last executing test programs: 4m37.884500401s ago: executing program 0 (id=275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x1}]}, 0x34}}, 0x0) 4m37.654529445s ago: executing program 0 (id=277): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 4m33.26361835s ago: executing program 0 (id=287): syz_create_resource$binfmt(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 4m31.389127848s ago: executing program 0 (id=291): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) 4m30.128738077s ago: executing program 0 (id=295): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48010) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x1000) 4m27.053241513s ago: executing program 0 (id=301): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m25.21297039s ago: executing program 32 (id=301): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 13.078218775s ago: executing program 3 (id=937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000340)='name', &(0x7f0000000640)='\x01\x00\xe0\x02\xa3\x88\xeb\xa2\x8e\xbe\xd7S', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) accept(r6, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x20004000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 10.659653851s ago: executing program 2 (id=948): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x4000, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0xfffffffe, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x8, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x63, &(0x7f0000000100)={&(0x7f0000001200)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x0, 0x3e, 0x3}]}, 0x20}, 0x1, 0xf00, 0x0, 0x4884d}, 0x10) 9.524119918s ago: executing program 3 (id=954): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x16, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000000040)=""/34, &(0x7f0000000080)=0x44) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000e8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002cc0)=@newtaction={0x894, 0x30, 0xffff, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x733f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xcff, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x80000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc192dfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b3, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xb, 0x1000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c692401, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000006, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x4756, 0x4, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xd4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c6d, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x3, 0x4, 0x80000004, 0x4, {0x5, 0x0, 0x8, 0x1, 0x7, 0x1f7}, {0x5, 0x0, 0x6, 0x800, 0x1ff, 0x4}, 0x2, 0x82e, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) ioctl$TCFLSH(r8, 0x5608, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fef331000000000000000000000000aaf8000000200002000a00000000000000ff020000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 8.925675227s ago: executing program 3 (id=958): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040ef17476000000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.845303698s ago: executing program 5 (id=959): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000180)={r5}) 7.443027599s ago: executing program 5 (id=963): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000cc0), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r6, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[], 0x0) 6.940684927s ago: executing program 2 (id=966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x28, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) 6.834296978s ago: executing program 5 (id=968): bind$tipc(0xffffffffffffffff, &(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x3, 0x1}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0x0, 0x8bc, 0x10001, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9b0907, 0x2, '\x00', @value64=0x4}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv0\x00'}]}, 0x50}}, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 6.622028341s ago: executing program 2 (id=969): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 6.070785049s ago: executing program 3 (id=970): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1d19"], 0x20) 5.768229434s ago: executing program 2 (id=971): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES64=r0], 0x0) 4.529512672s ago: executing program 4 (id=974): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 4.469458913s ago: executing program 3 (id=975): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000d00)=ANY=[@ANYBLOB="a8010000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000ffffffff000000000000000000000000e000000200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000e000000200000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000100000000ff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000003000000000000000000000000000000440005"], 0x1a8}}, 0x0) 4.264363166s ago: executing program 3 (id=976): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x4000, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0xfffffffe, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x8, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x63, &(0x7f0000000100)={&(0x7f0000001200)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x0, 0x3e, 0x3}]}, 0x20}, 0x1, 0xf00, 0x0, 0x4884d}, 0x10) 4.167077468s ago: executing program 4 (id=977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='name', &(0x7f0000000640)='\x01\x00\xe0\x02\xa3\x88\xeb\xa2\x8e\xbe\xd7S', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) accept(r4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x20004000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 3.467254758s ago: executing program 4 (id=978): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000cc0), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r6, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[], 0x0) 3.118015173s ago: executing program 1 (id=979): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x2}}, 0x10) connect$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1}, 0x10) close(r1) 3.004642195s ago: executing program 5 (id=980): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) 2.882007137s ago: executing program 1 (id=981): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000bc0)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'macceltic'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) read(r0, &(0x7f0000000400)=""/4096, 0x1000) 2.840627867s ago: executing program 4 (id=982): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 2.566065222s ago: executing program 5 (id=983): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 2.565634712s ago: executing program 1 (id=984): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000180)={r5}) 1.523815987s ago: executing program 2 (id=985): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x10) 1.461426778s ago: executing program 4 (id=986): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x78, {0x2, 0x4e24, @empty}, 'ip6tnl0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_io_uring_setup(0x5638, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x5add, &(0x7f0000000040)={0x0, 0xc19d, 0x1, 0x5, 0x61}, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f00000008c0)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}], [{@dont_measure}]}, 0x3, 0x44c, &(0x7f0000000340)="$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") r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)}, 0x0) 1.461086058s ago: executing program 5 (id=987): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000900)=ANY=[@ANYBLOB="747970653d142606372c6e6c733d63703835302c626172726965722c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',force,force,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c0028103ea6ac66d52cae56ca"], 0x1, 0x6e8, &(0x7f00000001c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c21000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000040)={0x30}, 0x30) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB='2\x00\x00\x00\x00\x00\x00'], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 1.437638638s ago: executing program 1 (id=988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='name', &(0x7f0000000640)='\x01\x00\xe0\x02\xa3\x88\xeb\xa2\x8e\xbe\xd7S', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) accept(r4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x20004000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 1.154478203s ago: executing program 1 (id=989): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES16], 0x1000f) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r5, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007800)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000540)="c74ddeb4efc3acc3d79b06b8007513a44ffcb215f1f338936d03ed8becd00558a1f3", 0x22}], 0x1, 0x0, 0xb8, 0x20000011}}], 0x1, 0x4084) r8 = socket(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x8, 0x12) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000500)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d001080"], 0x184}}, 0x0) 1.081370094s ago: executing program 2 (id=990): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x2080c2, &(0x7f0000001340)=ANY=[], 0x1, 0xac5, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) truncate(0x0, 0x9) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001000)={&(0x7f0000000f00)=[0x0, 0x0], &(0x7f0000000f40), 0x0, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000ec0)={&(0x7f0000000e80), 0x0, 0x80000}) socket$nl_route(0x10, 0x3, 0x0) r2 = getpgrp(0x0) prlimit64(r2, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x5, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 135.981448ms ago: executing program 1 (id=991): socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x81) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) socket$inet(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 0s ago: executing program 4 (id=992): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000cc0), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r6, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): ity change from 0 to 512 [ 130.757347][ T4993] ext4: Unknown parameter 'dont_measure' [ 132.163127][ T4253] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.377766][ T4253] usb 4-1: config 0 descriptor?? [ 132.452096][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.466785][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.930972][ T4253] usb 4-1: can't set config #0, error -71 [ 132.991879][ T4340] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 133.033550][ T4253] usb 4-1: USB disconnect, device number 3 [ 133.080483][ T5002] Zero length message leads to an empty skb [ 134.092353][ T5010] tmpfs: Unknown parameter 'usrquota' [ 134.175525][ T5010] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 134.556772][ T5021] loop0: detected capacity change from 0 to 40427 [ 134.565049][ T1169] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 134.704599][ T5021] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.835982][ T1169] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 134.861686][ T1169] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 135.010160][ T5031] loop3: detected capacity change from 0 to 128 [ 135.034204][ T5021] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 135.182603][ T1169] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 135.191939][ T1169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.658387][ T5033] syz.0.157: attempt to access beyond end of device [ 135.658387][ T5033] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.848507][ T1169] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 137.880878][ T1169] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input7 [ 138.032186][ T4250] syz-executor: attempt to access beyond end of device [ 138.032186][ T4250] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 138.096016][ T1169] input: failed to attach handler kbd to device input7, error: -5 [ 138.494131][ T1169] usb 3-1: USB disconnect, device number 6 [ 141.844434][ T4296] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.184493][ T127] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 143.094509][ T4296] usb 4-1: Using ep0 maxpacket: 8 [ 143.101665][ T4296] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 143.118624][ T4296] usb 4-1: config 179 has no interface number 0 [ 143.125948][ T4296] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 143.137398][ T4296] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 143.148946][ T4296] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 143.160629][ T4296] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 143.222968][ T4296] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 143.236497][ T4296] usb 4-1: config 179 interface 65 has no altsetting 0 [ 143.243584][ T4296] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 143.252729][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.270195][ T5060] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 143.348222][ T127] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.518454][ T4296] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 144.358891][ T5080] qnx4: no qnx4 filesystem (no root dir). [ 145.121969][ T127] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.224545][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 145.233612][ T22] usb 4-1: USB disconnect, device number 4 [ 145.434465][ T22] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 145.682855][ T5082] loop4: detected capacity change from 0 to 40427 [ 145.698336][ T127] usb 3-1: string descriptor 0 read error: -71 [ 145.708545][ T127] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.793562][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.092631][ T127] usb 3-1: can't set config #1, error -71 [ 146.107847][ T127] usb 3-1: USB disconnect, device number 7 [ 146.187821][ T5082] F2FS-fs (loop4): Found nat_bits in checkpoint [ 146.308793][ T5082] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 146.666055][ T5103] syz.4.173: attempt to access beyond end of device [ 146.666055][ T5103] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.196051][ T4259] syz-executor: attempt to access beyond end of device [ 148.196051][ T4259] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 148.731990][ T5110] loop2: detected capacity change from 0 to 2048 [ 149.117720][ T5110] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 149.168112][ T26] audit: type=1800 audit(1749311788.587:3): pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.181" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 149.933410][ T4377] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 149.991521][ T4377] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 151.693636][ T4377] EXT4-fs (loop2): This should not happen!! Data will be lost [ 151.693636][ T4377] [ 151.704202][ T4377] EXT4-fs (loop2): Total free blocks count 0 [ 151.710578][ T4377] EXT4-fs (loop2): Free/Dirty block details [ 151.721679][ T4377] EXT4-fs (loop2): free_blocks=2415919504 [ 151.732004][ T4377] EXT4-fs (loop2): dirty_blocks=64 [ 151.737637][ T4377] EXT4-fs (loop2): Block reservation details [ 151.743759][ T4377] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 151.768731][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 152.088402][ T5141] loop1: detected capacity change from 0 to 2048 [ 152.132356][ T5146] loop2: detected capacity change from 0 to 512 [ 152.164189][ T5146] ext4: Unknown parameter 'dont_measure' [ 152.175292][ T127] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 152.260659][ T5141] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 152.899244][ T5141] syz.1.191: attempt to access beyond end of device [ 152.899244][ T5141] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 152.913415][ T5152] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.096813][ T5153] syz.1.191: attempt to access beyond end of device [ 153.096813][ T5153] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 153.420742][ T5153] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 153.429449][ T5153] NILFS (loop1): error -5 reading inode: ino=12 [ 153.438350][ T5154] syz.1.191: attempt to access beyond end of device [ 153.438350][ T5154] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 153.452237][ T5154] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) [ 153.463408][ T5155] syz.1.191: attempt to access beyond end of device [ 153.463408][ T5155] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 153.488377][ T5155] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 153.497359][ T5155] NILFS (loop1): error -5 reading inode: ino=12 [ 153.506243][ T5156] syz.1.191: attempt to access beyond end of device [ 153.506243][ T5156] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 153.520300][ T5156] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 153.529070][ T5156] NILFS (loop1): error -5 reading inode: ino=15 [ 153.548113][ T127] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.605659][ T127] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.787064][ T127] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 153.888029][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 153.986791][ T127] usb 4-1: SerialNumber: syz [ 154.358797][ T5169] loop2: detected capacity change from 0 to 8 [ 154.474837][ T5169] SQUASHFS error: zlib decompression failed, data probably corrupt [ 154.483280][ T5169] SQUASHFS error: Failed to read block 0x9b: -5 [ 154.489681][ T5169] SQUASHFS error: Unable to read metadata cache entry [99] [ 154.497048][ T5169] SQUASHFS error: Unable to read inode 0x127 [ 155.438278][ T127] usb 4-1: 0:2 : does not exist [ 155.474016][ T4340] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.474750][ T127] usb 4-1: USB disconnect, device number 5 [ 155.786095][ T5180] loop3: detected capacity change from 0 to 4096 [ 155.825568][ T5035] udevd[5035]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.073847][ T5193] loop1: detected capacity change from 0 to 512 [ 156.084481][ T5193] ext4: Unknown parameter 'dont_measure' [ 157.804405][ T4379] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 158.006229][ T4379] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.034539][ T4379] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.051350][ T5225] loop1: detected capacity change from 0 to 512 [ 158.188828][ T5229] loop4: detected capacity change from 0 to 512 [ 158.198765][ T5229] ext4: Unknown parameter 'dont_measure' [ 158.904586][ T4379] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.913797][ T4379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.921963][ T4379] usb 3-1: SerialNumber: syz [ 159.089875][ T5237] loop4: detected capacity change from 0 to 4096 [ 159.145620][ T4379] usb 3-1: 0:2 : does not exist [ 159.200086][ T4379] usb 3-1: USB disconnect, device number 8 [ 159.471874][ T4340] udevd[4340]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.488403][ T5242] loop3: detected capacity change from 0 to 2048 [ 159.523537][ T5242] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.266196][ T5263] loop3: detected capacity change from 0 to 512 [ 161.276652][ T5263] ext4: Unknown parameter 'dont_measure' [ 162.293366][ T5262] netlink: 'syz.1.231': attribute type 12 has an invalid length. [ 162.301276][ T5262] netlink: 'syz.1.231': attribute type 29 has an invalid length. [ 162.309077][ T5262] netlink: 148 bytes leftover after parsing attributes in process `syz.1.231'. [ 162.318986][ T5262] netlink: 'syz.1.231': attribute type 1 has an invalid length. [ 162.326961][ T5262] netlink: 'syz.1.231': attribute type 2 has an invalid length. [ 162.334652][ T5262] netlink: 39 bytes leftover after parsing attributes in process `syz.1.231'. [ 162.930745][ T5283] loop0: detected capacity change from 0 to 128 [ 162.970446][ T5283] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 163.036176][ T5283] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.174366][ T4640] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 163.460467][ T4640] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.018102][ T4640] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.112379][ T4640] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 164.652021][ T4640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.661487][ T4640] usb 2-1: SerialNumber: syz [ 164.828379][ T5298] loop3: detected capacity change from 0 to 32768 [ 164.890980][ T4640] usb 2-1: 0:2 : does not exist [ 166.221919][ T5299] find_entry called with index = 0 [ 166.675240][ T4640] usb 2-1: USB disconnect, device number 3 [ 166.727687][ T5304] loop2: detected capacity change from 0 to 16 [ 166.805851][ T5304] erofs: (device loop2): mounted with root inode @ nid 36. [ 167.085094][ T4340] udevd[4340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.936277][ T5305] loop0: detected capacity change from 0 to 32768 [ 168.978006][ T5305] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.244 (5305) [ 169.026032][ T5305] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 169.042207][ T5305] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 169.054154][ T5305] BTRFS info (device loop0): use zlib compression, level 3 [ 169.063723][ T5305] BTRFS error (device loop0): unrecognized mount option 'dont_appraise' [ 169.149784][ T5335] loop3: detected capacity change from 0 to 128 [ 169.160879][ T5335] affs: Unrecognized mount option "root=0000000000000d=00000000000000000004" or missing value [ 169.171364][ T5335] affs: Error parsing options [ 170.039026][ T5305] BTRFS error (device loop0): open_ctree failed: -22 [ 170.057645][ T5035] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.455790][ T4340] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by udevd (4340) [ 170.864349][ T127] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 171.236347][ T127] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.265945][ T5353] loop1: detected capacity change from 0 to 512 [ 171.277642][ T127] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.303763][ T5353] EXT4-fs: Ignoring removed nobh option [ 171.363466][ T127] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 171.392100][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 171.409255][ T127] usb 1-1: SerialNumber: syz [ 171.424121][ T5353] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.260: invalid indirect mapped block 256 (level 2) [ 171.514070][ T5353] EXT4-fs (loop1): 2 truncates cleaned up [ 171.524378][ T5353] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 171.627273][ T127] usb 1-1: 0:2 : does not exist [ 171.690062][ T127] usb 1-1: USB disconnect, device number 4 [ 171.948991][ T5362] udevd[5362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.890463][ T5369] loop4: detected capacity change from 0 to 40427 [ 173.025001][ T4380] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:12: bg 0: block 5: invalid block bitmap [ 173.043400][ T5369] F2FS-fs (loop4): Found nat_bits in checkpoint [ 173.091136][ T4380] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 173.164899][ T4380] EXT4-fs (loop1): This should not happen!! Data will be lost [ 173.164899][ T4380] [ 173.209842][ T5369] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 173.228867][ T4380] EXT4-fs (loop1): Total free blocks count 0 [ 173.281408][ T4380] EXT4-fs (loop1): Free/Dirty block details [ 173.785402][ T5381] syz.4.264: attempt to access beyond end of device [ 173.785402][ T5381] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.333982][ T4380] EXT4-fs (loop1): free_blocks=0 [ 174.381301][ T4380] EXT4-fs (loop1): dirty_blocks=4272 [ 174.410654][ T4380] EXT4-fs (loop1): Block reservation details [ 174.439923][ T4380] EXT4-fs (loop1): i_reserved_data_blocks=4272 [ 174.479402][ T4380] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 174.493051][ T4259] syz-executor: attempt to access beyond end of device [ 174.493051][ T4259] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 175.639563][ T5401] loop3: detected capacity change from 0 to 128 [ 175.653998][ T5401] affs: Unrecognized mount option "root=0000000000000d=00000000000000000004" or missing value [ 175.701717][ T5401] affs: Error parsing options [ 176.920399][ T5418] loop1: detected capacity change from 0 to 2048 [ 176.946162][ T5387] loop4: detected capacity change from 0 to 32768 [ 177.015649][ T127] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 177.036637][ T5418] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 177.066100][ T5387] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 177.077014][ T5387] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 177.234985][ T5387] BTRFS info (device loop4): use zlib compression, level 3 [ 177.339093][ T5387] BTRFS error (device loop4): unrecognized mount option 'dont_appraise' [ 177.815848][ T5387] BTRFS error (device loop4): open_ctree failed: -22 [ 177.837046][ T5418] syz.1.281: attempt to access beyond end of device [ 177.837046][ T5418] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 177.851731][ T5422] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.905720][ T127] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.922658][ T127] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.966910][ T127] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 178.063011][ T5427] syz.1.281: attempt to access beyond end of device [ 178.063011][ T5427] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 178.083245][ T5427] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 178.091962][ T5427] NILFS (loop1): error -5 reading inode: ino=12 [ 178.105275][ T5427] syz.1.281: attempt to access beyond end of device [ 178.105275][ T5427] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 178.118982][ T5427] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) [ 178.131468][ T5427] syz.1.281: attempt to access beyond end of device [ 178.131468][ T5427] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 178.146298][ T5427] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 178.155303][ T5427] NILFS (loop1): error -5 reading inode: ino=12 [ 178.166438][ T5427] syz.1.281: attempt to access beyond end of device [ 178.166438][ T5427] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 178.180278][ T5427] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 178.189813][ T5427] NILFS (loop1): error -5 reading inode: ino=15 [ 178.634358][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 178.642425][ T127] usb 1-1: SerialNumber: syz [ 178.704194][ T5362] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by udevd (5362) [ 178.992116][ T127] usb 1-1: 0:2 : does not exist [ 180.174717][ T127] usb 1-1: USB disconnect, device number 5 [ 180.555565][ T4340] udevd[4340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.175648][ T5460] loop2: detected capacity change from 0 to 128 [ 183.193185][ T5460] affs: Unrecognized mount option "root=0000000000000d=00000000000000000004" or missing value [ 183.304019][ T5460] affs: Error parsing options [ 183.528219][ T5470] loop3: detected capacity change from 0 to 16 [ 183.545350][ T5470] erofs: (device loop3): mounted with root inode @ nid 36. [ 186.007950][ T4267] Bluetooth: hci3: command 0x0406 tx timeout [ 186.024296][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 186.024582][ T4258] Bluetooth: hci1: command 0x0406 tx timeout [ 186.030326][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 186.151333][ T5481] loop2: detected capacity change from 0 to 2048 [ 186.177812][ T5481] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 186.209242][ T5481] syz.2.297: attempt to access beyond end of device [ 186.209242][ T5481] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 186.224437][ T5484] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.306201][ T5485] syz.2.297: attempt to access beyond end of device [ 186.306201][ T5485] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 186.322569][ T5485] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 186.331352][ T5485] NILFS (loop2): error -5 reading inode: ino=12 [ 186.343319][ T5485] syz.2.297: attempt to access beyond end of device [ 186.343319][ T5485] loop2: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 186.357184][ T5485] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=0) [ 186.366123][ T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 186.383546][ T5485] syz.2.297: attempt to access beyond end of device [ 186.383546][ T5485] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 186.397454][ T5485] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 186.406150][ T5485] NILFS (loop2): error -5 reading inode: ino=12 [ 186.417200][ T5485] syz.2.297: attempt to access beyond end of device [ 186.417200][ T5485] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 186.431080][ T5485] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 186.439874][ T5485] NILFS (loop2): error -5 reading inode: ino=15 [ 186.701288][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.861056][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.952096][ T22] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 187.058266][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 187.067176][ T22] usb 4-1: SerialNumber: syz [ 187.342668][ T22] usb 4-1: 0:2 : does not exist [ 188.009984][ T4320] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.048563][ T22] usb 4-1: USB disconnect, device number 6 [ 188.166527][ T4320] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.265539][ T4340] udevd[4340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.327372][ T4320] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.446406][ T4320] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.451593][ T5504] loop1: detected capacity change from 0 to 1024 [ 188.622480][ T5507] loop4: detected capacity change from 0 to 16 [ 188.747581][ T5507] erofs: (device loop4): mounted with root inode @ nid 36. [ 188.784980][ T5504] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 188.939298][ T5504] hfsplus: xattr searching failed [ 190.075711][ T5508] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 190.082365][ T5508] hfsplus: xattr searching failed [ 190.087733][ T5511] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 190.094809][ T26] audit: type=1800 audit(1749311829.517:4): pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.304" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 190.115260][ T5511] hfsplus: xattr search failed [ 190.303517][ T5522] fuse: Bad value for 'fd' [ 190.367753][ T46] hfsplus: b-tree write err: -5, ino 4 [ 190.459878][ T5519] loop2: detected capacity change from 0 to 4096 [ 190.536233][ T4258] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.555612][ T4258] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.564088][ T4258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.579319][ T4258] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.600789][ T4258] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 190.608412][ T4258] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.816346][ T5523] lo speed is unknown, defaulting to 1000 [ 192.611444][ T5561] loop3: detected capacity change from 0 to 16 [ 192.732043][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 192.735264][ T5561] erofs: (device loop3): mounted with root inode @ nid 36. [ 194.185142][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.191615][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.765053][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 194.948747][ T5577] loop3: detected capacity change from 0 to 64 [ 195.167620][ T5523] chnl_net:caif_netlink_parms(): no params data found [ 195.248895][ T5582] loop4: detected capacity change from 0 to 1024 [ 195.343357][ T5582] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 195.354367][ T5582] hfsplus: xattr searching failed [ 195.509160][ T5585] loop3: detected capacity change from 0 to 32768 [ 195.740866][ T5573] hfsplus: b-tree write err: -5, ino 4 [ 195.766142][ T5585] XFS (loop3): Mounting V5 Filesystem [ 195.990926][ T5585] XFS (loop3): Ending clean mount [ 196.006329][ T5585] XFS (loop3): Quotacheck needed: Please wait. [ 196.241767][ T5585] XFS (loop3): Quotacheck: Done. [ 196.720876][ T4256] XFS (loop3): Unmounting Filesystem [ 196.834356][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 196.967441][ T5620] tmpfs: Unknown parameter 'usrquota' [ 197.069385][ T5523] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.104441][ T5523] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.140355][ T5523] device bridge_slave_0 entered promiscuous mode [ 197.390681][ T5619] loop4: detected capacity change from 0 to 4096 [ 198.924417][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 199.098935][ T4320] device hsr_slave_0 left promiscuous mode [ 199.259871][ T4259] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 199.279069][ T4259] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 199.306850][ T4320] device hsr_slave_1 left promiscuous mode [ 199.414140][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.445705][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.976100][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.988042][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.035298][ T4320] device bridge_slave_1 left promiscuous mode [ 200.051646][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.105716][ T4320] device bridge_slave_0 left promiscuous mode [ 200.134531][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.264332][ T4241] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 200.443799][ T4320] device veth1_macvtap left promiscuous mode [ 200.454067][ T4320] device veth0_macvtap left promiscuous mode [ 200.456618][ T4241] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.476071][ T4320] device veth1_vlan left promiscuous mode [ 200.507404][ T4320] device veth0_vlan left promiscuous mode [ 200.507579][ T4241] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.556482][ T4241] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.583848][ T4241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.607601][ T5654] loop3: detected capacity change from 0 to 1024 [ 200.620847][ T4241] usb 5-1: SerialNumber: syz [ 200.702366][ T5654] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 200.728004][ T5654] hfsplus: xattr searching failed [ 200.783409][ T4354] hfsplus: b-tree write err: -5, ino 4 [ 200.865501][ T4241] usb 5-1: 0:2 : does not exist [ 200.906827][ T4241] usb 5-1: USB disconnect, device number 3 [ 200.935775][ T5656] loop3: detected capacity change from 0 to 2048 [ 200.960395][ T4340] udevd[4340]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.997328][ T5656] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.329736][ T5668] tmpfs: Unknown parameter 'usrquota' [ 202.699517][ T4320] team0 (unregistering): Port device team_slave_1 removed [ 202.794221][ T4320] team0 (unregistering): Port device team_slave_0 removed [ 202.864770][ T5672] loop3: detected capacity change from 0 to 32768 [ 202.897349][ T4320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.929040][ T5672] XFS (loop3): Mounting V5 Filesystem [ 202.984591][ T5672] XFS (loop3): Ending clean mount [ 202.990927][ T4320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.994981][ T5672] XFS (loop3): Quotacheck needed: Please wait. [ 203.038126][ T5672] XFS (loop3): Quotacheck: Done. [ 203.588172][ T4256] XFS (loop3): Unmounting Filesystem [ 203.935614][ T5684] loop3: detected capacity change from 0 to 2048 [ 204.001170][ T5685] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.337041][ T4320] bond0 (unregistering): Released all slaves [ 204.426161][ T5523] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.433337][ T5523] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.441925][ T5523] device bridge_slave_1 entered promiscuous mode [ 204.530540][ T5673] netlink: 288 bytes leftover after parsing attributes in process `syz.4.342'. [ 204.633193][ T5523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.655139][ T5688] loop2: detected capacity change from 0 to 16 [ 204.665233][ T5523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.674894][ T5688] erofs: (device loop2): mounted with root inode @ nid 36. [ 204.840138][ T5523] team0: Port device team_slave_0 added [ 206.025737][ T5523] team0: Port device team_slave_1 added [ 206.105991][ T5523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.113198][ T5523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.139399][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.124982][ T5523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.217616][ T5523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.292954][ T5523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.319091][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.462310][ T5523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.521340][ T5714] tmpfs: Unknown parameter 'usrquota' [ 207.723158][ T5523] device hsr_slave_0 entered promiscuous mode [ 207.844849][ T5523] device hsr_slave_1 entered promiscuous mode [ 207.910429][ T5523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.429567][ T5523] Cannot create hsr debugfs directory [ 208.778892][ T5729] netlink: 288 bytes leftover after parsing attributes in process `syz.1.356'. [ 208.936310][ T5732] loop3: detected capacity change from 0 to 16 [ 208.988802][ T5732] erofs: (device loop3): mounted with root inode @ nid 36. [ 209.052096][ T5734] 9pnet_fd: Insufficient options for proto=fd [ 211.001799][ T5749] device gtp0 entered promiscuous mode [ 211.183062][ T5523] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 211.342077][ T5751] loop1: detected capacity change from 0 to 32768 [ 211.349309][ T5751] XFS: attr2 mount option is deprecated. [ 211.388753][ T5751] XFS (loop1): Mounting V5 Filesystem [ 211.437445][ T5751] XFS (loop1): Ending clean mount [ 211.444017][ T5751] XFS (loop1): Quotacheck needed: Please wait. [ 211.472753][ T5523] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 211.588264][ T5751] XFS (loop1): Quotacheck: Done. [ 211.620049][ T5523] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 211.827783][ T5523] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.324164][ T5523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.430663][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.475581][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.551794][ T5523] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.608780][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.639132][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.704956][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.712107][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.846181][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.107465][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.137300][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.178900][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.186135][ T4320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.248331][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.281265][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.471516][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.517429][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.545242][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.584959][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.965098][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.997925][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.036396][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.101214][ T5803] loop3: detected capacity change from 0 to 1024 [ 215.109179][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.125156][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.237645][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.341352][ T5806] netlink: 288 bytes leftover after parsing attributes in process `syz.4.369'. [ 215.534398][ T5803] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 215.642158][ T5803] hfsplus: xattr searching failed [ 215.944480][ T26] audit: type=1800 audit(1749311855.187:5): pid=5803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.370" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 216.118300][ T4377] hfsplus: b-tree write err: -5, ino 4 [ 216.489960][ T4251] XFS (loop1): Unmounting Filesystem [ 217.012886][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.047149][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.073829][ T5523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.627888][ T5852] loop1: detected capacity change from 0 to 16 [ 218.677664][ T5852] erofs: (device loop1): mounted with root inode @ nid 36. [ 219.145213][ T5864] netlink: 288 bytes leftover after parsing attributes in process `syz.3.381'. [ 220.357084][ T5870] loop2: detected capacity change from 0 to 1024 [ 220.651294][ T5870] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 220.658199][ T5870] hfsplus: xattr searching failed [ 220.753203][ T5879] tmpfs: Unknown parameter 'usrquota' [ 220.913325][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.386'. [ 221.560319][ T5870] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 221.566712][ T5870] hfsplus: xattr searching failed [ 221.584317][ T26] audit: type=1800 audit(1749311860.997:6): pid=5870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.384" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 221.652475][ T4574] hfsplus: b-tree write err: -5, ino 4 [ 221.652545][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.682336][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.772699][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.814501][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.830754][ T5523] device veth0_vlan entered promiscuous mode [ 221.846284][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.872223][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.916559][ T5523] device veth1_vlan entered promiscuous mode [ 222.016377][ T5523] device veth0_macvtap entered promiscuous mode [ 222.045905][ T5523] device veth1_macvtap entered promiscuous mode [ 222.089263][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 222.155033][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 222.184107][ T5900] loop2: detected capacity change from 0 to 16 [ 222.201397][ T5900] erofs: (device loop2): mounted with root inode @ nid 36. [ 222.229605][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.810155][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.013708][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.476709][ T5906] device batadv0 entered promiscuous mode [ 223.643886][ T5904] loop4: detected capacity change from 0 to 128 [ 223.652047][ T5904] affs: Unrecognized mount option "root=0000000000000d=00000000000000000004" or missing value [ 223.662421][ T5904] affs: Error parsing options [ 223.699938][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.788047][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.834504][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.861727][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.877194][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.894362][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.912294][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.923145][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.994542][ T5523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.005215][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.204714][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.234047][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.264213][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.294394][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.314521][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.332759][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.390185][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.464754][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.476462][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.487225][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.511444][ T5523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.527820][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.543198][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.712302][ T5523] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.734093][ T5523] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.815353][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 225.644344][ T5523] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.729282][ T5523] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.811383][ T5930] loop4: detected capacity change from 0 to 1024 [ 225.911314][ T5930] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 225.978778][ T5930] hfsplus: xattr searching failed [ 226.090771][ T5938] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 226.100828][ T5938] hfsplus: xattr searching failed [ 226.304393][ T26] audit: type=1800 audit(1749311865.547:7): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.400" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 226.306519][ T5943] loop2: detected capacity change from 0 to 16 [ 226.793403][ T5943] erofs: (device loop2): mounted with root inode @ nid 36. [ 229.401374][ T4380] hfsplus: b-tree write err: -5, ino 4 [ 229.445564][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.468814][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.522254][ T5958] loop2: detected capacity change from 0 to 1024 [ 229.568382][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.599413][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.607498][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 229.663691][ T5958] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 229.672093][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 229.726610][ T5958] hfsplus: xattr searching failed [ 230.380402][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 230.616021][ T5960] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 230.622452][ T5960] hfsplus: xattr searching failed [ 230.658512][ T26] audit: type=1800 audit(1749311870.067:8): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.406" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 230.679060][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.825397][ T5573] hfsplus: b-tree write err: -5, ino 4 [ 231.120501][ T5980] loop5: detected capacity change from 0 to 32768 [ 231.155347][ T5984] netlink: 288 bytes leftover after parsing attributes in process `syz.1.410'. [ 231.803762][ T5980] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.303 (5980) [ 231.894570][ T5986] netlink: 288 bytes leftover after parsing attributes in process `syz.4.407'. [ 231.898900][ T5980] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 231.913823][ T5980] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 231.922649][ T5980] BTRFS info (device loop5): setting nodatacow, compression disabled [ 231.930971][ T5980] BTRFS info (device loop5): force zlib compression, level 3 [ 231.938456][ T5980] BTRFS info (device loop5): turning off barriers [ 231.945955][ T5980] BTRFS info (device loop5): max_inline at 6 [ 231.952004][ T5980] BTRFS info (device loop5): enabling ssd optimizations [ 231.959051][ T5980] BTRFS info (device loop5): using spread ssd allocation scheme [ 231.966771][ T5980] BTRFS info (device loop5): setting nodatacow [ 231.973056][ T5980] BTRFS info (device loop5): using free space tree [ 233.125919][ T6012] loop3: detected capacity change from 0 to 16 [ 233.183970][ T6012] erofs: (device loop3): mounted with root inode @ nid 36. [ 233.534704][ T6024] loop1: detected capacity change from 0 to 1024 [ 233.549239][ T5980] BTRFS info (device loop5): scrub: started on devid 1 [ 233.568669][ T5980] BTRFS info (device loop5): left=0, need=98304, flags=2 [ 233.576423][ T5980] BTRFS info (device loop5): space_info SYSTEM has 0 free, is not full [ 233.586102][ T5980] BTRFS info (device loop5): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 233.599888][ T5980] BTRFS info (device loop5): global_block_rsv: size 1441792 reserved 1441792 [ 233.609241][ T5980] BTRFS info (device loop5): trans_block_rsv: size 0 reserved 0 [ 233.617070][ T5980] BTRFS info (device loop5): chunk_block_rsv: size 0 reserved 0 [ 233.624811][ T5980] BTRFS info (device loop5): delayed_block_rsv: size 0 reserved 0 [ 233.633083][ T5980] BTRFS info (device loop5): delayed_refs_rsv: size 0 reserved 0 [ 233.800389][ T5980] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [ 233.880584][ T6024] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 233.969418][ T6024] hfsplus: xattr searching failed [ 234.525672][ T6030] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 234.532067][ T6030] hfsplus: xattr searching failed [ 234.537576][ T26] audit: type=1800 audit(1749311873.977:9): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.417" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 234.760335][ T5523] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 237.258959][ T6063] netlink: 288 bytes leftover after parsing attributes in process `syz.5.423'. [ 238.056206][ T46] hfsplus: b-tree write err: -5, ino 4 [ 238.633206][ T4340] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop5 scanned by udevd (4340) [ 238.797622][ T6070] loop1: detected capacity change from 0 to 128 [ 238.817575][ T6070] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 238.940744][ T26] audit: type=1800 audit(1749311878.367:10): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.425" name="file1" dev="loop1" ino=1048611 res=0 errno=0 [ 239.049545][ T6071] syz.1.425: attempt to access beyond end of device [ 239.049545][ T6071] loop1: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 239.972974][ T4512] kworker/u4:14: attempt to access beyond end of device [ 239.972974][ T4512] loop1: rw=1, sector=233, nr_sectors = 808 limit=128 [ 240.025772][ T4512] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 240.122784][ T6083] loop4: detected capacity change from 0 to 16 [ 240.152685][ T6080] tmpfs: Unknown parameter 'usrquota' [ 240.225799][ T6083] erofs: (device loop4): mounted with root inode @ nid 36. [ 240.249802][ T6085] overlayfs: failed to resolve './file1': -2 [ 242.039118][ T6106] netlink: 288 bytes leftover after parsing attributes in process `syz.5.431'. [ 243.808503][ T6121] netlink: 288 bytes leftover after parsing attributes in process `syz.5.434'. [ 244.854659][ T4640] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 246.106032][ T6128] loop2: detected capacity change from 0 to 32768 [ 246.684396][ T4640] usb 5-1: device descriptor read/64, error -71 [ 246.790791][ T6128] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 246.802755][ T6128] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 246.812646][ T6128] BTRFS info (device loop2): use zlib compression, level 3 [ 246.820203][ T6128] BTRFS error (device loop2): unrecognized mount option 'dont_appraise' [ 246.846233][ T6128] BTRFS error (device loop2): open_ctree failed: -22 [ 247.344362][ T4640] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 248.887191][ T6146] loop3: detected capacity change from 0 to 128 [ 248.925959][ T6146] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 248.935978][ T4241] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 248.996932][ T6146] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.004978][ T6152] loop5: detected capacity change from 0 to 16 [ 249.571208][ T6152] erofs: (device loop5): mounted with root inode @ nid 36. [ 249.597324][ T4241] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.620214][ T4241] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.312422][ T4241] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 250.815956][ T4241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.834707][ T4241] usb 2-1: SerialNumber: syz [ 251.281896][ T6172] device batadv0 entered promiscuous mode [ 251.646969][ T4241] usb 2-1: 0:2 : does not exist [ 251.840090][ T4241] usb 2-1: USB disconnect, device number 4 [ 252.576269][ T5362] udevd[5362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.604398][ T4253] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 255.004331][ T4253] usb 4-1: device descriptor read/64, error -71 [ 255.316468][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.322929][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.474940][ T4253] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 256.084816][ T4253] usb 4-1: device descriptor read/64, error -71 [ 256.092680][ T6218] loop5: detected capacity change from 0 to 16 [ 256.103840][ T6218] erofs: (device loop5): mounted with root inode @ nid 36. [ 256.250583][ T4253] usb usb4-port1: attempt power cycle [ 258.699844][ T6236] loop3: detected capacity change from 0 to 32768 [ 258.774871][ T6239] 8021q: VLANs not supported on ip_vti0 [ 258.965802][ T6236] XFS (loop3): Mounting V5 Filesystem [ 259.098315][ T6236] XFS (loop3): Ending clean mount [ 259.108211][ T6236] XFS (loop3): Quotacheck needed: Please wait. [ 259.186865][ T6236] XFS (loop3): Quotacheck: Done. [ 260.223553][ T6257] loop5: detected capacity change from 0 to 1024 [ 260.432926][ T6257] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 260.646849][ T6257] hfsplus: xattr searching failed [ 261.277074][ T6257] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 261.283473][ T6257] hfsplus: xattr searching failed [ 261.335279][ T26] audit: type=1800 audit(1749311900.767:11): pid=6257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.467" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 261.377335][ T4256] XFS (loop3): Unmounting Filesystem [ 261.462850][ T5573] hfsplus: b-tree write err: -5, ino 4 [ 261.745076][ T4262] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 261.908533][ T4262] usb 2-1: device descriptor read/64, error -71 [ 262.184644][ T4262] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 262.384399][ T4262] usb 2-1: device descriptor read/64, error -71 [ 262.514652][ T4262] usb usb2-port1: attempt power cycle [ 262.807009][ T6292] loop5: detected capacity change from 0 to 128 [ 262.825030][ T6292] affs: Unrecognized mount option "root=0000000000000d=00000000000000000004" or missing value [ 262.835613][ T6292] affs: Error parsing options [ 262.931632][ T4262] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 263.108900][ T4262] usb 2-1: device descriptor read/8, error -71 [ 263.494512][ T4262] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 263.542974][ T4262] usb 2-1: device descriptor read/8, error -71 [ 263.685426][ T4262] usb usb2-port1: unable to enumerate USB device [ 264.148909][ T6290] device batadv0 entered promiscuous mode [ 264.564803][ T6314] loop2: detected capacity change from 0 to 1024 [ 264.683310][ T6312] loop4: detected capacity change from 0 to 32768 [ 264.758829][ T6318] loop3: detected capacity change from 0 to 16 [ 264.807795][ T6318] erofs: (device loop3): mounted with root inode @ nid 36. [ 265.068575][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.484'. [ 265.987157][ T6314] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 265.993787][ T6314] hfsplus: xattr searching failed [ 266.279544][ T6323] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 266.707993][ T6312] XFS (loop4): Mounting V5 Filesystem [ 266.840588][ T6323] hfsplus: xattr search failed [ 267.237533][ T6312] XFS (loop4): Ending clean mount [ 267.249181][ T6312] XFS (loop4): Quotacheck needed: Please wait. [ 267.396001][ T46] hfsplus: b-tree write err: -5, ino 4 [ 267.414444][ T6312] XFS (loop4): Quotacheck: Done. [ 267.439098][ T4259] XFS (loop4): Unmounting Filesystem [ 267.483417][ T6339] loop1: detected capacity change from 0 to 32768 [ 267.514910][ T6339] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.486 (6339) [ 267.655028][ T6339] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 267.702963][ T6339] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 267.830855][ T6339] BTRFS info (device loop1): use zlib compression, level 3 [ 267.884466][ T6339] BTRFS error (device loop1): unrecognized mount option 'dont_appraise' [ 267.920038][ T6339] BTRFS error (device loop1): open_ctree failed: -22 [ 267.996989][ T6335] tmpfs: Unknown parameter 'mp' [ 268.176479][ T5035] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by udevd (5035) [ 268.470996][ T6362] loop2: detected capacity change from 0 to 128 [ 268.478649][ T6362] affs: Unrecognized mount option "root=0000000000000d=00000000000000000004" or missing value [ 268.489010][ T6362] affs: Error parsing options [ 269.287105][ T4340] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 270.661614][ T6374] device batadv0 entered promiscuous mode [ 270.979886][ T6041] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 271.080901][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.497'. [ 271.154639][ T6041] usb 2-1: device descriptor read/64, error -71 [ 271.752076][ T6393] loop4: detected capacity change from 0 to 1024 [ 271.880716][ T6041] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 271.933826][ T6393] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 271.962978][ T6393] hfsplus: xattr searching failed [ 271.968144][ T6396] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 271.974730][ T6396] hfsplus: xattr searching failed [ 271.982448][ T26] audit: type=1800 audit(1749311911.407:12): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.499" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 272.026002][ T6393] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 272.058904][ T6041] usb 2-1: device descriptor read/64, error -71 [ 272.072683][ T6393] hfsplus: xattr search failed [ 272.185877][ T6041] usb usb2-port1: attempt power cycle [ 272.196799][ T4644] hfsplus: b-tree write err: -5, ino 4 [ 272.596937][ T6409] loop3: detected capacity change from 0 to 256 [ 272.644583][ T6041] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 272.658817][ T6409] FAT-fs (loop3): Directory bread(block 64) failed [ 272.686063][ T6409] FAT-fs (loop3): Directory bread(block 65) failed [ 272.696452][ T6041] usb 2-1: device descriptor read/8, error -71 [ 272.724195][ T6409] FAT-fs (loop3): Directory bread(block 66) failed [ 272.738805][ T6409] FAT-fs (loop3): Directory bread(block 67) failed [ 272.745933][ T6409] FAT-fs (loop3): Directory bread(block 68) failed [ 272.760784][ T6409] FAT-fs (loop3): Directory bread(block 69) failed [ 272.772349][ T6409] FAT-fs (loop3): Directory bread(block 70) failed [ 272.793053][ T6409] FAT-fs (loop3): Directory bread(block 71) failed [ 272.807082][ T6409] FAT-fs (loop3): Directory bread(block 72) failed [ 272.813747][ T6409] FAT-fs (loop3): Directory bread(block 73) failed [ 272.974458][ T6041] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 273.028541][ T6041] usb 2-1: device descriptor read/8, error -71 [ 273.154505][ T6041] usb usb2-port1: unable to enumerate USB device [ 274.215332][ T6427] loop4: detected capacity change from 0 to 2048 [ 274.369147][ T6427] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 274.394864][ T26] audit: type=1800 audit(1749311913.827:13): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.508" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 274.484373][ T26] audit: type=1800 audit(1749311913.887:14): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.508" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 274.732830][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 274.836455][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 275.648209][ T6450] loop4: detected capacity change from 0 to 1024 [ 275.840925][ T6452] loop5: detected capacity change from 0 to 32768 [ 276.034478][ T6456] loop1: detected capacity change from 0 to 1024 [ 276.047721][ T6450] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 276.104641][ T6450] hfsplus: xattr searching failed [ 276.109787][ T6461] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 276.116283][ T6461] hfsplus: xattr searching failed [ 276.121497][ T26] audit: type=1800 audit(1749311915.557:15): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.513" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 276.168661][ T6456] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 276.183957][ T6450] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 276.208080][ T6450] hfsplus: xattr search failed [ 276.218796][ T6456] hfsplus: xattr searching failed [ 276.342797][ T6456] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 276.349370][ T6456] hfsplus: xattr searching failed [ 276.359101][ T26] audit: type=1800 audit(1749311915.787:16): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.516" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 276.361280][ T6456] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 276.388923][ T6456] hfsplus: xattr search failed [ 276.817516][ T6452] XFS (loop5): Mounting V5 Filesystem [ 276.871463][ T4365] hfsplus: b-tree write err: -5, ino 4 [ 276.934060][ T4574] hfsplus: b-tree write err: -5, ino 4 [ 276.959570][ T6469] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 277.030554][ T6452] XFS (loop5): Ending clean mount [ 277.040569][ T6452] XFS (loop5): Quotacheck needed: Please wait. [ 277.279141][ T6452] XFS (loop5): Quotacheck: Done. [ 277.876397][ T6479] loop1: detected capacity change from 0 to 128 [ 277.979953][ T6479] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 278.146736][ T6479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.878136][ T5523] XFS (loop5): Unmounting Filesystem [ 278.938583][ T6041] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 279.264337][ T6041] usb 5-1: device descriptor read/64, error -71 [ 280.076501][ T6500] loop3: detected capacity change from 0 to 32768 [ 280.084559][ T6500] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.527 (6500) [ 280.114967][ T6500] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 280.125311][ T6500] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 280.135086][ T6500] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 280.144587][ T6500] BTRFS info (device loop3): use zstd compression, level 3 [ 280.151775][ T6500] BTRFS info (device loop3): using free space tree [ 280.164317][ T6041] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 280.736199][ T6500] BTRFS info (device loop3): enabling ssd optimizations [ 280.745392][ T40] BTRFS warning (device loop3): checksum verify failed on logical 5308416 mirror 1 wanted 0x53ccb67cf2cd4d57b8377a99cb15d167f07773786963ca6c47ef35dda1a43427 found 0x0eb2573ca1569bbf5e334bcd4370c5b6c34135ad5b6826ff031735444fdefac2 level 0 [ 281.968060][ T6536] loop5: detected capacity change from 0 to 40427 [ 282.065519][ T4340] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop3 scanned by udevd (4340) [ 282.140760][ T6536] F2FS-fs (loop5): Found nat_bits in checkpoint [ 282.191596][ T6536] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 282.510446][ T6556] syz.5.523: attempt to access beyond end of device [ 282.510446][ T6556] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 282.985890][ T6558] loop1: detected capacity change from 0 to 32768 [ 283.048405][ T5523] syz-executor: attempt to access beyond end of device [ 283.048405][ T5523] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 283.081274][ T6562] loop4: detected capacity change from 0 to 16 [ 283.185148][ T6562] erofs: (device loop4): mounted with root inode @ nid 36. [ 283.242716][ T6558] XFS (loop1): Mounting V5 Filesystem [ 283.980804][ T6558] XFS (loop1): Ending clean mount [ 283.990308][ T6558] XFS (loop1): Quotacheck needed: Please wait. [ 284.161177][ T6558] XFS (loop1): Quotacheck: Done. [ 284.494322][ T6550] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 284.655517][ T6550] usb 3-1: device descriptor read/64, error -71 [ 284.843388][ T4251] XFS (loop1): Unmounting Filesystem [ 284.934325][ T6550] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 285.114554][ T6550] usb 3-1: device descriptor read/64, error -71 [ 285.242549][ T6550] usb usb3-port1: attempt power cycle [ 285.479773][ T6607] loop4: detected capacity change from 0 to 40427 [ 285.575308][ T6607] F2FS-fs (loop4): Found nat_bits in checkpoint [ 285.623383][ T6607] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 285.778534][ T6614] syz.4.547: attempt to access beyond end of device [ 285.778534][ T6614] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 285.894390][ T6550] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 285.945188][ T6550] usb 3-1: device descriptor read/8, error -71 [ 286.143341][ T4259] syz-executor: attempt to access beyond end of device [ 286.143341][ T4259] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 286.224314][ T6550] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 287.189956][ T6550] usb 3-1: device descriptor read/8, error -71 [ 287.315702][ T6550] usb usb3-port1: unable to enumerate USB device [ 287.339561][ T6623] loop1: detected capacity change from 0 to 512 [ 287.741202][ T6628] loop5: detected capacity change from 0 to 65536 [ 287.822810][ T6623] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 287.861718][ T6628] XFS (loop5): Mounting V5 Filesystem [ 287.942903][ T6623] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 288.090053][ T6637] loop4: detected capacity change from 0 to 32768 [ 288.107718][ T6637] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 288.157712][ T6628] XFS (loop5): Ending clean mount [ 288.361955][ T6647] loop2: detected capacity change from 0 to 16 [ 288.401741][ T6647] erofs: (device loop2): mounted with root inode @ nid 36. [ 288.419217][ T5523] XFS (loop5): Unmounting Filesystem [ 289.356147][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 289.936118][ T6660] loop4: detected capacity change from 0 to 128 [ 290.065360][ T6660] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 290.149493][ T6660] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.914670][ T22] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 292.299578][ T6688] loop5: detected capacity change from 0 to 32768 [ 292.311854][ T6688] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 292.322354][ T6688] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 292.331246][ T6688] BTRFS info (device loop5): setting nodatacow, compression disabled [ 292.339616][ T6688] BTRFS info (device loop5): force zlib compression, level 3 [ 292.347654][ T6688] BTRFS info (device loop5): turning off barriers [ 292.354166][ T6688] BTRFS info (device loop5): max_inline at 6 [ 292.361156][ T6688] BTRFS info (device loop5): enabling ssd optimizations [ 292.368356][ T6688] BTRFS info (device loop5): using spread ssd allocation scheme [ 292.376116][ T6688] BTRFS info (device loop5): setting nodatacow [ 292.382364][ T6688] BTRFS info (device loop5): using free space tree [ 292.396704][ T22] usb 4-1: config index 0 descriptor too short (expected 255, got 27) [ 292.414320][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.434377][ T22] usb 4-1: config 0 has no interfaces? [ 292.440011][ T22] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 292.452321][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.464048][ T22] usb 4-1: config 0 descriptor?? [ 292.673034][ T6550] usb 4-1: USB disconnect, device number 10 [ 292.972892][ T6707] device batadv0 entered promiscuous mode [ 293.827363][ T5523] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 294.370804][ T6734] loop3: detected capacity change from 0 to 1024 [ 294.599010][ T6737] loop4: detected capacity change from 0 to 32768 [ 294.666508][ T6734] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 294.694071][ T6734] hfsplus: xattr searching failed [ 294.719520][ T6737] XFS (loop4): Mounting V5 Filesystem [ 294.780691][ T6758] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 294.841736][ T6749] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 294.848360][ T6749] hfsplus: xattr search failed [ 295.703954][ T4340] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop5 scanned by udevd (4340) [ 295.837595][ T6737] XFS (loop4): Ending clean mount [ 295.854655][ T6737] XFS (loop4): Quotacheck needed: Please wait. [ 296.054350][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'. [ 296.793682][ T6737] XFS (loop4): Quotacheck: Done. [ 297.302113][ T6775] loop1: detected capacity change from 0 to 32768 [ 297.373718][ T6775] JBD2: Ignoring recovery information on journal [ 297.735633][ T6780] loop2: detected capacity change from 0 to 32768 [ 297.833250][ T6780] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 297.843513][ T6780] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 297.853066][ T6780] BTRFS info (device loop2): use zlib compression, level 3 [ 297.860388][ T6780] BTRFS error (device loop2): unrecognized mount option 'dont_appraise' [ 297.869139][ T6780] BTRFS error (device loop2): open_ctree failed: -22 [ 297.923663][ T6775] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 297.940144][ T4370] hfsplus: b-tree write err: -5, ino 4 [ 297.947228][ T6779] tmpfs: Bad value for 'mpol' [ 297.961455][ T4259] XFS (loop4): Unmounting Filesystem [ 298.885003][ T6787] netlink: 288 bytes leftover after parsing attributes in process `syz.3.581'. [ 299.135134][ T6775] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 299.155966][ T6775] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 299.165981][ T6775] OCFS2: File system is now read-only. [ 299.171481][ T6775] (syz.1.577,6775,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 299.181001][ T6775] (syz.1.577,6775,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 299.188945][ T6775] (syz.1.577,6775,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 299.197443][ T6775] (syz.1.577,6775,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 299.205984][ T6775] (syz.1.577,6775,1):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 299.214185][ T6775] (syz.1.577,6775,1):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 299.222825][ T6775] (syz.1.577,6775,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 299.231655][ T6775] (syz.1.577,6775,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 299.240444][ T6775] (syz.1.577,6775,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 299.252227][ T6775] (syz.1.577,6775,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 299.261441][ T6775] (syz.1.577,6775,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 299.270224][ T6775] (syz.1.577,6775,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 299.280415][ T6775] (syz.1.577,6775,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 299.290676][ T6775] (syz.1.577,6775,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 299.299809][ T6775] (syz.1.577,6775,1):ocfs2_lock_allocators:2672 ERROR: status = -30 [ 299.307888][ T6775] (syz.1.577,6775,1):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 299.316286][ T6775] (syz.1.577,6775,1):ocfs2_write_begin:1907 ERROR: status = -30 [ 299.852438][ T4382] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 scanned by udevd (4382) [ 299.939656][ T4251] ocfs2: Unmounting device (7,1) on (node local) [ 301.082200][ T6810] loop1: detected capacity change from 0 to 40427 [ 301.459947][ T6810] F2FS-fs (loop1): Found nat_bits in checkpoint [ 301.519430][ T6810] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 301.785448][ T6826] syz.1.585: attempt to access beyond end of device [ 301.785448][ T6826] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 302.008456][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.587'. [ 302.537012][ T4251] syz-executor: attempt to access beyond end of device [ 302.537012][ T4251] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 303.102698][ T6839] loop3: detected capacity change from 0 to 32768 [ 303.248234][ T6839] XFS (loop3): Mounting V5 Filesystem [ 304.007228][ T6839] XFS (loop3): Ending clean mount [ 304.016923][ T6839] XFS (loop3): Quotacheck needed: Please wait. [ 304.391419][ T6852] loop5: detected capacity change from 0 to 32768 [ 304.467052][ T6852] BTRFS info (device loop5): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 304.477647][ T6852] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 304.487344][ T6852] BTRFS info (device loop5): use zlib compression, level 3 [ 304.494925][ T6852] BTRFS error (device loop5): unrecognized mount option 'dont_appraise' [ 304.506755][ T6852] BTRFS error (device loop5): open_ctree failed: -22 [ 304.871953][ T6852] tmpfs: Bad value for 'mpol' [ 305.578327][ T6839] XFS (loop3): Quotacheck: Done. [ 306.815755][ T6874] netlink: 288 bytes leftover after parsing attributes in process `syz.4.597'. [ 307.870454][ T4256] XFS (loop3): Unmounting Filesystem [ 309.122356][ T5035] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop5 scanned by udevd (5035) [ 311.304686][ T6908] loop2: detected capacity change from 0 to 32768 [ 311.811440][ T6908] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 311.822824][ T6908] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 311.833901][ T6908] BTRFS info (device loop2): use zlib compression, level 3 [ 311.841360][ T6908] BTRFS error (device loop2): unrecognized mount option 'dont_appraise' [ 311.860610][ T6908] BTRFS error (device loop2): open_ctree failed: -22 [ 312.395506][ T6908] tmpfs: Bad value for 'mpol' [ 312.725421][ T6912] fuse: Unknown parameter 'grou00000000000000000000' [ 312.942368][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 313.714444][ T4269] Bluetooth: hci0: command 0x0406 tx timeout [ 315.261207][ T6936] loop2: detected capacity change from 0 to 32768 [ 315.763416][ T6943] netlink: 288 bytes leftover after parsing attributes in process `syz.5.611'. [ 316.048110][ T6936] XFS (loop2): Mounting V5 Filesystem [ 316.453044][ T6960] loop3: detected capacity change from 0 to 40427 [ 316.510461][ T6936] XFS (loop2): Ending clean mount [ 316.519556][ T6936] XFS (loop2): Quotacheck needed: Please wait. [ 316.526312][ T6966] loop5: detected capacity change from 0 to 128 [ 316.529211][ T6966] affs: Unrecognized mount option "root=0000000000000d=00000000000000000004" or missing value [ 316.543566][ T6966] affs: Error parsing options [ 316.759743][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.768132][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.801097][ T6960] F2FS-fs (loop3): Found nat_bits in checkpoint [ 317.018349][ T6960] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 317.692552][ T6977] syz.3.614: attempt to access beyond end of device [ 317.692552][ T6977] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 318.015725][ T6979] fuse: Unknown parameter 'grou00000000000000000000' [ 318.022822][ T4256] syz-executor: attempt to access beyond end of device [ 318.022822][ T4256] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 318.121733][ T6936] XFS (loop2): Quotacheck: Done. [ 318.193295][ T4255] XFS (loop2): Unmounting Filesystem [ 318.873854][ T6985] loop5: detected capacity change from 0 to 2048 [ 318.971648][ T6985] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 319.102360][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'. [ 319.562852][ T6985] syz.5.622: attempt to access beyond end of device [ 319.562852][ T6985] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 319.579235][ T6992] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.981463][ T6996] syz.5.622: attempt to access beyond end of device [ 319.981463][ T6996] loop5: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 319.999890][ T6996] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=3) [ 320.009578][ T6996] NILFS (loop5): error -5 reading inode: ino=12 [ 320.020341][ T6996] syz.5.622: attempt to access beyond end of device [ 320.020341][ T6996] loop5: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 320.034182][ T6996] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=0) [ 320.046640][ T6996] syz.5.622: attempt to access beyond end of device [ 320.046640][ T6996] loop5: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 320.082819][ T6996] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=3) [ 320.091629][ T6996] NILFS (loop5): error -5 reading inode: ino=12 [ 320.107987][ T6997] syz.5.622: attempt to access beyond end of device [ 320.107987][ T6997] loop5: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 320.122964][ T6997] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=3) [ 320.131763][ T6997] NILFS (loop5): error -5 reading inode: ino=15 [ 321.262255][ T7010] netlink: 288 bytes leftover after parsing attributes in process `syz.3.625'. [ 322.255983][ T7014] loop3: detected capacity change from 0 to 128 [ 322.264143][ T7014] affs: Unrecognized mount option "root=0000000000000d=00000000000000000004" or missing value [ 322.274668][ T7014] affs: Error parsing options [ 325.153440][ T7029] loop4: detected capacity change from 0 to 40427 [ 326.225125][ T7029] F2FS-fs (loop4): Found nat_bits in checkpoint [ 326.291526][ T7029] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 326.518341][ T7043] fuse: Unknown parameter 'grou00000000000000000000' [ 326.683651][ T7048] syz.4.631: attempt to access beyond end of device [ 326.683651][ T7048] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 327.023116][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.634'. [ 327.423794][ T4259] syz-executor: attempt to access beyond end of device [ 327.423794][ T4259] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 329.575400][ T7076] netlink: 288 bytes leftover after parsing attributes in process `syz.5.639'. [ 331.192017][ T7101] 9pnet: Found fid 0 not clunked [ 331.224512][ T1169] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 331.317152][ T7105] loop4: detected capacity change from 0 to 128 [ 331.333960][ T7105] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 331.347398][ T7105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.437206][ T1169] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.452593][ T1169] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.471846][ T1169] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 331.493019][ T1169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 331.503441][ T1169] usb 3-1: SerialNumber: syz [ 332.322752][ T22] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 332.332449][ T1169] usb 3-1: 0:2 : does not exist [ 332.364851][ T1169] usb 3-1: USB disconnect, device number 13 [ 332.576895][ T22] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 333.185030][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 334.443814][ T4340] udevd[4340]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.469398][ T7121] loop3: detected capacity change from 0 to 32768 [ 334.487632][ T7121] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.648 (7121) [ 334.509242][ T7121] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 334.519921][ T7121] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 334.529661][ T7121] BTRFS info (device loop3): use zlib compression, level 3 [ 334.537089][ T7121] BTRFS error (device loop3): unrecognized mount option 'dont_appraise' [ 334.547448][ T7121] BTRFS error (device loop3): open_ctree failed: -22 [ 334.579076][ T7121] tmpfs: Bad value for 'mpol' [ 334.730589][ T22] usb 2-1: config 17 interface 0 has no altsetting 0 [ 334.737467][ T22] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 334.747036][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.498456][ T7142] netlink: 288 bytes leftover after parsing attributes in process `syz.5.651'. [ 335.829047][ T22] usb 2-1: can't set config #17, error -71 [ 335.854453][ T22] usb 2-1: USB disconnect, device number 13 [ 336.340425][ T7152] loop4: detected capacity change from 0 to 32768 [ 336.641146][ T7152] XFS (loop4): Mounting V5 Filesystem [ 336.921132][ T7152] XFS (loop4): Ending clean mount [ 336.940109][ T7152] XFS (loop4): Quotacheck needed: Please wait. [ 336.973780][ T7169] 9pnet: Found fid 0 not clunked [ 337.318654][ T7152] XFS (loop4): Quotacheck: Done. [ 337.716735][ T7174] loop5: detected capacity change from 0 to 128 [ 337.760582][ T7174] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 337.771028][ T4259] XFS (loop4): Unmounting Filesystem [ 337.772192][ T5362] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by udevd (5362) [ 338.761623][ T7174] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.247929][ T7190] netlink: 288 bytes leftover after parsing attributes in process `syz.3.665'. [ 339.258378][ T1169] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 339.500086][ T1169] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.674378][ T1169] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.760745][ T7199] netlink: 288 bytes leftover after parsing attributes in process `syz.5.666'. [ 340.343219][ T1169] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 340.574317][ T1169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 340.627891][ T1169] usb 2-1: SerialNumber: syz [ 341.555529][ T1169] usb 2-1: 0:2 : does not exist [ 341.705010][ T1169] usb 2-1: USB disconnect, device number 14 [ 342.014443][ T6551] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 343.036863][ T7213] loop3: detected capacity change from 0 to 32768 [ 343.044141][ T7213] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.672 (7213) [ 343.064454][ T7213] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 343.066050][ T6551] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 343.074672][ T7213] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 343.074786][ T7213] BTRFS info (device loop3): setting nodatacow, compression disabled [ 343.074841][ T7213] BTRFS info (device loop3): force zlib compression, level 3 [ 343.074865][ T7213] BTRFS info (device loop3): turning off barriers [ 343.074908][ T7213] BTRFS info (device loop3): max_inline at 6 [ 343.074935][ T7213] BTRFS info (device loop3): enabling ssd optimizations [ 343.128756][ T7213] BTRFS info (device loop3): using spread ssd allocation scheme [ 343.136533][ T7213] BTRFS info (device loop3): setting nodatacow [ 343.142712][ T7213] BTRFS info (device loop3): using free space tree [ 343.357934][ T6551] usb 6-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 343.454575][ T6551] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 343.466495][ T6551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.697247][ T6551] usb 6-1: string descriptor 0 read error: -71 [ 343.727629][ T6551] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 343.747649][ T7237] loop1: detected capacity change from 0 to 32768 [ 344.110612][ T4256] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 344.364829][ T6551] usb 6-1: USB disconnect, device number 2 [ 344.451594][ T7237] XFS (loop1): Mounting V5 Filesystem [ 344.938383][ T7262] netlink: 288 bytes leftover after parsing attributes in process `syz.2.677'. [ 345.526055][ T7237] XFS (loop1): Ending clean mount [ 345.533601][ T7237] XFS (loop1): Quotacheck needed: Please wait. [ 345.688653][ T7237] XFS (loop1): Quotacheck: Done. [ 346.530245][ T7278] netlink: 288 bytes leftover after parsing attributes in process `syz.2.680'. [ 346.831000][ T4251] XFS (loop1): Unmounting Filesystem [ 347.611657][ T7282] 9pnet: Found fid 0 not clunked [ 349.084371][ T4474] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 349.368834][ T4474] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.394733][ T4474] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.408753][ T4474] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 349.439574][ T4474] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 349.460390][ T4474] usb 3-1: SerialNumber: syz [ 349.696219][ T7313] netlink: 288 bytes leftover after parsing attributes in process `syz.4.691'. [ 350.383527][ T4474] usb 3-1: 0:2 : does not exist [ 350.400587][ T4474] usb 3-1: USB disconnect, device number 14 [ 350.695557][ T7320] netlink: 288 bytes leftover after parsing attributes in process `syz.4.693'. [ 351.688953][ T7327] loop5: detected capacity change from 0 to 1024 [ 351.688953][ T7325] loop2: detected capacity change from 0 to 32768 [ 351.708000][ T7329] overlayfs: failed to resolve './file1': -2 [ 351.777195][ T7327] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 351.804262][ T7325] XFS (loop2): Mounting V5 Filesystem [ 352.429491][ T7327] hfsplus: xattr searching failed [ 352.677384][ T4340] udevd[4340]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.703891][ T7327] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 352.710307][ T7327] hfsplus: xattr searching failed [ 352.715699][ T26] audit: type=1800 audit(1749311992.157:17): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.696" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 352.735941][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.780334][ T7325] XFS (loop2): Ending clean mount [ 352.787673][ T7325] XFS (loop2): Quotacheck needed: Please wait. [ 352.835480][ T7327] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 352.841877][ T7327] hfsplus: xattr search failed [ 352.911712][ T7325] XFS (loop2): Quotacheck: Done. [ 352.931116][ T4354] hfsplus: b-tree write err: -5, ino 4 [ 353.911516][ T4255] XFS (loop2): Unmounting Filesystem [ 354.294425][ T7364] netlink: 288 bytes leftover after parsing attributes in process `syz.3.703'. [ 354.524348][ T4253] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 354.754579][ T4253] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.797290][ T4253] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.980356][ T4253] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 355.118150][ T4253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 355.132984][ T4253] usb 5-1: SerialNumber: syz [ 355.229070][ T7370] netlink: 288 bytes leftover after parsing attributes in process `syz.5.705'. [ 355.988717][ T4253] usb 5-1: 0:2 : does not exist [ 356.030391][ T4253] usb 5-1: USB disconnect, device number 8 [ 356.416032][ T5362] udevd[5362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.168299][ T7373] loop5: detected capacity change from 0 to 32768 [ 357.208712][ T7373] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop5 scanned by syz.5.707 (7373) [ 357.234055][ T7373] BTRFS info (device loop5): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 357.244532][ T7373] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 357.254266][ T7373] BTRFS info (device loop5): use zlib compression, level 3 [ 357.262277][ T7373] BTRFS error (device loop5): unrecognized mount option 'dont_appraise' [ 357.272092][ T7373] BTRFS error (device loop5): open_ctree failed: -22 [ 357.674692][ T7373] tmpfs: Bad value for 'mpol' [ 359.826108][ T7385] overlayfs: failed to resolve './file1': -2 [ 359.883696][ T5035] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop5 scanned by udevd (5035) [ 360.087452][ T7391] loop3: detected capacity change from 0 to 128 [ 360.186405][ T7391] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 360.913589][ T7397] loop4: detected capacity change from 0 to 40427 [ 360.960096][ T7391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 361.029585][ T7397] F2FS-fs (loop4): Found nat_bits in checkpoint [ 361.611863][ T7397] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 361.649955][ T7397] syz.4.714: attempt to access beyond end of device [ 361.649955][ T7397] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 361.653236][ T7411] loop1: detected capacity change from 0 to 2048 [ 361.922701][ T7411] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 361.934671][ T4259] syz-executor: attempt to access beyond end of device [ 361.934671][ T4259] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 362.364466][ T7412] netlink: 288 bytes leftover after parsing attributes in process `syz.5.717'. [ 362.425848][ T7418] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.426319][ T7411] syz.1.718: attempt to access beyond end of device [ 362.426319][ T7411] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 362.762107][ T7422] 9pnet: Found fid 0 not clunked [ 363.089806][ T7411] syz.1.718: attempt to access beyond end of device [ 363.089806][ T7411] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 363.105683][ T7411] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 363.114487][ T7411] NILFS (loop1): error -5 reading inode: ino=12 [ 363.975908][ T7411] syz.1.718: attempt to access beyond end of device [ 363.975908][ T7411] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 363.989633][ T7411] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) [ 364.054945][ T7411] syz.1.718: attempt to access beyond end of device [ 364.054945][ T7411] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 364.068725][ T7411] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 364.077237][ T7411] NILFS (loop1): error -5 reading inode: ino=12 [ 364.214632][ T7411] syz.1.718: attempt to access beyond end of device [ 364.214632][ T7411] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 364.228375][ T7411] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 364.237077][ T7411] NILFS (loop1): error -5 reading inode: ino=15 [ 365.023763][ T7441] overlayfs: failed to resolve './file1': -2 [ 366.077060][ T7442] loop4: detected capacity change from 0 to 32768 [ 366.109668][ T7442] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 366.120587][ T7442] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 366.130530][ T7442] BTRFS info (device loop4): use zlib compression, level 3 [ 366.138015][ T7442] BTRFS error (device loop4): unrecognized mount option 'dont_appraise' [ 366.330699][ T7442] BTRFS error (device loop4): open_ctree failed: -22 [ 367.307463][ T7449] fuse: Bad value for 'user_id' [ 367.634725][ T7460] loop1: detected capacity change from 0 to 128 [ 367.713588][ T7460] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 367.714559][ T4340] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by udevd (4340) [ 367.781093][ T7460] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.156744][ T7464] netlink: 288 bytes leftover after parsing attributes in process `syz.5.733'. [ 368.740411][ T7469] 9pnet: Found fid 0 not clunked [ 370.364771][ T7499] fuse: Bad value for 'user_id' [ 370.599853][ T7501] device gtp0 entered promiscuous mode [ 370.684413][ T7503] loop2: detected capacity change from 0 to 128 [ 370.857655][ T7503] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 370.933695][ T7503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.349377][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 374.053932][ T6547] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 374.661782][ T7535] fuse: Bad value for 'user_id' [ 374.696774][ T6547] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 374.726981][ T6547] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 374.751447][ T6547] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.351067][ T6547] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 375.516176][ T7543] loop3: detected capacity change from 0 to 2048 [ 375.546933][ T7543] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 375.586576][ T4297] usb 5-1: USB disconnect, device number 9 [ 375.632360][ T7544] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 375.632662][ T7543] syz.3.758: attempt to access beyond end of device [ 375.632662][ T7543] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 375.720924][ T7546] loop5: detected capacity change from 0 to 512 [ 375.727930][ T7546] ext4: Unknown parameter 'dont_measure' [ 375.796865][ T5362] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 376.009479][ T7548] syz.3.758: attempt to access beyond end of device [ 376.009479][ T7548] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 376.028098][ T7548] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 376.037558][ T7548] NILFS (loop3): error -5 reading inode: ino=12 [ 376.047585][ T7549] syz.3.758: attempt to access beyond end of device [ 376.047585][ T7549] loop3: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 376.061547][ T7549] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 376.084141][ T7550] syz.3.758: attempt to access beyond end of device [ 376.084141][ T7550] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 376.098275][ T7550] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 376.107056][ T7550] NILFS (loop3): error -5 reading inode: ino=12 [ 376.131340][ T7548] syz.3.758: attempt to access beyond end of device [ 376.131340][ T7548] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 376.145566][ T7548] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 376.154413][ T7548] NILFS (loop3): error -5 reading inode: ino=15 [ 378.196627][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.203182][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.552452][ T7557] loop3: detected capacity change from 0 to 128 [ 378.704089][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.760'. [ 378.862371][ T7557] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 379.193146][ T7557] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.644953][ T7583] 9pnet: Found fid 0 not clunked [ 381.664808][ T7584] loop3: detected capacity change from 0 to 512 [ 381.671589][ T7584] ext4: Unknown parameter 'dont_measure' [ 381.708582][ T4340] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 382.060881][ T7595] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 382.070914][ T7595] overlayfs: missing 'lowerdir' [ 384.164324][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 386.491430][ T7614] loop2: detected capacity change from 0 to 32768 [ 386.961219][ T7614] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 386.972050][ T7614] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 386.982152][ T7614] BTRFS info (device loop2): use zlib compression, level 3 [ 386.989807][ T7614] BTRFS error (device loop2): unrecognized mount option 'dont_appraise' [ 387.019484][ T7614] BTRFS error (device loop2): open_ctree failed: -22 [ 387.848611][ T7624] loop5: detected capacity change from 0 to 512 [ 387.855926][ T7624] ext4: Unknown parameter 'dont_measure' [ 387.934689][ T4340] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 388.499560][ T7633] loop5: detected capacity change from 0 to 2048 [ 388.620306][ T7633] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 388.710925][ T26] audit: type=1800 audit(1749312028.137:18): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.785" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 388.976660][ T5523] EXT4-fs (loop5): unmounting filesystem. [ 389.053267][ T7630] loop1: detected capacity change from 0 to 32768 [ 389.260134][ T7630] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.784 (7630) [ 389.369824][ T7640] loop3: detected capacity change from 0 to 32768 [ 389.381701][ T7630] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 389.424375][ T7630] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 389.470148][ T7630] BTRFS info (device loop1): setting nodatacow, compression disabled [ 389.541920][ T7630] BTRFS info (device loop1): force zlib compression, level 3 [ 389.566411][ T7630] BTRFS info (device loop1): turning off barriers [ 389.593263][ T7640] XFS (loop3): Mounting V5 Filesystem [ 389.640668][ T7630] BTRFS info (device loop1): max_inline at 6 [ 389.694286][ T7630] BTRFS info (device loop1): enabling ssd optimizations [ 389.701309][ T7630] BTRFS info (device loop1): using spread ssd allocation scheme [ 389.764434][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 389.803318][ T7640] XFS (loop3): Ending clean mount [ 389.819193][ T7640] XFS (loop3): Quotacheck needed: Please wait. [ 390.097138][ T7640] XFS (loop3): Quotacheck: Done. [ 390.370933][ T7630] BTRFS info (device loop1): setting nodatacow [ 390.455188][ T7630] BTRFS info (device loop1): using free space tree [ 390.942893][ T4256] XFS (loop3): Unmounting Filesystem [ 391.807368][ T7684] fuse: Bad value for 'fd' [ 392.186836][ T7693] loop4: detected capacity change from 0 to 1024 [ 392.336303][ T7630] BTRFS error (device loop1): open_ctree failed: -22 [ 392.340329][ T7693] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 392.373217][ T7693] hfsplus: xattr searching failed [ 392.381915][ T26] audit: type=1800 audit(1749312031.817:19): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.795" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 392.480473][ T40] hfsplus: b-tree write err: -5, ino 4 [ 392.751389][ T4340] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (4340) [ 392.777175][ T7701] loop4: detected capacity change from 0 to 2048 [ 393.442045][ T7701] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 393.525712][ T26] audit: type=1800 audit(1749312032.957:20): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.796" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 393.790061][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 394.437773][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 395.939805][ T7734] loop4: detected capacity change from 0 to 40427 [ 396.041995][ T7734] F2FS-fs (loop4): Found nat_bits in checkpoint [ 396.111355][ T7734] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 396.141719][ T7742] loop5: detected capacity change from 0 to 1024 [ 396.780557][ T7742] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 396.817052][ T7742] hfsplus: xattr searching failed [ 396.860095][ T7749] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 396.930242][ T7749] hfsplus: xattr search failed [ 396.964805][ T7750] syz.4.804: attempt to access beyond end of device [ 396.964805][ T7750] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 397.104027][ T4377] hfsplus: b-tree write err: -5, ino 4 [ 397.627764][ T7761] netlink: 288 bytes leftover after parsing attributes in process `syz.5.810'. [ 398.590765][ T7744] loop2: detected capacity change from 0 to 32768 [ 398.679749][ T7765] netlink: 288 bytes leftover after parsing attributes in process `syz.5.811'. [ 399.328122][ T7744] BTRFS error (device loop2): open_ctree failed: -4 [ 399.669092][ T4340] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4340) [ 399.697833][ T7768] 9pnet: Found fid 0 not clunked [ 400.063822][ T7776] device gtp0 entered promiscuous mode [ 401.307704][ T4259] syz-executor: attempt to access beyond end of device [ 401.307704][ T4259] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 402.057883][ T7796] loop3: detected capacity change from 0 to 2048 [ 402.089982][ T7796] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 402.302919][ T7802] netlink: 288 bytes leftover after parsing attributes in process `syz.1.823'. [ 402.334793][ T7800] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 402.736658][ T7796] syz.3.822: attempt to access beyond end of device [ 402.736658][ T7796] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 403.416067][ T7808] loop5: detected capacity change from 0 to 16 [ 403.499343][ T7811] syz.3.822: attempt to access beyond end of device [ 403.499343][ T7811] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 403.587089][ T7811] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 403.595925][ T7811] NILFS (loop3): error -5 reading inode: ino=12 [ 403.604680][ T7813] syz.3.822: attempt to access beyond end of device [ 403.604680][ T7813] loop3: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 403.626076][ T7813] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 403.646249][ T7814] syz.3.822: attempt to access beyond end of device [ 403.646249][ T7814] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 403.660126][ T7814] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 403.672122][ T7814] NILFS (loop3): error -5 reading inode: ino=12 [ 403.682448][ T7815] syz.3.822: attempt to access beyond end of device [ 403.682448][ T7815] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 403.696599][ T7815] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 403.705631][ T7815] NILFS (loop3): error -5 reading inode: ino=15 [ 403.725674][ T7808] erofs: (device loop5): mounted with root inode @ nid 36. [ 404.382853][ T7823] loop4: detected capacity change from 0 to 128 [ 404.427998][ T7823] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 404.473737][ T7823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.719466][ T7798] loop2: detected capacity change from 0 to 32768 [ 404.754587][ T7798] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 404.790684][ T7798] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 404.800978][ T7798] BTRFS info (device loop2): setting nodatacow, compression disabled [ 404.813102][ T7798] BTRFS info (device loop2): force zlib compression, level 3 [ 404.822602][ T7798] BTRFS info (device loop2): turning off barriers [ 404.836759][ T7798] BTRFS info (device loop2): max_inline at 6 [ 404.843202][ T7798] BTRFS info (device loop2): enabling ssd optimizations [ 404.853780][ T7798] BTRFS info (device loop2): using spread ssd allocation scheme [ 404.861984][ T7798] BTRFS info (device loop2): setting nodatacow [ 404.868471][ T7798] BTRFS info (device loop2): using free space tree [ 405.107725][ T7837] loop1: detected capacity change from 0 to 40427 [ 405.292227][ T7837] F2FS-fs (loop1): Found nat_bits in checkpoint [ 405.357424][ T7837] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 405.359230][ T7798] BTRFS error (device loop2): open_ctree failed: -12 [ 405.585947][ T7853] syz.1.831: attempt to access beyond end of device [ 405.585947][ T7853] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 405.709934][ T4340] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4340) [ 406.045299][ T4251] syz-executor: attempt to access beyond end of device [ 406.045299][ T4251] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 406.449062][ T4302] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 407.386955][ T4302] usb 5-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 407.427712][ T4302] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 407.470849][ T7866] loop5: detected capacity change from 0 to 512 [ 407.489196][ T4302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.516526][ T7868] loop3: detected capacity change from 0 to 16 [ 407.535913][ T4302] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 407.546622][ T7868] erofs: (device loop3): mounted with root inode @ nid 36. [ 407.780280][ T7866] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 407.794915][ T4302] usb 5-1: USB disconnect, device number 10 [ 408.025561][ T7866] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 409.126295][ T5523] EXT4-fs (loop5): unmounting filesystem. [ 410.168203][ T7891] loop2: detected capacity change from 0 to 40427 [ 410.243536][ T7891] F2FS-fs (loop2): Found nat_bits in checkpoint [ 410.304389][ T7891] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 410.944792][ T7891] syz.2.844: attempt to access beyond end of device [ 410.944792][ T7891] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 412.575344][ T4255] syz-executor: attempt to access beyond end of device [ 412.575344][ T4255] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 412.772750][ T7927] loop1: detected capacity change from 0 to 16 [ 412.791906][ T7927] erofs: (device loop1): mounted with root inode @ nid 36. [ 412.802598][ T7928] loop4: detected capacity change from 0 to 512 [ 412.989566][ T7928] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 413.014756][ T7928] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 413.661190][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 413.842967][ T7948] loop2: detected capacity change from 0 to 1024 [ 413.909539][ T7950] loop4: detected capacity change from 0 to 2048 [ 413.972115][ T7950] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 414.007198][ T7948] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 414.024397][ T7948] hfsplus: xattr searching failed [ 414.048217][ T7951] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 414.064402][ T7952] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 414.064954][ T7950] syz.4.857: attempt to access beyond end of device [ 414.064954][ T7950] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 414.075519][ T7951] hfsplus: xattr searching failed [ 414.187974][ T26] audit: type=1800 audit(1749312053.617:21): pid=7951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.852" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 414.208304][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.355051][ T7071] hfsplus: b-tree write err: -5, ino 4 [ 414.371882][ T7957] syz.4.857: attempt to access beyond end of device [ 414.371882][ T7957] loop4: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 414.389632][ T7957] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3) [ 414.398440][ T7957] NILFS (loop4): error -5 reading inode: ino=12 [ 414.409322][ T7957] syz.4.857: attempt to access beyond end of device [ 414.409322][ T7957] loop4: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 414.423416][ T7957] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=0) [ 414.436896][ T7957] syz.4.857: attempt to access beyond end of device [ 414.436896][ T7957] loop4: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 414.450796][ T7957] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3) [ 414.459547][ T7957] NILFS (loop4): error -5 reading inode: ino=12 [ 414.470294][ T7957] syz.4.857: attempt to access beyond end of device [ 414.470294][ T7957] loop4: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 414.484245][ T7957] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3) [ 414.493058][ T7957] NILFS (loop4): error -5 reading inode: ino=15 [ 417.541308][ T7976] loop4: detected capacity change from 0 to 40427 [ 417.708551][ T7976] F2FS-fs (loop4): Found nat_bits in checkpoint [ 417.766809][ T7976] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 418.283014][ T7987] syz.4.864: attempt to access beyond end of device [ 418.283014][ T7987] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 418.702455][ T4259] syz-executor: attempt to access beyond end of device [ 418.702455][ T4259] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 421.430976][ T8019] loop2: detected capacity change from 0 to 16 [ 421.446136][ T8019] erofs: (device loop2): mounted with root inode @ nid 36. [ 422.718482][ T8026] loop3: detected capacity change from 0 to 512 [ 422.803205][ T8026] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 422.834783][ T8026] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.156851][ T8030] loop5: detected capacity change from 0 to 40427 [ 423.244039][ T8030] F2FS-fs (loop5): Found nat_bits in checkpoint [ 423.354317][ T8030] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 423.437078][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 423.711425][ T8043] syz.5.879: attempt to access beyond end of device [ 423.711425][ T8043] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 427.664820][ T8070] loop1: detected capacity change from 0 to 32768 [ 427.829713][ T8070] XFS (loop1): Mounting V5 Filesystem [ 427.862333][ T8079] loop4: detected capacity change from 0 to 1024 [ 428.024111][ T8079] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 428.030787][ T8079] hfsplus: xattr searching failed [ 428.071393][ T5523] syz-executor: attempt to access beyond end of device [ 428.071393][ T5523] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 428.087287][ T8079] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 428.116760][ T8079] hfsplus: xattr searching failed [ 428.131030][ T26] audit: type=1800 audit(1749312067.557:22): pid=8079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.892" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 428.172733][ T8070] XFS (loop1): Ending clean mount [ 428.198845][ T8070] XFS (loop1): Quotacheck needed: Please wait. [ 428.238522][ T8070] XFS (loop1): Quotacheck: Done. [ 428.540605][ T4512] hfsplus: b-tree write err: -5, ino 4 [ 428.733143][ T8090] loop3: detected capacity change from 0 to 2048 [ 428.747175][ T4251] XFS (loop1): Unmounting Filesystem [ 428.795729][ T8090] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 428.979557][ T8090] syz.3.895: attempt to access beyond end of device [ 428.979557][ T8090] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 428.995012][ T8095] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 429.086276][ T8096] loop4: detected capacity change from 0 to 128 [ 429.098802][ T8096] affs: Unrecognized mount option "root=0000000000000d=00000000000000000004" or missing value [ 429.109286][ T8096] affs: Error parsing options [ 429.907605][ T4340] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 430.024048][ T8097] syz.3.895: attempt to access beyond end of device [ 430.024048][ T8097] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 430.044216][ T8097] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 430.060009][ T8097] NILFS (loop3): error -5 reading inode: ino=12 [ 430.068657][ T8098] syz.3.895: attempt to access beyond end of device [ 430.068657][ T8098] loop3: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 430.082469][ T8098] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 430.102209][ T8097] syz.3.895: attempt to access beyond end of device [ 430.102209][ T8097] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 430.116533][ T8097] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 430.125557][ T8097] NILFS (loop3): error -5 reading inode: ino=12 [ 430.138929][ T8097] syz.3.895: attempt to access beyond end of device [ 430.138929][ T8097] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 430.152756][ T8097] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 430.161555][ T8097] NILFS (loop3): error -5 reading inode: ino=15 [ 433.982448][ T8129] loop5: detected capacity change from 0 to 1024 [ 434.055004][ T8131] loop3: detected capacity change from 0 to 1024 [ 434.115947][ T8131] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 434.141493][ T8131] hfsplus: xattr searching failed [ 434.149496][ T8129] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 434.168668][ T8129] hfsplus: xattr searching failed [ 434.188747][ T8129] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 434.256786][ T8129] hfsplus: xattr searching failed [ 434.262596][ T26] audit: type=1800 audit(1749312073.687:23): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.907" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 434.288124][ T8131] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 434.294556][ T8131] hfsplus: xattr searching failed [ 434.306836][ T8131] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 434.313252][ T8131] hfsplus: xattr search failed [ 434.384772][ T26] audit: type=1800 audit(1749312073.727:24): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.908" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 434.394694][ T4715] hfsplus: b-tree write err: -5, ino 4 [ 434.405135][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.518345][ T46] hfsplus: b-tree write err: -5, ino 4 [ 435.270711][ T8146] loop5: detected capacity change from 0 to 128 [ 435.278031][ T8146] affs: Unrecognized mount option "root=0000000000000d=00000000000000000004" or missing value [ 435.288405][ T8146] affs: Error parsing options [ 436.996239][ T8166] loop2: detected capacity change from 0 to 1024 [ 437.071720][ T8166] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 437.103127][ T8166] hfsplus: xattr searching failed [ 437.277224][ T8172] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 437.283721][ T8172] hfsplus: xattr searching failed [ 437.360818][ T8172] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 437.367510][ T8172] hfsplus: xattr search failed [ 437.580703][ T26] audit: type=1800 audit(1749312076.717:25): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.921" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 437.815415][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 437.832358][ T66] hfsplus: b-tree write err: -5, ino 4 [ 438.210065][ T8188] loop3: detected capacity change from 0 to 128 [ 438.223172][ T8188] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 438.265190][ T8188] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 438.593367][ T5573] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 438.714646][ T22] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 438.949711][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.468098][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.646544][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.795846][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.806410][ T22] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 439.827105][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 439.859780][ T22] usb 5-1: SerialNumber: syz [ 440.065579][ T8210] loop3: detected capacity change from 0 to 512 [ 440.169826][ T8210] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 440.192739][ T8210] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 440.233181][ T22] usb 5-1: 0:2 : does not exist [ 440.265949][ T22] usb 5-1: USB disconnect, device number 11 [ 440.309734][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 440.494245][ T6550] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 440.526312][ T5362] udevd[5362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.728170][ T6550] usb 2-1: Using ep0 maxpacket: 8 [ 440.742739][ T6550] usb 2-1: config 0 has an invalid interface number: 150 but max is 0 [ 440.769495][ T6550] usb 2-1: config 0 has an invalid interface number: 112 but max is 0 [ 440.796939][ T6550] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 440.805400][ T6550] usb 2-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 440.815000][ T6550] usb 2-1: config 0 has no interface number 0 [ 440.821331][ T6550] usb 2-1: config 0 has no interface number 1 [ 440.939120][ T8227] loop2: detected capacity change from 0 to 32768 [ 440.981555][ T6550] usb 2-1: config 0 has no interface number 2 [ 441.002184][ T8227] JBD2: Ignoring recovery information on journal [ 441.041939][ T8227] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 441.064608][ T6550] usb 2-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.078056][ T6550] usb 2-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 441.090889][ T6550] usb 2-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 441.112448][ T6550] usb 2-1: config 0 interface 150 has no altsetting 0 [ 441.114522][ T8227] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 441.136830][ T8227] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 441.147241][ T8227] OCFS2: File system is now read-only. [ 441.152806][ T8227] (syz.2.938,8227,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 441.160732][ T8227] (syz.2.938,8227,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 441.168507][ T8227] (syz.2.938,8227,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 441.176969][ T8227] (syz.2.938,8227,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 441.185326][ T8227] (syz.2.938,8227,1):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 441.193378][ T8227] (syz.2.938,8227,1):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 441.201497][ T8227] (syz.2.938,8227,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 441.210275][ T8227] (syz.2.938,8227,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 441.219001][ T8227] (syz.2.938,8227,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 441.227942][ T8227] (syz.2.938,8227,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 441.236764][ T8227] (syz.2.938,8227,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 441.245477][ T8227] (syz.2.938,8227,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 441.254484][ T8227] (syz.2.938,8227,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 441.263517][ T8227] (syz.2.938,8227,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 441.272583][ T8227] (syz.2.938,8227,1):ocfs2_lock_allocators:2672 ERROR: status = -30 [ 441.280612][ T8227] (syz.2.938,8227,1):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 441.288940][ T8227] (syz.2.938,8227,1):ocfs2_write_begin:1907 ERROR: status = -30 [ 441.344304][ T6550] usb 2-1: config 0 interface 112 has no altsetting 0 [ 441.387147][ T6550] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 441.414443][ T6550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.467382][ T6550] usb 2-1: config 0 descriptor?? [ 441.473403][ T4255] ocfs2: Unmounting device (7,2) on (node local) [ 441.927781][ T6550] usb 2-1: string descriptor 0 read error: -71 [ 441.993345][ T6550] usb 2-1: USB disconnect, device number 15 [ 442.298156][ T8244] loop4: detected capacity change from 0 to 32768 [ 442.383875][ T8244] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 442.395460][ T8244] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 442.404294][ T8244] BTRFS info (device loop4): using free space tree [ 442.929677][ T8244] BTRFS info (device loop4): enabling ssd optimizations [ 443.069432][ T4259] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 443.312816][ T5362] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop4 scanned by udevd (5362) [ 443.614278][ T6550] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 443.812104][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'. [ 443.840680][ T6550] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.868006][ T6550] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.897495][ T6550] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 443.930440][ T6550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 443.959190][ T6550] usb 5-1: SerialNumber: syz [ 444.187461][ T6550] usb 5-1: 0:2 : does not exist [ 444.255336][ T6550] usb 5-1: USB disconnect, device number 12 [ 444.402954][ T8285] serio: Serial port ptm0 [ 444.451856][ T8290] loop5: detected capacity change from 0 to 1024 [ 444.489312][ T4340] udevd[4340]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.516147][ T6753] kernel write not supported for file bpf-prog (pid: 6753 comm: kworker/1:15) [ 444.671270][ T4512] hfsplus: b-tree write err: -5, ino 4 [ 445.084722][ T8301] netlink: 288 bytes leftover after parsing attributes in process `syz.1.960'. [ 445.344279][ T6550] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 446.017706][ T8303] loop4: detected capacity change from 0 to 32768 [ 446.027289][ T6550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.042103][ T6550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.052220][ T6550] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 446.062691][ T6550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.079180][ T6550] usb 4-1: config 0 descriptor?? [ 446.088409][ T8303] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 446.107234][ T8303] (syz.4.961,8303,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 446.124432][ T8303] ocfs2: Unmounting device (7,4) on (node local) [ 446.535851][ T6550] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 446.543313][ T6550] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 446.668052][ T6550] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 446.689867][ T6550] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 446.756196][ T6550] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 446.838028][ T6550] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 446.880060][ T6550] lenovo 0003:17EF:6047.0001: Failed to switch F7/9/11 mode: -71 [ 446.952153][ T6550] lenovo 0003:17EF:6047.0001: Failed to switch middle button: -71 [ 447.013815][ T6550] lenovo 0003:17EF:6047.0001: Fn-lock setting failed: -71 [ 447.068521][ T6550] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71 [ 447.143934][ T8321] loop1: detected capacity change from 0 to 40427 [ 447.187711][ T6550] usb 4-1: USB disconnect, device number 11 [ 447.284730][ T8321] F2FS-fs (loop1): Found nat_bits in checkpoint [ 447.316651][ T8321] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 447.550841][ T8334] syz.1.967: attempt to access beyond end of device [ 447.550841][ T8334] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 447.837115][ T4251] syz-executor: attempt to access beyond end of device [ 447.837115][ T4251] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 447.999492][ T4269] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 448.264329][ T6549] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 449.100551][ T8333] fido_id[8333]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 449.175699][ T6549] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.210303][ T6549] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.216898][ T8343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.975'. [ 449.231864][ T6549] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 449.269120][ T6549] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 449.314356][ T6549] usb 3-1: SerialNumber: syz [ 449.828153][ T8354] netlink: 288 bytes leftover after parsing attributes in process `syz.1.972'. [ 450.453627][ T6549] usb 3-1: 0:2 : does not exist [ 450.552999][ T6549] usb 3-1: USB disconnect, device number 15 [ 450.739027][ T8361] sp0: Synchronizing with TNC [ 450.797885][ T4340] udevd[4340]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.816440][ T8365] loop1: detected capacity change from 0 to 1024 [ 450.861317][ T26] audit: type=1800 audit(1749312090.287:26): pid=8365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.981" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 450.932115][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 450.967373][ T4365] hfsplus: b-tree write err: -5, ino 4 [ 452.447088][ T8382] loop5: detected capacity change from 0 to 1024 [ 452.536933][ T8384] loop4: detected capacity change from 0 to 512 [ 452.543845][ T8384] ext4: Unknown parameter 'dont_measure' [ 452.816094][ T8392] netlink: 288 bytes leftover after parsing attributes in process `syz.1.989'. [ 453.510111][ T8391] loop2: detected capacity change from 0 to 2048 [ 453.536527][ T8391] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 453.623311][ T8382] ------------[ cut here ]------------ [ 453.629385][ T8382] WARNING: CPU: 0 PID: 8382 at mm/page_alloc.c:5590 __alloc_pages+0x2f4/0x4e0 [ 453.638655][ T8382] Modules linked in: [ 453.642614][ T8382] CPU: 0 PID: 8382 Comm: syz.5.987 Not tainted 6.1.141-syzkaller #0 [ 453.652254][ T8382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 453.662517][ T8382] RIP: 0010:__alloc_pages+0x2f4/0x4e0 [ 453.668369][ T8382] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 f5 f9 22 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff [ 453.688017][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.694219][ T8382] RSP: 0018:ffffc90003b9fa80 EFLAGS: 00010246 [ 453.700409][ T8382] RAX: ffffc90003b9fa00 RBX: 1ffff92000773f54 RCX: 0000000000000000 [ 453.708548][ T8382] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90003b9fae8 [ 453.716612][ T8382] RBP: ffffc90003b9fb80 R08: dffffc0000000000 R09: ffffc90003b9fac0 [ 453.720824][ T8398] loop1: detected capacity change from 0 to 256 [ 453.724682][ T8382] R10: fffff52000773f5d R11: 1ffff92000773f58 R12: 0000000000000031 [ 453.724744][ T8382] R13: 0000000000000000 R14: 0000000000040d40 R15: dffffc0000000000 [ 453.724761][ T8382] FS: 00007f16d96836c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 453.724781][ T8382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.724796][ T8382] CR2: 00007f5197c0b000 CR3: 000000007a59e000 CR4: 00000000003506f0 [ 453.724817][ T8382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 453.724829][ T8382] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 453.724842][ T8382] Call Trace: [ 453.724849][ T8382] [ 453.724880][ T8382] ? zone_statistics+0x170/0x170 [ 453.769078][ T8398] exfat: Deprecated parameter 'utf8' [ 453.771024][ T8382] ? p9_fid_get+0x90/0x90 [ 453.808306][ T8382] __kmalloc_large_node+0x8c/0x1e0 [ 453.813477][ T8382] ? __v9fs_get_acl+0x40/0x110 [ 453.818517][ T8382] __kmalloc+0x110/0x240 [ 453.822939][ T8382] ? rcu_is_watching+0x11/0xa0 [ 453.827842][ T8382] __v9fs_get_acl+0x40/0x110 [ 453.832490][ T8382] v9fs_get_acl+0xa9/0x260 [ 453.837051][ T8382] v9fs_mount+0x875/0xb40 [ 453.841440][ T8382] ? xfs_fs_commit_blocks+0x6b0/0x6b0 [ 453.846933][ T8382] ? __kasan_kmalloc+0x8e/0xa0 [ 453.851760][ T8382] legacy_get_tree+0xe6/0x180 [ 453.856560][ T8382] ? xfs_fs_commit_blocks+0x6b0/0x6b0 [ 453.861972][ T8382] vfs_get_tree+0x88/0x270 [ 453.866499][ T8382] do_new_mount+0x24a/0xa40 [ 453.871090][ T8382] __se_sys_mount+0x2d6/0x3c0 [ 453.875956][ T8382] ? __x64_sys_mount+0xc0/0xc0 [ 453.880772][ T8382] ? lockdep_hardirqs_on+0x94/0x140 [ 453.886096][ T8382] ? __x64_sys_mount+0x1c/0xc0 [ 453.891080][ T8382] do_syscall_64+0x4c/0xa0 [ 453.895631][ T8382] ? clear_bhb_loop+0x60/0xb0 [ 453.900353][ T8382] ? clear_bhb_loop+0x60/0xb0 [ 453.905153][ T8382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.911101][ T8382] RIP: 0033:0x7f16d878e929 [ 453.915608][ T8382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.935333][ T8382] RSP: 002b:00007f16d9683038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 453.943928][ T8382] RAX: ffffffffffffffda RBX: 00007f16d89b5fa0 RCX: 00007f16d878e929 [ 453.952106][ T8382] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 453.960195][ T8382] RBP: 00007f16d8810b39 R08: 0000200000000140 R09: 0000000000000000 [ 453.968310][ T8382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.976394][ T8382] R13: 0000000000000000 R14: 00007f16d89b5fa0 R15: 00007fff9a7a21f8 [ 453.984470][ T8382] [ 453.987554][ T8382] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 453.994847][ T8382] CPU: 0 PID: 8382 Comm: syz.5.987 Not tainted 6.1.141-syzkaller #0 [ 454.002920][ T8382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 454.012987][ T8382] Call Trace: [ 454.016355][ T8382] [ 454.019289][ T8382] dump_stack_lvl+0x168/0x22e [ 454.024158][ T8382] ? memcpy+0x3c/0x60 [ 454.028251][ T8382] ? show_regs_print_info+0x12/0x12 [ 454.033514][ T8382] ? load_image+0x3b0/0x3b0 [ 454.038144][ T8382] panic+0x2c9/0x710 [ 454.042059][ T8382] ? bpf_jit_dump+0xd0/0xd0 [ 454.046582][ T8382] __warn+0x2f8/0x4f0 [ 454.050563][ T8382] ? __alloc_pages+0x2f4/0x4e0 [ 454.055336][ T8382] ? __alloc_pages+0x2f4/0x4e0 [ 454.060105][ T8382] report_bug+0x2ba/0x4f0 [ 454.064477][ T8382] ? __alloc_pages+0x2f4/0x4e0 [ 454.069274][ T8382] handle_bug+0x3a/0x70 [ 454.073459][ T8382] exc_invalid_op+0x16/0x40 [ 454.077985][ T8382] asm_exc_invalid_op+0x16/0x20 [ 454.082849][ T8382] RIP: 0010:__alloc_pages+0x2f4/0x4e0 [ 454.088225][ T8382] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 f5 f9 22 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff [ 454.107931][ T8382] RSP: 0018:ffffc90003b9fa80 EFLAGS: 00010246 [ 454.114006][ T8382] RAX: ffffc90003b9fa00 RBX: 1ffff92000773f54 RCX: 0000000000000000 [ 454.121978][ T8382] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90003b9fae8 [ 454.129952][ T8382] RBP: ffffc90003b9fb80 R08: dffffc0000000000 R09: ffffc90003b9fac0 [ 454.137941][ T8382] R10: fffff52000773f5d R11: 1ffff92000773f58 R12: 0000000000000031 [ 454.146089][ T8382] R13: 0000000000000000 R14: 0000000000040d40 R15: dffffc0000000000 [ 454.154081][ T8382] ? zone_statistics+0x170/0x170 [ 454.159032][ T8382] ? p9_fid_get+0x90/0x90 [ 454.163388][ T8382] __kmalloc_large_node+0x8c/0x1e0 [ 454.168513][ T8382] ? __v9fs_get_acl+0x40/0x110 [ 454.173286][ T8382] __kmalloc+0x110/0x240 [ 454.177531][ T8382] ? rcu_is_watching+0x11/0xa0 [ 454.182306][ T8382] __v9fs_get_acl+0x40/0x110 [ 454.186909][ T8382] v9fs_get_acl+0xa9/0x260 [ 454.191335][ T8382] v9fs_mount+0x875/0xb40 [ 454.195679][ T8382] ? xfs_fs_commit_blocks+0x6b0/0x6b0 [ 454.201056][ T8382] ? __kasan_kmalloc+0x8e/0xa0 [ 454.205849][ T8382] legacy_get_tree+0xe6/0x180 [ 454.210546][ T8382] ? xfs_fs_commit_blocks+0x6b0/0x6b0 [ 454.215932][ T8382] vfs_get_tree+0x88/0x270 [ 454.220360][ T8382] do_new_mount+0x24a/0xa40 [ 454.225010][ T8382] __se_sys_mount+0x2d6/0x3c0 [ 454.229795][ T8382] ? __x64_sys_mount+0xc0/0xc0 [ 454.234568][ T8382] ? lockdep_hardirqs_on+0x94/0x140 [ 454.239768][ T8382] ? __x64_sys_mount+0x1c/0xc0 [ 454.244537][ T8382] do_syscall_64+0x4c/0xa0 [ 454.248956][ T8382] ? clear_bhb_loop+0x60/0xb0 [ 454.253633][ T8382] ? clear_bhb_loop+0x60/0xb0 [ 454.258317][ T8382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.264223][ T8382] RIP: 0033:0x7f16d878e929 [ 454.268821][ T8382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.288628][ T8382] RSP: 002b:00007f16d9683038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 454.297059][ T8382] RAX: ffffffffffffffda RBX: 00007f16d89b5fa0 RCX: 00007f16d878e929 [ 454.305128][ T8382] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 454.313126][ T8382] RBP: 00007f16d8810b39 R08: 0000200000000140 R09: 0000000000000000 [ 454.321103][ T8382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.329265][ T8382] R13: 0000000000000000 R14: 00007f16d89b5fa0 R15: 00007fff9a7a21f8 [ 454.337256][ T8382] [ 454.340408][ T8382] Kernel Offset: disabled [ 454.344816][ T8382] Rebooting in 86400 seconds..