last executing test programs: 9m18.508567176s ago: executing program 2 (id=749): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x50, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x3}, @TCA_PIE_ALPHA={0x8, 0x4, 0x20}, @TCA_PIE_ALPHA={0x4, 0x4, 0xe}, @TCA_PIE_LIMIT={0x8, 0x2, 0x7}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8814}, 0x24008004) 9m18.186433473s ago: executing program 2 (id=752): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) io_setup(0x2278, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r0, 0x0}]) 9m17.789506486s ago: executing program 2 (id=754): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r1}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@private2, 0x67, r1}) 9m17.560312974s ago: executing program 2 (id=755): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 9m17.369520704s ago: executing program 2 (id=757): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000680)=0x205, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 9m16.806225221s ago: executing program 2 (id=759): io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0}]) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x9, @SEQ_NOTEON=@note=0x16}) 9m16.273120212s ago: executing program 32 (id=759): io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0}]) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x9, @SEQ_NOTEON=@note=0x16}) 1m24.117989593s ago: executing program 1 (id=2652): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000001740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200041a, &(0x7f0000000000)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d63703737352c004ced152ed09fe8115489d9663b017f412168f2c35d21aff719da4cdf06e768be9440ad63ddad24a1cc0173a9ee54ecb163908c4f9c408f630f15"], 0xfd, 0x5df, &(0x7f0000000cc0)="$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") syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000240)={[{@type={'type', 0x3d, "54a10fb2"}}, {}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@part={'part', 0x3d, 0x8}}, {@dir_umask={'dir_umask', 0x3d, 0x5}}, {@dir_umask}, {@dir_umask}, {@dir_umask={'dir_umask', 0x3d, 0x200}}, {}, {@umask={'umask', 0x3d, 0x2}}]}, 0x7, 0x318, &(0x7f00000004c0)="$eJzs3U1rE08cB/Dv7CZp8m/pf20rBY/VgqfS1oPixSLFi2/AgxRrm0LpWkEraEGMnkW8CYJHb55F34JexDegpx7Ek16CB1dmZmcf0tnNQ9tsQr4faJrszsNvdnayMynpgohG1tXVb28vHMgfUQbgArgMOACqQAnAacxWH+zube/59c28glyVQ/4I6JziUJqN3botq8yncoQ8+aqEieQ2OhlBEATf26b61ZdYqDhCj/1DHGAsHJ1qf7XvkZ2Mhm7XaEn0sGiiiYeYLDIcIiIqXnj9d8KrxEQ4f3ccYD6chw/79T81v2kWF8dAiK7/jn4dCHl8/le74vWeWsLJ3nfMKtFWlvWcCOLDXYE+s1IdINqtKlUsTm1r268vNFQBz3AllEg2ox43YRqiZEVb0b/mLGvTHHltzzeu2lCWbVjOiH+66xo//sAre3VrnzuISXwSX8Sa8PAam9H8rxQIeXDU8fFaekrHv5hdomqlp1OlWhmv30+pSs6YHvjwLm5lLeu4VuHKWGxkKaJ1/u6ZOF9WsnNhCumPFXTrlrJbp3JNW3MtR6//WHPNtOaqbZX9+sLGXT/3o5RjY13RiRfihpjDT7zHamL+78jU88gemalRLlTK8MzIbU9JpczoxxQ1gO90NTJJuWbt6HzPcRuXMHn/0f7Ouu/X7xX/xAyVAYlHn4jh6Si3yN+JNKjKJ2UAx1bp3yAIrLtK6EeTy6qpF9/ETd7fWRcN/fJoVaARFWh2rWQnBrACINxi3hF6qf1JlGssLrCj7L9lb6st9hPSRNWHE9JUldrlYqyjkVLrodLrj3fW/Z7eiWjIxJ2O2ZtFB0NFkPMuodd/ifXKonrXkQ9ezmokaFd4osSljBXQlHr8r7MVXFRs5jxx3Dxps+Y6ex4411KjA1Pj09ZivTBODOJfJbv/U4ZYxVfc4uf/RERERERERERERERERERERERERETDpttvI/TydYJ0jQcj+I83iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOJnH/X8BVd4ypFH7/X7eD+/+a+1IQUc/+BQAA//8KX2Ch") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) 1m14.230473232s ago: executing program 1 (id=2658): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000022c0), r1) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 1m3.664988209s ago: executing program 1 (id=2662): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x2080483) pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) 52.852641127s ago: executing program 1 (id=2665): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) 45.168202086s ago: executing program 1 (id=2669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x10, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 44.628009147s ago: executing program 4 (id=2670): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) 40.968347254s ago: executing program 0 (id=2671): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x1, {0xa, 0x4e23, 0x19b5, @local, 0x803ff}}}, 0x32) 40.30074097s ago: executing program 3 (id=2673): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 37.112026871s ago: executing program 1 (id=2674): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="99c0c8a64944a05e9c346de4d3d3a9bb39a0f78b255ad412db84b364a11507d57ebe76f665aa34319949d11ac4742b1e21768d7255e6fadbe63c5361ffa11811d2b17ec2289c7a18786e0a226f6fe59ee2ffdbf142cf0477b841c9457ee2ea08ae81d4a3", 0x64}, {&(0x7f0000000340)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b63381eb4ec1585cf5ce4b7b56ac8e2bb8c522148434f8794629edc06d69", 0x54}, {&(0x7f00000003c0)="58eb2c5f4861f02f200c15a24904c3bee774847f569bed51040025a08a0191a5eb14d91b8c8c510d600553f4ed0ee0a928e2ccbd303cff39", 0xffffffd8}, {&(0x7f0000000400)="51380ec09bd99ead10314c60dd84ede5853a989a50373ac712415d8507e6932ddee21ea42c5a23ae95e79250499276fccb9664194c8cd6c2fae81193d8b3b9be16f971daedea10580316cb74311dc5554dda3033aef6740c3e40681e462f186b9ea4f4492a52a98681e1b274cf9426a421b972aa87496a4dcde29945", 0x7c}, {&(0x7f0000000480)="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", 0xfb}], 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="1010000000000000000000000000000029c4c3474479bb34441dee598c29a6fc29ccabf33c1078b9f65f93219d8ee3f95f355fdd7104db312951579a0b9b66138fcf0acc3d4b33729f73c417e96d91d2eb5e0319bfd1b9a0cf7190a1216b93faddafd420a887bc958b3fd15066b89294ca9df3fbebcab8cc156f00020f44de7a57ff9a0044c666525947e889fd7dca04cf13a9537702537d305dd2c25744230700a06e7e519b816c6469fdd4ab4e929df381a43607a6695e534eadab5d5d054bd0619358ab113c5f4752ef7f7329fcec35aad7631bc72b44a0d99bc3177d60cb840725520ade4a8eaed4d14b84511894f0e193a6496a5b53ff8731a6544b3adaa2763269919452d2aa2ff727a42215942132105c51a0c0de3c41bc9fa714881ec211d6571ff733794b3e8ec9477639ffff3f981f245ad5cd06d18fc7cf9403f0379f9e7d24a11d46cfcd45a0c45e45ec9471827f9cd272d79358e56e9e33d8df9fcdf749a35bcd057464898d29fb1ed2337b05eabd7a41c8c7ad3c47218c664a317f727ebea385ff01400cb6c940d5d394e16de2bcfe2410d0f24e6b1321e75364d1a42624bdf659c0b7f8f76b8a421417dee9d10cdba301d35852d879c1d643bc702e29a54598c9e34b0562ed09536b1b06d4b58df3d91f973f9a38c88caa4e3c2c2d0b6a1da2dc8836781ac50af9cc42891398e6b5d64b5bf047c6f2f6e651d736ba1903921c5ffbe726a6371b9c44d20cd04a96ca3b1bbf97fd350fb63c13df32407782424cac6b1eaf111da7db600715e2ac333154cf3cd62706432e57e94645ac7e8c92d5236612d5a3c6e22438c51b294b3cc96c6a1f52450d92abe9906ba0798fc97e421c2f1ab36d20fbfb01a462143bc25f8f112263be15b7d0f8479fde6f42fa363437275acedad60486c57f905de48399d4ae5058da17522f5365a29eaeab2def70c383940a38d9a5f3d2b168eb64f8dd5ec6cb50581963fe8520c4ecff9158c8702f40a4a9b8900c55a0e0b06c1af35d12ad39e44e14a7cc83aa6bb606197cf34633667fc997b592907a62e67fa40dbe9ad23a5bf9d05fe812f96db107653368213bb559c5f3158593d9d37b6cc2bf6df06fada99384043d676da665657b5cd22a836eae16705e0ca272beb6955c3fad86ec8506e2c78f7d7260682c68ed8b7ebf02a30d22ac585cc347cbdaecf6e9e7e5d5aa97b92aef01bcc6aff785badf8f9b1699167ae930a83f0bc27bfdca2f895d7e5eebb95b82a819be127ab93433f5d8db50b12d058cf0d0f88737fd949dd0043a08b6219e6edaf4bd641e0e8285a0dfa47c96f89e75971ce7d6241e4b7d9fc7041c6902a86cb18492a0a8b18fbfc5e3d22a54de821581d1b99ccad7bc0c9a9138dc7cecca45f6568620532e2abe785c13ed459a18547c9f178cd998c317a0031625b5ebdcb99ce5f54b060da36203175b893253645ba2fd2ad856831440d769f59307313eb4ebc84f4a02a412075837d4bbb30b818d57a883747a1af26f35f1c2c208e7defc085bdf9eebc10079e18a0f23fd21a7d2884ab5ea7bc44ea261c91bf2ebd415a23eae9a7e85f3f0880547e1bcd13ef0468b458ed37f421b851bab5aae964b899f6cbc1f3d02f3800c7b35c89d0efdd6025e0921d3f526ed6587c415b177b87134e3da173d33b68a2672f36a4cde5ae8809212b9d88e6a4b4bf20afef7c1a48b4a5f2887874fb4e7cac0bcf71ed0d622a367b329f4b5e474ee4fd70636e86995520ec970970b0cd1f340d2b892aa56c2cfcbbbd6167e37b1c39327ad6cc85dec48a7e142b63a84c5b3886487ab2fedc582ac6f965d376b0581c0cae3abe24cb662e0c3c116d7e8dbddb107aa993cbfc24a0a8ca900b61c986f190671b809c8b34d110113397a9397e6b56858428ca09d708d83bdc51d90cfbe14b4c56a1ccd8190e581b766f2e0f8b6c49c7e74b8dfe99a35188115ea48b35d7975f58a5055422eaef9ebf438fb9eedaf9e1909c507a99542de7ad5d35e332d9267bbce80d58d5475bf714e3be2b26b258a6823d42410cdf72aa6f12a299f720c479e02060849e93d59c1b15d484adae609a31471abd4338a6aea03851ae370273f1ae3d72c59cbbd25c5a3aee91869c72a27b763eef686230650a895a0a9a2f77bdb6fb349c59cc48820f42500bc51a237a3436567d384648fb867d48602657a8c81f0aed85977073e103f0fc62aca6492f4378a646238349a5f8bee94f4766ee9e327860704b8a090adfc2ee0db11cc2df4b652211d30ed298dedd23eab38eacc8e0d2e69593a5682cec4d2c0f2d3d66f3df7be8028238d0f590ee90621d020b93085a5f694d563856284bafd4f0b954e30a896d1e399d6316d660e2b6ad3df716122f0a303b2f0217c6697d4d815b8a28ab8f028a8159f2aa9ed128a851334407d54f7e9c64e7b92a82ce51ab2a5b9ed047040f74fd42fcb2c41f379ce658641b73a60fb4b41f0a9a8edf605265fa6efdd28e1ae2fb8d4def9bbca9c4f9f2edcdc9e6fd423d9613a43845f20c61b9661c8b9c99bc958af7e61af5e704baf5ca12e65e8f0b133acec17081cbb50c22272ab51c7d17cc12a3033c52483b47aa16ac9dda11fb77001a4316b98bf873448267c8e7e49d6d07477a62b33e0a46e387999bc143f69c41130dfc77198f1339c7177befbf3eb06a9ecdf062fd842b29dba1b204474e309e64e2631f6c5e4d3d7ca536d4467419e620c8619a1526c691206063971491ff49aea6be8faa611203c37b3eec38d149035aee79af66693edc97d0da78671b88d9757919bce0b404ab0b2b43534e184fc67fca7937499782c1aaf7754c68225fdce1bc0643c91667d04a04a7c410a908d206a7e7c4c2a33b9c761be5dfe6e03a477462d359e7c07752a9700b1c37fa21b04072b6eaeff92d3633564cec2128406b1712fbff8a94b32b800b6a010bd243b9e96ef9c22ff2c77023c55837d219c3ae7f0d3e2af3cec7ba5c8222ccb97a6da76524dc70b41627eb024962fd743e59b58956bcb2bf03247a6dcbdfe23e8c3ce54ca98b34e74fd6cc01e622696556bf245b92ceecc5aa2a74591f1a584a6ad18a346da14c5ea3b52bcbbf2da744920e22e0f09b4fa7c63399606bd595b8e7a0d1d28d73d26a5defbedca45e1571dc76a120472ba5be9396a5d0775cb28af94469cf1657aa2efdc6104e1385a2cc8b7e782ca816291c4a50d7a4b580e26a91cfb2e3b81ce8fa76545ef66c23b2045bc81ae9cd01650243feb5b521aae85a683a2cf20333fbf24903cb5a7ebf89b89ce1dadad33118861a44cc067a5a4c511e7b4d2ddb22338c60fd174703b169b5bfe14e44783e5a1495fd267df653731add97119e0ac9e7efedc1b5881679101ef710714bad7ace7d25df8e078dd5fcba19b9519ba45ca3c779f8ee8d541a5efd41b6fba6bd3b46f9e361fde6b6f2af713179622787f507281d444110f6f93c53b17aebcd5b272d44c1f8479384970234b199559d53a3d959eea9bb230c2d199c5538c3efdf049d617d97b6d658840d543237157f20ba1929d9cd7247827ba400bb87b95c3225b3f86c2b42b584e7dc16d6619f408e322b4fd2db7148185c958469eb6e69a237c75a1c8a17da35586c835d5f22f9637c77ce412086868f9a11f3e341af960bc014b006e41ef6adc1fd91f86361a5541a8aa018dbffb38bb6c27ea0eb5cf9242efb49f431371beed7c202ce91e7f63c3d00fd4022634253c64a5355150b746164a1a857306b258332a11a30a750e402885ab7aa5c02e4446a07250a74d0649793d7387aa588f9e7552621410b906a907f5b49c16385c34eeed4b944dfe86f65b2e8c5ffd790d333b3b2b6b158d010a9cbeb436cacfa80f6821b409e6722ac5a1662ec7e591786f2ee5b95c93a756d6b13ebdd383999ad08b1f964036692a83e1d7fb3544e268161eab60ed235cc26fd7e7467bd97f6f1d32c3c6e2509528febdde9e1736c4bdd1dbe057d253bcdebed84a21549db56bc284ada3909fe8f7a15092b0b64e6f0fde332150b485d00c5edb5ff12861732227c408e8910708009bb7d26c4f0e070a5346e21643e63df15061d2971ae4337a34fa0dc1ddae98bb507914f44ec05e794fd4c20b28d72171eb86d66fabc229ad9e50ceb4e0c1b7224252b1e650c66528d3e90bb159047a2ab96cb10382581ec8cab511ae6028f4008a8fa93f136e7d17c26b209a240666df3394d92d687a56fb74c53d2a9c722a47d8b78490122fab47866e34c2509e002c6f8fdddecd56ce66b9151dbad5cc4e12298a20dcf4f3620409fa8332add659e2aad35359d07956f1d8a9e3f6779ce03174e1ab3465ff52b8b88e550ee077a96b633b527d89b3e9f47fa374a6aa5e92b9cf07ae61fbd00b1af4035af0c701f7db0243e32f4c8d72e73698742d092f1a932eba1ae5b4dc8dcb70a486764eabfb11e4bd6bd0990622888f1c9f28b4faccd814ccd7735fbb62d6cfbac24297cfde2ef217f6f8065729c772f0f3013f43d1822decd2d7deecb19389be2aee3b16db0c64eafcb2740fc19ee34010f5c00fd30d6ca921504796caddb546d53d977fa858c45a9e7e423aa3a354261156ec74beadf57eaf5ea16e2daf2e9fd6e13411816b705e62fe36d25ef08e26e0846a9da549a5ad03658826e56ddb0c7732ca8fd2f71a1f3ebcf32d5097f3f7451880ab5d4f3dd860b25749868a2d13d44ffc059debce3295e2ff35a86220d9425ef553a26e0cc96a1a631a2b5922655dd13a51b5686a0dc582e5946adba613999b26312c7abcda3e18742ef68906e2f9615165f2896b160096bf334babfd336b68c6e4d3f9cec25c83065dc3f4636f73717c70d98ab05fee2b101527255b7c5e52e280c6807f84c7ac46766607fb9440a7861050305d8cdefa39510ed85892a6bcf5431677c436574bc17b1915e5c65653dbfd00246e3e403b357a11ffd7c208b2eb2f3af8d1d84fed3ea0b3f37717313a2d0ee5a933cbed5a20ca1ccb00fd54b7a3ec34c3bd2245b2c49cfa31d999d73a89e4c75fb557b086bea6eeb022edbad85bbf905c86c45f512b714412031492691ee68a90e41605c82dad45fb4f6a3d70c1274d76a252c3a712aa7c2ed1549b92fdf58012feeaa738713180e56e401f329d8864def28beab976489974d5294546728013d64e10330e92ca20ce32eac971fd3196676a174a659512ec043952424ce06f4f3635213fe536f0514397d8161ed00e2aa8925fc1e9fc1c301b28b56d2654d95bc8c362b41439b95e9da06fc149d7a0a47eea787292d6c61c7e7ddf08f567f055fa352f06f052e304a83284ef0a4ea8d515f146b2a0f79751e1b99905a082ca5d2c0fc7d05645686725e36b18717dff90139605a2cb46d25ea6892aeb8fcd7ff998aeb9d4b9c2863ade72e98f98495cf13409d6a7f71d8883a3f7f72a5257031854b72542a18ccf149939146a7fdedc94800e9475a6375a5c749b264c72824292bdd50451f97a709a0a54b2d9052fa23f26bf024f2f5e579e5cf1e572eac2707f7efe3148dde6c6df8c6b1b41c5f2d0d050aeaec38b5818544de20739c5769b1d659900fa499b3e740cdd7cb1389f83de5c009f3ca200614974a8f4a9506f857794b557e1a67e66f7d72ec2519457805417a2017a28432f42647f99d013afca2a0f95eb0e31c621721ab2e848cfd93bea24bd91b20d4e16d76718a6f66c7b27338674e071c2b61ebdac5e18ece820494adcb1d77417ccac6f63ba24139f81cd30ed9f74ffdb1d54abb7382fe7e0d3e4f6bdcf05059535db9c1fa5c83d6a95498160724a280000000000000000000000000000008192fbea2c061381413fc28cb06b4e988dc486c74cfc0000180000000000000000000000000000004fdf1ab71595000018000000000000000000000000000000f47d000000000000e000000000000000000000000000000006435d82744e2bd9e2a1fe8560ac7d60b467b377f0399e14a4b82078fbecc311bfb75da80df4176c4561790eae2e1f95dd46a7d7add48146b7b5c82746d8d36469209f1157ef17dbcd007409c3146b57a228d6100cf363fe754e480ace4546319526df51a444b225ac6df534283e28711f46fc77e9fda0596f402ec4c67aa5d0c5e535ca6edfe639e562cb3f41c27b110d3f65ecadd12a490fd27c6eea3f254c1a651207d6a239d3289641254ed028de2cedd5f658793983cea494d38b136b5f72a624ea0975c31041f46ca000000000"], 0x1148}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x4, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) 36.409071655s ago: executing program 4 (id=2675): r0 = epoll_create1(0x0) r1 = socket$inet(0x2, 0x3, 0xa) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x6c9}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 33.761485616s ago: executing program 0 (id=2676): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000005bc0), 0x12) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000), 0x41, 0x19e, &(0x7f0000000440)="$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") 32.485384506s ago: executing program 3 (id=2677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000bc0)={0x0, [{0x2, 0x8, 0x108, &(0x7f0000000200)="05"}, {0x1, 0x8, 0x27a6, &(0x7f0000000280)='h'}, {0x0, 0x0, 0x2, 0x0}, {0x6ea1b2336c7fc070, 0x0, 0x200007f, 0x0}, {0x2, 0x0, 0x85a2, 0x0}, {0x1, 0x0, 0xa, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x80000001, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x3f, 0x0}, {0x3, 0x0, 0xd09f, 0x0}]}) close_range(r1, 0xffffffffffffffff, 0x0) 29.443956587s ago: executing program 4 (id=2678): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 25.36776558s ago: executing program 0 (id=2679): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x458, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x144, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8ad, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0xd, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x3, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x3}}}}]}, 0x458}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) 23.422223807s ago: executing program 3 (id=2680): mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='raw', 0x3) 22.199359197s ago: executing program 4 (id=2681): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) vmsplice(r1, 0x0, 0x0, 0x0) 20.336845737s ago: executing program 33 (id=2674): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="99c0c8a64944a05e9c346de4d3d3a9bb39a0f78b255ad412db84b364a11507d57ebe76f665aa34319949d11ac4742b1e21768d7255e6fadbe63c5361ffa11811d2b17ec2289c7a18786e0a226f6fe59ee2ffdbf142cf0477b841c9457ee2ea08ae81d4a3", 0x64}, {&(0x7f0000000340)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b63381eb4ec1585cf5ce4b7b56ac8e2bb8c522148434f8794629edc06d69", 0x54}, {&(0x7f00000003c0)="58eb2c5f4861f02f200c15a24904c3bee774847f569bed51040025a08a0191a5eb14d91b8c8c510d600553f4ed0ee0a928e2ccbd303cff39", 0xffffffd8}, {&(0x7f0000000400)="51380ec09bd99ead10314c60dd84ede5853a989a50373ac712415d8507e6932ddee21ea42c5a23ae95e79250499276fccb9664194c8cd6c2fae81193d8b3b9be16f971daedea10580316cb74311dc5554dda3033aef6740c3e40681e462f186b9ea4f4492a52a98681e1b274cf9426a421b972aa87496a4dcde29945", 0x7c}, {&(0x7f0000000480)="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", 0xfb}], 