last executing test programs: 21.53686217s ago: executing program 0 (id=369): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x24, r2, 0x93ab003a7e79c06f, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) 21.446755062s ago: executing program 0 (id=370): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xfff) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 20.494643994s ago: executing program 0 (id=379): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1a) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 20.399498365s ago: executing program 0 (id=382): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x2000882, &(0x7f0000000a40)={[{@errors_remount}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10001ff}}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@nodioread_nolock}, {@jqfmt_vfsold}]}, 0x3, 0x4a7, &(0x7f00000004c0)="$eJzs3MtvVNUfAPDvvdMWyuPX/hAfPNQqGhvUlgIqCxdqNHGBiYkuNK6athBkoIbWRAhRMAZXxpi4Ny79F1zpxhjdaNzqwp0hIaYbwA1j7sydzkw7M/Qx7SDz+SSXnvvifL8998yce09nAuhZI9k/ScSOiPg9IoYqq40HjFR+3Fi4OHVz4eJUEqXSG38n5eOuL1ycqh5aPW97vjKaRqSfJLGvSb1z5y+cniwWZ87l6+PzZ94bnzt/4elTZyZPzpycOXv42LGjRyaee/bwM80DH1hZfmldTNf3fji7f8+rb3/x2vHPFtP7tfKzPo8OGWm38/FSqcPVddfOunLS18VAWJVCRGTN1V/u/0NRiFrjDcUrH3c1OGBDlUql0vbWuy+VgLtYEo3rujz0iuobfXb/my1bYvl98AsbN/zoumsvVm6Astxv5EtlT9/is4P+Jfe3nTQSEW9d+uerbImNeQ4BANDgu2z881Rt/Fcbf6RxX+2wUpLPDQ1HxP8jYldE3BMRuyPi3ojysfdHxAP5nEu6wvqXTpIsH/+kV9eXYXvZ+O/5fG6rcfy3mMFwIV/bWc6/PzlxqjhzKCL+FxGjMRgRxZmJNnV8//Jvn7faVz/+y5as/upYMI/jat+WxnOmJ+cn15NzvWuXI/b2VXOtzz9ZnAnI2n5PROxdYx2nDn6zv9W+2+ffRgfmmUpfRzxRaf9LsdCYf1XSfn5yfGsUZw6NV6+K5X765crrreov53+wRf7968/vdrL239b0+l/Mfzipn6+dW30dV/74tOU9zVqv/4HkzXI5nwZOPpicnz83ETGQHK8EnR9b3n64dm51vXp8lv/ogeb9f1fUfhP7IiK7iB+MiIci4uE89kci4tGIONAm/x9feuzdpjvSdV7/HZDlP72q9q8VBmLpluaFwukfvm2odLhWzPO/2b79j5ZLo/mWlbz+rSSutV3NAAAA8N+TRsSOSNKxxXKajo1V/l5+d0RanJ2bf/LE7PtnpyufERiO/rT6pGuo7nnoRH5bX1m/HBGVPy2o7j+SPzf+sjBYXh+bmi1Odzt56HHbW/T/zF+FbkcHbDif14Lepf9D72rW/7d2IQ5g83n/h97VpP8PdiMOYPM1e///aOmGxleEWxsZD7B5lvR/037QQ1Z////zOxsSCLDpWvb/u/mbf4Ayz/+hJ80Nxu0/JN+2UP2f1nj6nVJIIqJxS2HFXyLQtBD9azmrsCyMrhdKSdPGjTQr9He2rlt3Rsoz5+b+3JZ3kDsknk0vdPFFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoIP+DQAA//8tRNZM") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121500, 0x0) lseek(r0, 0x80000000008, 0x0) 19.505270976s ago: executing program 0 (id=390): r0 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) write$char_usb(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 18.749169563s ago: executing program 0 (id=400): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x108) close(r0) socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18.537408568s ago: executing program 32 (id=400): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x108) close(r0) socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17.196585858s ago: executing program 1 (id=412): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x20, 0xfffffffffffffffd}, 0x10) 16.941289594s ago: executing program 1 (id=413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010003904ffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0198008922f93f98cab700131300001c0012800900010069706970000000000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004881}, 0x10) 16.756443008s ago: executing program 1 (id=414): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xf, 0x100}}}}}}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x440, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) 16.506553814s ago: executing program 1 (id=415): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x2000882, &(0x7f0000000a40)={[{@errors_remount}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10001ff}}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@nodioread_nolock}, {@jqfmt_vfsold}]}, 0x3, 0x4a7, &(0x7f00000004c0)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121500, 0x0) lseek(r0, 0x80000000008, 0x0) 15.905662218s ago: executing program 1 (id=418): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@private=0xa010100, 0x0, 0x0, 0xffff, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 15.250596633s ago: executing program 1 (id=420): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 14.94930191s ago: executing program 33 (id=420): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.596527472s ago: executing program 2 (id=470): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffffb}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0037"], 0x3c}}, 0x0) 4.127091436s ago: executing program 2 (id=474): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x26, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x12, 0x0, @gue={{0x2, 0x1, 0x1, 0x24, 0x0, @val=0x80}, "3fe2"}}}}}}, 0x0) 3.976272939s ago: executing program 2 (id=476): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f00000005c0)='u', 0x1, 0x8081, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000001) 3.484207361s ago: executing program 2 (id=478): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) setsockopt(r0, 0x84, 0x82, &(0x7f0000000000)="0000468ae49c4022", 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) 3.377257013s ago: executing program 2 (id=479): syz_open_dev$video(0x0, 0x101, 0xab02) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000400), &(0x7f0000012500)='./file0\x00', 0x210401, &(0x7f0000000540)={[{@data_writeback}, {@quota_off}, {@data_ordered}, {@suiddir}, {@data_writeback}, {@quota_on}, {@ignore_local_fs}, {}, {@noacl}, {@acl}, {@upgrade}, {@noloccookie}, {@barrier}, {@upgrade}, {@localflocks}]}, 0x1, 0x125d8, &(0x7f0000012540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30) 3.285946105s ago: executing program 6 (id=481): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {0x8}, {0x2, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0xfff, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x8, 0xc824, 0x4, 0xe3, 0x6, 0x0, 0x7, 0x7, 0xe, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x6, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0xc, 0x8, 0xfffffffa, 0xfffffff7, 0x3, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x4, 0x3, 0x7ff, 0x5, 0x0, 0x3, 0x2, 0x6, 0x5, 0xfffff000, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x80, 0x3, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x800, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x0, 0x7, 0x200, 0x12, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x2e, 0xc, 0x6, 0x20, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0x1, 0x6, 0x8, 0x990, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x7ff, 0x8000, 0x5, 0x6, 0x10000, 0xd41b, 0x7, 0xf, 0x40004, 0xf918, 0x7f, 0x3, 0x8, 0x2, 0x140, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x4000001, 0xfffffffe, 0x6, 0x9, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0x5, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x0, 0x4ebe3ccc, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x9, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x7, 0x4, 0x81, 0x58783dd6, 0xed2, 0x5, 0x5, 0x9]}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x800, 0x2, 0xa, 0xbc2, 0x1ff, 0x10, 0x4, 0x8, 0x4, 0x4, 0x6, 0xff, 0x2b45, 0x1, 0x0, 0x6, 0x1, 0x5, 0x552a, 0x9, 0x1, 0x8, 0x3ff, 0x9, 0x9, 0x1000, 0x4, 0x5fdb, 0x1ff, 0x2, 0x10000, 0x7, 0x4, 0x9, 0xfff, 0x10000, 0x10000, 0xd6, 0xfffffff8, 0x8, 0x8001, 0x80000000, 0x32, 0xe, 0x3, 0x0, 0x0, 0x1, 0x10001, 0x481, 0x9, 0xffffff46, 0x8, 0x9, 0x90d3, 0xffff177f, 0x7, 0x0, 0xb099, 0x3, 0xff, 0xff, 0xfffffff2, 0x10, 0xc, 0xfd, 0x101, 0x7, 0x0, 0x0, 0x2, 0x0, 0x3, 0x81, 0xd, 0x3, 0x3, 0x6, 0x6e, 0x90, 0x3, 0x8000, 0xe, 0x9, 0x401, 0xb879, 0x8, 0x8, 0x1, 0x2, 0x80000001, 0xbb4f, 0x2, 0x1, 0x5, 0x1b2, 0xbc, 0x2, 0x2, 0x44bd, 0x2, 0x5, 0x3, 0x8, 0x57e, 0x3, 0x5c5, 0x7, 0x10000, 0x8000009, 0x1, 0x5, 0x1, 0xc9f, 0x8, 0xd, 0x7, 0x6, 0x34, 0x400, 0x2, 0x0, 0x3, 0x4, 0x9, 0x9, 0xb7, 0xfffffffb, 0x7fffffff, 0x401, 0x6, 0x0, 0xb, 0x5, 0xfffffffa, 0x6, 0xf8d, 0xfffff907, 0x5d54156, 0x6, 0x2, 0x40, 0x101, 0x3, 0x1, 0x10001, 0xd141, 0x9, 0x2, 0x2, 0x8, 0x5, 0x5, 0x7, 0xb2, 0x50a6c46e, 0x3, 0x10004, 0x5, 0x1, 0x816, 0x6, 0xbdf2, 0x5, 0x2, 0x5, 0x8, 0x9, 0x8, 0xffffffff, 0x6, 0x484, 0xa24, 0xffffffa1, 0x4a, 0x3, 0x5, 0x7fffffff, 0x1, 0x7, 0x6, 0x1, 0x80000000, 0x3, 0x3, 0x9, 0x854, 0x3ff, 0x56, 0x3, 0x1, 0xf, 0xfd0, 0x7, 0x40, 0x4fb, 0x8, 0x5, 0x80, 0xb36, 0x1, 0x3, 0x5, 0x2, 0x4, 0x8, 0xffffffff, 0x2, 0x4, 0x9, 0xb, 0xccf1, 0x4902, 0x6, 0x7, 0x4, 0x7a, 0x7, 0xfffffffa, 0x8e1, 0x0, 0x0, 0x2aeb00d5, 0x7fffffff, 0x60000000, 0x9, 0x9ec, 0x8, 0x2, 0x1, 0x0, 0x1, 0x7, 0x1, 0x8, 0x101, 0xfffffffd, 0x1, 0x1, 0x4, 0x1000000, 0x10000, 0xffff, 0x5, 0xffffffff, 0x6, 0x4, 0x0, 0x3, 0x3, 0x4, 0x0, 0x9, 0x400, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 3.125783359s ago: executing program 6 (id=482): pipe2$9p(&(0x7f0000000580), 0x800) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') readlinkat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) 2.986277262s ago: executing program 6 (id=485): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 2.334945317s ago: executing program 3 (id=486): unshare(0x6020400) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000280)={'fscrypt:', @auto=[0x65, 0x62, 0x65, 0x31, 0x35, 0x65, 0x62, 0x66, 0x39, 0x38, 0x62, 0x65, 0x62, 0x34, 0x36, 0x33]}, &(0x7f0000000340)={0x0, "a1c5b2430b720a9817759457192f43a5bbc58c5eb814d980e72377f688a69bd771c0bbca7aa27466f82299a9291df1a73567a0c636ffde3f16a2defce0a3c644", 0x10}, 0x48, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x20) 2.034557474s ago: executing program 3 (id=488): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) 1.965905195s ago: executing program 5 (id=489): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f00000005c0)='u', 0x1, 0x8081, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000001) 1.878172397s ago: executing program 3 (id=490): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/175, 0x27}], 0x1, &(0x7f0000001fc0)=""/65, 0xffffffffffffff4b}, 0x40000001}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)="4a7b8370a138", 0x6}, {&(0x7f0000000240)="8698a4dfd6bc2d719362a365efe7b43ba2bd32e1", 0x14}], 0x2}, 0x2000c8c0) 1.580778634s ago: executing program 3 (id=492): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x10001}]}}]}, 0x3c}}, 0x20004055) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 1.487054636s ago: executing program 4 (id=493): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010105, 0x4e21, 0x3, 'dh\x00', 0x28, 0x660f537e, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.406022118s ago: executing program 5 (id=494): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000201f}) 1.285999s ago: executing program 4 (id=495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) close(0x3) 1.258954052s ago: executing program 3 (id=496): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x6, 0x0, 0x8, 0x0, 0x4000004, 0x8, 0x6, 0xb, 0x83, 0xe, 0x5, 0x3, 0x0, 0x101, 0x28, 0x0, 0x0, 0x0, 0xff, '\x00', 0xff, 0x9}) 1.182680223s ago: executing program 5 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$USBDEVFS_IOCTL(r0, 0xc0105500, &(0x7f0000000000)=@usbdevfs_connect={0x6a0}) 1.017125467s ago: executing program 5 (id=498): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) r1 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 943.882148ms ago: executing program 2 (id=499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x85a37f0917794555, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x14) 941.622648ms ago: executing program 3 (id=500): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x40, 0x2) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 883.22181ms ago: executing program 6 (id=501): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000001c0)={0x5, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002}}}}}, 0x0) 787.260462ms ago: executing program 5 (id=502): syz_mount_image$nilfs2(&(0x7f0000003380), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000003300)={[{}, {@errors_continue}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xed3, &(0x7f0000002400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) sendfile(r0, r0, 0x0, 0xe3aa6ea) 678.668025ms ago: executing program 4 (id=503): setresuid(0xee01, 0xee00, 0x0) r0 = msgget$private(0x0, 0x193) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgsnd(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="03"], 0x401, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0x0, 0x7, 0x10000, 0x10000, 0x9, 0x5, 0x9, 0xd, 0xfff}) 488.902879ms ago: executing program 4 (id=504): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000300)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x9, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0x7, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0xffffffff, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0xfffffff8, 0x2, 0x800, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x4007f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0xc7fff, 0x0, 0x5, 0x0, 0x3, 0x0, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x2, 0x4, 0xfffffffc, 0x0, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 459.39625ms ago: executing program 6 (id=505): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000004080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x8, 0x5, 0x7fffffff}]}) timer_getoverrun(0x0) preadv(r0, 0x0, 0x0, 0x55, 0xfffffffc) 205.381605ms ago: executing program 6 (id=506): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x41, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 50.583859ms ago: executing program 4 (id=507): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r0, 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 46.043309ms ago: executing program 5 (id=508): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4104, 0x9b08}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) 0s ago: executing program 4 (id=509): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000640)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e81"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): 08][ T4199] device veth0_vlan entered promiscuous mode [ 68.995365][ T4188] device veth0_macvtap entered promiscuous mode [ 69.005627][ T4188] device veth1_macvtap entered promiscuous mode [ 69.028956][ T4199] device veth1_vlan entered promiscuous mode [ 69.056079][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.067071][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.078611][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.090551][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.100926][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.109117][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.119234][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.128093][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.137055][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.147643][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.156743][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.170601][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.183451][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.194299][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.205222][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.216738][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.230424][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.241886][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.253198][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.266229][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.277494][ T4198] device veth0_vlan entered promiscuous mode [ 