last executing test programs: 2m35.673906447s ago: executing program 2 (id=212): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1a}, 0x1c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x3f) write$FUSE_DIRENT(r0, &(0x7f0000000140)=ANY=[], 0x128) read(r0, &(0x7f0000000040)=""/1, 0x1) 2m35.440593853s ago: executing program 2 (id=215): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b9, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x129242, 0x30) truncate(0x0, 0x3000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0xc042, 0x0) write$P9_RXATTRCREATE(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) link(0x0, &(0x7f0000000300)='./bus\x00') 2m33.336511935s ago: executing program 2 (id=220): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='mydomain / 64\n', 0xe) 2m32.460665537s ago: executing program 2 (id=224): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file3\x00', 0x10000, &(0x7f0000000080)={[{@errors_remount}, {@barrier}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000600)='./tracing/dynamic_events\x00', 0x118) 2m31.595345708s ago: executing program 2 (id=226): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m29.842232622s ago: executing program 2 (id=232): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="31301f31203100", 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1\x00', 0x2) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="3800000012000100010000000000000000000000000000000000000000000000100003006e657464657673696d31300008001d0001000000"], 0x38}}, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x40080) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 2m29.266929446s ago: executing program 32 (id=232): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="31301f31203100", 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1\x00', 0x2) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="3800000012000100010000000000000000000000000000000000000000000000100003006e657464657673696d31300008001d0001000000"], 0x38}}, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x40080) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 17.480849806s ago: executing program 0 (id=646): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) 15.969695944s ago: executing program 0 (id=647): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="130000000800000008"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000001080)='syzkaller\x00'}, 0x83) creat(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x1a7, &(0x7f0000000640)="$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") bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r2], 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x20) 9.460523125s ago: executing program 3 (id=657): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) 7.766450127s ago: executing program 3 (id=658): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1bf) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000340)='romfs\x00', 0x2801844, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) pwritev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1, 0x4, 0x9) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r0, 0x5501) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000080)={[{@nouid32}, {@errors_remount}, {@debug}, {@sysvgroups}, {@noacl}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$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") syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x9}, {0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}}, 0xd) socket$inet6_tcp(0xa, 0x1, 0x0) 7.518683704s ago: executing program 0 (id=659): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.333733808s ago: executing program 5 (id=660): fsopen(0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x8aa83, 0x83) vmsplice(r0, 0x0, 0x0, 0xa) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000340)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x18, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000003}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x38, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x10}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x400}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x6487b9556a6ff2cf}, 0x20000800) 5.800825026s ago: executing program 5 (id=661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000010403000000000000000000070000020800034000000400050001000300"], 0x3c}}, 0x80c0) 5.368688136s ago: executing program 0 (id=662): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/81, 0x51}], 0x1, 0x10000, 0x77) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002140)=0x1) 5.270608389s ago: executing program 0 (id=663): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) write(r2, &(0x7f0000000000), 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f000006b000)={{0x0, 0x989680}}, 0x0) timer_settime(r3, 0x1, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) 5.2202394s ago: executing program 4 (id=664): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x0, @vifc_lcl_addr=@remote, @empty}, 0x10) 5.032561505s ago: executing program 4 (id=665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$setperm(0x5, r1, 0x2830092d) keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x801) ioctl$FE_GET_FRONTEND(r4, 0x80246f4d, &(0x7f0000000180)) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000240)={[{@orlov}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r5 = inotify_init1(0x80000) inotify_add_watch(r5, 0x0, 0x7f7) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r6, &(0x7f0000000040)=0x800000000001e8, 0x12) 4.800709781s ago: executing program 4 (id=666): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace(0x420f, r0) 4.759051592s ago: executing program 1 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4403, 0x0) 3.435758015s ago: executing program 4 (id=668): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unshare(0x8000000) r1 = semget$private(0x0, 0x4000, 0x0) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000080)=""/208) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 3.332838158s ago: executing program 1 (id=669): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000080)={[{@init_itable}]}, 0xff, 0x49b, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143043, 0x22) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) 3.235720269s ago: executing program 3 (id=670): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0x18b302) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000002c0)=0xb700) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_create_resource$binfmt(0x0) truncate(0x0, 0x8fff5) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x923004, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.782076451s ago: executing program 4 (id=671): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000300)={0xffffffff, 0xb, 0x0, 0x86, 0x80, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x81, 0x6, 0x40000002, 0x803, 0xd, "d206000094f3ffffd51930f9000100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x6) 2.739827312s ago: executing program 5 (id=672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.563326206s ago: executing program 1 (id=673): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mydomain / 64\n', 0xe) 2.472562748s ago: executing program 5 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) 2.347772751s ago: executing program 4 (id=675): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x46, 0xc11, &(0x7f0000000d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") sync() write$UHID_INPUT(r0, &(0x7f0000002980)={0xe, {"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", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@block_validity}, {}, {@dioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0xfffffeb1) 2.242459074s ago: executing program 1 (id=676): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.151476812s ago: executing program 0 (id=677): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x3000400, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)=ANY=[]) 1.138948781s ago: executing program 5 (id=678): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0xfffd}, {0xfff1, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) r0 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000100)={0xfffffffc, [[0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0x5, 0xffffffff, 0xfffffff0], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x10, 0xffffffff]], '\x00', [{0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x101, 0x989684}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}], '\x00', 0xffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f87536a3eabf36c"], 0x50) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="cbbb", 0x2}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1.070032594s ago: executing program 1 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4403, 0x0) 1.036738854s ago: executing program 3 (id=680): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x4e21, @local}, {0x6, @multicast}, 0x38, {0x2, 0x4e20, @multicast2}, 'veth1_macvtap\x00'}) 723.985772ms ago: executing program 3 (id=681): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unshare(0x8000000) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000240)=""/180) semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000080)=""/208) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 137.538377ms ago: executing program 5 (id=682): socket$inet_tcp(0x2, 0x1, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) capset(0x0, 0x0) accept4(r4, 0x0, 0x0, 0x800) 11.16236ms ago: executing program 1 (id=683): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0xfffffffffffffffa) add_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="49aedebf0a478353c064796897d37679895e2842ad3ee70e584247f7320d4fac99ee1f1457447047230444a5e7451d963f1ef7f2f1de45643265f0cfcaa5d5c730de77ce0e4056ac5a8b3e70e750276b89bc553f7363350466cc8f0f8d92fd99e3de19a7ec034334928b3cd2fbf0e67392809b56", 0x74, r0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r1, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) ioctl$KVM_CAP_SYNC_REGS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) write$rfkill(r1, &(0x7f0000000080)={0x7ff, 0x5, 0x2}, 0x8) 0s ago: executing program 3 (id=684): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ber 4 using dummy_hcd [ 109.781301][ T4854] XFS (loop2): Ending clean mount [ 109.962853][ T4193] XFS (loop2): Unmounting Filesystem [ 110.072350][ T4860] loop1: detected capacity change from 0 to 32768 [ 110.130346][ T4436] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.142905][ T26] audit: type=1326 audit(1786075013.825:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.4.154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 110.150142][ T4436] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 110.178226][ T4410] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.215829][ T26] audit: type=1326 audit(1786075013.875:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.4.154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 110.247951][ T26] audit: type=1326 audit(1786075013.875:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.4.154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 110.337620][ T26] audit: type=1326 audit(1786075013.875:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.4.154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 110.418882][ T4436] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 110.448580][ T4410] usb 1-1: Using ep0 maxpacket: 32 [ 110.466652][ T4436] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.507974][ T4436] usb 4-1: Product: syz [ 110.538891][ T4436] usb 4-1: Manufacturer: syz [ 110.543560][ T4436] usb 4-1: SerialNumber: syz [ 110.572257][ T26] audit: type=1326 audit(1786075013.875:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.4.154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 110.622293][ T26] audit: type=1326 audit(1786075013.875:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.4.154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 110.653463][ T4410] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.681310][ T26] audit: type=1326 audit(1786075013.875:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.4.154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 110.710759][ T26] audit: type=1326 audit(1786075013.875:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.4.154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 110.746458][ T26] audit: type=1326 audit(1786075013.875:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.4.154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 110.798615][ T4410] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 110.806853][ T4410] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 110.836231][ T4410] usb 1-1: config 14 has no interface number 0 [ 110.909853][ T26] audit: type=1326 audit(1786075013.875:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.4.154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 111.032755][ T4436] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 111.043606][ T4410] usb 1-1: config 14 has no interface number 1 [ 111.050408][ T4410] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 111.063696][ T4410] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0x1B, skipping [ 111.093875][ T4410] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 111.253230][ T26] audit: type=1326 audit(1786075013.875:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.4.154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 111.410532][ T4410] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 111.771460][ T4410] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 111.832701][ T26] audit: type=1326 audit(1786075013.875:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.4.154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 111.867322][ T4410] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.971103][ T4410] usb 1-1: config 14 interface 57 has no altsetting 0 [ 112.001942][ T26] audit: type=1326 audit(1786075013.875:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.4.154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 112.026159][ T26] audit: type=1326 audit(1786075013.895:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.4.154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 112.050344][ T26] audit: type=1326 audit(1786075013.895:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.4.154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 112.075450][ T26] audit: type=1326 audit(1786075013.895:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.4.154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 112.086856][ T4410] usb 1-1: config 14 interface 228 has no altsetting 0 [ 112.180357][ T7] usb 4-1: USB disconnect, device number 4 [ 112.215103][ T7] usblp0: removed [ 112.308730][ T4410] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 112.334280][ T4410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.356819][ T4410] usb 1-1: Product: syz [ 112.365802][ T4410] usb 1-1: Manufacturer: syz [ 112.374475][ T4410] usb 1-1: SerialNumber: syz [ 113.841826][ T4410] legousbtower 1-1:14.57: interrupt endpoints not found [ 113.979513][ T4955] loop4: detected capacity change from 0 to 128 [ 114.347817][ T4410] legousbtower 1-1:14.228: interrupt endpoints not found [ 114.383182][ T4410] usb 1-1: USB disconnect, device number 4 [ 115.094917][ T4955] EXT4-fs (loop4): Ignoring removed orlov option [ 115.199518][ T4955] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 115.214009][ T4955] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.926067][ T4965] loop1: detected capacity change from 0 to 32768 [ 117.108178][ T4965] XFS (loop1): Mounting V5 Filesystem [ 117.156750][ T4974] loop4: detected capacity change from 0 to 128 [ 117.321356][ T4965] XFS (loop1): Ending clean mount [ 117.401299][ T4974] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 117.458774][ T4414] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.498140][ T4974] FAT-fs (loop4): Filesystem has been set read-only [ 117.566861][ T4984] loop3: detected capacity change from 0 to 2048 [ 117.577924][ T4974] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 117.593022][ T4974] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 117.604517][ T4974] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 117.615418][ T4974] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 117.627497][ T4974] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 117.666205][ T4974] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 117.684561][ T4984] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,noload,,errors=continue. Quota mode: none. [ 117.685450][ T4974] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 117.710251][ T4984] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 117.754045][ T4974] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 117.764544][ T4974] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 117.769430][ T4414] usb 1-1: Using ep0 maxpacket: 32 [ 117.776722][ T26] kauditd_printk_skb: 70 callbacks suppressed [ 117.776764][ T26] audit: type=1800 audit(1786075021.455:246): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.173" name="file2" dev="loop4" ino=1048606 res=0 errno=0 [ 117.970629][ T4992] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.100462][ T4414] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 118.108777][ T4414] usb 1-1: config 0 has no interface number 0 [ 118.114922][ T4414] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 118.125813][ T4414] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 118.292934][ T4990] loop3: detected capacity change from 0 to 512 [ 118.612346][ T4990] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.656555][ T4990] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 118.677283][ T4990] EXT4-fs (loop3): Remounting filesystem read-only [ 118.685556][ T4990] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.175: invalid indirect mapped block 4278190080 (level 0) [ 118.701557][ T4990] EXT4-fs (loop3): Remounting filesystem read-only [ 118.708139][ T4990] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.175: invalid indirect mapped block 1 (level 1) [ 118.724586][ T4990] EXT4-fs (loop3): Remounting filesystem read-only [ 118.731941][ T4990] EXT4-fs (loop3): 1 truncate cleaned up [ 118.737680][ T4990] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none. [ 118.778187][ T4414] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 118.841663][ T4414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.880946][ T4414] usb 1-1: Product: syz [ 118.885205][ T4414] usb 1-1: Manufacturer: syz [ 118.904617][ T5007] loop4: detected capacity change from 0 to 512 [ 118.917910][ T4414] usb 1-1: SerialNumber: syz [ 118.946429][ T5007] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 118.966867][ T4414] usb 1-1: config 0 descriptor?? [ 119.060148][ T4414] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 119.134086][ T26] audit: type=1326 audit(1786075022.815:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.3.180" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 119.244429][ T26] audit: type=1326 audit(1786075022.815:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.3.180" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 119.395400][ T26] audit: type=1326 audit(1786075022.875:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.3.180" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 119.435249][ T4414] usb 1-1: qt2_setup_urbs - submit read urb failed -90 [ 119.442910][ T4414] quatech2: probe of 1-1:0.51 failed with error -90 [ 121.178543][ T26] audit: type=1326 audit(1786075022.875:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.3.180" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 121.209198][ T4410] usb 1-1: USB disconnect, device number 5 [ 121.404430][ T26] audit: type=1326 audit(1786075022.885:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.3.180" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 121.502557][ T26] audit: type=1326 audit(1786075022.885:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.3.180" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 121.527913][ T26] audit: type=1326 audit(1786075022.885:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.3.180" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 121.554294][ T26] audit: type=1326 audit(1786075022.885:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.3.180" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 121.587595][ T4194] XFS (loop1): Unmounting Filesystem [ 121.694845][ T26] audit: type=1326 audit(1786075022.885:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.3.180" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 121.834010][ T5028] loop4: detected capacity change from 0 to 32768 [ 121.936126][ T5028] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.188 (5028) [ 121.964908][ T5028] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 121.974184][ T5028] BTRFS info (device loop4): turning on sync discard [ 121.981115][ T5028] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 121.990664][ T5028] BTRFS info (device loop4): use zstd compression, level 3 [ 121.998790][ T5028] BTRFS info (device loop4): turning on async discard [ 122.005606][ T5028] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 122.016309][ T5028] BTRFS info (device loop4): trying to use backup root at mount time [ 122.024501][ T5028] BTRFS info (device loop4): enabling auto defrag [ 122.031059][ T5028] BTRFS info (device loop4): using free space tree [ 122.037600][ T5028] BTRFS info (device loop4): has skinny extents [ 122.089016][ T1334] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.174076][ T5024] loop0: detected capacity change from 0 to 32768 [ 122.348653][ T1334] usb 3-1: Using ep0 maxpacket: 16 [ 122.381708][ T4484] BTRFS warning (device loop4): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 122.433057][ T5028] BTRFS warning (device loop4): failed to read root (objectid=2): -5 [ 122.445932][ T4484] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 122.478891][ T1334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.488923][ T5028] BTRFS warning (device loop4): couldn't read tree root [ 122.490127][ T5028] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7 [ 122.506095][ T5028] BTRFS warning (device loop4): couldn't read tree root [ 122.535182][ T5051] jffs2: notice: (5051) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.539763][ T1334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.572494][ T5028] BTRFS info (device loop4): enabling ssd optimizations [ 122.580507][ T5028] BTRFS info (device loop4): clearing free space tree [ 122.587382][ T5028] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 122.597201][ T5028] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 122.620104][ T5028] BTRFS info (device loop4): creating free space tree [ 122.627838][ T5028] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 122.637598][ T5028] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 122.863865][ T5028] overlayfs: failed to resolve './file1/file0': -2 [ 123.078843][ T1334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.122300][ T1334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.144256][ T1334] usb 3-1: Product: syz [ 123.149292][ T1334] usb 3-1: Manufacturer: syz [ 123.163701][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 123.163716][ T26] audit: type=1326 audit(1786075026.845:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.3.193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 123.169745][ T1334] usb 3-1: SerialNumber: syz [ 123.190798][ T26] audit: type=1326 audit(1786075026.875:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.3.193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 123.308278][ T26] audit: type=1326 audit(1786075026.885:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.3.193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 123.414374][ T26] audit: type=1326 audit(1786075026.885:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.3.193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 123.506806][ T26] audit: type=1326 audit(1786075026.885:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.3.193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 123.532631][ T26] audit: type=1326 audit(1786075026.885:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.3.193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 123.564511][ T26] audit: type=1326 audit(1786075026.885:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.3.193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 123.596090][ T26] audit: type=1326 audit(1786075026.915:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.3.193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 123.629419][ T26] audit: type=1326 audit(1786075026.915:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.3.193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 123.660435][ T26] audit: type=1326 audit(1786075026.915:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.3.193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0128190d9 code=0x7ffc0000 [ 123.737134][ T5069] input: syz1 as /devices/virtual/input/input10 [ 123.813637][ T5030] loop2: detected capacity change from 0 to 4096 [ 123.874517][ T5030] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 124.084641][ T5078] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 124.102325][ T5070] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 124.170227][ T1334] usb 3-1: 0:2 : does not exist [ 124.428356][ T5080] loop4: detected capacity change from 0 to 32768 [ 124.563386][ T5084] loop0: detected capacity change from 0 to 1024 [ 124.589804][ T1334] usb 3-1: USB disconnect, device number 2 [ 124.648728][ T5070] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.656375][ T4414] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 124.765032][ T5080] XFS (loop4): Mounting V5 Filesystem [ 124.853798][ T5080] XFS (loop4): Ending clean mount [ 125.543182][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.573251][ T5070] usb 2-1: Using ep0 maxpacket: 32 [ 125.613523][ T4414] usb 4-1: Using ep0 maxpacket: 8 [ 125.738943][ T5070] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 125.747103][ T5070] usb 2-1: config 0 has no interface number 0 [ 125.933036][ T5099] loop2: detected capacity change from 0 to 32768 [ 125.939879][ T4414] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.950440][ T5070] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.960645][ T4414] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.969840][ T5070] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 126.005528][ T5099] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.202 (5099) [ 126.035878][ T5099] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 126.044739][ T5099] BTRFS info (device loop2): turning on sync discard [ 126.051627][ T5099] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 126.061153][ T5099] BTRFS info (device loop2): use zstd compression, level 3 [ 126.068406][ T5099] BTRFS info (device loop2): turning on async discard [ 126.075365][ T5099] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 126.086190][ T5099] BTRFS info (device loop2): trying to use backup root at mount time [ 126.094355][ T5099] BTRFS info (device loop2): enabling auto defrag [ 126.100898][ T5099] BTRFS info (device loop2): using free space tree [ 126.107437][ T5099] BTRFS info (device loop2): has skinny extents [ 126.198929][ T4414] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 126.208054][ T4414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.228526][ T4414] usb 4-1: Product: syz [ 126.239350][ T4414] usb 4-1: Manufacturer: syz [ 126.244012][ T4414] usb 4-1: SerialNumber: syz [ 126.249182][ T5070] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 126.258260][ T5070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.269812][ T5070] usb 2-1: Product: syz [ 126.275425][ T5070] usb 2-1: Manufacturer: syz [ 126.281243][ T5070] usb 2-1: SerialNumber: syz [ 126.288697][ T5070] usb 2-1: config 0 descriptor?? [ 126.340146][ T5070] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 126.401577][ T4237] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 126.428859][ T5099] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 126.437385][ T144] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 126.458505][ T5118] loop0: detected capacity change from 0 to 1024 [ 126.468920][ T5099] BTRFS warning (device loop2): couldn't read tree root [ 126.476361][ T5099] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 126.486349][ T5099] BTRFS warning (device loop2): couldn't read tree root [ 126.558767][ T5070] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 126.565852][ T5099] BTRFS info (device loop2): enabling ssd optimizations [ 126.573514][ T5099] BTRFS info (device loop2): clearing free space tree [ 126.580634][ T5099] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 126.590359][ T5099] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.605525][ T5099] BTRFS info (device loop2): creating free space tree [ 126.613510][ T5099] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 126.623247][ T5099] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.637421][ T5070] quatech2: probe of 2-1:0.51 failed with error -90 [ 126.658737][ T4414] usb 4-1: unit 5 not found! [ 126.683212][ T5118] attempt to access beyond end of device [ 126.683212][ T5118] loop0: rw=0, want=5780, limit=1024 [ 126.762213][ T4227] usb 2-1: USB disconnect, device number 4 [ 126.804645][ T5121] attempt to access beyond end of device [ 126.804645][ T5121] loop0: rw=0, want=5780, limit=1024 [ 126.864797][ T5121] Buffer I/O error on dev loop0, logical block 2889, async page read [ 126.884303][ T4414] usb 4-1: USB disconnect, device number 5 [ 126.913124][ T5117] attempt to access beyond end of device [ 126.913124][ T5117] loop0: rw=0, want=5780, limit=1024 [ 126.935414][ T5099] overlayfs: failed to resolve './file1/file0': -2 [ 127.229434][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.348757][ T4175] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4175) [ 127.385738][ T5125] loop0: detected capacity change from 0 to 4096 [ 127.600971][ T5136] loop1: detected capacity change from 0 to 128 [ 127.622323][ T4195] XFS (loop4): Unmounting Filesystem [ 127.665476][ T5136] EXT4-fs (loop1): Ignoring removed orlov option [ 127.713379][ T5136] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 127.728249][ T5136] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.104151][ T5125] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.255721][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 128.255736][ T26] audit: type=1326 audit(1786075031.935:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5139 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56017a80d9 code=0x7ffc0000 [ 128.290630][ T5125] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.203: corrupted inode contents [ 128.305678][ T5144] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 128.332716][ T26] audit: type=1326 audit(1786075032.005:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5139 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56017a80d9 code=0x7ffc0000 [ 128.357471][ T26] audit: type=1326 audit(1786075032.005:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5139 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56017a80d9 code=0x7ffc0000 [ 128.378565][ T5144] netlink: 'syz.1.208': attribute type 2 has an invalid length. [ 128.392571][ T26] audit: type=1326 audit(1786075032.005:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5139 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56017a80d9 code=0x7ffc0000 [ 128.408844][ T5125] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #15: comm syz.0.203: mark_inode_dirty error [ 128.440108][ T26] audit: type=1326 audit(1786075032.005:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5139 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56017a80d9 code=0x7ffc0000 [ 128.633399][ T5146] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 128.658368][ T26] audit: type=1326 audit(1786075032.005:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5139 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56017a80d9 code=0x7ffc0000 [ 128.684281][ T5125] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.203: corrupted inode contents [ 128.699811][ T4425] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 128.711552][ T5125] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.203: mark_inode_dirty error [ 128.739861][ T26] audit: type=1326 audit(1786075032.005:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5139 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56017a80d9 code=0x7ffc0000 [ 128.771178][ T5125] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.203: corrupted inode contents [ 128.805851][ T5125] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.203: mark_inode_dirty error [ 128.865533][ T26] audit: type=1326 audit(1786075032.005:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5139 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56017a80d9 code=0x7ffc0000 [ 128.908332][ T5125] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.203: corrupted inode contents [ 128.936816][ T26] audit: type=1326 audit(1786075032.005:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5139 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f56017a80d9 code=0x7ffc0000 [ 128.961572][ T5125] EXT4-fs error (device loop0): ext4_truncate:4286: inode #15: comm syz.0.203: mark_inode_dirty error [ 128.973784][ T26] audit: type=1326 audit(1786075032.005:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5139 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56017a80d9 code=0x7ffc0000 [ 128.998682][ T5125] EXT4-fs error (device loop0): ext4_evict_inode:295: comm syz.0.203: couldn't truncate inode 15 (err -117) [ 129.769914][ T5162] Option '.nserror' to dns_resolver key: bad/missing value [ 130.361608][ T5161] loop2: detected capacity change from 0 to 128 [ 130.407128][ T5160] loop3: detected capacity change from 0 to 512 [ 130.474054][ T5161] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 130.495534][ T5160] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.524060][ T5160] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.756831][ T5172] loop4: detected capacity change from 0 to 128 [ 130.821514][ T5172] EXT4-fs (loop4): Ignoring removed orlov option [ 131.019193][ T5172] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 131.035160][ T5172] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.279709][ T5070] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.564506][ T5185] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 131.578053][ T5067] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 131.586712][ T5070] usb 1-1: Using ep0 maxpacket: 32 [ 131.701665][ T5191] loop3: detected capacity change from 0 to 128 [ 132.198650][ T5070] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 132.215614][ T5070] usb 1-1: config 0 has no interface number 0 [ 132.231149][ T5070] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.248833][ T5195] netlink: 'syz.4.223': attribute type 1 has an invalid length. [ 132.259457][ T5191] EXT4-fs (loop3): Ignoring removed orlov option [ 132.280904][ T5191] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 132.293987][ T5070] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 132.295541][ T5191] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.329166][ T5195] netlink: 'syz.4.223': attribute type 2 has an invalid length. [ 132.548823][ T5070] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 132.595323][ T5070] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.626806][ T5070] usb 1-1: Product: syz [ 132.637471][ T5070] usb 1-1: Manufacturer: syz [ 132.658678][ T5202] loop2: detected capacity change from 0 to 512 [ 132.677723][ T5070] usb 1-1: SerialNumber: syz [ 132.739664][ T5070] usb 1-1: config 0 descriptor?? [ 132.761911][ T5202] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.224: invalid indirect mapped block 256 (level 2) [ 132.792878][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.800817][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.852546][ T5202] EXT4-fs (loop2): Remounting filesystem read-only [ 132.861237][ T5070] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 132.877310][ T5202] EXT4-fs (loop2): 2 truncates cleaned up [ 132.909770][ T5202] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,barrier,. Quota mode: writeback. [ 133.088668][ T5070] usb 1-1: qt2_setup_urbs - submit read urb failed -90 [ 133.095777][ T5070] quatech2: probe of 1-1:0.51 failed with error -90 [ 133.247597][ T5206] loop3: detected capacity change from 0 to 512 [ 134.413341][ T4414] usb 1-1: USB disconnect, device number 6 [ 134.514454][ T26] kauditd_printk_skb: 84 callbacks suppressed [ 134.514469][ T26] audit: type=1800 audit(1786075038.195:434): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.229" name="zoned" dev="configfs" ino=35434 res=0 errno=0 [ 134.547979][ T5212] netlink: 200 bytes leftover after parsing attributes in process `syz.0.229'. [ 134.558881][ T5206] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.578792][ T5206] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.707532][ T5219] loop4: detected capacity change from 0 to 128 [ 134.769056][ T5219] EXT4-fs (loop4): Ignoring removed orlov option [ 134.887781][ T5219] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 134.902799][ T5219] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.956122][ T26] audit: type=1800 audit(1786075038.635:435): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.229" name="power" dev="configfs" ino=36028 res=0 errno=0 [ 135.245743][ T4286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.514236][ T5230] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 135.526536][ T5067] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 136.454011][ T4286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.597162][ T5236] loop4: detected capacity change from 0 to 128 [ 136.692879][ T4286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.703891][ T5236] EXT4-fs (loop4): Ignoring removed orlov option [ 136.774323][ T5236] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 136.789302][ T5236] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.935362][ T5241] loop3: detected capacity change from 0 to 8 [ 137.001486][ T4286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.156076][ T5238] loop0: detected capacity change from 0 to 4096 [ 137.218894][ T5241] loop3: detected capacity change from 0 to 1024 [ 137.234440][ T5238] EXT4-fs (loop0): Test dummy encryption mode enabled [ 137.369307][ T5238] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 137.398048][ T5241] EXT4-fs (loop3): Ignoring removed orlov option [ 137.576854][ T5241] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,lazytime,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 137.599249][ T4493] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 137.673333][ T4286] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.704183][ T5238] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 137.949964][ T4493] usb 5-1: Using ep0 maxpacket: 32 [ 138.609005][ T4493] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 138.617730][ T4493] usb 5-1: config 0 has no interface number 0 [ 138.673214][ T4493] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.689436][ T5238] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 138.700494][ T4493] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 138.757426][ T5272] netlink: 'syz.3.240': attribute type 1 has an invalid length. [ 138.848631][ T5272] netlink: 'syz.3.240': attribute type 2 has an invalid length. [ 138.863721][ T5249] loop1: detected capacity change from 0 to 32768 [ 138.878777][ T4493] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 138.895772][ T4493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.932565][ T5242] chnl_net:caif_netlink_parms(): no params data found [ 138.976490][ T4493] usb 5-1: Product: syz [ 138.978903][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 138.991012][ T4493] usb 5-1: Manufacturer: syz [ 139.008575][ T4493] usb 5-1: SerialNumber: syz [ 139.129329][ T4493] usb 5-1: config 0 descriptor?? [ 139.170316][ T4493] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 139.553061][ T4493] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 139.560473][ T4493] quatech2: probe of 5-1:0.51 failed with error -90 [ 139.575834][ T5291] loop0: detected capacity change from 0 to 256 [ 140.360410][ T4414] usb 5-1: USB disconnect, device number 3 [ 140.371984][ T5291] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 140.440192][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.479655][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.561427][ T5242] device bridge_slave_0 entered promiscuous mode [ 140.609429][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.650789][ T26] audit: type=1800 audit(1786075044.335:436): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.243" name="file1" dev="loop0" ino=1048612 res=0 errno=0 [ 140.694211][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.749494][ T5242] device bridge_slave_1 entered promiscuous mode [ 140.792777][ T5291] attempt to access beyond end of device [ 140.792777][ T5291] loop0: rw=0, want=3704, limit=256 [ 140.889570][ T5291] attempt to access beyond end of device [ 140.889570][ T5291] loop0: rw=0, want=4285, limit=256 [ 140.957579][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.029881][ T5067] Bluetooth: hci2: command 0x041b tx timeout [ 141.039670][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.069550][ T26] audit: type=1800 audit(1786075044.755:437): pid=5301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.244" name="zoned" dev="configfs" ino=36220 res=0 errno=0 [ 141.118089][ T5301] netlink: 200 bytes leftover after parsing attributes in process `syz.3.244'. [ 141.147311][ T5242] team0: Port device team_slave_0 added [ 141.157599][ T5242] team0: Port device team_slave_1 added [ 141.190040][ T26] audit: type=1800 audit(1786075044.875:438): pid=5310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.244" name="power" dev="configfs" ino=35620 res=0 errno=0 [ 141.242278][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.274117][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.343025][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.404855][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.434788][ T5316] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 141.448286][ T5067] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 141.476552][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.571884][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.727277][ T5327] loop0: detected capacity change from 0 to 128 [ 141.833450][ T5327] EXT4-fs (loop0): Ignoring removed orlov option [ 141.908011][ T5327] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 141.922826][ T5327] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.234546][ T5242] device hsr_slave_0 entered promiscuous mode [ 142.306140][ T5242] device hsr_slave_1 entered promiscuous mode [ 142.314636][ T5330] loop3: detected capacity change from 0 to 1024 [ 142.329447][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.337060][ T5242] Cannot create hsr debugfs directory [ 142.503005][ T5338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.252'. [ 142.572467][ T5342] netlink: 'syz.3.253': attribute type 1 has an invalid length. [ 142.607303][ T5342] netlink: 'syz.3.253': attribute type 2 has an invalid length. [ 143.108642][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 143.275301][ T4286] device hsr_slave_0 left promiscuous mode [ 143.296222][ T4286] device hsr_slave_1 left promiscuous mode [ 143.327084][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.346483][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.386113][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.397025][ T5333] loop4: detected capacity change from 0 to 32768 [ 143.430450][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.450173][ T4286] device bridge_slave_1 left promiscuous mode [ 143.458703][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.526251][ T4286] device bridge_slave_0 left promiscuous mode [ 143.569225][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.589999][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.683482][ T4286] device veth1_macvtap left promiscuous mode [ 143.723229][ T4286] device veth0_macvtap left promiscuous mode [ 143.763740][ T4286] device veth1_vlan left promiscuous mode [ 143.788955][ T4286] device veth0_vlan left promiscuous mode [ 144.007072][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.038562][ T4493] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.044253][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.148772][ T7] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 144.159224][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 144.167257][ T7] usb 1-1: SerialNumber: syz [ 144.298623][ T4493] usb 5-1: Using ep0 maxpacket: 32 [ 144.428675][ T4493] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 144.445930][ T4493] usb 5-1: config 0 has no interface number 0 [ 144.456637][ T4493] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 144.503039][ T4493] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 144.521538][ T7] usb 1-1: 0:2 : does not exist [ 144.529393][ T5379] loop3: detected capacity change from 0 to 2048 [ 144.557863][ T5379] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 144.577495][ T7] usb 1-1: USB disconnect, device number 7 [ 144.585243][ T5379] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.637764][ T26] audit: type=1800 audit(1786075048.315:439): pid=5379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.258" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 144.688684][ T5067] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.798270][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.840682][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.869845][ T4493] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 144.879420][ T4493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.887459][ T4493] usb 5-1: Product: syz [ 144.891745][ T4493] usb 5-1: Manufacturer: syz [ 144.896388][ T4493] usb 5-1: SerialNumber: syz [ 144.927980][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.935047][ T4493] usb 5-1: config 0 descriptor?? [ 145.047838][ T5381] process 'syz.3.258' launched './file0' with NULL argv: empty string added [ 145.190122][ T4414] Bluetooth: hci2: command 0x0419 tx timeout [ 145.239245][ T5067] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.280848][ T4493] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 145.308817][ T5067] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.345757][ T26] audit: type=1800 audit(1786075049.025:440): pid=5383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.259" name="memory_backed" dev="configfs" ino=35711 res=0 errno=0 [ 145.376739][ T5067] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 145.397150][ T5067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.416528][ T4286] bond0 (unregistering): Released all slaves [ 145.424615][ T5067] usb 2-1: config 0 descriptor?? [ 145.471121][ T26] audit: type=1800 audit(1786075049.155:441): pid=5383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.259" name="zoned" dev="configfs" ino=36506 res=0 errno=0 [ 145.497391][ T5383] netlink: 200 bytes leftover after parsing attributes in process `syz.0.259'. [ 145.515190][ T4493] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 145.525510][ T4493] quatech2: probe of 5-1:0.51 failed with error -90 [ 145.588617][ T26] audit: type=1800 audit(1786075049.245:442): pid=5383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.259" name="power" dev="configfs" ino=35712 res=0 errno=0 [ 145.636889][ T5242] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.685273][ T5242] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.718392][ T26] audit: type=1326 audit(1786075049.395:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5386 comm="syz.0.261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 145.721549][ T5242] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.760691][ T4493] usb 5-1: USB disconnect, device number 4 [ 145.837510][ T5389] loop3: detected capacity change from 0 to 128 [ 145.857936][ T5242] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.909757][ T5389] EXT4-fs (loop3): Ignoring removed orlov option [ 145.917377][ T26] audit: type=1326 audit(1786075049.395:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5386 comm="syz.0.261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 145.970856][ T5067] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 145.997621][ T5067] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 146.027105][ T5067] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 146.038662][ T5067] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 146.040471][ T5389] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 146.046106][ T5067] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 146.060885][ T5389] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.109929][ T5067] hid-steam 0003:28DE:1142.0001: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 146.177347][ T26] audit: type=1326 audit(1786075049.555:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5386 comm="syz.0.261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 146.441818][ T26] audit: type=1326 audit(1786075049.555:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5386 comm="syz.0.261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 146.514611][ T5397] input: syz1 as /devices/virtual/input/input11 [ 146.522373][ T26] audit: type=1326 audit(1786075049.555:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5386 comm="syz.0.261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 146.575409][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.634611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.658947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.691563][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.762411][ T26] audit: type=1326 audit(1786075049.555:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5386 comm="syz.0.261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 146.820693][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.851676][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.902717][ T4237] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.909918][ T4237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.938685][ T26] audit: type=1326 audit(1786075049.555:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5386 comm="syz.0.261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 146.960349][ T7] usb 2-1: USB disconnect, device number 5 [ 146.982459][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.016553][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.039909][ T26] audit: type=1326 audit(1786075049.555:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5386 comm="syz.0.261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 147.064849][ T4237] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.072020][ T4237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.140562][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.156438][ T26] audit: type=1326 audit(1786075049.555:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5386 comm="syz.0.261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 147.183956][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.216386][ T5415] netlink: 'syz.4.267': attribute type 1 has an invalid length. [ 147.231272][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.242818][ T5415] netlink: 'syz.4.267': attribute type 2 has an invalid length. [ 147.254643][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.267549][ T26] audit: type=1326 audit(1786075049.555:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5386 comm="syz.0.261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 147.309894][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.325726][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.885078][ T5422] loop1: detected capacity change from 0 to 32768 [ 147.900284][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.929463][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.950303][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.964985][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.995275][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.012847][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.076433][ T5242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.219297][ T5422] overlayfs: failed to resolve './file1': -2 [ 148.302474][ T5403] loop3: detected capacity change from 0 to 32768 [ 148.740778][ T5435] netlink: 200 bytes leftover after parsing attributes in process `syz.1.270'. [ 148.883536][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.901937][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.963610][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.387144][ T5459] loop3: detected capacity change from 0 to 128 [ 149.509419][ T5459] EXT4-fs (loop3): Ignoring removed orlov option [ 149.590583][ T5459] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 149.605455][ T5459] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.373184][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.451528][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.550756][ T5480] loop4: detected capacity change from 0 to 32768 [ 150.594469][ T5242] device veth0_vlan entered promiscuous mode [ 150.649490][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.668677][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.708942][ T5242] device veth1_vlan entered promiscuous mode [ 150.765282][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.781571][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.819289][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.951978][ T5480] overlayfs: failed to resolve './file1': -2 [ 151.016315][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.109393][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.198964][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.203554][ T5490] netlink: 'syz.4.281': attribute type 1 has an invalid length. [ 151.255318][ T5490] netlink: 'syz.4.281': attribute type 2 has an invalid length. [ 151.267573][ T5242] device veth0_macvtap entered promiscuous mode [ 151.311211][ T5242] device veth1_macvtap entered promiscuous mode [ 151.752095][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.779145][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.895143][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.001924][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.048562][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.801995][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.967668][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.015871][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.189320][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.397103][ T5506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'. [ 153.457964][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.509351][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.550660][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.398987][ T5508] "syz.4.284" (5508) uses obsolete ecb(arc4) skcipher [ 154.679721][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.722971][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.761338][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.812905][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.848518][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.868107][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.892905][ T5242] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.928213][ T5242] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.988523][ T5242] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.997735][ T5242] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.026832][ T5512] loop0: detected capacity change from 0 to 256 [ 155.043032][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.073227][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.128870][ T5512] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.168597][ T5512] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 155.224661][ T5517] loop3: detected capacity change from 0 to 128 [ 155.318022][ T5512] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 155.367390][ T5517] EXT4-fs (loop3): Ignoring removed orlov option [ 155.495989][ T5517] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 155.511137][ T5517] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.849422][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.868654][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.890790][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.009511][ T4484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.017447][ T4484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.104906][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.319889][ T5532] netlink: 'syz.0.292': attribute type 1 has an invalid length. [ 156.327608][ T5532] netlink: 'syz.0.292': attribute type 2 has an invalid length. [ 157.855941][ T5558] loop5: detected capacity change from 0 to 256 [ 157.943802][ T5561] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.951849][ T5561] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.040564][ T5558] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 158.575065][ T5573] loop4: detected capacity change from 0 to 32768 [ 158.828685][ T5585] loop0: detected capacity change from 0 to 512 [ 158.920568][ T5584] loop5: detected capacity change from 0 to 2048 [ 159.010831][ T5584] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 159.058781][ T5585] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.066746][ T5584] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 159.088209][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 159.088228][ T26] audit: type=1804 audit(1786075062.765:465): pid=5580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.302" name="/newroot/55/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 159.181263][ T5584] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 159.262393][ T5584] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 159.340650][ T5584] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 159.352438][ T5584] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 159.368517][ T5584] UDF-fs: Scanning with blocksize 512 failed [ 160.011804][ T5584] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 160.158700][ T5584] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 160.307236][ T5584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.315806][ T5620] loop4: detected capacity change from 0 to 128 [ 163.384333][ T5620] EXT4-fs (loop4): Ignoring removed orlov option [ 163.448226][ T5620] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 163.462669][ T5620] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.017147][ T5671] loop0: detected capacity change from 0 to 512 [ 167.117835][ T5671] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 167.227324][ T5671] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 167.261304][ T5680] loop3: detected capacity change from 0 to 128 [ 167.326113][ T5671] EXT4-fs (loop0): 1 truncate cleaned up [ 167.332839][ T5671] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 167.436782][ T5680] EXT4-fs (loop3): Ignoring removed orlov option [ 167.492962][ T5683] netlink: 'syz.4.327': attribute type 1 has an invalid length. [ 167.538646][ T5680] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 167.553518][ T5680] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.603715][ T5683] netlink: 'syz.4.327': attribute type 2 has an invalid length. [ 169.443994][ T26] audit: type=1326 audit(1786075073.125:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.5.333" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 169.642458][ T26] audit: type=1326 audit(1786075073.125:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.5.333" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 169.818127][ T26] audit: type=1326 audit(1786075073.185:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.5.333" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 169.849076][ T5733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.339'. [ 169.866935][ T5730] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 169.879197][ T7] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 169.956247][ T26] audit: type=1326 audit(1786075073.185:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.5.333" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 169.965407][ T5726] loop0: detected capacity change from 0 to 4096 [ 170.071276][ T26] audit: type=1326 audit(1786075073.185:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.5.333" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 170.138781][ T26] audit: type=1326 audit(1786075073.185:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.5.333" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 170.186220][ T5726] EXT4-fs (loop0): Test dummy encryption mode enabled [ 170.213869][ T5726] EXT4-fs (loop0): Ignoring removed oldalloc option [ 170.230573][ T26] audit: type=1326 audit(1786075073.185:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.5.333" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 170.288773][ T5743] netlink: 'syz.4.342': attribute type 1 has an invalid length. [ 170.308688][ T5743] netlink: 'syz.4.342': attribute type 2 has an invalid length. [ 170.359803][ T5726] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,oldalloc,,errors=continue. Quota mode: writeback. [ 170.378574][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 170.403804][ T26] audit: type=1326 audit(1786075073.195:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.5.333" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 170.428333][ T26] audit: type=1326 audit(1786075073.195:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.5.333" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 170.453681][ T26] audit: type=1326 audit(1786075073.195:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.5.333" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 170.678493][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 172.480536][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.549677][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.668919][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 172.694661][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 172.726508][ T7] usb 2-1: SerialNumber: syz [ 172.837341][ T7] usb 2-1: 0:2 : does not exist [ 173.612456][ T5796] loop0: detected capacity change from 0 to 256 [ 173.746746][ T5796] attempt to access beyond end of device [ 173.746746][ T5796] loop0: rw=2049, want=260, limit=256 [ 174.057751][ T5788] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 174.094172][ T5788] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 174.171651][ T5786] loop3: detected capacity change from 0 to 32768 [ 175.023534][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 175.023550][ T26] audit: type=1326 audit(1786075078.705:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.4.358" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 175.083301][ T26] audit: type=1326 audit(1786075078.735:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.4.358" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 175.164751][ T5786] XFS (loop3): Mounting V5 Filesystem [ 175.191941][ T26] audit: type=1326 audit(1786075078.735:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.4.358" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 175.216450][ T26] audit: type=1326 audit(1786075078.735:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.4.358" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 175.241246][ T26] audit: type=1326 audit(1786075078.735:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.4.358" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 175.266061][ T7] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 175.276205][ T26] audit: type=1326 audit(1786075078.735:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.4.358" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 175.332489][ T26] audit: type=1326 audit(1786075078.735:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.4.358" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 175.360709][ T5786] XFS (loop3): Ending clean mount [ 175.372238][ T26] audit: type=1326 audit(1786075078.735:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.4.358" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 175.488455][ T26] audit: type=1326 audit(1786075078.745:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.4.358" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 175.610236][ T7] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 175.629314][ T5840] input: syz1 as /devices/virtual/input/input16 [ 175.645069][ T26] audit: type=1326 audit(1786075078.745:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.4.358" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d08fd0d9 code=0x7ffc0000 [ 175.682935][ T7] usb 2-1: USB disconnect, device number 6 [ 175.961232][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.128629][ T4425] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 176.578728][ T4425] usb 5-1: unable to get BOS descriptor or descriptor too short [ 176.678736][ T4425] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 39, changing to 7 [ 176.728503][ T4425] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1032, setting to 1024 [ 177.743474][ T4186] XFS (loop3): Unmounting Filesystem [ 179.238612][ T4425] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 179.247774][ T4425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.613269][ T4425] usb 5-1: Product: syz [ 180.631163][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 180.631179][ T26] audit: type=1326 audit(1786075084.315:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf49d50d9 code=0x7ffc0000 [ 180.678702][ T4425] usb 5-1: can't set config #1, error -71 [ 180.697796][ T4425] usb 5-1: USB disconnect, device number 5 [ 180.729211][ T26] audit: type=1326 audit(1786075084.315:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf49d50d9 code=0x7ffc0000 [ 180.826038][ T26] audit: type=1326 audit(1786075084.345:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcdf49d50d9 code=0x7ffc0000 [ 180.928458][ T26] audit: type=1326 audit(1786075084.345:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf49d50d9 code=0x7ffc0000 [ 180.962316][ T26] audit: type=1326 audit(1786075084.345:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf49d50d9 code=0x7ffc0000 [ 181.026512][ T26] audit: type=1326 audit(1786075084.405:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf49d50d9 code=0x7ffc0000 [ 181.057034][ T26] audit: type=1326 audit(1786075084.405:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf49d50d9 code=0x7ffc0000 [ 181.123208][ T26] audit: type=1326 audit(1786075084.405:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf49d50d9 code=0x7ffc0000 [ 181.187721][ T26] audit: type=1326 audit(1786075084.405:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcdf49d50d9 code=0x7ffc0000 [ 181.241531][ T26] audit: type=1326 audit(1786075084.405:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf49d50d9 code=0x7ffc0000 [ 181.473502][ T5889] loop3: detected capacity change from 0 to 256 [ 181.530055][ T5889] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 181.666078][ T5891] attempt to access beyond end of device [ 181.666078][ T5891] loop3: rw=524288, want=34359738496, limit=256 [ 181.768877][ T5891] attempt to access beyond end of device [ 181.768877][ T5891] loop3: rw=0, want=34359738496, limit=256 [ 181.955576][ T5894] loop0: detected capacity change from 0 to 1024 [ 182.011202][ T5896] input: syz1 as /devices/virtual/input/input17 [ 182.052420][ T5894] EXT4-fs (loop0): Ignoring removed orlov option [ 182.106288][ T5899] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 182.185272][ T5894] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,,errors=continue. Quota mode: none. [ 183.298625][ T5924] netlink: 200 bytes leftover after parsing attributes in process `syz.0.377'. [ 183.344778][ T5930] loop1: detected capacity change from 0 to 164 [ 184.465575][ T5930] rock: directory entry would overflow storage [ 184.498516][ T5930] rock: sig=0x66, size=4, remaining=3 [ 184.529883][ T5930] rock: directory entry would overflow storage [ 184.559035][ T5930] rock: sig=0x66, size=4, remaining=3 [ 184.778566][ T5930] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 185.561719][ T5951] input: syz1 as /devices/virtual/input/input18 [ 185.601883][ T5953] loop0: detected capacity change from 0 to 512 [ 185.732584][ T5953] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 185.817808][ T5953] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,data_err=ignore,discard,,errors=continue. Quota mode: writeback. [ 185.892918][ T5953] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.148691][ T5067] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 186.316390][ T5979] loop4: detected capacity change from 0 to 512 [ 187.803377][ T5067] usb 2-1: Using ep0 maxpacket: 32 [ 189.246218][ T5997] netlink: 200 bytes leftover after parsing attributes in process `syz.3.393'. [ 189.298805][ T5067] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 189.307053][ T5067] usb 2-1: can't read configurations, error -71 [ 189.563286][ T6005] input: syz1 as /devices/virtual/input/input19 [ 189.608229][ T4175] udevd[4175]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 189.631698][ T4175] udevd[4175]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 190.063780][ T6014] loop1: detected capacity change from 0 to 512 [ 190.139762][ T6014] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 190.197303][ T6014] EXT4-fs (loop1): 1 truncate cleaned up [ 190.203137][ T6014] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,discard,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,i_version,grpquota,,errors=continue. Quota mode: writeback. [ 190.275179][ T6018] loop3: detected capacity change from 0 to 2048 [ 190.381523][ T6018] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.796930][ T6035] input: syz1 as /devices/virtual/input/input20 [ 190.928688][ T4425] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.116709][ T6044] netlink: 200 bytes leftover after parsing attributes in process `syz.1.413'. [ 191.118987][ T6048] loop0: detected capacity change from 0 to 16 [ 191.178640][ T4425] usb 5-1: Using ep0 maxpacket: 32 [ 191.189003][ T4494] Bluetooth: hci3: command 0x0406 tx timeout [ 191.208897][ T5067] Bluetooth: hci1: command 0x0406 tx timeout [ 191.224681][ T5067] Bluetooth: hci0: command 0x0406 tx timeout [ 191.241500][ T5067] Bluetooth: hci4: command 0x0406 tx timeout [ 191.280593][ T6048] erofs: (device loop0): mounted with root inode @ nid 36. [ 191.380400][ T6056] fuse: Bad value for 'fd' [ 191.744863][ T6064] loop3: detected capacity change from 0 to 8 [ 191.805270][ T4425] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 191.818131][ T4425] usb 5-1: config 0 has no interface number 0 [ 191.967178][ T6064] SQUASHFS error: zlib decompression failed, data probably corrupt [ 191.994581][ T6064] SQUASHFS error: Failed to read block 0x4de: -5 [ 192.035308][ T6064] SQUASHFS error: Failed to read block 0x4e2: -5 [ 192.079000][ T4425] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 192.099145][ T4425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.120328][ T6064] SQUASHFS error: Failed to read block 0x9ca: -5 [ 192.131509][ T4425] usb 5-1: Product: syz [ 192.161062][ T4425] usb 5-1: Manufacturer: syz [ 192.166083][ T6079] input: syz1 as /devices/virtual/input/input21 [ 192.173421][ T4436] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 192.187856][ T4425] usb 5-1: SerialNumber: syz [ 192.198122][ T6064] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 192.234324][ T4425] usb 5-1: config 0 descriptor?? [ 192.268606][ T6064] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 192.276113][ T6064] SQUASHFS error: Failed to read block 0x535f2: -5 [ 192.299856][ T4425] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 192.359496][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 192.359511][ T26] audit: type=1800 audit(1786075096.045:608): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.420" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 193.725439][ T4436] usb 1-1: Using ep0 maxpacket: 32 [ 193.761416][ T4425] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 193.799999][ T4425] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 193.882406][ T4436] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.913705][ T4436] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.108858][ T4436] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 194.158621][ T4436] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 194.167031][ T4436] usb 1-1: Product: syz [ 194.190557][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.426'. [ 194.217513][ T4436] usb 1-1: Manufacturer: syz [ 194.222269][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 194.234236][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.240902][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.312773][ T5067] usb 5-1: USB disconnect, device number 6 [ 194.322997][ T5067] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 194.349934][ T4436] hub 1-1:4.0: USB hub found [ 194.392818][ T5067] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 194.433310][ T5067] quatech2 5-1:0.51: device disconnected [ 194.466757][ T6097] netlink: 200 bytes leftover after parsing attributes in process `syz.3.427'. [ 194.614473][ T4436] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 194.696313][ T4436] usb 1-1: USB disconnect, device number 8 [ 197.180196][ T6132] input: syz1 as /devices/virtual/input/input22 [ 197.443741][ T6140] 9pnet: p9_fd_create_tcp (6140): problem connecting socket to 127.0.0.1 [ 197.449605][ T6138] loop3: detected capacity change from 0 to 1024 [ 197.504358][ T6138] EXT4-fs (loop3): Unrecognized mount option "uid=00000000000000000000" or missing value [ 199.393466][ T6156] loop0: detected capacity change from 0 to 764 [ 199.523579][ T6129] loop4: detected capacity change from 0 to 32768 [ 199.538526][ T5067] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 201.138538][ T5067] usb 6-1: Using ep0 maxpacket: 32 [ 201.258800][ T5067] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 201.277256][ T5067] usb 6-1: config 0 has no interface number 0 [ 201.505127][ T6178] input: syz1 as /devices/virtual/input/input23 [ 201.648665][ T5067] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 201.730676][ T5067] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.788452][ T5067] usb 6-1: Product: syz [ 201.793066][ T5067] usb 6-1: Manufacturer: syz [ 201.863140][ T5067] usb 6-1: SerialNumber: syz [ 202.050616][ T5067] usb 6-1: config 0 descriptor?? [ 202.158212][ T5067] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 202.498607][ T5067] usb 6-1: qt2_attach - failed to power on unit: -71 [ 202.505506][ T5067] quatech2: probe of 6-1:0.51 failed with error -71 [ 202.549032][ T5067] usb 6-1: USB disconnect, device number 2 [ 202.628023][ T6194] loop5: detected capacity change from 0 to 128 [ 202.667523][ T26] audit: type=1326 audit(1786075106.345:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.0.449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 202.752986][ T6194] EXT4-fs (loop5): Ignoring removed orlov option [ 202.768114][ T26] audit: type=1326 audit(1786075106.405:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.0.449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 202.852470][ T26] audit: type=1326 audit(1786075106.405:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.0.449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 202.905558][ T6194] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 202.921146][ T6194] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.978862][ T26] audit: type=1326 audit(1786075106.445:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.0.449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 203.046897][ T26] audit: type=1326 audit(1786075106.445:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.0.449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 203.191617][ T26] audit: type=1326 audit(1786075106.445:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.0.449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 203.248184][ T26] audit: type=1326 audit(1786075106.445:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.0.449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 203.280150][ T26] audit: type=1326 audit(1786075106.445:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.0.449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 203.317639][ T6203] loop3: detected capacity change from 0 to 512 [ 203.387233][ T26] audit: type=1326 audit(1786075106.445:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.0.449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 203.444687][ T26] audit: type=1326 audit(1786075106.515:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.0.449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66caea0d9 code=0x7ffc0000 [ 203.525468][ T6203] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.547437][ T6203] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.674842][ T6220] netlink: 200 bytes leftover after parsing attributes in process `syz.1.442'. [ 203.771676][ T6223] loop5: detected capacity change from 0 to 4096 [ 203.905130][ T6223] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 204.825104][ T6237] input: syz1 as /devices/virtual/input/input24 [ 206.991626][ T6217] loop0: detected capacity change from 0 to 32768 [ 207.478649][ T4494] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 207.731588][ T4494] usb 6-1: Using ep0 maxpacket: 32 [ 208.828805][ T4494] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 210.138624][ T4425] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 210.224118][ T4494] usb 6-1: can't read configurations, error -71 [ 210.474133][ T4425] usb 1-1: Using ep0 maxpacket: 16 [ 210.491730][ T6283] loop1: detected capacity change from 0 to 512 [ 210.560648][ T6283] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 210.655835][ T6283] EXT4-fs (loop1): 1 truncate cleaned up [ 210.677673][ T6283] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 210.738640][ T4425] usb 1-1: unable to read config index 0 descriptor/all [ 210.745681][ T4425] usb 1-1: can't read configurations, error -71 [ 210.816721][ T6290] input: syz1 as /devices/virtual/input/input25 [ 211.435405][ T4436] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 211.869188][ T4436] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.903679][ T4436] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 211.986974][ T4436] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.145464][ T4436] usb 2-1: config 0 descriptor?? [ 212.710475][ T6319] loop4: detected capacity change from 0 to 32768 [ 213.247134][ T6296] loop0: detected capacity change from 0 to 32768 [ 213.668612][ T4436] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 213.681307][ T6343] netlink: 200 bytes leftover after parsing attributes in process `syz.0.479'. [ 213.918521][ T4436] usb 5-1: Using ep0 maxpacket: 32 [ 214.058736][ T4436] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 214.077239][ T4436] usb 5-1: config 0 has no interface number 0 [ 214.143049][ T4414] usb 2-1: USB disconnect, device number 9 [ 214.278660][ T4436] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 214.312163][ T6360] input: syz1 as /devices/virtual/input/input26 [ 214.328520][ T4436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.357323][ T4436] usb 5-1: Product: syz [ 214.378832][ T4436] usb 5-1: Manufacturer: syz [ 214.383497][ T4436] usb 5-1: SerialNumber: syz [ 214.479970][ T4436] usb 5-1: config 0 descriptor?? [ 214.531363][ T4436] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 215.847141][ T4436] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 215.860497][ T6369] netlink: 'syz.0.485': attribute type 1 has an invalid length. [ 215.860526][ T4436] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 215.898594][ T6369] netlink: 'syz.0.485': attribute type 2 has an invalid length. [ 216.290630][ T2239] usb 5-1: USB disconnect, device number 7 [ 216.308480][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 216.329413][ T2239] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 216.395712][ T2239] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 216.396253][ T2239] quatech2 5-1:0.51: device disconnected [ 216.944891][ T6402] netlink: 200 bytes leftover after parsing attributes in process `syz.1.490'. [ 217.174041][ T4425] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 217.205113][ T6410] loop1: detected capacity change from 0 to 8 [ 218.868854][ T6421] input: syz1 as /devices/virtual/input/input27 [ 218.888610][ T4425] usb 1-1: not running at top speed; connect to a high speed hub [ 218.991446][ T4425] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 219.023132][ T4425] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 219.170330][ T6428] loop1: detected capacity change from 0 to 128 [ 219.680861][ T6428] EXT4-fs (loop1): Ignoring removed orlov option [ 219.751105][ T4425] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 219.809736][ T6428] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 219.824517][ T6428] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.833670][ T4425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.955481][ T4425] usb 1-1: Product: syz [ 219.981106][ T4425] usb 1-1: Manufacturer: syz [ 219.985778][ T4425] usb 1-1: SerialNumber: syz [ 220.128629][ T4425] usb 1-1: can't set config #1, error -71 [ 220.146906][ T4425] usb 1-1: USB disconnect, device number 11 [ 220.367283][ T6445] input: syz1 as /devices/virtual/input/input28 [ 220.450860][ T6446] loop1: detected capacity change from 0 to 512 [ 220.931965][ T6442] loop5: detected capacity change from 0 to 32768 [ 221.088594][ T4494] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 221.304907][ T6452] netlink: 200 bytes leftover after parsing attributes in process `syz.0.503'. [ 221.345762][ T6446] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 221.345762][ T6446] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 221.345762][ T6446] [ 221.374186][ T4494] usb 4-1: Using ep0 maxpacket: 32 [ 221.437116][ T6446] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a8026028, mo2=0002] [ 221.445390][ T6446] System zones: 0-2, 18-18, 34-35 [ 221.452753][ T6446] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,debug,sysvgroups,noacl,. Quota mode: writeback. [ 221.467137][ T6446] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.723383][ T4494] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 221.736475][ T4494] usb 4-1: config 0 has no interface number 0 [ 221.971751][ T4494] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 222.008646][ T4494] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.085743][ T4494] usb 4-1: Product: syz [ 222.112905][ T4494] usb 4-1: Manufacturer: syz [ 222.135151][ T4494] usb 4-1: SerialNumber: syz [ 222.193604][ T4494] usb 4-1: config 0 descriptor?? [ 222.271652][ T4494] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 222.481628][ T4494] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 222.522235][ T4494] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 222.572904][ T6469] input: syz1 as /devices/virtual/input/input29 [ 222.904933][ T4494] usb 4-1: USB disconnect, device number 6 [ 222.918498][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 222.932425][ T4494] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 223.851402][ T4494] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 223.876015][ T4494] quatech2 4-1:0.51: device disconnected [ 224.373177][ T26] kauditd_printk_skb: 49 callbacks suppressed [ 224.373193][ T26] audit: type=1800 audit(1786075128.055:668): pid=6472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.509" name="/" dev="fuse" ino=4 res=0 errno=0 [ 224.507814][ T6478] loop3: detected capacity change from 0 to 128 [ 224.558642][ T6478] EXT4-fs (loop3): Ignoring removed orlov option [ 224.608881][ T6478] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 224.623348][ T6478] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.822544][ T6487] loop1: detected capacity change from 0 to 128 [ 224.934642][ T6487] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 225.087825][ T6489] loop5: detected capacity change from 0 to 1024 [ 225.220651][ T6487] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 225.837017][ T6505] netlink: 200 bytes leftover after parsing attributes in process `syz.0.516'. [ 225.855188][ T6504] loop4: detected capacity change from 0 to 512 [ 225.915136][ T6499] loop1: detected capacity change from 0 to 32768 [ 225.990537][ T6504] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,nogrpid,usrquota,,errors=continue. Quota mode: writeback. [ 226.027391][ T6504] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.090765][ T6504] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 91 vs 96 free clusters [ 226.291119][ T6504] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 226.315177][ T6515] input: syz1 as /devices/virtual/input/input30 [ 226.828903][ T4410] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 227.118826][ T4410] usb 4-1: Using ep0 maxpacket: 32 [ 227.158140][ T6533] loop5: detected capacity change from 0 to 128 [ 227.248996][ T4410] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 227.286594][ T4410] usb 4-1: config 0 has no interface number 0 [ 227.418544][ T6533] FAT-fs (loop5): bogus number of reserved sectors [ 227.425494][ T6533] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 227.449989][ T6533] FAT-fs (loop5): Can't find a valid FAT filesystem [ 227.558732][ T4410] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 228.505843][ T4410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.514315][ T4410] usb 4-1: Product: syz [ 228.518803][ T4410] usb 4-1: Manufacturer: syz [ 228.523791][ T4410] usb 4-1: SerialNumber: syz [ 228.542538][ T4410] usb 4-1: config 0 descriptor?? [ 228.580334][ T4410] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 228.667313][ T6544] loop1: detected capacity change from 0 to 8 [ 228.931187][ T6546] loop0: detected capacity change from 0 to 32768 [ 228.945990][ T4410] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 228.953811][ T6544] SQUASHFS error: zlib decompression failed, data probably corrupt [ 228.984190][ T4410] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 228.994674][ T6544] SQUASHFS error: Failed to read block 0x4de: -5 [ 229.198986][ T6544] SQUASHFS error: Failed to read block 0x4e2: -5 [ 229.238845][ T6544] SQUASHFS error: Failed to read block 0x9ca: -5 [ 229.262288][ T4410] usb 4-1: USB disconnect, device number 7 [ 229.268439][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 229.299110][ T6544] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 229.324682][ T6544] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 229.334343][ T6544] SQUASHFS error: Failed to read block 0x535f2: -5 [ 229.352730][ T26] audit: type=1800 audit(1786075133.035:669): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.530" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 229.384789][ T4410] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 229.460929][ T4410] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 229.506911][ T4410] quatech2 4-1:0.51: device disconnected [ 229.659787][ T6554] loop0: detected capacity change from 0 to 128 [ 229.815567][ T6554] EXT4-fs (loop0): Ignoring removed orlov option [ 229.967353][ T6554] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 229.982311][ T6554] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.192540][ T6561] input: syz1 as /devices/virtual/input/input31 [ 230.280763][ T6564] loop0: detected capacity change from 0 to 2048 [ 230.314902][ T6564] EXT4-fs (loop0): Unrecognized mount option "fsname=" or missing value [ 231.064580][ T26] audit: type=1800 audit(1786075134.745:670): pid=6581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.529" name="memory_backed" dev="configfs" ino=39573 res=0 errno=0 [ 231.518580][ T26] audit: type=1800 audit(1786075134.785:671): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.529" name="zoned" dev="configfs" ino=39576 res=0 errno=0 [ 231.771788][ T6596] loop0: detected capacity change from 0 to 256 [ 231.802804][ T6596] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.878602][ T6596] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 231.917748][ T6596] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 232.977718][ T6612] input: syz1 as /devices/virtual/input/input32 [ 233.118690][ T4410] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 233.397062][ T4187] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 233.410247][ T4187] CPU: 1 PID: 4187 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 233.417853][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.427931][ T4187] Workqueue: hci0 hci_rx_work [ 233.432653][ T4187] Call Trace: [ 233.435955][ T4187] [ 233.438907][ T4187] dump_stack_lvl+0x188/0x250 [ 233.443668][ T4187] ? show_regs_print_info+0x20/0x20 [ 233.448903][ T4187] ? load_image+0x410/0x410 [ 233.453454][ T4187] sysfs_create_dir_ns+0x26a/0x290 [ 233.458608][ T4187] ? sysfs_warn_dup+0xa0/0xa0 [ 233.463342][ T4187] kobject_add_internal+0x5ba/0xcd0 [ 233.468637][ T4187] kobject_add+0x160/0x230 [ 233.473105][ T4187] ? kobject_init+0x1c0/0x1c0 [ 233.477836][ T4187] ? __raw_spin_lock_init+0x41/0x100 [ 233.483157][ T4187] ? klist_children_get+0x50/0x50 [ 233.488208][ T4187] ? get_device_parent+0x121/0x3e0 [ 233.493356][ T4187] device_add+0x470/0x1050 [ 233.497807][ T4187] hci_conn_add_sysfs+0xd1/0x1e0 [ 233.502775][ T4187] le_conn_complete_evt+0xc2e/0x14d0 [ 233.508109][ T4187] ? cs_le_create_conn+0x5e0/0x5e0 [ 233.513264][ T4187] ? __mutex_trylock_common+0x15c/0x260 [ 233.518844][ T4187] hci_le_meta_evt+0xd36/0x3ca0 [ 233.523738][ T4187] ? hci_event_packet+0x363/0x1310 [ 233.528881][ T4187] ? __lock_acquire+0x7b50/0x7b50 [ 233.533936][ T4187] ? lock_chain_count+0x20/0x20 [ 233.538823][ T4187] ? hci_remote_host_features_evt+0x240/0x240 [ 233.544923][ T4187] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 233.550589][ T4187] ? mutex_unlock+0x10/0x10 [ 233.555142][ T4187] ? skb_pull+0x22/0x130 [ 233.559427][ T4187] hci_event_packet+0xe0b/0x1310 [ 233.564435][ T4187] ? _raw_spin_unlock+0x40/0x40 [ 233.569312][ T4187] ? rcu_lock_release+0x20/0x20 [ 233.574223][ T4187] ? hci_send_to_monitor+0x9c/0x4a0 [ 233.579453][ T4187] hci_rx_work+0x255/0xa10 [ 233.583912][ T4187] process_one_work+0x867/0xff0 [ 233.588810][ T4187] ? worker_detach_from_pool+0x240/0x240 [ 233.594475][ T4187] ? lockdep_hardirqs_off+0x70/0x100 [ 233.599796][ T4187] ? _raw_spin_lock_irq+0xb7/0xf0 [ 233.604852][ T4187] ? _raw_spin_lock_irqsave+0x100/0x100 [ 233.610424][ T4187] ? wq_worker_running+0x97/0x170 [ 233.615478][ T4187] worker_thread+0xad7/0x12a0 [ 233.620224][ T4187] kthread+0x42e/0x520 [ 233.624404][ T4187] ? rcu_lock_release+0x20/0x20 [ 233.629282][ T4187] ? kthread_blkcg+0xd0/0xd0 [ 233.633899][ T4187] ret_from_fork+0x1f/0x30 [ 233.638359][ T4187] [ 233.709904][ T4187] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 233.725667][ T4187] Bluetooth: hci0: failed to register connection device [ 234.188632][ T4410] usb 4-1: Using ep0 maxpacket: 32 [ 234.324470][ T4410] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 234.343724][ T4410] usb 4-1: config 0 has no interface number 0 [ 235.359516][ T4410] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 235.446593][ T4410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.472222][ T6638] loop5: detected capacity change from 0 to 512 [ 235.510400][ T4410] usb 4-1: Product: syz [ 235.523049][ T4410] usb 4-1: Manufacturer: syz [ 235.527707][ T4410] usb 4-1: SerialNumber: syz [ 235.539243][ T26] audit: type=1800 audit(1786075139.225:672): pid=6641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.555" name="memory_backed" dev="configfs" ino=40467 res=0 errno=0 [ 235.563734][ T6641] netlink: 200 bytes leftover after parsing attributes in process `syz.4.555'. [ 235.601632][ T26] audit: type=1800 audit(1786075139.245:673): pid=6641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.555" name="zoned" dev="configfs" ino=40468 res=0 errno=0 [ 235.633128][ T4410] usb 4-1: config 0 descriptor?? [ 235.633169][ T6638] EXT4-fs (loop5): 1 truncate cleaned up [ 235.691736][ T4410] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 235.700780][ T6638] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 235.723972][ T26] audit: type=1800 audit(1786075139.335:674): pid=6641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.555" name="power" dev="configfs" ino=39659 res=0 errno=0 [ 235.748530][ T4498] Bluetooth: hci0: command 0x2016 tx timeout [ 235.828973][ T4410] usb 4-1: qt2_attach - failed to power on unit: -71 [ 235.838714][ T4410] quatech2: probe of 4-1:0.51 failed with error -71 [ 235.882009][ T6651] loop4: detected capacity change from 0 to 256 [ 235.889837][ T4410] usb 4-1: USB disconnect, device number 8 [ 235.994418][ T6651] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.038628][ T6651] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 236.077892][ T6651] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 236.125306][ T6653] input: syz1 as /devices/virtual/input/input33 [ 238.335389][ T6666] loop5: detected capacity change from 0 to 32768 [ 238.549760][ T6666] XFS (loop5): Mounting V5 Filesystem [ 238.635186][ T6666] XFS (loop5): Ending clean mount [ 238.801406][ T5242] XFS (loop5): Unmounting Filesystem [ 240.068014][ T4498] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 240.243617][ T26] audit: type=1800 audit(1786075143.925:675): pid=6706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.567" name="memory_backed" dev="configfs" ino=39725 res=0 errno=0 [ 240.266707][ T6707] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.573'. [ 240.282213][ T26] audit: type=1800 audit(1786075143.965:676): pid=6706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.567" name="zoned" dev="configfs" ino=39728 res=0 errno=0 [ 240.328516][ T4498] usb 4-1: Using ep0 maxpacket: 32 [ 240.354979][ T6706] netlink: 200 bytes leftover after parsing attributes in process `syz.5.567'. [ 240.468209][ T6705] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 240.524104][ T4410] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 241.106243][ T6714] input: syz1 as /devices/virtual/input/input34 [ 241.115424][ T4498] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 241.124814][ T4498] usb 4-1: config 0 has no interface number 0 [ 241.288781][ T4498] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 241.297970][ T4498] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.375090][ T6724] loop4: detected capacity change from 0 to 128 [ 241.403834][ T4498] usb 4-1: Product: syz [ 241.410817][ T4498] usb 4-1: Manufacturer: syz [ 241.415617][ T4498] usb 4-1: SerialNumber: syz [ 241.486261][ T6724] EXT4-fs (loop4): Ignoring removed orlov option [ 241.507599][ T4498] usb 4-1: config 0 descriptor?? [ 241.581006][ T4498] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 241.607746][ T6724] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 241.620106][ T6723] loop5: detected capacity change from 0 to 2048 [ 241.622734][ T6724] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.644328][ T6722] loop1: detected capacity change from 0 to 2048 [ 241.736312][ T6727] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.799541][ T4498] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 241.887283][ T4498] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 241.936339][ T6728] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.218447][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 242.627668][ T4414] usb 4-1: USB disconnect, device number 9 [ 242.631897][ T6732] loop4: detected capacity change from 0 to 256 [ 242.643259][ T4414] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 242.659288][ T4414] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 242.672154][ T4414] quatech2 4-1:0.51: device disconnected [ 242.723582][ T6732] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 242.797960][ T26] audit: type=1800 audit(1786075146.475:677): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.579" name="file1" dev="loop4" ino=1048629 res=0 errno=0 [ 242.937943][ T6732] attempt to access beyond end of device [ 242.937943][ T6732] loop4: rw=0, want=3136, limit=256 [ 243.017079][ T6732] attempt to access beyond end of device [ 243.017079][ T6732] loop4: rw=0, want=4285, limit=256 [ 243.094801][ T6742] loop3: detected capacity change from 0 to 256 [ 243.133195][ T6742] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 243.463128][ T6752] netlink: 200 bytes leftover after parsing attributes in process `syz.4.587'. [ 243.508922][ T26] audit: type=1800 audit(1786075147.135:678): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.587" name="zoned" dev="configfs" ino=39789 res=0 errno=0 [ 243.572879][ T26] audit: type=1800 audit(1786075147.255:679): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.587" name="power" dev="configfs" ino=40623 res=0 errno=0 [ 244.569202][ T6762] input: syz1 as /devices/virtual/input/input36 [ 244.778830][ T4494] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 244.873223][ T6765] loop1: detected capacity change from 0 to 2048 [ 245.142791][ T6770] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.188931][ T4494] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 245.234633][ T4494] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 245.332224][ T4494] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.428631][ T4410] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 245.459199][ T4494] usb 5-1: config 0 descriptor?? [ 246.008012][ T6777] Option '.nserror' to dns_resolver key: bad/missing value [ 247.039491][ T4410] usb 4-1: Using ep0 maxpacket: 32 [ 248.313425][ T6787] loop3: detected capacity change from 0 to 128 [ 248.325809][ T6785] loop1: detected capacity change from 0 to 2048 [ 248.394897][ T6787] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 248.558455][ T4410] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 248.561630][ T6787] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 248.566605][ T4410] usb 4-1: config 0 has no interface number 0 [ 248.598516][ T4410] usb 4-1: string descriptor 0 read error: -71 [ 248.604826][ T4410] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 248.615381][ T4410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.628132][ T4410] usb 4-1: config 0 descriptor?? [ 248.648679][ T4410] usb 4-1: can't set config #0, error -71 [ 248.660769][ T4410] usb 4-1: USB disconnect, device number 10 [ 248.697382][ T6785] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 248.718871][ T6785] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #12: comm syz.1.598: corrupted in-inode xattr [ 249.033293][ T4414] usb 5-1: USB disconnect, device number 8 [ 249.124913][ T6801] input: syz1 as /devices/virtual/input/input38 [ 250.112536][ T6811] loop5: detected capacity change from 0 to 1024 [ 250.349974][ T6821] loop3: detected capacity change from 0 to 128 [ 250.420354][ T6821] EXT4-fs (loop3): Ignoring removed orlov option [ 250.871378][ T6821] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 250.886050][ T6821] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.920687][ T6811] attempt to access beyond end of device [ 250.920687][ T6811] loop5: rw=0, want=5780, limit=1024 [ 251.599065][ T6833] loop4: detected capacity change from 0 to 512 [ 251.677617][ T6833] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.609: dx entry: limit 1024 != root limit 124 [ 251.738526][ T6833] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.609: Corrupt directory, running e2fsck is recommended [ 251.809876][ T6833] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 251.846074][ T6833] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.609: corrupted in-inode xattr [ 251.910384][ T6833] EXT4-fs (loop4): Remounting filesystem read-only [ 251.917052][ T6833] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.609: couldn't read orphan inode 15 (err -117) [ 251.990014][ T6833] EXT4-fs (loop4): Remounting filesystem read-only [ 251.996706][ T6833] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,init_itable,norecovery,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 252.155683][ T6833] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.609: dx entry: limit 1024 != root limit 124 [ 252.208755][ T6833] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.609: Corrupt directory, running e2fsck is recommended [ 252.270945][ T6833] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.609: path /129/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 252.398504][ T6833] EXT4-fs (loop4): Remounting filesystem read-only [ 252.576422][ T6838] mmap: syz.3.608 (6838) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 252.865505][ T6847] loop5: detected capacity change from 0 to 128 [ 253.152112][ T6849] loop4: detected capacity change from 0 to 512 [ 254.629891][ T6849] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 254.659980][ T6862] input: syz1 as /devices/virtual/input/input40 [ 254.683893][ T6849] EXT4-fs (loop4): Remounting filesystem read-only [ 254.690755][ T6849] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.612: invalid indirect mapped block 4278190080 (level 0) [ 254.709378][ T6849] EXT4-fs (loop4): Remounting filesystem read-only [ 254.715954][ T6849] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.612: invalid indirect mapped block 1 (level 1) [ 254.736942][ T6849] EXT4-fs (loop4): Remounting filesystem read-only [ 254.743968][ T6849] EXT4-fs (loop4): 1 truncate cleaned up [ 254.749733][ T6849] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none. [ 254.988641][ T26] audit: type=1326 audit(1786075158.675:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.4.618" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9d08fd0d9 code=0x0 [ 255.254478][ T6880] loop1: detected capacity change from 0 to 1024 [ 255.781024][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.789852][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.886590][ T6885] loop5: detected capacity change from 0 to 8 [ 256.515375][ T6880] EXT4-fs (loop1): Ignoring removed orlov option [ 256.871477][ T6902] input: syz1 as /devices/virtual/input/input42 [ 257.742542][ T6880] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 257.984879][ T6880] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.619: Invalid block bitmap block 3 in block_group 0 [ 259.440378][ T4494] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 259.971156][ T6918] input: syz1 as /devices/virtual/input/input43 [ 260.038582][ T4494] usb 6-1: Using ep0 maxpacket: 16 [ 260.181676][ T4494] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 260.224121][ T4494] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.280912][ T4494] usb 6-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 260.308809][ T4494] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.339598][ T4494] usb 6-1: config 0 descriptor?? [ 261.158629][ T6929] "syz.0.635" (6929) uses obsolete ecb(arc4) skcipher [ 261.538629][ T4494] usbhid 6-1:0.0: can't add hid device: -71 [ 261.544633][ T4494] usbhid: probe of 6-1:0.0 failed with error -71 [ 261.574206][ T4494] usb 6-1: USB disconnect, device number 5 [ 261.742063][ T6940] loop4: detected capacity change from 0 to 128 [ 262.172555][ T6940] EXT4-fs (loop4): Ignoring removed orlov option [ 262.465298][ T6940] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 262.480102][ T6940] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.756522][ T4494] Bluetooth: hci2: command 0x0406 tx timeout [ 263.824503][ T6955] netlink: 48 bytes leftover after parsing attributes in process `syz.4.639'. [ 264.278613][ T2239] Bluetooth: hci5: command 0x1003 tx timeout [ 264.286218][ T4187] Bluetooth: hci5: sending frame failed (-49) [ 266.428788][ T6965] loop1: detected capacity change from 0 to 32768 [ 266.438474][ T2239] Bluetooth: hci5: command 0x1001 tx timeout [ 266.445360][ T4187] Bluetooth: hci5: sending frame failed (-49) [ 266.586883][ T6965] XFS (loop1): Mounting V5 Filesystem [ 266.723170][ T6965] XFS (loop1): Ending clean mount [ 267.796162][ T6987] "syz.0.646" (6987) uses obsolete ecb(arc4) skcipher [ 268.691953][ T2239] Bluetooth: hci5: command 0x1009 tx timeout [ 270.573765][ T7004] input: syz1 as /devices/virtual/input/input44 [ 270.878970][ T26] audit: type=1326 audit(1786075174.335:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.5.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 271.060991][ T26] audit: type=1326 audit(1786075174.335:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.5.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 271.266782][ T26] audit: type=1326 audit(1786075174.365:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.5.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 271.519061][ T26] audit: type=1326 audit(1786075174.365:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.5.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 272.061903][ T7014] netlink: 48 bytes leftover after parsing attributes in process `syz.5.652'. [ 272.775631][ T7010] loop0: detected capacity change from 0 to 8 [ 272.790608][ T26] audit: type=1326 audit(1786075174.365:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.5.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 272.877663][ T7010] SQUASHFS error: lzo decompression failed, data probably corrupt [ 272.886026][ T7010] SQUASHFS error: Failed to read block 0x91: -5 [ 272.892371][ T7010] SQUASHFS error: Unable to read metadata cache entry [8f] [ 272.899593][ T7010] SQUASHFS error: Unable to read inode 0x11f [ 272.921620][ T26] audit: type=1326 audit(1786075174.375:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.5.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 272.987295][ T26] audit: type=1326 audit(1786075174.385:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.5.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 273.089935][ T26] audit: type=1326 audit(1786075174.385:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.5.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ff120d9 code=0x7ffc0000 [ 275.644323][ T7028] "syz.3.657" (7028) uses obsolete ecb(arc4) skcipher [ 276.544271][ T4194] XFS (loop1): Unmounting Filesystem [ 279.611584][ T7054] futex_wake_op: syz.0.663 tries to shift op by 144; fix this program [ 279.682449][ T7056] loop4: detected capacity change from 0 to 128 [ 279.723170][ T7056] EXT4-fs (loop4): Ignoring removed orlov option [ 279.774393][ T7056] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 279.788778][ T7056] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.029587][ T7063] input: syz1 as /devices/virtual/input/input45 [ 280.106196][ T7063] loop3: detected capacity change from 0 to 512 [ 280.430194][ T7063] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 280.430194][ T7063] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 280.430194][ T7063] [ 281.205184][ T7063] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a8026028, mo2=0002] [ 281.215118][ T7063] System zones: 0-2, 18-18, 34-35 [ 281.229302][ T7063] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,debug,sysvgroups,noacl,. Quota mode: writeback. [ 281.243482][ T7063] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.307826][ T7076] loop4: detected capacity change from 0 to 256 [ 281.383986][ T7078] loop1: detected capacity change from 0 to 512 [ 281.470338][ T7076] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.518550][ T7076] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 281.536648][ T7078] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.669: inode has both inline data and extents flags [ 281.609951][ T7076] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 281.650882][ T7078] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.669: couldn't read orphan inode 15 (err -117) [ 281.827421][ T7081] netlink: 24 bytes leftover after parsing attributes in process `syz.5.661'. [ 281.836743][ T7078] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: writeback. [ 281.967687][ T7078] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 36: comm syz.1.669: lblock 0 mapped to illegal pblock 36 (length 1) [ 282.104150][ T4207] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm kworker/u4:4: Invalid inode table block 5 in block_group 0 [ 282.447801][ T7094] loop4: detected capacity change from 0 to 2048 [ 282.580753][ T7094] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.270429][ T7103] loop3: detected capacity change from 0 to 32768 [ 284.727411][ T7122] [ 284.729825][ T7122] ====================================================== [ 284.736870][ T7122] WARNING: possible circular locking dependency detected [ 284.743922][ T7122] syzkaller #0 Not tainted [ 284.748448][ T7122] ------------------------------------------------------ [ 284.755605][ T7122] syz.1.683/7122 is trying to acquire lock: [ 284.761524][ T7122] ffff888063579028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 284.772632][ T7122] [ 284.772632][ T7122] but task is already holding lock: [ 284.780026][ T7122] ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 284.789738][ T7122] [ 284.789738][ T7122] which lock already depends on the new lock. [ 284.789738][ T7122] [ 284.800170][ T7122] [ 284.800170][ T7122] the existing dependency chain (in reverse order) is: [ 284.809229][ T7122] [ 284.809229][ T7122] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 284.817268][ T7122] __mutex_lock_common+0x1e5/0x2400 [ 284.823031][ T7122] mutex_lock_nested+0x17/0x20 [ 284.828353][ T7122] rfkill_register+0x2f/0x970 [ 284.833591][ T7122] hci_register_dev+0x459/0x980 [ 284.839005][ T7122] vhci_create_device+0x32e/0x5c0 [ 284.844589][ T7122] vhci_write+0x389/0x440 [ 284.849472][ T7122] vfs_write+0x748/0xd70 [ 284.854274][ T7122] ksys_write+0x153/0x260 [ 284.859185][ T7122] do_syscall_64+0x4c/0xa0 [ 284.864166][ T7122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.870619][ T7122] [ 284.870619][ T7122] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 284.878473][ T7122] __mutex_lock_common+0x1e5/0x2400 [ 284.884242][ T7122] mutex_lock_nested+0x17/0x20 [ 284.889616][ T7122] vhci_send_frame+0x88/0x100 [ 284.894884][ T7122] hci_send_frame+0x1a9/0x2e0 [ 284.900121][ T7122] hci_tx_work+0x9b5/0x16d0 [ 284.905183][ T7122] process_one_work+0x867/0xff0 [ 284.910601][ T7122] worker_thread+0xad7/0x12a0 [ 284.915839][ T7122] kthread+0x42e/0x520 [ 284.920455][ T7122] ret_from_fork+0x1f/0x30 [ 284.925429][ T7122] [ 284.925429][ T7122] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 284.934675][ T7122] __flush_work+0x116/0x210 [ 284.939740][ T7122] hci_dev_do_close+0x201/0x1020 [ 284.945244][ T7122] hci_unregister_dev+0x2eb/0x590 [ 284.950828][ T7122] vhci_release+0x73/0xc0 [ 284.955715][ T7122] __fput+0x212/0x8c0 [ 284.960252][ T7122] task_work_run+0x125/0x1a0 [ 284.965399][ T7122] do_exit+0x635/0x2110 [ 284.970108][ T7122] do_group_exit+0x12c/0x2f0 [ 284.975253][ T7122] __x64_sys_exit_group+0x3b/0x40 [ 284.980833][ T7122] do_syscall_64+0x4c/0xa0 [ 284.985800][ T7122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.992294][ T7122] [ 284.992294][ T7122] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 284.999980][ T7122] __mutex_lock_common+0x1e5/0x2400 [ 285.005745][ T7122] mutex_lock_nested+0x17/0x20 [ 285.011077][ T7122] bg_scan_update+0x44/0x3b0 [ 285.016237][ T7122] process_one_work+0x867/0xff0 [ 285.021654][ T7122] worker_thread+0xad7/0x12a0 [ 285.026893][ T7122] kthread+0x42e/0x520 [ 285.031524][ T7122] ret_from_fork+0x1f/0x30 [ 285.036505][ T7122] [ 285.036505][ T7122] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 285.046366][ T7122] __lock_acquire+0x2c66/0x7b50 [ 285.051784][ T7122] lock_acquire+0x19e/0x400 [ 285.056854][ T7122] __flush_work+0x116/0x210 [ 285.061919][ T7122] __cancel_work_timer+0x3f4/0x560 [ 285.067598][ T7122] hci_request_cancel_all+0xcc/0x300 [ 285.073445][ T7122] hci_dev_do_close+0x4e/0x1020 [ 285.078860][ T7122] hci_rfkill_set_block+0x101/0x180 [ 285.084621][ T7122] rfkill_set_block+0x1c1/0x3c0 [ 285.090045][ T7122] rfkill_fop_write+0x453/0x560 [ 285.095457][ T7122] vfs_write+0x304/0xd70 [ 285.100267][ T7122] ksys_write+0x153/0x260 [ 285.105161][ T7122] do_syscall_64+0x4c/0xa0 [ 285.110138][ T7122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.116598][ T7122] [ 285.116598][ T7122] other info that might help us debug this: [ 285.116598][ T7122] [ 285.126856][ T7122] Chain exists of: [ 285.126856][ T7122] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 285.126856][ T7122] [ 285.142630][ T7122] Possible unsafe locking scenario: [ 285.142630][ T7122] [ 285.150111][ T7122] CPU0 CPU1 [ 285.155507][ T7122] ---- ---- [ 285.160898][ T7122] lock(rfkill_global_mutex); [ 285.165702][ T7122] lock(&data->open_mutex); [ 285.172847][ T7122] lock(rfkill_global_mutex); [ 285.180167][ T7122] lock((work_completion)(&hdev->bg_scan_update)); [ 285.186787][ T7122] [ 285.186787][ T7122] *** DEADLOCK *** [ 285.186787][ T7122] [ 285.194954][ T7122] 1 lock held by syz.1.683/7122: [ 285.199926][ T7122] #0: ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 285.210153][ T7122] [ 285.210153][ T7122] stack backtrace: [ 285.216061][ T7122] CPU: 0 PID: 7122 Comm: syz.1.683 Not tainted syzkaller #0 [ 285.223380][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.233469][ T7122] Call Trace: [ 285.236784][ T7122] [ 285.239743][ T7122] dump_stack_lvl+0x188/0x250 [ 285.244458][ T7122] ? load_image+0x410/0x410 [ 285.249009][ T7122] ? show_regs_print_info+0x20/0x20 [ 285.254250][ T7122] ? print_circular_bug+0x12b/0x1a0 [ 285.259496][ T7122] check_noncircular+0x296/0x330 [ 285.264473][ T7122] ? look_up_lock_class+0x71/0x110 [ 285.269625][ T7122] ? add_chain_block+0x9b0/0x9b0 [ 285.274595][ T7122] ? lockdep_lock+0xf1/0x1f0 [ 285.279222][ T7122] ? __lock_acquire+0x1305/0x7b50 [ 285.284287][ T7122] ? mark_lock+0x94/0x320 [ 285.288654][ T7122] ? _find_first_zero_bit+0xd1/0xf0 [ 285.293907][ T7122] __lock_acquire+0x2c66/0x7b50 [ 285.298804][ T7122] ? verify_lock_unused+0x140/0x140 [ 285.304048][ T7122] ? verify_lock_unused+0x140/0x140 [ 285.309298][ T7122] lock_acquire+0x19e/0x400 [ 285.313833][ T7122] ? __flush_work+0xfa/0x210 [ 285.318476][ T7122] ? __lock_acquire+0x7b50/0x7b50 [ 285.323541][ T7122] ? read_lock_is_recursive+0x10/0x10 [ 285.329000][ T7122] ? start_flush_work+0x784/0x830 [ 285.334068][ T7122] __flush_work+0x116/0x210 [ 285.338608][ T7122] ? __flush_work+0xfa/0x210 [ 285.343281][ T7122] ? flush_work+0x20/0x20 [ 285.347644][ T7122] ? try_to_grab_pending+0xfb/0x820 [ 285.352880][ T7122] ? mark_lock+0x94/0x320 [ 285.357257][ T7122] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 285.363283][ T7122] ? lock_chain_count+0x20/0x20 [ 285.368184][ T7122] ? mark_lock+0x94/0x320 [ 285.372548][ T7122] ? __cancel_work_timer+0x36a/0x560 [ 285.377899][ T7122] __cancel_work_timer+0x3f4/0x560 [ 285.383054][ T7122] ? cancel_work_sync+0x20/0x20 [ 285.387951][ T7122] ? __cancel_work+0x1f9/0x2e0 [ 285.392751][ T7122] ? lockdep_hardirqs_on+0x94/0x140 [ 285.397981][ T7122] ? __cancel_work+0x27b/0x2e0 [ 285.402794][ T7122] ? cancel_work+0x20/0x20 [ 285.407246][ T7122] hci_request_cancel_all+0xcc/0x300 [ 285.408771][ T26] audit: type=1800 audit(1786075189.035:689): pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.675" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 285.412794][ T7122] hci_dev_do_close+0x4e/0x1020 [ 285.437284][ T7122] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 285.443218][ T7122] ? _raw_spin_unlock+0x40/0x40 [ 285.448108][ T7122] hci_rfkill_set_block+0x101/0x180 [ 285.453390][ T7122] ? rcu_lock_release+0x20/0x20 [ 285.458281][ T7122] rfkill_set_block+0x1c1/0x3c0 [ 285.463179][ T7122] rfkill_fop_write+0x453/0x560 [ 285.468075][ T7122] ? rfkill_fop_read+0x560/0x560 [ 285.473049][ T7122] ? common_file_perm+0x100/0x1c0 [ 285.478102][ T7122] ? fsnotify_perm+0x5d/0x560 [ 285.482814][ T7122] ? security_file_permission+0x75/0xa0 [ 285.488397][ T7122] ? rfkill_fop_read+0x560/0x560 [ 285.493369][ T7122] vfs_write+0x304/0xd70 [ 285.497656][ T7122] ? file_end_write+0x250/0x250 [ 285.502550][ T7122] ? __fget_files+0x402/0x470 [ 285.507267][ T7122] ? __fdget_pos+0x1e2/0x370 [ 285.511892][ T7122] ? ksys_write+0x70/0x260 [ 285.516343][ T7122] ksys_write+0x153/0x260 [ 285.520709][ T7122] ? __ia32_sys_read+0x80/0x80 [ 285.525509][ T7122] ? lockdep_hardirqs_on+0x94/0x140 [ 285.530745][ T7122] do_syscall_64+0x4c/0xa0 [ 285.535203][ T7122] ? clear_bhb_loop+0x30/0x80 [ 285.539916][ T7122] ? clear_bhb_loop+0x30/0x80 [ 285.544633][ T7122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.550635][ T7122] RIP: 0033:0x7fcdf49d50d9 [ 285.555079][ T7122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.574744][ T7122] RSP: 002b:00007fcdf2c0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 285.583196][ T7122] RAX: ffffffffffffffda RBX: 00007fcdf4c5d090 RCX: 00007fcdf49d50d9 [ 285.591217][ T7122] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000003 [ 285.597574][ T7125] loop0: detected capacity change from 0 to 4096 [ 285.599220][ T7122] RBP: 00007fcdf4a6c024 R08: 0000000000000000 R09: 0000000000000000 [ 285.599237][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.599251][ T7122] R13: 00007fcdf4c5d128 R14: 00007fcdf4c5d090 R15: 00007fff388bd7f8 [ 285.599281][ T7122] [ 285.841279][ T7125] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.