last executing test programs: 14.071447095s ago: executing program 3 (id=1037): syz_open_dev$usbmon(&(0x7f00000003c0), 0x7, 0x4002) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)) syz_usb_connect(0x2, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8910, &(0x7f0000000640)={'ip6tnl0\x00', @random="0600002000"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000006c0)='match_busid\x00', 0x2, 0x0) mount(&(0x7f0000000700)=@filename='sysfs\x00', &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='bq24190 0x6b\n\x00', 0xd) write(r2, &(0x7f0000000840)='add 1', 0x5) syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x48) r4 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="190000000401000003fffff80200000000000000", @ANYRES32=0x1], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000080)={r5}) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f00000000c0)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000100)={r7}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r9 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0xf, &(0x7f0000000280), 0x4) sendmsg$inet(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x31, &(0x7f0000000340)=r8, 0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x31, &(0x7f0000000380)=r8, 0x4) 13.992663993s ago: executing program 4 (id=1039): r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 13.917157711s ago: executing program 2 (id=1040): pipe(0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) socket$kcm(0x11, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, 0x0, 0x80, 0x0) socket$inet(0x2, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./my_sys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x65) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './my_sys', [], 0xa, "e24c8abc1a40834d4a85eda01a905a15d6f7d8dfc7e0a6dafb95f176d8e483d32910596d532724fc624eb444fffd55e614943b3752b4a38a3257581d3eeb90003f470f2f31f50eee997c202eb9b370824c2cbf8c9024eeab0d2310855f2d4e44cef51872dc18ec2558f50653da8402758ea414a747bbee0bfa4dcd40a4a3e756606a93717509be4164c550dc4135093b70a7020000006b4bb687c8e89bed560a15204a6a8c5571492f096d4e28aa77f833b97e8a6bb2bc018838784a4840953ff310bf3ef8017f312254eae9d5fe986daa93ff391b"}, 0xe1) sendfile(r1, r1, 0x0, 0x6) 11.310344465s ago: executing program 2 (id=1043): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x143102) writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800012000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x4000002, 0x13, r1, 0x0) read(0xffffffffffffffff, 0x0, 0x300) ioctl(0xffffffffffffffff, 0xffff454b, 0x0) mkdir(&(0x7f00000005c0)='./file0\x00', 0x184) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x804, &(0x7f0000000680)={[{@metacopy_off}, {@verity_on}, {@volatile}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}]}) chdir(0x0) syz_open_dev$sndmidi(&(0x7f0000000700), 0x6, 0x121c81) open(&(0x7f0000000740)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000005e0001", @ANYBLOB="9b689b969622368d6079d4710eb270bc7a5e"], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0) 11.248533751s ago: executing program 4 (id=1044): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x7, 0x2581) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x80005520, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='rt1719 0x4', 0xa) 8.617639118s ago: executing program 3 (id=1045): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') readv(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x8d}, 0x4e21, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x20000000000e06}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x404d3, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x8}, 0x3504, 0x0, 0x2, 0x20}}, 0xe8) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0x1}], 0x1) r2 = fsopen(&(0x7f00000004c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000500)='source', &(0x7f0000000640)='c:::\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r4 = gettid() tkill(r4, 0xb) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000900)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000940)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000980)={"fc7fbced01eb1b00000000000000000700", r8, 0xffffffffffffffff}) ppoll(&(0x7f0000000a00)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) 7.770319053s ago: executing program 2 (id=1046): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002940)=0x6) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002a40)=@newtaction={0x54, 0x30, 0x51b, 0x70bd2b, 0x0, {}, [{0x40, 0x1, [@m_skbmod={0x3c, 0x2, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x54}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001f00)={0x0, 0x4, @start={0x0, 0x0, "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", "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"}, [0xfff, 0x6c3, 0x9, 0x7ff, 0xfffffffffffffffd, 0x8, 0x7, 0xb, 0xffffffffffffffff, 0x10004, 0x9, 0x6, 0x7, 0x80000001, 0x0, 0x8, 0x3, 0x2, 0xfff, 0xfffffffffffffe00, 0x9, 0xcbe1, 0x9, 0x80000, 0x4, 0xa, 0x6, 0x9, 0x398a0ea0, 0x7, 0x1, 0xf72f, 0xffff, 0x6, 0x7, 0x11, 0x7, 0x80000001, 0x1, 0xfbfb, 0x1, 0x6, 0x3, 0xffffffffffffd0ed, 0x100, 0x7, 0xffc, 0x7, 0x10000, 0x8000000000000001, 0x1, 0xe10, 0x1e, 0x9, 0x7fffffff, 0x5, 0x8001, 0x8, 0x3, 0x655, 0xfd9, 0x2, 0x7, 0x4]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a00000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) write$UHID_CREATE2(r4, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x12e) fsopen(0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 7.717148939s ago: executing program 1 (id=1048): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f00000000c0)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000400)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000540)='PRIVHEAD', 0x8, 0xc00) r1 = syz_open_dev$loop(0x0, 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 7.613898779s ago: executing program 1 (id=1049): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000000000)) ioprio_get$pid(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x143102) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0x1}], 0x1) timerfd_gettime(0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='trans=rdma,') r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='stack :'], 0xe4) 7.188096302s ago: executing program 0 (id=1050): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe}, {0x0, 0x0, 0x8}, 0x0, 0x6e6bb9, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000000ac0), 0x2e9, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x400008, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="380100001600330600000000ffffff7ffc010000000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d2320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000003000000000000000000000000000000050000000000000004000000000000000000000002000000"], 0x138}}, 0x0) 7.161766055s ago: executing program 4 (id=1051): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f00000000c0)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000400)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000540), 0x0, 0xc00) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 7.126670449s ago: executing program 1 (id=1052): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8910, &(0x7f0000000640)={'ip6tnl0\x00', @random="0600002000"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f00000006c0)='match_busid\x00', 0x2, 0x0) mount(&(0x7f0000000700)=@filename='sysfs\x00', &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='bq24190 0x6', 0xb) write(r3, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x11, 0xfe, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfc, 0x3, 0x48}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="190000000401000003fffff8020000", @ANYRES32=0x1], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f00000000c0)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000100)={r8}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r10 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0xf, &(0x7f0000000280), 0x4) sendmsg$inet(r10, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x31, &(0x7f0000000340)=r9, 0x4) setsockopt$sock_attach_bpf(r10, 0x1, 0x31, &(0x7f0000000380)=r9, 0x4) 6.821687229s ago: executing program 3 (id=1053): pipe(0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) socket$kcm(0x11, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, 0x0, 0x80, 0x0) socket$inet(0x2, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./my_sys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x65) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './my_sys', [], 0xa, "e24c8abc1a40834d4a85eda01a905a15d6f7d8dfc7e0a6dafb95f176d8e483d32910596d532724fc624eb444fffd55e614943b3752b4a38a3257581d3eeb90003f470f2f31f50eee997c202eb9b370824c2cbf8c9024eeab0d2310855f2d4e44cef51872dc18ec2558f50653da8402758ea414a747bbee0bfa4dcd40a4a3e756606a93717509be4164c550dc4135093b70a7020000006b4bb687c8e89bed560a15204a6a8c5571492f096d4e28aa77f833b97e8a6bb2bc018838784a4840953ff310bf3ef8017f312254eae9d5fe986daa93ff391b"}, 0xe1) sendfile(r1, r1, 0x0, 0x6) 6.71254352s ago: executing program 4 (id=1054): r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 4.64291832s ago: executing program 3 (id=1055): syz_open_dev$usbmon(&(0x7f00000003c0), 0x7, 0x4002) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)) syz_usb_connect(0x2, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8910, &(0x7f0000000640)={'ip6tnl0\x00', @random="0600002000"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000006c0)='match_busid\x00', 0x2, 0x0) mount(&(0x7f0000000700)=@filename='sysfs\x00', &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='bq24190 0x6b\n\x00', 0xd) write(r2, &(0x7f0000000840)='add 1', 0x5) syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x48) r4 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="190000000401000003fffff80200000000000000", @ANYRES32=0x1], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000080)={r5}) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f00000000c0)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000100)={r7}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r9 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0xf, &(0x7f0000000280), 0x4) sendmsg$inet(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x31, &(0x7f0000000340)=r8, 0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x31, &(0x7f0000000380)=r8, 0x4) 4.64149166s ago: executing program 0 (id=1056): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x143102) writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800012000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x4000002, 0x13, r1, 0x0) read(0xffffffffffffffff, 0x0, 0x300) ioctl(0xffffffffffffffff, 0xffff454b, 0x0) mkdir(&(0x7f00000005c0)='./file0\x00', 0x184) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x804, &(0x7f0000000680)={[{@metacopy_off}, {@verity_on}, {@volatile}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}]}) chdir(0x0) syz_open_dev$sndmidi(&(0x7f0000000700), 0x6, 0x121c81) open(&(0x7f0000000740)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000005e0001", @ANYBLOB="9b689b969622368d6079d4710eb270bc7a5e"], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0) 4.512577773s ago: executing program 4 (id=1057): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000180)='./pipefs\x00', 0xd) open(&(0x7f0000000040)='./pipefs/gssd/clntXX/gssd\x00', 0x80001, 0x10) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x10040, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x29, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r0, &(0x7f0000002b80)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./pipefs/gssd/clntXX/gssd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r2 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x700, 0x700, 0x2c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 3.486668337s ago: executing program 0 (id=1058): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') 2.397283128s ago: executing program 1 (id=1059): r0 = syz_open_dev$usbfs(0x0, 0x75, 0x943f41) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000080)={0x1, 0x1}) mount$tmpfs(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100), 0x8, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYBLOB="1f6f6ebc8ae4f9b936d1aa3bbd3c98d580d64ba42e2a98d3704eacf4ff1952356cd6733e118374e98686ff56877d1b0bcbee805977733e484baa3952e246b626fece9155c975f124177fe2d8f3a57c53d0a301ba9a2bf808ef27ad043c015e838de9d31b80e61bc3672c878a43658225920b1681a34a28b8d32a"]) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x141102) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000003c0)={0x3, 0x80000000, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000400)={0x3, 0x6, 0xffffffffffffffff, 0xb, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) setpgid(0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000480)="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", 0x139, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x1e0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '0\x00'}}, [@crypt={0x0, 0x1000, 0x0, 0xa8, 'crypt\x00', {'capi:xts(aes)-random', 0x20, @fixed='0123456789abcdef0123456789abcdef01234567', 0x20, '4096', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '1024'}, ' 2 sector_size:4096 iv_large_sectors'}}]}) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000980)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x24200, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) waitid(0x1, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000ac0)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000b00)="060000000300010000", 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80003, 0xff) pipe2(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002c00)={0x10, 0xfffffffffffffffe, r6}, 0x66) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0xe) 2.352761492s ago: executing program 0 (id=1060): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000050000000000000080000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f000001ad40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f000001aec0), 0x4) sendmsg$inet(r3, &(0x7f000001af00)={0x0, 0x0, 0x0}, 0x80) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000000780)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019780)=0x410000002) r5 = syz_io_uring_setup(0x254a, &(0x7f00000197c0)={0x0, 0x8210, 0x2, 0x0, 0x42}, &(0x7f0000019840), &(0x7f0000019880), &(0x7f00000198c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000019900)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x6, &(0x7f0000019940)={0x0, 0x0, &(0x7f0000019980), 0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_FP_MODE(0x42, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f000001ad00)={&(0x7f0000000380)={0xa, 0x4e24, 0xbbcc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x52}, 0x1c, &(0x7f0000019980)=[{&(0x7f00000003c0)="d504807f0a8d385c472494c4e1da78380bdb4457807405913c45dfb66663ee2c9650b071ca5314a9b0f0d60c175ebba46a5fdc59dd45ac890a0de72de130716476da7f9fa2d3e93b76ed6d7eceb418cb15cd30bd92fb42b6feaace0dec48c9f578f54e05b20ec808ffcdc47cc7db63c39a22e4cd", 0x74}, {&(0x7f0000000440)="e8b75dcc23e68237732879d55fc072add7fad25eb9bb8e7f43251d87c8d68526ec0fe4c1b49317f08e005b22430b56f46faf1265194d7c53397cb4ca5485fe0e8531ce7e07babf357565292dfdf5a8da987960d8e8417a9f4730aa40a33155f849310ab5b61da29114ed284abae9386c754cc9f612081b77f9b47f46d2e8e81e4802d9ca6a2d70977b44a0a5e7be3629ac6a241d3f0eafc931aa9d32a45be3aca77f2779a2858f0ddd79ff6b0e6760586201d59e6a73a6950855c0ee0ac5904ecb58818fbd", 0xc5}, {&(0x7f0000000540)}, {0x0}, {&(0x7f00000005c0)="05db8b2d40e058fc2f9e0071a5cf14c911be", 0x12}], 0x5, &(0x7f0000019a00)=[@hopopts={{0x48, 0x29, 0x36, {0x21, 0x5, '\x00', [@ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x20, {0x3, 0x6, 0x6, 0x5, [0x7fff, 0x1, 0x7fff]}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x25, 0x9, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x9, 0x8000, [0x9, 0x1, 0x1e]}}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x3c}}}, @dstopts={{0xd8, 0x29, 0x37, {0x67, 0x17, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @generic={0x0, 0x6e, "1736e7858a5463bab9542ea2385c58fb40e101305b3c3d59998ecb3065aa31fe0fbaace0164307f91d25178a73d34c58e5fd24ee9727511b33908c1c88598c1918bdff79c4408e247c769f72a53c6952c126374a0be18d5ae8c38214bc6ffc2067d8b86747d4330b47a848cb6cfe"}, @enc_lim={0x4, 0x1, 0xa}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x20, {0x0, 0x6, 0x9, 0x0, [0x8, 0xc000, 0x0]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x5, 0x9, [0x3]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @rthdr={{0x68, 0x29, 0x39, {0x33, 0xa, 0x2, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, @rand_addr=' \x01\x00']}}}], 0x220}, 0x24044080) 2.338791783s ago: executing program 4 (id=1061): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x0) syz_usb_connect(0x0, 0x5d, 0x0, 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00') write$tcp_mem(r1, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, 0x7418, 0x20, 0x6e}, 0x48) r2 = fsopen(&(0x7f00000004c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000002dc0)='c:::\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002ec0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000002fc0)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r4 = gettid() bind$phonet(r3, &(0x7f0000000080)={0x23, 0x5, 0x1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x40, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) getpgrp(0x0) chdir(&(0x7f00000006c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x2) getdents64(0xffffffffffffffff, 0x0, 0x0) 2.301174977s ago: executing program 2 (id=1062): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x7, 0x2581) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x80005520, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='rt1719 0x4', 0xa) 1.829838415s ago: executing program 0 (id=1063): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') readv(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x8d}, 0x4e21, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x20000000000e06}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x404d3, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x8}, 0x3504, 0x0, 0x2, 0x20}}, 0xe8) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0x1}], 0x1) r2 = fsopen(&(0x7f00000004c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000500)='source', &(0x7f0000000640)='c:::\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r4 = gettid() tkill(r4, 0xb) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000900)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000940)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000980)={"fc7fbced01eb1b00000000000000000700", r8, 0xffffffffffffffff}) ppoll(&(0x7f0000000a00)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) 986.113141ms ago: executing program 3 (id=1064): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f00000000c0)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000400)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000540)='PRIVHEAD', 0x8, 0xc00) r1 = syz_open_dev$loop(0x0, 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 285.666011ms ago: executing program 2 (id=1065): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000000000)) ioprio_get$pid(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x143102) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0x1}], 0x1) timerfd_gettime(0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='trans=rdma,') r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='stack :'], 0xe4) 228.727267ms ago: executing program 1 (id=1066): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f00000000c0)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000400)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000540), 0x0, 0xc00) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 154.603675ms ago: executing program 3 (id=1067): r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 153.466885ms ago: executing program 0 (id=1068): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x143102) writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800012000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x4000002, 0x13, r1, 0x0) read(0xffffffffffffffff, 0x0, 0x300) ioctl(0xffffffffffffffff, 0xffff454b, 0x0) mkdir(&(0x7f00000005c0)='./file0\x00', 0x184) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x804, &(0x7f0000000680)={[{@metacopy_off}, {@verity_on}, {@volatile}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}]}) chdir(&(0x7f00000006c0)='./bus\x00') syz_open_dev$sndmidi(0x0, 0x6, 0x121c81) open(&(0x7f0000000740)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000005e0001", @ANYBLOB="9b689b969622368d6079d4710eb270bc7a5e"], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0) 123.405298ms ago: executing program 2 (id=1069): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8910, &(0x7f0000000640)={'ip6tnl0\x00', @random="0600002000"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f00000006c0)='match_busid\x00', 0x2, 0x0) mount(&(0x7f0000000700)=@filename='sysfs\x00', &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='bq24190 0x6', 0xb) write(r3, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x11, 0xfe, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfc, 0x3, 0x48}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="190000000401000003fffff8020000", @ANYRES32=0x1], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f00000000c0)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000100)={r8}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r10 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0xf, &(0x7f0000000280), 0x4) sendmsg$inet(r10, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x31, &(0x7f0000000340)=r9, 0x4) setsockopt$sock_attach_bpf(r10, 0x1, 0x31, &(0x7f0000000380)=r9, 0x4) 0s ago: executing program 1 (id=1070): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe}, {0x0, 0x0, 0x8}, 0x0, 0x6e6bb9, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000000ac0), 0x2e9, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x400008, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="380100001600330600000000ffffff7ffc010000000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d232000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000300000000000000000000000000000005000000000000000400000000000000000000000200000002"], 0x138}}, 0x0) kernel console output (not intermixed with test programs): 562][ T5466] device bridge3 entered promiscuous mode [ 221.782099][ T5463] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 222.658363][ T5475] tmpfs: Unknown parameter 'grpquota' [ 224.068569][ T5463] EXT4-fs (loop3): This should not happen!! Data will be lost [ 224.068569][ T5463] [ 224.078323][ T5463] EXT4-fs (loop3): Total free blocks count 0 [ 224.085169][ T5463] EXT4-fs (loop3): Free/Dirty block details [ 224.091082][ T5463] EXT4-fs (loop3): free_blocks=0 [ 224.097262][ T5463] EXT4-fs (loop3): dirty_blocks=64 [ 224.102412][ T5463] EXT4-fs (loop3): Block reservation details [ 225.345711][ T48] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 227.167720][ T5495] netlink: 144 bytes leftover after parsing attributes in process `syz.2.286'. [ 228.158016][ T5504] netlink: 64 bytes leftover after parsing attributes in process `syz.3.287'. [ 229.830547][ T5518] loop0: detected capacity change from 0 to 4096 [ 229.856265][ T5509] device bridge6 entered promiscuous mode [ 229.885994][ T5518] loop0: [ 230.265828][ T5526] tmpfs: Unknown parameter 'grpquota' [ 232.725179][ T128] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 233.972110][ T128] usb 2-1: Using ep0 maxpacket: 32 [ 234.036471][ T128] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.087241][ T128] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 234.137176][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.176237][ T128] usb 2-1: Product: syz [ 234.186419][ T128] usb 2-1: Manufacturer: syz [ 234.201228][ T128] usb 2-1: SerialNumber: syz [ 234.229472][ T128] usb 2-1: config 0 descriptor?? [ 234.248655][ T5552] netlink: 144 bytes leftover after parsing attributes in process `syz.0.299'. [ 234.261513][ T128] usb 2-1: bad CDC descriptors [ 234.274149][ T128] usb 2-1: unsupported MDLM descriptors [ 234.394848][ T5556] netlink: 64 bytes leftover after parsing attributes in process `syz.0.301'. [ 235.286371][ T956] libceph: connect (1)[c::]:6789 error -101 [ 235.294257][ T5537] ceph: No mds server is up or the cluster is laggy [ 235.303521][ T5562] overlayfs: failed to resolve './file1/file0': -2 [ 235.330791][ T956] libceph: mon0 (1)[c::]:6789 connect error [ 235.608388][ T4351] libceph: connect (1)[c::]:6789 error -101 [ 235.717476][ T4351] libceph: mon0 (1)[c::]:6789 connect error [ 235.766256][ T5579] device bridge5 entered promiscuous mode [ 236.202523][ T4354] usb 2-1: USB disconnect, device number 5 [ 236.355971][ T5583] device bridge6 entered promiscuous mode [ 242.997834][ T5602] tmpfs: Unknown parameter 'grpquota' [ 243.407955][ T5608] netlink: 144 bytes leftover after parsing attributes in process `syz.4.313'. [ 244.486169][ T5615] tipc: Enabling of bearer rejected, failed to enable media [ 244.501757][ T5615] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 246.247855][ T4355] libceph: connect (1)[c::]:6789 error -101 [ 246.663894][ T4355] libceph: mon0 (1)[c::]:6789 connect error [ 247.606191][ T5621] loop0: detected capacity change from 0 to 6 [ 247.691125][ T5625] ceph: No mds server is up or the cluster is laggy [ 247.856262][ T956] libceph: connect (1)[c::]:6789 error -101 [ 248.354240][ T956] libceph: mon0 (1)[c::]:6789 connect error [ 250.055627][ T5639] loop3: detected capacity change from 0 to 8 [ 250.905773][ T5639] SQUASHFS error: lzo decompression failed, data probably corrupt [ 250.965510][ T5639] SQUASHFS error: Failed to read block 0x28d: -5 [ 250.971899][ T5639] SQUASHFS error: Unable to read metadata cache entry [28b] [ 250.986030][ T5639] SQUASHFS error: Unable to read inode 0x11f [ 252.006348][ T5650] loop3: detected capacity change from 0 to 128 [ 252.018306][ T5650] omfs: sysblock size (-58445445) is out of range [ 252.875191][ T5652] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 253.359035][ T5662] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 253.426301][ T5656] tipc: Enabling of bearer rejected, failed to enable media [ 253.440612][ T5661] netlink: 144 bytes leftover after parsing attributes in process `syz.3.327'. [ 253.538894][ T5652] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 253.551822][ T5652] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 253.572194][ T5652] usb 3-1: Product: syz [ 253.576635][ T5652] usb 3-1: Manufacturer: syz [ 253.582315][ T5652] usb 3-1: SerialNumber: syz [ 253.621546][ T5652] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 254.367210][ T5658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.454577][ T5658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.578682][ T5679] device bridge4 entered promiscuous mode [ 255.296472][ T5652] vp7045: USB control message 'out' went wrong. [ 255.302788][ T5652] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 255.506928][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.513262][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.706275][ T5652] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 255.836483][ T5652] usb 3-1: USB disconnect, device number 2 [ 255.986219][ T5690] overlayfs: overlapping lowerdir path [ 256.949414][ T5688] ceph: No mds server is up or the cluster is laggy [ 257.245826][ T4816] libceph: connect (1)[c::]:6789 error -101 [ 257.251880][ T4816] libceph: mon0 (1)[c::]:6789 connect error [ 258.539330][ T5698] device bridge7 entered promiscuous mode [ 259.853155][ T5705] tipc: Enabling of bearer rejected, failed to enable media [ 259.945400][ T5705] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 260.058356][ T5710] netlink: 144 bytes leftover after parsing attributes in process `syz.2.342'. [ 260.086845][ T5708] TC_ACT_REPEAT abuse ? [ 261.941772][ T5717] loop0: detected capacity change from 0 to 6 [ 262.105212][ T5718] ldm_validate_privheads(): Disk read failed. [ 262.111466][ T5718] loop0: [ 262.140278][ T5718] loop0: partition table partially beyond EOD, truncated [ 262.227320][ T5729] device bridge7 entered promiscuous mode [ 262.355304][ T22] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 262.564318][ T22] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 262.613109][ T22] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 262.713044][ T22] usb 5-1: Product: syz [ 262.769680][ T22] usb 5-1: Manufacturer: syz [ 262.808552][ T22] usb 5-1: SerialNumber: syz [ 263.641028][ T22] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 263.653844][ T5721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.683636][ T5721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.964823][ T5741] overlayfs: overlapping lowerdir path [ 265.200611][ T5739] ceph: No mds server is up or the cluster is laggy [ 265.268954][ T4352] libceph: connect (1)[c::]:6789 error -101 [ 265.287576][ T4352] libceph: mon0 (1)[c::]:6789 connect error [ 265.746007][ T22] vp7045: USB control message 'out' went wrong. [ 265.769053][ T22] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 265.890072][ T22] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 266.558503][ T128] usb 5-1: USB disconnect, device number 2 [ 267.346158][ T5753] netlink: 144 bytes leftover after parsing attributes in process `syz.2.354'. [ 267.619891][ T5749] device bridge11 entered promiscuous mode [ 269.001239][ T5763] device bridge8 entered promiscuous mode [ 269.018995][ T5769] loop2: detected capacity change from 0 to 8 [ 269.072551][ T5769] SQUASHFS error: lzo decompression failed, data probably corrupt [ 269.153489][ T5769] SQUASHFS error: Failed to read block 0x28d: -5 [ 269.179634][ T5769] SQUASHFS error: Unable to read metadata cache entry [28b] [ 269.193603][ T5769] SQUASHFS error: Unable to read inode 0x11f [ 269.350379][ T5778] loop0: detected capacity change from 0 to 4096 [ 269.458929][ T5782] loop2: detected capacity change from 0 to 128 [ 269.497683][ T5782] omfs: sysblock size (-58445445) is out of range [ 271.857461][ T5793] netlink: 144 bytes leftover after parsing attributes in process `syz.3.366'. [ 271.916654][ T5796] loop2: detected capacity change from 0 to 1024 [ 271.946331][ T956] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 271.966441][ T5796] EXT4-fs: Ignoring removed bh option [ 272.031445][ T5796] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 272.095529][ T5796] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.147789][ T4382] libceph: connect (1)[c::]:6789 error -101 [ 272.168890][ T4382] libceph: mon0 (1)[c::]:6789 connect error [ 272.178106][ T5803] ceph: No mds server is up or the cluster is laggy [ 272.197908][ T5806] overlayfs: overlapping lowerdir path [ 272.334141][ T956] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 272.496585][ T4988] libceph: connect (1)[c::]:6789 error -101 [ 272.507318][ T4988] libceph: mon0 (1)[c::]:6789 connect error [ 273.056569][ T4988] libceph: connect (1)[c::]:6789 error -101 [ 273.066924][ T4988] libceph: mon0 (1)[c::]:6789 connect error [ 274.162715][ T5801] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 274.409954][ T956] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 274.633613][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 274.669155][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 275.101030][ T956] usb 1-1: Product: syz [ 275.111616][ T956] usb 1-1: Manufacturer: syz [ 275.121799][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 275.145207][ T956] usb 1-1: SerialNumber: syz [ 275.159009][ T956] usb 1-1: can't set config #4, error -71 [ 275.176772][ T956] usb 1-1: USB disconnect, device number 7 [ 275.296185][ T5813] device bridge5 entered promiscuous mode [ 277.254832][ T5827] device bridge8 entered promiscuous mode [ 277.464041][ T5842] device bridge7 entered promiscuous mode [ 278.241581][ T5841] loop4: detected capacity change from 0 to 1024 [ 278.253087][ T5841] EXT4-fs: Ignoring removed bh option [ 278.640419][ T5841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 278.653669][ T5850] loop3: detected capacity change from 0 to 1024 [ 278.665957][ T5850] EXT4-fs: Ignoring removed bh option [ 278.678240][ T5841] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.034750][ T5852] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.376: lblock 3 mapped to illegal pblock 3 (length 3) [ 279.051205][ T5848] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 279.077241][ T5852] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 279.089646][ T5852] EXT4-fs (loop4): This should not happen!! Data will be lost [ 279.089646][ T5852] [ 279.114810][ T5852] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.376: bg 0: block 112: padding at end of block bitmap is not set [ 279.345009][ T5852] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 279.357416][ T5852] EXT4-fs (loop4): This should not happen!! Data will be lost [ 279.357416][ T5852] [ 279.367085][ T5852] EXT4-fs (loop4): Total free blocks count 0 [ 279.373058][ T5852] EXT4-fs (loop4): Free/Dirty block details [ 279.378958][ T5852] EXT4-fs (loop4): free_blocks=0 [ 279.383878][ T5852] EXT4-fs (loop4): dirty_blocks=64 [ 279.388994][ T5852] EXT4-fs (loop4): Block reservation details [ 279.477120][ T5850] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 279.501881][ T5850] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.515207][ T26] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 279.546493][ T4472] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 279.588612][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 279.774975][ T26] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 279.855624][ T5864] overlayfs: overlapping lowerdir path [ 279.861318][ T26] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 279.870083][ T5861] ceph: No mds server is up or the cluster is laggy [ 279.968181][ T26] usb 3-1: Product: syz [ 280.011299][ T26] usb 3-1: Manufacturer: syz [ 280.063222][ T26] usb 3-1: SerialNumber: syz [ 280.126687][ T4343] libceph: connect (1)[c::]:6789 error -101 [ 280.143724][ T4343] libceph: mon0 (1)[c::]:6789 connect error [ 280.239243][ T26] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 280.641131][ T5847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.780002][ T5847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.030652][ T26] vp7045: USB control message 'out' went wrong. [ 281.058685][ T26] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 281.306133][ T26] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 281.463245][ T26] usb 3-1: USB disconnect, device number 3 [ 283.838465][ T5884] device bridge6 entered promiscuous mode [ 285.778017][ T5890] TC_ACT_REPEAT abuse ? [ 286.767411][ T5907] loop4: detected capacity change from 0 to 1024 [ 286.780441][ T5907] EXT4-fs: Ignoring removed bh option [ 286.816816][ T5892] device bridge9 entered promiscuous mode [ 287.000221][ T5902] device bridge9 entered promiscuous mode [ 287.078349][ T5907] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 287.085243][ T5915] loop0: detected capacity change from 0 to 4096 [ 287.105407][ T5907] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.138943][ T5915] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 287.165232][ T5915] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 287.190980][ T5915] loop0: [ 287.263666][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 287.774099][ T14] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 288.553856][ T5940] overlayfs: overlapping lowerdir path [ 288.592553][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 288.616652][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 288.673554][ T5938] ceph: No mds server is up or the cluster is laggy [ 288.693454][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 288.742737][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 289.231223][ T14] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 289.335990][ T4352] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 289.544668][ T4352] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 289.996961][ T5949] tipc: Enabling of bearer rejected, failed to enable media [ 290.017635][ T5949] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 290.442896][ T4352] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 290.451547][ T4352] usb 1-1: Product: syz [ 290.456025][ T4352] usb 1-1: Manufacturer: syz [ 290.460709][ T4352] usb 1-1: SerialNumber: syz [ 290.716036][ T4352] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 290.751114][ T14] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 290.759374][ T14] usb 2-1: Product: syz [ 290.763621][ T14] usb 2-1: Manufacturer: syz [ 290.768351][ T14] usb 2-1: SerialNumber: syz [ 290.782614][ T14] usb 2-1: can't set config #4, error -71 [ 290.789889][ T14] usb 2-1: USB disconnect, device number 6 [ 292.240513][ T5946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.310053][ T5946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.814596][ T4352] vp7045: USB control message 'in' went wrong. [ 292.845211][ T4352] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 293.425220][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 294.546969][ T4352] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 294.616363][ T4352] usb 1-1: USB disconnect, device number 8 [ 294.717713][ T5980] netlink: 144 bytes leftover after parsing attributes in process `syz.3.410'. [ 297.651050][ T6011] overlayfs: overlapping lowerdir path [ 298.940618][ T956] libceph: connect (1)[c::]:6789 error -101 [ 298.977177][ T956] libceph: mon0 (1)[c::]:6789 connect error [ 299.059852][ T6009] ceph: No mds server is up or the cluster is laggy [ 299.076585][ T956] libceph: connect (1)[c::]:6789 error -101 [ 299.149361][ T956] libceph: mon0 (1)[c::]:6789 connect error [ 299.215510][ T14] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 299.508789][ T14] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 300.634972][ T14] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 300.644993][ T14] usb 4-1: Product: syz [ 300.652085][ T14] usb 4-1: Manufacturer: syz [ 300.657724][ T14] usb 4-1: SerialNumber: syz [ 301.140893][ T14] usb 4-1: can't set config #4, error -71 [ 301.185224][ T14] usb 4-1: USB disconnect, device number 2 [ 301.485193][ T4279] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 301.963627][ T4279] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 303.610153][ T4279] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 303.618772][ T4279] usb 5-1: Product: syz [ 303.623024][ T4279] usb 5-1: Manufacturer: syz [ 303.627754][ T4279] usb 5-1: SerialNumber: syz [ 303.648972][ T4279] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 303.906341][ T6043] i2c i2c-0: new_device: Extra parameters [ 304.125411][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.145202][ T6050] TC_ACT_REPEAT abuse ? [ 304.163637][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.318720][ T4279] vp7045: USB control message 'in' went wrong. [ 304.332675][ T4279] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 304.375828][ T4279] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 304.397819][ T4279] usb 5-1: USB disconnect, device number 3 [ 309.035193][ T956] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 309.806286][ T956] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 309.818000][ T6089] ceph: No mds server is up or the cluster is laggy [ 309.845328][ T956] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 309.893100][ T956] usb 4-1: Product: syz [ 309.916444][ T956] usb 4-1: Manufacturer: syz [ 309.938575][ T956] usb 4-1: SerialNumber: syz [ 309.964690][ T14] libceph: connect (1)[c::]:6789 error -101 [ 309.973513][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 309.993179][ T956] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 311.638987][ T6076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.778697][ T6076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.848552][ T956] vp7045: USB control message 'out' went wrong. [ 311.855439][ T956] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 311.898658][ T956] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 311.925376][ T956] usb 4-1: USB disconnect, device number 3 [ 312.084995][ T6113] device bridge10 entered promiscuous mode [ 312.274538][ T4358] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 314.095225][ T4358] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 314.114733][ T4358] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 314.124940][ T4358] usb 2-1: Product: syz [ 314.190994][ T4358] usb 2-1: Manufacturer: syz [ 314.847404][ T4358] usb 2-1: SerialNumber: syz [ 314.884676][ T4358] usb 2-1: can't set config #4, error -71 [ 314.963372][ T4358] usb 2-1: USB disconnect, device number 7 [ 317.526360][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.532684][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.390215][ T4353] libceph: connect (1)[c::]:6789 error -101 [ 320.399028][ T6158] ceph: No mds server is up or the cluster is laggy [ 320.410126][ T4353] libceph: mon0 (1)[c::]:6789 connect error [ 321.421651][ T6168] tipc: Enabling of bearer rejected, failed to enable media [ 321.472409][ T6168] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 322.015282][ T4358] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 322.306047][ T4358] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 322.352478][ T4358] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 322.436148][ T4358] usb 3-1: Product: syz [ 323.258564][ T4358] usb 3-1: Manufacturer: syz [ 324.195962][ T4358] usb 3-1: SerialNumber: syz [ 324.278352][ T4358] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 324.293159][ T6186] netlink: 144 bytes leftover after parsing attributes in process `syz.4.456'. [ 324.546907][ T6197] bq24190-charger 0-0006: No support for SMBUS_BYTE_DATA [ 325.226767][ T6197] i2c i2c-0: new_device: Instantiated device bq24190 at 0x06 [ 326.464383][ T4358] vp7045: USB control message 'out' went wrong. [ 326.491348][ T4358] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 326.529388][ T4358] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 327.617700][ T4343] usb 3-1: USB disconnect, device number 4 [ 329.209898][ T6220] tipc: Enabling of bearer rejected, failed to enable media [ 329.228542][ T6220] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 329.724144][ T6227] device bridge12 entered promiscuous mode [ 334.846035][ T4343] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 335.107129][ T4343] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 335.207977][ T4343] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 335.255847][ T4343] usb 4-1: Product: syz [ 335.283299][ T4343] usb 4-1: Manufacturer: syz [ 335.295641][ T4343] usb 4-1: SerialNumber: syz [ 335.354196][ T4343] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 335.722228][ T6264] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 336.291180][ T6264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.326290][ T6264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.024811][ T4343] vp7045: USB control message 'in' went wrong. [ 337.055175][ T4343] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 337.075216][ T4343] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 337.195893][ T6281] tipc: Enabling of bearer rejected, failed to enable media [ 337.214144][ T6281] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 337.985499][ T4343] usb 4-1: USB disconnect, device number 4 [ 339.151631][ T6292] loop1: detected capacity change from 0 to 1024 [ 340.329309][ T6292] EXT4-fs: Ignoring removed bh option [ 340.438109][ T6292] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 340.456566][ T6292] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.466076][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 342.664420][ T6313] loop0: detected capacity change from 0 to 512 [ 343.013086][ T6313] tmpfs: Bad value for 'nr_blocks' [ 344.604958][ T6321] loop0: detected capacity change from 0 to 512 [ 344.613221][ T6321] EXT4-fs: Ignoring removed bh option [ 344.628172][ T6321] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 345.193652][ T6321] EXT4-fs (loop0): 1 truncate cleaned up [ 345.215663][ T6321] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 345.673834][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 345.687674][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 346.459277][ T6319] ceph: No mds server is up or the cluster is laggy [ 346.660455][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 348.247827][ T5809] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 348.483644][ T5809] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 349.296039][ T6357] device bridge10 entered promiscuous mode [ 350.012283][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 350.023217][ T5809] usb 1-1: Product: syz [ 350.027519][ T5809] usb 1-1: Manufacturer: syz [ 350.033232][ T5809] usb 1-1: SerialNumber: syz [ 350.053996][ T6352] tipc: Enabling of bearer rejected, failed to enable media [ 350.092244][ T6352] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 350.204918][ T5809] usb 1-1: can't set config #4, error -71 [ 350.217017][ T5809] usb 1-1: USB disconnect, device number 9 [ 351.407909][ T6381] loop0: detected capacity change from 0 to 2048 [ 351.444083][ T6381] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 351.479381][ T6381] UDF-fs: Scanning with blocksize 512 failed [ 351.506352][ T6381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 352.598176][ T6396] device bridge11 entered promiscuous mode [ 357.270060][ T4967] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 357.632733][ T6427] tipc: Enabling of bearer rejected, failed to enable media [ 357.649478][ T6427] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 359.375169][ T4967] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 359.404937][ T4967] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 359.438932][ T4967] usb 3-1: Product: syz [ 359.455256][ T4967] usb 3-1: Manufacturer: syz [ 359.459876][ T4967] usb 3-1: SerialNumber: syz [ 360.351734][ T6439] loop1: detected capacity change from 0 to 512 [ 360.410965][ T4967] usb 3-1: can't set config #4, error -71 [ 360.427490][ T4967] usb 3-1: USB disconnect, device number 5 [ 360.456092][ T6439] tmpfs: Bad value for 'nr_blocks' [ 364.865601][ T6465] loop0: detected capacity change from 0 to 4096 [ 364.984419][ T6465] loop0: [ 367.733788][ T6480] tipc: Enabling of bearer rejected, failed to enable media [ 367.748660][ T5809] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 367.826059][ T6480] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 367.973137][ T5809] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 369.570092][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 369.600414][ T5809] usb 2-1: Product: syz [ 369.604614][ T5809] usb 2-1: Manufacturer: syz [ 369.624451][ T5809] usb 2-1: SerialNumber: syz [ 369.664721][ T5809] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 370.856940][ T6494] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 371.965539][ T5809] vp7045: USB control message 'out' went wrong. [ 371.971841][ T5809] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 372.324054][ T5809] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 373.912333][ T5809] usb 2-1: USB disconnect, device number 8 [ 373.948333][ T956] libceph: connect (1)[c::]:6789 error -101 [ 373.954380][ T956] libceph: mon0 (1)[c::]:6789 connect error [ 373.978891][ T6503] ceph: No mds server is up or the cluster is laggy [ 377.136508][ T6537] loop0: detected capacity change from 0 to 1024 [ 378.328212][ T6537] EXT4-fs: Ignoring removed bh option [ 378.386521][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.393370][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.476714][ T6533] tipc: Enabling of bearer rejected, failed to enable media [ 378.535911][ T6537] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 378.545009][ T6537] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.564548][ T6533] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 378.807394][ T6550] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.548: lblock 3 mapped to illegal pblock 3 (length 3) [ 378.822794][ T6550] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 378.835293][ T6550] EXT4-fs (loop0): This should not happen!! Data will be lost [ 378.835293][ T6550] [ 378.860523][ T6550] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.548: bg 0: block 112: padding at end of block bitmap is not set [ 378.893059][ T6550] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 378.905577][ T6550] EXT4-fs (loop0): This should not happen!! Data will be lost [ 378.905577][ T6550] [ 378.917873][ T6550] EXT4-fs (loop0): Total free blocks count 0 [ 378.923918][ T6550] EXT4-fs (loop0): Free/Dirty block details [ 378.930069][ T6550] EXT4-fs (loop0): free_blocks=0 [ 378.935142][ T6550] EXT4-fs (loop0): dirty_blocks=64 [ 378.940289][ T6550] EXT4-fs (loop0): Block reservation details [ 379.335785][ T48] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 379.765265][ T7] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 380.012248][ T7] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 380.067096][ T7] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 380.155009][ T7] usb 1-1: Product: syz [ 380.197361][ T7] usb 1-1: Manufacturer: syz [ 380.254927][ T7] usb 1-1: SerialNumber: syz [ 380.336139][ T7] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 381.334983][ T6572] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 381.549469][ T7] vp7045: USB control message 'in' went wrong. [ 381.565103][ T7] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 381.603413][ T7] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 381.644118][ T7] usb 1-1: USB disconnect, device number 10 [ 386.405121][ T956] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 387.376194][ T956] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 387.386265][ T6612] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 387.432313][ T956] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 387.442327][ T956] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 387.451595][ T956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.469275][ T956] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 387.485900][ T956] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 387.535810][ T6614] loop0: detected capacity change from 0 to 4096 [ 387.617780][ T6614] loop0: [ 388.805158][ T26] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 388.951817][ T6635] netlink: 64 bytes leftover after parsing attributes in process `syz.1.564'. [ 389.013657][ T26] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 389.024435][ T26] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 389.116263][ T26] usb 5-1: Product: syz [ 389.177424][ T26] usb 5-1: Manufacturer: syz [ 389.203096][ T26] usb 5-1: SerialNumber: syz [ 389.223053][ T26] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 389.498847][ T6639] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 390.312309][ T5809] usb 4-1: USB disconnect, device number 5 [ 390.363430][ T5809] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 390.418636][ T5809] spcp8x5 4-1:1.0: device disconnected [ 390.450927][ T26] vp7045: USB control message 'in' went wrong. [ 390.462916][ T26] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 390.497049][ T26] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 390.525374][ T26] usb 5-1: USB disconnect, device number 4 [ 390.758757][ T6648] device bridge7 entered promiscuous mode [ 394.785726][ T6657] tipc: Enabling of bearer rejected, failed to enable media [ 394.797664][ T6657] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 397.242740][ T6686] device bridge12 entered promiscuous mode [ 398.730043][ T6688] loop0: detected capacity change from 0 to 6 [ 398.847951][ T6688] ldm_validate_privheads(): Disk read failed. [ 398.857965][ T6688] loop0: [ 398.870569][ T6688] loop0: partition table partially beyond EOD, truncated [ 399.025346][ T4279] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 399.064088][ T6695] tmpfs: Unknown parameter 'grpquota' [ 399.665686][ T3641] ldm_validate_privheads(): Disk read failed. [ 399.671842][ T3641] loop0: [ 399.674801][ T3641] loop0: partition table partially beyond EOD, truncated [ 399.893369][ T4279] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 399.919978][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 399.940559][ T4279] usb 2-1: Product: syz [ 399.958189][ T6704] loop4: detected capacity change from 0 to 2048 [ 400.872033][ T6704] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 400.883104][ T4279] usb 2-1: Manufacturer: syz [ 400.886641][ T6705] tipc: Enabling of bearer rejected, failed to enable media [ 400.896222][ T4279] usb 2-1: SerialNumber: syz [ 400.900237][ T6705] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 400.925329][ T6704] UDF-fs: Scanning with blocksize 512 failed [ 400.947089][ T4279] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 400.964575][ T6704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.223361][ T6715] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 402.515372][ T7] libceph: connect (1)[c::]:6789 error -101 [ 402.521375][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 402.538209][ T6722] ceph: No mds server is up or the cluster is laggy [ 402.610569][ T6690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.678023][ T6690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.733757][ T4279] vp7045: USB control message 'in' went wrong. [ 402.741340][ T4279] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 402.782387][ T4279] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 402.807445][ T4279] usb 2-1: USB disconnect, device number 9 [ 403.164328][ T6732] netlink: 64 bytes leftover after parsing attributes in process `syz.0.583'. [ 404.266071][ T6737] loop1: detected capacity change from 0 to 1024 [ 404.279870][ T6737] EXT4-fs: Ignoring removed bh option [ 404.386725][ T6737] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 404.404782][ T6737] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.386562][ T6737] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 3: comm syz.1.597: lblock 3 mapped to illegal pblock 3 (length 3) [ 406.229007][ T6740] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 406.243623][ T6737] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 406.407380][ T6737] EXT4-fs (loop1): This should not happen!! Data will be lost [ 406.407380][ T6737] [ 406.501424][ T6758] tmpfs: Unknown parameter 'grpquota' [ 406.716671][ T6753] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 406.730066][ T6753] EXT4-fs (loop1): This should not happen!! Data will be lost [ 406.730066][ T6753] [ 406.742411][ T6753] EXT4-fs (loop1): Total free blocks count 0 [ 406.748496][ T6753] EXT4-fs (loop1): Free/Dirty block details [ 406.754410][ T6753] EXT4-fs (loop1): free_blocks=0 [ 406.759641][ T6753] EXT4-fs (loop1): dirty_blocks=64 [ 406.764783][ T6753] EXT4-fs (loop1): Block reservation details [ 406.970284][ T4365] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 406.992709][ T6764] loop0: detected capacity change from 0 to 6 [ 408.126557][ T3641] loop0: [ 408.129586][ T3641] loop0: partition table partially beyond EOD, truncated [ 409.325019][ C1] sched: RT throttling activated [ 409.400683][ T4355] libceph: connect (1)[c::]:6789 error -101 [ 409.406810][ T4355] libceph: mon0 (1)[c::]:6789 connect error [ 409.450985][ T6778] ceph: No mds server is up or the cluster is laggy [ 409.505472][ T14] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 409.538012][ T6791] netlink: 64 bytes leftover after parsing attributes in process `syz.1.609'. [ 409.698949][ T14] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 409.720970][ T14] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 409.744672][ T14] usb 4-1: Product: syz [ 409.754795][ T14] usb 4-1: Manufacturer: syz [ 409.766588][ T14] usb 4-1: SerialNumber: syz [ 409.807272][ T14] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 410.040492][ T6793] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 410.296727][ T6780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.378888][ T6780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.618028][ T14] vp7045: USB control message 'in' went wrong. [ 410.636950][ T14] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 410.759027][ T14] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 410.877501][ T14] usb 4-1: USB disconnect, device number 6 [ 411.474534][ T6808] tmpfs: Unknown parameter 'grpquota' [ 413.280639][ T3641] loop0: [ 413.283635][ T3641] loop0: partition table partially beyond EOD, truncated [ 413.692788][ T6838] netlink: 64 bytes leftover after parsing attributes in process `syz.3.622'. [ 414.620760][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 414.631426][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 414.658177][ T6837] ceph: No mds server is up or the cluster is laggy [ 414.764244][ T6847] tipc: Enabling of bearer rejected, failed to enable media [ 414.791380][ T6847] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 416.167651][ T6861] loop3: detected capacity change from 0 to 512 [ 416.374151][ T6866] tmpfs: Unknown parameter 'grpquota' [ 416.405103][ T4279] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 417.022819][ T6861] tmpfs: Bad value for 'nr_blocks' [ 417.558410][ T4279] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 417.579837][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 417.611652][ T4279] usb 2-1: Product: syz [ 417.616446][ T4279] usb 2-1: Manufacturer: syz [ 417.621298][ T4279] usb 2-1: SerialNumber: syz [ 417.654812][ T6870] loop3: detected capacity change from 0 to 512 [ 417.666219][ T6870] EXT4-fs: Ignoring removed bh option [ 417.673422][ T6870] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 418.979354][ T6870] EXT4-fs (loop3): 1 truncate cleaned up [ 418.992925][ T6870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 419.036983][ T4279] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 420.180956][ T4279] vp7045: USB control message 'out' went wrong. [ 420.198931][ T4279] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 420.226575][ T4279] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 420.867613][ T4279] usb 2-1: USB disconnect, device number 10 [ 420.994524][ T6888] tipc: Enabling of bearer rejected, failed to enable media [ 421.055267][ T6888] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 421.088231][ T6894] device bridge13 entered promiscuous mode [ 421.811504][ T6897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.636'. [ 421.826942][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 422.064434][ T6902] device bridge14 entered promiscuous mode [ 423.456210][ T4352] libceph: connect (1)[c::]:6789 error -101 [ 423.462227][ T4352] libceph: mon0 (1)[c::]:6789 connect error [ 423.482323][ T6908] ceph: No mds server is up or the cluster is laggy [ 423.588896][ T6914] loop2: detected capacity change from 0 to 1024 [ 423.613716][ T6914] EXT4-fs: Ignoring removed bh option [ 423.661320][ T6914] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 423.670678][ T6914] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.024219][ T6918] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.640: lblock 3 mapped to illegal pblock 3 (length 3) [ 424.040225][ T6918] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 424.052601][ T6918] EXT4-fs (loop2): This should not happen!! Data will be lost [ 424.052601][ T6918] [ 424.205460][ T9] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 424.231671][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 424.244972][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 424.244972][ T9] [ 424.262328][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 425.374855][ T6940] tmpfs: Unknown parameter 'grpquota' [ 426.498061][ T6952] loop3: detected capacity change from 0 to 8 [ 426.584418][ T6952] SQUASHFS error: lzo decompression failed, data probably corrupt [ 426.585089][ T7] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 426.622467][ T6954] tipc: Enabling of bearer rejected, failed to enable media [ 426.631290][ T6952] SQUASHFS error: Failed to read block 0x28d: -5 [ 426.646767][ T6954] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 426.690205][ T6952] SQUASHFS error: Unable to read metadata cache entry [28b] [ 427.896904][ T6952] SQUASHFS error: Unable to read inode 0x11f [ 427.999070][ T7] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 428.020210][ T7] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 428.120585][ T6964] loop3: detected capacity change from 0 to 128 [ 428.135613][ T6964] omfs: sysblock size (-58445445) is out of range [ 429.438772][ T7] usb 2-1: Product: syz [ 429.713929][ T7] usb 2-1: Manufacturer: syz [ 429.718696][ T7] usb 2-1: SerialNumber: syz [ 429.936549][ T7] usb 2-1: can't set config #4, error -71 [ 429.996403][ T7] usb 2-1: USB disconnect, device number 11 [ 431.797797][ T6975] netlink: 64 bytes leftover after parsing attributes in process `syz.4.653'. [ 431.810088][ T6972] device bridge11 entered promiscuous mode [ 431.976344][ T4355] libceph: connect (1)[c::]:6789 error -101 [ 431.982846][ T4355] libceph: mon0 (1)[c::]:6789 connect error [ 432.006135][ T6980] ceph: No mds server is up or the cluster is laggy [ 432.915501][ T4355] libceph: connect (1)[c::]:6789 error -101 [ 432.931536][ T4355] libceph: mon0 (1)[c::]:6789 connect error [ 433.097057][ T6990] loop2: detected capacity change from 0 to 512 [ 433.230465][ T6993] device bridge8 entered promiscuous mode [ 433.416632][ T6990] tmpfs: Bad value for 'nr_blocks' [ 434.213506][ T6994] loop2: detected capacity change from 0 to 512 [ 434.223206][ T6994] EXT4-fs: Ignoring removed bh option [ 434.231738][ T6994] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 436.059113][ T6994] EXT4-fs (loop2): 1 truncate cleaned up [ 436.068015][ T6994] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 436.501792][ T7004] tipc: Enabling of bearer rejected, failed to enable media [ 436.511954][ T7004] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 437.504310][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 438.745224][ T4967] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 438.882285][ T7029] device bridge9 entered promiscuous mode [ 439.724519][ T4967] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 439.828143][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.834553][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.272485][ T4967] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 440.394790][ T4967] usb 5-1: Product: syz [ 440.439590][ T4967] usb 5-1: Manufacturer: syz [ 440.465887][ T4967] usb 5-1: SerialNumber: syz [ 440.607217][ T4967] usb 5-1: can't set config #4, error -71 [ 440.654514][ T4967] usb 5-1: USB disconnect, device number 5 [ 440.926268][ T7040] device bridge13 entered promiscuous mode [ 441.716984][ T7033] ceph: No mds server is up or the cluster is laggy [ 441.724218][ T4967] libceph: connect (1)[c::]:6789 error -101 [ 441.733965][ T4967] libceph: mon0 (1)[c::]:6789 connect error [ 441.887933][ T7048] loop4: detected capacity change from 0 to 512 [ 442.619856][ T7048] tmpfs: Bad value for 'nr_blocks' [ 442.840371][ T7055] netlink: 64 bytes leftover after parsing attributes in process `syz.1.672'. [ 443.327601][ T7059] TC_ACT_REPEAT abuse ? [ 443.340147][ T7064] tipc: Enabling of bearer rejected, failed to enable media [ 444.204033][ T7064] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 444.681572][ T7072] loop0: detected capacity change from 0 to 4096 [ 444.784443][ T7072] loop0: [ 444.876705][ T7080] loop2: detected capacity change from 0 to 512 [ 444.985058][ T4382] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 445.677297][ T7083] device bridge12 entered promiscuous mode [ 447.286428][ T4382] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 447.329768][ T7080] tmpfs: Bad value for 'nr_blocks' [ 447.358356][ T4382] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 447.509513][ T4382] usb 5-1: Product: syz [ 447.576885][ T4382] usb 5-1: Manufacturer: syz [ 447.664640][ T4382] usb 5-1: SerialNumber: syz [ 448.128124][ T4382] usb 5-1: can't set config #4, error -71 [ 448.145728][ T4382] usb 5-1: USB disconnect, device number 6 [ 448.183302][ T4355] libceph: connect (1)[c::]:6789 error -101 [ 448.190959][ T4355] libceph: mon0 (1)[c::]:6789 connect error [ 448.199854][ T7097] loop4: detected capacity change from 0 to 8 [ 448.466709][ T4355] libceph: connect (1)[c::]:6789 error -101 [ 448.476081][ T4355] libceph: mon0 (1)[c::]:6789 connect error [ 448.894560][ T7092] ceph: No mds server is up or the cluster is laggy [ 448.908485][ T7097] SQUASHFS error: lzo decompression failed, data probably corrupt [ 448.921467][ T7097] SQUASHFS error: Failed to read block 0x28d: -5 [ 448.939865][ T7097] SQUASHFS error: Unable to read metadata cache entry [28b] [ 448.974287][ T7097] SQUASHFS error: Unable to read inode 0x11f [ 448.996238][ T7102] tipc: Enabling of bearer rejected, failed to enable media [ 449.016568][ T7102] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 449.086089][ T7104] loop0: detected capacity change from 0 to 4096 [ 450.019127][ T7111] netlink: 64 bytes leftover after parsing attributes in process `syz.2.690'. [ 450.125885][ T7112] loop4: detected capacity change from 0 to 128 [ 451.241421][ T7112] omfs: sysblock size (-58445445) is out of range [ 453.214112][ T7131] device bridge13 entered promiscuous mode [ 453.355098][ T4382] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 454.040844][ T7139] tipc: Enabling of bearer rejected, failed to enable media [ 454.050991][ T7139] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 454.846473][ T4382] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 454.878747][ T4382] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 454.898385][ T4382] usb 5-1: Product: syz [ 454.906222][ T4382] usb 5-1: Manufacturer: syz [ 454.911571][ T4382] usb 5-1: SerialNumber: syz [ 454.917072][ T7145] loop2: detected capacity change from 0 to 1024 [ 454.932937][ T4382] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 454.946015][ T7145] EXT4-fs: Ignoring removed bh option [ 455.020942][ T7145] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 455.029916][ T7145] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.045791][ T7150] loop0: detected capacity change from 0 to 512 [ 455.204024][ T7155] device bridge8 entered promiscuous mode [ 457.025323][ T4382] vp7045: USB control message 'out' went wrong. [ 457.031610][ T4382] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 457.059710][ T4382] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 457.123177][ T7150] tmpfs: Bad value for 'nr_blocks' [ 457.204095][ T4352] usb 5-1: USB disconnect, device number 7 [ 457.310963][ T7160] loop0: detected capacity change from 0 to 512 [ 457.320933][ T7160] EXT4-fs: Ignoring removed bh option [ 457.425122][ T7151] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 458.179427][ T7160] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 458.335192][ T7160] EXT4-fs (loop0): 1 truncate cleaned up [ 458.345297][ T7160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 458.679108][ T7159] loop1: detected capacity change from 0 to 2048 [ 458.758661][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 458.760368][ T7159] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 458.784355][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 458.905509][ T7159] UDF-fs: Scanning with blocksize 512 failed [ 459.168980][ T7159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 459.419799][ T7167] loop0: detected capacity change from 0 to 4096 [ 459.568152][ T7167] loop0: [ 459.845157][ T4351] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 460.739398][ T4351] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 460.780310][ T7177] device bridge10 entered promiscuous mode [ 460.808417][ T4351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.501173][ T4351] usb 3-1: config 0 descriptor?? [ 462.397279][ T7186] loop3: detected capacity change from 0 to 8 [ 463.056932][ T7184] tipc: Enabling of bearer rejected, failed to enable media [ 463.090109][ T7184] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 463.125201][ T7186] SQUASHFS error: lzo decompression failed, data probably corrupt [ 463.194292][ T7186] SQUASHFS error: Failed to read block 0x28d: -5 [ 463.207170][ T4351] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 463.228582][ T4351] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 463.263171][ T7186] SQUASHFS error: Unable to read metadata cache entry [28b] [ 463.295680][ T7186] SQUASHFS error: Unable to read inode 0x11f [ 463.305026][ T4351] [drm:udl_init] *ERROR* Selecting channel failed [ 463.331941][ T4351] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 463.367630][ T4351] [drm] Initialized udl on minor 2 [ 463.380792][ T4351] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 463.384559][ T7198] loop1: detected capacity change from 0 to 2048 [ 463.423931][ T7198] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 463.457317][ T7198] UDF-fs: Scanning with blocksize 512 failed [ 463.545054][ T4352] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 465.172214][ T4351] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 465.530950][ T4352] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 465.656070][ T7198] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 465.694132][ T4352] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 465.742349][ T4351] usb 3-1: USB disconnect, device number 6 [ 465.750412][ T956] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 465.762782][ T4352] usb 5-1: Product: syz [ 465.965270][ T956] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 465.971735][ T4352] usb 5-1: Manufacturer: syz [ 465.973557][ T956] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 466.104659][ T4352] usb 5-1: SerialNumber: syz [ 466.132271][ T4352] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 466.503410][ T7213] loop0: detected capacity change from 0 to 1024 [ 466.540048][ T7213] EXT4-fs: Ignoring removed bh option [ 466.560556][ T4352] vp7045: USB control message 'out' went wrong. [ 466.567006][ T4352] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 466.578140][ T4352] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 466.599877][ T4352] usb 5-1: USB disconnect, device number 8 [ 466.699540][ T7213] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 466.727793][ T7221] loop1: detected capacity change from 0 to 8 [ 466.757552][ T7213] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.902092][ T7221] SQUASHFS error: lzo decompression failed, data probably corrupt [ 467.023075][ T7221] SQUASHFS error: Failed to read block 0x28d: -5 [ 467.155335][ T7218] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 467.572076][ T7221] SQUASHFS error: Unable to read metadata cache entry [28b] [ 467.579512][ T7221] SQUASHFS error: Unable to read inode 0x11f [ 467.945420][ T7225] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.720: lblock 3 mapped to illegal pblock 3 (length 1) [ 468.190665][ T7225] EXT4-fs error (device loop0): ext4_ext_remove_space:2945: inode #15: comm syz.0.720: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 468.284096][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 470.018261][ T7241] loop1: detected capacity change from 0 to 128 [ 470.059998][ T7241] omfs: sysblock size (-58445445) is out of range [ 470.457878][ T7246] device bridge11 entered promiscuous mode [ 470.483217][ T7245] tipc: Enabling of bearer rejected, failed to enable media [ 470.501299][ T7245] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 470.521770][ T7249] TC_ACT_REPEAT abuse ? [ 470.665158][ T4351] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 470.690657][ T7251] device bridge14 entered promiscuous mode [ 471.542155][ T7256] netlink: 64 bytes leftover after parsing attributes in process `syz.2.734'. [ 471.705173][ T7182] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 472.029238][ T4351] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 473.039932][ T7260] netlink: 144 bytes leftover after parsing attributes in process `syz.0.733'. [ 473.050207][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.064283][ T4351] usb 5-1: config 0 descriptor?? [ 473.113101][ T4351] usb 5-1: can't set config #0, error -71 [ 473.122626][ T4351] usb 5-1: USB disconnect, device number 9 [ 473.184512][ T7262] loop4: detected capacity change from 0 to 512 [ 473.224886][ T7262] tmpfs: Bad value for 'nr_blocks' [ 473.244340][ T7182] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 473.271740][ T7182] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 474.126980][ T7182] usb 4-1: Product: syz [ 474.146918][ T7182] usb 4-1: Manufacturer: syz [ 474.151660][ T7182] usb 4-1: SerialNumber: syz [ 474.211562][ T7182] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 475.546341][ T7182] vp7045: USB control message 'out' went wrong. [ 475.553801][ T7182] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 475.595870][ T7182] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 476.424090][ T7182] usb 4-1: USB disconnect, device number 7 [ 476.489953][ T7288] tipc: Enabling of bearer rejected, failed to enable media [ 476.563681][ T7288] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 476.651863][ T7292] loop1: detected capacity change from 0 to 8 [ 476.658752][ T7290] loop2: detected capacity change from 0 to 1024 [ 476.737228][ T7292] SQUASHFS error: lzo decompression failed, data probably corrupt [ 476.754744][ T7290] EXT4-fs: Ignoring removed bh option [ 476.776015][ T7292] SQUASHFS error: Failed to read block 0x28d: -5 [ 476.782919][ T7292] SQUASHFS error: Unable to read metadata cache entry [28b] [ 476.793210][ T7292] SQUASHFS error: Unable to read inode 0x11f [ 476.841076][ T7290] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 476.851760][ T7290] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.626133][ T7290] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.744: lblock 3 mapped to illegal pblock 3 (length 3) [ 477.649833][ T7300] tipc: Enabling of bearer rejected, failed to enable media [ 477.676638][ T7300] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 477.901679][ T7290] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 477.953184][ T7290] EXT4-fs (loop2): This should not happen!! Data will be lost [ 477.953184][ T7290] [ 478.062846][ T7303] loop1: detected capacity change from 0 to 128 [ 478.737272][ T7303] omfs: sysblock size (-58445445) is out of range [ 479.037934][ T7290] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.744: bg 0: block 112: padding at end of block bitmap is not set [ 480.028992][ T7290] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 480.085119][ T7290] EXT4-fs (loop2): This should not happen!! Data will be lost [ 480.085119][ T7290] [ 480.121014][ T7290] EXT4-fs (loop2): Total free blocks count 0 [ 480.131158][ T7290] EXT4-fs (loop2): Free/Dirty block details [ 480.135385][ T7308] netlink: 144 bytes leftover after parsing attributes in process `syz.1.748'. [ 480.151464][ T7290] EXT4-fs (loop2): free_blocks=0 [ 480.171671][ T7290] EXT4-fs (loop2): dirty_blocks=64 [ 480.215361][ T7290] EXT4-fs (loop2): Block reservation details [ 480.270933][ T7311] loop3: detected capacity change from 0 to 512 [ 480.322536][ T4411] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 480.343159][ T7311] tmpfs: Bad value for 'nr_blocks' [ 481.685167][ T4343] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 483.248917][ T4343] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 483.259892][ T4343] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 483.275604][ T4343] usb 5-1: Product: syz [ 483.283313][ T4343] usb 5-1: Manufacturer: syz [ 483.290434][ T4343] usb 5-1: SerialNumber: syz [ 483.305342][ T4343] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 483.366002][ T7331] tipc: Enabling of bearer rejected, failed to enable media [ 483.392310][ T7331] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 483.416596][ T7335] loop3: detected capacity change from 0 to 2048 [ 483.436662][ T7335] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 483.467779][ T7335] UDF-fs: Scanning with blocksize 512 failed [ 483.512654][ T7335] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 483.564070][ T7341] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 483.805590][ T7341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.815806][ T7341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.916890][ T7346] bridge0: port 3(netdevsim0) entered blocking state [ 483.924075][ T7346] bridge0: port 3(netdevsim0) entered disabled state [ 483.938694][ T7346] device netdevsim0 entered promiscuous mode [ 483.946064][ T7346] bridge0: port 3(netdevsim0) entered blocking state [ 483.953173][ T7346] bridge0: port 3(netdevsim0) entered forwarding state [ 484.646029][ T4343] vp7045: USB control message 'in' went wrong. [ 484.655060][ T4343] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 484.695125][ T4343] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 484.707751][ T4343] usb 5-1: USB disconnect, device number 10 [ 484.841202][ T7350] device bridge14 entered promiscuous mode [ 485.808605][ T7352] TC_ACT_REPEAT abuse ? [ 485.927090][ T7357] netlink: 144 bytes leftover after parsing attributes in process `syz.4.761'. [ 486.363500][ T7359] loop3: detected capacity change from 0 to 1024 [ 486.523660][ T7359] EXT4-fs: Ignoring removed bh option [ 486.728986][ T7359] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 486.781283][ T7359] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.021892][ T7374] device bridge15 entered promiscuous mode [ 488.465863][ T7362] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 488.753943][ T7370] loop4: detected capacity change from 0 to 512 [ 488.766265][ T7359] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 3: comm syz.3.762: lblock 3 mapped to illegal pblock 3 (length 3) [ 488.788978][ T7376] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 488.801366][ T7376] EXT4-fs (loop3): This should not happen!! Data will be lost [ 488.801366][ T7376] [ 488.805429][ T7359] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 488.811105][ T7376] EXT4-fs (loop3): Total free blocks count 0 [ 488.829393][ T7376] EXT4-fs (loop3): Free/Dirty block details [ 488.853199][ T7376] EXT4-fs (loop3): free_blocks=0 [ 488.868905][ T7370] tmpfs: Bad value for 'nr_blocks' [ 488.891677][ T7376] EXT4-fs (loop3): dirty_blocks=48 [ 489.354821][ T7359] EXT4-fs (loop3): This should not happen!! Data will be lost [ 489.354821][ T7359] [ 489.465066][ T7376] EXT4-fs (loop3): Block reservation details [ 489.542097][ T7386] loop4: detected capacity change from 0 to 8 [ 489.603302][ T4375] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 491.220550][ T7386] SQUASHFS error: lzo decompression failed, data probably corrupt [ 491.501692][ T7386] SQUASHFS error: Failed to read block 0x28d: -5 [ 491.508919][ T7386] SQUASHFS error: Unable to read metadata cache entry [28b] [ 491.545985][ T956] libceph: connect (1)[c::]:6789 error -101 [ 491.621675][ T7403] bridge0: port 3(netdevsim0) entered blocking state [ 491.628680][ T7403] bridge0: port 3(netdevsim0) entered disabled state [ 491.640329][ T7403] device netdevsim0 entered promiscuous mode [ 491.647352][ T7403] bridge0: port 3(netdevsim0) entered blocking state [ 491.654141][ T7403] bridge0: port 3(netdevsim0) entered forwarding state [ 491.795058][ T128] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 492.440306][ T7395] ceph: No mds server is up or the cluster is laggy [ 492.459463][ T7405] loop2: detected capacity change from 0 to 1024 [ 492.464502][ T7386] SQUASHFS error: Unable to read inode 0x11f [ 492.474835][ T7405] EXT4-fs: Ignoring removed bh option [ 492.475680][ T956] libceph: mon0 (1)[c::]:6789 connect error [ 492.565265][ T7405] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 492.588802][ T7405] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.691138][ T7411] device bridge12 entered promiscuous mode [ 493.005687][ T7405] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.773: lblock 3 mapped to illegal pblock 3 (length 3) [ 493.113811][ T7412] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.773: bg 0: block 112: padding at end of block bitmap is not set [ 493.328448][ T128] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 494.329515][ T128] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 494.337752][ T128] usb 2-1: Product: syz [ 494.341933][ T128] usb 2-1: Manufacturer: syz [ 494.346599][ T128] usb 2-1: SerialNumber: syz [ 494.348558][ T7412] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 494.351198][ T7405] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 494.363607][ T7412] EXT4-fs (loop2): This should not happen!! Data will be lost [ 494.363607][ T7412] [ 494.376076][ T7405] EXT4-fs (loop2): This should not happen!! Data will be lost [ 494.376076][ T7405] [ 494.385966][ T7412] EXT4-fs (loop2): Total free blocks count 0 [ 494.385984][ T7412] EXT4-fs (loop2): Free/Dirty block details [ 494.385999][ T7412] EXT4-fs (loop2): free_blocks=0 [ 494.412457][ T7412] EXT4-fs (loop2): dirty_blocks=64 [ 494.417583][ T7412] EXT4-fs (loop2): Block reservation details [ 494.519844][ T128] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 494.606169][ T4514] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:15: lblock 8 mapped to illegal pblock 8 (length 8) [ 495.424084][ T128] vp7045: USB control message 'out' went wrong. [ 495.430472][ T128] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 495.441156][ T128] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 495.452863][ T128] usb 2-1: USB disconnect, device number 12 [ 495.520499][ T7421] device bridge13 entered promiscuous mode [ 495.554045][ T7427] loop1: detected capacity change from 0 to 512 [ 496.771199][ T7424] loop4: detected capacity change from 0 to 1024 [ 496.800696][ T7427] tmpfs: Bad value for 'nr_blocks' [ 496.822109][ T7424] EXT4-fs: Ignoring removed bh option [ 496.862583][ T7431] TC_ACT_REPEAT abuse ? [ 497.417359][ T7424] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 497.455160][ T7424] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.565558][ T7424] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.780: lblock 3 mapped to illegal pblock 3 (length 3) [ 497.582012][ T7424] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 497.597369][ T7424] EXT4-fs (loop4): This should not happen!! Data will be lost [ 497.597369][ T7424] [ 497.613417][ T7424] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.780: bg 0: block 112: padding at end of block bitmap is not set [ 497.648273][ T7424] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 497.819219][ T7424] EXT4-fs (loop4): This should not happen!! Data will be lost [ 497.819219][ T7424] [ 497.905822][ T7424] EXT4-fs (loop4): Total free blocks count 0 [ 497.953273][ T7424] EXT4-fs (loop4): Free/Dirty block details [ 498.004552][ T7424] EXT4-fs (loop4): free_blocks=0 [ 498.048478][ T7424] EXT4-fs (loop4): dirty_blocks=64 [ 498.092879][ T7424] EXT4-fs (loop4): Block reservation details [ 498.391351][ T7443] loop2: detected capacity change from 0 to 512 [ 498.434220][ T7443] tmpfs: Bad value for 'nr_blocks' [ 498.468336][ T4514] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:15: lblock 8 mapped to illegal pblock 8 (length 8) [ 498.499708][ T7444] loop0: detected capacity change from 0 to 6 [ 499.297409][ T7448] loop2: detected capacity change from 0 to 512 [ 499.306521][ T7448] EXT4-fs: Ignoring removed bh option [ 499.316060][ T7448] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 500.051608][ T7448] EXT4-fs (loop2): 1 truncate cleaned up [ 500.060565][ T7448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 500.704595][ T7458] device bridge9 entered promiscuous mode [ 501.007480][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 501.080913][ T7001] libceph: connect (1)[c::]:6789 error -101 [ 501.096822][ T7001] libceph: mon0 (1)[c::]:6789 connect error [ 501.108863][ T7456] ceph: No mds server is up or the cluster is laggy [ 501.149954][ T7465] tipc: Enabling of bearer rejected, failed to enable media [ 501.160254][ T7465] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 501.256902][ T7468] device bridge16 entered promiscuous mode [ 501.267918][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.285300][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.335106][ T4351] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 502.804263][ T7470] loop1: detected capacity change from 0 to 512 [ 502.854149][ T7470] tmpfs: Bad value for 'nr_blocks' [ 502.988986][ T7475] loop1: detected capacity change from 0 to 512 [ 502.997614][ T7475] EXT4-fs: Ignoring removed bh option [ 503.006836][ T7475] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 503.099735][ T4351] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 504.375466][ T7478] tipc: Enabling of bearer rejected, failed to enable media [ 504.405447][ T7478] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 505.713294][ T4351] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 505.916044][ T7475] EXT4-fs: error -4 creating inode table initialization thread [ 505.923742][ T7475] EXT4-fs (loop1): mount failed [ 505.951192][ T4351] usb 3-1: Product: syz [ 505.992889][ T4351] usb 3-1: Manufacturer: syz [ 506.778757][ T4351] usb 3-1: SerialNumber: syz [ 506.902535][ T4351] usb 3-1: can't set config #4, error -71 [ 506.994444][ T4351] usb 3-1: USB disconnect, device number 7 [ 507.255415][ T6725] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 509.540594][ T7486] kvm [7485]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 510.272267][ T7486] kvm [7485]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 511.778865][ T7508] tipc: Enabling of bearer rejected, failed to enable media [ 511.789873][ T7508] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 512.001034][ T7514] loop3: detected capacity change from 0 to 8 [ 512.131379][ T7514] SQUASHFS error: lzo decompression failed, data probably corrupt [ 512.165324][ T7516] device bridge15 entered promiscuous mode [ 512.223449][ T7514] SQUASHFS error: Failed to read block 0x28d: -5 [ 512.320860][ T7514] SQUASHFS error: Unable to read metadata cache entry [28b] [ 512.431938][ T7514] SQUASHFS error: Unable to read inode 0x11f [ 513.497381][ T7518] loop3: detected capacity change from 0 to 128 [ 513.634885][ T7518] omfs: sysblock size (-58445445) is out of range [ 515.000748][ T7520] loop3: detected capacity change from 0 to 1024 [ 515.120010][ T7520] EXT4-fs: Ignoring removed bh option [ 515.322710][ T7520] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 515.363334][ T7527] device bridge16 entered promiscuous mode [ 515.466180][ T7520] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.627087][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 517.935890][ T7540] loop0: detected capacity change from 0 to 1024 [ 518.022007][ T7540] EXT4-fs: Ignoring removed bh option [ 519.050185][ T7550] sctp: failed to load transform for md5: -2 [ 519.144403][ T7545] tipc: Enabling of bearer rejected, failed to enable media [ 519.170105][ T7545] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 519.197620][ T7540] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 519.333882][ T7540] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.965232][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 521.360358][ T7569] loop4: detected capacity change from 0 to 2048 [ 521.829734][ T7569] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 521.970742][ T7569] UDF-fs: Scanning with blocksize 512 failed [ 522.020740][ T7569] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 524.133520][ T7580] tipc: Enabling of bearer rejected, failed to enable media [ 524.252580][ T7576] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 524.675114][ T7587] loop2: detected capacity change from 0 to 1024 [ 524.682416][ T7587] EXT4-fs: Ignoring removed bh option [ 524.764465][ T7584] loop0: detected capacity change from 0 to 2048 [ 524.865229][ T7591] device bridge17 entered promiscuous mode [ 525.048578][ T7584] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 525.149964][ T7584] UDF-fs: Scanning with blocksize 512 failed [ 526.111158][ T7593] loop1: detected capacity change from 0 to 2048 [ 526.126231][ T7584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 526.148926][ T7587] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 526.279006][ T7587] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.290645][ T7596] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 526.299126][ T7593] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 526.362617][ T7593] UDF-fs: Scanning with blocksize 512 failed [ 526.760005][ T7598] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.819: lblock 3 mapped to illegal pblock 3 (length 1) [ 527.139877][ T7598] EXT4-fs error (device loop2): ext4_ext_remove_space:2945: inode #15: comm syz.2.819: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 527.250457][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 527.258983][ T7593] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 527.505676][ T7606] loop0: detected capacity change from 0 to 4096 [ 527.813283][ T7610] loop0: [ 527.841777][ T7613] loop1: detected capacity change from 0 to 1024 [ 527.851865][ T7614] device bridge15 entered promiscuous mode [ 527.860652][ T7613] EXT4-fs: Ignoring removed bh option [ 527.989894][ T7613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 528.008750][ T7613] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.086372][ T7618] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 528.804612][ T7624] loop3: detected capacity change from 0 to 512 [ 529.997144][ T7628] sctp: failed to load transform for md5: -2 [ 530.067502][ T7624] tmpfs: Bad value for 'nr_blocks' [ 530.466939][ T7637] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 3: comm syz.1.823: lblock 3 mapped to illegal pblock 3 (length 1) [ 530.490162][ T7637] EXT4-fs error (device loop1): ext4_ext_remove_space:2945: inode #15: comm syz.1.823: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 530.762131][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 531.724445][ T7653] device bridge14 entered promiscuous mode [ 533.157939][ T7655] tipc: Enabling of bearer rejected, failed to enable media [ 533.167891][ T7655] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 534.075219][ T5809] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 534.356627][ T7663] loop3: detected capacity change from 0 to 2048 [ 534.429682][ T7663] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 534.439878][ T7665] loop2: detected capacity change from 0 to 8 [ 534.475091][ T7663] UDF-fs: Scanning with blocksize 512 failed [ 534.508696][ T7663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 534.508754][ T5809] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 534.535736][ T7665] SQUASHFS error: lzo decompression failed, data probably corrupt [ 534.584258][ T7665] SQUASHFS error: Failed to read block 0x28d: -5 [ 534.591126][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.599463][ T7665] SQUASHFS error: Unable to read metadata cache entry [28b] [ 534.741910][ T5809] usb 5-1: config 0 descriptor?? [ 534.755021][ T7665] SQUASHFS error: Unable to read inode 0x11f [ 535.326738][ T7668] loop0: detected capacity change from 0 to 4096 [ 536.937682][ T7673] device bridge10 entered promiscuous mode [ 536.964322][ T7676] loop2: detected capacity change from 0 to 128 [ 536.982934][ T7676] omfs: sysblock size (-58445445) is out of range [ 537.400148][ T5809] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 537.415169][ T5809] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 537.433487][ T5809] [drm:udl_init] *ERROR* Selecting channel failed [ 537.497939][ T5809] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 537.555090][ T5809] [drm] Initialized udl on minor 2 [ 537.575119][ T5809] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 537.601061][ T7680] loop4: detected capacity change from 0 to 8 [ 537.633621][ T5809] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 537.713084][ T7680] SQUASHFS error: lzo decompression failed, data probably corrupt [ 537.789818][ T5809] usb 5-1: USB disconnect, device number 11 [ 537.796526][ T128] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 537.804655][ T128] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 537.812693][ T128] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 537.825462][ T7680] SQUASHFS error: Failed to read block 0x28d: -5 [ 537.831815][ T7680] SQUASHFS error: Unable to read metadata cache entry [28b] [ 537.915036][ T7680] SQUASHFS error: Unable to read inode 0x11f [ 541.648797][ T7701] loop0: detected capacity change from 0 to 4096 [ 541.790165][ T7701] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 541.830331][ T7703] loop1: detected capacity change from 0 to 1024 [ 541.845085][ T7701] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 541.851910][ T7701] loop0: [ 541.875935][ T7703] EXT4-fs: Ignoring removed bh option [ 542.005103][ T7703] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 542.075179][ T7703] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.369271][ T7712] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 3: comm syz.1.833: lblock 3 mapped to illegal pblock 3 (length 3) [ 542.389108][ T7712] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 542.401508][ T7712] EXT4-fs (loop1): This should not happen!! Data will be lost [ 542.401508][ T7712] [ 542.537092][ T7703] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.833: bg 0: block 112: padding at end of block bitmap is not set [ 542.565492][ T7703] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 542.578140][ T7703] EXT4-fs (loop1): This should not happen!! Data will be lost [ 542.578140][ T7703] [ 542.587806][ T7703] EXT4-fs (loop1): Total free blocks count 0 [ 542.593770][ T7703] EXT4-fs (loop1): Free/Dirty block details [ 542.599676][ T7703] EXT4-fs (loop1): free_blocks=0 [ 542.604592][ T7703] EXT4-fs (loop1): dirty_blocks=64 [ 542.609912][ T7703] EXT4-fs (loop1): Block reservation details [ 542.695512][ T4462] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:12: lblock 8 mapped to illegal pblock 8 (length 8) [ 542.811910][ T7716] netlink: 144 bytes leftover after parsing attributes in process `syz.4.846'. [ 543.156300][ T7709] tipc: Enabling of bearer rejected, failed to enable media [ 543.191852][ T7709] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 544.739394][ T7724] loop3: detected capacity change from 0 to 8 [ 544.776455][ T7724] SQUASHFS error: lzo decompression failed, data probably corrupt [ 544.796348][ T7724] SQUASHFS error: Failed to read block 0x28d: -5 [ 544.802712][ T7724] SQUASHFS error: Unable to read metadata cache entry [28b] [ 544.845089][ T7724] SQUASHFS error: Unable to read inode 0x11f [ 544.885039][ T5809] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 545.060905][ T7728] loop3: detected capacity change from 0 to 128 [ 545.071931][ T7728] omfs: sysblock size (-58445445) is out of range [ 545.105974][ T5809] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 545.185026][ T4382] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 545.698041][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.712500][ T5809] usb 5-1: config 0 descriptor?? [ 545.852368][ T7730] netlink: 64 bytes leftover after parsing attributes in process `syz.3.851'. [ 545.895811][ T4382] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 545.904883][ T4382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.935676][ T4382] usb 1-1: config 0 descriptor?? [ 545.959675][ T5809] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 546.811028][ T5809] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 546.828817][ T5809] [drm:udl_init] *ERROR* Selecting channel failed [ 546.844155][ T5809] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 546.852173][ T5809] [drm] Initialized udl on minor 2 [ 546.859247][ T5809] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 546.868014][ T5809] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 546.877693][ T5809] usb 5-1: USB disconnect, device number 12 [ 546.884340][ T4279] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 546.893016][ T4279] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 546.901216][ T4279] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 547.098548][ T4382] [drm:udl_init] *ERROR* Selecting channel failed [ 547.137760][ T7737] device bridge11 entered promiscuous mode [ 548.415436][ T4382] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 3 [ 548.422949][ T4382] [drm] Initialized udl on minor 3 [ 548.431780][ T4382] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 548.440891][ T4382] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 548.448273][ T4382] usb 1-1: USB disconnect, device number 11 [ 548.448805][ T4279] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 548.449512][ T4279] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 548.449638][ T4279] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 549.002436][ T7741] bridge0: port 3(netdevsim0) entered blocking state [ 549.009677][ T7741] bridge0: port 3(netdevsim0) entered disabled state [ 549.020490][ T7741] device netdevsim0 entered promiscuous mode [ 549.027532][ T7741] bridge0: port 3(netdevsim0) entered blocking state [ 549.034304][ T7741] bridge0: port 3(netdevsim0) entered forwarding state [ 549.557472][ T7748] loop3: detected capacity change from 0 to 8 [ 549.568869][ T7748] SQUASHFS error: lzo decompression failed, data probably corrupt [ 549.577211][ T7748] SQUASHFS error: Failed to read block 0x28d: -5 [ 549.583560][ T7748] SQUASHFS error: Unable to read metadata cache entry [28b] [ 549.590906][ T7748] SQUASHFS error: Unable to read inode 0x11f [ 550.536709][ T7751] loop2: detected capacity change from 0 to 2048 [ 550.707107][ T7758] device bridge17 entered promiscuous mode [ 550.725970][ T7756] loop0: detected capacity change from 0 to 4096 [ 550.743356][ T7751] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 550.855752][ T7751] UDF-fs: Scanning with blocksize 512 failed [ 550.887799][ T7756] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 550.977175][ T7756] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 551.041463][ T7751] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 551.054781][ T7762] loop3: detected capacity change from 0 to 8 [ 551.072913][ T7756] loop0: [ 551.085475][ T7760] loop4: detected capacity change from 0 to 1024 [ 551.136676][ T7760] EXT4-fs: Ignoring removed bh option [ 551.141714][ T7765] netlink: 64 bytes leftover after parsing attributes in process `syz.0.860'. [ 551.357307][ T7760] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 552.156855][ T7772] loop1: detected capacity change from 0 to 512 [ 552.169833][ T7760] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.195687][ T7772] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 552.248903][ T7762] SQUASHFS error: lzo decompression failed, data probably corrupt [ 552.266276][ T7762] SQUASHFS error: Failed to read block 0x28d: -5 [ 552.277682][ T7762] SQUASHFS error: Unable to read metadata cache entry [28b] [ 552.285209][ T7772] EXT4-fs (loop1): 1 truncate cleaned up [ 552.291776][ T7772] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 552.436211][ T7762] SQUASHFS error: Unable to read inode 0x11f [ 552.628397][ T7774] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.858: lblock 3 mapped to illegal pblock 3 (length 3) [ 552.651703][ T7774] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 552.664163][ T7774] EXT4-fs (loop4): This should not happen!! Data will be lost [ 552.664163][ T7774] [ 552.768862][ T7760] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.858: bg 0: block 112: padding at end of block bitmap is not set [ 552.786070][ T7760] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 552.798354][ T7760] EXT4-fs (loop4): This should not happen!! Data will be lost [ 552.798354][ T7760] [ 552.808008][ T7760] EXT4-fs (loop4): Total free blocks count 0 [ 552.813970][ T7760] EXT4-fs (loop4): Free/Dirty block details [ 552.819874][ T7760] EXT4-fs (loop4): free_blocks=0 [ 552.824793][ T7760] EXT4-fs (loop4): dirty_blocks=64 [ 552.829909][ T7760] EXT4-fs (loop4): Block reservation details [ 552.917642][ T4939] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:17: lblock 8 mapped to illegal pblock 8 (length 8) [ 553.145860][ T7782] netlink: 64 bytes leftover after parsing attributes in process `syz.1.861'. [ 553.927254][ T7788] sctp: failed to load transform for md5: -2 [ 554.476443][ T7791] loop3: detected capacity change from 0 to 128 [ 554.513773][ T7791] omfs: sysblock size (-58445445) is out of range [ 557.365129][ T4382] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 557.644209][ T7816] device bridge16 entered promiscuous mode [ 557.865958][ T4382] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 557.896632][ T4382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.954096][ T4382] usb 4-1: config 0 descriptor?? [ 558.000950][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 558.143168][ T7823] loop2: detected capacity change from 0 to 8 [ 558.210082][ T7823] SQUASHFS error: lzo decompression failed, data probably corrupt [ 558.294192][ T7823] SQUASHFS error: Failed to read block 0x28d: -5 [ 558.341242][ T7823] SQUASHFS error: Unable to read metadata cache entry [28b] [ 558.351900][ T7826] device bridge18 entered promiscuous mode [ 558.395065][ T4816] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 558.402888][ T7823] SQUASHFS error: Unable to read inode 0x11f [ 558.517877][ T4382] [drm:udl_init] *ERROR* Selecting channel failed [ 558.762594][ T4382] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 558.826710][ T4382] [drm] Initialized udl on minor 2 [ 558.868902][ T4382] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 561.026722][ T4816] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 561.440927][ T4382] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 561.590574][ T4816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.600470][ T4816] usb 1-1: config 0 descriptor?? [ 561.609615][ T4382] usb 4-1: USB disconnect, device number 8 [ 561.648598][ T4816] usb 1-1: can't set config #0, error -71 [ 561.656320][ T4816] usb 1-1: USB disconnect, device number 12 [ 561.687420][ T7001] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 561.726186][ T7001] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 561.734158][ T7001] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 561.817327][ T7831] loop0: detected capacity change from 0 to 512 [ 561.859553][ T7831] tmpfs: Bad value for 'nr_blocks' [ 561.882492][ T7835] loop2: detected capacity change from 0 to 1024 [ 561.889598][ T7833] loop3: detected capacity change from 0 to 512 [ 561.972739][ T7833] tmpfs: Bad value for 'nr_blocks' [ 561.989868][ T7835] EXT4-fs: Ignoring removed bh option [ 562.143405][ T7835] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 562.251890][ T7835] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.709557][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.723406][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.011119][ T7843] loop3: detected capacity change from 0 to 512 [ 563.021909][ T7843] EXT4-fs: Ignoring removed bh option [ 563.032052][ T7843] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 564.330928][ T7848] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.873: lblock 3 mapped to illegal pblock 3 (length 3) [ 564.483302][ T7835] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.873: bg 0: block 112: padding at end of block bitmap is not set [ 564.510637][ T7848] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 564.523302][ T7848] EXT4-fs (loop2): This should not happen!! Data will be lost [ 564.523302][ T7848] [ 565.035185][ T7842] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 566.307931][ T7835] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 566.320359][ T7835] EXT4-fs (loop2): This should not happen!! Data will be lost [ 566.320359][ T7835] [ 566.330157][ T7835] EXT4-fs (loop2): Total free blocks count 0 [ 566.336210][ T7835] EXT4-fs (loop2): Free/Dirty block details [ 566.342132][ T7835] EXT4-fs (loop2): free_blocks=0 [ 566.347108][ T7835] EXT4-fs (loop2): dirty_blocks=64 [ 566.352243][ T7835] EXT4-fs (loop2): Block reservation details [ 566.434055][ T7843] EXT4-fs (loop3): 1 truncate cleaned up [ 566.532304][ T7843] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 566.578013][ T4504] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:14: lblock 8 mapped to illegal pblock 8 (length 8) [ 566.684766][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 566.709983][ T7856] loop0: detected capacity change from 0 to 4096 [ 567.704509][ T7856] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 567.708181][ T7860] loop2: detected capacity change from 0 to 512 [ 567.746072][ T7856] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 567.753090][ T7856] loop0: [ 567.792613][ T7860] tmpfs: Bad value for 'nr_blocks' [ 570.367822][ T7883] device bridge12 entered promiscuous mode [ 571.860513][ T4351] libceph: connect (1)[c::]:6789 error -101 [ 571.885323][ T4351] libceph: mon0 (1)[c::]:6789 connect error [ 571.891441][ T7890] ceph: No mds server is up or the cluster is laggy [ 571.914422][ T7887] netlink: 64 bytes leftover after parsing attributes in process `syz.1.887'. [ 571.963840][ T7897] loop3: detected capacity change from 0 to 2048 [ 572.053002][ T7897] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 572.086042][ T7897] UDF-fs: Scanning with blocksize 512 failed [ 572.341611][ T7897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 572.560624][ T4351] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 572.758654][ T4351] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 572.774889][ T4351] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 572.783125][ T4351] usb 1-1: Product: syz [ 572.787517][ T4351] usb 1-1: Manufacturer: syz [ 573.045501][ T4351] usb 1-1: SerialNumber: syz [ 573.068402][ T4351] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 574.065343][ T7899] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 574.136293][ T7904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.175265][ T7904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.230492][ T4351] vp7045: USB control message 'out' went wrong. [ 574.244272][ T4351] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 575.722542][ T4351] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 575.760790][ T7908] loop0: detected capacity change from 0 to 4096 [ 575.776138][ T7912] device bridge19 entered promiscuous mode [ 575.885204][ T4351] usb 1-1: USB disconnect, device number 13 [ 577.791192][ T7926] loop2: detected capacity change from 0 to 512 [ 579.240054][ T7931] loop4: detected capacity change from 0 to 512 [ 579.280328][ T7931] tmpfs: Bad value for 'nr_blocks' [ 579.410346][ T7934] loop4: detected capacity change from 0 to 512 [ 579.418535][ T7934] EXT4-fs: Ignoring removed bh option [ 579.534116][ T7934] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 581.246108][ T7932] device bridge15 entered promiscuous mode [ 583.064067][ T7937] ceph: No mds server is up or the cluster is laggy [ 583.138783][ T26] libceph: connect (1)[c::]:6789 error -101 [ 583.164829][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 583.584536][ T128] libceph: connect (1)[c::]:6789 error -101 [ 583.693776][ T128] libceph: mon0 (1)[c::]:6789 connect error [ 584.601478][ T7934] EXT4-fs: error -4 creating inode table initialization thread [ 584.746377][ T7934] EXT4-fs (loop4): mount failed [ 586.337011][ T7957] device bridge18 entered promiscuous mode [ 587.119123][ T7954] loop2: detected capacity change from 0 to 512 [ 587.915802][ T7954] tmpfs: Bad value for 'nr_blocks' [ 587.985256][ T7963] device bridge20 entered promiscuous mode [ 588.034816][ T7964] loop0: detected capacity change from 0 to 4096 [ 588.077809][ T7964] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 588.163505][ T7965] loop2: detected capacity change from 0 to 512 [ 588.171865][ T7965] EXT4-fs: Ignoring removed bh option [ 588.180289][ T7965] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 588.984665][ T7965] EXT4-fs (loop2): 1 truncate cleaned up [ 588.993737][ T7965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 589.013043][ T7964] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 589.538048][ T7964] loop0: [ 590.157148][ T7974] FAULT_INJECTION: forcing a failure. [ 590.157148][ T7974] name failslab, interval 1, probability 0, space 0, times 1 [ 590.179792][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 590.281909][ T7974] CPU: 1 PID: 7974 Comm: syz.3.900 Not tainted syzkaller #0 [ 590.289229][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 590.299293][ T7974] Call Trace: [ 590.302560][ T7974] [ 590.305477][ T7974] dump_stack_lvl+0x188/0x24e [ 590.310145][ T7974] ? show_regs_print_info+0x12/0x12 [ 590.315330][ T7974] ? load_image+0x410/0x410 [ 590.319818][ T7974] ? __might_sleep+0xd0/0xd0 [ 590.324389][ T7974] ? __lock_acquire+0x7ea0/0x7ea0 [ 590.329407][ T7974] ? format_decode+0xb38/0x1330 [ 590.334261][ T7974] should_fail_ex+0x390/0x4c0 [ 590.338980][ T7974] should_failslab+0x5/0x20 [ 590.343480][ T7974] slab_pre_alloc_hook+0x59/0x300 [ 590.348502][ T7974] ? snd_seq_create_port+0x99/0x6a0 [ 590.353700][ T7974] __kmem_cache_alloc_node+0x4f/0x270 [ 590.359067][ T7974] ? snd_seq_create_port+0x99/0x6a0 [ 590.364265][ T7974] kmalloc_trace+0x26/0xe0 [ 590.368677][ T7974] snd_seq_create_port+0x99/0x6a0 [ 590.373709][ T7974] snd_seq_ioctl_create_port+0xd3/0x640 [ 590.379253][ T7974] snd_seq_oss_open+0x551/0xf00 [ 590.384108][ T7974] ? snd_seq_oss_delete_client+0x50/0x50 [ 590.389764][ T7974] ? __mutex_trylock_common+0x15c/0x260 [ 590.395309][ T7974] ? trace_raw_output_contention_end+0xd0/0xd0 [ 590.401474][ T7974] ? odev_open+0x58/0x90 [ 590.405715][ T7974] ? __lock_acquire+0x7ea0/0x7ea0 [ 590.410744][ T7974] ? snd_seq_oss_process_event+0x2940/0x2940 [ 590.416714][ T7974] ? async_call_lookup_ports+0x10/0x10 [ 590.422172][ T7974] ? do_raw_spin_unlock+0x11d/0x230 [ 590.427366][ T7974] ? soundcore_open+0x309/0x4b0 [ 590.432212][ T7974] odev_open+0x63/0x90 [ 590.436283][ T7974] chrdev_open+0x585/0x5f0 [ 590.440698][ T7974] ? cd_forget+0x160/0x160 [ 590.445111][ T7974] ? fsnotify_perm+0x39b/0x550 [ 590.449875][ T7974] ? cd_forget+0x160/0x160 [ 590.454285][ T7974] do_dentry_open+0x7dd/0x10b0 [ 590.459053][ T7974] path_openat+0x2674/0x2f10 [ 590.463653][ T7974] ? kasan_set_track+0x60/0x70 [ 590.468415][ T7974] ? verify_lock_unused+0x140/0x140 [ 590.473606][ T7974] ? do_sys_openat2+0xdd/0x4f0 [ 590.478378][ T7974] ? do_filp_open+0x420/0x420 [ 590.483059][ T7974] do_filp_open+0x1ee/0x420 [ 590.487557][ T7974] ? vfs_tmpfile+0x490/0x490 [ 590.492154][ T7974] ? _raw_spin_unlock+0x24/0x40 [ 590.496997][ T7974] ? alloc_fd+0x590/0x640 [ 590.501326][ T7974] do_sys_openat2+0x14b/0x4f0 [ 590.506020][ T7974] ? do_sys_open+0xe0/0xe0 [ 590.510431][ T7974] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 590.516407][ T7974] ? lock_chain_count+0x20/0x20 [ 590.521256][ T7974] __x64_sys_openat+0x135/0x160 [ 590.526122][ T7974] do_syscall_64+0x4c/0xa0 [ 590.530534][ T7974] ? clear_bhb_loop+0x60/0xb0 [ 590.535206][ T7974] ? clear_bhb_loop+0x60/0xb0 [ 590.539877][ T7974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 590.545764][ T7974] RIP: 0033:0x7efd4d39fb19 [ 590.550182][ T7974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.569779][ T7974] RSP: 002b:00007efd4e22b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 590.578185][ T7974] RAX: ffffffffffffffda RBX: 00007efd4d625fa0 RCX: 00007efd4d39fb19 [ 590.586148][ T7974] RDX: 0000000000000002 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 590.594108][ T7974] RBP: 00007efd4d437b70 R08: 0000000000000000 R09: 0000000000000000 [ 590.602067][ T7974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.610034][ T7974] R13: 00007efd4d626038 R14: 00007efd4d625fa0 R15: 00007ffea47a5078 [ 590.618011][ T7974] [ 590.651454][ T7974] ALSA: seq_oss: can't create port [ 590.876133][ T7984] loop2: detected capacity change from 0 to 8 [ 590.971142][ T7986] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 591.125020][ T4352] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 591.795610][ T7984] SQUASHFS error: lzo decompression failed, data probably corrupt [ 591.845150][ T7984] SQUASHFS error: Failed to read block 0x28d: -5 [ 591.851526][ T7984] SQUASHFS error: Unable to read metadata cache entry [28b] [ 591.860510][ T7988] loop0: detected capacity change from 0 to 4096 [ 592.166361][ T4352] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 592.908241][ T7991] ceph: No mds server is up or the cluster is laggy [ 592.916378][ T4967] libceph: connect (1)[c::]:6789 error -101 [ 593.127147][ T4967] libceph: mon0 (1)[c::]:6789 connect error [ 593.367353][ T7984] SQUASHFS error: Unable to read inode 0x11f [ 593.988205][ T7997] loop1: detected capacity change from 0 to 512 [ 594.251652][ T4352] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 594.252145][ T7997] tmpfs: Bad value for 'nr_blocks' [ 594.486429][ T4352] usb 1-1: Product: syz [ 594.490825][ T4352] usb 1-1: Manufacturer: syz [ 594.495646][ T4352] usb 1-1: SerialNumber: syz [ 594.510934][ T4352] usb 1-1: can't set config #4, error -71 [ 594.517773][ T4352] usb 1-1: USB disconnect, device number 14 [ 594.646184][ T8000] loop3: detected capacity change from 0 to 512 [ 594.807898][ T8004] device bridge16 entered promiscuous mode [ 595.531147][ T8000] tmpfs: Bad value for 'nr_blocks' [ 595.732985][ T7998] loop1: detected capacity change from 0 to 512 [ 595.739700][ T7998] EXT4-fs: Ignoring removed bh option [ 595.758232][ T7998] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 596.845708][ T7998] EXT4-fs: failed to create workqueue [ 596.851174][ T7998] EXT4-fs (loop1): mount failed [ 599.761526][ T8012] loop0: detected capacity change from 0 to 4096 [ 599.858472][ T8012] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 599.882805][ T8012] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 599.988438][ T8012] loop0: [ 600.188222][ T8018] device bridge19 entered promiscuous mode [ 601.999858][ T8023] loop1: detected capacity change from 0 to 512 [ 602.076189][ T8023] tmpfs: Bad value for 'nr_blocks' [ 602.160740][ T8028] bridge0: port 3(netdevsim0) entered blocking state [ 602.167776][ T8028] bridge0: port 3(netdevsim0) entered disabled state [ 602.182695][ T8028] device netdevsim0 entered promiscuous mode [ 602.191034][ T8028] bridge0: port 3(netdevsim0) entered blocking state [ 602.197806][ T8028] bridge0: port 3(netdevsim0) entered forwarding state [ 603.050061][ T8030] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 603.433917][ T8039] loop3: detected capacity change from 0 to 512 [ 603.441137][ T8037] FAULT_INJECTION: forcing a failure. [ 603.441137][ T8037] name failslab, interval 1, probability 0, space 0, times 0 [ 603.470385][ T8041] loop4: detected capacity change from 0 to 512 [ 603.490334][ T8041] tmpfs: Bad value for 'nr_blocks' [ 603.495824][ T7001] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 603.503500][ T8037] CPU: 0 PID: 8037 Comm: syz.2.931 Not tainted syzkaller #0 [ 603.510796][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 603.520837][ T8037] Call Trace: [ 603.524102][ T8037] [ 603.527018][ T8037] dump_stack_lvl+0x188/0x24e [ 603.531687][ T8037] ? show_regs_print_info+0x12/0x12 [ 603.536874][ T8037] ? load_image+0x410/0x410 [ 603.541369][ T8037] ? __might_sleep+0xd0/0xd0 [ 603.545950][ T8037] ? __lock_acquire+0x7ea0/0x7ea0 [ 603.550979][ T8037] ? format_decode+0xb38/0x1330 [ 603.555817][ T8037] should_fail_ex+0x390/0x4c0 [ 603.560480][ T8037] should_failslab+0x5/0x20 [ 603.564977][ T8037] slab_pre_alloc_hook+0x59/0x300 [ 603.569985][ T8037] ? snd_seq_create_port+0x99/0x6a0 [ 603.575170][ T8037] __kmem_cache_alloc_node+0x4f/0x270 [ 603.580528][ T8037] ? snd_seq_create_port+0x99/0x6a0 [ 603.585729][ T8037] kmalloc_trace+0x26/0xe0 [ 603.590133][ T8037] snd_seq_create_port+0x99/0x6a0 [ 603.595148][ T8037] snd_seq_ioctl_create_port+0xd3/0x640 [ 603.600678][ T8037] snd_seq_oss_open+0x551/0xf00 [ 603.605517][ T8037] ? snd_seq_oss_delete_client+0x50/0x50 [ 603.611150][ T8037] ? __mutex_trylock_common+0x15c/0x260 [ 603.616678][ T8037] ? trace_raw_output_contention_end+0xd0/0xd0 [ 603.622823][ T8037] ? odev_open+0x58/0x90 [ 603.627052][ T8037] ? __lock_acquire+0x7ea0/0x7ea0 [ 603.632064][ T8037] ? snd_seq_oss_process_event+0x2940/0x2940 [ 603.638030][ T8037] ? async_call_lookup_ports+0x10/0x10 [ 603.643472][ T8037] ? do_raw_spin_unlock+0x11d/0x230 [ 603.648671][ T8037] ? soundcore_open+0x309/0x4b0 [ 603.653506][ T8037] odev_open+0x63/0x90 [ 603.657559][ T8037] chrdev_open+0x585/0x5f0 [ 603.661976][ T8037] ? cd_forget+0x160/0x160 [ 603.666396][ T8037] ? fsnotify_perm+0x39b/0x550 [ 603.671145][ T8037] ? cd_forget+0x160/0x160 [ 603.675542][ T8037] do_dentry_open+0x7dd/0x10b0 [ 603.680299][ T8037] path_openat+0x2674/0x2f10 [ 603.684877][ T8037] ? kasan_set_track+0x60/0x70 [ 603.689629][ T8037] ? verify_lock_unused+0x140/0x140 [ 603.694810][ T8037] ? do_sys_openat2+0xdd/0x4f0 [ 603.699566][ T8037] ? do_filp_open+0x420/0x420 [ 603.704238][ T8037] do_filp_open+0x1ee/0x420 [ 603.708732][ T8037] ? vfs_tmpfile+0x490/0x490 [ 603.713318][ T8037] ? _raw_spin_unlock+0x24/0x40 [ 603.718151][ T8037] ? alloc_fd+0x590/0x640 [ 603.722467][ T8037] do_sys_openat2+0x14b/0x4f0 [ 603.727130][ T8037] ? do_sys_open+0xe0/0xe0 [ 603.731530][ T8037] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 603.737495][ T8037] ? lock_chain_count+0x20/0x20 [ 603.742334][ T8037] __x64_sys_openat+0x135/0x160 [ 603.747176][ T8037] do_syscall_64+0x4c/0xa0 [ 603.751575][ T8037] ? clear_bhb_loop+0x60/0xb0 [ 603.756234][ T8037] ? clear_bhb_loop+0x60/0xb0 [ 603.760903][ T8037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 603.766784][ T8037] RIP: 0033:0x7f8e1299fb19 [ 603.771181][ T8037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.790767][ T8037] RSP: 002b:00007f8e138fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 603.799174][ T8037] RAX: ffffffffffffffda RBX: 00007f8e12c25fa0 RCX: 00007f8e1299fb19 [ 603.807143][ T8037] RDX: 0000000000000002 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 603.815099][ T8037] RBP: 00007f8e12a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 603.823050][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.831001][ T8037] R13: 00007f8e12c26038 R14: 00007f8e12c25fa0 R15: 00007ffc132efcf8 [ 603.838961][ T8037] [ 603.847658][ T8037] ALSA: seq_oss: can't create port [ 603.856382][ T8043] loop1: detected capacity change from 0 to 512 [ 603.881091][ T8039] tmpfs: Bad value for 'nr_blocks' [ 604.026827][ T7214] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 604.052545][ T7001] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 604.599157][ T8043] tmpfs: Bad value for 'nr_blocks' [ 604.632297][ T8039] loop3: detected capacity change from 0 to 512 [ 604.639301][ T8039] EXT4-fs: Ignoring removed bh option [ 604.645191][ T8039] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 604.662543][ T7001] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 604.673640][ T7001] usb 1-1: Product: syz [ 604.707529][ T8039] EXT4-fs (loop3): 1 truncate cleaned up [ 604.713682][ T8039] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 604.750868][ T8049] loop1: detected capacity change from 0 to 512 [ 604.759336][ T8049] EXT4-fs: Ignoring removed bh option [ 604.768786][ T8049] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 606.005713][ T7001] usb 1-1: Manufacturer: syz [ 606.010367][ T7001] usb 1-1: SerialNumber: syz [ 606.043575][ T8049] EXT4-fs (loop1): 1 truncate cleaned up [ 606.053149][ T8049] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 606.458684][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 606.579011][ T8053] loop4: detected capacity change from 0 to 512 [ 606.585752][ T7001] usb 1-1: can't set config #4, error -71 [ 606.592748][ T7001] usb 1-1: USB disconnect, device number 15 [ 606.611211][ T8053] tmpfs: Bad value for 'nr_blocks' [ 607.761789][ T8059] loop0: detected capacity change from 0 to 4096 [ 607.919930][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 607.956943][ T8063] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 607.985030][ T8063] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 608.042497][ T8063] loop0: [ 608.103707][ T8068] device bridge17 entered promiscuous mode [ 608.298350][ T8073] device bridge21 entered promiscuous mode [ 610.859128][ T8079] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 612.262833][ T8093] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 613.013163][ T8090] loop1: detected capacity change from 0 to 1024 [ 613.058144][ T8092] loop3: detected capacity change from 0 to 512 [ 613.126504][ T8090] EXT4-fs: Ignoring removed bh option [ 613.325271][ T8090] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 613.610196][ T8090] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.816041][ T8092] tmpfs: Bad value for 'nr_blocks' [ 614.509415][ T8111] loop3: detected capacity change from 0 to 512 [ 614.584854][ T27] kauditd_printk_skb: 65 callbacks suppressed [ 614.584871][ T27] audit: type=1800 audit(1794103045.149:164): pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.943" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 614.611956][ T8111] EXT4-fs: Ignoring removed bh option [ 614.650077][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 614.658155][ T8111] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 615.119393][ T8111] EXT4-fs (loop3): 1 truncate cleaned up [ 615.128242][ T8111] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 615.642895][ T8103] loop2: detected capacity change from 0 to 512 [ 615.741162][ T27] audit: type=1800 audit(1794103045.149:165): pid=8110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.943" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 615.953198][ T14] libceph: connect (1)[c::]:6789 error -101 [ 615.974579][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 617.072610][ T8116] ceph: No mds server is up or the cluster is laggy [ 617.111961][ T8103] tmpfs: Bad value for 'nr_blocks' [ 620.085941][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 620.188911][ T8135] device bridge18 entered promiscuous mode [ 620.259296][ T8132] loop0: detected capacity change from 0 to 4096 [ 623.001035][ T8148] device bridge20 entered promiscuous mode [ 623.069747][ T8147] loop3: detected capacity change from 0 to 8 [ 623.297441][ T8147] SQUASHFS error: lzo decompression failed, data probably corrupt [ 623.426336][ T8147] SQUASHFS error: Failed to read block 0x28d: -5 [ 623.512501][ T8147] SQUASHFS error: Unable to read metadata cache entry [28b] [ 623.613285][ T8147] SQUASHFS error: Unable to read inode 0x11f [ 624.149099][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.155591][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.330943][ T8156] loop4: detected capacity change from 0 to 512 [ 624.351399][ T8152] tmpfs: Bad value for 'nr_blocks' [ 624.430077][ T8157] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 625.178884][ T8156] tmpfs: Bad value for 'nr_blocks' [ 625.784064][ T8161] loop3: detected capacity change from 0 to 128 [ 625.796583][ T8161] omfs: sysblock size (-58445445) is out of range [ 626.271214][ T8162] loop4: detected capacity change from 0 to 512 [ 626.281599][ T8162] EXT4-fs: Ignoring removed bh option [ 626.292975][ T8162] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 626.813558][ T8162] EXT4-fs (loop4): 1 truncate cleaned up [ 626.822621][ T8162] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 626.914463][ T8165] sctp: failed to load transform for md5: -2 [ 628.941275][ T8179] ceph: No mds server is up or the cluster is laggy [ 628.953178][ T14] libceph: connect (1)[c::]:6789 error -101 [ 628.995117][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 629.755858][ T4967] libceph: connect (1)[c::]:6789 error -101 [ 629.778659][ T4967] libceph: mon0 (1)[c::]:6789 connect error [ 630.376178][ T4967] libceph: connect (1)[c::]:6789 error -101 [ 630.862952][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 631.088029][ T4967] libceph: mon0 (1)[c::]:6789 connect error [ 631.406195][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 631.696403][ T8197] device bridge22 entered promiscuous mode [ 633.142706][ T8202] loop0: detected capacity change from 0 to 512 [ 633.204807][ T8202] tmpfs: Bad value for 'nr_blocks' [ 633.327688][ T8203] loop0: detected capacity change from 0 to 512 [ 633.336885][ T8203] EXT4-fs: Ignoring removed bh option [ 633.344227][ T8203] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 633.375035][ T4352] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 634.598729][ T8203] EXT4-fs (loop0): 1 truncate cleaned up [ 634.607850][ T8203] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 634.803298][ T4352] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 634.845555][ T4352] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 634.925794][ T4352] usb 4-1: Product: syz [ 634.963878][ T4352] usb 4-1: Manufacturer: syz [ 635.010581][ T4352] usb 4-1: SerialNumber: syz [ 635.148777][ T4352] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 635.174312][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 635.401874][ T8211] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 635.721281][ T8211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.731552][ T8211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.000886][ T8218] netlink: 64 bytes leftover after parsing attributes in process `syz.1.977'. [ 636.120665][ T4352] vp7045: USB control message 'in' went wrong. [ 636.154742][ T4352] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 636.238596][ T4352] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 636.363970][ T4352] usb 4-1: USB disconnect, device number 9 [ 637.975079][ T4358] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 639.024352][ T4358] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 639.505992][ T8237] ceph: No mds server is up or the cluster is laggy [ 639.548914][ T4358] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 639.629564][ T4358] usb 5-1: Product: syz [ 639.666407][ T4358] usb 5-1: Manufacturer: syz [ 639.713404][ T4358] usb 5-1: SerialNumber: syz [ 639.893277][ T4358] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 640.240987][ T4352] libceph: connect (1)[c::]:6789 error -101 [ 640.342936][ T4352] libceph: mon0 (1)[c::]:6789 connect error [ 640.758375][ T4358] vp7045: USB control message 'out' went wrong. [ 640.774107][ T4358] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 640.812622][ T4358] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 640.853303][ T8243] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 640.935096][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 641.710132][ T8252] loop0: detected capacity change from 0 to 4096 [ 641.730953][ T4358] usb 5-1: USB disconnect, device number 13 [ 641.818764][ T8256] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 641.855121][ T8257] device bridge21 entered promiscuous mode [ 641.873340][ T8256] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 641.943209][ T8256] loop0: [ 642.740045][ T8271] device bridge23 entered promiscuous mode [ 644.175258][ T4352] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 645.210865][ T4352] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 645.515951][ T4352] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 645.568483][ T4352] usb 4-1: Product: syz [ 645.578672][ T4352] usb 4-1: Manufacturer: syz [ 645.583292][ T4352] usb 4-1: SerialNumber: syz [ 645.619517][ T4352] usb 4-1: can't set config #4, error -71 [ 645.688632][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 646.362390][ T4352] usb 4-1: USB disconnect, device number 10 [ 646.405072][ T4967] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 646.464034][ T8297] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 647.358039][ T8304] loop0: detected capacity change from 0 to 4096 [ 647.368949][ T8302] netlink: 64 bytes leftover after parsing attributes in process `syz.2.997'. [ 647.390294][ T8306] device bridge22 entered promiscuous mode [ 647.762694][ T4967] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 647.800500][ T8304] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 647.859588][ T8304] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 647.883761][ T4967] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 647.892117][ T4967] usb 2-1: Product: syz [ 647.898061][ T8304] loop0: [ 647.919867][ T4967] usb 2-1: Manufacturer: syz [ 647.935323][ T4967] usb 2-1: SerialNumber: syz [ 647.992880][ T4967] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 649.708315][ T4967] vp7045: USB control message 'out' went wrong. [ 649.743224][ T4967] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 649.964814][ T4967] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 650.211043][ T4967] usb 2-1: USB disconnect, device number 13 [ 651.118260][ T8326] device bridge23 entered promiscuous mode [ 652.605176][ T8332] loop0: detected capacity change from 0 to 4096 [ 652.681282][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'. [ 653.614163][ T4967] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 654.778965][ T4967] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 654.803864][ T4967] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 654.885077][ T8353] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 655.729675][ T4967] usb 3-1: Product: syz [ 655.733882][ T4967] usb 3-1: Manufacturer: syz [ 655.768840][ T4967] usb 3-1: SerialNumber: syz [ 655.792383][ T3641] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 655.823690][ T8360] device bridge24 entered promiscuous mode [ 655.853263][ T3641] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 655.855033][ T4967] usb 3-1: can't set config #4, error -71 [ 655.866723][ T3641] loop0: [ 655.873155][ T8362] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1016'. [ 655.898697][ T4967] usb 3-1: USB disconnect, device number 8 [ 656.215049][ T4358] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 656.588092][ T4358] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 656.780072][ T4358] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 656.840754][ T4358] usb 2-1: Product: syz [ 656.871117][ T4358] usb 2-1: Manufacturer: syz [ 656.895064][ T4358] usb 2-1: SerialNumber: syz [ 656.977516][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 657.116335][ T4358] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 657.618868][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.660030][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.760337][ T4358] vp7045: USB control message 'out' went wrong. [ 657.775026][ T4358] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 657.821572][ T4358] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 657.899320][ T8384] device bridge17 entered promiscuous mode [ 658.009839][ T4358] usb 2-1: USB disconnect, device number 14 [ 659.704975][ T4967] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 660.063400][ T8406] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 660.240205][ T4967] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 660.255692][ T4967] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 660.294758][ T4967] usb 1-1: Product: syz [ 661.163479][ T8412] device bridge24 entered promiscuous mode [ 661.170767][ T4967] usb 1-1: Manufacturer: syz [ 661.184105][ T4967] usb 1-1: SerialNumber: syz [ 661.230842][ T4967] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 661.271742][ T8414] loop0: detected capacity change from 0 to 4096 [ 661.351429][ T8414] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 661.419342][ T8421] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1031'. [ 661.428792][ T8414] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 661.448392][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 661.472927][ T8414] loop0: [ 662.331424][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.384757][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.548179][ T4967] vp7045: USB control message 'in' went wrong. [ 662.558569][ T4967] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 662.781154][ T4967] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 662.845137][ T4967] usb 1-1: USB disconnect, device number 16 [ 663.174969][ T4353] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 665.160049][ T4353] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 665.545921][ T4353] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 665.554054][ T4353] usb 4-1: Product: syz [ 666.918667][ T4353] usb 4-1: Manufacturer: syz [ 666.967099][ T4353] usb 4-1: SerialNumber: syz [ 668.088287][ T4353] usb 4-1: can't set config #4, error -71 [ 668.142163][ T4353] usb 4-1: USB disconnect, device number 11 [ 668.259534][ T8467] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 669.525003][ T8480] device bridge13 entered promiscuous mode [ 669.758019][ T8489] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1050'. [ 669.759092][ T8488] loop0: detected capacity change from 0 to 4096 [ 669.779677][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'. [ 669.876073][ T8488] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 669.892940][ T8488] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 669.925824][ T8488] loop0: [ 670.055244][ T4353] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 670.256529][ T4353] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 670.327795][ T4353] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 670.451224][ T4353] usb 2-1: Product: syz [ 670.517459][ T4353] usb 2-1: Manufacturer: syz [ 670.584827][ T4353] usb 2-1: SerialNumber: syz [ 672.073703][ T4353] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 672.278558][ T8503] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 672.475231][ T4967] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 672.515518][ T8491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.593281][ T8491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.741030][ T4967] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 672.823724][ T4967] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 672.836115][ T4353] vp7045: USB control message 'in' went wrong. [ 672.848368][ T4353] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 672.951260][ T4967] usb 4-1: Product: syz [ 672.985824][ T4353] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 673.007960][ T4967] usb 4-1: Manufacturer: syz [ 673.199281][ T4967] usb 4-1: SerialNumber: syz [ 673.256855][ T4353] usb 2-1: USB disconnect, device number 15 [ 673.310193][ T4967] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 674.428464][ T8501] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 674.544462][ T4967] vp7045: USB control message 'out' went wrong. [ 674.580238][ T4967] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 674.654458][ T4967] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 675.216482][ T8527] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 676.104931][ T4967] usb 4-1: USB disconnect, device number 12 [ 676.178551][ T8540] device bridge18 entered promiscuous mode [ 676.635861][ T8546] loop0: detected capacity change from 0 to 4096 [ 676.703252][ T8546] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 676.729439][ T8546] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 676.744753][ T8546] loop0: [ 677.095234][ T4967] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 677.407295][ C0] ================================================================== [ 677.415386][ C0] BUG: KASAN: use-after-free in __xfrm_state_delete+0x3db/0x940 [ 677.423000][ C0] Write of size 8 at addr ffff8880771c1190 by task swapper/0/0 [ 677.430517][ C0] [ 677.432835][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 677.439834][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 677.449869][ C0] Call Trace: [ 677.453125][ C0] [ 677.455950][ C0] dump_stack_lvl+0x188/0x24e [ 677.460616][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 677.465627][ C0] ? show_regs_print_info+0x12/0x12 [ 677.470833][ C0] ? load_image+0x410/0x410 [ 677.475320][ C0] ? __virt_addr_valid+0x467/0x540 [ 677.480417][ C0] ? __xfrm_state_delete+0x3db/0x940 [ 677.485684][ C0] print_report+0xa8/0x210 [ 677.490082][ C0] kasan_report+0x10b/0x140 [ 677.494569][ C0] ? __xfrm_state_delete+0x3db/0x940 [ 677.499835][ C0] __xfrm_state_delete+0x3db/0x940 [ 677.504935][ C0] xfrm_timer_handler+0x10b/0x970 [ 677.509966][ C0] ? xfrm_state_alloc+0x2a0/0x2a0 [ 677.514988][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 677.520861][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 677.526041][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 677.531933][ C0] ? _raw_spin_unlock+0x40/0x40 [ 677.536765][ C0] __hrtimer_run_queues+0x522/0xc90 [ 677.541947][ C0] ? xfrm_state_alloc+0x2a0/0x2a0 [ 677.546951][ C0] ? hrtimer_interrupt+0x980/0x980 [ 677.552046][ C0] hrtimer_run_softirq+0x173/0x290 [ 677.557141][ C0] handle_softirqs+0x291/0x910 [ 677.561886][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 677.566715][ C0] ? do_softirq+0x210/0x210 [ 677.571207][ C0] ? hrtimer_interrupt+0x775/0x980 [ 677.576317][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 677.581494][ C0] __irq_exit_rcu+0x13b/0x230 [ 677.586149][ C0] ? irq_exit_rcu+0x20/0x20 [ 677.590629][ C0] irq_exit_rcu+0x5/0x20 [ 677.594846][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 677.600467][ C0] [ 677.603378][ C0] [ 677.606305][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 677.612267][ C0] RIP: 0010:default_idle+0xb/0x10 [ 677.617285][ C0] Code: 48 89 df e8 e7 7f 92 f7 e9 44 ff ff ff e8 0d 0b f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d d7 5b 65 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 677.636953][ C0] RSP: 0018:ffffffff8d807da8 EFLAGS: 000002c2 [ 677.642995][ C0] RAX: 60b12446e0136200 RBX: ffffffff8a415177 RCX: 60b12446e0136200 [ 677.650958][ C0] RDX: 0000000000000001 RSI: ffffffff8aac1cc0 RDI: ffffffff8afe72a0 [ 677.658909][ C0] RBP: ffffffff8d807ec8 R08: ffff8880b8c357db R09: 1ffff11017186afb [ 677.666858][ C0] R10: dffffc0000000000 R11: ffffed1017186afc R12: 0000000000000000 [ 677.674810][ C0] R13: dffffc0000000000 R14: ffffffff8d8bc740 R15: 1ffffffff1b00fc0 [ 677.682779][ C0] ? default_idle_call+0x77/0xc0 [ 677.687702][ C0] default_idle_call+0x84/0xc0 [ 677.692454][ C0] do_idle+0x3a2/0x680 [ 677.696521][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 677.701722][ C0] cpu_startup_entry+0x3f/0x60 [ 677.706473][ C0] rest_init+0x2dc/0x300 [ 677.710782][ C0] ? time_init+0x33/0x33 [ 677.715007][ C0] arch_call_rest_init+0xa/0xa [ 677.719751][ C0] start_kernel+0x480/0x50d [ 677.724236][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 677.730114][ C0] [ 677.733130][ C0] [ 677.735431][ C0] Allocated by task 4351: [ 677.739735][ C0] kasan_set_track+0x4b/0x70 [ 677.744311][ C0] __kasan_kmalloc+0x8e/0xa0 [ 677.748882][ C0] __kmalloc+0xb3/0x240 [ 677.753012][ C0] xfrm_hash_resize+0x84/0xff0 [ 677.757759][ C0] process_one_work+0x8ab/0x1160 [ 677.762673][ C0] worker_thread+0xaf5/0x12a0 [ 677.767327][ C0] kthread+0x29d/0x330 [ 677.771371][ C0] ret_from_fork+0x1f/0x30 [ 677.775789][ C0] [ 677.778094][ C0] Freed by task 4988: [ 677.782048][ C0] kasan_set_track+0x4b/0x70 [ 677.786620][ C0] kasan_save_free_info+0x27/0x40 [ 677.791620][ C0] ____kasan_slab_free+0x126/0x1f0 [ 677.796710][ C0] slab_free_freelist_hook+0x133/0x1b0 [ 677.802160][ C0] __kmem_cache_free+0xb6/0x200 [ 677.807003][ C0] xfrm_hash_resize+0xdce/0xff0 [ 677.811831][ C0] process_one_work+0x8ab/0x1160 [ 677.816765][ C0] worker_thread+0xaf5/0x12a0 [ 677.821430][ C0] kthread+0x29d/0x330 [ 677.825479][ C0] ret_from_fork+0x1f/0x30 [ 677.829876][ C0] [ 677.832178][ C0] The buggy address belongs to the object at ffff8880771c1000 [ 677.832178][ C0] which belongs to the cache kmalloc-2k of size 2048 [ 677.846228][ C0] The buggy address is located 400 bytes inside of [ 677.846228][ C0] 2048-byte region [ffff8880771c1000, ffff8880771c1800) [ 677.859567][ C0] [ 677.861873][ C0] The buggy address belongs to the physical page: [ 677.868287][ C0] page:ffffea0001dc7000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x771c0 [ 677.878427][ C0] head:ffffea0001dc7000 order:3 compound_mapcount:0 compound_pincount:0 [ 677.886729][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 677.894697][ C0] raw: 00fff00000010200 ffffea00006fa600 dead000000000002 ffff888018442000 [ 677.903258][ C0] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 677.911820][ C0] page dumped because: kasan: bad access detected [ 677.918213][ C0] page_owner tracks the page as allocated [ 677.923901][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4276, tgid 4276 (syz-executor), ts 64303000659, free_ts 64243292096 [ 677.945241][ C0] post_alloc_hook+0x173/0x1a0 [ 677.949996][ C0] get_page_from_freelist+0x206b/0x2180 [ 677.955527][ C0] __alloc_pages+0x1ec/0x4f0 [ 677.960101][ C0] alloc_slab_page+0x5d/0x180 [ 677.964772][ C0] new_slab+0x87/0x2d0 [ 677.968818][ C0] ___slab_alloc+0xbc5/0x1240 [ 677.973469][ C0] __kmem_cache_alloc_node+0x126/0x270 [ 677.978905][ C0] __kmalloc+0xa3/0x240 [ 677.983041][ C0] ops_init+0x8a/0x5e0 [ 677.987092][ C0] setup_net+0x4f2/0xbd0 [ 677.991314][ C0] copy_net_ns+0x33e/0x5b0 [ 677.995706][ C0] create_new_namespaces+0x3ce/0x700 [ 678.000976][ C0] unshare_nsproxy_namespaces+0x116/0x160 [ 678.006686][ C0] ksys_unshare+0x4f6/0x8e0 [ 678.011170][ C0] __x64_sys_unshare+0x34/0x40 [ 678.015919][ C0] do_syscall_64+0x4c/0xa0 [ 678.020335][ C0] page last free stack trace: [ 678.024988][ C0] free_unref_page_prepare+0x8e5/0x9e0 [ 678.030431][ C0] free_unref_page+0x2e/0x3f0 [ 678.035196][ C0] __unfreeze_partials+0x188/0x1e0 [ 678.040288][ C0] put_cpu_partial+0x17c/0x250 [ 678.045038][ C0] qlist_free_all+0x76/0xe0 [ 678.049536][ C0] kasan_quarantine_reduce+0x144/0x160 [ 678.054981][ C0] __kasan_slab_alloc+0x1e/0x80 [ 678.059822][ C0] slab_post_alloc_hook+0x4b/0x490 [ 678.064917][ C0] __kmem_cache_alloc_node+0x19d/0x270 [ 678.070362][ C0] __kmalloc+0xa3/0x240 [ 678.074497][ C0] tomoyo_realpath_from_path+0xe2/0x5c0 [ 678.080026][ C0] tomoyo_path_perm+0x26f/0x610 [ 678.084862][ C0] security_inode_getattr+0xcf/0x120 [ 678.090151][ C0] vfs_getattr+0x26/0x3a0 [ 678.094460][ C0] __x64_sys_newfstat+0x13d/0x220 [ 678.099461][ C0] do_syscall_64+0x4c/0xa0 [ 678.103872][ C0] [ 678.106178][ C0] Memory state around the buggy address: [ 678.111786][ C0] ffff8880771c1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 678.119825][ C0] ffff8880771c1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 678.127864][ C0] >ffff8880771c1180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 678.135903][ C0] ^ [ 678.140495][ C0] ffff8880771c1200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 678.148535][ C0] ffff8880771c1280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 678.156571][ C0] ================================================================== [ 678.164705][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 678.171899][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 678.178924][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 678.188982][ C0] Call Trace: [ 678.192277][ C0] [ 678.195124][ C0] dump_stack_lvl+0x188/0x24e [ 678.199819][ C0] ? memcpy+0x3c/0x60 [ 678.203806][ C0] ? show_regs_print_info+0x12/0x12 [ 678.209015][ C0] ? load_image+0x410/0x410 [ 678.213531][ C0] panic+0x2d3/0x710 [ 678.217431][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 678.221940][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 678.227847][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 678.233756][ C0] ? _raw_spin_unlock+0x40/0x40 [ 678.238616][ C0] ? print_memory_metadata+0x314/0x400 [ 678.244088][ C0] check_panic_on_warn+0x80/0xa0 [ 678.249037][ C0] ? __xfrm_state_delete+0x3db/0x940 [ 678.254341][ C0] end_report+0x66/0x110 [ 678.258628][ C0] kasan_report+0x118/0x140 [ 678.263149][ C0] ? __xfrm_state_delete+0x3db/0x940 [ 678.268441][ C0] __xfrm_state_delete+0x3db/0x940 [ 678.273563][ C0] xfrm_timer_handler+0x10b/0x970 [ 678.278592][ C0] ? xfrm_state_alloc+0x2a0/0x2a0 [ 678.283627][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 678.289536][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 678.294742][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 678.300741][ C0] ? _raw_spin_unlock+0x40/0x40 [ 678.305603][ C0] __hrtimer_run_queues+0x522/0xc90 [ 678.310818][ C0] ? xfrm_state_alloc+0x2a0/0x2a0 [ 678.315858][ C0] ? hrtimer_interrupt+0x980/0x980 [ 678.320980][ C0] hrtimer_run_softirq+0x173/0x290 [ 678.326099][ C0] handle_softirqs+0x291/0x910 [ 678.330867][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 678.335721][ C0] ? do_softirq+0x210/0x210 [ 678.340226][ C0] ? hrtimer_interrupt+0x775/0x980 [ 678.345343][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 678.350551][ C0] __irq_exit_rcu+0x13b/0x230 [ 678.355235][ C0] ? irq_exit_rcu+0x20/0x20 [ 678.359748][ C0] irq_exit_rcu+0x5/0x20 [ 678.363994][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 678.369635][ C0] [ 678.372565][ C0] [ 678.375494][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 678.381490][ C0] RIP: 0010:default_idle+0xb/0x10 [ 678.386520][ C0] Code: 48 89 df e8 e7 7f 92 f7 e9 44 ff ff ff e8 0d 0b f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d d7 5b 65 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 678.406133][ C0] RSP: 0018:ffffffff8d807da8 EFLAGS: 000002c2 [ 678.412210][ C0] RAX: 60b12446e0136200 RBX: ffffffff8a415177 RCX: 60b12446e0136200 [ 678.420188][ C0] RDX: 0000000000000001 RSI: ffffffff8aac1cc0 RDI: ffffffff8afe72a0 [ 678.428173][ C0] RBP: ffffffff8d807ec8 R08: ffff8880b8c357db R09: 1ffff11017186afb [ 678.436155][ C0] R10: dffffc0000000000 R11: ffffed1017186afc R12: 0000000000000000 [ 678.444136][ C0] R13: dffffc0000000000 R14: ffffffff8d8bc740 R15: 1ffffffff1b00fc0 [ 678.452117][ C0] ? default_idle_call+0x77/0xc0 [ 678.457076][ C0] default_idle_call+0x84/0xc0 [ 678.461849][ C0] do_idle+0x3a2/0x680 [ 678.465934][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 678.471156][ C0] cpu_startup_entry+0x3f/0x60 [ 678.475932][ C0] rest_init+0x2dc/0x300 [ 678.480201][ C0] ? time_init+0x33/0x33 [ 678.484456][ C0] arch_call_rest_init+0xa/0xa [ 678.489231][ C0] start_kernel+0x480/0x50d [ 678.493750][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 678.499662][ C0] [ 678.502928][ C0] Kernel Offset: disabled [ 678.507241][ C0] Rebooting in 86400 seconds..