69.288864][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.298952][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.308882][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.317985][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.328333][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.337515][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.346737][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.355321][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.364614][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.374216][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.385081][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.396230][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.406270][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.417313][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.428500][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.438832][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.448573][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.457845][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.466670][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.480238][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.490981][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.499703][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.508638][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.525267][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.534235][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.559742][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.569182][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.578255][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.588114][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.617210][ T4198] device veth1_vlan entered promiscuous mode [ 69.655717][ T4199] device veth0_macvtap entered promiscuous mode [ 69.679086][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.688170][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.698477][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.708080][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.716676][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.735275][ T4199] device veth1_macvtap entered promiscuous mode [ 69.799671][ T4198] device veth0_macvtap entered promiscuous mode [ 69.812976][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 69.819729][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 69.825264][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.831443][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 69.839607][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 69.841775][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.846767][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 69.861195][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.894528][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.913340][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.925280][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.936000][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.946485][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.956687][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.969106][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.982143][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.990377][ T4198] device veth1_macvtap entered promiscuous mode [ 70.007541][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.022520][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.033136][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.044207][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.055964][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.066568][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.077461][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.087821][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.098635][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.109846][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.130060][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.142673][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.152912][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.163894][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.174192][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.185649][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.195833][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.207427][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.220030][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.237595][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.249702][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.260877][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.271639][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.282343][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.294225][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.305061][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.316234][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.327784][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.335538][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.344867][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.354401][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.363610][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.376267][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.385491][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.397606][ T4199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.407749][ T4199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.416860][ T4199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.426130][ T4199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.446173][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.456847][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.463859][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.465959][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.477385][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.490195][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.510893][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.518993][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.541952][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.554144][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.632183][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.649288][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.663107][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.674622][ T1403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.683713][ T1403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.698918][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.714411][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.730231][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.748261][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.760773][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.787019][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.831266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.857911][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.873984][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.894685][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.979779][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.979928][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.014247][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.023688][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.029008][ T4276] loop4: detected capacity change from 0 to 128 [ 71.056354][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.073224][ T4277] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 71.080279][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.112875][ T1403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.118604][ T4276] FAT-fs (loop4): Invalid FSINFO signature: 0x00ff5252, 0x61417272 (sector = 1) [ 71.169023][ T1403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.218299][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.290220][ T4276] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 546, start 05000005) [ 71.359176][ T4276] FAT-fs (loop4): Filesystem has been set read-only [ 71.384300][ T4282] loop1: detected capacity change from 0 to 16 [ 71.402361][ T4187] FAT-fs (loop4): Invalid FSINFO signature: 0x00ff5252, 0x61417272 (sector = 1) [ 71.423274][ T4282] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 71.423380][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.451005][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.727980][ T4286] loop2: detected capacity change from 0 to 2048 [ 71.805909][ T4286] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 71.901153][ T4271] Bluetooth: hci4: command 0x0419 tx timeout [ 71.920765][ T4271] Bluetooth: hci1: command 0x0419 tx timeout [ 71.936917][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 71.976990][ T4271] Bluetooth: hci0: command 0x0419 tx timeout [ 71.993518][ T4271] Bluetooth: hci3: command 0x0419 tx timeout [ 72.019845][ T4300] loop3: detected capacity change from 0 to 64 [ 72.046003][ T4275] loop0: detected capacity change from 0 to 32768 [ 72.111808][ T4275] ======================================================= [ 72.111808][ T4275] WARNING: The mand mount option has been deprecated and [ 72.111808][ T4275] and is ignored by this kernel. Remove the mand [ 72.111808][ T4275] option from the mount to silence this warning. [ 72.111808][ T4275] ======================================================= [ 72.178257][ T4304] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12'. [ 72.266140][ T26] audit: type=1800 audit(1783507476.149:2): pid=4300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 72.442064][ T4312] loop2: detected capacity change from 0 to 128 [ 72.460363][ T4275] JBD2: Ignoring recovery information on journal [ 72.607707][ T4275] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 72.617286][ T4312] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.617429][ T4312] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.923203][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 72.970843][ T4236] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.980245][ T4327] loop2: detected capacity change from 0 to 256 [ 72.988185][ T4271] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.057911][ T4327] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 73.168111][ T4327] exFAT-fs (loop2): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 73.180309][ T4331] loop3: detected capacity change from 0 to 128 [ 73.187704][ T4327] exFAT-fs (loop2): Filesystem has been set read-only [ 73.210972][ T4236] usb 2-1: Using ep0 maxpacket: 32 [ 73.331487][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.381777][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.398396][ T4236] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 73.404919][ T4271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 73.424793][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.432861][ T4271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 73.432894][ T4271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 73.432918][ T4271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 73.449173][ T4339] pimreg: tun_chr_ioctl cmd 1074025677 [ 73.469903][ T4339] pimreg: linktype set to 774 [ 73.482627][ T4236] usb 2-1: config 0 descriptor?? [ 73.498036][ T4339] pimreg: tun_chr_ioctl cmd 1074025678 [ 73.539772][ T4341] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.543265][ T4339] pimreg: group set to 0 [ 73.597420][ T4271] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 73.615486][ T4271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.625937][ T4271] usb 5-1: Product: syz [ 73.630143][ T4271] usb 5-1: Manufacturer: syz [ 73.636357][ T4271] usb 5-1: SerialNumber: syz [ 73.670628][ T4271] usb 5-1: config 0 descriptor?? [ 73.836348][ T4348] loop0: detected capacity change from 0 to 2048 [ 73.947001][ T4271] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 73.978873][ T4348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.014959][ T4236] savu 0003:1E7D:2D5A.0001: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 74.205273][ T1110] usb 5-1: USB disconnect, device number 2 [ 74.291901][ T4234] usb 2-1: USB disconnect, device number 2 [ 74.773743][ T26] audit: type=1800 audit(1783507478.659:3): pid=4348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.30" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 74.869960][ T4363] loop2: detected capacity change from 0 to 32768 [ 74.894269][ T4365] misc userio: Begin command sent, but we're already running [ 74.923681][ T4369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.39'. [ 75.403188][ T2303] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.510921][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.662330][ T2303] usb 1-1: Using ep0 maxpacket: 32 [ 75.770958][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 75.792104][ T2303] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 75.800544][ T2303] usb 1-1: config 0 has no interface number 0 [ 75.807137][ T2303] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 75.819391][ T2303] usb 1-1: config 0 interface 1 has no altsetting 0 [ 75.904465][ T4404] exfat: Deprecated parameter 'namecase' [ 75.910323][ T4404] exfat: Deprecated parameter 'namecase' [ 75.933334][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 75.933975][ T4404] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 75.981057][ T2303] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 75.991623][ T2303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.000446][ T2303] usb 1-1: Product: syz [ 76.006227][ T2303] usb 1-1: Manufacturer: syz [ 76.011382][ T2303] usb 1-1: SerialNumber: syz [ 76.018748][ T2303] usb 1-1: config 0 descriptor?? [ 76.031008][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.046929][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.222255][ T23] usb 4-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 76.237111][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.257777][ T23] usb 4-1: Product: syz [ 76.269083][ T23] usb 4-1: Manufacturer: syz [ 76.274655][ T23] usb 4-1: SerialNumber: syz [ 76.323250][ T2303] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 76.350733][ T2303] cx231xx 1-1:0.1: Not found matching IAD interface [ 76.367777][ T2303] usb 1-1: USB disconnect, device number 2 [ 76.570917][ T4233] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.660195][ T4411] device geneve2 entered promiscuous mode [ 76.660934][ T23] usb 4-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8212 device_setup=1 to enable and report any issues to g@b4.vu [ 76.708455][ T23] usb 4-1: USB disconnect, device number 2 [ 76.880768][ T4233] usb 5-1: Using ep0 maxpacket: 8 [ 76.912565][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.930557][ T4417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.977015][ T4278] udevd[4278]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.030940][ T4233] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 77.062325][ T4233] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.094741][ T4233] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.105271][ T4233] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.115608][ T4233] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.130003][ T4233] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.139636][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.292079][ T4422] set_capacity_and_notify: 2 callbacks suppressed [ 77.292096][ T4422] loop3: detected capacity change from 0 to 256 [ 77.318138][ T4424] loop0: detected capacity change from 0 to 256 [ 77.359719][ T4422] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 77.441010][ T4233] usb 5-1: GET_CAPABILITIES returned 0 [ 77.457120][ T4233] usbtmc 