.742247][ T7888] EXT4-fs: Ignoring removed i_version option [ 1345.824089][ T7888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1346.716532][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1347.804388][ T7932] loop0: detected capacity change from 0 to 40427 [ 1347.812888][ T7932] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1347.812915][ T7932] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1347.834210][ T7932] F2FS-fs (loop0): invalid crc value [ 1348.078741][ T7932] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1348.131792][ T7932] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1348.131829][ T7932] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1348.249680][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1348.249808][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1348.305832][ T1336] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1348.437629][ T7949] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1348.448389][ T7946] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1348.792802][ T7959] loop6: detected capacity change from 0 to 8 [ 1348.969963][ T7959] squashfs image failed sanity check [ 1349.254480][ T32] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1349.254894][ T32] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1349.255278][ T32] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1349.255692][ T32] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1349.255712][ T32] rtc rtc0: __rtc_set_alarm: err=-22 [ 1349.508794][ T5616] syz-executor: attempt to access beyond end of device [ 1349.508794][ T5616] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1349.555940][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1349.555978][ T5616] Tainted: [L]=SOFTLOCKUP [ 1349.555986][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1349.555998][ T5616] Call Trace: [ 1349.556008][ T5616] [ 1349.556017][ T5616] dump_stack_lvl+0xe8/0x150 [ 1349.556054][ T5616] f2fs_stop_checkpoint+0x3cd/0x590 [ 1349.556088][ T5616] f2fs_write_end_io+0x1274/0x1740 [ 1349.556142][ T5616] __submit_merged_bio+0x256/0x6a0 [ 1349.556176][ T5616] __submit_merged_write_cond+0x3c9/0x4e0 [ 1349.556213][ T5616] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1349.556264][ T5616] f2fs_write_data_pages+0x287e/0x34f0 [ 1349.556343][ T5616] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1349.556368][ T5616] ? finish_task_switch+0x15f/0xbe0 [ 1349.556413][ T5616] ? finish_task_switch+0x41f/0xbe0 [ 1349.556473][ T5616] ? __lock_acquire+0x6b5/0x2d10 [ 1349.556504][ T5616] ? __lock_acquire+0x6b5/0x2d10 [ 1349.556554][ T5616] ? do_raw_spin_lock+0x12b/0x2f0 [ 1349.556602][ T5616] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1349.556632][ T5616] ? lockdep_hardirqs_on+0x7a/0x110 [ 1349.556660][ T5616] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1349.556703][ T5616] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1349.556733][ T5616] do_writepages+0x32e/0x550 [ 1349.556770][ T5616] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1349.556797][ T5616] ? rt_spin_unlock+0x14f/0x200 [ 1349.556832][ T5616] filemap_fdatawrite+0x1ec/0x2f0 [ 1349.556860][ T5616] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1349.556879][ T5616] ? __lock_acquire+0x6b5/0x2d10 [ 1349.556945][ T5616] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1349.556978][ T5616] ? rt_spin_unlock+0x160/0x200 [ 1349.557005][ T5616] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1349.557053][ T5616] f2fs_write_checkpoint+0x9df/0x26a0 [ 1349.557083][ T5616] ? __lock_acquire+0x6b5/0x2d10 [ 1349.557146][ T5616] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1349.557237][ T5616] kill_f2fs_super+0x314/0x730 [ 1349.557273][ T5616] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1349.557319][ T5616] ? lockdep_hardirqs_on+0x7a/0x110 [ 1349.557362][ T5616] deactivate_locked_super+0xbc/0x130 [ 1349.557394][ T5616] cleanup_mnt+0x437/0x4d0 [ 1349.557420][ T5616] ? _raw_spin_unlock_irq+0x23/0x50 [ 1349.557453][ T5616] task_work_run+0x1d9/0x270 [ 1349.557483][ T5616] ? __pfx_task_work_run+0x10/0x10 [ 1349.557520][ T5616] exit_to_user_mode_loop+0xf3/0x4d0 [ 1349.557555][ T5616] ? rcu_is_watching+0x15/0xb0 [ 1349.557595][ T5616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.557620][ T5616] do_syscall_64+0x33e/0x560 [ 1349.557647][ T5616] ? trace_irq_disable+0x3b/0x140 [ 1349.557678][ T5616] ? clear_bhb_loop+0x40/0x90 [ 1349.557705][ T5616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.557727][ T5616] RIP: 0033:0x7fae6f2ae097 [ 1349.557757][ T5616] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1349.557775][ T5616] RSP: 002b:00007ffe9fc8a478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1349.557799][ T5616] RAX: 0000000000000000 RBX: 00007fae6f3421ca RCX: 00007fae6f2ae097 [ 1349.557814][ T5616] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9fc8a530 [ 1349.557827][ T5616] RBP: 00007ffe9fc8a530 R08: 00007ffe9fc8b530 R09: 00000000ffffffff [ 1349.557842][ T5616] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe9fc8b5c0 [ 1349.557856][ T5616] R13: 00007fae6f3421ca R14: 000000000015caf8 R15: 00007ffe9fc8b600 [ 1349.557891][ T5616] [ 1349.566414][ T5616] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1349.795126][ T7971] loop6: detected capacity change from 0 to 128 [ 1355.261958][ T8095] loop3: detected capacity change from 0 to 32768 [ 1355.263261][ T8095] btrfs: Deprecated parameter 'usebackuproot' [ 1355.263284][ T8095] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1355.264791][ T8095] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.15828 (8095) [ 1355.318420][ T8095] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1355.318462][ T8095] BTRFS info (device loop3): using crc32c checksum algorithm [ 1355.350896][ T8103] bridge0: entered allmulticast mode [ 1355.418762][ T8103] bridge0: left allmulticast mode [ 1355.575519][ T6293] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1355.575709][ T8095] BTRFS error (device loop3): failed to load root extent [ 1355.575752][ T8095] BTRFS warning (device loop3): try to load backup roots slot 1 [ 1355.590279][ T5471] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xc092cdc2 level 0 [ 1355.604812][ T8095] BTRFS warning (device loop3): couldn't read tree root [ 1355.604842][ T8095] BTRFS warning (device loop3): try to load backup roots slot 2 [ 1355.666219][ T1042] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1355.666324][ T8095] BTRFS warning (device loop3): couldn't read tree root [ 1355.666340][ T8095] BTRFS warning (device loop3): try to load backup roots slot 3 [ 1355.753387][ T8095] BTRFS info (device loop3): rebuilding free space tree [ 1355.895285][ T8127] tls_set_device_offload: netdev not found [ 1356.355264][ T8095] BTRFS info (device loop3): checking UUID tree [ 1356.373146][ T8095] BTRFS info (device loop3): enabling ssd optimizations [ 1356.373177][ T8095] BTRFS info (device loop3): turning on async discard [ 1356.373196][ T8095] BTRFS info (device loop3): enabling free space tree [ 1356.373213][ T8095] BTRFS info (device loop3): force clearing of disk cache [ 1356.373232][ T8095] BTRFS info (device loop3): enabling auto defrag [ 1356.373250][ T8095] BTRFS info (device loop3): trying to use backup root at mount time [ 1356.373270][ T8095] BTRFS info (device loop3): use zstd compression, level 3 [ 1357.236926][ T8159] netlink: 236 bytes leftover after parsing attributes in process `syz.2.15853'. [ 1357.236968][ T8159] netlink: 236 bytes leftover after parsing attributes in process `syz.2.15853'. [ 1357.678587][ T5621] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1358.920428][ T8187] loop0: detected capacity change from 0 to 1024 [ 1359.040735][ T8187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1359.056884][ T8187] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.15866: deleted inode referenced: 12 [ 1359.066167][ T8187] EXT4-fs (loop0): Remounting filesystem read-only [ 1359.449018][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1360.255398][ T8227] loop0: detected capacity change from 0 to 128 [ 1360.447666][ T8227] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1360.908617][ T8246] fuse: fd is not a fuse device [ 1361.300986][ T5616] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1361.888883][ T8234] loop3: detected capacity change from 0 to 40427 [ 1361.892162][ T8234] f2fs: Unknown parameter 'whint_mode' [ 1362.254654][ T32] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 1362.298975][ T8275] loop6: detected capacity change from 0 to 2048 [ 1362.379318][ T8275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1362.404962][ T32] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1362.404992][ T32] usb 1-1: config 0 has no interface number 0 [ 1362.405038][ T32] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1362.407639][ T32] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1362.407666][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.407685][ T32] usb 1-1: Product: syz [ 1362.407699][ T32] usb 1-1: Manufacturer: syz [ 1362.407713][ T32] usb 1-1: SerialNumber: syz [ 1362.417684][ T32] usb 1-1: config 0 descriptor?? [ 1362.441645][ T8275] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.15901: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1362.654924][ T8286] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.15901: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1362.991869][ T8234] loop3: detected capacity change from 0 to 512 [ 1363.027818][ T8286] EXT4-fs (loop6): Remounting filesystem read-only [ 1363.045931][ T8234] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1363.056373][ T32] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 1363.115530][ T32] usb 1-1: USB disconnect, device number 111 [ 1363.202035][ T8234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1363.449804][ T5117] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1363.677113][ T37] audit: type=1800 audit(1700.744:502): pid=8234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.15883" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1363.779434][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1364.561447][ T8332] Invalid ELF header len 12 [ 1367.234403][ T8430] netlink: 27 bytes leftover after parsing attributes in process `syz.6.15965'. [ 1367.920227][ C0] sl0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 21010 ms [ 1367.920787][ C0] sl0: transmit timed out, driver error? [ 1369.954668][ T8521] overlayfs: failed to clone upperpath [ 1372.012018][ T8611] loop6: detected capacity change from 0 to 512 [ 1372.206495][ T8611] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1372.210196][ T8611] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.16047: ea_inode with extended attributes [ 1372.210232][ T8611] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1372.211634][ T8611] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.16047: error while reading EA inode 11 err=-117 [ 1372.211664][ T8611] loop6: lost filesystem error report for type 5 error -117 [ 1372.219439][ T8611] EXT4-fs (loop6): 1 orphan inode deleted [ 1372.222439][ T8611] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1372.360283][ T8617] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #12: comm syz.6.16047: corrupted in-inode xattr: invalid ea_ino [ 1372.911220][ T8618] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #12: comm syz.6.16047: corrupted in-inode xattr: invalid ea_ino [ 1373.530052][ T5117] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1376.332713][ T8739] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.16103'. [ 1376.542755][ T8736] loop0: detected capacity change from 0 to 8192 [ 1376.585440][ T8736] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1376.644619][ T8724] loop6: detected capacity change from 0 to 32768 [ 1376.816511][ T8724] JBD2: Ignoring recovery information on journal [ 1377.263760][ T8724] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 1377.858060][ T5117] ocfs2: Unmounting device (7,6) on (node local) [ 1379.158917][ T8794] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1379.603567][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16131'. [ 1380.816546][ T8835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16147'. [ 1380.818682][ T8835] netlink: 'syz.3.16147': attribute type 7 has an invalid length. [ 1380.818707][ T8835] netlink: 'syz.3.16147': attribute type 8 has an invalid length. [ 1380.818722][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16147'. [ 1384.535446][ T8935] loop6: detected capacity change from 0 to 1764 [ 1385.262687][ T8950] loop0: detected capacity change from 0 to 128 [ 1385.608986][ T37] audit: type=1800 audit(1724.305:503): pid=8956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.16198" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1386.980738][ T9003] loop0: detected capacity change from 0 to 1024 [ 1387.005553][ T9003] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1388.177644][ T9031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1388.523390][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16241'. [ 1389.612148][ T9072] loop6: detected capacity change from 0 to 256 [ 1389.613763][ T9072] vfat: Unknown parameter 'roF`o'dir' [ 1390.079094][ T9088] loop3: detected capacity change from 0 to 64 [ 1390.131527][ T9081] loop0: detected capacity change from 0 to 8192 [ 1390.280243][ T9088] Bad inode number on dev loop3: 5 is out of range [ 1390.799531][ T9106] loop0: detected capacity change from 0 to 128 [ 1390.834538][ T9106] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1391.640461][ T9112] [ 1391.640475][ T9112] ====================================================== [ 1391.640485][ T9112] WARNING: possible circular locking dependency detected [ 1391.640498][ T9112] syzkaller #0 Tainted: G L [ 1391.640510][ T9112] ------------------------------------------------------ [ 1391.640520][ T9112] syz.0.16268/9112 is trying to acquire lock: [ 1391.640533][ T9112] ffff88804d06c770 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10e0 [ 1391.640592][ T9112] [ 1391.640592][ T9112] but task is already holding lock: [ 1391.640607][ T9112] ffff88805d4d4cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1130 [ 1391.640675][ T9112] [ 1391.640675][ T9112] which lock already depends on the new lock. [ 1391.640675][ T9112] [ 1391.640683][ T9112] [ 1391.640683][ T9112] the existing dependency chain (in reverse order) is: [ 1391.640692][ T9112] [ 1391.640692][ T9112] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1391.640721][ T9112] percpu_down_read_internal+0x48/0x1d0 [ 1391.640752][ T9112] ext4_writepages+0x205/0x3b0 [ 1391.640781][ T9112] do_writepages+0x32e/0x550 [ 1391.640809][ T9112] __writeback_single_inode+0x133/0x10e0 [ 1391.640837][ T9112] writeback_single_inode+0x4e2/0xdf0 [ 1391.640863][ T9112] write_inode_now+0x1c2/0x290 [ 1391.640884][ T9112] iput+0x9cd/0xf00 [ 1391.640911][ T9112] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 1391.640941][ T9112] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 1391.640971][ T9112] __ext4_expand_extra_isize+0x30d/0x400 [ 1391.641001][ T9112] __ext4_mark_inode_dirty+0x45c/0x710 [ 1391.641022][ T9112] ext4_evict_inode+0x986/0x10e0 [ 1391.641044][ T9112] evict+0x61e/0xb10 [ 1391.641065][ T9112] ext4_orphan_cleanup+0xc38/0x1470 [ 1391.641087][ T9112] ext4_fill_super+0x59bb/0x62d0 [ 1391.641104][ T9112] get_tree_bdev_flags+0x431/0x4f0 [ 1391.641125][ T9112] vfs_get_tree+0x92/0x2a0 [ 1391.641145][ T9112] do_new_mount+0x341/0xd30 [ 1391.641174][ T9112] __se_sys_mount+0x31d/0x420 [ 1391.641201][ T9112] do_syscall_64+0x15f/0x560 [ 1391.641229][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.641248][ T9112] [ 1391.641248][ T9112] -> #0 (sb_internal){.+.+}-{0:0}: [ 1391.641278][ T9112] __lock_acquire+0x15a5/0x2d10 [ 1391.641304][ T9112] lock_acquire+0x106/0x350 [ 1391.641327][ T9112] percpu_down_read_internal+0x48/0x1d0 [ 1391.641356][ T9112] ext4_evict_inode+0x426/0x10e0 [ 1391.641378][ T9112] evict+0x61e/0xb10 [ 1391.641399][ T9112] ext4_ext_migrate+0xe11/0x1130 [ 1391.641430][ T9112] ext4_ioctl+0x2355/0x4b40 [ 1391.641450][ T9112] __se_sys_ioctl+0xff/0x170 [ 1391.641474][ T9112] do_syscall_64+0x15f/0x560 [ 1391.641498][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.641519][ T9112] [ 1391.641519][ T9112] other info that might help us debug this: [ 1391.641519][ T9112] [ 1391.641526][ T9112] Possible unsafe locking scenario: [ 1391.641526][ T9112] [ 1391.641534][ T9112] CPU0 CPU1 [ 1391.641541][ T9112] ---- ---- [ 1391.641549][ T9112] lock(&sbi->s_writepages_rwsem); [ 1391.641565][ T9112] lock(sb_internal); [ 1391.641579][ T9112] lock(&sbi->s_writepages_rwsem); [ 1391.641597][ T9112] rlock(sb_internal); [ 1391.641611][ T9112] [ 1391.641611][ T9112] *** DEADLOCK *** [ 1391.641611][ T9112] [ 1391.641617][ T9112] 3 locks held by syz.0.16268/9112: [ 1391.641629][ T9112] #0: ffff88804d06c480 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x210 [ 1391.641696][ T9112] #1: ffff888061fa3f30 (&sb->s_type->i_mutex_key#11){++++}-{4:4}, at: ext4_ioctl+0x234d/0x4b40 [ 1391.641748][ T9112] #2: ffff88805d4d4cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1130 [ 1391.641804][ T9112] [ 1391.641804][ T9112] stack backtrace: [ 1391.641820][ T9112] CPU: 1 UID: 0 PID: 9112 Comm: syz.0.16268 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1391.641851][ T9112] Tainted: [L]=SOFTLOCKUP [ 1391.641859][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1391.641873][ T9112] Call Trace: [ 1391.641881][ T9112] [ 1391.641891][ T9112] dump_stack_lvl+0xe8/0x150 [ 1391.641920][ T9112] print_circular_bug+0x2e1/0x300 [ 1391.641952][ T9112] check_noncircular+0x12e/0x150 [ 1391.641985][ T9112] __lock_acquire+0x15a5/0x2d10 [ 1391.642014][ T9112] ? __lock_acquire+0x6b5/0x2d10 [ 1391.642039][ T9112] ? __asan_memset+0x22/0x50 [ 1391.642070][ T9112] ? ext4_evict_inode+0x426/0x10e0 [ 1391.642090][ T9112] lock_acquire+0x106/0x350 [ 1391.642112][ T9112] ? ext4_evict_inode+0x426/0x10e0 [ 1391.642142][ T9112] percpu_down_read_internal+0x48/0x1d0 [ 1391.642172][ T9112] ? ext4_evict_inode+0x426/0x10e0 [ 1391.642193][ T9112] ext4_evict_inode+0x426/0x10e0 [ 1391.642215][ T9112] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1391.642243][ T9112] ? reacquire_held_locks+0x104/0x190 [ 1391.642273][ T9112] ? rt_spin_lock+0x1e0/0x400 [ 1391.642295][ T9112] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1391.642318][ T9112] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1391.642342][ T9112] ? rt_spin_unlock+0x14f/0x200 [ 1391.642366][ T9112] ? rt_spin_unlock+0x160/0x200 [ 1391.642384][ T9112] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1391.642406][ T9112] evict+0x61e/0xb10 [ 1391.642435][ T9112] ? __pfx_evict+0x10/0x10 [ 1391.642458][ T9112] ? rt_spin_unlock+0x160/0x200 [ 1391.642478][ T9112] ? iput+0xba1/0xf00 [ 1391.642512][ T9112] ext4_ext_migrate+0xe11/0x1130 [ 1391.642550][ T9112] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 1391.642581][ T9112] ? lockdep_hardirqs_on+0x7a/0x110 [ 1391.642609][ T9112] ? rwbase_write_lock+0x568/0x730 [ 1391.642653][ T9112] ext4_ioctl+0x2355/0x4b40 [ 1391.642676][ T9112] ? __pfx_ext4_ioctl+0x10/0x10 [ 1391.642696][ T9112] ? is_bpf_text_address+0x292/0x2b0 [ 1391.642722][ T9112] ? is_bpf_text_address+0x26/0x2b0 [ 1391.642747][ T9112] ? kernel_text_address+0xa5/0xe0 [ 1391.642772][ T9112] ? __kernel_text_address+0xd/0x30 [ 1391.642797][ T9112] ? unwind_get_return_address+0x4d/0x90 [ 1391.642826][ T9112] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1391.642849][ T9112] ? arch_stack_walk+0xfb/0x150 [ 1391.642887][ T9112] ? stack_trace_save+0xa9/0x100 [ 1391.642907][ T9112] ? __pfx_stack_trace_save+0x10/0x10 [ 1391.642927][ T9112] ? kasan_save_free_info+0x46/0x50 [ 1391.642957][ T9112] ? stack_depot_save_flags+0x33/0x810 [ 1391.642980][ T9112] ? kasan_save_track+0x4f/0x80 [ 1391.642999][ T9112] ? kasan_save_track+0x3e/0x80 [ 1391.643018][ T9112] ? kasan_save_free_info+0x46/0x50 [ 1391.643047][ T9112] ? __kasan_slab_free+0x5c/0x80 [ 1391.643069][ T9112] ? kfree+0x1c5/0x6c0 [ 1391.643088][ T9112] ? tomoyo_path_number_perm+0x501/0x630 [ 1391.643114][ T9112] ? security_file_ioctl+0xc3/0x2a0 [ 1391.643135][ T9112] ? __se_sys_ioctl+0x47/0x170 [ 1391.643158][ T9112] ? do_syscall_64+0x15f/0x560 [ 1391.643184][ T9112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.643215][ T9112] ? file_ioctl+0x279/0x870 [ 1391.643241][ T9112] ? __pfx_file_ioctl+0x10/0x10 [ 1391.643273][ T9112] ? kasan_quarantine_put+0xbb/0x1f0 [ 1391.643309][ T9112] ? tomoyo_path_number_perm+0x219/0x630 [ 1391.643336][ T9112] ? tomoyo_path_number_perm+0x219/0x630 [ 1391.643363][ T9112] ? do_vfs_ioctl+0x117b/0x1540 [ 1391.643388][ T9112] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1391.643418][ T9112] ? do_futex+0x333/0x420 [ 1391.643453][ T9112] ? __fget_files+0x2a/0x420 [ 1391.643474][ T9112] ? __fget_files+0x2a/0x420 [ 1391.643492][ T9112] ? __fget_files+0x3a6/0x420 [ 1391.643511][ T9112] ? __fget_files+0x2a/0x420 [ 1391.643531][ T9112] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1391.643560][ T9112] ? __pfx_ext4_ioctl+0x10/0x10 [ 1391.643582][ T9112] __se_sys_ioctl+0xff/0x170 [ 1391.643606][ T9112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.643628][ T9112] do_syscall_64+0x15f/0x560 [ 1391.643666][ T9112] ? trace_irq_disable+0x3b/0x140 [ 1391.643689][ T9112] ? clear_bhb_loop+0x40/0x90 [ 1391.643713][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.643733][ T9112] RIP: 0033:0x7fae6f2ace59 [ 1391.643752][ T9112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1391.643771][ T9112] RSP: 002b:00007fae6d4e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1391.643794][ T9112] RAX: ffffffffffffffda RBX: 00007fae6f526090 RCX: 00007fae6f2ace59 [ 1391.643812][ T9112] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004 [ 1391.643826][ T9112] RBP: 00007fae6f342d6f R08: 0000000000000000 R09: 0000000000000000 [ 1391.643840][ T9112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1391.643853][ T9112] R13: 00007fae6f526128 R14: 00007fae6f526090 R15: 00007ffe9fc8b208 [ 1391.643876][ T9112] [ 1391.777322][ T5616] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.