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="1010000000000000000000000000000029c4c3474479bb34441dee598c29a6fc29ccabf33c1078b9f65f93219d8ee3f95f355fdd7104db312951579a0b9b66138fcf0acc3d4b33729f73c417e96d91d2eb5e0319bfd1b9a0cf7190a1216b93faddafd420a887bc958b3fd15066b89294ca9df3fbebcab8cc156f00020f44de7a57ff9a0044c666525947e889fd7dca04cf13a9537702537d305dd2c25744230700a06e7e519b816c6469fdd4ab4e929df381a43607a6695e534eadab5d5d054bd0619358ab113c5f4752ef7f7329fcec35aad7631bc72b44a0d99bc3177d60cb840725520ade4a8eaed4d14b84511894f0e193a6496a5b53ff8731a6544b3adaa2763269919452d2aa2ff727a42215942132105c51a0c0de3c41bc9fa714881ec211d6571ff733794b3e8ec9477639ffff3f981f245ad5cd06d18fc7cf9403f0379f9e7d24a11d46cfcd45a0c45e45ec9471827f9cd272d79358e56e9e33d8df9fcdf749a35bcd057464898d29fb1ed2337b05eabd7a41c8c7ad3c47218c664a317f727ebea385ff01400cb6c940d5d394e16de2bcfe2410d0f24e6b1321e75364d1a42624bdf659c0b7f8f76b8a421417dee9d10cdba301d35852d879c1d643bc702e29a54598c9e34b0562ed09536b1b06d4b58df3d91f973f9a38c88caa4e3c2c2d0b6a1da2dc8836781ac50af9cc42891398e6b5d64b5bf047c6f2f6e651d736ba1903921c5ffbe726a6371b9c44d20cd04a96ca3b1bbf97fd350fb63c13df32407782424cac6b1eaf111da7db600715e2ac333154cf3cd62706432e57e94645ac7e8c92d5236612d5a3c6e22438c51b294b3cc96c6a1f52450d92abe9906ba0798fc97e421c2f1ab36d20fbfb01a462143bc25f8f112263be15b7d0f8479fde6f42fa363437275acedad60486c57f905de48399d4ae5058da17522f5365a29eaeab2def70c383940a38d9a5f3d2b168eb64f8dd5ec6cb50581963fe8520c4ecff9158c8702f40a4a9b8900c55a0e0b06c1af35d12ad39e44e14a7cc83aa6bb606197cf34633667fc997b592907a62e67fa40dbe9ad23a5bf9d05fe812f96db107653368213bb559c5f3158593d9d37b6cc2bf6df06fada99384043d676da665657b5cd22a836eae16705e0ca272beb6955c3fad86ec8506e2c78f7d7260682c68ed8b7ebf02a30d22ac585cc347cbdaecf6e9e7e5d5aa97b92aef01bcc6aff785badf8f9b1699167ae930a83f0bc27bfdca2f895d7e5eebb95b82a819be127ab93433f5d8db50b12d058cf0d0f88737fd949dd0043a08b6219e6edaf4bd641e0e8285a0dfa47c96f89e75971ce7d6241e4b7d9fc7041c6902a86cb18492a0a8b18fbfc5e3d22a54de821581d1b99ccad7bc0c9a9138dc7cecca45f6568620532e2abe785c13ed459a18547c9f178cd998c317a0031625b5ebdcb99ce5f54b060da36203175b893253645ba2fd2ad856831440d769f59307313eb4ebc84f4a02a412075837d4bbb30b818d57a883747a1af26f35f1c2c208e7defc085bdf9eebc10079e18a0f23fd21a7d2884ab5ea7bc44ea261c91bf2ebd415a23eae9a7e85f3f0880547e1bcd13ef0468b458ed37f421b851bab5aae964b899f6cbc1f3d02f3800c7b35c89d0efdd6025e0921d3f526ed6587c415b177b87134e3da173d33b68a2672f36a4cde5ae8809212b9d88e6a4b4bf20afef7c1a48b4a5f2887874fb4e7cac0bcf71ed0d622a367b329f4b5e474ee4fd70636e86995520ec970970b0cd1f340d2b892aa56c2cfcbbbd6167e37b1c39327ad6cc85dec48a7e142b63a84c5b3886487ab2fedc582ac6f965d376b0581c0cae3abe24cb662e0c3c116d7e8dbddb107aa993cbfc24a0a8ca900b61c986f190671b809c8b34d110113397a9397e6b56858428ca09d708d83bdc51d90cfbe14b4c56a1ccd8190e581b766f2e0f8b6c49c7e74b8dfe99a35188115ea48b35d7975f58a5055422eaef9ebf438fb9eedaf9e1909c507a99542de7ad5d35e332d9267bbce80d58d5475bf714e3be2b26b258a6823d42410cdf72aa6f12a299f720c479e02060849e93d59c1b15d484adae609a31471abd4338a6aea03851ae370273f1ae3d72c59cbbd25c5a3aee91869c72a27b763eef686230650a895a0a9a2f77bdb6fb349c59cc48820f42500bc51a237a3436567d384648fb867d48602657a8c81f0aed85977073e103f0fc62aca6492f4378a646238349a5f8bee94f4766ee9e327860704b8a090adfc2ee0db11cc2df4b652211d30ed298dedd23eab38eacc8e0d2e69593a5682cec4d2c0f2d3d66f3df7be8028238d0f590ee90621d020b93085a5f694d563856284bafd4f0b954e30a896d1e399d6316d660e2b6ad3df716122f0a303b2f0217c6697d4d815b8a28ab8f028a8159f2aa9ed128a851334407d54f7e9c64e7b92a82ce51ab2a5b9ed047040f74fd42fcb2c41f379ce658641b73a60fb4b41f0a9a8edf605265fa6efdd28e1ae2fb8d4def9bbca9c4f9f2edcdc9e6fd423d9613a43845f20c61b9661c8b9c99bc958af7e61af5e704baf5ca12e65e8f0b133acec17081cbb50c22272ab51c7d17cc12a3033c52483b47aa16ac9dda11fb77001a4316b98bf873448267c8e7e49d6d07477a62b33e0a46e387999bc143f69c41130dfc77198f1339c7177befbf3eb06a9ecdf062fd842b29dba1b204474e309e64e2631f6c5e4d3d7ca536d4467419e620c8619a1526c691206063971491ff49aea6be8faa611203c37b3eec38d149035aee79af66693edc97d0da78671b88d9757919bce0b404ab0b2b43534e184fc67fca7937499782c1aaf7754c68225fdce1bc0643c91667d04a04a7c410a908d206a7e7c4c2a33b9c761be5dfe6e03a477462d359e7c07752a9700b1c37fa21b04072b6eaeff92d3633564cec2128406b1712fbff8a94b32b800b6a010bd243b9e96ef9c22ff2c77023c55837d219c3ae7f0d3e2af3cec7ba5c8222ccb97a6da76524dc70b41627eb024962fd743e59b58956bcb2bf03247a6dcbdfe23e8c3ce54ca98b34e74fd6cc01e622696556bf245b92ceecc5aa2a74591f1a584a6ad18a346da14c5ea3b52bcbbf2da744920e22e0f09b4fa7c63399606bd595b8e7a0d1d28d73d26a5defbedca45e1571dc76a120472ba5be9396a5d0775cb28af94469cf1657aa2efdc6104e1385a2cc8b7e782ca816291c4a50d7a4b580e26a91cfb2e3b81ce8fa76545ef66c23b2045bc81ae9cd01650243feb5b521aae85a683a2cf20333fbf24903cb5a7ebf89b89ce1dadad33118861a44cc067a5a4c511e7b4d2ddb22338c60fd174703b169b5bfe14e44783e5a1495fd267df653731add97119e0ac9e7efedc1b5881679101ef710714bad7ace7d25df8e078dd5fcba19b9519ba45ca3c779f8ee8d541a5efd41b6fba6bd3b46f9e361fde6b6f2af713179622787f507281d444110f6f93c53b17aebcd5b272d44c1f8479384970234b199559d53a3d959eea9bb230c2d199c5538c3efdf049d617d97b6d658840d543237157f20ba1929d9cd7247827ba400bb87b95c3225b3f86c2b42b584e7dc16d6619f408e322b4fd2db7148185c958469eb6e69a237c75a1c8a17da35586c835d5f22f9637c77ce412086868f9a11f3e341af960bc014b006e41ef6adc1fd91f86361a5541a8aa018dbffb38bb6c27ea0eb5cf9242efb49f431371beed7c202ce91e7f63c3d00fd4022634253c64a5355150b746164a1a857306b258332a11a30a750e402885ab7aa5c02e4446a07250a74d0649793d7387aa588f9e7552621410b906a907f5b49c16385c34eeed4b944dfe86f65b2e8c5ffd790d333b3b2b6b158d010a9cbeb436cacfa80f6821b409e6722ac5a1662ec7e591786f2ee5b95c93a756d6b13ebdd383999ad08b1f964036692a83e1d7fb3544e268161eab60ed235cc26fd7e7467bd97f6f1d32c3c6e2509528febdde9e1736c4bdd1dbe057d253bcdebed84a21549db56bc284ada3909fe8f7a15092b0b64e6f0fde332150b485d00c5edb5ff12861732227c408e8910708009bb7d26c4f0e070a5346e21643e63df15061d2971ae4337a34fa0dc1ddae98bb507914f44ec05e794fd4c20b28d72171eb86d66fabc229ad9e50ceb4e0c1b7224252b1e650c66528d3e90bb159047a2ab96cb10382581ec8cab511ae6028f4008a8fa93f136e7d17c26b209a240666df3394d92d687a56fb74c53d2a9c722a47d8b78490122fab47866e34c2509e002c6f8fdddecd56ce66b9151dbad5cc4e12298a20dcf4f3620409fa8332add659e2aad35359d07956f1d8a9e3f6779ce03174e1ab3465ff52b8b88e550ee077a96b633b527d89b3e9f47fa374a6aa5e92b9cf07ae61fbd00b1af4035af0c701f7db0243e32f4c8d72e73698742d092f1a932eba1ae5b4dc8dcb70a486764eabfb11e4bd6bd0990622888f1c9f28b4faccd814ccd7735fbb62d6cfbac24297cfde2ef217f6f8065729c772f0f3013f43d1822decd2d7deecb19389be2aee3b16db0c64eafcb2740fc19ee34010f5c00fd30d6ca921504796caddb546d53d977fa858c45a9e7e423aa3a354261156ec74beadf57eaf5ea16e2daf2e9fd6e13411816b705e62fe36d25ef08e26e0846a9da549a5ad03658826e56ddb0c7732ca8fd2f71a1f3ebcf32d5097f3f7451880ab5d4f3dd860b25749868a2d13d44ffc059debce3295e2ff35a86220d9425ef553a26e0cc96a1a631a2b5922655dd13a51b5686a0dc582e5946adba613999b26312c7abcda3e18742ef68906e2f9615165f2896b160096bf334babfd336b68c6e4d3f9cec25c83065dc3f4636f73717c70d98ab05fee2b101527255b7c5e52e280c6807f84c7ac46766607fb9440a7861050305d8cdefa39510ed85892a6bcf5431677c436574bc17b1915e5c65653dbfd00246e3e403b357a11ffd7c208b2eb2f3af8d1d84fed3ea0b3f37717313a2d0ee5a933cbed5a20ca1ccb00fd54b7a3ec34c3bd2245b2c49cfa31d999d73a89e4c75fb557b086bea6eeb022edbad85bbf905c86c45f512b714412031492691ee68a90e41605c82dad45fb4f6a3d70c1274d76a252c3a712aa7c2ed1549b92fdf58012feeaa738713180e56e401f329d8864def28beab976489974d5294546728013d64e10330e92ca20ce32eac971fd3196676a174a659512ec043952424ce06f4f3635213fe536f0514397d8161ed00e2aa8925fc1e9fc1c301b28b56d2654d95bc8c362b41439b95e9da06fc149d7a0a47eea787292d6c61c7e7ddf08f567f055fa352f06f052e304a83284ef0a4ea8d515f146b2a0f79751e1b99905a082ca5d2c0fc7d05645686725e36b18717dff90139605a2cb46d25ea6892aeb8fcd7ff998aeb9d4b9c2863ade72e98f98495cf13409d6a7f71d8883a3f7f72a5257031854b72542a18ccf149939146a7fdedc94800e9475a6375a5c749b264c72824292bdd50451f97a709a0a54b2d9052fa23f26bf024f2f5e579e5cf1e572eac2707f7efe3148dde6c6df8c6b1b41c5f2d0d050aeaec38b5818544de20739c5769b1d659900fa499b3e740cdd7cb1389f83de5c009f3ca200614974a8f4a9506f857794b557e1a67e66f7d72ec2519457805417a2017a28432f42647f99d013afca2a0f95eb0e31c621721ab2e848cfd93bea24bd91b20d4e16d76718a6f66c7b27338674e071c2b61ebdac5e18ece820494adcb1d77417ccac6f63ba24139f81cd30ed9f74ffdb1d54abb7382fe7e0d3e4f6bdcf05059535db9c1fa5c83d6a95498160724a280000000000000000000000000000008192fbea2c061381413fc28cb06b4e988dc486c74cfc0000180000000000000000000000000000004fdf1ab71595000018000000000000000000000000000000f47d000000000000e000000000000000000000000000000006435d82744e2bd9e2a1fe8560ac7d60b467b377f0399e14a4b82078fbecc311bfb75da80df4176c4561790eae2e1f95dd46a7d7add48146b7b5c82746d8d36469209f1157ef17dbcd007409c3146b57a228d6100cf363fe754e480ace4546319526df51a444b225ac6df534283e28711f46fc77e9fda0596f402ec4c67aa5d0c5e535ca6edfe639e562cb3f41c27b110d3f65ecadd12a490fd27c6eea3f254c1a651207d6a239d3289641254ed028de2cedd5f658793983cea494d38b136b5f72a624ea0975c31041f46ca000000000"], 0x1148}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x4, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) 15.752209523s ago: executing program 3 (id=2683): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) 15.737268306s ago: executing program 0 (id=2690): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x24, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{0x1}]}]}, 0x24}}, 0x0) 14.849682337s ago: executing program 4 (id=2684): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.279607329s ago: executing program 0 (id=2685): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb", 0xd7}], 0x1}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17) 7.24687949s ago: executing program 3 (id=2686): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e25, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES32=r0], 0x18}, 0x40c0) 3.939775775s ago: executing program 4 (id=2687): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) close(r0) 937.768728ms ago: executing program 0 (id=2688): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000001c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 0s ago: executing program 3 (id=2689): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x20000008, 0xa2600) r1 = epoll_create(0xe) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80002019}) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) kernel console output (not intermixed with test programs): lock [ 312.549802][T10221] F2FS-fs (loop3): invalid crc value [ 312.601171][T10221] F2FS-fs (loop3): Found nat_bits in checkpoint [ 312.668131][T10221] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 312.677735][T10221] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 312.737626][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 312.827400][T10221] F2FS-fs (loop3): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 312.937814][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 312.966493][ T9] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 312.997766][ T9] usb 1-1: config 0 has no interface number 0 [ 313.024046][ T9] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.071340][ T9] usb 1-1: config 0 interface 85 has no altsetting 0 [ 313.105302][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 313.137199][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.167078][ T9] usb 1-1: Product: syz [ 313.196270][ T9] usb 1-1: Manufacturer: syz [ 313.206408][ T9] usb 1-1: SerialNumber: syz [ 313.258758][ T9] usb 1-1: config 0 descriptor?? [ 313.619048][ T55] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 313.821203][ T55] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 313.851839][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 313.878442][ T9] appletouch 1-1:0.85: Geyser mode initialized. [ 313.884876][ T55] usb 5-1: Product: syz [ 313.897938][ T55] usb 5-1: Manufacturer: syz [ 313.915864][ T9] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input33 [ 313.951385][ T55] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input34 [ 313.983052][T10240] program syz.1.1623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.238283][ T8174] usb 5-1: USB disconnect, device number 7 [ 314.270313][ T55] usb 1-1: USB disconnect, device number 13 [ 314.407357][ T55] appletouch 1-1:0.85: input: appletouch disconnected [ 314.423109][T10246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1625'. [ 314.467619][T10246] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.477156][T10246] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.516239][T10246] bridge0: entered allmulticast mode [ 314.601891][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 314.950501][T10258] program syz.0.1630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.140278][T10260] loop0: detected capacity change from 0 to 256 [ 315.197217][T10260] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 315.621745][T10251] loop1: detected capacity change from 0 to 40427 [ 315.653766][T10251] F2FS-fs (loop1): invalid crc value [ 315.710354][T10251] F2FS-fs (loop1): Found nat_bits in checkpoint [ 315.907904][T10251] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 316.049745][T10251] syz.1.1627: attempt to access beyond end of device [ 316.049745][T10251] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 316.227652][ T55] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 316.289094][ T5785] syz-executor: attempt to access beyond end of device [ 316.289094][ T5785] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 316.321292][T10278] netlink: 'syz.4.1637': attribute type 14 has an invalid length. [ 316.329949][ T5785] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 316.430864][ T55] usb 4-1: Using ep0 maxpacket: 8 [ 316.448814][ T55] usb 4-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 316.487616][ T55] usb 4-1: config 0 interface 0 has no altsetting 0 [ 316.508952][ T55] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 316.544924][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.593227][ T55] usb 4-1: config 0 descriptor?? [ 316.782191][T10286] loop0: detected capacity change from 0 to 256 [ 316.805482][T10286] exfat: Deprecated parameter 'namecase' [ 316.827754][T10286] exfat: Deprecated parameter 'namecase' [ 316.838016][ T8174] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 316.889347][T10286] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 317.023968][ T55] ntrig 0003:1B96:000A.000B: unknown global tag 0xd [ 317.041220][ T8174] usb 5-1: Using ep0 maxpacket: 32 [ 317.051979][ T55] ntrig 0003:1B96:000A.000B: item 0 1 1 13 parsing failed [ 317.072504][ T8174] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 317.090101][ T55] ntrig 0003:1B96:000A.000B: parse failed [ 317.113444][ T55] ntrig: probe of 0003:1B96:000A.000B failed with error -22 [ 317.128257][ T8174] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 317.143646][ T8174] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 317.177584][ T8174] usb 5-1: Product: syz [ 317.187717][ T8174] usb 5-1: Manufacturer: syz [ 317.195606][T10290] loop1: detected capacity change from 0 to 2048 [ 317.204932][ T8174] usb 5-1: SerialNumber: syz [ 317.227990][ T8174] usb 5-1: config 0 descriptor?? [ 317.240459][ T55] usb 4-1: USB disconnect, device number 14 [ 317.261738][T10282] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 317.271016][T10290] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.287987][ T8174] hub 5-1:0.0: bad descriptor, ignoring hub [ 317.315460][ T8174] hub: probe of 5-1:0.0 failed with error -5 [ 317.605724][T10299] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 317.605724][T10299] The task syz.1.1645 (10299) triggered the difference, watch for misbehavior. [ 317.641209][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.668753][ T55] usb 5-1: USB disconnect, device number 8 [ 318.411193][ T55] kernel read not supported for file /dsp1 (pid: 55 comm: kworker/0:2) [ 318.473606][T10319] loop4: detected capacity change from 0 to 512 [ 318.513401][T10319] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 318.575286][T10319] EXT4-fs (loop4): 1 truncate cleaned up [ 318.626458][T10319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.712935][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 318.712951][ T28] audit: type=1800 audit(1790650379.498:53): pid=10319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1656" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 318.772197][ T5821] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 318.889717][ T7833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.979469][ T5821] usb 4-1: Using ep0 maxpacket: 8 [ 319.009353][ T5821] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 319.034379][ T5821] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.076429][ T5821] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 319.123458][ T5821] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 319.166381][ T5821] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.217664][ T5821] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 319.253801][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.533791][ T5821] usb 4-1: GET_CAPABILITIES returned 0 [ 319.555295][ T5821] usbtmc 4-1:16.0: can't read capabilities [ 319.730957][T10331] loop0: detected capacity change from 0 to 32768 [ 319.749341][ T5821] usb 4-1: USB disconnect, device number 15 [ 319.805693][T10331] JBD2: Ignoring recovery information on journal [ 319.941741][T10331] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 320.145218][T10352] : renamed from vlan0 (while UP) [ 320.151201][ T7976] ocfs2: Unmounting device (7,0) on (node local) [ 320.164235][ T55] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 320.203237][ T55] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 320.871158][T10368] loop6: detected capacity change from 0 to 7 [ 320.903609][T10368] Dev loop6: unable to read RDB block 7 [ 320.940531][T10368] loop6: unable to read partition table [ 320.971805][T10368] loop6: partition table beyond EOD, truncated [ 320.998082][T10368] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 321.557884][T10386] clocksource: Switched to clocksource acpi_pm [ 321.922874][T10397] loop3: detected capacity change from 0 to 256 [ 322.032740][T10397] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 323.821465][T10440] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 324.273081][T10454] loop3: detected capacity change from 0 to 128 [ 324.328458][T10454] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 324.504529][T10458] loop0: detected capacity change from 0 to 1024 [ 324.713552][ T28] audit: type=1326 audit(1790650385.499:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fffee373ac9 code=0x7ffc0000 [ 324.744197][ T28] audit: type=1326 audit(1790650385.509:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94b19e159 code=0x7ffc0000 [ 324.777143][ T28] audit: type=1326 audit(1790650385.509:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94b19e159 code=0x7ffc0000 [ 324.847655][ T28] audit: type=1326 audit(1790650385.509:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fffee373ac9 code=0x7ffc0000 [ 324.947598][ T28] audit: type=1326 audit(1790650385.509:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fa94b19e159 code=0x7ffc0000 [ 324.992079][ T28] audit: type=1326 audit(1790650385.519:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fffee373ac9 code=0x7ffc0000 [ 325.057887][ T28] audit: type=1326 audit(1790650385.519:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94b19e159 code=0x7ffc0000 [ 325.224206][T10476] block nbd1: not configured, cannot reconfigure [ 325.437936][ T55] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 325.629782][T10491] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1729'. [ 325.642755][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 325.648159][ T5821] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 325.669259][ T55] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.690117][ T55] usb 4-1: config 0 has no interfaces? [ 325.695810][ T55] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 325.722600][T10493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 325.730280][T10493] IPv6: NLM_F_CREATE should be set when creating new route [ 325.737979][T10493] IPv6: NLM_F_CREATE should be set when creating new route [ 325.755821][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.778567][ T55] usb 4-1: config 0 descriptor?? [ 325.789390][T10493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 325.857646][ T5821] usb 1-1: Using ep0 maxpacket: 16 [ 325.875809][ T5821] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.907036][ T5821] usb 1-1: config 0 interface 0 has no altsetting 0 [ 325.923314][ T5821] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 325.948433][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.979677][ T5821] usb 1-1: config 0 descriptor?? [ 326.051437][ T55] usb 4-1: USB disconnect, device number 16 [ 326.297681][T10505] loop1: detected capacity change from 0 to 1024 [ 326.433561][ T5821] mcp2221 0003:04D8:00DD.000D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 326.814584][T10514] input: syz0 as /devices/virtual/input/input35 [ 326.846621][ T55] usb 1-1: USB disconnect, device number 14 [ 327.264708][T10525] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1745'. [ 327.298264][T10525] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1745'. [ 327.539045][T10533] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1749'. [ 328.249272][T10557] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1760'. [ 328.767696][ T55] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 328.971031][ T55] usb 1-1: config 0 has no interfaces? [ 328.997388][ T55] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 329.026997][ T55] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 329.057568][ T55] usb 1-1: Manufacturer: syz [ 329.091298][ T55] usb 1-1: config 0 descriptor?? [ 329.335030][ T55] usb 1-1: USB disconnect, device number 15 [ 329.600402][T10604] loop4: detected capacity change from 0 to 1024 [ 329.608177][T10604] EXT4-fs: Ignoring removed mblk_io_submit option [ 329.614976][T10604] EXT4-fs: inline encryption not supported [ 329.626144][T10604] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 329.817685][ T55] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 329.896828][T10611] i2c i2c-0: delete_device: Can't parse I2C address [ 330.033272][ T55] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 330.054087][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.071474][ T55] usb 2-1: Product: syz [ 330.080525][ T55] usb 2-1: Manufacturer: syz [ 330.091209][ T55] usb 2-1: SerialNumber: syz [ 330.105647][ T55] usb 2-1: config 0 descriptor?? [ 330.125291][ T55] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 016 [ 330.186287][T10619] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 330.197015][T10619] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 330.210130][T10619] overlayfs: failed to set uuid (211/file2, err=-13); falling back to uuid=null. [ 330.299339][ T5821] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 330.487708][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 330.495401][ T5821] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.508152][ T5821] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.533353][ T55] (null): failure reading functionality [ 330.550675][ T5821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 330.568998][ T5821] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 330.588312][ T55] i2c i2c-1: connected i2c-tiny-usb device [ 330.607717][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.640339][ T5821] usb 5-1: config 0 descriptor?? [ 330.833357][ T55] usb 2-1: USB disconnect, device number 16 [ 331.061723][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.076826][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.095742][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.126171][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.147634][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.183905][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.208336][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.227779][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.254007][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.281745][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.299381][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.337194][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.366145][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.384416][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.417547][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.448147][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.455571][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.514014][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.542909][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.574219][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.599881][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.618792][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.630812][T10628] loop3: detected capacity change from 0 to 32768 [ 331.647670][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.666585][ T5821] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 331.679625][T10628] (syz.3.1794,10628,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 331.710211][ T5821] logitech 0003:046D:C29C.000E: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 331.728178][T10628] (syz.3.1794,10628,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 331.808247][T10628] JBD2: Ignoring recovery information on journal [ 331.857765][ T8174] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 331.957371][ T5821] logitech 0003:046D:C29C.000E: no inputs found [ 331.986929][ T5821] usb 5-1: USB disconnect, device number 9 [ 332.034927][T10628] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 332.059316][ T8174] usb 2-1: not running at top speed; connect to a high speed hub [ 332.089620][ T8174] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 332.116010][ T8174] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 332.146280][ T8174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.176619][ T8174] usb 2-1: Product: syz [ 332.186816][ T8174] usb 2-1: Manufacturer: syz [ 332.201763][ T8174] usb 2-1: SerialNumber: syz [ 332.234897][ T8174] oti6858 2-1:1.0: oti6858 converter detected [ 332.266078][ T8174] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 332.467067][T10654] loop0: detected capacity change from 0 to 1024 [ 332.485084][ T5781] ocfs2: Unmounting device (7,3) on (node local) [ 332.530454][T10654] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 332.596007][T10654] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #11: comm syz.0.1805: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 332.692785][T10654] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1805: couldn't read orphan inode 11 (err -117) [ 332.723262][T10658] block nbd1: Unsupported socket: should be TCP or UNIX. [ 332.742823][T10654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.780301][ T8174] usb 2-1: USB disconnect, device number 17 [ 332.813453][ T8174] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 332.852623][ T8174] oti6858 2-1:1.0: device disconnected [ 332.887650][T10654] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.1805: lblock 2 mapped to illegal pblock 2 (length 1) [ 332.953693][T10654] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 332.976708][T10654] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.1805: lblock 0 mapped to illegal pblock 48 (length 1) [ 333.065715][T10654] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 333.112038][T10654] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1805: Failed to acquire dquot type 0 [ 333.147859][T10665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1809'. [ 333.197739][T10665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1809'. [ 333.292474][ T7976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.352301][ T7976] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 333.418469][ T7976] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 333.461849][T10670] loop4: detected capacity change from 0 to 256 [ 333.492494][ T7976] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 333.612229][T10673] loop1: detected capacity change from 0 to 512 [ 333.723160][T10673] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 333.793288][T10673] FAT-fs (loop1): Filesystem has been set read-only [ 334.446752][T10692] loop0: detected capacity change from 0 to 4096 [ 334.620970][T10697] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 334.724498][T10701] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1825'. [ 334.841299][T10703] loop4: detected capacity change from 0 to 128 [ 334.869219][T10703] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 335.054940][T10707] overlayfs: upper fs does not support tmpfile. [ 335.223248][T10710] vxcan0: tx address claim with dest, not broadcast [ 335.315930][T10713] loop0: detected capacity change from 0 to 1024 [ 335.856150][T10724] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.886573][T10727] loop1: detected capacity change from 0 to 128 [ 335.928922][T10727] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 335.944753][T10720] loop3: detected capacity change from 0 to 8192 [ 335.980218][T10727] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 336.000590][T10720] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 336.097484][T10720] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 336.107167][T10720] REISERFS (device loop3): using ordered data mode [ 336.187631][T10720] reiserfs: using flush barriers [ 336.215103][T10720] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 336.287124][T10720] REISERFS (device loop3): checking transaction log (loop3) [ 336.345240][T10732] loop4: detected capacity change from 0 to 4096 [ 336.354905][T10720] REISERFS (device loop3): Using tea hash to sort names [ 336.377574][T10720] REISERFS (device loop3): using 3.5.x disk format [ 336.400879][T10732] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 336.507782][T10736] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 336.562547][T10732] ntfs3: loop4: ino=19, mi_enum_attr [ 336.586118][T10732] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 336.668409][T10732] ntfs3: loop4: ino=19, mi_enum_attr [ 336.703377][T10732] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 337.157138][T10740] set_capacity_and_notify: 1 callbacks suppressed [ 337.157154][T10740] loop3: detected capacity change from 0 to 8192 [ 337.212838][T10749] loop4: detected capacity change from 0 to 128 [ 337.815668][T10755] loop1: detected capacity change from 0 to 8192 [ 337.856298][T10755] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 337.912805][T10755] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 337.952520][T10755] REISERFS (device loop1): using ordered data mode [ 337.982049][T10755] reiserfs: using flush barriers [ 338.018145][T10755] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 338.083417][T10755] REISERFS (device loop1): checking transaction log (loop1) [ 338.132904][T10755] REISERFS (device loop1): Using r5 hash to sort names [ 338.158394][T10755] REISERFS (device loop1): using 3.5.x disk format [ 338.190357][T10755] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 338.701289][T10787] bonding: no command found in bonding_masters - use +ifname or -ifname [ 338.962992][T10789] vxcan0: tx address claim with dest, not broadcast [ 339.202283][T10799] loop1: detected capacity change from 0 to 128 [ 339.236354][T10799] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 339.285432][T10799] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 339.551107][ T3454] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 339.758844][T10814] vxcan0: tx address claim with dest, not broadcast [ 340.168395][T10826] loop0: detected capacity change from 0 to 164 [ 340.237502][T10826] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 340.339778][T10826] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 340.407560][T10826] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 340.489372][T10835] loop4: detected capacity change from 0 to 1024 [ 340.638040][T10837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1887'. [ 340.948293][T10845] WARNING! power/level is deprecated; use power/control instead [ 341.032042][T10850] loop3: detected capacity change from 0 to 512 [ 341.049222][T10850] EXT4-fs: Ignoring removed nobh option [ 341.117578][T10850] EXT4-fs (loop3): 1 truncate cleaned up [ 341.155628][T10850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.356148][T10860] loop4: detected capacity change from 0 to 256 [ 341.392607][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.450399][T10860] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 341.537052][T10862] loop0: detected capacity change from 0 to 512 [ 341.749830][T10862] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 341.799097][T10862] FAT-fs (loop0): Filesystem has been set read-only [ 341.896131][T10868] loop3: detected capacity change from 0 to 128 [ 342.296119][T10857] loop1: detected capacity change from 0 to 32768 [ 342.372612][T10857] (syz.1.1895,10857,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 342.398467][T10872] loop0: detected capacity change from 0 to 8192 [ 342.426525][T10872] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 342.442139][T10857] (syz.1.1895,10857,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 342.495593][T10872] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 342.522332][T10872] REISERFS (device loop0): using ordered data mode [ 342.543936][T10872] reiserfs: using flush barriers [ 342.579314][T10857] JBD2: Ignoring recovery information on journal [ 342.601762][T10872] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 342.717774][T10872] REISERFS (device loop0): checking transaction log (loop0) [ 342.750745][T10872] REISERFS (device loop0): Using r5 hash to sort names [ 342.763758][T10872] REISERFS (device loop0): using 3.5.x disk format [ 342.798259][T10857] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 342.826262][T10872] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 343.177960][ T5821] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 343.279386][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 343.386482][ T5821] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 343.441506][ T5821] usb 4-1: can't read configurations, error -71 [ 343.563465][T10879] loop4: detected capacity change from 0 to 32768 [ 343.584730][T10887] loop0: detected capacity change from 0 to 8192 [ 343.658633][T10879] blkno = 8ed2c, nblocks = 1 [ 343.687770][T10879] ERROR: (device loop4): dbFree: block to be freed is outside the map [ 343.687770][T10879] [ 343.736178][T10890] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 343.736178][T10890] [ 343.769413][T10890] ERROR: (device loop4): remounting filesystem as read-only [ 343.804736][T10879] ERROR: (device loop4): remounting filesystem as read-only [ 343.830534][T10879] ialloc: diAlloc returned -17! [ 343.844779][T10890] syz.4.1906: attempt to access beyond end of device [ 343.844779][T10890] loop4: rw=2049, sector=4680032, nr_sectors = 8 limit=32768 [ 344.039827][ T113] blkno = 8ed2c, nblocks = 1 [ 344.044476][ T113] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 344.044476][ T113] [ 344.738686][T10889] loop1: detected capacity change from 0 to 32768 [ 344.746411][T10889] XFS: noikeep mount option is deprecated. [ 344.846554][T10889] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 345.164104][T10889] XFS (loop1): Ending clean mount [ 345.217386][T10889] XFS (loop1): Quotacheck needed: Please wait. [ 345.336696][T10889] XFS (loop1): Quotacheck: Done. [ 345.695268][T10900] loop3: detected capacity change from 0 to 40427 [ 345.734278][T10900] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 345.752262][T10900] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 345.782453][T10900] F2FS-fs (loop3): Image doesn't support compression [ 345.802737][T10900] F2FS-fs (loop3): Image doesn't support compression [ 345.828958][T10900] F2FS-fs (loop3): invalid crc value [ 345.857544][ T5821] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 345.965242][ T5785] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 346.030725][T10900] F2FS-fs (loop3): Start checkpoint disabled! [ 346.068553][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 346.090891][T10900] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 346.099276][ T5821] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 346.117509][T10900] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 346.125171][ T5821] usb 5-1: config 0 has no interface number 0 [ 346.131726][ T5821] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 346.167391][ T5821] usb 5-1: config 0 interface 85 has no altsetting 0 [ 346.202901][ T5821] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 346.225300][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.250871][ T5821] usb 5-1: Product: syz [ 346.265359][ T5821] usb 5-1: Manufacturer: syz [ 346.276525][ T5821] usb 5-1: SerialNumber: syz [ 346.300915][ T5821] usb 5-1: config 0 descriptor?? [ 346.364727][ T1098] kworker/u4:8: attempt to access beyond end of device [ 346.364727][ T1098] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 346.383751][ T1098] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 346.963852][ T5821] appletouch 5-1:0.85: Geyser mode initialized. [ 346.975649][ T5821] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input36 [ 347.257943][ T8174] usb 5-1: USB disconnect, device number 10 [ 347.257967][ C1] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 347.377443][ T5819] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 347.396463][ T8174] appletouch 5-1:0.85: input: appletouch disconnected [ 347.600222][ T5819] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.610898][ T5819] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 347.640926][ T5819] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 347.670900][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.712873][ T5819] usb 1-1: config 0 descriptor?? [ 347.741594][ T5819] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 347.768461][ T5819] dvb-usb: bulk message failed: -22 (3/0) [ 347.807735][ T5819] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 347.841740][ T5819] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 347.869631][ T5819] usb 1-1: media controller created [ 347.875928][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 347.945215][T10941] dibusb: i2c wr: len=61 is too big! [ 347.945215][T10941] [ 347.977905][ T5819] dvb-usb: bulk message failed: -22 (6/0) [ 347.984511][ T5819] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 348.049877][ T5819] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 348.108664][ T5819] dvb-usb: schedule remote query interval to 150 msecs. [ 348.158110][ T5819] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 348.196012][ T5819] usb 1-1: USB disconnect, device number 16 [ 348.299881][ T5819] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 348.477127][T10964] loop3: detected capacity change from 0 to 1024 [ 348.678364][ T3433] hfsplus: b-tree write err: -5, ino 25 [ 348.684417][ T3433] hfsplus: b-tree write err: -5, ino 4 [ 348.725672][ T3433] hfsplus: b-tree write err: -5, ino 2 [ 348.788877][T10973] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 348.846135][T10973] rtrs_client L2075: : Failed to resolve address, err: -19 [ 348.914080][T10973] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 349.102993][T10979] loop3: detected capacity change from 0 to 512 [ 349.160278][T10979] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 349.203195][T10979] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 349.279454][T10979] EXT4-fs (loop3): 1 truncate cleaned up [ 349.319312][T10979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.573087][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.798896][T10998] loop4: detected capacity change from 0 to 2048 [ 349.877347][T10998] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.390693][ T28] audit: type=1807 audit(1790650411.189:61): action=measure uid>+ res=0 [ 350.397933][T11015] ima: policy update failed [ 350.402522][ T28] audit: type=1802 audit(1790650411.189:62): pid=11016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1960" res=0 errno=0 [ 350.431879][ T28] audit: type=1802 audit(1790650411.219:63): pid=11015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1960" res=0 errno=0 [ 350.461108][T11018] program syz.4.1962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.589972][T11020] rnbd_client L127: Can't parse path ip:127.0.0.1\ߐ?:bEz[۵>,: -22 [ 350.785236][ T28] audit: type=1326 audit(1790650411.579:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.3.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffdc945bac9 code=0x0 [ 351.063511][T11011] loop1: detected capacity change from 0 to 32768 [ 351.134641][T11011] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 351.421354][T11011] XFS (loop1): Ending clean mount [ 351.446991][T11011] XFS (loop1): Quotacheck needed: Please wait. [ 351.567105][T11050] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 351.587149][T11011] XFS (loop1): Quotacheck: Done. [ 351.637949][T11050] rtrs_client L2075: : Failed to resolve address, err: -19 [ 351.677834][T11050] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 351.799365][T11054] syz.3.1976[11054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.799525][T11054] syz.3.1976[11054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.928488][ T5785] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 352.573222][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'. [ 352.996627][T11085] loop1: detected capacity change from 0 to 1024 [ 353.137897][ T1098] hfsplus: b-tree write err: -5, ino 25 [ 353.144816][ T1098] hfsplus: b-tree write err: -5, ino 4 [ 353.157448][ T1098] hfsplus: b-tree write err: -5, ino 2 [ 353.298648][T11091] bond0: entered promiscuous mode [ 353.310830][T11091] bond_slave_0: entered promiscuous mode [ 353.323599][T11091] bond_slave_1: entered promiscuous mode [ 353.341769][T11091] batadv0: entered promiscuous mode [ 353.347358][ T5821] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 353.526300][T11079] loop4: detected capacity change from 0 to 32768 [ 353.554651][ T5821] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 353.577043][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 353.606155][T11079] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 353.615674][ T5821] usb 4-1: Product: syz [ 353.625902][ T5821] usb 4-1: Manufacturer: syz [ 353.653507][ T5821] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input38 [ 353.955773][ T5821] usb 4-1: USB disconnect, device number 19 [ 354.040310][T11079] XFS (loop4): Ending clean mount [ 354.092335][T11079] XFS (loop4): Quotacheck needed: Please wait. [ 354.172010][T11103] loop0: detected capacity change from 0 to 1024 [ 354.191585][T11079] XFS (loop4): Quotacheck: Done. [ 354.208398][T11103] EXT4-fs: Ignoring removed bh option [ 354.231297][T11103] EXT4-fs: Ignoring removed bh option [ 354.273457][T11103] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 354.335547][T11093] loop1: detected capacity change from 0 to 32768 [ 354.363504][T11103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.394898][T11093] [ 354.394898][T11093] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 354.394898][T11093] [ 354.529839][ T7833] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 354.545446][T11093] ERROR: (device loop1): diWrite: ixpxd invalid [ 354.545446][T11093] [ 354.558322][T11107] EXT4-fs error (device loop0): empty_inline_dir:1884: inode #12: block 7: comm syz.0.1995: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 354.601808][T11093] ERROR: (device loop1): txCommit: [ 354.601808][T11093] [ 354.632456][T11093] ERROR: (device loop1): dtReadFirst: btstack overrun [ 354.632456][T11093] [ 354.677750][T11093] btstack dump: [ 354.682796][T11107] EXT4-fs (loop0): Remounting filesystem read-only [ 354.693031][T11093] bn = 0, index = 0 [ 354.701314][T11107] EXT4-fs warning (device loop0): empty_inline_dir:1891: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 354.722946][T11093] bn = 0, index = 0 [ 354.744953][T11093] bn = 0, index = 0 [ 354.761904][T11093] bn = 0, index = 0 [ 354.777512][T11093] bn = 0, index = 0 [ 354.806366][T11093] bn = 0, index = 0 [ 354.820610][T11093] bn = 0, index = 0 [ 354.824762][T11093] bn = 0, index = 0 [ 354.928838][ T7976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.952543][ T1089] ERROR: (device loop1): diWrite: ixpxd invalid [ 354.952543][ T1089] [ 354.988222][ T1089] ERROR: (device loop1): txCommit: [ 354.988222][ T1089] [ 354.996868][ T1089] jfs_write_inode: jfs_commit_inode failed! [ 355.024973][ T5785] [ 355.024973][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 355.024973][ T5785] [ 355.079477][ T5785] [ 355.079477][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 355.079477][ T5785] [ 355.426331][T11121] loop0: detected capacity change from 0 to 1024 [ 355.617519][ T1089] hfsplus: b-tree write err: -5, ino 25 [ 355.623549][ T1089] hfsplus: b-tree write err: -5, ino 4 [ 355.649194][ T1089] hfsplus: b-tree write err: -5, ino 2 [ 355.813180][T11127] netlink: 'syz.3.2004': attribute type 30 has an invalid length. [ 356.062098][T11134] program syz.3.2009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.290900][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2011'. [ 356.358902][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2011'. [ 356.393335][T11143] loop4: detected capacity change from 0 to 128 [ 356.455631][T11143] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 356.515841][T11143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.701375][T11147] loop1: detected capacity change from 0 to 512 [ 356.744153][T11147] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 356.844829][T11147] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.2014: invalid indirect mapped block 83886080 (level 1) [ 356.917330][T11147] EXT4-fs (loop1): Remounting filesystem read-only [ 356.935173][T11147] EXT4-fs (loop1): 1 orphan inode deleted [ 356.967282][T11147] EXT4-fs (loop1): 1 truncate cleaned up [ 356.974667][T11147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.218815][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.450290][T11165] loop1: detected capacity change from 0 to 2048 [ 357.520603][T11165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.592238][T11165] ext4 filesystem being mounted at /478/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 357.762996][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.827862][T11176] loop0: detected capacity change from 0 to 512 [ 357.922172][T11176] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 357.977802][T11176] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.2024: corrupted inode contents [ 357.995301][T11179] loop1: detected capacity change from 0 to 1024 [ 358.003411][T11179] EXT4-fs: Ignoring removed bh option [ 358.009022][T11176] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 358.017817][ T5819] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 358.028407][T11179] EXT4-fs: Ignoring removed bh option [ 358.036250][T11176] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.2024: corrupted inode contents [ 358.056716][T11179] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 358.079913][T11176] EXT4-fs error (device loop0): ext4_evict_inode:302: inode #15: comm syz.0.2024: mark_inode_dirty error [ 358.110408][T11179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.130046][T11176] EXT4-fs (loop0): 1 orphan inode deleted [ 358.136893][T11176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.219902][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.253789][ T5819] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 358.271711][T11179] EXT4-fs error (device loop1): empty_inline_dir:1884: inode #12: block 7: comm syz.1.2025: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 358.306357][ T5819] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 358.316069][T11176] EXT4-fs (loop0): shut down requested (2) [ 358.332315][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.350891][T11179] EXT4-fs (loop1): Remounting filesystem read-only [ 358.372367][T11179] EXT4-fs warning (device loop1): empty_inline_dir:1891: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 358.398690][ T5819] usb 4-1: config 0 descriptor?? [ 358.421689][ T7976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.456437][ T5819] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 358.464255][ T5819] dvb-usb: bulk message failed: -22 (3/0) [ 358.548401][ T5819] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 358.578093][ T5819] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 358.585306][ T5819] usb 4-1: media controller created [ 358.591929][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.626472][T11174] dibusb: i2c wr: len=61 is too big! [ 358.626472][T11174] [ 358.639032][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 358.728504][ T5819] dvb-usb: bulk message failed: -22 (6/0) [ 358.735119][ T5819] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 358.797861][ T5819] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 358.831045][ T5819] dvb-usb: schedule remote query interval to 150 msecs. [ 358.855703][ T5819] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 358.897925][ T5819] usb 4-1: USB disconnect, device number 20 [ 359.006130][T11187] loop1: detected capacity change from 0 to 512 [ 359.053750][T11188] bond0: entered promiscuous mode [ 359.087784][ T5819] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 359.097711][T11188] bond_slave_0: entered promiscuous mode [ 359.111763][T11187] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.2028: iget: bad i_size value: 38620345925642 [ 359.137853][T11188] bond_slave_1: entered promiscuous mode [ 359.170994][T11188] batadv0: entered promiscuous mode [ 359.191037][T11187] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.2028: couldn't read orphan inode 15 (err -117) [ 359.205258][T11188] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 359.225977][T11187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.247495][T11188] Cannot create hsr debugfs directory [ 359.308798][T11187] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.2028: bg 0: block 5: invalid block bitmap [ 359.478172][T11187] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28 [ 359.517547][T11187] EXT4-fs (loop1): This should not happen!! Data will be lost [ 359.517547][T11187] [ 359.545197][T11187] EXT4-fs (loop1): Total free blocks count 0 [ 359.612942][T11187] EXT4-fs (loop1): Free/Dirty block details [ 359.642505][T11187] EXT4-fs (loop1): free_blocks=0 [ 359.652721][T11187] EXT4-fs (loop1): dirty_blocks=1 [ 359.670364][T11187] EXT4-fs (loop1): Block reservation details [ 359.693698][T11187] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 359.842751][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.895999][T11202] loop0: detected capacity change from 0 to 512 [ 359.970416][T11202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.027570][T11202] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.063505][T11206] netlink: 'syz.1.2035': attribute type 15 has an invalid length. [ 360.165730][T11202] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.2034: corrupted xattr block 33: invalid ea_ino [ 360.275753][T11209] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 360.315390][T11212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2038'. [ 360.372924][T11202] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 360.437571][T11202] EXT4-fs (loop0): This should not happen!! Data will be lost [ 360.437571][T11202] [ 360.492596][T11202] EXT4-fs (loop0): Total free blocks count 0 [ 360.518942][T11202] EXT4-fs (loop0): Free/Dirty block details [ 360.539234][T11202] EXT4-fs (loop0): free_blocks=65280 [ 360.551342][T11217] ipvlan2: entered promiscuous mode [ 360.559194][T11202] EXT4-fs (loop0): dirty_blocks=31 [ 360.575893][T11202] EXT4-fs (loop0): Block reservation details [ 360.582481][T11217] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 360.602188][T11202] EXT4-fs (loop0): i_reserved_data_blocks=31 [ 360.615628][T11217] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 360.653856][T11217] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 360.720124][ T7976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.802460][ T5819] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 360.976357][T11220] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2042'. [ 361.024037][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 361.032527][ T5819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.044222][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.097783][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 361.145665][ T5819] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 361.184750][ T5819] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.274136][ T5819] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 361.283469][ T5819] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 361.308609][ T5819] usb 2-1: Manufacturer: syz [ 361.326665][ T5819] usb 2-1: config 0 descriptor?? [ 361.747276][ T5819] rc_core: IR keymap rc-hauppauge not found [ 361.766679][ T5819] Registered IR keymap rc-empty [ 361.791716][ T5819] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.820674][T11215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.853124][T11215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.861922][ T5819] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.887922][T11234] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2048'. [ 361.922142][ T5819] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 361.982320][ T5819] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input40 [ 362.066756][ T5819] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.129458][T11239] macvtap1: entered promiscuous mode [ 362.137410][ T5819] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.207443][ T5819] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.260777][ T5819] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.357376][ T5819] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.397316][ T5819] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.457358][ T5819] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.520584][ T5819] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.583236][ T5819] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.605835][T11248] Bluetooth: MGMT ver 1.22 [ 362.627272][ T5819] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.689047][ T5819] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 362.727179][ T5819] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 362.791106][ T5819] usb 2-1: USB disconnect, device number 18 [ 363.264199][T11259] loop0: detected capacity change from 0 to 512 [ 363.347235][T11259] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 363.387239][T11259] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 363.443504][T11259] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 363.474958][T11259] System zones: 0-2, 18-18, 34-35 [ 363.500638][T11259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 363.585809][T11259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.104629][T11277] input: syz0 as /devices/virtual/input/input41 [ 364.325097][T11280] ima: policy update failed [ 364.340870][ T28] audit: type=1802 audit(1790650425.139:65): pid=11280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2070" res=0 errno=0 [ 365.467805][T11286] loop3: detected capacity change from 0 to 32768 [ 365.528703][T11286] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2071 (11286) [ 365.587189][T11286] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 365.652921][T11286] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 365.669788][T11286] BTRFS info (device loop3): setting nodatasum [ 365.686434][T11286] BTRFS info (device loop3): force zlib compression, level 3 [ 365.704591][T11286] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 365.717424][ T5819] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 365.730793][T11286] BTRFS info (device loop3): use lzo compression, level 0 [ 365.786986][T11286] BTRFS info (device loop3): turning on flush-on-commit [ 365.794211][T11286] BTRFS info (device loop3): enabling auto defrag [ 365.815700][T11286] BTRFS info (device loop3): max_inline at 4096 [ 365.830988][T11286] BTRFS info (device loop3): using free space tree [ 365.917689][ T5819] usb 1-1: Using ep0 maxpacket: 32 [ 365.926077][ T5819] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 365.935603][ T5819] usb 1-1: config 0 has no interface number 0 [ 365.954100][ T5819] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 365.979060][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.999405][T11286] BTRFS info (device loop3): enabling ssd optimizations [ 366.011081][ T5819] usb 1-1: Product: syz [ 366.015395][ T5819] usb 1-1: Manufacturer: syz [ 366.057227][ T5819] usb 1-1: SerialNumber: syz [ 366.093388][ T5819] usb 1-1: config 0 descriptor?? [ 366.130252][ T5819] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 366.399927][ T5819] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 366.483674][ T5819] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 366.768184][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 101 [ 366.797719][ T5781] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 366.984138][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 367.008579][ T5821] usb 1-1: USB disconnect, device number 17 [ 367.045937][ T5821] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 367.125103][ T5821] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 367.168762][ T5821] quatech2 1-1:0.51: device disconnected [ 367.355712][T11340] erspan0: entered promiscuous mode [ 367.441905][T11172] Set syz1 is full, maxelem 65536 reached [ 367.865906][T11353] ip_tables: iptables: counters copy to user failed while replacing table [ 368.082765][T11361] loop3: detected capacity change from 0 to 256 [ 369.506383][T11404] program syz.3.2117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.537163][ T55] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 369.730782][ T55] usb 2-1: config 0 has no interfaces? [ 369.745854][ T55] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 369.776566][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.804784][ T55] usb 2-1: config 0 descriptor?? [ 370.072013][ T55] usb 2-1: USB disconnect, device number 19 [ 371.116031][T11436] loop3: detected capacity change from 0 to 2048 [ 371.199621][T11436] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.248621][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 371.338675][T11442] loop4: detected capacity change from 0 to 2048 [ 371.426312][T11442] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.496044][T11446] netlink: 'syz.0.2137': attribute type 4 has an invalid length. [ 371.790811][T11450] tipc: Started in network mode [ 371.818029][T11450] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 371.857418][T11450] tipc: Enabling of bearer rejected, failed to enable media [ 372.305208][T11467] loop4: detected capacity change from 0 to 2048 [ 372.385996][T11467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.421044][ T55] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 372.548386][T11467] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 372.584442][T11467] EXT4-fs: journaled quota format not specified [ 372.607378][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 372.630786][ T55] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 372.660832][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.691061][ T55] usb 4-1: Product: syz [ 372.715965][ T55] usb 4-1: Manufacturer: syz [ 372.729210][ T55] usb 4-1: SerialNumber: syz [ 372.736753][ T7833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.987952][ T55] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 373.037196][ T55] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 373.063858][T11482] bond1: entered promiscuous mode [ 373.072763][ T55] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 373.102494][ T55] usb 4-1: media controller created [ 373.163398][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 373.225186][ T55] zl10353_read_register: readreg error (reg=127, ret==-71) [ 373.330509][ T55] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 373.372160][ T55] usb 4-1: USB disconnect, device number 21 [ 373.678951][T11478] loop0: detected capacity change from 0 to 32768 [ 373.718736][T11478] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2151 (11478) [ 373.781432][T11478] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.817210][T11478] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 373.842863][T11478] BTRFS info (device loop0): setting nodatasum [ 373.865249][T11478] BTRFS info (device loop0): force zlib compression, level 3 [ 373.893465][T11478] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 373.934861][T11478] BTRFS info (device loop0): use lzo compression, level 0 [ 373.974237][T11478] BTRFS info (device loop0): turning on flush-on-commit [ 373.998941][T11478] BTRFS info (device loop0): enabling auto defrag [ 374.037611][T11478] BTRFS info (device loop0): max_inline at 4096 [ 374.044291][T11478] BTRFS info (device loop0): using free space tree [ 374.267156][T11478] BTRFS info (device loop0): enabling ssd optimizations [ 374.526299][T11522] loop4: detected capacity change from 0 to 256 [ 374.543007][T11523] loop3: detected capacity change from 0 to 1024 [ 374.555772][T11522] exfat: Deprecated parameter 'namecase' [ 374.577229][T11522] exfat: Deprecated parameter 'namecase' [ 374.597933][T11522] exfat: Deprecated parameter 'namecase' [ 374.638587][T11523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.692603][T11522] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 374.778401][ T7976] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 374.861590][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.082622][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2176'. [ 376.211401][T11564] loop3: detected capacity change from 0 to 128 [ 376.250939][T11564] EXT4-fs: Ignoring removed i_version option [ 376.299222][T11564] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 376.358687][T11564] ext4 filesystem being mounted at /566/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 376.736028][ T5781] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.769052][T11579] loop4: detected capacity change from 0 to 512 [ 376.817837][T11579] EXT4-fs (loop4): Test dummy encryption mode enabled [ 376.824870][T11579] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 376.893458][T11579] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.2184: bad orphan inode 131083 [ 376.950890][T11579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.172317][ T7833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.387121][ T55] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 377.517932][T11575] loop0: detected capacity change from 0 to 32768 [ 377.544960][T11575] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2182 (11575) [ 377.609394][ T55] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 377.632310][T11575] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 377.648828][ T55] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.682891][T11575] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 377.702234][ T55] usb 2-1: config 0 interface 0 has no altsetting 0 [ 377.719069][T11575] BTRFS info (device loop0): using free space tree [ 377.731769][ T55] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 377.762467][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.819550][ T55] usb 2-1: config 0 descriptor?? [ 377.851103][T11587] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 377.926144][T11575] BTRFS info (device loop0): enabling ssd optimizations [ 377.949412][T11575] BTRFS info (device loop0): auto enabling async discard [ 378.323979][ T55] apple 0003:05AC:027A.000F: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 378.358334][ T7976] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 378.387990][ T55] input: HID 05ac:027a as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:027A.000F/input/input42 [ 378.612376][ T55] apple 0003:05AC:027A.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:027a] on usb-dummy_hcd.1-1/input0 [ 379.081520][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.418382][T11639] loop4: detected capacity change from 0 to 128 [ 379.468050][T11641] loop0: detected capacity change from 0 to 256 [ 379.533720][T11641] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 379.763030][ T8174] usb 2-1: reset full-speed USB device number 20 using dummy_hcd [ 379.896277][T11628] loop3: detected capacity change from 0 to 32768 [ 380.178179][ T5819] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 380.323511][T11643] loop4: detected capacity change from 0 to 32768 [ 380.346618][T11643] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2205 (11643) [ 380.394296][ T5819] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.413825][T11643] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 380.435344][ T5819] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.467814][T11643] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 380.477728][ T5819] usb 1-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 380.497136][T11643] BTRFS info (device loop4): setting nodatasum [ 380.511461][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.521502][T11643] BTRFS info (device loop4): force zlib compression, level 3 [ 380.533596][T11649] loop1: detected capacity change from 0 to 128 [ 380.540229][T11643] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 380.561505][ T5819] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 380.571097][T11643] BTRFS info (device loop4): use lzo compression, level 0 [ 380.580016][T11643] BTRFS info (device loop4): turning on flush-on-commit [ 380.590390][T11643] BTRFS info (device loop4): enabling auto defrag [ 380.635713][T11649] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.660660][T11643] BTRFS info (device loop4): max_inline at 4096 [ 380.707323][ T55] usb 2-1: USB disconnect, device number 20 [ 380.727108][T11643] BTRFS info (device loop4): using free space tree [ 380.778936][T11649] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.007532][T11643] BTRFS info (device loop4): enabling ssd optimizations [ 381.029848][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.308105][ T5819] usb 1-1: USB disconnect, device number 18 [ 381.378042][ T2324] usb 1-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 381.417131][ T2324] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 381.517560][ T7833] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 381.836974][ T55] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 382.011785][T11686] netlink: 'syz.0.2215': attribute type 3 has an invalid length. [ 382.041946][T11686] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2215'. [ 382.061586][ T55] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 382.089813][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.127033][ T55] usb 4-1: config 0 descriptor?? [ 382.155966][ T55] cp210x 4-1:0.0: cp210x converter detected [ 382.409389][ T5838] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 382.420498][T11692] loop0: detected capacity change from 0 to 256 [ 382.474224][T11692] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 382.522254][ T2324] pvrusb2: request_firmware fatal error with code=-110 [ 382.561879][ T2324] pvrusb2: Failure uploading firmware1 [ 382.569022][ T2324] pvrusb2: Device initialization was not successful. [ 382.576097][ T2324] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 382.579402][ T55] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 382.610132][ T2324] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 382.629740][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 382.642527][ T5819] pvrusb2: Device being rendered inoperable [ 382.668124][ T55] usb 4-1: cp210x converter now attached to ttyUSB0 [ 382.681101][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 382.719196][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 382.758669][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 382.789929][ T5838] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 382.812143][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.856015][ T5838] usb 5-1: Product: syz [ 382.871157][ T5838] usb 5-1: Manufacturer: syz [ 382.890915][ T5838] usb 5-1: SerialNumber: syz [ 382.918501][ T5838] usb 5-1: config 0 descriptor?? [ 382.940726][ T55] usb 4-1: USB disconnect, device number 22 [ 382.959534][ T55] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 383.021249][ T55] cp210x 4-1:0.0: device disconnected [ 383.179495][ T5838] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 383.253056][T11699] loop0: detected capacity change from 0 to 2048 [ 383.328884][T11702] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.457122][ T5821] usb 5-1: USB disconnect, device number 11 [ 384.539339][T11737] loop1: detected capacity change from 0 to 256 [ 384.621035][T11737] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 384.659714][T11741] loop0: detected capacity change from 0 to 256 [ 385.016952][ T55] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 385.967773][T11754] loop0: detected capacity change from 0 to 131072 [ 385.986960][T11754] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 385.995764][T11754] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 386.007535][T11754] F2FS-fs (loop0): invalid crc value [ 386.025396][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 386.049164][T11754] F2FS-fs (loop0): Found nat_bits in checkpoint [ 386.111196][T11754] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 386.120281][T11754] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 386.152781][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 386.197153][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 386.230006][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 386.265895][ T55] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 386.290524][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.319009][ T55] usb 4-1: Product: syz [ 386.347795][ T55] usb 4-1: Manufacturer: syz [ 386.357675][ T55] usb 4-1: SerialNumber: syz [ 386.390932][ T55] usb 4-1: config 0 descriptor?? [ 386.426512][T11765] netlink: 'syz.1.2250': attribute type 1 has an invalid length. [ 386.436354][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2250'. [ 386.446227][T11765] netlink: 'syz.1.2250': attribute type 1 has an invalid length. [ 386.455147][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2250'. [ 386.465256][T11765] iwpm_send_hello: Unable to send a nlmsg [ 386.626609][ T55] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 386.920037][ T5838] usb 4-1: USB disconnect, device number 23 [ 387.292840][T11778] Invalid input. Must be >= 2304 [ 387.879662][T11794] loop1: detected capacity change from 0 to 128 [ 387.908831][ T5821] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 387.924679][T11794] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 387.962747][T11794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.106082][ T5821] usb 5-1: Using ep0 maxpacket: 8 [ 388.147705][ T5821] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 388.174264][ T5821] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 388.213533][ T5821] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 388.261499][ T5821] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.313953][ T5821] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 388.364559][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.616367][ T5821] usb 5-1: GET_CAPABILITIES returned 0 [ 388.636569][ T5821] usbtmc 5-1:16.0: can't read capabilities [ 388.882475][ T55] usb 5-1: USB disconnect, device number 12 [ 389.096951][ T5821] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 389.171559][T11810] loop1: detected capacity change from 0 to 32768 [ 389.197075][T11810] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2267 (11810) [ 389.250966][T11810] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 389.333533][T11810] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 389.353776][T11810] BTRFS info (device loop1): setting nodatasum [ 389.364428][T11810] BTRFS info (device loop1): force zlib compression, level 3 [ 389.381762][T11810] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 389.392501][T11810] BTRFS info (device loop1): use lzo compression, level 0 [ 389.401976][ T5821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 389.413646][ T5821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 389.423938][T11810] BTRFS info (device loop1): turning on flush-on-commit [ 389.432281][T11810] BTRFS info (device loop1): enabling auto defrag [ 389.458586][ T5821] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 389.468368][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 389.476563][ T5821] usb 4-1: Product: syz [ 389.481546][T11810] BTRFS info (device loop1): max_inline at 4096 [ 389.501953][T11810] BTRFS info (device loop1): using free space tree [ 389.523714][ T5821] usb 4-1: Manufacturer: syz [ 389.561865][ T5821] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 389.824386][T11810] BTRFS info (device loop1): enabling ssd optimizations [ 390.073316][T11836] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 390.113044][T11836] ucsi_ccg: probe of 0-0008 failed with error -110 [ 390.148834][T11836] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 390.264844][ T5785] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 390.387051][ T5821] mos7840: probe of ttyUSB0 failed with error -71 [ 390.404630][ T5821] usb 4-1: USB disconnect, device number 24 [ 390.425404][ T5821] mos7840 4-1:1.0: device disconnected [ 390.896963][ T5838] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 391.077100][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 391.091566][ T5838] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 391.109539][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.153696][ T5838] usb 5-1: config 0 descriptor?? [ 391.183083][T11848] loop3: detected capacity change from 0 to 164 [ 391.376846][ T5838] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 391.404561][ T5838] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 391.446859][ T5838] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 391.475427][ T5838] usb 5-1: media controller created [ 391.541431][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.611759][ T5838] az6027: usb out operation failed. (-71) [ 391.642855][ T5838] az6027: usb out operation failed. (-71) [ 391.662627][ T5838] stb0899_attach: Driver disabled by Kconfig [ 391.682713][ T5838] az6027: no front-end attached [ 391.682713][ T5838] [ 391.731666][ T5838] az6027: usb out operation failed. (-71) [ 391.755023][ T5838] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 391.819101][ T5838] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43 [ 391.857602][ T5838] dvb-usb: schedule remote query interval to 400 msecs. [ 391.896333][ T5838] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 391.957195][ T5838] usb 5-1: USB disconnect, device number 13 [ 392.108183][ T5838] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 392.358831][T11858] loop4: detected capacity change from 0 to 128 [ 392.736145][T11850] loop3: detected capacity change from 0 to 40427 [ 392.771327][T11863] loop1: detected capacity change from 0 to 4096 [ 392.837351][T11850] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 392.847200][T11850] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 392.869551][T11850] F2FS-fs (loop3): invalid crc value [ 392.886072][T11863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.037875][ T28] audit: type=1800 audit(1790650453.838:66): pid=11863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2287" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 393.131890][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 393.169253][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2289'. [ 393.207281][T11872] netlink: 'syz.4.2289': attribute type 18 has an invalid length. [ 393.257049][T11850] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 393.274522][T11850] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 393.324056][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.648227][ T5781] syz-executor: attempt to access beyond end of device [ 393.648227][ T5781] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 393.722460][ T5781] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 395.670935][T11914] loop1: detected capacity change from 0 to 64 [ 395.832566][T11914] hfs: request for non-existent node 131072 in B*Tree [ 395.882861][T11914] hfs: request for non-existent node 131072 in B*Tree [ 395.992782][T11917] loop3: detected capacity change from 0 to 256 [ 396.577192][T11925] program syz.4.2312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.717463][ T28] audit: type=1400 audit(1790650458.518:67): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=11949 comm="syz.4.2323" name="p" offset=64 [ 398.038190][T11955] loop4: detected capacity change from 0 to 8192 [ 398.132422][ T28] audit: type=1804 audit(1790650458.928:68): pid=11955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2325" name="/newroot/379/bus/bus" dev="loop4" ino=1048754 res=1 errno=0 [ 398.191511][ T28] audit: type=1800 audit(1790650458.928:69): pid=11955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2325" name="bus" dev="loop4" ino=1048754 res=0 errno=0 [ 398.355639][T11959] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2327'. [ 398.652521][T11961] loop4: detected capacity change from 0 to 4096 [ 398.697513][T11961] EXT4-fs: inline encryption not supported [ 398.734211][T11961] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 398.785856][T11961] EXT4-fs (loop4): Test dummy encryption mode enabled [ 398.829228][T11961] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 398.862745][T11961] System zones: 0-5 [ 398.870826][T11814] Set syz1 is full, maxelem 65536 reached [ 398.919466][T11961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.033055][T11957] loop1: detected capacity change from 0 to 32768 [ 399.148141][ T28] audit: type=1800 audit(1790650459.938:70): pid=11957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2326" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 399.151729][ T7833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.215346][ T28] audit: type=1800 audit(1790650459.988:71): pid=11957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2326" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 399.703897][T11981] loop0: detected capacity change from 0 to 1024 [ 399.711824][T11979] loop4: detected capacity change from 0 to 4096 [ 400.001780][T11983] loop3: detected capacity change from 0 to 256 [ 400.030986][T11983] exfat: Deprecated parameter 'utf8' [ 400.150612][T11983] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d) [ 400.195345][T11979] ntfs3: loop4: failed to convert "0080" to koi8-ru [ 400.287163][T11979] ntfs3: loop4: failed to convert name for inode 1e. [ 400.296469][T11979] ntfs3: loop4: ino=1f, mi_enum_attr [ 400.316229][T11979] ntfs3: loop4: failed to convert "256c" to koi8-ru [ 400.346778][T11986] ieee802154 phy0 wpan0: encryption failed: -22 [ 401.122336][T11994] loop4: detected capacity change from 0 to 32768 [ 401.147766][T11994] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 401.232139][T11994] XFS (loop4): Ending clean mount [ 401.246881][ T55] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 401.325602][T11994] XFS (loop4): User initiated shutdown received. [ 401.343485][T12013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2346'. [ 401.353803][T11994] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 401.385799][T11994] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 401.438603][ T7833] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 401.468544][ T55] usb 4-1: not running at top speed; connect to a high speed hub [ 401.483936][ T55] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.519926][ T55] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 401.555717][T12016] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 401.564428][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.604229][ T55] usb 4-1: Found UVC 1.00 device (046d:0825) [ 402.021980][T12020] nbd1: detected capacity change from 0 to 63 [ 402.045388][ T55] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 402.086917][ T55] uvcvideo 4-1:1.1: No frame descriptor found for the default format. [ 402.099000][ T5784] block nbd1: Receive control failed (result -104) [ 402.116184][ T7151] block nbd1: Dead connection, failed to find a fallback [ 402.124806][ T7151] block nbd1: shutting down sockets [ 402.132744][ T7151] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 402.144549][ T7151] Buffer I/O error on dev nbd1, logical block 1, async page read [ 402.152649][ T7151] Buffer I/O error on dev nbd1, logical block 2, async page read [ 402.160564][ T7151] Buffer I/O error on dev nbd1, logical block 3, async page read [ 402.170738][ T55] uvcvideo 4-1:1.1: Failed to initialize the device (-22). [ 402.277129][T12022] loop1: detected capacity change from 0 to 4096 [ 402.296802][T12022] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 402.373511][ T5819] usb 4-1: USB disconnect, device number 25 [ 402.636879][ T55] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 402.846751][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 402.872405][ T55] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 402.897768][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.940942][ T55] usb 5-1: Product: syz [ 402.960402][ T55] usb 5-1: Manufacturer: syz [ 402.965148][ T55] usb 5-1: SerialNumber: syz [ 403.329968][T12044] loop0: detected capacity change from 0 to 4096 [ 403.404673][T12042] loop1: detected capacity change from 0 to 8192 [ 403.448710][T12044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.514477][T12042] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 403.574794][T12042] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 403.622343][T12042] REISERFS (device loop1): using ordered data mode [ 403.654030][T12042] reiserfs: using flush barriers [ 403.710171][T12042] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 403.759430][T12044] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.2361: corrupted inode contents [ 403.777789][T12042] REISERFS (device loop1): checking transaction log (loop1) [ 403.810951][T12042] REISERFS (device loop1): Using r5 hash to sort names [ 403.835908][ T55] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 403.849901][T12044] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #15: comm syz.0.2361: mark_inode_dirty error [ 403.862704][T12042] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 403.878281][ T55] usb 5-1: USB disconnect, device number 14 [ 403.913442][T12044] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.2361: corrupted inode contents [ 403.988650][T12044] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #15: comm syz.0.2361: mark_inode_dirty error [ 404.047216][T12044] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.2361: corrupted inode contents [ 404.093229][T12044] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #15: comm syz.0.2361: mark_inode_dirty error [ 404.135071][T12044] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.2361: corrupted inode contents [ 404.197784][T12044] EXT4-fs error (device loop0): ext4_truncate:4314: inode #15: comm syz.0.2361: mark_inode_dirty error [ 404.243507][T12044] EXT4-fs error (device loop0) in ext4_setattr:5695: Corrupt filesystem [ 404.267627][T12044] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.2361: corrupted inode contents [ 404.322130][T12044] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 404.425075][ T28] audit: type=1400 audit(1790650465.218:72): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=12061 comm="syz.3.2368" name="p" offset=48 [ 404.815513][T12076] input: syz1 as /devices/virtual/input/input44 [ 405.028364][ T7976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.221900][T12084] loop4: detected capacity change from 0 to 64 [ 405.316995][T12087] loop0: detected capacity change from 0 to 512 [ 405.343893][ T28] audit: type=1800 audit(1790650466.138:73): pid=12084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2380" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 405.414107][T12087] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2379: invalid indirect mapped block 10 (level 1) [ 405.457737][T12087] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2379: invalid indirect mapped block 8 (level 1) [ 405.505330][T12087] EXT4-fs (loop0): 1 truncate cleaned up [ 405.530977][T12087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.576764][T12089] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 405.728198][ T7976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.241938][T12107] loop0: detected capacity change from 0 to 512 [ 406.259865][T12107] EXT4-fs: Ignoring removed nomblk_io_submit option [ 406.309155][T12107] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 406.353950][T12107] EXT4-fs (loop0): orphan cleanup on readonly fs [ 406.389061][T12107] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 406.418649][T12107] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 406.477966][T12107] EXT4-fs (loop0): 1 truncate cleaned up [ 406.499447][T12107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 406.512703][ T55] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 406.654442][T12107] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 406.720597][ T55] usb 4-1: Using ep0 maxpacket: 8 [ 406.748538][ T55] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 406.766683][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.811488][ T7976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.835754][ T55] pvrusb2: Hardware description: Terratec Grabster AV400 [ 406.848343][ T55] pvrusb2: ********** [ 406.876731][ T55] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 406.894845][T12097] loop4: detected capacity change from 0 to 40427 [ 406.911209][ T55] pvrusb2: Important functionality might not be entirely working. [ 406.938616][ T55] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 406.952918][T12097] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 406.981117][T12097] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 406.989714][ T55] pvrusb2: ********** [ 407.015155][T12097] F2FS-fs (loop4): build fault injection attr: rate: 64, type: 0x7ffff [ 407.056847][T12097] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x5 [ 407.073127][ T2324] pvrusb2: Invalid write control endpoint [ 407.137170][T12097] F2FS-fs (loop4): invalid crc value [ 407.156205][T12103] loop1: detected capacity change from 0 to 40427 [ 407.234158][T12103] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 407.258317][T12097] F2FS-fs (loop4): Found nat_bits in checkpoint [ 407.286803][T12103] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 407.338793][T12106] pvrusb2: Invalid write control endpoint [ 407.362783][T12103] F2FS-fs (loop1): invalid crc value [ 407.371512][ T5838] usb 4-1: USB disconnect, device number 26 [ 407.372802][ T2324] pvrusb2: Invalid write control endpoint [ 407.405749][ T2324] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 407.441979][ T2324] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 407.471879][ T2324] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 407.491053][T12097] F2FS-fs (loop4): Start checkpoint disabled! [ 407.505457][ T2324] pvrusb2: Device being rendered inoperable [ 407.534400][ T2324] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 407.557869][ T2324] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 407.599375][ T2324] pvrusb2: Attached sub-driver cx25840 [ 407.602434][T12097] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 407.604876][ T2324] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 407.604927][ T2324] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 407.675755][T12103] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 407.713765][T12103] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 407.732015][T12097] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 407.875979][ T28] audit: type=1800 audit(1790650468.668:74): pid=12097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2385" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 407.908622][T12097] F2FS-fs (loop4): inject kmalloc in f2fs_kmalloc of f2fs_getxattr+0xd97/0x1150 [ 408.028940][ T5785] syz-executor: attempt to access beyond end of device [ 408.028940][ T5785] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 408.088510][ T5785] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 408.143551][ T1098] kworker/u4:8: attempt to access beyond end of device [ 408.143551][ T1098] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 408.157975][ T1098] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 408.165279][ T1098] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 408.173031][ T1098] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 408.464948][T12115] loop0: detected capacity change from 0 to 40427 [ 408.504564][T12115] F2FS-fs (loop0): invalid crc value [ 408.553148][T12115] F2FS-fs (loop0): Found nat_bits in checkpoint [ 408.743186][T12115] F2FS-fs (loop0): Start checkpoint disabled! [ 408.827233][T12115] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 409.236220][ T3433] kworker/u4:10: attempt to access beyond end of device [ 409.236220][ T3433] loop0: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 409.293083][ T3433] kworker/u4:10: attempt to access beyond end of device [ 409.293083][ T3433] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 409.312741][ T3433] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 409.337417][ T3433] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 409.388010][ T5838] IPVS: starting estimator thread 0... [ 409.520821][T12139] IPVS: using max 7 ests per chain, 16800 per kthread [ 409.624534][T12144] loop3: detected capacity change from 0 to 128 [ 409.678579][T12146] loop1: detected capacity change from 0 to 164 [ 409.687453][T12144] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 409.720573][T12144] hpfs: filesystem error: improperly stopped [ 409.747893][T12144] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 409.809824][T12144] hpfs: You really don't want any checks? You are crazy... [ 409.836875][T12144] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 409.886800][T12144] hpfs: code page support is disabled [ 409.893198][T12144] hpfs: hpfs_map_4sectors(): unaligned read [ 409.938278][T12144] hpfs: hpfs_map_4sectors(): unaligned read [ 409.944603][T12144] hpfs: filesystem error: unable to find root dir [ 410.119224][T12144] hpfs: hpfs_map_4sectors(): unaligned read [ 410.296757][ T5819] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 410.401339][T12138] loop4: detected capacity change from 0 to 32768 [ 410.410005][T12155] loop0: detected capacity change from 0 to 64 [ 410.474021][T12138] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 410.499025][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 410.532645][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 410.575415][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 410.636690][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 410.677365][T12138] XFS (loop4): Ending clean mount [ 410.703767][ T5819] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 410.733623][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.782892][ T5819] usb 2-1: Product: syz [ 410.796664][ T5819] usb 2-1: Manufacturer: syz [ 410.801326][ T5819] usb 2-1: SerialNumber: syz [ 410.848054][ T5819] usb 2-1: config 0 descriptor?? [ 410.865790][T12169] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 411.036245][ T7833] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 411.147109][ T5819] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 411.458795][T12148] usb 2-1: Couldn't submit interrupt_out_urb -90 [ 411.493366][ T5819] usb 2-1: USB disconnect, device number 21 [ 411.945257][T12191] gadgetfs: bound to dummy_udc driver [ 412.344906][T12199] input: syz1 as /devices/virtual/input/input45 [ 412.536879][T12203] binder: 12202:12203 ioctl c0306201 200000004a40 returned -11 [ 412.624009][T12183] loop0: detected capacity change from 0 to 32768 [ 412.754902][T12183] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 412.778973][T12213] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2428'. [ 412.827651][T12213] netlink: 'syz.1.2428': attribute type 12 has an invalid length. [ 412.855285][T12213] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2428'. [ 412.915134][T12183] XFS (loop0): Ending clean mount [ 413.101928][ T7976] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 413.177337][T12225] netlink: 'syz.3.2432': attribute type 5 has an invalid length. [ 413.216745][T12225] netlink: 'syz.3.2432': attribute type 1 has an invalid length. [ 413.518080][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2435'. [ 413.615621][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2436'. [ 413.887754][T12237] loop1: detected capacity change from 0 to 512 [ 413.935428][T12237] EXT4-fs error (device loop1): __ext4_iget:5091: inode #11: block 1: comm syz.1.2438: invalid block [ 413.994530][T12237] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.2438: couldn't read orphan inode 11 (err -117) [ 414.051771][T12237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.179868][T12237] EXT4-fs error (device loop1): ext4_add_entry:2488: inode #2: comm syz.1.2438: Directory hole found for htree leaf block 0 [ 414.195215][T12221] loop4: detected capacity change from 0 to 40427 [ 414.239751][T12221] F2FS-fs (loop4): Corrupted extension count (327717 + 1 > 64) [ 414.286680][T12221] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 414.326978][T12221] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 414.383921][T12221] F2FS-fs (loop4): invalid crc value [ 414.393344][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.432020][T12221] F2FS-fs (loop4): Found nat_bits in checkpoint [ 414.454724][T12252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2443'. [ 414.573195][T12252] vlan2: entered promiscuous mode [ 414.609664][T12252] macvlan1: entered promiscuous mode [ 414.660724][T12255] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2444'. [ 414.684338][T12221] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 414.716602][T12221] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 414.940809][T12221] syz.4.2430: attempt to access beyond end of device [ 414.940809][T12221] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 415.003809][T12260] loop1: detected capacity change from 0 to 4096 [ 415.043276][T12221] syz.4.2430: attempt to access beyond end of device [ 415.043276][T12221] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 415.140931][T12267] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 415.269558][ T7833] syz-executor: attempt to access beyond end of device [ 415.269558][ T7833] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 415.336607][ T7833] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 415.453548][ T5785] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 415.465104][T12272] loop3: detected capacity change from 0 to 1024 [ 415.897879][T12282] program syz.3.2456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 416.127325][T12287] ptp ptp0: new virtual clock ptp1 [ 416.160648][T12287] ptp ptp0: new virtual clock ptp2 [ 416.183429][T12287] ptp ptp0: new virtual clock ptp3 [ 416.217749][T12287] ptp ptp0: new virtual clock ptp4 [ 416.244466][T12287] ptp ptp0: new virtual clock ptp5 [ 416.258228][T12287] ptp ptp0: guarantee physical clock free running [ 416.487226][T12303] loop1: detected capacity change from 0 to 512 [ 416.550830][T12303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.832071][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.298806][ T5821] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 417.306779][ T5838] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 417.521863][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 417.527690][ T5838] usb 1-1: Using ep0 maxpacket: 32 [ 417.547691][ T5838] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 417.557875][ T5821] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 417.573340][ T5838] usb 1-1: config 2 has no interface number 0 [ 417.586549][ T5821] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 417.611087][ T5838] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 417.626582][ T5821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 417.646590][ T5838] usb 1-1: config 2 interface 88 has no altsetting 0 [ 417.673360][ T5821] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 417.684580][ T5838] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 417.704646][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.725054][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 417.756537][ T5821] usb 4-1: Product: syz [ 417.762294][ T5838] usb 1-1: Product: syz [ 417.766750][ T5821] usb 4-1: Manufacturer: syz [ 417.776199][ T5838] usb 1-1: Manufacturer: syz [ 417.783091][ T5821] usb 4-1: SerialNumber: syz [ 417.794186][ T5838] usb 1-1: SerialNumber: syz [ 417.805488][ T5821] usb 4-1: config 0 descriptor?? [ 417.824172][T12316] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 417.883652][T12319] loop1: detected capacity change from 0 to 40427 [ 417.917546][T12319] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 417.945840][T12319] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 417.975638][T12319] F2FS-fs (loop1): build fault injection attr: rate: 64, type: 0x7ffff [ 417.994385][T12319] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x5 [ 418.024830][T12319] F2FS-fs (loop1): invalid crc value [ 418.073039][T12319] F2FS-fs (loop1): Found nat_bits in checkpoint [ 418.087581][T12316] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 418.230882][T12319] F2FS-fs (loop1): Start checkpoint disabled! [ 418.274956][ T5821] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 418.296956][T12319] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 418.304279][T12319] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 418.464201][ T28] audit: type=1800 audit(1790650479.258:75): pid=12319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2467" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 418.490469][T12319] F2FS-fs (loop1): inject kmalloc in f2fs_kmalloc of f2fs_getxattr+0xd97/0x1150 [ 418.683905][ T5821] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 418.704234][ T3480] kworker/u4:12: attempt to access beyond end of device [ 418.704234][ T3480] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 418.725180][ T3480] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 418.734214][ T3480] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 418.746783][ T5838] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 418.752650][ T3480] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 418.778719][ T5821] usb 4-1: USB disconnect, device number 27 [ 418.797217][ T5838] asix: probe of 1-1:2.88 failed with error -71 [ 418.854949][ T5838] usb 1-1: USB disconnect, device number 19 [ 419.111573][T12347] mkiss: ax0: crc mode is auto. [ 419.904012][T12370] loop3: detected capacity change from 0 to 128 [ 419.988729][T12370] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 420.027675][T12370] hpfs: filesystem error: improperly stopped [ 420.060194][T12370] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 420.096739][T12370] hpfs: You really don't want any checks? You are crazy... [ 420.135720][T12370] hpfs: hpfs_map_sector(): read error [ 420.145592][T12370] hpfs: code page support is disabled [ 420.166776][T12370] hpfs: hpfs_map_4sectors(): unaligned read [ 420.196754][T12370] hpfs: hpfs_map_4sectors(): unaligned read [ 420.227306][T12370] hpfs: filesystem error: unable to find root dir [ 420.666982][T12380] zero sized request [ 420.929441][T12363] loop0: detected capacity change from 0 to 40427 [ 420.939484][T12372] loop1: detected capacity change from 0 to 32768 [ 420.963281][T12363] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 420.987106][T12372] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2492 (12372) [ 421.008740][T12363] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 421.032879][T12363] F2FS-fs (loop0): build fault injection attr: rate: 64, type: 0x7ffff [ 421.064339][T12363] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x5 [ 421.096276][T12363] F2FS-fs (loop0): invalid crc value [ 421.105236][T12372] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 421.135860][T12372] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 421.161850][T12363] F2FS-fs (loop0): Found nat_bits in checkpoint [ 421.181825][T12372] BTRFS info (device loop1): disabling tree log [ 421.200422][T12372] BTRFS info (device loop1): using free space tree [ 421.366210][T12372] BTRFS info (device loop1): enabling ssd optimizations [ 421.377106][T12363] F2FS-fs (loop0): Start checkpoint disabled! [ 421.412197][T12372] BTRFS info (device loop1): auto enabling async discard [ 421.526765][T12363] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 421.542459][T12363] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 421.746584][ T28] audit: type=1800 audit(1790650482.538:76): pid=12363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2488" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 421.773904][T12363] F2FS-fs (loop0): inject kmalloc in f2fs_kmalloc of f2fs_getxattr+0xd97/0x1150 [ 422.131993][ T11] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 422.166304][ T3433] kworker/u4:10: attempt to access beyond end of device [ 422.166304][ T3433] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 422.214028][ T3433] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 422.223720][ T3433] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 422.237819][ T3433] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 422.416954][ T5785] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 423.268875][T12443] loop0: detected capacity change from 0 to 512 [ 423.298152][T12443] EXT4-fs: Ignoring removed orlov option [ 423.373432][T12443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.392245][T12432] loop3: detected capacity change from 0 to 32768 [ 423.415042][T12443] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.448706][T12432] (syz.3.2509,12432,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 423.483870][T12432] (syz.3.2509,12432,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 423.598620][T12432] JBD2: Ignoring recovery information on journal [ 423.638969][ T7976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.862604][T12432] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 423.942644][ T1089] ocfs2: Finishing quota recovery on device (7,3) for slot 0 [ 424.216234][T12466] __sock_release: fasync list not empty! [ 424.233886][T12464] loop1: detected capacity change from 0 to 4096 [ 424.320928][T12464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.566228][ T5781] ocfs2: Unmounting device (7,3) on (node local) [ 424.752596][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.365062][T12488] loop4: detected capacity change from 0 to 32768 [ 426.391754][T12506] loop0: detected capacity change from 0 to 1024 [ 426.490376][T12488] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 426.684401][T12506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 426.829501][T12506] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.102340][T12506] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 3: comm syz.0.2538: lblock 3 mapped to illegal pblock 3 (length 3) [ 428.301337][T12506] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 428.399129][T12506] EXT4-fs (loop0): This should not happen!! Data will be lost [ 428.399129][T12506] [ 428.570587][T12519] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 8: comm syz.0.2538: lblock 8 mapped to illegal pblock 8 (length 8) [ 428.736017][T12519] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 428.792548][T12519] EXT4-fs (loop0): This should not happen!! Data will be lost [ 428.792548][T12519] [ 428.947950][T12488] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 429.961740][T12488] XFS (loop4): Starting recovery (logdev: internal) [ 430.665289][T12488] XFS (loop4): Ending recovery (logdev: internal) [ 431.487201][T12448] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 431.809290][ T7976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 432.230090][ T1188] block nbd1: Possible stuck request ffff888021e58000: control (read@0,1024B). Runtime 30 seconds [ 432.959622][ T7833] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 435.823563][T12526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2543'. [ 440.529940][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.279740][T12548] loop3: detected capacity change from 0 to 164 [ 448.444452][ T5819] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 448.733346][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 448.892093][ T5819] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 448.933021][ T5819] usb 2-1: config 0 has no interface number 0 [ 449.246917][ T5819] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 449.296017][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.377226][ T5819] usb 2-1: Product: syz [ 449.381674][ T5819] usb 2-1: Manufacturer: syz [ 449.437434][ T5819] usb 2-1: SerialNumber: syz [ 449.653418][ T5819] usb 2-1: config 0 descriptor?? [ 449.837671][T12552] loop4: detected capacity change from 0 to 64 [ 449.862723][ T5819] hub 2-1:0.132: bad descriptor, ignoring hub [ 449.920956][ T5819] hub: probe of 2-1:0.132 failed with error -5 [ 450.242421][ T5819] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input46 [ 450.490623][T12552] hfs: get root inode failed [ 451.962679][ T5838] usb 2-1: USB disconnect, device number 22 [ 458.371364][T12564] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2553'. [ 458.761191][T12564] netlink: 'syz.4.2553': attribute type 12 has an invalid length. [ 458.827289][T12564] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2553'. [ 462.328952][ T1188] block nbd1: Possible stuck request ffff888021e58000: control (read@0,1024B). Runtime 60 seconds [ 467.523126][T12576] loop0: detected capacity change from 0 to 1024 [ 477.326750][T12591] program syz.0.2563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 478.395008][T12593] loop3: detected capacity change from 0 to 256 [ 483.868560][T12599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2566'. [ 485.149923][T12599] vlan0: entered promiscuous mode [ 485.187066][T12599] macvlan1: entered promiscuous mode [ 485.281537][T12601] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2565'. [ 485.406652][T12602] netlink: 'syz.0.2565': attribute type 12 has an invalid length. [ 485.414916][T12602] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2565'. [ 486.492489][ T5143] udevd[5143]: worker [6274] /devices/virtual/block/nbd1 is taking a long time [ 492.360639][ T1188] block nbd1: Possible stuck request ffff888021e58000: control (read@0,1024B). Runtime 90 seconds [ 492.673792][T12608] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2570'. [ 499.941281][T12617] loop0: detected capacity change from 0 to 64 [ 500.420105][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2574'. [ 500.509271][T12618] overlayfs: workdir and upperdir must reside under the same mount [ 501.964869][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 522.456830][ T1188] block nbd1: Possible stuck request ffff888021e58000: control (read@0,1024B). Runtime 120 seconds [ 523.987925][T12653] loop0: detected capacity change from 0 to 512 [ 524.438948][T12653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.496888][T12653] ext4 filesystem being mounted at /404/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 529.363346][ T7976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.972781][T12665] loop1: detected capacity change from 0 to 128 [ 530.286290][T12665] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 530.407186][T12665] hpfs: filesystem error: improperly stopped [ 530.413861][T12665] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 530.547056][T12665] hpfs: You really don't want any checks? You are crazy... [ 530.628577][T12665] hpfs: hpfs_map_sector(): read error [ 530.676318][T12665] hpfs: code page support is disabled [ 530.683448][T12665] hpfs: hpfs_map_4sectors(): unaligned read [ 530.777566][T12665] hpfs: hpfs_map_4sectors(): unaligned read [ 530.783738][T12665] hpfs: filesystem error: unable to find root dir [ 533.317499][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 533.720055][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.775594][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 533.846329][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.159107][ T9] usb 5-1: config 0 descriptor?? [ 535.726981][ T9] ath6kl: Failed to submit usb control message: -110 [ 535.734003][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 535.858284][ T9] ath6kl: Unable to send get target info: -110 [ 535.924938][ T9] ath6kl: Failed to init ath6kl core: -110 [ 536.011404][ T9] ath6kl_usb: probe of 5-1:0.0 failed with error -110 [ 538.496091][ T9] usb 5-1: USB disconnect, device number 15 [ 542.356799][ T55] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 542.729371][ T55] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 542.815269][ T55] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 542.880967][ T55] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 542.967739][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.197795][T12679] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 543.654037][ T55] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 545.611273][ T55] usb 2-1: USB disconnect, device number 23 [ 552.566736][ T1188] block nbd1: Possible stuck request ffff888021e58000: control (read@0,1024B). Runtime 150 seconds [ 559.509552][T12702] overlayfs: failed to clone lowerpath [ 563.403720][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.147347][T12716] loop4: detected capacity change from 0 to 256 [ 568.171883][T12719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2605'. [ 579.507638][T12737] loop3: detected capacity change from 0 to 512 [ 580.127874][T12737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.650834][ T1188] block nbd1: Possible stuck request ffff888021e58000: control (read@0,1024B). Runtime 180 seconds [ 584.543458][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.077196][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 591.236783][ T5143] udevd[5143]: worker [6274] /devices/virtual/block/nbd1 timeout; kill it [ 591.260156][ T5143] udevd[5143]: seq 17270 '/devices/virtual/block/nbd1' killed [ 591.976354][T12757] bridge0: entered promiscuous mode [ 591.983752][T12757] vlan2: entered promiscuous mode [ 598.576126][T12761] loop1: detected capacity change from 0 to 512 [ 598.689664][T12761] EXT4-fs: Ignoring removed orlov option [ 599.333307][T12761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.432174][T12761] ext4 filesystem being mounted at /634/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.278855][T12769] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 95 vs 96 free clusters [ 604.211473][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.696723][ T1188] block nbd1: Possible stuck request ffff888021e58000: control (read@0,1024B). Runtime 210 seconds [ 614.997553][T12787] loop3: detected capacity change from 0 to 128 [ 615.295070][T12787] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 615.365336][T12787] hpfs: filesystem error: improperly stopped [ 615.414974][T12787] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 615.423638][T12787] hpfs: You really don't want any checks? You are crazy... [ 615.512388][T12787] hpfs: hpfs_map_sector(): read error [ 615.567965][T12787] hpfs: code page support is disabled [ 615.608347][T12787] hpfs: hpfs_map_4sectors(): unaligned read [ 615.666100][T12787] hpfs: hpfs_map_4sectors(): unaligned read [ 615.711399][T12787] hpfs: filesystem error: unable to find root dir [ 616.245125][ T5838] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 616.729510][ T5838] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 616.783482][ T5838] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 616.855414][ T5838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 617.190953][ T5838] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 617.287259][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 617.351233][ T5838] usb 2-1: Product: syz [ 617.396768][ T5838] usb 2-1: Manufacturer: syz [ 617.451519][ T5838] usb 2-1: SerialNumber: syz [ 617.731208][ T5838] usb 2-1: config 0 descriptor?? [ 617.866568][ T5838] hub 2-1:0.0: bad descriptor, ignoring hub [ 617.915114][ T5838] hub: probe of 2-1:0.0 failed with error -5 [ 618.293456][ T5838] usb 2-1: selecting invalid altsetting 0 [ 621.715306][ T5819] usb 2-1: USB disconnect, device number 24 [ 624.362181][T12800] loop0: detected capacity change from 0 to 128 [ 624.857042][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.503075][T12810] loop4: detected capacity change from 0 to 512 [ 630.705383][T12810] EXT4-fs: Ignoring removed orlov option [ 631.498198][T12810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.579944][T12810] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.436694][ T28] audit: type=1326 audit(1790650694.245:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12819 comm="syz.0.2636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7ffcabafaac9 code=0x0 [ 635.025762][ T7833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.739730][T12829] loop3: detected capacity change from 0 to 1024 [ 642.816659][ T1188] block nbd1: Possible stuck request ffff888021e58000: control (read@0,1024B). Runtime 240 seconds [ 650.979980][T12840] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2644'. [ 657.863097][T12849] loop0: detected capacity change from 0 to 64 [ 658.430313][T12849] hfs: get root inode failed [ 666.206889][T12861] loop3: detected capacity change from 0 to 128 [ 666.802592][T12861] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 666.970872][T12861] ext4 filesystem being mounted at /693/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 668.108367][T12870] fscrypt: Error allocating hmac(sha512): -4 [ 668.190443][T12861] fscrypt: Error allocating hmac(sha512): -2 [ 668.251191][T12867] loop1: detected capacity change from 0 to 1024 [ 672.879575][ T5781] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 673.533680][ T1188] block nbd1: Possible stuck request ffff888021e58000: control (read@0,1024B). Runtime 270 seconds [ 679.711591][ T5838] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 680.274607][ T5838] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 680.367184][ T5838] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.475516][ T5838] usb 5-1: config 0 interface 0 has no altsetting 0 [ 680.482846][ T5838] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00 [ 680.589839][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.857028][ T5838] usb 5-1: config 0 descriptor?? [ 686.281765][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.469537][ T5838] usbhid 5-1:0.0: can't add hid device: -32 [ 686.534901][ T5838] usbhid: probe of 5-1:0.0 failed with error -32 [ 687.976720][ T9] usb 5-1: USB disconnect, device number 16 [ 699.349456][T12923] 9pnet_fd: Insufficient options for proto=fd [ 703.595902][ T1188] block nbd1: Possible stuck request ffff888021e58000: control (read@0,1024B). Runtime 300 seconds [ 718.029510][T12947] loop0: detected capacity change from 0 to 8 [ 718.254480][T12947] Major/Minor mismatch, trying to mount newer 4.1792 filesystem [ 718.333339][T12947] Please update your kernel [ 733.673465][ T1188] block nbd1: Possible stuck request ffff888021e58000: control (read@0,1024B). Runtime 330 seconds [ 746.730913][T12751] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 746.759133][T12751] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 746.815915][T12751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 746.871580][T12751] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 746.928865][T12751] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 746.947803][T12751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 747.733756][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.083152][T12751] Bluetooth: hci4: command tx timeout [ 750.276779][ T29] INFO: task udevd:6274 blocked for more than 143 seconds. [ 750.306803][ T29] Not tainted syzkaller #0 [ 750.312261][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 750.405671][ T29] task:udevd state:D stack:24232 pid:6274 ppid:5143 flags:0x00004006 [ 750.464076][ T29] Call Trace: [ 750.503670][ T29] [ 750.513295][ T29] __schedule+0x15ae/0x4660 [ 750.518442][ T29] ? perf_trace_lock_acquire+0x400/0x400 [ 750.593534][ T29] ? asan.module_dtor+0x20/0x20 [ 750.614204][ T29] ? mark_lock+0x94/0x320 [ 750.619185][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 750.667188][ T29] ? lock_chain_count+0x20/0x20 [ 750.736541][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 750.788452][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 750.813362][ T29] schedule+0xbd/0x170 [ 750.817802][ T29] io_schedule+0x80/0xd0 [ 750.822498][ T29] folio_wait_bit_common+0x881/0xfa0 [ 750.849030][ T29] ? folio_wait_bit+0x30/0x30 [ 750.854880][ T29] ? _compound_head+0x120/0x120 [ 750.860021][ T29] ? filemap_add_folio+0x190/0x3d0 [ 750.866073][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 750.871887][ T29] ? blkdev_writepage+0x30/0x30 [ 750.903426][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 750.909013][ T29] ? blkdev_writepage+0x30/0x30 [ 750.928231][ T29] read_part_sector+0xd2/0x350 [ 750.963921][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 750.969636][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 751.033288][ T29] ? put_partition+0x360/0x360 [ 751.038789][ T29] ? alloc_pages+0x4e1/0x740 [ 751.071315][ T29] bdev_disk_changed+0x755/0x1450 [ 751.104143][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 751.109971][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 751.154636][T12751] Bluetooth: hci4: command tx timeout [ 751.197539][ T29] ? iput+0x33f/0x900 [ 751.202102][ T29] blkdev_get_whole+0x30d/0x390 [ 751.243849][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 751.249730][ T29] blkdev_open+0x14e/0x360 [ 751.324118][ T29] do_dentry_open+0x880/0x14b0 [ 751.329494][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 751.393491][ T29] path_openat+0x284f/0x3270 [ 751.449868][ T29] ? do_sys_openat2+0xda/0x1d0 [ 751.479036][ T29] ? __x64_sys_openat+0x139/0x160 [ 751.523034][ T29] ? verify_lock_unused+0x140/0x140 [ 751.528481][ T29] ? do_filp_open+0x430/0x430 [ 751.590460][ T29] do_filp_open+0x1f2/0x430 [ 751.623740][ T29] ? vfs_tmpfile+0x620/0x620 [ 751.629732][ T29] ? _raw_spin_unlock+0x28/0x40 [ 751.695729][ T29] ? alloc_fd+0x590/0x640 [ 751.700968][ T29] do_sys_openat2+0x134/0x1d0 [ 751.803954][ T29] ? do_sys_open+0xe0/0xe0 [ 751.810727][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 751.902877][ T29] ? lock_chain_count+0x20/0x20 [ 751.908585][ T29] __x64_sys_openat+0x139/0x160 [ 752.023421][ T29] do_syscall_64+0x55/0xb0 [ 752.028254][ T29] ? clear_bhb_loop+0x40/0x90 [ 752.134311][ T29] ? clear_bhb_loop+0x40/0x90 [ 752.139675][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 752.207623][ T29] RIP: 0033:0x7f92556a7407 [ 752.212475][ T29] RSP: 002b:00007fffc5be4d90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 752.261512][ T29] RAX: ffffffffffffffda RBX: 00007f9255d44880 RCX: 00007f92556a7407 [ 752.412829][ T29] RDX: 00000000000a0800 RSI: 000055eee9b48900 RDI: ffffffffffffff9c [ 752.478995][ T29] RBP: 000055eee9b37910 R08: 0000000000000000 R09: 0000000000000000 [ 752.562726][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055eee9b5b990 [ 752.571197][ T29] R13: 000055eee9b4f410 R14: 0000000000000000 R15: 000055eee9b5b990 [ 752.731217][ T29] [ 752.745918][ T29] [ 752.745918][ T29] Showing all locks held in the system: [ 752.823386][ T29] 1 lock held by khungtaskd/29: [ 752.849062][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 752.943673][ T29] 3 locks held by kworker/u4:10/3433: [ 752.985351][ T29] 1 lock held by udevd/5143: [ 752.990282][ T29] #0: ffff888019e45948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xc8/0x570 [ 753.152793][ T29] 1 lock held by sshd-session/5763: [ 753.158454][ T29] 2 locks held by syz-executor/5775: [ 753.253074][T12751] Bluetooth: hci4: command tx timeout [ 753.253737][ T29] 3 locks held by kworker/0:6/5838: [ 753.415109][ T29] 1 lock held by udevd/6241: [ 753.420325][ T29] 1 lock held by udevd/6274: [ 753.576574][ T29] #0: ffff888021da34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 753.692784][ T29] 2 locks held by syz-executor/7817: [ 753.698475][ T29] 2 locks held by syz-executor/7833: [ 753.788235][ T29] 4 locks held by syz-executor/7956: [ 753.852754][ T29] 2 locks held by getty/9579: [ 753.859697][ T29] #0: ffff88802d33a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 753.983596][ T29] #1: ffffc9000455d2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 754.113926][ T29] 2 locks held by kworker/u4:3/12877: [ 754.120647][ T29] 2 locks held by syz-executor/12958: [ 754.199024][ T29] 3 locks held by syz-executor/12983: [ 754.233800][ T29] #0: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 754.343385][ T29] #1: ffff8880b8f3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 754.433375][ T29] #2: ffff8880b8f3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 754.523161][ T29] 2 locks held by syz.3.2689/12990: [ 754.529020][ T29] [ 754.531563][ T29] ============================================= [ 754.531563][ T29] [ 754.666851][ T29] NMI backtrace for cpu 1 [ 754.671754][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 754.679217][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 754.689677][ T29] Call Trace: [ 754.693384][ T29] [ 754.696772][ T29] dump_stack_lvl+0x18c/0x250 [ 754.701726][ T29] ? __wake_up_klogd+0xd9/0x100 [ 754.707008][ T29] ? show_regs_print_info+0x20/0x20 [ 754.712689][ T29] ? load_image+0x420/0x420 [ 754.717868][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 754.723294][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 754.729899][ T29] ? load_image+0x420/0x420 [ 754.734785][ T29] ? wq_watchdog_touch+0xef/0x170 [ 754.740247][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 754.746921][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 754.753731][ T29] watchdog+0xf59/0xfa0 [ 754.758189][ T29] ? watchdog+0x1e1/0xfa0 [ 754.763405][ T29] kthread+0x2fa/0x390 [ 754.767627][ T29] ? hungtask_pm_notify+0x50/0x50 [ 754.773063][ T29] ? kthread_blkcg+0xd0/0xd0 [ 754.778216][ T29] ret_from_fork+0x48/0x80 [ 754.782823][ T29] ? kthread_blkcg+0xd0/0xd0 [ 754.787780][ T29] ret_from_fork_asm+0x11/0x20 [ 754.793444][ T29] [ 754.800152][ T29] Sending NMI from CPU 1 to CPUs 0: [ 754.806526][ C0] NMI backtrace for cpu 0 [ 754.806537][ C0] CPU: 0 PID: 12894 Comm: kworker/0:0 Not tainted syzkaller #0 [ 754.806554][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 754.806563][ C0] Workqueue: events nsim_dev_hwstats_traffic_work [ 754.806632][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x58/0xe0 [ 754.806655][ C0] Code: 48 8b 06 48 85 c0 0f 84 a4 00 00 00 41 57 41 56 41 54 53 48 8d 4c 09 01 48 8b 54 24 20 65 4c 8b 05 9d 27 7c 7e 45 31 c9 eb 08 <49> ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 65 44 8b 1d 8b 27 7c 7e 41 [ 754.806722][ C0] RSP: 0018:ffffc9000ba4f2a8 EFLAGS: 00000093 [ 754.806735][ C0] RAX: 0000000000000020 RBX: 0000000000000009 RCX: 0000000000000005 [ 754.806745][ C0] RDX: ffffffff81895e15 RSI: ffffffff8d17b560 RDI: 0000000000000009 [ 754.806756][ C0] RBP: 00000000000009b8 R08: ffff888029541e00 R09: 000000000000000e [ 754.806766][ C0] R10: 000000000000000e R11: 0000000000000000 R12: dffffc0000000000 [ 754.806776][ C0] R13: f800000000000000 R14: ffff8880186405f8 R15: 000000000004ca89 [ 754.806795][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 754.806808][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 754.806819][ C0] CR2: 00007f62ee957e20 CR3: 000000006097b000 CR4: 00000000003506f0 [ 754.806834][ C0] Call Trace: [ 754.806839][ C0] [ 754.806860][ C0] rb_event_length+0x45/0x3f0 [ 754.806890][ C0] check_buffer+0x542/0x950 [ 754.806947][ C0] __rb_reserve_next+0x4d9/0xd00 [ 754.807054][ C0] ring_buffer_lock_reserve+0xae1/0xed0 [ 754.807103][ C0] ? mark_lock+0x94/0x320 [ 754.807177][ C0] trace_event_buffer_lock_reserve+0x1d2/0x6f0 [ 754.807217][ C0] trace_event_buffer_reserve+0x2ac/0x3d0 [ 754.807247][ C0] ? trace_event_ignore_this_pid+0x130/0x130 [ 754.807299][ C0] trace_event_raw_event_lock+0x11e/0x240 [ 754.807328][ C0] ? perf_trace_lock_acquire+0x400/0x400 [ 754.807361][ C0] ? rb_commit+0x6f7/0x750 [ 754.807398][ C0] ? debug_objects_fill_pool+0x8b/0x790 [ 754.807427][ C0] ? debug_objects_fill_pool+0x8b/0x790 [ 754.807450][ C0] lock_release+0x866/0x8c0 [ 754.807498][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 754.807548][ C0] ? debug_objects_fill_pool+0x8b/0x790 [ 754.807575][ C0] debug_objects_fill_pool+0xcc/0x790 [ 754.807608][ C0] ? perf_trace_lock_acquire+0x400/0x400 [ 754.807628][ C0] ? debug_object_activate+0x500/0x500 [ 754.807664][ C0] ? trace_event_raw_event_contention_end+0x126/0x1c0 [ 754.807732][ C0] debug_object_assert_init+0x66/0x300 [ 754.807756][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 754.807799][ C0] __mod_timer+0x55/0xd60 [ 754.807857][ C0] queue_delayed_work_on+0x131/0x200 [ 754.807887][ C0] ? delayed_work_timer_fn+0x80/0x80 [ 754.807932][ C0] ? nsim_dev_hwstats_traffic_work+0x159/0x1b0 [ 754.807951][ C0] ? process_scheduled_works+0x975/0x1600 [ 754.807980][ C0] process_scheduled_works+0xa60/0x1600 [ 754.808093][ C0] ? worker_attach_to_pool+0x370/0x370 [ 754.808136][ C0] ? assign_work+0x3cc/0x5d0 [ 754.808178][ C0] worker_thread+0xa5e/0xfe0 [ 754.808239][ C0] ? _raw_spin_unlock+0x40/0x40 [ 754.808256][ C0] ? __kthread_parkme+0x71/0x1c0 [ 754.808307][ C0] kthread+0x2fa/0x390 [ 754.808321][ C0] ? pr_cont_work+0x550/0x550 [ 754.808347][ C0] ? kthread_blkcg+0xd0/0xd0 [ 754.808366][ C0] ret_from_fork+0x48/0x80 [ 754.808384][ C0] ? kthread_blkcg+0xd0/0xd0 [ 754.808404][ C0] ret_from_fork_asm+0x11/0x20 [ 754.808470][ C0] [ 755.359590][T12751] Bluetooth: hci4: command tx timeout [ 755.449600][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 755.456685][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 755.464625][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 755.475143][ T29] Call Trace: [ 755.478869][ T29] [ 755.482022][ T29] dump_stack_lvl+0x18c/0x250 [ 755.487056][ T29] ? show_regs_print_info+0x20/0x20 [ 755.492870][ T29] ? load_image+0x420/0x420 [ 755.498194][ T29] panic+0x2ca/0x720 [ 755.502592][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 755.507567][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 755.513683][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 755.519318][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 755.526172][ T29] watchdog+0xf98/0xfa0 [ 755.530689][ T29] ? watchdog+0x1e1/0xfa0 [ 755.535607][ T29] kthread+0x2fa/0x390 [ 755.540061][ T29] ? hungtask_pm_notify+0x50/0x50 [ 755.545678][ T29] ? kthread_blkcg+0xd0/0xd0 [ 755.550517][ T29] ret_from_fork+0x48/0x80 [ 755.555214][ T29] ? kthread_blkcg+0xd0/0xd0 [ 755.560242][ T29] ret_from_fork_asm+0x11/0x20 [ 755.566077][ T29] [ 755.569510][ T29] Kernel Offset: disabled [ 755.574094][ T29] Rebooting in 86400 seconds..