5-1:16.0: can't read capabilities [ 77.457156][ T4424] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.506794][ T4424] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 77.557444][ T4424] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 77.684193][ T4428] loop3: detected capacity change from 0 to 16 [ 77.722227][ T4428] erofs: (device loop3): mounted with root inode @ nid 36. [ 77.732882][ T4233] usb 5-1: USB disconnect, device number 3 [ 77.983876][ T4434] loop0: detected capacity change from 0 to 8 [ 78.075087][ T4434] SQUASHFS error: lzo decompression failed, data probably corrupt [ 78.085575][ T4434] SQUASHFS error: Failed to read block 0x91: -5 [ 78.099648][ T4434] SQUASHFS error: Unable to read metadata cache entry [8f] [ 78.125806][ T4434] SQUASHFS error: Unable to read inode 0x11f [ 78.142372][ T4441] loop1: detected capacity change from 0 to 1024 [ 78.190811][ T1110] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.480970][ T1110] usb 4-1: Using ep0 maxpacket: 16 [ 78.568157][ T4451] loop1: detected capacity change from 0 to 1024 [ 78.650988][ T1110] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.688511][ T1110] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 78.714829][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.758789][ T1110] usb 4-1: config 0 descriptor?? [ 78.936505][ T4454] loop4: detected capacity change from 0 to 32768 [ 79.019816][ T4454] XFS (loop4): Mounting V5 Filesystem [ 79.152552][ T4454] XFS (loop4): Ending clean mount [ 79.264091][ T1110] hid-led 0003:0FC5:B080.0002: unknown main item tag 0xd [ 79.291072][ T1110] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 79.310137][ T1110] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 79.345731][ T1110] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 79.369332][ T1110] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 79.378966][ T1110] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 79.403124][ T1110] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 79.536937][ T4187] XFS (loop4): Unmounting Filesystem [ 79.942093][ T23] usb 4-1: USB disconnect, device number 3 [ 80.050606][ T4476] loop2: detected capacity change from 0 to 32768 [ 80.085558][ T4484] loop1: detected capacity change from 0 to 32768 [ 80.104336][ T4476] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.81 (4476) [ 80.183090][ T4484] XFS (loop1): Mounting V5 Filesystem [ 80.210328][ T4491] loop4: detected capacity change from 0 to 4096 [ 80.222748][ T4476] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 80.233035][ T4476] BTRFS info (device loop2): setting nodatasum [ 80.239243][ T4476] BTRFS info (device loop2): force zlib compression, level 3 [ 80.247159][ T4476] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 80.301704][ T4476] BTRFS info (device loop2): use lzo compression, level 0 [ 80.356014][ T4476] BTRFS info (device loop2): turning on flush-on-commit [ 80.381222][ T4484] XFS (loop1): Ending clean mount [ 80.413560][ T4476] BTRFS info (device loop2): enabling auto defrag [ 80.443341][ T4476] BTRFS info (device loop2): max_inline at 4096 [ 80.449652][ T4476] BTRFS info (device loop2): using free space tree [ 80.474620][ T4484] XFS (loop1): User initiated shutdown received. [ 80.503993][ T4484] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 80.543542][ T4476] BTRFS info (device loop2): has skinny extents [ 80.566970][ T4484] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 80.740304][ T4188] XFS (loop1): Unmounting Filesystem [ 80.927984][ T4476] BTRFS info (device loop2): enabling ssd optimizations [ 81.406965][ T4547] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 81.418457][ T4547] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 81.429704][ T4551] netlink: 240 bytes leftover after parsing attributes in process `syz.3.100'. [ 81.692500][ T7] cfg80211: failed to load regulatory.db [ 81.735403][ T4564] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.861436][ T4571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 81.944459][ T4555] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 81.962127][ T4555] REISERFS (device loop3): using ordered data mode [ 81.968689][ T4555] reiserfs: using flush barriers [ 82.136428][ T4555] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.217523][ T4555] REISERFS (device loop3): checking transaction log (loop3) [ 82.271193][ T4555] REISERFS (device loop3): Using r5 hash to sort names [ 82.306396][ T4555] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 82.652599][ T4591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.116'. [ 82.692636][ T4585] set_capacity_and_notify: 2 callbacks suppressed [ 82.692651][ T4585] loop2: detected capacity change from 0 to 4096 [ 82.767147][ T4585] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 82.867454][ T4585] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 82.906831][ T4585] System zones: 0-5 [ 83.019115][ T4585] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,nogrpid,nodiscard,min_batch_time=0x0000000000000005,acl,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 83.673404][ T4561] loop1: detected capacity change from 0 to 65536 [ 83.698639][ T4597] loop0: detected capacity change from 0 to 40427 [ 83.745560][ T4597] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 83.755074][ T4597] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 83.791507][ T4597] F2FS-fs (loop0): invalid crc value [ 83.829201][ T4561] XFS (loop1): Mounting V5 Filesystem [ 83.834959][ T4597] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.893692][ T4561] XFS (loop1): Ending clean mount [ 83.905658][ T4561] XFS (loop1): Quotacheck needed: Please wait. [ 83.973679][ T4597] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 83.985713][ T4561] XFS (loop1): Quotacheck: Done. [ 84.012367][ T4597] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 84.097331][ T26] audit: type=1800 audit(1783507487.979:4): pid=4561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.106" name="file1" dev="loop1" ino=70 res=0 errno=0 [ 84.205268][ T4188] XFS (loop1): Unmounting Filesystem [ 84.409488][ T4628] loop4: detected capacity change from 0 to 256 [ 84.825710][ T4636] loop4: detected capacity change from 0 to 512 [ 84.865363][ T4636] EXT4-fs (loop4): Ignoring removed bh option [ 84.880759][ T1110] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 84.920134][ T4636] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.131: corrupted in-inode xattr [ 84.989305][ T4636] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.131: couldn't read orphan inode 15 (err -117) [ 85.080462][ T4636] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000002,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 85.149441][ T4645] loop0: detected capacity change from 0 to 2048 [ 85.223823][ T4306] loop0: p1 < > [ 85.265721][ T4645] loop0: p1 < > [ 85.336364][ T1110] usb 4-1: unable to get BOS descriptor or descriptor too short [ 85.395116][ T4278] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 85.471862][ T4278] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.481005][ T4193] __loop_clr_fd: partition scan of loop0 failed (rc=-16) [ 85.483658][ T1110] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 85.507751][ T4278] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 85.516034][ T1110] usb 4-1: can't read configurations, error -71 [ 85.545104][ T4652] loop1: detected capacity change from 0 to 256 [ 85.552613][ T4278] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.569397][ T4278] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 85.578854][ T4278] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.594428][ T4278] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 85.603569][ T4278] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.615731][ T4278] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 85.628874][ T4652] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22de60d6, utbl_chksum : 0xe619d30d) [ 85.643973][ T4278] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.679150][ T4278] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 85.714099][ T1325] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.747245][ T4278] udevd[4278]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 85.830790][ T4562] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.878474][ T4278] udevd[4278]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 85.922424][ T4650] loop4: detected capacity change from 0 to 32768 [ 85.986846][ T4650] XFS (loop4): Mounting V5 Filesystem [ 86.065243][ T4650] XFS (loop4): Ending clean mount [ 86.131347][ T1325] usb 3-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.150720][ T1325] usb 3-1: config 1 interface 0 has no altsetting 0 [ 86.190972][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.192089][ T4562] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 86.242312][ T4658] loop3: detected capacity change from 0 to 32768 [ 86.262041][ T4562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.279139][ T4562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.289816][ T4562] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 86.303044][ T4187] XFS (loop4): Unmounting Filesystem [ 86.381333][ T4562] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 86.382414][ T4658] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4 [ 86.382414][ T4658] [ 86.390429][ T4562] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 86.390453][ T4562] usb 1-1: Manufacturer: syz [ 86.401261][ T4562] usb 1-1: config 0 descriptor?? [ 86.416612][ T4658] ERROR: (device loop3): remounting filesystem as read-only [ 86.467077][ T1325] usb 3-1: string descriptor 0 read error: -22 [ 86.469717][ T4658] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4 [ 86.469717][ T4658] [ 86.473648][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 86.474041][ T1325] usb 3-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 86.501171][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.575807][ T1325] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input6 [ 86.631046][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.659921][ T7] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 86.669121][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.700023][ T7] usb 2-1: config 0 descriptor?? [ 86.786600][ T4648] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.805445][ T4648] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 86.838615][ T4673] loop4: detected capacity change from 0 to 2048 [ 86.864115][ T4674] rdma_rxe: rxe_register_device failed with error -23 [ 86.887579][ T4674] rdma_rxe: failed to add ip6gretap0 [ 86.903089][ T4562] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 86.912151][ T4562] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 86.956702][ T4657] udc-core: couldn't find an available UDC or it's busy [ 86.964175][ T3545] bcm5974 3-1:1.0: could not read from device [ 86.996560][ T4562] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 87.010782][ T4657] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 87.011290][ T1325] usb 3-1: USB disconnect, device number 2 [ 87.021937][ T3545] bcm5974 3-1:1.0: could not read from device [ 87.039064][ T4657] udc-core: couldn't find an available UDC or it's busy [ 87.062202][ T3545] bcm5974 3-1:1.0: could not read from device [ 87.130807][ T4657] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 87.265419][ T4562] usb 1-1: USB disconnect, device number 3 [ 87.408287][ T4683] device wlan0 entered promiscuous mode [ 87.408980][ T7] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0042.0004/input/input7 [ 87.416231][ T4683] device macsec1 entered promiscuous mode [ 87.484589][ T4684] device macsec2 entered promiscuous mode [ 87.501208][ T4684] Zero length message leads to an empty skb [ 87.539997][ T7] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0042.0004/input/input8 [ 87.571952][ T7] uclogic 0003:5543:0042.0004: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 87.765104][ T7] usb 2-1: USB disconnect, device number 3 [ 88.069352][ T4698] loop3: detected capacity change from 0 to 128 [ 88.145122][ T4698] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 88.186866][ T4701] loop0: detected capacity change from 0 to 8 [ 88.191824][ T4698] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.220176][ T4698] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 88.246470][ T4679] loop4: detected capacity change from 0 to 40427 [ 88.248224][ T4698] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 88.306905][ T4679] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 88.340744][ T4701] SQUASHFS error: zlib decompression failed, data probably corrupt [ 88.349377][ T4701] SQUASHFS error: Failed to read block 0x9b: -5 [ 88.387896][ T4679] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 88.392135][ T4701] SQUASHFS error: Unable to read metadata cache entry [99] [ 88.446257][ T4701] SQUASHFS error: Unable to read inode 0x127 [ 88.480026][ T4679] F2FS-fs (loop4): invalid crc value [ 88.557120][ T4679] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 88.871710][ T4679] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 88.887854][ T4723] overlayfs: conflicting lowerdir path [ 88.894303][ T4679] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 88.908522][ T4726] device syzkaller1 entered promiscuous mode [ 89.079758][ T4734] loop0: detected capacity change from 0 to 512 [ 89.163708][ T4187] attempt to access beyond end of device [ 89.163708][ T4187] loop4: rw=2049, want=45104, limit=40427 [ 89.211730][ T4734] EXT4-fs (loop0): 1 truncate cleaned up [ 89.224990][ T4734] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 89.247964][ T4740] loop3: detected capacity change from 0 to 256 [ 89.310185][ T4740] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 89.412077][ T26] audit: type=1800 audit(1783507493.279:5): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.163" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 89.533479][ T4741] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.163: bg 0: block 465: padding at end of block bitmap is not set [ 89.645620][ T4741] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 89.662100][ T4745] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 89.706719][ T4747] loop3: detected capacity change from 0 to 256 [ 89.725852][ T4741] EXT4-fs (loop0): This should not happen!! Data will be lost [ 89.725852][ T4741] [ 89.752589][ T4749] loop4: detected capacity change from 0 to 65 [ 89.810356][ T4741] EXT4-fs (loop0): Total free blocks count 0 [ 89.828370][ T4749] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 89.831693][ T4747] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 89.876696][ T4741] EXT4-fs (loop0): Free/Dirty block details [ 89.924887][ T4753] loop1: detected capacity change from 0 to 512 [ 89.967627][ T4741] EXT4-fs (loop0): free_blocks=0 [ 89.977662][ T4755] loop2: detected capacity change from 0 to 1024 [ 90.025668][ T4741] EXT4-fs (loop0): dirty_blocks=2 [ 90.036651][ T4755] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 90.052630][ T4755] EXT4-fs (loop2): Ignoring removed orlov option [ 90.078107][ T26] audit: type=1800 audit(1783507493.959:6): pid=4747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.169" name="file1" dev="loop3" ino=1048602 res=0 errno=0 [ 90.103124][ T4753] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.136987][ T4741] EXT4-fs (loop0): Block reservation details [ 90.202583][ T4755] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodiscard,sysvgroups,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback. [ 90.226053][ T4753] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.290211][ T4741] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 90.775054][ T1110] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 90.889500][ T4779] loop4: detected capacity change from 0 to 256 [ 91.040891][ T1110] usb 4-1: Using ep0 maxpacket: 32 [ 91.187284][ T1110] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.209848][ T1110] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.239704][ T1110] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 91.255145][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.289601][ T1110] usb 4-1: config 0 descriptor?? [ 91.355436][ T4787] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 91.737951][ T4802] tipc: Started in network mode [ 91.743528][ T4802] tipc: Node identity 7f000001, cluster identity 4711 [ 91.754133][ T4802] tipc: Enabled bearer , priority 10 [ 91.760610][ T4804] device batadv_slave_1 entered promiscuous mode [ 91.810762][ T4800] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.827201][ T1110] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 91.855689][ T4799] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.080310][ T4803] device batadv_slave_1 left promiscuous mode [ 92.135030][ T1110] usb 4-1: USB disconnect, device number 6 [ 92.360150][ T4819] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.393659][ T4819] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none. [ 92.430137][ T4826] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 92.441333][ T4819] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: none. [ 92.540897][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 92.823630][ T4839] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.202: corrupted in-inode xattr [ 92.838347][ T4840] cramfs: Error -3 while decompressing! [ 92.846026][ T4840] cramfs: ffffffff9641c088(27)->ffff888059353000(4096) [ 92.854822][ T4840] cramfs: Error -3 while decompressing! [ 92.861767][ T4839] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.202: couldn't read orphan inode 15 (err -117) [ 92.876786][ T4566] tipc: Node number set to 2130706433 [ 92.881876][ T4840] cramfs: ffffffff9641c0a3(16)->ffff888059354000(4096) [ 92.908893][ T4840] cramfs: Error -3 while decompressing! [ 92.920987][ T21] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.932827][ T4839] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.957529][ T21] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 92.978478][ T4840] cramfs: ffffffff9641c088(27)->ffff888059353000(4096) [ 92.990835][ T4234] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.997142][ T21] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.020552][ T26] audit: type=1800 audit(1783507496.899:7): pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.204" name="file3" dev="loop0" ino=348 res=0 errno=0 [ 93.021606][ T4842] cramfs: Error -3 while decompressing! [ 93.040825][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.058762][ T4842] cramfs: ffffffff9641c088(27)->ffff888059353000(4096) [ 93.068902][ T26] audit: type=1800 audit(1783507496.949:8): pid=4842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.204" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 93.119627][ T4818] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.411161][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.450112][ T4234] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 93.489075][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.524535][ T4850] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 93.544765][ T1110] usb 5-1: USB disconnect, device number 4 [ 93.577245][ T4234] usb 2-1: config 0 descriptor?? [ 94.103377][ T4234] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 94.157599][ T4234] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input9 [ 94.185434][ T4848] set_capacity_and_notify: 6 callbacks suppressed [ 94.185450][ T4848] loop3: detected capacity change from 0 to 131072 [ 94.191305][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 94.248619][ T4848] F2FS-fs (loop3): invalid crc value [ 94.287576][ T4848] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.314882][ T4837] udc-core: couldn't find an available UDC or it's busy [ 94.333728][ T4848] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 94.348285][ T4848] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 94.354785][ T4837] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 94.385439][ T4234] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 94.419966][ T4864] loop4: detected capacity change from 0 to 128 [ 94.527103][ T4864] attempt to access beyond end of device [ 94.527103][ T4864] loop4: rw=2049, want=250, limit=128 [ 94.748308][ T4872] loop0: detected capacity change from 0 to 256 [ 94.874420][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 94.885035][ C0] keytouch 0003:0926:3333.0006: Event data for report 0 was too short (8 vs 7) [ 94.900155][ T4202] CPU: 0 PID: 4202 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 94.907764][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 94.918026][ T4202] Workqueue: hci4 hci_rx_work [ 94.922757][ T4202] Call Trace: [ 94.926092][ T4202] [ 94.929055][ T4202] dump_stack_lvl+0x188/0x250 [ 94.933784][ T4202] ? show_regs_print_info+0x20/0x20 [ 94.939024][ T4202] ? load_image+0x410/0x410 [ 94.943604][ T4202] sysfs_create_dir_ns+0x26a/0x290 [ 94.948854][ T4202] ? sysfs_warn_dup+0xa0/0xa0 [ 94.953600][ T4202] ? kthread+0x42e/0x520 [ 94.957965][ T4202] ? do_raw_spin_unlock+0x11d/0x230 [ 94.963189][ T4202] kobject_add_internal+0x5ba/0xcd0 [ 94.968953][ T4202] kobject_add+0x160/0x230 [ 94.973506][ T4202] ? kobject_init+0x1c0/0x1c0 [ 94.978232][ T4202] ? __raw_spin_lock_init+0x41/0x100 [ 94.983794][ T4202] ? klist_children_get+0x50/0x50 [ 94.988879][ T4202] ? get_device_parent+0x121/0x3e0 [ 94.994309][ T4202] device_add+0x470/0x1050 [ 94.998899][ T4202] ? device_initialize+0x2a5/0x4d0 [ 95.004141][ T4202] hci_conn_add_sysfs+0xd1/0x1e0 [ 95.009642][ T4202] le_conn_complete_evt+0xc2e/0x14d0 [ 95.015258][ T4202] ? cs_le_create_conn+0x5e0/0x5e0 [ 95.020537][ T4202] ? __mutex_trylock_common+0x15c/0x260 [ 95.026433][ T4202] hci_le_meta_evt+0x285/0x3ca0 [ 95.031329][ T4202] ? hci_event_packet+0x363/0x1310 [ 95.036486][ T4202] ? __lock_acquire+0x7b50/0x7b50 [ 95.041662][ T4202] ? hci_remote_host_features_evt+0x240/0x240 [ 95.047941][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 95.053785][ T4202] ? mark_lock+0x94/0x320 [ 95.058328][ T4202] ? mutex_unlock+0x10/0x10 [ 95.063060][ T4202] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 95.069356][ T4202] ? lock_chain_count+0x20/0x20 [ 95.074240][ T4202] ? __rwlock_init+0x140/0x140 [ 95.079044][ T4202] hci_event_packet+0xe0b/0x1310 [ 95.084016][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 95.088940][ T4202] ? rcu_lock_release+0x20/0x20 [ 95.093975][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 95.099222][ T4202] hci_rx_work+0x255/0xa10 [ 95.103788][ T4202] process_one_work+0x867/0xff0 [ 95.108779][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 95.114446][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 95.119786][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 95.124859][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 95.130535][ T4202] ? wq_worker_running+0x97/0x170 [ 95.135598][ T4202] worker_thread+0xad7/0x12a0 [ 95.140444][ T4202] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 95.146837][ T4202] kthread+0x42e/0x520 [ 95.151078][ T4202] ? rcu_lock_release+0x20/0x20 [ 95.156052][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 95.160681][ T4202] ret_from_fork+0x1f/0x30 [ 95.165149][ T4202] [ 95.178108][ T4202] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 95.191654][ T4202] Bluetooth: hci4: failed to register connection device [ 95.291717][ T4566] usb 2-1: USB disconnect, device number 4 [ 95.294443][ T4879] loop3: detected capacity change from 0 to 8192 [ 95.346785][ T4879] loop3: p3 p4 < > [ 95.352577][ T4879] loop3: p3 start 9895680 is beyond EOD, truncated [ 95.410068][ T3560] loop3: p3 p4 < > [ 95.434221][ T3560] loop3: p3 start 9895680 is beyond EOD, truncated [ 95.517052][ T4885] loop0: detected capacity change from 0 to 2048 [ 95.610162][ T4887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.222'. [ 95.645036][ T4885] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.680897][ T4885] NILFS (loop0): mounting unchecked fs [ 95.768796][ T4306] udevd[4306]: incorrect nilfs2 checksum on /dev/loop0 [ 95.816016][ T4874] loop2: detected capacity change from 0 to 32768 [ 95.827428][ T4885] NILFS (loop0): recovery complete [ 95.935406][ T4890] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.013662][ T4874] XFS (loop2): Mounting V5 Filesystem [ 96.272591][ T4874] XFS (loop2): Ending clean mount [ 96.276746][ T4885] syz.0.221 (4885) used greatest stack depth: 20144 bytes left [ 96.387009][ T4278] udevd[4278]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 96.521807][ T4911] loop3: detected capacity change from 0 to 128 [ 96.559945][ T4278] udevd[4278]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 96.596630][ T4234] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.612065][ T4911] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.612509][ T4198] XFS (loop2): Unmounting Filesystem [ 96.645720][ T4913] loop0: detected capacity change from 0 to 512 [ 96.720180][ T4913] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.790015][ T4883] loop4: detected capacity change from 0 to 40427 [ 96.853963][ T4911] FAT-fs (loop3): error, parent dir link count too low (2) [ 96.860937][ T4883] F2FS-fs (loop4): invalid crc value [ 96.895683][ T4911] FAT-fs (loop3): Filesystem has been set read-only [ 96.919689][ T4883] F2FS-fs (loop4): Found nat_bits in checkpoint [ 97.025109][ T4199] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.056672][ T4234] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 97.100741][ T4234] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 97.127399][ T4883] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 97.141896][ T4234] usb 2-1: config 1 interface 0 has no altsetting 0 [ 97.159131][ T4883] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 97.331125][ T4234] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 97.331159][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.331180][ T4234] usb 2-1: Product: syz [ 97.331195][ T4234] usb 2-1: Manufacturer: syz [ 97.331210][ T4234] usb 2-1: SerialNumber: syz [ 97.351156][ T4908] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.351257][ T4908] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.676701][ T4939] loop2: detected capacity change from 0 to 256 [ 97.677351][ T4939] exfat: Deprecated parameter 'utf8' [ 97.677411][ T4939] exfat: Deprecated parameter 'namecase' [ 97.677449][ T4939] exfat: Deprecated parameter 'namecase' [ 97.707542][ T4187] attempt to access beyond end of device [ 97.707542][ T4187] loop4: rw=2049, want=45104, limit=40427 [ 97.720097][ T4939] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 98.204451][ T4949] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.261346][ T4949] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.455965][ T4234] (unnamed net_device) (uninitialized): Assigned a random MAC address: da:6f:04:eb:02:18 [ 98.518160][ T4234] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 98.547104][ T4234] usb 2-1: USB disconnect, device number 5 [ 98.927039][ T4978] EXT4-fs (loop3): Ignoring removed bh option [ 98.986845][ T4946] JBD2: Ignoring recovery information on journal [ 99.028300][ T4946] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 99.041681][ T4946] JBD2: bad block at offset 32 [ 99.078549][ T4946] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 99.109908][ T4986] Dev loop8: unable to read RDB block 7 [ 99.188523][ T4978] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 99.220717][ T4986] loop8: unable to read partition table [ 99.248692][ T4986] loop8: partition table beyond EOD, truncated [ 99.279570][ T4986] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 99.316086][ T4989] set_capacity_and_notify: 5 callbacks suppressed [ 99.316103][ T4989] loop1: detected capacity change from 0 to 8192 [ 99.373386][ T4199] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 99.409201][ T4989] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 99.506561][ T4989] REISERFS (device loop1): using ordered data mode [ 99.557831][ T4989] reiserfs: using flush barriers [ 99.612458][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 99.657408][ T4989] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.731242][ T4989] REISERFS (device loop1): checking transaction log (loop1) [ 99.807200][ T4989] REISERFS (device loop1): Using r5 hash to sort names [ 99.821956][ T4989] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 99.886725][ T4989] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 100.116511][ T5008] loop0: detected capacity change from 0 to 2048 [ 100.183742][ T5008] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.577022][ T5025] loop1: detected capacity change from 0 to 256 [ 100.605865][ T26] audit: type=1326 audit(1783507504.489:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5020 comm="syz.3.270" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcfdcbde59 code=0x0 [ 100.638318][ T5023] netlink: 64 bytes leftover after parsing attributes in process `syz.4.272'. [ 100.656826][ T5025] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 100.778723][ T26] audit: type=1800 audit(1783507504.659:10): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.271" name="file2" dev="loop1" ino=1048614 res=0 errno=0 [ 100.883209][ T26] audit: type=1800 audit(1783507504.709:11): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.271" name="file2" dev="loop1" ino=1048614 res=0 errno=0 [ 100.907533][ T5025] exFAT-fs (loop1): hint_cluster is invalid (17) [ 100.927432][ T5025] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 100.999501][ T5025] exFAT-fs (loop1): Filesystem has been set read-only [ 101.064971][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.090850][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.112189][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.131450][ T5025] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 101.133852][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.165677][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.179756][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.190715][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.206981][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.215843][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.231548][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.330932][ T4562] Bluetooth: hci4: command 0x0406 tx timeout [ 101.830879][ T4566] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 102.125930][ T26] audit: type=1326 audit(1783507506.009:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.2.286" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2dd34e59 code=0x0 [ 102.167793][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.217280][ T4566] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.228957][ T4566] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.277195][ T5065] loop0: detected capacity change from 0 to 128 [ 102.286958][ T5066] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.342237][ T5068] mmap: syz.4.289 (5068) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 102.400872][ T4566] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.414361][ T4566] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.427150][ T4566] usb 4-1: Product: syz [ 102.432982][ T4566] usb 4-1: Manufacturer: syz [ 102.440783][ T4566] usb 4-1: SerialNumber: syz [ 102.492949][ T4566] usb 4-1: selecting invalid altsetting 1 [ 102.536202][ T5072] loop4: detected capacity change from 0 to 256 [ 102.582815][ T5072] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 102.701633][ T21] usb 2-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=67.7a [ 102.713909][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.722302][ T21] usb 2-1: Product: syz [ 102.727151][ T21] usb 2-1: Manufacturer: syz [ 102.740971][ T21] usb 2-1: SerialNumber: syz [ 102.793954][ T21] gspca_main: spca501-2.14.0 probing 0497:c001 [ 103.052130][ T21] gspca_spca501: reg write: error -71 [ 103.058451][ T21] spca501 2-1:68.0: Reg write failed for 0x02,0x07,0x05 [ 103.083283][ T21] spca501: probe of 2-1:68.0 failed with error -22 [ 103.130006][ T21] usb 2-1: USB disconnect, device number 6 [ 103.171161][ T4566] usb 4-1: selecting invalid altsetting 1 [ 103.184137][ T4566] cdc_ncm 4-1:1.0: bind() failure [ 103.238150][ T5079] loop0: detected capacity change from 0 to 40427 [ 103.247080][ T5086] loop2: detected capacity change from 0 to 8192 [ 103.290158][ T5079] F2FS-fs (loop0): invalid crc value [ 103.308848][ T5079] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.340583][ T5086] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 103.367018][ T5086] REISERFS (device loop2): using ordered data mode [ 103.374422][ T5086] reiserfs: using flush barriers [ 103.384327][ T5079] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.416313][ T5086] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 103.439792][ T1325] usb 4-1: USB disconnect, device number 7 [ 103.463418][ T5086] REISERFS (device loop2): checking transaction log (loop2) [ 103.482111][ T4566] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.491970][ T4193] attempt to access beyond end of device [ 103.491970][ T4193] loop0: rw=2049, want=45104, limit=40427 [ 103.518567][ T5086] REISERFS (device loop2): Using r5 hash to sort names [ 103.549035][ T5086] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 103.564423][ T5086] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 103.754899][ T4566] usb 5-1: Using ep0 maxpacket: 8 [ 103.889007][ T4566] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 103.915270][ T4566] usb 5-1: config 179 has no interface number 0 [ 103.950872][ T4566] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 104.000809][ T4566] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 104.041265][ T4566] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 104.070776][ T4566] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 104.075714][ T5106] loop3: detected capacity change from 0 to 128 [ 104.100264][ T4566] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 104.140603][ T4566] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 104.150176][ T4566] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.211193][ T5088] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 104.228777][ T5110] device syzkaller1 entered promiscuous mode [ 104.264164][ T5106] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.299576][ T5106] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.426775][ T5106] syz.3.304 (pid 5106) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 104.561605][ T21] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input10 [ 104.709531][ T5133] loop3: detected capacity change from 0 to 128 [ 104.757616][ T21] usb 5-1: USB disconnect, device number 5 [ 104.770740][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 104.779609][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 104.789971][ T5129] loop0: detected capacity change from 0 to 4096 [ 104.817523][ T21] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 104.824682][ T5129] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 104.931101][ T5135] loop2: detected capacity change from 0 to 2048 [ 105.080331][ T5135] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.256712][ T5145] loop1: detected capacity change from 0 to 4096 [ 105.273499][ T4566] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 105.407274][ T5151] loop2: detected capacity change from 0 to 8 [ 105.458674][ T5145] ntfs: volume version 3.1. [ 105.525633][ T4566] usb 4-1: Using ep0 maxpacket: 16 [ 105.626644][ T5157] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 105.652198][ T4566] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.672568][ T5157] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 105.696852][ T4566] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.941786][ T5159] loop0: detected capacity change from 0 to 32768 [ 105.961799][ T4566] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 105.972237][ T5159] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 105.986059][ T5159] JBD2: Ignoring recovery information on journal [ 106.013116][ T4566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.031715][ T5159] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 106.206010][ T5171] loop1: detected capacity change from 0 to 512 [ 106.245759][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 106.290761][ C1] net_ratelimit: 1027 callbacks suppressed [ 106.290779][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.340994][ T5171] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.386915][ T5171] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.456628][ T5171] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8016c018, mo2=0002] [ 106.504234][ T4566] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 106.566303][ T5171] EXT4-fs (loop1): 1 truncate cleaned up [ 106.606705][ T5171] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,grpquota,debug_want_extra_isize=0x000000000000006c,mb_optimize_scan=0x0000000000000001,debug,data=journal,noblock_validity,,errors=continue. Quota mode: writeback. [ 106.613471][ T5164] loop4: detected capacity change from 0 to 32768 [ 106.638993][ T5176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.329'. [ 106.816056][ T1325] usb 4-1: USB disconnect, device number 8 [ 106.848278][ T5164] XFS (loop4): Mounting V5 Filesystem [ 106.946133][ T5169] loop2: detected capacity change from 0 to 32768 [ 106.974327][ T5164] XFS (loop4): Internal error hlen <= 0 || hlen > bufsize at line 2956 of file fs/xfs/xfs_log_recover.c. Caller xlog_valid_rec_header+0x22a/0x360 [ 107.076563][ T5164] CPU: 0 PID: 5164 Comm: syz.4.325 Not tainted syzkaller #0 [ 107.083926][ T5164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 107.091028][ T4562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.094176][ T5164] Call Trace: [ 107.105578][ T5164] [ 107.108538][ T5164] dump_stack_lvl+0x188/0x250 [ 107.113260][ T5164] ? show_regs_print_info+0x20/0x20 [ 107.118993][ T5164] ? xfs_rw_bdev+0x460/0x4d0 [ 107.123701][ T5164] xfs_corruption_error+0x117/0x170 [ 107.129437][ T5164] ? xlog_valid_rec_header+0x22a/0x360 [ 107.135055][ T5164] xlog_valid_rec_header+0x2b1/0x360 [ 107.140605][ T5164] ? xlog_valid_rec_header+0x22a/0x360 [ 107.146109][ T5164] xlog_do_recovery_pass+0x881/0xd10 [ 107.151441][ T5164] ? lock_chain_count+0x20/0x20 [ 107.156458][ T5164] ? xlog_do_io+0x340/0x340 [ 107.161207][ T5164] ? xlog_verify_head+0xea/0x430 [ 107.166360][ T5164] ? kfree+0xef/0x2a0 [ 107.170383][ T5164] xlog_verify_head+0x137/0x430 [ 107.175281][ T5164] xlog_find_tail+0x6b8/0xa50 [ 107.180035][ T5164] xlog_recover+0x48/0x3e0 [ 107.184496][ T5164] xfs_log_mount+0x375/0x690 [ 107.189245][ T5164] xfs_mountfs+0xafc/0x1ae0 [ 107.193886][ T5164] ? xfs_default_resblks+0x70/0x70 [ 107.199045][ T5164] ? rcu_is_watching+0x11/0xa0 [ 107.203843][ T5164] ? trace_xfs_inode_timestamp_range+0x84/0x1d0 [ 107.210127][ T5164] xfs_fs_fill_super+0x119b/0x13e0 [ 107.215288][ T5164] get_tree_bdev+0x3e6/0x610 [ 107.220057][ T5164] ? xfs_mount_set_dax_mode+0x100/0x100 [ 107.225647][ T5164] vfs_get_tree+0x88/0x270 [ 107.230103][ T5164] do_new_mount+0x247/0xa40 [ 107.234689][ T5164] __se_sys_mount+0x2e3/0x3d0 [ 107.239416][ T5164] ? __x64_sys_mount+0xc0/0xc0 [ 107.244222][ T5164] ? lockdep_hardirqs_on+0x94/0x140 [ 107.249453][ T5164] ? __x64_sys_mount+0x1c/0xc0 [ 107.254261][ T5164] do_syscall_64+0x4c/0xa0 [ 107.258715][ T5164] ? clear_bhb_loop+0x30/0x80 [ 107.263512][ T5164] ? clear_bhb_loop+0x30/0x80 [ 107.267615][ T5194] loop0: detected capacity change from 0 to 1024 [ 107.268226][ T5164] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.268251][ T5164] RIP: 0033:0x7f1519e240ca [ 107.285086][ T5164] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.304992][ T5164] RSP: 002b:00007f151807ae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.313524][ T5164] RAX: ffffffffffffffda RBX: 00007f151807aee0 RCX: 00007f1519e240ca [ 107.321590][ T5164] RDX: 0000200000000080 RSI: 0000200000009780 RDI: 00007f151807aea0 [ 107.329615][ T5164] RBP: 0000200000000080 R08: 00007f151807aee0 R09: 0000000000000041 [ 107.330845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.337691][ T5164] R10: 0000000000000041 R11: 0000000000000246 R12: 0000200000009780 [ 107.337715][ T5164] R13: 00007f151807aea0 R14: 000000000000976f R15: 0000200000000040 [ 107.337744][ T5164] [ 107.354504][ T5164] XFS (loop4): Corruption detected. Unmount and run xfs_repair [ 107.374188][ T5164] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 107.395111][ T5194] EXT4-fs (loop0): Ignoring removed orlov option [ 107.411766][ T5164] XFS (loop4): Starting recovery (logdev: internal) [ 107.420907][ T5194] EXT4-fs (loop0): Ignoring removed nobh option [ 107.466823][ T5194] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,jqfmt=vfsv0,noauto_da_alloc,norecovery,noquota,nobh,,errors=continue. Quota mode: none. [ 107.479893][ T5164] XFS (loop4): Ending recovery (logdev: internal) [ 107.775946][ T5164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.801341][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.836235][ T4187] XFS (loop4): Unmounting Filesystem [ 107.840420][ T5206] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.854238][ T4562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.970036][ T5206] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.061678][ T5212] fuse: Bad value for 'fd' [ 108.083097][ T5212] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'gid' [ 108.083097][ T5212] [ 108.131524][ T4566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.301084][ T4562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.370819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.394087][ T5217] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.411699][ T5217] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.701168][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.887356][ T5230] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 109.035756][ T5240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.354'. [ 109.088639][ T5242] Dev loop8: unable to read RDB block 7 [ 109.105025][ T5242] loop8: AHDI p1 p2 p3 [ 109.109258][ T5242] loop8: partition table partially beyond EOD, truncated [ 109.188587][ T5242] loop8: p1 start 1601398130 is beyond EOD, truncated [ 109.221385][ T5242] loop8: p2 start 1702059890 is beyond EOD, truncated [ 109.339532][ T5249] netlink: 132 bytes leftover after parsing attributes in process `syz.0.358'. [ 109.635131][ T5247] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 109.750418][ T5247] ntfs3: loop3: failed to convert "0080" to macroman [ 109.863998][ T5247] ntfs3: loop3: failed to convert name for inode 1e. [ 109.868410][ T5264] set_capacity_and_notify: 6 callbacks suppressed [ 109.868425][ T5264] loop4: detected capacity change from 0 to 16 [ 109.996950][ T5264] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142735) [ 110.058036][ T5237] loop1: detected capacity change from 0 to 32768 [ 110.105365][ T5270] loop3: detected capacity change from 0 to 128 [ 110.161758][ T5237] JBD2: Ignoring recovery information on journal [ 110.444738][ T5282] loop4: detected capacity change from 0 to 1024 [ 110.467663][ T5237] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 110.602962][ T5282] EXT4-fs (loop4): Ignoring removed orlov option [ 110.646696][ T5282] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 110.776283][ T5285] loop2: detected capacity change from 0 to 8192 [ 110.864738][ T5285] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.004662][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 111.010883][ T2303] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 111.260800][ T2303] usb 4-1: Using ep0 maxpacket: 8 [ 111.380806][ T2303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.421378][ T2303] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.464740][ T2303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.474042][ T5309] loop0: detected capacity change from 0 to 512 [ 111.490759][ C1] net_ratelimit: 13 callbacks suppressed [ 111.490776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.507528][ T2303] usb 4-1: config 0 descriptor?? [ 111.573262][ T5309] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.650939][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.651792][ T5309] EXT4-fs error (device loop0): __ext4_iget:4919: inode #11: block 1: comm syz.0.382: invalid block [ 111.676333][ T5309] EXT4-fs (loop0): Remounting filesystem read-only [ 111.727191][ T5309] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.382: couldn't read orphan inode 11 (err -117) [ 111.784760][ T2303] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 111.822514][ T5309] EXT4-fs (loop0): Remounting filesystem read-only [ 111.829092][ T5309] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000010001ff,noblock_validity,max_dir_size_kb=0x0000000000000009,nodioread_nolock,jqfmt=vfsold,. Quota mode: none. [ 111.987041][ T5320] netlink: 'syz.2.387': attribute type 3 has an invalid length. [ 112.050711][ T5320] netlink: 'syz.2.387': attribute type 7 has an invalid length. [ 112.052848][ T2303] usb 4-1: USB disconnect, device number 9 [ 112.068802][ T5320] netlink: 198628 bytes leftover after parsing attributes in process `syz.2.387'. [ 112.071021][ C1] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 112.132497][ T4566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.144674][ T5324] loop1: detected capacity change from 0 to 256 [ 112.180856][ T4562] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 112.210021][ T5324] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 112.243108][ T4193] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 112.330857][ T4193] EXT4-fs (loop0): Remounting filesystem read-only [ 112.377122][ T26] audit: type=1800 audit(1783507516.259:13): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.389" name="file1" dev="loop1" ino=1048618 res=0 errno=0 [ 112.440761][ T4562] usb 5-1: Using ep0 maxpacket: 16 [ 112.531695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.563303][ T4562] usb 5-1: config 249 has an invalid interface number: 55 but max is 0 [ 112.575639][ T4562] usb 5-1: config 249 has no interface number 0 [ 112.586385][ T4562] usb 5-1: config 249 interface 55 has no altsetting 0 [ 112.751072][ T4562] usb 5-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice=f8.5a [ 112.760329][ T4562] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.778891][ T4562] usb 5-1: Product: syz [ 112.783594][ T4562] usb 5-1: Manufacturer: syz [ 112.788224][ T4562] usb 5-1: SerialNumber: syz [ 112.857766][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.045331][ T5318] udc-core: couldn't find an available UDC or it's busy [ 113.095666][ T5318] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 113.171459][ T4566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.183964][ T4562] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:249.55/input/input11 [ 113.226683][ T3545] bcm5974 5-1:249.55: could not read from device [ 113.246054][ T4562] usb 5-1: USB disconnect, device number 6 [ 113.402545][ T5350] loop1: detected capacity change from 0 to 8192 [ 113.490540][ T4306] loop1: p3 p4 < > [ 113.508768][ T4306] loop1: p3 start 9895680 is beyond EOD, truncated [ 113.569181][ T5350] loop1: p3 p4 < > [ 113.570757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.577784][ T5350] loop1: p3 start 9895680 is beyond EOD, truncated [ 113.813222][ T5364] loop2: detected capacity change from 0 to 64 [ 113.831267][ T5363] loop4: detected capacity change from 0 to 1024 [ 113.924281][ T5364] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 114.161059][ T4630] hfsplus: b-tree write err: -5, ino 25 [ 114.170962][ T4630] hfsplus: b-tree write err: -5, ino 4 [ 114.176652][ T4630] hfsplus: b-tree write err: -5, ino 2 [ 114.213013][ T4566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.469492][ T5359] chnl_net:caif_netlink_parms(): no params data found [ 114.483686][ T4278] udevd[4278]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 114.582329][ T4278] udevd[4278]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 114.610772][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.628778][ T4562] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 114.721351][ T5359] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.730923][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.757428][ T5359] device bridge_slave_0 entered promiscuous mode [ 114.825009][ T5359] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.857811][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.880954][ T4562] usb 5-1: Using ep0 maxpacket: 8 [ 114.884076][ T5359] device bridge_slave_1 entered promiscuous mode [ 114.918997][ T5358] loop3: detected capacity change from 0 to 32768 [ 114.978721][ T5359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.993833][ T5359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.013519][ T4562] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 115.027930][ T5385] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.046461][ T4562] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.058437][ T5358] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 115.078753][ T5358] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 115.091488][ T4562] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.122043][ T5359] team0: Port device team_slave_0 added [ 115.139828][ T5359] team0: Port device team_slave_1 added [ 115.151725][ T4562] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.172158][ T4562] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.197400][ T5358] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 115.242832][ T4562] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.250832][ T5388] loop1: detected capacity change from 0 to 512 [ 115.255111][ T5371] loop2: detected capacity change from 0 to 32768 [ 115.265832][ T4562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.303785][ T2303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.312718][ T5358] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 115.326635][ T5371] [ 115.326635][ T5371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.326635][ T5371] [ 115.356494][ T4255] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.365660][ T5388] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.397591][ T5371] [ 115.397591][ T5371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.397591][ T5371] [ 115.431689][ T5371] [ 115.431689][ T5371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.431689][ T5371] [ 115.452802][ T5388] EXT4-fs error (device loop1): __ext4_iget:4919: inode #11: block 1: comm syz.1.415: invalid block [ 115.456470][ T5371] [ 115.456470][ T5371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.456470][ T5371] [ 115.474752][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.482085][ T5371] [ 115.482085][ T5371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.482085][ T5371] [ 115.507782][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.525860][ T5371] [ 115.525860][ T5371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.525860][ T5371] [ 115.534580][ T5359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.550792][ T4562] usb 5-1: usb_control_msg returned -32 [ 115.557306][ T5388] EXT4-fs (loop1): Remounting filesystem read-only [ 115.568333][ T5388] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.415: couldn't read orphan inode 11 (err -117) [ 115.581072][ T5371] [ 115.581072][ T5371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.581072][ T5371] [ 115.582848][ T4562] usbtmc 5-1:16.0: can't read capabilities [ 115.610862][ T275] [ 115.610862][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.610862][ T275] [ 115.626707][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.628082][ T5388] EXT4-fs (loop1): Remounting filesystem read-only [ 115.637315][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.669246][ T5388] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000010001ff,noblock_validity,max_dir_size_kb=0x0000000000000009,nodioread_nolock,jqfmt=vfsold,. Quota mode: none. [ 115.673714][ T5359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.740850][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 115.793934][ T4255] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.814683][ T4188] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 115.849682][ T4198] [ 115.849682][ T4198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.849682][ T4198] [ 115.872007][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 115.918469][ T4198] [ 115.918469][ T4198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.918469][ T4198] [ 115.919124][ T5359] device hsr_slave_0 entered promiscuous mode [ 115.971547][ T5359] device hsr_slave_1 entered promiscuous mode [ 115.991881][ T5390] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 116.033884][ T5359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.042593][ T1110] usb 5-1: USB disconnect, device number 7 [ 116.060286][ T5359] Cannot create hsr debugfs directory [ 116.178016][ T4255] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.253566][ T5396] loop2: detected capacity change from 0 to 64 [ 116.340000][ T4255] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.690805][ C1] net_ratelimit: 3 callbacks suppressed [ 116.690821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.806171][ T5359] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.857665][ T5359] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.920877][ T1110] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.961738][ T5359] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.982775][ T5359] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.004678][ T5394] loop3: detected capacity change from 0 to 32768 [ 117.120239][ T5394] JBD2: Ignoring recovery information on journal [ 117.190876][ T1110] usb 3-1: Using ep0 maxpacket: 16 [ 117.290930][ T1110] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.302036][ T5394] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 117.372943][ T26] audit: type=1800 audit(1783507521.259:14): pid=5394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.419" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 117.415749][ T2303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.421052][ T1110] usb 3-1: config 3 has an invalid interface number: 71 but max is 0 [ 117.459923][ T5420] loop4: detected capacity change from 0 to 512 [ 117.466350][ T1110] usb 3-1: config 3 has no interface number 0 [ 117.485047][ T1110] usb 3-1: config 3 interface 71 has no altsetting 0 [ 117.515212][ T5420] EXT4-fs (loop4): Ignoring removed nobh option [ 117.542407][ T5420] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.554362][ T4199] ocfs2: Unmounting device (7,3) on (node local) [ 117.586372][ T5420] EXT4-fs (loop4): 1 truncate cleaned up [ 117.587579][ T5359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.613345][ T5420] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000066,lazytime,data_err=abort,inode_readahead_blks=0x0000000004000000,nobh,,errors=continue. Quota mode: none. [ 117.670983][ T1110] usb 3-1: New USB device found, idVendor=1546, idProduct=1104, bcdDevice=b6.0d [ 117.689947][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.698445][ T1110] usb 3-1: Product: syz [ 117.702709][ T1110] usb 3-1: Manufacturer: syz [ 117.707356][ T1110] usb 3-1: SerialNumber: syz [ 117.707435][ T5359] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.731528][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.758671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.767595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.849689][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 117.929261][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.942398][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.947434][ T5429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.984690][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.991942][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.061579][ T1110] cdc_ether 3-1:3.71: invalid descriptor buffer length [ 118.068650][ T1110] usb 3-1: bad CDC descriptors [ 118.074147][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.087809][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.110072][ T1110] usb 3-1: USB disconnect, device number 3 [ 118.122095][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.129294][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.138822][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.164204][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.253284][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.283375][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.328763][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.351835][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.389501][ T5415] chnl_net:caif_netlink_parms(): no params data found [ 118.401070][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 118.406725][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.418756][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.428549][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.438025][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.451675][ T4559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.464021][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.473557][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.485164][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.648618][ T5449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 118.663361][ T5449] Dropped outbound packet type=1a [ 118.770888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.780125][ T5415] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.788332][ T5415] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.800265][ T4234] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 118.808616][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.821357][ T5415] device bridge_slave_0 entered promiscuous mode [ 118.846210][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.867226][ T1325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.885698][ T5415] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.903403][ T5415] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.927036][ T5415] device bridge_slave_1 entered promiscuous mode [ 118.953374][ T5461] netlink: 'syz.2.436': attribute type 1 has an invalid length. [ 119.005708][ T4255] device hsr_slave_0 left promiscuous mode [ 119.021204][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.039647][ T4255] device hsr_slave_1 left promiscuous mode [ 119.062178][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.072010][ T4255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.080008][ T4255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.088586][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.097288][ T7] usb 5-1: Product: syz [ 119.101986][ T7] usb 5-1: Manufacturer: syz [ 119.106808][ T7] usb 5-1: SerialNumber: syz [ 119.119262][ T4255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.138122][ T4255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.150039][ T4255] device bridge_slave_1 left promiscuous mode [ 119.167716][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.193886][ T4255] device bridge_slave_0 left promiscuous mode [ 119.200125][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.223419][ T4255] device veth1_macvtap left promiscuous mode [ 119.230009][ T4255] device veth0_macvtap left promiscuous mode [ 119.236781][ T4234] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 119.245150][ T4255] device veth1_vlan left promiscuous mode [ 119.251437][ T4255] device veth0_vlan left promiscuous mode [ 119.259652][ T4234] usb 4-1: config 0 has no interface number 0 [ 119.265993][ T4234] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.341008][ T1325] Bluetooth: hci1: command 0x0409 tx timeout [ 119.410890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.441125][ T4234] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 119.450223][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.464724][ T4234] usb 4-1: Product: syz [ 119.468940][ T4234] usb 4-1: Manufacturer: syz [ 119.474597][ T4234] usb 4-1: SerialNumber: syz [ 119.500723][ T2303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.501165][ T4234] usb 4-1: config 0 descriptor?? [ 119.548982][ T4255] team0 (unregistering): Port device team_slave_1 removed [ 119.564852][ T4255] team0 (unregistering): Port device team_slave_0 removed [ 119.577136][ T4234] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 119.597629][ T4255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.631093][ T4255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.710003][ T4255] bond0 (unregistering): Released all slaves [ 119.791430][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.798949][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.824925][ T5359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.875110][ T5415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.892297][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 119.928444][ T5415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.947807][ T1110] usb 4-1: USB disconnect, device number 10 [ 119.954103][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 120.019575][ T1110] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 120.096311][ T5415] team0: Port device team_slave_0 added [ 120.107602][ T5481] loop2: detected capacity change from 0 to 256 [ 120.156905][ T5415] team0: Port device team_slave_1 added [ 120.181345][ T5481] exfat: Deprecated parameter 'namecase' [ 120.187466][ T5481] exfat: Deprecated parameter 'utf8' [ 120.199142][ T5415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.211096][ T5415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.264389][ T7] cdc_ncm 5-1:1.0: bind() failure [ 120.268790][ T5415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.305491][ T7] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 120.326764][ T5415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.335847][ T5481] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 120.345598][ T5415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.360082][ T7] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 120.461053][ T7] usbtest: probe of 5-1:1.1 failed with error -71 [ 120.461174][ T5415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.513729][ T7] usb 5-1: USB disconnect, device number 8 [ 120.525016][ T26] audit: type=1800 audit(1783507524.409:15): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.439" name="file1" dev="loop2" ino=1048619 res=0 errno=0 [ 120.657465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.674902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.702692][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.740314][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.771854][ T5359] device veth0_vlan entered promiscuous mode [ 120.785940][ T5359] device veth1_vlan entered promiscuous mode [ 120.829397][ T5359] device veth0_macvtap entered promiscuous mode [ 120.856872][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.875485][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.883957][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.902379][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.913166][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.946662][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.967307][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.020740][ T4562] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.031935][ T5359] device veth1_macvtap entered promiscuous mode [ 121.053412][ T5415] device hsr_slave_0 entered promiscuous mode [ 121.069834][ T5415] device hsr_slave_1 entered promiscuous mode [ 121.100232][ T5415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.123666][ T5415] Cannot create hsr debugfs directory [ 121.128604][ T5509] loop4: detected capacity change from 0 to 128 [ 121.169400][ T5509] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 121.207503][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.231762][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.232931][ T5509] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.248621][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.261975][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.271980][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.282986][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.293432][ T4562] usb 3-1: Using ep0 maxpacket: 32 [ 121.302225][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.320860][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.351479][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.399696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.411124][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 121.413635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.432674][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.444723][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.464947][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.500925][ T4562] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 62464, setting to 1024 [ 121.510677][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.520508][ T4562] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 121.550962][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.561851][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.580901][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.592253][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.604242][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.627558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.648038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.767127][ T5359] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.776135][ T4562] usb 3-1: string descriptor 0 read error: -22 [ 121.790897][ T4562] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 121.801020][ T5359] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.809761][ T5359] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.814651][ T4562] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.871103][ T5499] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.880698][ T5359] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.890839][ C1] net_ratelimit: 4 callbacks suppressed [ 121.890855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.909175][ T4562] usb 3-1: MIDIStreaming interface descriptor not found [ 121.977968][ T2303] Bluetooth: hci2: command 0x0419 tx timeout [ 121.979523][ T5527] loop4: detected capacity change from 0 to 256 [ 122.053300][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.169471][ T5532] loop3: detected capacity change from 0 to 256 [ 122.183981][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.210955][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.231557][ T5527] FAT-fs (loop4): Directory bread(block 64) failed [ 122.238150][ T5527] FAT-fs (loop4): Directory bread(block 65) failed [ 122.259928][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.320842][ T4629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.328970][ T4629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.340583][ T5527] FAT-fs (loop4): Directory bread(block 66) failed [ 122.353122][ T5415] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 122.370145][ T5527] FAT-fs (loop4): Directory bread(block 67) failed [ 122.384195][ T5532] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 122.400381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.410016][ T2303] usb 3-1: USB disconnect, device number 4 [ 122.410865][ T5527] FAT-fs (loop4): Directory bread(block 68) failed [ 122.449488][ T5527] FAT-fs (loop4): Directory bread(block 69) failed [ 122.460198][ T5415] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 122.487956][ T5527] FAT-fs (loop4): Directory bread(block 70) failed [ 122.513492][ T5415] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 122.540934][ T5527] FAT-fs (loop4): Directory bread(block 71) failed [ 122.570944][ T5527] FAT-fs (loop4): Directory bread(block 72) failed [ 122.577530][ T5527] FAT-fs (loop4): Directory bread(block 73) failed [ 122.587614][ T5415] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 122.611573][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.781097][ T5538] loop5: detected capacity change from 0 to 512 [ 122.818874][ T5538] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 122.908523][ T5540] loop3: detected capacity change from 0 to 128 [ 122.930782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.950548][ T5538] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.403: bad orphan inode 131083 [ 122.995550][ T5540] EXT4-fs (loop3): Ignoring removed orlov option [ 122.998251][ T5545] loop2: detected capacity change from 0 to 1024 [ 123.017329][ T5415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.046028][ T5545] EXT4-fs (loop2): Mount option "journal_ioprio=0x0000000000000006" incompatible with ext2 [ 123.085088][ T5538] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x000000000000e806,init_itable,minixdf,,errors=continue. Quota mode: none. [ 123.086146][ T5540] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 123.116612][ T5540] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.217959][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.238769][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.267290][ T5538] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.5.403: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 123.295626][ T5415] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.369552][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.455297][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.497011][ T4566] Bluetooth: hci1: command 0x040f tx timeout [ 123.503624][ T5551] EXT4-fs (loop5): shut down requested (1) [ 123.512265][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.519469][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.535428][ T5538] EXT4-fs error (device loop5) in ext4_delete_entry:2800: Corrupt filesystem [ 123.557130][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.583272][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.594137][ T5538] EXT4-fs warning (device loop5): ext4_rename_delete:3792: inode #2: comm syz.5.403: Deleting old file: nlink 4, error=-117 [ 123.618788][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.625959][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.652163][ T4566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.680319][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.703971][ T5548] Set syz1 is full, maxelem 6117 reached [ 123.710084][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.742768][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.801716][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.853817][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.888783][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.937087][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.970776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.997433][ T5415] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.030518][ T5415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.069990][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.095010][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.123144][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.153814][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.183819][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.239378][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.567608][ T5590] loop3: detected capacity change from 0 to 512 [ 124.651639][ T21] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 124.659831][ T5590] EXT4-fs (loop3): 1 truncate cleaned up [ 124.704384][ T4562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.710801][ T5590] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 124.769587][ T5595] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 124.826918][ T5590] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.462: bg 0: block 465: padding at end of block bitmap is not set [ 124.843069][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.851667][ T5595] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 124.876572][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.887846][ T5595] overlayfs: conflicting lowerdir path [ 124.902497][ T5415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.908063][ T5590] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131587 with max blocks 1 with error 28 [ 124.976657][ T5590] EXT4-fs (loop3): This should not happen!! Data will be lost [ 124.976657][ T5590] [ 125.010764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.031356][ T5590] EXT4-fs (loop3): Total free blocks count 0 [ 125.050879][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.068351][ T5590] EXT4-fs (loop3): Free/Dirty block details [ 125.080856][ T21] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 125.110902][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.121219][ T5590] EXT4-fs (loop3): free_blocks=0 [ 125.134337][ T5590] EXT4-fs (loop3): dirty_blocks=2 [ 125.166536][ T5590] EXT4-fs (loop3): Block reservation details [ 125.189815][ T5565] loop2: detected capacity change from 0 to 32768 [ 125.210960][ T5590] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 125.261046][ T21] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.275601][ T5610] loop5: detected capacity change from 0 to 512 [ 125.286780][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.308495][ T21] usb 5-1: Product: syz [ 125.320439][ T21] usb 5-1: Manufacturer: syz [ 125.326689][ T21] usb 5-1: SerialNumber: syz [ 125.340996][ T4629] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 125.356012][ T4629] EXT4-fs (loop3): This should not happen!! Data will be lost [ 125.356012][ T4629] [ 125.373083][ T21] cdc_mbim 5-1:1.0: skipping garbage [ 125.385766][ T5565] XFS (loop2): Mounting V5 Filesystem [ 125.570850][ T4562] Bluetooth: hci1: command 0x0419 tx timeout [ 125.581134][ T5583] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.664165][ T5565] XFS (loop2): Ending clean mount [ 126.038639][ T5415] device veth0_vlan entered promiscuous mode [ 126.114773][ T5415] device veth1_vlan entered promiscuous mode [ 126.163761][ T4198] XFS (loop2): Unmounting Filesystem [ 126.275038][ T5415] device veth0_macvtap entered promiscuous mode [ 126.309442][ T5415] device veth1_macvtap entered promiscuous mode [ 126.402105][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.419927][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.430578][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.450196][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.472687][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.490026][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.501757][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.519045][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.530787][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.551504][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.573269][ T5415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.593805][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.612230][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.630989][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.663426][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.693285][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.717466][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.735447][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.746341][ T5634] loop5: detected capacity change from 0 to 131072 [ 126.749035][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.769679][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.785247][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.797799][ T5415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.807655][ T5583] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.850974][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.861039][ T5634] F2FS-fs (loop5): invalid crc value [ 126.875994][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.880884][ T21] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 126.885958][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.899157][ T21] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 126.927471][ T5634] F2FS-fs (loop5): Found nat_bits in checkpoint [ 126.951734][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.970507][ T5634] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 126.973232][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.001583][ T5634] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 127.025828][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.046469][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.085487][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.091484][ C1] net_ratelimit: 3 callbacks suppressed [ 127.091501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.114430][ T21] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 127.132685][ T21] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 127.136768][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.218172][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.251655][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.275208][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.284209][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.303951][ T5415] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.319761][ T5415] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.328110][ T5648] loop3: detected capacity change from 0 to 4096 [ 127.332519][ T5415] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.353158][ T5415] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.392800][ T5650] netlink: 'syz.2.470': attribute type 2 has an invalid length. [ 127.403745][ T21] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 46:32:f5:b3:fc:c3 [ 127.409020][ T5650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 127.427504][ T21] usb 5-1: USB disconnect, device number 9 [ 127.437812][ T21] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 127.439059][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.474225][ T5651] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.487691][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.528954][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.547872][ T5648] NILFS (loop3): error -2 reading inode: ino=835371204608 [ 127.813528][ T4566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.891149][ T1403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.921023][ T1403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.956668][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.995528][ T1403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.011940][ T1403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.037886][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 128.127266][ T4255] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.137778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.149105][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.276006][ T4255] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.407492][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.434412][ T4255] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.453516][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.570497][ T4255] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.749603][ T5685] loop3: detected capacity change from 0 to 512 [ 128.812179][ T5688] loop4: detected capacity change from 0 to 512 [ 128.891021][ T5688] EXT4-fs (loop4): Ignoring removed nobh option [ 128.912203][ T2303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.954441][ T5685] EXT4-fs (loop3): 1 truncate cleaned up [ 128.960314][ T5685] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,max_batch_time=0x0000000000000008,noblock_validity,block_validity,nolazytime,. Quota mode: none. [ 129.018501][ T26] audit: type=1800 audit(1783507532.899:16): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.483" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 129.029059][ T5685] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.483: bg 0: block 465: padding at end of block bitmap is not set [ 129.140894][ T5688] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 129.170762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.177384][ T5699] loop5: detected capacity change from 0 to 4096 [ 129.221019][ T5685] EXT4-fs (loop3): Remounting filesystem read-only [ 129.270162][ T5699] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 129.282842][ T5688] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.971749][ T4566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.037787][ T5676] loop2: detected capacity change from 0 to 32768 [ 130.045630][ T5717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.491'. [ 130.064410][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.137366][ T5676] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 130.208363][ T5676] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 130.210791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.296576][ T5676] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 130.407261][ T5723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.492'. [ 130.481763][ T5690] loop6: detected capacity change from 0 to 32768 [ 130.505376][ T5676] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 130.639883][ T5690] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 130.952763][ T5415] ocfs2: Unmounting device (7,6) on (node local) [ 131.134348][ T5752] loop5: detected capacity change from 0 to 4096 [ 131.271617][ T4255] device hsr_slave_0 left promiscuous mode [ 131.331337][ T4255] device hsr_slave_1 left promiscuous mode [ 131.350856][ T5761] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.381037][ T4255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.417590][ T5765] input: syz0 as /devices/virtual/input/input12 [ 131.423792][ T4255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.486164][ T4255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.525614][ T4255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.604341][ T4255] device bridge_slave_1 left promiscuous mode [ 131.628786][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.641798][ T5752] syz.5.502 (5752) used greatest stack depth: 20112 bytes left [ 131.688218][ T4255] device bridge_slave_0 left promiscuous mode [ 131.715449][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.823560][ T4255] device veth1_macvtap left promiscuous mode [ 131.840998][ T4255] device veth0_macvtap left promiscuous mode [ 131.847144][ T4255] device veth1_vlan left promiscuous mode [ 131.863880][ T4255] device veth0_vlan left promiscuous mode [ 132.051176][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 132.120408][ T4255] team0 (unregistering): Port device team_slave_1 removed [ 132.131560][ T4562] net_ratelimit: 5 callbacks suppressed [ 132.131575][ T4562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.149112][ T4255] team0 (unregistering): Port device team_slave_0 removed [ 132.167849][ T4255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.185987][ T4255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.265065][ T4255] bond0 (unregistering): Released all slaves [ 132.290778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.301308][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 132.417926][ T1110] [ 132.420321][ T1110] ====================================================== [ 132.427403][ T1110] WARNING: possible circular locking dependency detected [ 132.434881][ T1110] syzkaller #0 Not tainted [ 132.439330][ T1110] ------------------------------------------------------ [ 132.446540][ T1110] kworker/0:2/1110 is trying to acquire lock: [ 132.452630][ T1110] ffff88807d869028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 132.463912][ T1110] [ 132.463912][ T1110] but task is already holding lock: [ 132.471559][ T1110] ffffffff8d6d3c28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 132.480737][ T1110] [ 132.480737][ T1110] which lock already depends on the new lock. [ 132.480737][ T1110] [ 132.491282][ T1110] [ 132.491282][ T1110] the existing dependency chain (in reverse order) is: [ 132.500396][ T1110] [ 132.500396][ T1110] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 132.508405][ T1110] __mutex_lock_common+0x1e5/0x2400 [ 132.514138][ T1110] mutex_lock_nested+0x17/0x20 [ 132.519550][ T1110] rfkill_register+0x2f/0x970 [ 132.524750][ T1110] hci_register_dev+0x459/0x980 [ 132.530127][ T1110] vhci_create_device+0x32e/0x5c0 [ 132.535770][ T1110] vhci_write+0x389/0x440 [ 132.540620][ T1110] vfs_write+0x748/0xd70 [ 132.545472][ T1110] ksys_write+0x153/0x260 [ 132.550340][ T1110] do_syscall_64+0x4c/0xa0 [ 132.555273][ T1110] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.561693][ T1110] [ 132.561693][ T1110] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 132.569705][ T1110] __mutex_lock_common+0x1e5/0x2400 [ 132.575595][ T1110] mutex_lock_nested+0x17/0x20 [ 132.580884][ T1110] vhci_send_frame+0x88/0x100 [ 132.586113][ T1110] hci_send_frame+0x1a9/0x2e0 [ 132.591307][ T1110] hci_tx_work+0x9b5/0x16d0 [ 132.596608][ T1110] process_one_work+0x867/0xff0 [ 132.602154][ T1110] worker_thread+0xad7/0x12a0 [ 132.607524][ T1110] kthread+0x42e/0x520 [ 132.612119][ T1110] ret_from_fork+0x1f/0x30 [ 132.617088][ T1110] [ 132.617088][ T1110] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 132.626538][ T1110] __flush_work+0x116/0x210 [ 132.631598][ T1110] hci_dev_do_close+0x201/0x1020 [ 132.637066][ T1110] hci_unregister_dev+0x2eb/0x590 [ 132.642611][ T1110] vhci_release+0x73/0xc0 [ 132.647459][ T1110] __fput+0x212/0x8c0 [ 132.651974][ T1110] task_work_run+0x125/0x1a0 [ 132.657087][ T1110] do_exit+0x635/0x2110 [ 132.661843][ T1110] do_group_exit+0x12c/0x2f0 [ 132.667040][ T1110] __x64_sys_exit_group+0x3b/0x40 [ 132.672580][ T1110] do_syscall_64+0x4c/0xa0 [ 132.677516][ T1110] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.683925][ T1110] [ 132.683925][ T1110] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 132.691877][ T1110] __mutex_lock_common+0x1e5/0x2400 [ 132.697596][ T1110] mutex_lock_nested+0x17/0x20 [ 132.702878][ T1110] bg_scan_update+0x44/0x3b0 [ 132.707984][ T1110] process_one_work+0x867/0xff0 [ 132.713355][ T1110] worker_thread+0xad7/0x12a0 [ 132.718552][ T1110] kthread+0x42e/0x520 [ 132.723137][ T1110] ret_from_fork+0x1f/0x30 [ 132.728074][ T1110] [ 132.728074][ T1110] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 132.738056][ T1110] __lock_acquire+0x2c66/0x7b50 [ 132.743425][ T1110] lock_acquire+0x19e/0x400 [ 132.748443][ T1110] __flush_work+0x116/0x210 [ 132.753461][ T1110] __cancel_work_timer+0x3f4/0x560 [ 132.759106][ T1110] hci_request_cancel_all+0xcc/0x300 [ 132.765013][ T1110] hci_dev_do_close+0x4e/0x1020 [ 132.770392][ T1110] hci_rfkill_set_block+0x101/0x180 [ 132.776116][ T1110] rfkill_set_block+0x1c1/0x3c0 [ 132.781486][ T1110] rfkill_epo+0x75/0x170 [ 132.786244][ T1110] rfkill_op_handler+0x76/0x220 [ 132.791698][ T1110] process_one_work+0x867/0xff0 [ 132.797066][ T1110] worker_thread+0xad7/0x12a0 [ 132.802354][ T1110] kthread+0x42e/0x520 [ 132.807042][ T1110] ret_from_fork+0x1f/0x30 [ 132.811977][ T1110] [ 132.811977][ T1110] other info that might help us debug this: [ 132.811977][ T1110] [ 132.822370][ T1110] Chain exists of: [ 132.822370][ T1110] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 132.822370][ T1110] [ 132.838184][ T1110] Possible unsafe locking scenario: [ 132.838184][ T1110] [ 132.845651][ T1110] CPU0 CPU1 [ 132.851009][ T1110] ---- ---- [ 132.856368][ T1110] lock(rfkill_global_mutex); [ 132.861129][ T1110] lock(&data->open_mutex); [ 132.868250][ T1110] lock(rfkill_global_mutex); [ 132.875552][ T1110] lock((work_completion)(&hdev->bg_scan_update)); [ 132.882230][ T1110] [ 132.882230][ T1110] *** DEADLOCK *** [ 132.882230][ T1110] [ 132.890368][ T1110] 3 locks held by kworker/0:2/1110: [ 132.895558][ T1110] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 132.905824][ T1110] #1: ffffc90004747d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 132.916086][ T1110] #2: ffffffff8d6d3c28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 132.925565][ T1110] [ 132.925565][ T1110] stack backtrace: [ 132.931460][ T1110] CPU: 0 PID: 1110 Comm: kworker/0:2 Not tainted syzkaller #0 [ 132.938938][ T1110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 132.949090][ T1110] Workqueue: events rfkill_op_handler [ 132.954475][ T1110] Call Trace: [ 132.957990][ T1110] [ 132.960925][ T1110] dump_stack_lvl+0x188/0x250 [ 132.965606][ T1110] ? load_image+0x410/0x410 [ 132.970115][ T1110] ? show_regs_print_info+0x20/0x20 [ 132.975403][ T1110] ? print_circular_bug+0x12b/0x1a0 [ 132.981034][ T1110] check_noncircular+0x296/0x330 [ 132.986083][ T1110] ? look_up_lock_class+0x71/0x110 [ 132.991297][ T1110] ? add_chain_block+0x9b0/0x9b0 [ 132.996229][ T1110] ? lockdep_lock+0xf1/0x1f0 [ 133.000818][ T1110] ? __lock_acquire+0x1305/0x7b50 [ 133.005843][ T1110] ? mark_lock+0x94/0x320 [ 133.010179][ T1110] ? _find_first_zero_bit+0xd1/0xf0 [ 133.015374][ T1110] __lock_acquire+0x2c66/0x7b50 [ 133.020245][ T1110] ? verify_lock_unused+0x140/0x140 [ 133.025442][ T1110] ? verify_lock_unused+0x140/0x140 [ 133.030648][ T1110] lock_acquire+0x19e/0x400 [ 133.035153][ T1110] ? __flush_work+0xfa/0x210 [ 133.039747][ T1110] ? __lock_acquire+0x7b50/0x7b50 [ 133.044770][ T1110] ? read_lock_is_recursive+0x10/0x10 [ 133.050317][ T1110] ? start_flush_work+0x784/0x830 [ 133.055350][ T1110] __flush_work+0x116/0x210 [ 133.059851][ T1110] ? __flush_work+0xfa/0x210 [ 133.064439][ T1110] ? flush_work+0x20/0x20 [ 133.068764][ T1110] ? try_to_grab_pending+0xfb/0x820 [ 133.073959][ T1110] ? mark_lock+0x94/0x320 [ 133.078376][ T1110] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 133.084546][ T1110] ? lock_chain_count+0x20/0x20 [ 133.089393][ T1110] ? mark_lock+0x94/0x320 [ 133.093722][ T1110] ? __cancel_work_timer+0x36a/0x560 [ 133.099006][ T1110] __cancel_work_timer+0x3f4/0x560 [ 133.104114][ T1110] ? cancel_work_sync+0x20/0x20 [ 133.109049][ T1110] ? __cancel_work+0x1f9/0x2e0 [ 133.113808][ T1110] ? lockdep_hardirqs_on+0x94/0x140 [ 133.119019][ T1110] ? __cancel_work+0x27b/0x2e0 [ 133.123777][ T1110] ? cancel_work+0x20/0x20 [ 133.128279][ T1110] ? __rwlock_init+0x140/0x140 [ 133.133039][ T1110] hci_request_cancel_all+0xcc/0x300 [ 133.138408][ T1110] hci_dev_do_close+0x4e/0x1020 [ 133.143352][ T1110] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 133.149261][ T1110] ? _raw_spin_unlock+0x40/0x40 [ 133.154140][ T1110] hci_rfkill_set_block+0x101/0x180 [ 133.159337][ T1110] ? rcu_lock_release+0x20/0x20 [ 133.164184][ T1110] rfkill_set_block+0x1c1/0x3c0 [ 133.169035][ T1110] rfkill_epo+0x75/0x170 [ 133.173296][ T1110] rfkill_op_handler+0x76/0x220 [ 133.178146][ T1110] process_one_work+0x867/0xff0 [ 133.183089][ T1110] ? worker_detach_from_pool+0x240/0x240 [ 133.188917][ T1110] ? lockdep_hardirqs_off+0x70/0x100 [ 133.194202][ T1110] ? _raw_spin_lock_irq+0xb7/0xf0 [ 133.199244][ T1110] ? _raw_spin_lock_irqsave+0x100/0x100 [ 133.204797][ T1110] ? wq_worker_running+0x97/0x170 [ 133.209905][ T1110] worker_thread+0xad7/0x12a0 [ 133.214593][ T1110] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 133.220489][ T1110] kthread+0x42e/0x520 [ 133.224557][ T1110] ? rcu_lock_release+0x20/0x20 [ 133.229497][ T1110] ? kthread_blkcg+0xd0/0xd0 [ 133.234083][ T1110] ret_from_fork+0x1f/0x30 [ 133.238502][ T1110] [ 133.248106][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.254490][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.263249][ T4562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.330760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.332917][ T7] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 133.358844][ T7] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 133.374465][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 133.385358][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 129 [ 133.398082][ T7] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.415519][ T7] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.424995][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.456460][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.492060][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.551602][ T4562] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 133.697111][ T5783] loop6: detected capacity change from 0 to 32768 [ 133.701735][ T7] usb 5-1: GET_CAPABILITIES returned 0 [ 133.709209][ T7] usbtmc 5-1:16.0: can't read capabilities [ 133.794236][ T5783] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 133.827757][ T5783] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 133.895912][ T5783] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 133.947920][ T5783] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 133.958459][ T4234] usb 5-1: USB disconnect, device number 10 [ 134.090863][ T4562] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 134.101613][ T4562] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.109640][ T4562] usb 3-1: Product: syz [ 134.114291][ T4562] usb 3-1: Manufacturer: syz [ 134.118918][ T4562] usb 3-1: SerialNumber: syz [ 134.131185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.153339][ T4562] usb 3-1: config 0 descriptor?? [ 134.304167][ T2303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.370756][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.416534][ T1110] usb 3-1: USB disconnect, device number 5 [ 135.331238][ T4562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.411228][ T2303] net_ratelimit: 4 callbacks suppressed [ 137.411248][ T2303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.500792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.451163][ T4566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.530783][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.491379][ T4566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.570988][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.580777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.531060][ T4566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.610767][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.571252][ T2303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog