last executing test programs: 30.808036606s ago: executing program 0 (id=291): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 29.657143586s ago: executing program 0 (id=296): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000240)={0x1, 0x4, 0xe4, 0x4, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/121, 0x79}], 0x1, 0x5, 0xfffff073) 29.347779262s ago: executing program 0 (id=300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000004c0)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x3, 0x1}, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x2d, 0x30, 0x65, 0x0, 0x1, 0x2, 0x0, @remote, @local}, {0x14, 0x7, 0x0, @rand_addr=0x64010102, "121c78ace5f640b3c04d94f791874c6c6c5d6eb0"}}}, 0xfdef) 29.00987495s ago: executing program 0 (id=302): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x81, 0x243, &(0x7f0000000340)="$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") mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0xf2, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 28.655940148s ago: executing program 0 (id=308): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 27.696090438s ago: executing program 0 (id=316): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0xfffffffc, 0x32}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 27.593275923s ago: executing program 32 (id=316): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0xfffffffc, 0x32}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 3.549954196s ago: executing program 3 (id=495): prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) io_submit(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100000f01674057a21320dbd0010203010902120001000000000904"], 0x0) 2.31882984s ago: executing program 2 (id=509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf258600000008000300", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x40c1}, 0x4400) 2.300553691s ago: executing program 5 (id=510): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.189899447s ago: executing program 2 (id=511): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa}}]}}]}, 0x44}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="0a000100aaaa00"], 0x48}}, 0x0) 2.189241687s ago: executing program 5 (id=512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0xe000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0xa000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) 2.036060704s ago: executing program 2 (id=513): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x0, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000880)="00bc49eb00000009cecefb5d97e5a3", 0xf}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2.022197565s ago: executing program 5 (id=514): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 1.978978678s ago: executing program 2 (id=515): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 1.827502426s ago: executing program 4 (id=518): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x1d6, 0x8}, &(0x7f0000000480)=0x9c) 1.796000497s ago: executing program 1 (id=519): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB=',\nN'], 0x6a) 1.720075251s ago: executing program 1 (id=520): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0xc) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 1.576311579s ago: executing program 3 (id=521): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x60, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, 0x0) 1.520597791s ago: executing program 2 (id=522): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000680)={0x2, {{0xa, 0x4e24, 0xffffffda, @mcast1, 0x72}}, 0x1, 0x1, [{{0xa, 0x4e23, 0x7f, @rand_addr=' \x01\x00', 0x55}}]}, 0x110) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x5004}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 1.380015349s ago: executing program 3 (id=523): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000400)='./file0\x00', 0x402, &(0x7f0000001a40)=ANY=[@ANYBLOB='iocharset=macinuit,umask=00000000000000000000354,errors=continue,gid=', @ANYRESHEX=r1, @ANYBLOB=',iocharset=koi8-r,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="3cfaf0c8b6eca02453decf4c663cdf6c8aca7084d9b4386866a21bb3ec26b6d50ae4ad3f87d725d8725712b8489024deafd6509f6c3c6fdc"], 0x1, 0x151f, &(0x7f0000000500)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) 1.371755259s ago: executing program 1 (id=524): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 1.244548626s ago: executing program 3 (id=525): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.068225795s ago: executing program 5 (id=526): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x3, 0x363}]}) write$ppp(r0, &(0x7f0000000180)="0600", 0x2) 1.012110088s ago: executing program 1 (id=527): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd2a, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x3}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1ffd}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x81}]}]}, 0x13c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@updpolicy={0x188, 0x19, 0xfd3649826d894c67, 0x270bd28, 0x0, {{@in6=@mcast1, @in=@multicast1, 0xffbe, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x100}, {0x0, 0x0, 0xfffffffffffffffe}}, [@tmpl={0xc4, 0x5, [{{@in6=@private2, 0x4d3, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x1, 0x6, 0x4, 0x9, 0x1}, {{@in6=@empty, 0x4d5, 0x3c}, 0xa, @in=@remote, 0x3502, 0x0, 0x0, 0xff, 0xe2, 0x5, 0x8}, {{@in=@local, 0x4d5, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x4, 0x0, 0xcb, 0x8, 0x4, 0x7fffffff}]}, @policy_type={0xa, 0x10, {0x1}}]}, 0x188}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) 961.780071ms ago: executing program 4 (id=528): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') r1 = fanotify_init(0x10, 0x2) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 852.045746ms ago: executing program 5 (id=529): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffeff}, 0x48) close(r0) socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 845.265937ms ago: executing program 1 (id=530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000600)={0xc, 0xff}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000008c0)={0x0, 0x0, @pic={0xf2, 0x8, 0x2, 0x10, 0x3, 0x9, 0x0, 0x9, 0x7, 0x5, 0xf9, 0x4, 0x8, 0xc9, 0x5, 0x2}}) 836.870337ms ago: executing program 4 (id=531): memfd_create(&(0x7f0000000180)='\xd9\x80\xbf\xde\xf3|m\xe9^\xf5\"@\x05\xa0\x8f\xaa\x86nwZ\x11**F\xdf\xac\xc6(\x8e>\xbf0\xf1f\xb1\x87\x86!\x9c\xe1\xd2X\b\xaaO\a\xc7\b<@\xa0m\xc0\xd6\xc9\x9b\xcf\xd9\x10\r\x8f\xb7\x9au\x1b\xa2\xc5\x852v\x1a\x04\x1c\x89\xdb\x85>M\xf7\xcfd\x12.\xcd\xcc\xf0\xffV\xe12`o\xe6\xff\xbd\x0f\xa2N\xf7\xe5E\xca\xba\xf2\x01\xbcp\xd8\x18 \xb4\xa9o\xe8(A\x06q\xba\xdc-@\xac\xa9\x80L\xe8\x1ao\xfd\x01\x9f.\x04\x1c\xa2\xc6\xb4{(\xa7mn=VG9\foIZb\xfeT\x18=\xeem\xcd\'N\xf7\xb0\x83\x7f\n]F\va\xb9Am`\x88\xe0\xd7\xd0\x84\xe0\x80\xf7&\xaf\xd0E!\x03x\xd5\x98\xde\xaf\x84\x91[){\x9e&d\xb2\xda&\x1d\xce8o\xca\xc27G\x90\xaa\xdf\xf7\x85/bN\xc0\x94\xba\x91KBb\\', 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r1, &(0x7f0000000340)=""/19, 0x13, 0x0) 750.316602ms ago: executing program 5 (id=532): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r2, 0x6}, 0x8) 696.034524ms ago: executing program 4 (id=533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010141, 0x0, 0x10001}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 602.536329ms ago: executing program 4 (id=534): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0xc) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 596.06656ms ago: executing program 1 (id=544): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f00000000c0)={[{@journal_async_commit}, {@noacl}, {@coherency_full}, {@heartbeat_none}, {@journal_async_commit}, {@nouser_xattr}]}, 0x1, 0x444c, &(0x7f000000cd40)="$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") r0 = open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x102) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x47, 0xfa00, @id_resuseaddr={0x0}}, 0x20) fallocate(r0, 0x0, 0x0, 0x1000f4) 411.825559ms ago: executing program 2 (id=535): syz_mount_image$hpfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x3200041, &(0x7f0000000480)=ANY=[@ANYBLOB="6561733d6e6f2c63686b64736b3d6e6f2c636173653d617369732c636865636b3d6e6f6e652c006d14efc2ce6842fda040508ddb45e45694b3b22f5bb0b1cc8ee46b892db243105033b698544d8301506a2d994bd4b1516babe7c7ede64e05ea84f6f198b4ba1778ff7c626f7b339166610c6f2d215862aab0117854f16e8754f3c0f274b237a6ac38da5746e7d38f973e6e58f53f"], 0x1, 0x9e15, &(0x7f000000a040)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) r0 = open(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204000, 0x60) flock(r0, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 271.007777ms ago: executing program 3 (id=536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x2, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x67, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) 188.226161ms ago: executing program 4 (id=537): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x80890a, &(0x7f0000000200)={[{@debug}, {@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x5, 0x7b5, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@desc={0x1, 0x0, @desc1}}) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, 0x0, 0x0) 0s ago: executing program 3 (id=538): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x1}, [{0x2, 0x3}], {0x4, 0x1}, [], {0x10, 0x5}, {0x20, 0x4}}, 0x2c, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 31][ T4318] Trying to free block not in datazone [ 77.650527][ T4318] Trying to free block not in datazone [ 77.657232][ T4318] Trying to free block not in datazone [ 77.671843][ T4318] Trying to free block not in datazone [ 77.683766][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.693401][ T4318] Trying to free block not in datazone [ 77.700157][ T4318] Trying to free block not in datazone [ 77.709407][ T4318] Trying to free block not in datazone [ 77.727848][ T4318] Trying to free block not in datazone [ 77.963526][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 78.073495][ T4232] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.093591][ T21] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 78.110608][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.131334][ T21] usb 4-1: config 0 descriptor?? [ 78.331489][ T4406] loop4: detected capacity change from 0 to 32768 [ 78.413623][ T21] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 78.435816][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.468786][ T21] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 78.476297][ T21] usb 4-1: media controller created [ 78.493550][ T4232] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.506910][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.515696][ T4232] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 78.533449][ T4232] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.548761][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.561270][ T4406] XFS (loop4): Mounting V5 Filesystem [ 78.573910][ T4404] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 78.582301][ T4410] loop1: detected capacity change from 0 to 4096 [ 78.623730][ T21] az6027: usb out operation failed. (-71) [ 78.665197][ T4410] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.673592][ T21] az6027: usb out operation failed. (-71) [ 78.689174][ T21] stb0899_attach: Driver disabled by Kconfig [ 78.763405][ T21] az6027: no front-end attached [ 78.763405][ T21] [ 78.806287][ T4406] XFS (loop4): Ending clean mount [ 78.827700][ T21] az6027: usb out operation failed. (-71) [ 78.865497][ T21] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 78.926091][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 78.944008][ T4406] XFS (loop4): User initiated shutdown received. [ 78.950676][ T4406] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 78.969619][ T4233] usb 1-1: USB disconnect, device number 2 [ 78.986976][ T21] dvb-usb: schedule remote query interval to 400 msecs. [ 79.002806][ T21] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 79.013059][ T4406] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 79.032930][ T21] usb 4-1: USB disconnect, device number 3 [ 79.111535][ T4197] XFS (loop4): Unmounting Filesystem [ 79.181533][ T21] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 79.711044][ T4433] loop4: detected capacity change from 0 to 64 [ 79.930573][ T4424] loop1: detected capacity change from 0 to 32768 [ 80.065822][ T4436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.59'. [ 80.097237][ T4424] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.123583][ T4424] lbmIODone: I/O error in JFS log [ 80.141665][ T4424] *** Log Format Error ! *** [ 80.170729][ T4424] lmLogInit: exit(-22) [ 80.186371][ T4424] lmLogOpen: exit(-22) [ 80.336525][ T4439] netlink: 'syz.4.60': attribute type 2 has an invalid length. [ 80.355394][ T4424] ERROR: (device loop1): jfs_link: read-only filesystem [ 80.355394][ T4424] [ 80.390769][ T4424] ERROR: (device loop1): remounting filesystem as read-only [ 80.586835][ T4430] loop0: detected capacity change from 0 to 32768 [ 80.790640][ T4445] loop1: detected capacity change from 0 to 32768 [ 80.847589][ T4430] XFS (loop0): Mounting V5 Filesystem [ 80.888271][ T4445] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.63 (4445) [ 80.955293][ T4445] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 80.964604][ T4445] BTRFS info (device loop1): use no compression [ 80.970924][ T4445] BTRFS info (device loop1): max_inline at 4096 [ 80.978198][ T4445] BTRFS info (device loop1): using free space tree [ 80.985091][ T4445] BTRFS info (device loop1): has skinny extents [ 80.996022][ T4430] XFS (loop0): Ending clean mount [ 81.036548][ T4430] XFS (loop0): Quotacheck needed: Please wait. [ 81.205004][ T4430] XFS (loop0): Quotacheck: Done. [ 81.364144][ T4445] BTRFS info (device loop1): enabling ssd optimizations [ 81.661471][ T7] cfg80211: failed to load regulatory.db [ 81.736134][ T4185] XFS (loop0): Unmounting Filesystem [ 81.863647][ T4440] loop3: detected capacity change from 0 to 40427 [ 81.893857][ T4440] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x1ffff [ 81.912092][ T4480] loop4: detected capacity change from 0 to 1764 [ 81.934698][ T4440] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 82.010631][ T4440] F2FS-fs (loop3): invalid crc value [ 82.090485][ T4440] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.299359][ T4440] F2FS-fs (loop3): Start checkpoint disabled! [ 82.393536][ T4440] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 82.514057][ T4440] F2FS-fs (loop3): access invalid blkaddr:4043309056 [ 82.521080][ T4440] CPU: 1 PID: 4440 Comm: syz.3.61 Not tainted syzkaller #0 [ 82.528304][ T4440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 82.538397][ T4440] Call Trace: [ 82.541699][ T4440] [ 82.544646][ T4440] dump_stack_lvl+0x188/0x250 [ 82.549366][ T4440] ? show_regs_print_info+0x20/0x20 [ 82.554584][ T4440] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 82.560434][ T4440] f2fs_is_valid_blkaddr+0xc7e/0x1250 [ 82.565934][ T4440] f2fs_map_blocks+0xbcd/0x3300 [ 82.570970][ T4440] ? f2fs_force_buffered_io+0x680/0x680 [ 82.576736][ T4440] ? xa_load+0x276/0x2a0 [ 82.581035][ T4440] f2fs_mpage_readpages+0xc95/0x2260 [ 82.586389][ T4440] ? dquot_release_reservation_block+0xa0/0xa0 [ 82.592594][ T4440] ? f2fs_is_compress_backend_ready+0x99/0x120 [ 82.598781][ T4440] ? f2fs_readahead+0x163/0x2f0 [ 82.603656][ T4440] ? f2fs_set_data_page_dirty+0xad0/0xad0 [ 82.609507][ T4440] read_pages+0x175/0x930 [ 82.613867][ T4440] ? page_cache_ra_unbounded+0x940/0x940 [ 82.619623][ T4440] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 82.625247][ T4440] page_cache_ra_unbounded+0x838/0x940 [ 82.630847][ T4440] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 82.637478][ T4440] f2fs_readdir+0x496/0xda0 [ 82.642045][ T4440] ? f2fs_fill_dentries+0xd10/0xd10 [ 82.647378][ T4440] ? end_current_label_crit_section+0x14b/0x170 [ 82.653753][ T4440] ? iterate_dir+0x10d/0x560 [ 82.658471][ T4440] ? down_read_killable+0x1ce/0x340 [ 82.663803][ T4440] ? fsnotify_perm+0x254/0x560 [ 82.668711][ T4440] iterate_dir+0x218/0x560 [ 82.673256][ T4440] ? f2fs_fill_dentries+0xd10/0xd10 [ 82.678494][ T4440] __se_sys_getdents64+0xf2/0x270 [ 82.683549][ T4440] ? __x64_sys_getdents64+0x80/0x80 [ 82.688772][ T4440] ? filldir+0x720/0x720 [ 82.693037][ T4440] ? vtime_user_exit+0x2c8/0x3e0 [ 82.698010][ T4440] ? lockdep_hardirqs_on+0x94/0x140 [ 82.703242][ T4440] do_syscall_64+0x4c/0xa0 [ 82.707773][ T4440] ? clear_bhb_loop+0x30/0x80 [ 82.712485][ T4440] ? clear_bhb_loop+0x30/0x80 [ 82.717302][ T4440] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.723232][ T4440] RIP: 0033:0x7f663b8a0819 [ 82.727768][ T4440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.747503][ T4440] RSP: 002b:00007f6639afa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 82.755955][ T4440] RAX: ffffffffffffffda RBX: 00007f663bb19fa0 RCX: 00007f663b8a0819 [ 82.764294][ T4440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 82.772504][ T4440] RBP: 00007f663b936c91 R08: 0000000000000000 R09: 0000000000000000 [ 82.780516][ T4440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.788529][ T4440] R13: 00007f663bb1a038 R14: 00007f663bb19fa0 R15: 00007ffe0a8124e8 [ 82.796565][ T4440] [ 83.153289][ T4495] input: syz0 as /devices/virtual/input/input6 [ 83.213559][ T4440] attempt to access beyond end of device [ 83.213559][ T4440] loop3: rw=524288, want=45072, limit=40427 [ 83.243612][ T4440] attempt to access beyond end of device [ 83.243612][ T4440] loop3: rw=0, want=45072, limit=40427 [ 83.282259][ T4478] loop2: detected capacity change from 0 to 32768 [ 83.345957][ T4478] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.67 (4478) [ 83.449776][ T4478] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 83.499780][ T4478] BTRFS info (device loop2): enabling auto defrag [ 83.563973][ T4478] BTRFS info (device loop2): use no compression [ 83.570360][ T4478] BTRFS info (device loop2): max_inline at 4096 [ 83.623018][ T4288] attempt to access beyond end of device [ 83.623018][ T4288] loop3: rw=2049, want=40976, limit=40427 [ 83.625434][ T4478] BTRFS info (device loop2): using free space tree [ 83.751609][ T4478] BTRFS info (device loop2): has skinny extents [ 83.848696][ T4501] loop4: detected capacity change from 0 to 512 [ 83.996439][ T4501] EXT4-fs (loop4): Ignoring removed orlov option [ 84.042263][ T4478] BTRFS info (device loop2): enabling ssd optimizations [ 84.133792][ T4501] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 84.304645][ T4501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 84.332033][ T4493] loop1: detected capacity change from 0 to 32768 [ 84.405046][ T4501] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.73: corrupted in-inode xattr [ 84.467318][ T4493] XFS (loop1): Mounting V5 Filesystem [ 84.475622][ T4501] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.73: couldn't read orphan inode 15 (err -117) [ 84.490520][ T4501] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,debug,noblock_validity,noload,nombcache,orlov,min_batch_time=0x0000000000000002,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 84.860428][ T4493] XFS (loop1): Starting recovery (logdev: internal) [ 84.935889][ T4178] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop2 scanned by udevd (4178) [ 84.994617][ T4493] XFS (loop1): Ending recovery (logdev: internal) [ 85.093586][ T4489] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.117606][ T4545] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.198327][ T4545] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 85.353451][ T4489] usb 1-1: Using ep0 maxpacket: 32 [ 85.416648][ T4550] loop4: detected capacity change from 0 to 4096 [ 85.437338][ T4554] loop3: detected capacity change from 0 to 4096 [ 85.473708][ T4489] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.486872][ T4184] XFS (loop1): Unmounting Filesystem [ 85.496391][ T4489] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 85.592147][ T4550] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 85.682322][ T4550] ntfs3: loop4: Failed to load $Extend. [ 85.723659][ T4489] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 85.739642][ T4489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.771946][ T4489] usb 1-1: Product: syz [ 85.790387][ T4555] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.800492][ T4489] usb 1-1: Manufacturer: syz [ 85.827722][ T4489] usb 1-1: SerialNumber: syz [ 85.863965][ T4489] usb 1-1: config 0 descriptor?? [ 86.027573][ T4554] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 86.062222][ T4554] Remounting filesystem read-only [ 86.283627][ T4489] usb 1-1: USB disconnect, device number 3 [ 86.392097][ T4564] loop1: detected capacity change from 0 to 1024 [ 86.500743][ T4564] hfsplus: invalid length 32517 has been corrected to 255 [ 86.719913][ T4564] hfsplus: b-tree write err: -5, ino 20 [ 86.785048][ T1197] hfsplus: b-tree write err: -5, ino 20 [ 86.893499][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 87.183970][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 87.344332][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.356471][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.366995][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 87.376445][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.386839][ T21] usb 4-1: config 0 descriptor?? [ 87.438352][ T21] hub 4-1:0.0: USB hub found [ 87.653937][ T21] hub 4-1:0.0: 1 port detected [ 87.973539][ T4489] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.053945][ T4543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.081212][ T4611] device batadv_slave_1 entered promiscuous mode [ 88.096850][ T4610] device batadv_slave_1 left promiscuous mode [ 88.196827][ T21] usb 4-1: USB disconnect, device number 4 [ 88.213623][ T4489] usb 3-1: Using ep0 maxpacket: 8 [ 88.237141][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.333609][ T4489] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 88.341839][ T4489] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 88.380776][ T4489] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 88.410876][ T4489] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 88.473034][ T4489] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 88.503397][ T4489] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.543686][ T4489] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.573504][ T4489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.584926][ T4619] loop0: detected capacity change from 0 to 1764 [ 88.847669][ T4627] loop3: detected capacity change from 0 to 1024 [ 88.853652][ T4489] usb 3-1: GET_CAPABILITIES returned 0 [ 88.859825][ T4489] usbtmc 3-1:16.0: can't read capabilities [ 88.914871][ T4627] hfsplus: invalid length 32517 has been corrected to 255 [ 89.064857][ T21] usb 3-1: USB disconnect, device number 2 [ 89.254753][ T9] hfsplus: b-tree write err: -5, ino 20 [ 89.265927][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.288493][ T4615] loop4: detected capacity change from 0 to 32768 [ 89.394664][ T4545] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.441854][ T4615] [ 89.441854][ T4615] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.441854][ T4615] [ 89.534819][ T4615] read_mapping_page failed! [ 89.553725][ T4615] ERROR: (device loop4): txCommit: [ 89.553725][ T4615] [ 89.607725][ T4638] read_mapping_page failed! [ 89.612561][ T4638] ERROR: (device loop4): txCommit: [ 89.612561][ T4638] [ 89.653670][ T4545] usb 2-1: Using ep0 maxpacket: 32 [ 89.696606][ T4615] read_mapping_page failed! [ 89.717700][ T4615] ERROR: (device loop4): txCommit: [ 89.717700][ T4615] [ 89.773755][ T4545] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.803443][ T4545] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 89.871266][ T4640] loop2: detected capacity change from 0 to 4096 [ 89.878904][ T4197] [ 89.878904][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.878904][ T4197] [ 89.931188][ T4197] [ 89.931188][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.931188][ T4197] [ 89.963252][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.963637][ T4545] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 90.011599][ T4545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.014604][ T21] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.030572][ T4545] usb 2-1: Product: syz [ 90.040707][ T4545] usb 2-1: Manufacturer: syz [ 90.059877][ T4545] usb 2-1: SerialNumber: syz [ 90.081308][ T4545] usb 2-1: config 0 descriptor?? [ 90.131158][ T4640] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 90.196464][ T4640] ntfs3: loop2: Failed to load $Extend. [ 90.305906][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.440183][ T4636] loop3: detected capacity change from 0 to 32768 [ 90.591754][ T4636] XFS (loop3): Mounting V5 Filesystem [ 90.672001][ T23] usb 2-1: USB disconnect, device number 2 [ 90.728958][ T4636] XFS (loop3): Ending clean mount [ 90.751589][ T4636] XFS (loop3): Quotacheck needed: Please wait. [ 90.765765][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.846758][ T4636] XFS (loop3): Quotacheck: Done. [ 91.001672][ T4195] XFS (loop3): Unmounting Filesystem [ 91.093937][ T4545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.169420][ T4655] loop2: detected capacity change from 0 to 32768 [ 91.243539][ T21] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.277424][ T4663] loop0: detected capacity change from 0 to 4096 [ 91.289373][ T21] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 91.310548][ T21] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.324374][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.333575][ T4655] XFS (loop2): Mounting V5 Filesystem [ 91.337450][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.353829][ T4650] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 91.654614][ T4543] usb 5-1: USB disconnect, device number 2 [ 91.706023][ T4185] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 91.712626][ T4185] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 91.780766][ T4655] XFS (loop2): Starting recovery (logdev: internal) [ 91.854986][ T4673] loop1: detected capacity change from 0 to 1764 [ 91.868013][ T4655] XFS (loop2): Ending recovery (logdev: internal) [ 92.022126][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.080290][ T4678] loop3: detected capacity change from 0 to 2048 [ 92.163941][ T4187] XFS (loop2): Unmounting Filesystem [ 92.178247][ T4418] loop3: p1 < > p4 [ 92.178247][ T4418] p4: [ 92.225459][ T4418] loop3: p4 size 722688 extends beyond EOD, truncated [ 92.272643][ T4682] loop0: detected capacity change from 0 to 1024 [ 92.334312][ T4678] loop3: p1 < > p4 [ 92.334312][ T4678] p4: [ 92.369558][ T4678] loop3: p4 size 722688 extends beyond EOD, truncated [ 92.385765][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.424151][ T4682] hfsplus: invalid length 32517 has been corrected to 255 [ 92.602812][ T4682] hfsplus: b-tree write err: -5, ino 20 [ 92.814406][ T9] hfsplus: b-tree write err: -5, ino 20 [ 93.214167][ T4545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.414730][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.697046][ T4697] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.819518][ T4542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.859951][ T4689] set_capacity_and_notify: 2 callbacks suppressed [ 93.859967][ T4689] loop1: detected capacity change from 0 to 32768 [ 94.014644][ T4689] XFS (loop1): Mounting V5 Filesystem [ 94.185890][ T4689] XFS (loop1): Ending clean mount [ 94.238867][ T4689] XFS (loop1): User initiated shutdown received. [ 94.274513][ T4689] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 94.329431][ T4689] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 94.464938][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.524843][ T4184] XFS (loop1): Unmounting Filesystem [ 94.890996][ T4703] loop3: detected capacity change from 0 to 32768 [ 94.958965][ T4703] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.990771][ T4703] lbmIODone: I/O error in JFS log [ 95.025870][ T4703] *** Log Format Error ! *** [ 95.030794][ T4703] lmLogInit: exit(-22) [ 95.060734][ T4703] lmLogOpen: exit(-22) [ 95.095139][ T4542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.151459][ T4705] loop2: detected capacity change from 0 to 32768 [ 95.195025][ T4703] ERROR: (device loop3): jfs_link: read-only filesystem [ 95.195025][ T4703] [ 95.217835][ T4703] ERROR: (device loop3): remounting filesystem as read-only [ 95.317418][ T4722] loop0: detected capacity change from 0 to 64 [ 95.375021][ T4705] XFS (loop2): Mounting V5 Filesystem [ 95.492156][ T4705] XFS (loop2): Ending clean mount [ 95.497802][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.565175][ T4705] XFS (loop2): Quotacheck needed: Please wait. [ 95.643171][ T4705] XFS (loop2): Quotacheck: Done. [ 95.730026][ T4542] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.801823][ T4187] XFS (loop2): Unmounting Filesystem [ 95.817236][ T4722] Trying to free block not in datazone [ 95.822754][ T4722] Trying to free block not in datazone [ 95.898479][ T4722] Trying to free block not in datazone [ 95.982563][ T4722] Trying to free block not in datazone [ 95.993520][ T4542] usb 4-1: Using ep0 maxpacket: 32 [ 95.998804][ T4722] Trying to free block not in datazone [ 96.039817][ T4731] Trying to free block not in datazone [ 96.059697][ T4722] Trying to free block not in datazone [ 96.063563][ T4731] Trying to free block not in datazone [ 96.075708][ T4722] Trying to free block not in datazone [ 96.081336][ T4722] Trying to free block not in datazone [ 96.087416][ T4731] Trying to free block not in datazone [ 96.093087][ T4731] Trying to free block not in datazone [ 96.113636][ T4542] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.163429][ T4542] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 96.189630][ T4722] Trying to free block not in datazone [ 96.209926][ T4722] Trying to free block not in datazone [ 96.240372][ T4722] Trying to free block not in datazone [ 96.260570][ T4722] Trying to free block not in datazone [ 96.280825][ T4722] Trying to free block not in datazone [ 96.301085][ T4722] Trying to free block not in datazone [ 96.333764][ T4542] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 96.343620][ T4722] Trying to free block not in datazone [ 96.349383][ T4722] Trying to free block not in datazone [ 96.367433][ T4542] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.377263][ T4722] Trying to free block not in datazone [ 96.382792][ T4722] Trying to free block not in datazone [ 96.398990][ T4542] usb 4-1: Product: syz [ 96.403215][ T4542] usb 4-1: Manufacturer: syz [ 96.403929][ T4734] syz.2.134 uses obsolete (PF_INET,SOCK_PACKET) [ 96.408323][ T4722] Trying to free block not in datazone [ 96.433420][ T4542] usb 4-1: SerialNumber: syz [ 96.441294][ T4543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.450273][ T4722] Trying to free block not in datazone [ 96.457743][ T4542] usb 4-1: config 0 descriptor?? [ 96.464343][ T4722] Trying to free block not in datazone [ 96.480423][ T4722] Trying to free block not in datazone [ 96.490472][ T4722] Trying to free block not in datazone [ 96.500599][ T4722] Trying to free block not in datazone [ 96.522349][ T4722] Trying to free block not in datazone [ 96.533995][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.548767][ T4722] Trying to free block not in datazone [ 96.563468][ T4722] Trying to free block not in datazone [ 96.569062][ T4722] Trying to free block not in datazone [ 96.613467][ T4722] Trying to free block not in datazone [ 96.619057][ T4722] Trying to free block not in datazone [ 96.633786][ T4722] Trying to free block not in datazone [ 96.639306][ T4722] Trying to free block not in datazone [ 96.663387][ T4722] Trying to free block not in datazone [ 96.668898][ T4722] Trying to free block not in datazone [ 96.683375][ T4722] Trying to free block not in datazone [ 96.688864][ T4722] Trying to free block not in datazone [ 96.709763][ T4722] Trying to free block not in datazone [ 96.717645][ T4722] Trying to free block not in datazone [ 96.723246][ T4722] Trying to free block not in datazone [ 96.753456][ T4722] Trying to free block not in datazone [ 96.758990][ T4722] Trying to free block not in datazone [ 96.790317][ T4722] Trying to free block not in datazone [ 96.813419][ T4722] Trying to free block not in datazone [ 96.819042][ T4722] Trying to free block not in datazone [ 96.837420][ T4542] usb 4-1: USB disconnect, device number 5 [ 96.840926][ T4722] Trying to free block not in datazone [ 96.857226][ T4722] Trying to free block not in datazone [ 96.862820][ T4722] Trying to free block not in datazone [ 96.893366][ T4722] Trying to free block not in datazone [ 96.898938][ T4722] Trying to free block not in datazone [ 96.929856][ T4722] Trying to free block not in datazone [ 96.943378][ T4722] Trying to free block not in datazone [ 96.948910][ T4722] Trying to free block not in datazone [ 96.964841][ T4722] Trying to free block not in datazone [ 96.970346][ T4722] Trying to free block not in datazone [ 96.983466][ T4722] Trying to free block not in datazone [ 96.989130][ T4722] Trying to free block not in datazone [ 97.001638][ T4722] Trying to free block not in datazone [ 97.007415][ T4722] Trying to free block not in datazone [ 97.012896][ T4722] Trying to free block not in datazone [ 97.027876][ T4543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.028885][ T4722] Trying to free block not in datazone [ 97.043626][ T4722] Trying to free block not in datazone [ 97.049114][ T4722] Trying to free block not in datazone [ 97.061973][ T4722] Trying to free block not in datazone [ 97.069092][ T4722] Trying to free block not in datazone [ 97.081873][ T4722] Trying to free block not in datazone [ 97.088971][ T4722] Trying to free block not in datazone [ 97.099666][ T4722] Trying to free block not in datazone [ 97.106798][ T4722] Trying to free block not in datazone [ 97.112366][ T4722] Trying to free block not in datazone [ 97.123128][ T4722] Trying to free block not in datazone [ 97.130290][ T4722] Trying to free block not in datazone [ 97.141434][ T4722] Trying to free block not in datazone [ 97.148550][ T4722] Trying to free block not in datazone [ 97.160937][ T4722] Trying to free block not in datazone [ 97.168000][ T4722] Trying to free block not in datazone [ 97.179353][ T4722] Trying to free block not in datazone [ 97.188558][ T4722] Trying to free block not in datazone [ 97.199876][ T4722] Trying to free block not in datazone [ 97.207833][ T4722] Trying to free block not in datazone [ 97.218777][ T4722] Trying to free block not in datazone [ 97.226034][ T4722] Trying to free block not in datazone [ 97.231536][ T4722] Trying to free block not in datazone [ 97.242816][ T4722] Trying to free block not in datazone [ 97.250039][ T4722] Trying to free block not in datazone [ 97.262646][ T4722] Trying to free block not in datazone [ 97.269701][ T4722] Trying to free block not in datazone [ 97.280459][ T4722] Trying to free block not in datazone [ 97.287521][ T4722] Trying to free block not in datazone [ 97.293187][ T4722] Trying to free block not in datazone [ 97.306205][ T4722] Trying to free block not in datazone [ 97.311785][ T4722] Trying to free block not in datazone [ 97.322658][ T4722] Trying to free block not in datazone [ 97.329908][ T4722] Trying to free block not in datazone [ 97.341872][ T4722] Trying to free block not in datazone [ 97.349061][ T4722] Trying to free block not in datazone [ 97.359884][ T4722] Trying to free block not in datazone [ 97.368643][ T4722] Trying to free block not in datazone [ 97.379945][ T4722] Trying to free block not in datazone [ 97.387097][ T4722] Trying to free block not in datazone [ 97.392674][ T4722] Trying to free block not in datazone [ 97.441023][ T4722] Trying to free block not in datazone [ 97.457146][ T4722] Trying to free block not in datazone [ 97.472931][ T4722] Trying to free block not in datazone [ 97.493188][ T4722] Trying to free block not in datazone [ 97.520019][ T4722] Trying to free block not in datazone [ 97.528178][ T4722] Trying to free block not in datazone [ 97.540425][ T4722] Trying to free block not in datazone [ 97.550582][ T4722] Trying to free block not in datazone [ 97.570826][ T4722] Trying to free block not in datazone [ 97.580956][ T4722] Trying to free block not in datazone [ 97.588395][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.603686][ T4722] Trying to free block not in datazone [ 97.613708][ T4722] Trying to free block not in datazone [ 97.619296][ T4722] Trying to free block not in datazone [ 97.635253][ T4722] Trying to free block not in datazone [ 97.640764][ T4722] Trying to free block not in datazone [ 97.666154][ T4722] Trying to free block not in datazone [ 97.673127][ T4722] Trying to free block not in datazone [ 97.692184][ T4722] Trying to free block not in datazone [ 97.713442][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.744141][ T4722] Trying to free block not in datazone [ 97.750757][ T4722] Trying to free block not in datazone [ 97.760508][ T4722] Trying to free block not in datazone [ 97.775840][ T4722] Trying to free block not in datazone [ 97.781605][ T4722] Trying to free block not in datazone [ 97.787576][ T4722] Trying to free block not in datazone [ 97.794031][ T4722] Trying to free block not in datazone [ 97.799840][ T4722] Trying to free block not in datazone [ 97.805971][ T4722] Trying to free block not in datazone [ 97.811475][ T4722] Trying to free block not in datazone [ 97.817909][ T4722] Trying to free block not in datazone [ 97.837218][ T4722] Trying to free block not in datazone [ 97.848665][ T4722] Trying to free block not in datazone [ 97.867684][ T4722] Trying to free block not in datazone [ 97.882013][ T4722] Trying to free block not in datazone [ 97.905191][ T4722] Trying to free block not in datazone [ 97.910803][ T4722] Trying to free block not in datazone [ 97.930621][ T4750] loop4: detected capacity change from 0 to 1024 [ 97.942132][ T4722] Trying to free block not in datazone [ 97.963526][ T4722] Trying to free block not in datazone [ 97.989517][ T4722] Trying to free block not in datazone [ 97.999647][ T4722] Trying to free block not in datazone [ 98.014967][ T4722] Trying to free block not in datazone [ 98.023858][ T4722] Trying to free block not in datazone [ 98.029417][ T4722] Trying to free block not in datazone [ 98.049463][ T4750] hfsplus: invalid length 32517 has been corrected to 255 [ 98.058111][ T4722] Trying to free block not in datazone [ 98.073399][ T4722] Trying to free block not in datazone [ 98.106628][ T21] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.118144][ T4722] Trying to free block not in datazone [ 98.137238][ T21] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.150643][ T4722] Trying to free block not in datazone [ 98.163494][ T4722] Trying to free block not in datazone [ 98.173965][ T21] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.186086][ T4750] hfsplus: b-tree write err: -5, ino 20 [ 98.193557][ T4722] Trying to free block not in datazone [ 98.209548][ T4722] Trying to free block not in datazone [ 98.215743][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.228023][ T4722] Trying to free block not in datazone [ 98.250003][ T4722] Trying to free block not in datazone [ 98.263888][ T4740] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 98.278407][ T4722] Trying to free block not in datazone [ 98.293875][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.301889][ T4742] loop3: detected capacity change from 0 to 32768 [ 98.307548][ T4722] Trying to free block not in datazone [ 98.327539][ T4722] Trying to free block not in datazone [ 98.377361][ T4722] Trying to free block not in datazone [ 98.388149][ T4722] Trying to free block not in datazone [ 98.388632][ T144] hfsplus: b-tree write err: -5, ino 20 [ 98.407530][ T4722] Trying to free block not in datazone [ 98.423740][ T4722] Trying to free block not in datazone [ 98.429529][ T4722] Trying to free block not in datazone [ 98.438503][ T4722] Trying to free block not in datazone [ 98.445596][ T4722] Trying to free block not in datazone [ 98.459912][ T4722] Trying to free block not in datazone [ 98.473438][ T4722] Trying to free block not in datazone [ 98.482143][ T4722] Trying to free block not in datazone [ 98.488950][ T4722] Trying to free block not in datazone [ 98.494616][ T4722] Trying to free block not in datazone [ 98.500562][ T4722] Trying to free block not in datazone [ 98.507053][ T4722] Trying to free block not in datazone [ 98.512734][ T4742] XFS (loop3): Mounting V5 Filesystem [ 98.526845][ T4722] Trying to free block not in datazone [ 98.532467][ T4722] Trying to free block not in datazone [ 98.558788][ T4722] Trying to free block not in datazone [ 98.579014][ T4722] Trying to free block not in datazone [ 98.583974][ T4760] loop2: detected capacity change from 0 to 2048 [ 98.626693][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.635965][ T4722] Trying to free block not in datazone [ 98.641577][ T4722] Trying to free block not in datazone [ 98.647270][ T4722] Trying to free block not in datazone [ 98.652913][ T4722] Trying to free block not in datazone [ 98.659407][ T4722] Trying to free block not in datazone [ 98.665017][ T4722] Trying to free block not in datazone [ 98.666161][ T4232] usb 2-1: USB disconnect, device number 3 [ 98.670532][ T4722] Trying to free block not in datazone [ 98.670544][ T4722] Trying to free block not in datazone [ 98.670551][ T4722] Trying to free block not in datazone [ 98.670558][ T4722] Trying to free block not in datazone [ 98.670565][ T4722] Trying to free block not in datazone [ 98.670572][ T4722] Trying to free block not in datazone [ 98.670579][ T4722] Trying to free block not in datazone [ 98.670586][ T4722] Trying to free block not in datazone [ 98.670593][ T4722] Trying to free block not in datazone [ 98.689668][ T4742] XFS (loop3): Starting recovery (logdev: internal) [ 98.695141][ T4722] Trying to free block not in datazone [ 98.739398][ T4722] Trying to free block not in datazone [ 98.745797][ T4722] Trying to free block not in datazone [ 98.751293][ T4722] Trying to free block not in datazone [ 98.760457][ T4178] loop2: p1 < > p4 [ 98.760457][ T4178] p4: [ 98.783413][ T4722] Trying to free block not in datazone [ 98.788960][ T4722] Trying to free block not in datazone [ 98.805036][ T4178] loop2: p4 size 722688 extends beyond EOD, truncated [ 98.840249][ T4742] XFS (loop3): Ending recovery (logdev: internal) [ 98.847285][ T4722] Trying to free block not in datazone [ 98.852781][ T4722] Trying to free block not in datazone [ 98.874905][ T4760] loop2: p1 < > p4 [ 98.874905][ T4760] p4: [ 98.887287][ T4722] Trying to free block not in datazone [ 98.901574][ T4722] Trying to free block not in datazone [ 98.940107][ T4722] Trying to free block not in datazone [ 98.954385][ T4767] binder: 4766:4767 ioctl c0306201 200000000080 returned -14 [ 98.961956][ T4722] Trying to free block not in datazone [ 98.974033][ T4722] Trying to free block not in datazone [ 98.979554][ T4722] Trying to free block not in datazone [ 98.994136][ T4760] loop2: p4 size 722688 extends beyond EOD, truncated [ 99.024890][ T4722] Trying to free block not in datazone [ 99.030432][ T4722] Trying to free block not in datazone [ 99.103847][ T4722] Trying to free block not in datazone [ 99.109424][ T4722] Trying to free block not in datazone [ 99.153404][ T4722] Trying to free block not in datazone [ 99.173974][ T4722] Trying to free block not in datazone [ 99.200369][ T4722] Trying to free block not in datazone [ 99.220214][ T4722] Trying to free block not in datazone [ 99.256501][ T4195] XFS (loop3): Unmounting Filesystem [ 99.263672][ T4722] Trying to free block not in datazone [ 99.269361][ T4722] Trying to free block not in datazone [ 99.334010][ T4722] Trying to free block not in datazone [ 99.345688][ T4722] Trying to free block not in datazone [ 99.351284][ T4722] Trying to free block not in datazone [ 99.388659][ T4722] Trying to free block not in datazone [ 99.394258][ T4722] Trying to free block not in datazone [ 99.399737][ T4722] Trying to free block not in datazone [ 99.441824][ T4722] Trying to free block not in datazone [ 99.466062][ T4722] Trying to free block not in datazone [ 99.471580][ T4722] Trying to free block not in datazone [ 99.493813][ T4722] Trying to free block not in datazone [ 99.519856][ T4722] Trying to free block not in datazone [ 99.533647][ T4722] Trying to free block not in datazone [ 99.539247][ T4722] Trying to free block not in datazone [ 99.563517][ T4722] Trying to free block not in datazone [ 99.580760][ T4722] Trying to free block not in datazone [ 99.586352][ T4722] Trying to free block not in datazone [ 99.602387][ T4722] Trying to free block not in datazone [ 99.617321][ T4722] Trying to free block not in datazone [ 99.643511][ T4722] Trying to free block not in datazone [ 99.649113][ T4722] Trying to free block not in datazone [ 99.664791][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.695249][ T4722] Trying to free block not in datazone [ 99.700941][ T4722] Trying to free block not in datazone [ 99.737382][ T4722] Trying to free block not in datazone [ 99.743106][ T4722] Trying to free block not in datazone [ 99.790385][ T4722] Trying to free block not in datazone [ 99.797592][ T4722] Trying to free block not in datazone [ 99.803106][ T4722] Trying to free block not in datazone [ 99.833459][ T4722] Trying to free block not in datazone [ 99.839066][ T4722] Trying to free block not in datazone [ 99.876203][ T4722] Trying to free block not in datazone [ 99.893612][ T4722] Trying to free block not in datazone [ 99.910017][ T4722] Trying to free block not in datazone [ 99.946020][ T4722] Trying to free block not in datazone [ 99.951810][ T4722] Trying to free block not in datazone [ 99.968770][ T4722] Trying to free block not in datazone [ 99.975155][ T4722] Trying to free block not in datazone [ 99.991228][ T4722] Trying to free block not in datazone [ 99.996815][ T4722] Trying to free block not in datazone [ 100.012696][ T4722] Trying to free block not in datazone [ 100.019807][ T4722] Trying to free block not in datazone [ 100.033390][ T4722] Trying to free block not in datazone [ 100.039199][ T4722] Trying to free block not in datazone [ 100.044752][ T4722] Trying to free block not in datazone [ 100.053776][ T4543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.079277][ T4722] Trying to free block not in datazone [ 100.093453][ T4722] Trying to free block not in datazone [ 100.140691][ T4722] Trying to free block not in datazone [ 100.254964][ T4772] loop4: detected capacity change from 0 to 32768 [ 100.364372][ T4772] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.413523][ T4772] lbmIODone: I/O error in JFS log [ 100.418865][ T4772] *** Log Format Error ! *** [ 100.433835][ T4772] lmLogInit: exit(-22) [ 100.437980][ T4772] lmLogOpen: exit(-22) [ 100.537361][ T4772] ERROR: (device loop4): jfs_link: read-only filesystem [ 100.537361][ T4772] [ 100.590161][ T4772] ERROR: (device loop4): remounting filesystem as read-only [ 100.701379][ T4781] loop1: detected capacity change from 0 to 64 [ 100.709254][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.866380][ T4542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.973541][ T4543] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 101.073228][ T4781] Trying to free block not in datazone [ 101.109679][ T4781] Trying to free block not in datazone [ 101.130520][ T4781] Trying to free block not in datazone [ 101.131923][ T4791] Trying to free block not in datazone [ 101.158386][ T4791] Trying to free block not in datazone [ 101.170038][ T4781] Trying to free block not in datazone [ 101.190126][ T4791] Trying to free block not in datazone [ 101.222776][ T4791] Trying to free block not in datazone [ 101.229741][ T4781] Trying to free block not in datazone [ 101.282880][ T4781] Trying to free block not in datazone [ 101.317465][ T4781] Trying to free block not in datazone [ 101.336121][ T4543] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.371964][ T4781] Trying to free block not in datazone [ 101.383413][ T4543] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 101.400258][ T4781] Trying to free block not in datazone [ 101.406262][ T4543] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.425615][ T4541] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.439408][ T4781] Trying to free block not in datazone [ 101.448296][ T4781] Trying to free block not in datazone [ 101.462029][ T4543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.470739][ T4781] Trying to free block not in datazone [ 101.487596][ T4781] Trying to free block not in datazone [ 101.503838][ T4781] Trying to free block not in datazone [ 101.509673][ T4781] Trying to free block not in datazone [ 101.523951][ T4778] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 101.551803][ T4781] Trying to free block not in datazone [ 101.587366][ T4781] Trying to free block not in datazone [ 101.626405][ T4781] Trying to free block not in datazone [ 101.632103][ T4781] Trying to free block not in datazone [ 101.637940][ T26] audit: type=1326 audit(1776952438.744:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4795 comm="syz.4.150" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe37268819 code=0x0 [ 101.676599][ T4781] Trying to free block not in datazone [ 101.682376][ T4781] Trying to free block not in datazone [ 101.703537][ T4541] usb 3-1: Using ep0 maxpacket: 32 [ 101.708706][ T4781] Trying to free block not in datazone [ 101.708719][ T4781] Trying to free block not in datazone [ 101.708727][ T4781] Trying to free block not in datazone [ 101.708733][ T4781] Trying to free block not in datazone [ 101.708740][ T4781] Trying to free block not in datazone [ 101.708748][ T4781] Trying to free block not in datazone [ 101.743211][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.813082][ T4781] Trying to free block not in datazone [ 101.827892][ T4232] usb 4-1: USB disconnect, device number 6 [ 101.833470][ T4541] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.844110][ T4781] Trying to free block not in datazone [ 101.844123][ T4781] Trying to free block not in datazone [ 101.844130][ T4781] Trying to free block not in datazone [ 101.844137][ T4781] Trying to free block not in datazone [ 101.844145][ T4781] Trying to free block not in datazone [ 101.844153][ T4781] Trying to free block not in datazone [ 101.844169][ T4781] Trying to free block not in datazone [ 101.844176][ T4781] Trying to free block not in datazone [ 101.844183][ T4781] Trying to free block not in datazone [ 101.864308][ T4541] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 101.948250][ T4781] Trying to free block not in datazone [ 101.969668][ T4781] Trying to free block not in datazone [ 101.987889][ T4781] Trying to free block not in datazone [ 102.008131][ T4781] Trying to free block not in datazone [ 102.023564][ T4781] Trying to free block not in datazone [ 102.039491][ T4781] Trying to free block not in datazone [ 102.059712][ T4781] Trying to free block not in datazone [ 102.075823][ T4781] Trying to free block not in datazone [ 102.091728][ T4781] Trying to free block not in datazone [ 102.101847][ T4781] Trying to free block not in datazone [ 102.111978][ T4781] Trying to free block not in datazone [ 102.128099][ T4781] Trying to free block not in datazone [ 102.143489][ T4781] Trying to free block not in datazone [ 102.147107][ T4541] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 102.153687][ T4781] Trying to free block not in datazone [ 102.179811][ T4541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.183394][ T4781] Trying to free block not in datazone [ 102.213495][ T4781] Trying to free block not in datazone [ 102.216864][ T4541] usb 3-1: Product: syz [ 102.219125][ T4781] Trying to free block not in datazone [ 102.237833][ T4541] usb 3-1: Manufacturer: syz [ 102.252848][ T4541] usb 3-1: SerialNumber: syz [ 102.253365][ T4781] Trying to free block not in datazone [ 102.289254][ T4541] usb 3-1: config 0 descriptor?? [ 102.294461][ T4781] Trying to free block not in datazone [ 102.299957][ T4781] Trying to free block not in datazone [ 102.333484][ T4781] Trying to free block not in datazone [ 102.343414][ T4781] Trying to free block not in datazone [ 102.369475][ T4781] Trying to free block not in datazone [ 102.399851][ T4781] Trying to free block not in datazone [ 102.412900][ T4781] Trying to free block not in datazone [ 102.432380][ T4781] Trying to free block not in datazone [ 102.462529][ T4781] Trying to free block not in datazone [ 102.523434][ T4781] Trying to free block not in datazone [ 102.539326][ T4781] Trying to free block not in datazone [ 102.549455][ T4781] Trying to free block not in datazone [ 102.559584][ T4781] Trying to free block not in datazone [ 102.569235][ T4781] Trying to free block not in datazone [ 102.574836][ T4781] Trying to free block not in datazone [ 102.635577][ T4781] Trying to free block not in datazone [ 102.654101][ T4781] Trying to free block not in datazone [ 102.659711][ T4781] Trying to free block not in datazone [ 102.690110][ T4781] Trying to free block not in datazone [ 102.702710][ T4781] Trying to free block not in datazone [ 102.727221][ T4781] Trying to free block not in datazone [ 102.732866][ T4781] Trying to free block not in datazone [ 102.741328][ T4781] Trying to free block not in datazone [ 102.752892][ T4781] Trying to free block not in datazone [ 102.761010][ T4781] Trying to free block not in datazone [ 102.770317][ T4781] Trying to free block not in datazone [ 102.779457][ T4543] usb 3-1: USB disconnect, device number 3 [ 102.780882][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.808506][ T4781] Trying to free block not in datazone [ 102.820802][ T4781] Trying to free block not in datazone [ 102.826651][ T4781] Trying to free block not in datazone [ 102.832228][ T4781] Trying to free block not in datazone [ 102.844512][ T4781] Trying to free block not in datazone [ 102.850189][ T4781] Trying to free block not in datazone [ 102.866649][ T4781] Trying to free block not in datazone [ 102.872247][ T4781] Trying to free block not in datazone [ 102.883075][ T4781] Trying to free block not in datazone [ 102.891783][ T4781] Trying to free block not in datazone [ 102.902329][ T4781] Trying to free block not in datazone [ 102.909112][ T4781] Trying to free block not in datazone [ 102.919880][ T4781] Trying to free block not in datazone [ 102.927222][ T4781] Trying to free block not in datazone [ 102.932850][ T4781] Trying to free block not in datazone [ 102.943602][ T4781] Trying to free block not in datazone [ 102.949207][ T4781] Trying to free block not in datazone [ 102.960020][ T4781] Trying to free block not in datazone [ 102.967750][ T4781] Trying to free block not in datazone [ 102.973435][ T4781] Trying to free block not in datazone [ 102.979145][ T4781] Trying to free block not in datazone [ 103.003430][ T4781] Trying to free block not in datazone [ 103.009087][ T4781] Trying to free block not in datazone [ 103.022833][ T4781] Trying to free block not in datazone [ 103.038687][ T4781] Trying to free block not in datazone [ 103.050471][ T4781] Trying to free block not in datazone [ 103.056038][ T4781] Trying to free block not in datazone [ 103.081979][ T4781] Trying to free block not in datazone [ 103.093626][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.093982][ T4781] Trying to free block not in datazone [ 103.123446][ T4781] Trying to free block not in datazone [ 103.128973][ T4781] Trying to free block not in datazone [ 103.143573][ T4781] Trying to free block not in datazone [ 103.155128][ T4781] Trying to free block not in datazone [ 103.163847][ T4781] Trying to free block not in datazone [ 103.169366][ T4781] Trying to free block not in datazone [ 103.189661][ T4781] Trying to free block not in datazone [ 103.199472][ T4781] Trying to free block not in datazone [ 103.219685][ T4781] Trying to free block not in datazone [ 103.239718][ T4781] Trying to free block not in datazone [ 103.253480][ T4781] Trying to free block not in datazone [ 103.258992][ T4781] Trying to free block not in datazone [ 103.273449][ T4781] Trying to free block not in datazone [ 103.287476][ T4781] Trying to free block not in datazone [ 103.300812][ T4781] Trying to free block not in datazone [ 103.310944][ T4781] Trying to free block not in datazone [ 103.327500][ T4781] Trying to free block not in datazone [ 103.333003][ T4781] Trying to free block not in datazone [ 103.349036][ T4781] Trying to free block not in datazone [ 103.360017][ T4781] Trying to free block not in datazone [ 103.389642][ T4781] Trying to free block not in datazone [ 103.405670][ T4781] Trying to free block not in datazone [ 103.453930][ T4781] Trying to free block not in datazone [ 103.486323][ T4781] Trying to free block not in datazone [ 103.496461][ T4781] Trying to free block not in datazone [ 103.522881][ T4781] Trying to free block not in datazone [ 103.549841][ T4781] Trying to free block not in datazone [ 103.580864][ T4781] Trying to free block not in datazone [ 103.601136][ T4781] Trying to free block not in datazone [ 103.618824][ T4812] loop2: detected capacity change from 0 to 1024 [ 103.639413][ T4781] Trying to free block not in datazone [ 103.649568][ T4781] Trying to free block not in datazone [ 103.672318][ T4808] loop3: detected capacity change from 0 to 8192 [ 103.688584][ T4781] Trying to free block not in datazone [ 103.715416][ T4781] Trying to free block not in datazone [ 103.733191][ T4808] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.748754][ T4812] hfsplus: invalid length 32517 has been corrected to 255 [ 103.757943][ T4781] Trying to free block not in datazone [ 103.776980][ T4781] Trying to free block not in datazone [ 103.805850][ T4781] Trying to free block not in datazone [ 103.823810][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.860976][ T4781] Trying to free block not in datazone [ 103.893546][ T4781] Trying to free block not in datazone [ 103.919686][ T4781] Trying to free block not in datazone [ 103.948787][ T4781] Trying to free block not in datazone [ 103.963417][ T4781] Trying to free block not in datazone [ 103.982324][ T4781] Trying to free block not in datazone [ 103.998258][ T4781] Trying to free block not in datazone [ 104.014608][ T4814] hfsplus: b-tree write err: -5, ino 20 [ 104.022115][ T4781] Trying to free block not in datazone [ 104.038714][ T4781] Trying to free block not in datazone [ 104.086221][ T4781] Trying to free block not in datazone [ 104.091930][ T4781] Trying to free block not in datazone [ 104.148222][ T4781] Trying to free block not in datazone [ 104.162310][ T4781] Trying to free block not in datazone [ 104.190442][ T4816] loop8: detected capacity change from 0 to 7 [ 104.192144][ T4781] Trying to free block not in datazone [ 104.222910][ T4781] Trying to free block not in datazone [ 104.233641][ T4178] Dev loop8: unable to read RDB block 7 [ 104.239373][ T4178] loop8: unable to read partition table [ 104.258489][ T4178] loop8: partition table beyond EOD, truncated [ 104.259392][ T4781] Trying to free block not in datazone [ 104.292683][ T4816] Dev loop8: unable to read RDB block 7 [ 104.305789][ T4781] Trying to free block not in datazone [ 104.311382][ T4781] Trying to free block not in datazone [ 104.322479][ T4816] loop8: unable to read partition table [ 104.342900][ T4816] loop8: partition table beyond EOD, truncated [ 104.353425][ T4816] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 104.354616][ T4781] Trying to free block not in datazone [ 104.405038][ T154] hfsplus: b-tree write err: -5, ino 20 [ 104.410207][ T4781] Trying to free block not in datazone [ 104.440127][ T4781] Trying to free block not in datazone [ 104.471740][ T4781] Trying to free block not in datazone [ 104.488109][ T4781] Trying to free block not in datazone [ 104.510218][ T4811] loop4: detected capacity change from 0 to 32768 [ 104.516917][ T4781] Trying to free block not in datazone [ 104.522622][ T4781] Trying to free block not in datazone [ 104.587439][ T4781] Trying to free block not in datazone [ 104.592953][ T4781] Trying to free block not in datazone [ 104.631423][ T4781] Trying to free block not in datazone [ 104.645722][ T4811] XFS (loop4): Mounting V5 Filesystem [ 104.645874][ T4781] Trying to free block not in datazone [ 104.675091][ T4781] Trying to free block not in datazone [ 104.689664][ T4781] Trying to free block not in datazone [ 104.707566][ T4781] Trying to free block not in datazone [ 104.713185][ T4781] Trying to free block not in datazone [ 104.722490][ T4781] Trying to free block not in datazone [ 104.728962][ T4781] Trying to free block not in datazone [ 104.740527][ T4781] Trying to free block not in datazone [ 104.746909][ T4781] Trying to free block not in datazone [ 104.752616][ T4781] Trying to free block not in datazone [ 104.758470][ T4781] Trying to free block not in datazone [ 104.764125][ T4781] Trying to free block not in datazone [ 104.769724][ T4781] Trying to free block not in datazone [ 104.775579][ T4781] Trying to free block not in datazone [ 104.781185][ T4781] Trying to free block not in datazone [ 104.786960][ T4781] Trying to free block not in datazone [ 104.792736][ T4781] Trying to free block not in datazone [ 104.798756][ T4781] Trying to free block not in datazone [ 104.804555][ T4781] Trying to free block not in datazone [ 104.810077][ T4781] Trying to free block not in datazone [ 104.816035][ T4781] Trying to free block not in datazone [ 104.821921][ T4781] Trying to free block not in datazone [ 104.829571][ T4781] Trying to free block not in datazone [ 104.831793][ T4811] XFS (loop4): Starting recovery (logdev: internal) [ 104.844657][ T4781] Trying to free block not in datazone [ 104.855067][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.857006][ T4781] Trying to free block not in datazone [ 104.880177][ T4781] Trying to free block not in datazone [ 104.904922][ T4781] Trying to free block not in datazone [ 104.916487][ T4811] XFS (loop4): Ending recovery (logdev: internal) [ 104.918218][ T4781] Trying to free block not in datazone [ 104.953476][ T4781] Trying to free block not in datazone [ 104.980002][ T4781] Trying to free block not in datazone [ 105.003511][ T4781] Trying to free block not in datazone [ 105.009110][ T4781] Trying to free block not in datazone [ 105.040944][ T4781] Trying to free block not in datazone [ 105.059763][ T4781] Trying to free block not in datazone [ 105.079555][ T4781] Trying to free block not in datazone [ 105.099901][ T4781] Trying to free block not in datazone [ 105.124241][ T4781] Trying to free block not in datazone [ 105.129755][ T4781] Trying to free block not in datazone [ 105.168560][ T4781] Trying to free block not in datazone [ 105.193380][ T4781] Trying to free block not in datazone [ 105.198899][ T4781] Trying to free block not in datazone [ 105.233393][ T4781] Trying to free block not in datazone [ 105.239084][ T4781] Trying to free block not in datazone [ 105.270870][ T4781] Trying to free block not in datazone [ 105.295412][ T4781] Trying to free block not in datazone [ 105.302309][ T4197] XFS (loop4): Unmounting Filesystem [ 105.317138][ T4781] Trying to free block not in datazone [ 105.333434][ T4781] Trying to free block not in datazone [ 105.339050][ T4781] Trying to free block not in datazone [ 105.376638][ T4781] Trying to free block not in datazone [ 105.382251][ T4781] Trying to free block not in datazone [ 105.418378][ T4781] Trying to free block not in datazone [ 105.434608][ T4781] Trying to free block not in datazone [ 105.461470][ T4781] Trying to free block not in datazone [ 105.491182][ T4781] Trying to free block not in datazone [ 105.509500][ T4781] Trying to free block not in datazone [ 105.535695][ T4781] Trying to free block not in datazone [ 105.563626][ T4781] Trying to free block not in datazone [ 105.569241][ T4781] Trying to free block not in datazone [ 105.603367][ T4781] Trying to free block not in datazone [ 105.613570][ T4781] Trying to free block not in datazone [ 105.642734][ T4781] Trying to free block not in datazone [ 105.673055][ T4781] Trying to free block not in datazone [ 105.693306][ T4781] Trying to free block not in datazone [ 105.713727][ T4781] Trying to free block not in datazone [ 105.719328][ T4781] Trying to free block not in datazone [ 105.753380][ T4781] Trying to free block not in datazone [ 105.779963][ T4781] Trying to free block not in datazone [ 105.808387][ T4781] Trying to free block not in datazone [ 105.824527][ T4781] Trying to free block not in datazone [ 105.830405][ T4781] Trying to free block not in datazone [ 105.881253][ T4781] Trying to free block not in datazone [ 105.903882][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.912731][ T4781] Trying to free block not in datazone [ 105.933610][ T4781] Trying to free block not in datazone [ 105.953457][ T4781] Trying to free block not in datazone [ 105.964762][ T4781] Trying to free block not in datazone [ 105.993457][ T4781] Trying to free block not in datazone [ 105.999066][ T4781] Trying to free block not in datazone [ 106.029170][ T4837] loop4: detected capacity change from 0 to 2048 [ 106.035189][ T4781] Trying to free block not in datazone [ 106.041118][ T4781] Trying to free block not in datazone [ 106.091980][ T4781] Trying to free block not in datazone [ 106.113443][ T4781] Trying to free block not in datazone [ 106.131007][ T4781] Trying to free block not in datazone [ 106.133773][ T4542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.153973][ T4837] loop4: p1 < > p4 [ 106.153973][ T4837] p4: [ 106.158049][ T4781] Trying to free block not in datazone [ 106.189725][ T4837] loop4: p4 size 722688 extends beyond EOD, truncated [ 106.515957][ T4831] loop2: detected capacity change from 0 to 32768 [ 106.599230][ T4845] device syzkaller1 entered promiscuous mode [ 106.723287][ T4831] XFS (loop2): Mounting V5 Filesystem [ 106.881813][ T4831] XFS (loop2): Ending clean mount [ 106.935674][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.044276][ T4187] XFS (loop2): Unmounting Filesystem [ 107.253866][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.337213][ T4264] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 107.443445][ T21] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 107.755339][ T4264] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 107.773720][ T4264] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 107.783100][ T4264] usb 4-1: config 1 has no interface number 0 [ 107.796293][ T4264] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.809467][ T4264] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 107.827649][ T4264] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 107.838615][ T4264] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 48, using maximum allowed: 30 [ 107.855055][ T4264] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 107.914698][ T4870] loop4: detected capacity change from 0 to 512 [ 107.933789][ T21] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.941985][ T21] usb 2-1: config 0 has no interface number 0 [ 107.978207][ T21] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 108.003367][ T21] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 108.013132][ T4870] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 108.029106][ T21] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 108.060998][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.070715][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.084061][ T4870] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.095107][ T4264] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.104363][ T21] usb 2-1: config 0 descriptor?? [ 108.109424][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.118698][ T4264] usb 4-1: Product: syz [ 108.123007][ T4264] usb 4-1: Manufacturer: syz [ 108.128153][ T4264] usb 4-1: SerialNumber: syz [ 108.143813][ T4859] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 108.173782][ T4857] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.181827][ T21] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 108.441552][ T4541] usb 2-1: USB disconnect, device number 4 [ 108.453384][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 108.471427][ T4867] loop0: detected capacity change from 0 to 32768 [ 108.669928][ T4867] XFS (loop0): Mounting V5 Filesystem [ 108.691947][ T4891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 108.913170][ T4867] XFS (loop0): Starting recovery (logdev: internal) [ 108.926005][ T4881] loop2: detected capacity change from 0 to 32768 [ 108.937120][ T4264] cdc_ncm 4-1:1.1: bind() failure [ 108.970329][ T4264] usb 4-1: USB disconnect, device number 7 [ 109.000015][ T4867] XFS (loop0): Ending recovery (logdev: internal) [ 109.093905][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.124194][ T4881] XFS (loop2): Mounting V5 Filesystem [ 109.263579][ T4881] XFS (loop2): Ending clean mount [ 109.353771][ T4881] XFS (loop2): Quotacheck needed: Please wait. [ 109.398116][ T4185] XFS (loop0): Unmounting Filesystem [ 109.432941][ T4911] loop1: detected capacity change from 0 to 256 [ 109.499314][ T4881] XFS (loop2): Quotacheck: Done. [ 109.502577][ T4911] FAT-fs (loop1): Unrecognized mount option "swrtname=win95" or missing value [ 109.545823][ T4881] XFS (loop2): User initiated shutdown received. [ 109.552890][ T4881] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 109.595120][ T4881] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 109.706034][ T4187] XFS (loop2): Unmounting Filesystem [ 110.008689][ T4921] input: syz1 as /devices/virtual/input/input7 [ 110.186392][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.293653][ T4542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.422178][ T4933] loop4: detected capacity change from 0 to 1024 [ 110.454655][ T4542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.527147][ T4933] hfsplus: bad catalog entry type [ 110.612099][ T9] hfsplus: b-tree write err: -5, ino 25 [ 110.653801][ T9] hfsplus: b-tree write err: -5, ino 4 [ 110.659790][ T9] hfsplus: b-tree write err: -5, ino 2 [ 110.673671][ T4941] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 110.727663][ T4941] netlink: 312 bytes leftover after parsing attributes in process `syz.1.198'. [ 110.818305][ T4945] loop2: detected capacity change from 0 to 512 [ 110.901439][ T4948] loop1: detected capacity change from 0 to 512 [ 110.918411][ T4945] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 110.963459][ T4945] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 110.982631][ T4950] netlink: 84 bytes leftover after parsing attributes in process `syz.0.201'. [ 111.020413][ T4945] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 111.043771][ T4948] EXT4-fs (loop1): Ignoring removed orlov option [ 111.093943][ T4545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.121468][ T4948] EXT4-fs (loop1): Test dummy encryption mode enabled [ 111.123527][ T4945] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 111.140382][ T4948] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 111.184088][ T4945] EXT4-fs (loop2): 1 truncate cleaned up [ 111.213734][ T4948] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.231273][ T4945] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 111.262868][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.288527][ T4959] capability: warning: `syz.3.204' uses 32-bit capabilities (legacy support in use) [ 111.297877][ T4948] EXT4-fs (loop1): 1 truncate cleaned up [ 111.342199][ T4945] EXT4-fs (loop2): shut down requested (2) [ 111.383395][ T4948] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback. [ 111.548574][ T4961] loop0: detected capacity change from 0 to 2048 [ 111.605508][ T4967] loop3: detected capacity change from 0 to 1024 [ 111.702616][ T4961] loop0: p1 < > p4 [ 111.702616][ T4961] p4: [ 111.830083][ T4967] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.832675][ T4961] loop0: p4 size 722688 extends beyond EOD, [ 111.880171][ T4967] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz.3.208: path /43/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=327694, rec_len=0, size=80 fake=0 [ 111.903998][ T4961] truncated [ 111.998891][ T4948] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 112.312144][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.395012][ T4990] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.706749][ T4965] loop2: detected capacity change from 0 to 32768 [ 112.737283][ T4999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.218'. [ 112.817622][ T4965] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.206 (4965) [ 112.860317][ T5002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.218'. [ 112.891381][ T4965] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 112.920581][ T4965] BTRFS info (device loop2): setting nodatacow, compression disabled [ 112.977572][ T4965] BTRFS info (device loop2): enabling auto defrag [ 113.007618][ T4965] BTRFS info (device loop2): max_inline at 0 [ 113.041687][ T4965] BTRFS info (device loop2): using free space tree [ 113.063541][ T5006] netlink: 'syz.1.221': attribute type 1 has an invalid length. [ 113.079529][ T4965] BTRFS info (device loop2): has skinny extents [ 113.083385][ T5006] netlink: 'syz.1.221': attribute type 2 has an invalid length. [ 113.109753][ T5008] netlink: 'syz.1.221': attribute type 1 has an invalid length. [ 113.178527][ T5008] netlink: 'syz.1.221': attribute type 2 has an invalid length. [ 113.318429][ T4992] loop3: detected capacity change from 0 to 32768 [ 113.333857][ T4542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.342014][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.377811][ T4992] [ 113.377811][ T4992] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.377811][ T4992] [ 113.511851][ T26] audit: type=1800 audit(1776952450.624:3): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.206" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 113.518621][ T4992] ERROR: (device loop3): dbReAlloc: the block is outside the filesystem [ 113.518621][ T4992] [ 113.633580][ T4992] ERROR: (device loop3): remounting filesystem as read-only [ 114.191095][ T5042] sctp: [Deprecated]: syz.3.228 (pid 5042) Use of int in max_burst socket option deprecated. [ 114.191095][ T5042] Use struct sctp_assoc_value instead [ 114.249648][ T5044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.229'. [ 114.353480][ T5044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.229'. [ 114.692838][ T5062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.960263][ T5077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.969694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.994458][ T5075] loop4: detected capacity change from 0 to 2048 [ 115.097039][ T5082] loop2: detected capacity change from 0 to 128 [ 115.143449][ T4542] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 115.152359][ T5075] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc,. Quota mode: writeback. [ 115.209217][ T5075] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.263264][ T5082] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.274864][ T5082] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.377277][ T5075] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.236: bg 0: block 345: padding at end of block bitmap is not set [ 115.462094][ T5075] EXT4-fs (loop4): Remounting filesystem read-only [ 115.553221][ T4542] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.582288][ T4542] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.623486][ T4542] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.688393][ T4542] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.709550][ T4542] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.739026][ T4542] usb 4-1: config 0 descriptor?? [ 115.751775][ T5048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.040707][ T5105] device syzkaller1 entered promiscuous mode [ 116.162186][ T5090] loop0: detected capacity change from 0 to 32768 [ 116.188954][ T5090] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.239 (5090) [ 116.228134][ T4542] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 116.265319][ T4542] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 116.320778][ T5090] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 116.329942][ T4541] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.371697][ T5090] BTRFS info (device loop0): force clearing of disk cache [ 116.379788][ T4542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.413246][ T5090] BTRFS info (device loop0): enabling auto defrag [ 116.457242][ T5090] BTRFS info (device loop0): max_inline at 0 [ 116.507609][ T4542] usb 4-1: USB disconnect, device number 8 [ 116.515513][ T5090] BTRFS info (device loop0): enabling disk space caching [ 116.529809][ T5090] BTRFS info (device loop0): disk space caching is enabled [ 116.573439][ T5090] BTRFS info (device loop0): has skinny extents [ 116.595112][ T4541] usb 2-1: Using ep0 maxpacket: 32 [ 116.713637][ T4541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.733446][ T4541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.752020][ T4541] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 116.793875][ T4541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.794461][ T5138] loop2: detected capacity change from 0 to 512 [ 116.826867][ T5138] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.870941][ T5050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.876141][ T4541] usb 2-1: config 0 descriptor?? [ 116.887863][ T5138] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.250: bad orphan inode 131083 [ 116.913826][ T5090] BTRFS info (device loop0): enabling ssd optimizations [ 116.914061][ T5138] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000004,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 116.945264][ T5090] BTRFS info (device loop0): clearing free space tree [ 116.953007][ T5090] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 117.096951][ T5144] loop3: detected capacity change from 0 to 4096 [ 117.108279][ T5090] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 117.241106][ T5144] EXT4-fs (loop3): Ignoring removed bh option [ 117.292540][ T5144] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback. [ 117.462896][ T4541] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 117.595755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.621086][ T154] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 117.686630][ T4541] usb 2-1: USB disconnect, device number 5 [ 118.006923][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.552349][ T5188] loop3: detected capacity change from 0 to 512 [ 118.583655][ T4543] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.599704][ T5188] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 118.607788][ T5188] EXT4-fs (loop3): inline encryption not supported [ 118.615026][ T5188] EXT4-fs (loop3): Test dummy encryption mode enabled [ 118.623142][ T5188] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 118.633295][ T5188] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.693191][ T5188] EXT4-fs (loop3): 1 truncate cleaned up [ 118.713492][ T5188] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 118.963390][ T4543] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.981427][ T4543] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.024199][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.073743][ T4543] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 119.084886][ T4543] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 119.107709][ T4543] usb 2-1: SerialNumber: syz [ 119.407050][ T4543] usb 2-1: 0:2 : does not exist [ 119.463682][ T4543] usb 2-1: USB disconnect, device number 6 [ 119.472175][ T4545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.724864][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.803511][ T4545] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.999824][ T5217] loop3: detected capacity change from 0 to 32768 [ 120.062055][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.157840][ T5229] loop1: detected capacity change from 0 to 128 [ 120.220000][ T5217] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 120.263638][ T4545] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 120.276102][ T5211] loop0: detected capacity change from 0 to 40427 [ 120.329452][ T4545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.397345][ T5211] F2FS-fs (loop0): invalid crc value [ 120.404861][ T4545] usb 5-1: config 0 descriptor?? [ 120.445365][ T5211] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.475957][ T4545] cp210x 5-1:0.0: cp210x converter detected [ 120.620400][ T5236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 120.670406][ T4195] ocfs2: Unmounting device (7,3) on (node local) [ 120.694082][ T4489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.725330][ T5211] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 120.820711][ T5211] attempt to access beyond end of device [ 120.820711][ T5211] loop0: rw=2049, want=77960, limit=40427 [ 120.903523][ T4545] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 120.958429][ T4185] attempt to access beyond end of device [ 120.958429][ T4185] loop0: rw=2049, want=45104, limit=40427 [ 121.093947][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.184292][ T4545] usb 5-1: cp210x converter now attached to ttyUSB0 [ 121.379944][ T1110] usb 5-1: USB disconnect, device number 3 [ 121.413693][ T1110] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 121.452276][ T5247] loop3: detected capacity change from 0 to 8192 [ 121.467451][ T1110] cp210x 5-1:0.0: device disconnected [ 121.518831][ T5247] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 121.563851][ T5241] loop1: detected capacity change from 0 to 32768 [ 121.581561][ T5247] REISERFS (device loop3): using ordered data mode [ 121.683454][ T5247] reiserfs: using flush barriers [ 121.685763][ T5241] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.290 (5241) [ 121.699026][ T5247] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.772710][ T5247] REISERFS (device loop3): checking transaction log (loop3) [ 121.799265][ T5241] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 121.831634][ T5247] REISERFS (device loop3): Using r5 hash to sort names [ 121.839712][ T5241] BTRFS info (device loop1): force clearing of disk cache [ 121.858838][ T5241] BTRFS info (device loop1): enabling disk space caching [ 121.878540][ T5247] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 121.917791][ T5241] BTRFS info (device loop1): turning on sync discard [ 121.935617][ T5241] BTRFS info (device loop1): disabling tree log [ 121.942521][ T5241] BTRFS info (device loop1): metadata ratio 5 [ 122.000137][ T5255] loop2: detected capacity change from 0 to 512 [ 122.021294][ T5241] BTRFS info (device loop1): disk space caching is enabled [ 122.045150][ T5257] Illegal XDP return value 4294967274, expect packet loss! [ 122.065332][ T5241] BTRFS info (device loop1): has skinny extents [ 122.085651][ T26] audit: type=1800 audit(1776952459.204:4): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.292" name="bus" dev="loop3" ino=2 res=0 errno=0 [ 122.134056][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.440123][ T5241] BTRFS info (device loop1): enabling ssd optimizations [ 122.460590][ T5241] BTRFS info (device loop1): clearing free space tree [ 122.468281][ T5241] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 122.478632][ T5241] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 122.503469][ T5255] EXT4-fs (loop2): Test dummy encryption mode enabled [ 122.510695][ T5255] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.511430][ T5288] device syzkaller1 entered promiscuous mode [ 122.533606][ T4543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.619469][ T5241] 9pnet_virtio: no channels available for device syz [ 122.648315][ T5255] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.294: bad orphan inode 131083 [ 122.679230][ T5255] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 122.902129][ T5299] loop0: detected capacity change from 0 to 64 [ 123.071376][ T5241] syz.1.290 (5241) used greatest stack depth: 19928 bytes left [ 123.282522][ T4185] VFS: Lookup of 'À.' in minix loop0 would have caused loop [ 123.342452][ T4185] VFS: Lookup of 'À.' in minix loop0 would have caused loop [ 123.358224][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.393810][ T5312] loop2: detected capacity change from 0 to 64 [ 124.177998][ T1214] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.203930][ T5332] loop2: detected capacity change from 0 to 256 [ 124.268311][ T1214] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.270843][ T5332] FAT-fs (loop2): Directory bread(block 64) failed [ 124.313402][ T5332] FAT-fs (loop2): Directory bread(block 65) failed [ 124.321345][ T5332] FAT-fs (loop2): Directory bread(block 66) failed [ 124.353897][ T1214] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.373527][ T5332] FAT-fs (loop2): Directory bread(block 67) failed [ 124.374022][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.380176][ T5332] FAT-fs (loop2): Directory bread(block 68) failed [ 124.411422][ T5332] FAT-fs (loop2): Directory bread(block 69) failed [ 124.420935][ T5332] FAT-fs (loop2): Directory bread(block 70) failed [ 124.428412][ T5332] FAT-fs (loop2): Directory bread(block 71) failed [ 124.435671][ T5332] FAT-fs (loop2): Directory bread(block 72) failed [ 124.442885][ T5332] FAT-fs (loop2): Directory bread(block 73) failed [ 124.514170][ T1214] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.921126][ T5347] loop2: detected capacity change from 0 to 512 [ 125.046367][ T5349] loop4: detected capacity change from 0 to 256 [ 125.177361][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.178867][ T5347] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,quota,quota,stripe=0x0000000000000003,lazytime,,errors=continue. Quota mode: writeback. [ 125.283642][ T5347] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.414438][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.435804][ T5343] loop1: detected capacity change from 0 to 32768 [ 125.480101][ T5337] chnl_net:caif_netlink_parms(): no params data found [ 125.652275][ T4543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.662238][ T5343] XFS (loop1): Mounting V5 Filesystem [ 125.775658][ T5337] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.782953][ T5337] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.814649][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.931501][ T5343] XFS (loop1): Ending clean mount [ 125.959996][ T5385] netlink: 35284 bytes leftover after parsing attributes in process `syz.2.330'. [ 125.973595][ T5337] device bridge_slave_0 entered promiscuous mode [ 126.015578][ T5337] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.039384][ T5343] XFS (loop1): Quotacheck needed: Please wait. [ 126.061629][ T5337] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.114639][ T5337] device bridge_slave_1 entered promiscuous mode [ 126.149074][ T5343] XFS (loop1): Quotacheck: Done. [ 126.283820][ T5385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.330'. [ 126.307641][ T4184] XFS (loop1): Unmounting Filesystem [ 126.311405][ T5345] loop3: detected capacity change from 0 to 40427 [ 126.424422][ T5345] F2FS-fs (loop3): invalid crc value [ 126.454146][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.490137][ T5345] F2FS-fs (loop3): Found nat_bits in checkpoint [ 126.499422][ T5337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.569856][ T5337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.634450][ T5402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.335'. [ 126.693944][ T4230] Bluetooth: hci1: command 0x0409 tx timeout [ 126.731602][ T5345] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 126.874046][ T5337] team0: Port device team_slave_0 added [ 126.895638][ T5345] attempt to access beyond end of device [ 126.895638][ T5345] loop3: rw=2049, want=45104, limit=40427 [ 126.908575][ T5337] team0: Port device team_slave_1 added [ 127.124672][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.131807][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.159348][ T5337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.188807][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.244468][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.284339][ T4543] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.328265][ T5337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.493665][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.573599][ T4543] usb 5-1: Using ep0 maxpacket: 8 [ 127.733802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.785072][ T5337] device hsr_slave_0 entered promiscuous mode [ 127.819377][ T5337] device hsr_slave_1 entered promiscuous mode [ 127.840733][ T5337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.868092][ T5337] Cannot create hsr debugfs directory [ 127.884041][ T4543] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 127.910412][ T4543] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.960301][ T4543] usb 5-1: Product: syz [ 127.994184][ T4543] usb 5-1: Manufacturer: syz [ 128.003557][ T4543] usb 5-1: SerialNumber: syz [ 128.019908][ T4543] usb 5-1: config 0 descriptor?? [ 128.085810][ T4543] gspca_main: se401-2.14.0 probing 047d:5003 [ 128.372429][ T5440] loop1: detected capacity change from 0 to 32768 [ 128.405773][ T1214] device hsr_slave_0 left promiscuous mode [ 128.434363][ T5440] (syz.1.343,5440,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.449859][ T1214] device hsr_slave_1 left promiscuous mode [ 128.452194][ T5440] (syz.1.343,5440,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.482347][ T5433] loop3: detected capacity change from 0 to 32768 [ 128.503673][ T1214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.513740][ T4543] gspca_se401: ExtraFeatures: 10 [ 128.518732][ T4543] gspca_se401: Too many frame sizes [ 128.527531][ T1214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.536478][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.548118][ T5440] JBD2: Ignoring recovery information on journal [ 128.593720][ T5433] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.338 (5433) [ 128.594226][ T1214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.615957][ T1214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.625999][ T5440] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 128.647760][ T1214] device bridge_slave_1 left promiscuous mode [ 128.656752][ T1214] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.711084][ T5433] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 128.763811][ T5433] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 128.766021][ T1214] device bridge_slave_0 left promiscuous mode [ 128.780796][ T4227] Bluetooth: hci1: command 0x041b tx timeout [ 128.787894][ T4482] usb 5-1: USB disconnect, device number 4 [ 128.803952][ T1214] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.827858][ T5433] BTRFS info (device loop3): use zstd compression, level 3 [ 128.874813][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 128.883465][ T5433] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 128.893001][ T5433] BTRFS info (device loop3): use lzo compression, level 0 [ 128.910510][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.915445][ T5433] BTRFS info (device loop3): using free space tree [ 128.928436][ T5433] BTRFS info (device loop3): has skinny extents [ 128.951731][ T1214] device veth1_macvtap left promiscuous mode [ 128.974710][ T1214] device veth0_macvtap left promiscuous mode [ 128.980947][ T1214] device veth1_vlan left promiscuous mode [ 128.990302][ T1214] device veth0_vlan left promiscuous mode [ 129.211149][ T5433] BTRFS info (device loop3): enabling ssd optimizations [ 129.470466][ T5433] BTRFS warning (device loop3): failed to trim 1 device(s), last error -512 [ 129.573814][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.645261][ T5481] loop1: detected capacity change from 0 to 4096 [ 129.873737][ T5485] loop2: detected capacity change from 0 to 512 [ 129.944114][ T5487] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.969154][ T1214] team0 (unregistering): Port device team_slave_1 removed [ 130.060340][ T5485] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 130.112518][ T1214] team0 (unregistering): Port device team_slave_0 removed [ 130.177728][ T5481] NILFS (loop1): nilfs_sufile_do_free: segment 7 is already clean [ 130.183735][ T5485] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.205838][ T5496] loop4: detected capacity change from 0 to 256 [ 130.247802][ T5481] NILFS (loop1): nilfs_sufile_do_free: segment 8 is already clean [ 130.262302][ T1214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.281814][ T5496] exfat: Bad value for 'fmask' [ 130.369638][ T1214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.636680][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.763955][ T5509] netlink: 48 bytes leftover after parsing attributes in process `syz.3.360'. [ 130.797267][ T1214] bond0 (unregistering): Released all slaves [ 130.853422][ T1110] Bluetooth: hci1: command 0x040f tx timeout [ 130.950409][ T5510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.359'. [ 131.147325][ T5337] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.170114][ T5337] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.191882][ T5337] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.216961][ T5337] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.402226][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.364'. [ 131.515443][ T5337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.592705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.623943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.653593][ T5047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.659699][ T5337] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.733857][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.754286][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.824054][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.831261][ T4288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.832350][ T5541] loop1: detected capacity change from 0 to 512 [ 131.921173][ T5546] loop3: detected capacity change from 0 to 512 [ 131.945656][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.970211][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.990659][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.992800][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.016375][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.023856][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.069932][ T5546] EXT4-fs (loop3): Ignoring removed orlov option [ 132.076816][ T5541] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 132.103592][ T5546] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 132.121591][ T5541] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.133725][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.142840][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.152504][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.165621][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.174971][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.224208][ T5553] loop2: detected capacity change from 0 to 2048 [ 132.250279][ T5553] loop2: p1 < > p2 p4 < p5 > [ 132.265614][ T5546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 132.304102][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.314578][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.330974][ T5553] loop2: p2 start 262144 is beyond EOD, truncated [ 132.343743][ T5553] loop2: p5 start 262144 is beyond EOD, truncated [ 132.351586][ T5546] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.370: corrupted in-inode xattr [ 132.367501][ T5546] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.370: couldn't read orphan inode 15 (err -117) [ 132.384361][ T5546] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,debug,noblock_validity,noload,nombcache,orlov,min_batch_time=0x0000000000000002,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 132.395693][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.450627][ T3561] loop2: p1 < > p2 p4 < p5 > [ 132.474483][ T3561] loop2: p2 start 262144 is beyond EOD, truncated [ 132.490312][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.504799][ T3561] loop2: p5 start 262144 is beyond EOD, truncated [ 132.523085][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.560514][ T5546] EXT4-fs error (device loop3): ext4_check_dx_root:2266: inode #2: comm syz.3.370: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 132.564084][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.695449][ T5165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.720865][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.862316][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.868314][ T5574] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.871494][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.934218][ T5047] Bluetooth: hci1: command 0x0419 tx timeout [ 132.947550][ T5576] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.987882][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 133.199673][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 133.344212][ T4422] udevd[4422]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 133.379546][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 133.397216][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.407204][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.467131][ T5337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.673079][ T5603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.682615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.734315][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.367342][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.382084][ T5569] loop1: detected capacity change from 0 to 40427 [ 134.384810][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.469886][ T5569] F2FS-fs (loop1): invalid crc value [ 134.489232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.531192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.556001][ T5569] F2FS-fs (loop1): Found nat_bits in checkpoint [ 134.575756][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.604390][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.672753][ T5337] device veth0_vlan entered promiscuous mode [ 134.697771][ T5632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.391'. [ 134.728868][ T5569] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 134.733932][ T5632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.391'. [ 134.774484][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.783738][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.852074][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.858836][ T5337] device veth1_vlan entered promiscuous mode [ 134.988522][ T5569] attempt to access beyond end of device [ 134.988522][ T5569] loop1: rw=2049, want=77960, limit=40427 [ 135.027534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 135.037387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 135.054935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.094245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.130852][ T5337] device veth0_macvtap entered promiscuous mode [ 135.145582][ T4184] attempt to access beyond end of device [ 135.145582][ T4184] loop1: rw=2049, want=45104, limit=40427 [ 135.177606][ T5337] device veth1_macvtap entered promiscuous mode [ 135.306034][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.343399][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.373441][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.442830][ T5624] loop4: detected capacity change from 0 to 32768 [ 135.453629][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.494358][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.508761][ T5624] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.389 (5624) [ 135.543436][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.568533][ T5624] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 135.586320][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.641156][ T5624] BTRFS info (device loop4): force clearing of disk cache [ 135.647163][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.701845][ T5624] BTRFS info (device loop4): enabling auto defrag [ 135.706337][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.756501][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.773438][ T5624] BTRFS info (device loop4): max_inline at 727 [ 135.782928][ T5624] BTRFS info (device loop4): enabling disk space caching [ 135.815188][ T1110] net_ratelimit: 1 callbacks suppressed [ 135.815209][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.821814][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.843395][ T5624] BTRFS info (device loop4): disk space caching is enabled [ 135.850659][ T5624] BTRFS info (device loop4): has skinny extents [ 135.924987][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.973891][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.051971][ T5639] loop3: detected capacity change from 0 to 32768 [ 136.059211][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.059977][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.110978][ T5639] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.393 (5639) [ 136.177258][ T5639] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 136.213557][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.224043][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.234729][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.254881][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.273603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.281916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.309096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.309665][ T5639] BTRFS info (device loop3): setting nodatacow, compression disabled [ 136.320226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.334911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.345388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.359560][ T5337] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.362576][ T5624] BTRFS info (device loop4): enabling ssd optimizations [ 136.379769][ T5624] BTRFS info (device loop4): clearing free space tree [ 136.387450][ T5624] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 136.404611][ T5624] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 136.416972][ T5337] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.421658][ T5639] BTRFS info (device loop3): enabling auto defrag [ 136.443508][ T5639] BTRFS info (device loop3): max_inline at 0 [ 136.449685][ T5639] BTRFS info (device loop3): using free space tree [ 136.471415][ T5337] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.477884][ T5639] BTRFS info (device loop3): has skinny extents [ 136.563457][ T5337] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.689974][ T5649] loop2: detected capacity change from 0 to 32768 [ 136.821410][ T5649] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.396 (5649) [ 136.846312][ T5486] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 136.862943][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.873207][ T4287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.884114][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.892369][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.980380][ T4287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.025515][ T5698] loop1: detected capacity change from 0 to 8192 [ 137.053221][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.103055][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.254822][ T26] audit: type=1800 audit(1776952474.374:5): pid=5639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.393" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 137.267565][ T4419] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4419) [ 137.891131][ T5713] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 137.893610][ T5047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.938773][ T5713] FAT-fs (loop1): Filesystem has been set read-only [ 138.035898][ T5711] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 138.303507][ T5739] loop4: detected capacity change from 0 to 512 [ 138.729126][ T5749] loop2: detected capacity change from 0 to 1024 [ 138.745895][ T5739] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.933665][ T5047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.987437][ T5739] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,nodiscard,dioread_nolock,. Quota mode: writeback. [ 139.003225][ T5739] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.095888][ T4543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.118987][ T5766] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 139.328600][ T1422] hfsplus: b-tree write err: -5, ino 3 [ 139.911364][ T5792] loop3: detected capacity change from 0 to 4096 [ 139.916336][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.973886][ T5047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.004708][ T5801] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.082204][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.105435][ T5792] NILFS (loop3): nilfs_sufile_do_free: segment 7 is already clean [ 140.142339][ T5792] NILFS (loop3): nilfs_sufile_do_free: segment 8 is already clean [ 140.222741][ T5809] loop5: detected capacity change from 0 to 512 [ 140.345826][ T5809] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 140.432727][ T5816] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 140.452121][ T5809] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.013590][ T5063] net_ratelimit: 4 callbacks suppressed [ 141.013609][ T5063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.036134][ T5837] loop3: detected capacity change from 0 to 512 [ 141.094563][ T5836] sctp: [Deprecated]: syz.1.435 (pid 5836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.094563][ T5836] Use struct sctp_sack_info instead [ 141.149763][ T5837] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.218185][ T5837] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.434: bad orphan inode 131083 [ 141.344728][ T5837] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000004,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 141.602455][ T5804] loop4: detected capacity change from 0 to 32768 [ 141.623972][ T5855] netlink: 48 bytes leftover after parsing attributes in process `syz.5.440'. [ 142.104173][ T5047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.149991][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.332428][ T5880] loop3: detected capacity change from 0 to 512 [ 142.460458][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 142.489459][ T5887] netlink: 'syz.2.450': attribute type 21 has an invalid length. [ 142.572762][ T5880] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 142.592100][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.611865][ T5887] Zero length message leads to an empty skb [ 142.614882][ T5880] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.808579][ T5898] loop2: detected capacity change from 0 to 4096 [ 142.833440][ T4233] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 142.858198][ T5898] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 143.090224][ T5898] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 143.098692][ T4233] usb 5-1: Using ep0 maxpacket: 16 [ 143.160572][ T5905] ntfs3: loop2: ino=5, "/" directory corrupted [ 143.213579][ T5063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.272691][ T4233] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.313376][ T4233] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.389815][ T5912] loop3: detected capacity change from 0 to 128 [ 143.455474][ T5912] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.521384][ T5912] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.523766][ T4233] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.621274][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.666392][ T4233] usb 5-1: Product: syz [ 143.670626][ T4233] usb 5-1: Manufacturer: syz [ 143.713472][ T4233] usb 5-1: SerialNumber: syz [ 143.824163][ T5702] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.871682][ T5893] loop5: detected capacity change from 0 to 32768 [ 143.920816][ T5893] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.449 (5893) [ 144.043172][ T5893] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 144.074715][ T5893] BTRFS info (device loop5): setting nodatacow, compression disabled [ 144.108137][ T5893] BTRFS info (device loop5): enabling auto defrag [ 144.132289][ T5893] BTRFS info (device loop5): max_inline at 0 [ 144.172719][ T5893] BTRFS info (device loop5): using free space tree [ 144.199007][ T5893] BTRFS info (device loop5): has skinny extents [ 144.223857][ T4233] usb 5-1: 0:2 : does not exist [ 144.333487][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.409276][ T5925] loop3: detected capacity change from 0 to 4096 [ 144.419049][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.655633][ T4232] usb 5-1: USB disconnect, device number 5 [ 144.708962][ T26] audit: type=1800 audit(1776952481.824:6): pid=5893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.449" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 144.794338][ T5925] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,init_itable,bsdgroups,,errors=continue. Quota mode: writeback. [ 145.004669][ T5063] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 145.014226][ T4541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.203638][ T4542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.363748][ T5063] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.396341][ T5063] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.436392][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.513753][ T5063] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.523032][ T5063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.557768][ T5063] usb 3-1: SerialNumber: syz [ 145.601841][ T5724] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 145.906438][ T5063] usb 3-1: 0:2 : does not exist [ 145.964108][ T5063] usb 3-1: USB disconnect, device number 4 [ 145.993634][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.006712][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.118473][ T5724] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 146.138019][ T5724] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 146.161282][ T5724] usb 5-1: Manufacturer: syz [ 146.182932][ T5724] usb 5-1: config 0 descriptor?? [ 146.224766][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.454622][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.965921][ T6004] loop5: detected capacity change from 0 to 512 [ 146.973507][ T5063] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.978132][ T6006] overlayfs: upper fs does not support tmpfile. [ 147.040273][ T6004] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.485: invalid indirect mapped block 4294967295 (level 1) [ 147.111396][ T5993] loop1: detected capacity change from 0 to 32768 [ 147.121700][ T5724] input: syz Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input8 [ 147.122922][ T6009] loop3: detected capacity change from 0 to 256 [ 147.137952][ T6004] EXT4-fs (loop5): Remounting filesystem read-only [ 147.149194][ T6004] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.485: invalid indirect mapped block 4294967295 (level 1) [ 147.167860][ T6004] EXT4-fs (loop5): Remounting filesystem read-only [ 147.175756][ T6004] EXT4-fs (loop5): 2 truncates cleaned up [ 147.181584][ T6004] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,mb_optimize_scan=0x0000000000000001,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 147.205042][ T6009] exfat: Deprecated parameter 'namecase' [ 147.220723][ T5724] input: syz Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input9 [ 147.256810][ T6009] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 147.343681][ T5993] XFS (loop1): Mounting V5 Filesystem [ 147.354098][ T5063] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 147.363192][ T5063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.407397][ T5724] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0 [ 147.427235][ T5724] usb 5-1: USB disconnect, device number 6 [ 147.434928][ T5063] usb 3-1: config 0 descriptor?? [ 147.468154][ T6017] loop3: detected capacity change from 0 to 512 [ 147.485287][ T5063] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 147.493597][ T6021] loop5: detected capacity change from 0 to 128 [ 147.494474][ T5048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.532192][ T6021] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.566593][ T6017] EXT4-fs (loop3): Test dummy encryption mode enabled [ 147.580477][ T5993] XFS (loop1): Ending clean mount [ 147.613559][ T6021] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.706818][ T6017] EXT4-fs (loop3): Ignoring removed bh option [ 147.719044][ T6017] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.750282][ T4184] XFS (loop1): Unmounting Filesystem [ 147.875073][ T6024] fido_id[6024]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 147.884988][ T6017] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.489: inode has both inline data and extents flags [ 147.923613][ T5063] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 148.006459][ T6017] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.489: couldn't read orphan inode 15 (err -117) [ 148.037393][ T6017] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,init_itable=0x0000000000000001,test_dummy_encryption,nouid32,max_dir_size_kb=0x0000000000000003,bh,data=journal,,errors=continue. Quota mode: none. [ 148.186874][ T6037] loop5: detected capacity change from 0 to 256 [ 148.214393][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.390485][ T6037] FAT-fs (loop5): Directory bread(block 64) failed [ 148.438357][ T6037] FAT-fs (loop5): Directory bread(block 65) failed [ 148.465824][ T6037] FAT-fs (loop5): Directory bread(block 66) failed [ 148.472604][ T6037] FAT-fs (loop5): Directory bread(block 67) failed [ 148.510785][ T6037] FAT-fs (loop5): Directory bread(block 68) failed [ 148.517907][ T6049] loop1: detected capacity change from 0 to 128 [ 148.533701][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.573153][ T6037] FAT-fs (loop5): Directory bread(block 69) failed [ 148.580099][ T5063] gspca_cpia1: usb_control_msg 05, error -71 [ 148.589967][ T5063] cpia1 3-1:0.0: unexpected systemstate: 00 [ 148.597940][ T6037] FAT-fs (loop5): Directory bread(block 70) failed [ 148.613255][ T5063] usb 3-1: USB disconnect, device number 5 [ 148.620432][ T6037] FAT-fs (loop5): Directory bread(block 71) failed [ 148.683482][ T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 148.691484][ T6037] FAT-fs (loop5): Directory bread(block 72) failed [ 148.711707][ T6037] FAT-fs (loop5): Directory bread(block 73) failed [ 148.741000][ T6053] binder: 6052:6053 ioctl c0306201 2000000001c0 returned -14 [ 148.861047][ T6058] netlink: 48 bytes leftover after parsing attributes in process `syz.4.500'. [ 149.103827][ T13] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 149.112409][ T13] usb 4-1: config 0 has no interface number 0 [ 149.118787][ T13] usb 4-1: too many endpoints for config 0 interface 191 altsetting 177: 90, using maximum allowed: 30 [ 149.130917][ T13] usb 4-1: config 0 interface 191 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 90 [ 149.151412][ T13] usb 4-1: config 0 interface 191 has no altsetting 0 [ 149.206496][ T6072] process 'syz.5.503' launched '/dev/fd/3' with NULL argv: empty string added [ 149.323975][ T13] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 149.347298][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.362015][ T13] usb 4-1: Product: syz [ 149.367292][ T13] usb 4-1: Manufacturer: syz [ 149.380331][ T13] usb 4-1: SerialNumber: syz [ 149.395538][ T13] usb 4-1: config 0 descriptor?? [ 149.531659][ T6088] netlink: 'syz.5.510': attribute type 3 has an invalid length. [ 149.542093][ T6088] netlink: 'syz.5.510': attribute type 7 has an invalid length. [ 149.550535][ T6088] netlink: 198628 bytes leftover after parsing attributes in process `syz.5.510'. [ 149.569796][ T6090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.509'. [ 149.581614][ T5063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.646638][ T6092] device macvtap1 entered promiscuous mode [ 149.699563][ T13] usb 4-1: USB disconnect, device number 9 [ 149.780939][ T6097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.946916][ T6103] loop2: detected capacity change from 0 to 2048 [ 150.044833][ T6103] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc,. Quota mode: writeback. [ 150.081667][ T6103] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.176234][ T6103] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.515: bg 0: block 345: padding at end of block bitmap is not set [ 150.201752][ T6103] EXT4-fs (loop2): Remounting filesystem read-only [ 150.476635][ T6127] loop3: detected capacity change from 0 to 256 [ 150.498003][ T6129] loop1: detected capacity change from 0 to 64 [ 150.514040][ T6127] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 150.661493][ T5063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.685188][ T26] audit: type=1326 audit(1776952487.804:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.3.525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f663b8a0819 code=0x0 [ 151.008064][ T5063] kernel write not supported for file bpf-prog (pid: 5063 comm: kworker/1:17) [ 151.266262][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.518217][ T6161] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 151.559497][ T6161] hpfs: filesystem error: improperly stopped [ 151.580969][ T6161] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 151.604948][ T6161] hpfs: You really don't want any checks? You are crazy... [ 151.623171][ T6163] device syzkaller1 entered promiscuous mode [ 151.632173][ T6161] hpfs: hpfs_map_sector(): read error [ 151.649738][ T6161] hpfs: code page support is disabled [ 151.697758][ T6161] hpfs: hpfs_map_4sectors(): unaligned read [ 151.719566][ T6161] hpfs: hpfs_map_4sectors(): unaligned read [ 151.726106][ T6161] hpfs: filesystem error: unable to find root dir [ 151.733934][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.757480][ T6165] EXT4-fs (loop4): Ignoring removed oldalloc option [ 151.779189][ T6155] JBD2: Ignoring recovery information on journal [ 151.792106][ T6165] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 151.836509][ T6165] System zones: 0-7 [ 151.844807][ T6165] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,nodioread_nolock,barrier=0x0000000000000007,oldalloc,nojournal_checksum,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 151.897094][ T6155] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 151.910000][ T6161] hpfs: hpfs_map_4sectors(): unaligned read [ 151.924077][ T6165] EXT4-fs (loop4): shut down requested (1) [ 151.954457][ T6161] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 151.971442][ T6155] [ 151.973932][ T6155] ====================================================== [ 151.981182][ T6155] WARNING: possible circular locking dependency detected [ 151.988222][ T6155] syzkaller #0 Not tainted [ 151.992653][ T6155] ------------------------------------------------------ [ 151.999701][ T6155] syz.1.544/6155 is trying to acquire lock: [ 152.005701][ T6155] ffff88805f3c8660 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 152.016555][ T6155] [ 152.016555][ T6155] but task is already holding lock: [ 152.023930][ T6155] ffff88805f3c86f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x340 [ 152.034659][ T6155] [ 152.034659][ T6155] which lock already depends on the new lock. [ 152.034659][ T6155] [ 152.045457][ T6155] [ 152.045457][ T6155] the existing dependency chain (in reverse order) is: [ 152.054566][ T6155] [ 152.054566][ T6155] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 152.062384][ T6155] down_read+0x44/0x2e0 [ 152.067072][ T6155] ocfs2_init_acl+0x307/0x770 [ 152.072287][ T6155] ocfs2_mknod+0x15cb/0x2510 [ 152.077398][ T6155] ocfs2_create+0x192/0x420 [ 152.082506][ T6155] path_openat+0x11db/0x2fa0 [ 152.087618][ T6155] do_filp_open+0x1e2/0x410 [ 152.092638][ T6155] do_sys_openat2+0x150/0x4b0 [ 152.097836][ T6155] __x64_sys_openat+0x135/0x160 [ 152.103307][ T6155] do_syscall_64+0x4c/0xa0 [ 152.108334][ T6155] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.114841][ T6155] [ 152.114841][ T6155] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 152.123447][ T6155] down_read+0x44/0x2e0 [ 152.128141][ T6155] ocfs2_start_trans+0x3a6/0x6f0 [ 152.133602][ T6155] ocfs2_mknod+0xf5a/0x2510 [ 152.138625][ T6155] ocfs2_create+0x192/0x420 [ 152.143648][ T6155] path_openat+0x11db/0x2fa0 [ 152.148762][ T6155] do_filp_open+0x1e2/0x410 [ 152.153790][ T6155] do_sys_openat2+0x150/0x4b0 [ 152.158987][ T6155] __x64_sys_openat+0x135/0x160 [ 152.164358][ T6155] do_syscall_64+0x4c/0xa0 [ 152.169298][ T6155] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.175882][ T6155] [ 152.175882][ T6155] -> #1 (sb_internal#6){.+.+}-{0:0}: [ 152.183445][ T6155] ocfs2_start_trans+0x2a7/0x6f0 [ 152.188908][ T6155] ocfs2_truncate_file+0x62d/0x1460 [ 152.194627][ T6155] ocfs2_setattr+0x14dd/0x1ad0 [ 152.199915][ T6155] notify_change+0xbcd/0xee0 [ 152.205026][ T6155] do_truncate+0x1ac/0x240 [ 152.209961][ T6155] path_openat+0x2922/0x2fa0 [ 152.215081][ T6155] do_filp_open+0x1e2/0x410 [ 152.220107][ T6155] do_sys_openat2+0x150/0x4b0 [ 152.225475][ T6155] __x64_sys_creat+0x8c/0xb0 [ 152.230591][ T6155] do_syscall_64+0x4c/0xa0 [ 152.235716][ T6155] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.242221][ T6155] [ 152.242221][ T6155] -> #0 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 152.250049][ T6155] __lock_acquire+0x2c42/0x7d10 [ 152.255472][ T6155] lock_acquire+0x19e/0x400 [ 152.260547][ T6155] down_write+0x38/0x60 [ 152.265239][ T6155] ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 152.271747][ T6155] ocfs2_truncate_file+0xe03/0x1460 [ 152.277469][ T6155] ocfs2_setattr+0x14dd/0x1ad0 [ 152.282758][ T6155] notify_change+0xbcd/0xee0 [ 152.287874][ T6155] do_truncate+0x1ac/0x240 [ 152.293002][ T6155] path_openat+0x2922/0x2fa0 [ 152.298201][ T6155] do_filp_open+0x1e2/0x410 [ 152.303229][ T6155] do_sys_openat2+0x150/0x4b0 [ 152.308426][ T6155] __x64_sys_creat+0x8c/0xb0 [ 152.313540][ T6155] do_syscall_64+0x4c/0xa0 [ 152.318566][ T6155] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.325090][ T6155] [ 152.325090][ T6155] other info that might help us debug this: [ 152.325090][ T6155] [ 152.335414][ T6155] Chain exists of: [ 152.335414][ T6155] &oi->ip_alloc_sem --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 152.335414][ T6155] [ 152.349758][ T6155] Possible unsafe locking scenario: [ 152.349758][ T6155] [ 152.357202][ T6155] CPU0 CPU1 [ 152.362565][ T6155] ---- ---- [ 152.367925][ T6155] lock(&oi->ip_xattr_sem); [ 152.372558][ T6155] lock(&journal->j_trans_barrier); [ 152.380502][ T6155] lock(&oi->ip_xattr_sem); [ 152.387610][ T6155] lock(&oi->ip_alloc_sem); [ 152.392294][ T6155] [ 152.392294][ T6155] *** DEADLOCK *** [ 152.392294][ T6155] [ 152.400517][ T6155] 3 locks held by syz.1.544/6155: [ 152.405542][ T6155] #0: ffff88807c140460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 152.414868][ T6155] #1: ffff88805f3c89c8 (&sb->s_type->i_mutex_key#36){+.+.}-{3:3}, at: do_truncate+0x198/0x240 [ 152.425342][ T6155] #2: ffff88805f3c86f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x340 [ 152.436487][ T6155] [ 152.436487][ T6155] stack backtrace: [ 152.442369][ T6155] CPU: 1 PID: 6155 Comm: syz.1.544 Not tainted syzkaller #0 [ 152.449718][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 152.459859][ T6155] Call Trace: [ 152.463138][ T6155] [ 152.466168][ T6155] dump_stack_lvl+0x188/0x250 [ 152.470856][ T6155] ? load_image+0x400/0x400 [ 152.475355][ T6155] ? show_regs_print_info+0x20/0x20 [ 152.480567][ T6155] ? print_circular_bug+0x12b/0x1a0 [ 152.485764][ T6155] check_noncircular+0x296/0x330 [ 152.490807][ T6155] ? add_chain_block+0x940/0x940 [ 152.495747][ T6155] ? lockdep_lock+0xf1/0x1f0 [ 152.500425][ T6155] ? lockdep_unlock+0x143/0x2e0 [ 152.505277][ T6155] ? mark_lock+0x94/0x320 [ 152.509607][ T6155] __lock_acquire+0x2c42/0x7d10 [ 152.514475][ T6155] ? kfree+0xef/0x2a0 [ 152.518469][ T6155] ? verify_lock_unused+0x140/0x140 [ 152.523699][ T6155] lock_acquire+0x19e/0x400 [ 152.528318][ T6155] ? ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 152.534578][ T6155] ? __might_sleep+0xf0/0xf0 [ 152.539169][ T6155] ? read_lock_is_recursive+0x10/0x10 [ 152.544559][ T6155] ? rwsem_write_trylock+0x135/0x1c0 [ 152.550052][ T6155] ? clear_nonspinnable+0x60/0x60 [ 152.555197][ T6155] ? ocfs2_truncate_file+0xd29/0x1460 [ 152.560687][ T6155] down_write+0x38/0x60 [ 152.564849][ T6155] ? ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 152.571009][ T6155] ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 152.577006][ T6155] ? ocfs2_remove_refcount_tree+0xe40/0xe40 [ 152.583056][ T6155] ? up_write+0x1bb/0x420 [ 152.587392][ T6155] ocfs2_truncate_file+0xe03/0x1460 [ 152.592598][ T6155] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 152.598406][ T6155] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 152.604129][ T6155] ? do_raw_spin_unlock+0x11d/0x230 [ 152.609328][ T6155] ? _raw_spin_unlock+0x24/0x40 [ 152.614176][ T6155] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 152.619915][ T6155] ? ocfs2_inode_lock_atime+0x530/0x530 [ 152.625668][ T6155] ? ocfs2_rw_lock+0x134/0x250 [ 152.630445][ T6155] ? dquot_initialize+0x20/0x20 [ 152.635513][ T6155] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 152.641683][ T6155] ? mark_lock+0x94/0x320 [ 152.646102][ T6155] ? jbd2_journal_begin_ordered_truncate+0xb7/0x150 [ 152.652693][ T6155] ocfs2_setattr+0x14dd/0x1ad0 [ 152.657471][ T6155] ? ocfs2_extend_allocation+0x1830/0x1830 [ 152.663287][ T6155] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 152.669099][ T6155] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 152.675349][ T6155] ? ocfs2_xattr_get+0x149/0x260 [ 152.680399][ T6155] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 152.686380][ T6155] ? current_time+0x1ad/0x2c0 [ 152.691069][ T6155] ? atime_needs_update+0x780/0x780 [ 152.696450][ T6155] ? bpf_lsm_inode_setattr+0x5/0x10 [ 152.701740][ T6155] ? try_break_deleg+0x79/0x120 [ 152.706691][ T6155] ? ocfs2_extend_allocation+0x1830/0x1830 [ 152.712507][ T6155] notify_change+0xbcd/0xee0 [ 152.717737][ T6155] do_truncate+0x1ac/0x240 [ 152.722177][ T6155] ? rcu_lock_release+0x20/0x20 [ 152.727034][ T6155] ? ima_bprm_check+0x200/0x200 [ 152.731976][ T6155] ? bpf_lsm_path_truncate+0x5/0x10 [ 152.737214][ T6155] path_openat+0x2922/0x2fa0 [ 152.741954][ T6155] ? verify_lock_unused+0x140/0x140 [ 152.747161][ T6155] ? slab_post_alloc_hook+0x4c/0x380 [ 152.752580][ T6155] ? do_filp_open+0x410/0x410 [ 152.757265][ T6155] do_filp_open+0x1e2/0x410 [ 152.761942][ T6155] ? vfs_tmpfile+0x300/0x300 [ 152.766626][ T6155] ? _raw_spin_unlock+0x24/0x40 [ 152.771566][ T6155] ? alloc_fd+0x598/0x630 [ 152.775904][ T6155] do_sys_openat2+0x150/0x4b0 [ 152.780584][ T6155] ? do_sys_open+0xe0/0xe0 [ 152.785002][ T6155] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 152.790986][ T6155] ? lock_chain_count+0x20/0x20 [ 152.795943][ T6155] ? vtime_user_exit+0x2c8/0x3e0 [ 152.800893][ T6155] __x64_sys_creat+0x8c/0xb0 [ 152.805489][ T6155] do_syscall_64+0x4c/0xa0 [ 152.809938][ T6155] ? clear_bhb_loop+0x30/0x80 [ 152.814617][ T6155] ? clear_bhb_loop+0x30/0x80 [ 152.819379][ T6155] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.825498][ T6155] RIP: 0033:0x7fbe90c08819 [ 152.829938][ T6155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.849661][ T6155] RSP: 002b:00007fbe8ee62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 152.858082][ T6155] RAX: ffffffffffffffda RBX: 00007fbe90e81fa0 RCX: 00007fbe90c08819 [ 152.866056][ T6155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 152.874028][ T6155] RBP: 00007fbe90c9ec91 R08: 0000000000000000 R09: 0000000000000000 [ 152.882083][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.890055][ T6155] R13: 00007fbe90e82038 R14: 00007fbe90e81fa0 R15: 00007ffc3b5acc98 [ 152.898132][ T6155] [ 152.935992][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.044843][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 153.973994][ T5063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.293519][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.613567][ T4489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.016111][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.053805][ T5047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.094185][ T5047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.333571][ T4489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.133784][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.173764][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.214042][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.373757][ T4489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.253834][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog