last executing test programs: 10m33.833544366s ago: executing program 32 (id=251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 10m23.633179964s ago: executing program 33 (id=319): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x204031, 0xffffffffffffffff, 0xffffd000) sync() 9m40.701388896s ago: executing program 34 (id=636): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfd, 0x6242, &(0x7f00000000c0)="$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") 9m38.260605484s ago: executing program 35 (id=659): r0 = syz_io_uring_setup(0x892, &(0x7f0000000340)={0x0, 0xaee2, 0x0, 0x2, 0xbbdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 9m29.401720378s ago: executing program 36 (id=734): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000380)="b3", 0x1}], 0x1) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 9m16.544310588s ago: executing program 37 (id=781): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r1, 0x3516, 0x483, 0x0, 0x0, 0x0) 6m36.692531916s ago: executing program 38 (id=2123): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1, 0x400, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "7b442856bfec870b"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x202, 0x80000000, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "4c86b8b1f25c1517"}}, 0x48}}, 0x40000) 4m34.853870546s ago: executing program 39 (id=3158): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x3, &(0x7f0000000500)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0x103, r0, 0x0}, 0x0, 0x0]) 3m56.311759195s ago: executing program 4 (id=3494): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 3m56.153004276s ago: executing program 4 (id=3497): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x8, 0x100000, 0xd43a, 0x3, 0xb8]}, &(0x7f0000000080)=0x54) 3m54.857658585s ago: executing program 4 (id=3511): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m54.625850098s ago: executing program 4 (id=3514): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a7, &(0x7f0000000480)="$eJzs3E9rE10Ux/HzNH2aNKVNBBEU1INudDO08QVokBbEgFKboi6EqZ1oyJiUmVCJiM1G3Po6ikt3grp00424ce+uCIKbLsQRZzJt0qbt9E+amH4/UO5Jzv0xt21aTgqd1buvn5QKrlEwqzKQUBkQqcuaSPpv1fBfYx3w6yFpVpfLIz+/nr1z7/7NbC43Oa06lZ25klHVsfPvnz5/c+FjdWT2U2Pz6o/Mt5VTK6dXf888LrpadLVcqaqpc5VK1ZyzLZ0vuiVD9bZtma6lxbJrOS39gl1ZWKipWZ4fTS44luuqWa5pyapptaJVp6bmI7NYVsMwdDQpx9tghD355elpM7tt24sd6onQccPtnnScbL19M798BGcCAAA9Zuf5P5j1t5//c7PBusv8/3bsXVxW0g+izv8izP8dUm95tMv8j77gOFkz2fj5bcX8DwAAAAAAAAAAAAAAAAAAAADAv2DN81Ke56XCNfyIi0hCRMLH3T4nOmOf3/+rXTouDlnTP+4lROxXi/nFfLAG/WxBimKLJeOSkl/+66EhqKdu5CbH1ZeWD/ZSI7+0mI9JPMyH0u3y505MBHltzf8vyebrZyQlJ9tfP9M2PySXLjblDUnJ54dSEVvm/df1Rv7FhOr1W7lN+WF/HwAAAAAA/cDQdVvev/t9f0NCtvaD/B7+PrDp/fWgnIlyi0oAAAAAAHBgbu1ZybRty9lHEReRA8T7tYhJTxxjU3FNRHrgGEdVJEQkeEb3E/++Ho+U8iLsGRSRrn9Z9lB0+zcTAAAAgMO2MfTvIfTlZQdPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8RP1fmDh/i2tsLFDvOlysSP/BAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAe8icAAP//+UgeFQ==") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) umount2(&(0x7f0000001a40)='./file0/../file0\x00', 0x5) 3m54.189687519s ago: executing program 4 (id=3520): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x40000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) 3m53.669566964s ago: executing program 4 (id=3526): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$media(&(0x7f0000000000), 0x2, 0x0) 3m53.181740267s ago: executing program 40 (id=3526): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$media(&(0x7f0000000000), 0x2, 0x0) 3m43.236027072s ago: executing program 6 (id=3594): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x5}, 0x10}, 0x94) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 3m42.968941938s ago: executing program 6 (id=3596): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) 3m42.589816428s ago: executing program 6 (id=3599): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 3m41.773683638s ago: executing program 6 (id=3605): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 3m40.071301025s ago: executing program 6 (id=3608): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x800000, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x547, &(0x7f0000001f80)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) 3m39.098519527s ago: executing program 6 (id=3614): r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000bf00)=@newtaction={0x114, 0x30, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{0x100, 0x1, [@m_police={0xfc, 0x18, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffffffffff, 0x4, 0x3, 0x1, {0x95, 0x1, 0xb, 0x8, 0xf6, 0xfffffffa}, {0x9, 0x0, 0xff, 0x8, 0x1bed, 0x9}, 0x8000000, 0x80000001, 0x3e}}]]}, {0x91, 0x6, "d087ea06528c49fdd2f8773f075474c04e24bc674ffa7ff4197b8c118cc36a8e001b7d028a120757d4654d50a353ead91a7a8f546058e1e06aeba141f04e8c8f60d4a6dd1d10e16ae223becd5c2583c59cc4e64da4c9326fcb393fb3bb6f5f78d65fac872fcc3379a2a19a96bc60620de4fbf47ad7465e3d683e455b7be48a691989371090b6663fb5bc5955c4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 3m38.324739472s ago: executing program 41 (id=3614): r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000bf00)=@newtaction={0x114, 0x30, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{0x100, 0x1, [@m_police={0xfc, 0x18, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffffffffff, 0x4, 0x3, 0x1, {0x95, 0x1, 0xb, 0x8, 0xf6, 0xfffffffa}, {0x9, 0x0, 0xff, 0x8, 0x1bed, 0x9}, 0x8000000, 0x80000001, 0x3e}}]]}, {0x91, 0x6, "d087ea06528c49fdd2f8773f075474c04e24bc674ffa7ff4197b8c118cc36a8e001b7d028a120757d4654d50a353ead91a7a8f546058e1e06aeba141f04e8c8f60d4a6dd1d10e16ae223becd5c2583c59cc4e64da4c9326fcb393fb3bb6f5f78d65fac872fcc3379a2a19a96bc60620de4fbf47ad7465e3d683e455b7be48a691989371090b6663fb5bc5955c4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 2m40.140723043s ago: executing program 8 (id=4144): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x3}) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) 2m39.84914042s ago: executing program 8 (id=4149): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0x15, 0x5, "153c140b35"}, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x81, 0x1, "99"}, 0x0, 0x0, 0x0, 0x0}) 2m37.337339447s ago: executing program 8 (id=4170): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) 2m37.118554951s ago: executing program 8 (id=4174): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 2m36.428594393s ago: executing program 8 (id=4180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2m35.609571556s ago: executing program 8 (id=4185): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLL', 0x3, 0x2}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) 2m35.041938406s ago: executing program 42 (id=4185): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLL', 0x3, 0x2}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) 1m0.390643376s ago: executing program 7 (id=5038): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, "b0d5b301d1f8337291bd9c59c55dc059097d659cfe0320cadd0901cd3b14689e1c77bcf683e35c68f0455930ab19ce80052e1b4d478fc7c371bd292e05a810", 0x3a}, 0x80, 0x0}}], 0x1, 0x48094) 59.250618657s ago: executing program 7 (id=5051): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r0, 0x208) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={0x0, 0xd}, 0x8) 58.886904328s ago: executing program 7 (id=5055): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffef4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 58.613432432s ago: executing program 7 (id=5057): syz_mount_image$minix(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="0049cef4df796851925f86c004000000e4cf62dc777d55387afc4a70d087ede499a199c4d7e87a07cdb3e45fc513a1f97b0b9047144790d8f3affa2044cbd987208cf1dcd4ec17f5138b1f4efbdc2a7be39782db000000000000002c2e5cf00c404f4a3246fb740282b4265c2c2c686173682c00181f302d7cd22530b02054463a3dd16b847ce0f9c3bd119a1498eb8cc1ae04dee8bfa77d492c96fd54cb0abb83366c6b4d4785b8103b6ea5ce14afc0ebaae0f62832e93c0cd17b2130111d313bea3d9ab4738453538e448d770b602e104974e6cd92f7d589103fde2331f870b425e8776f9e2152dec6551ec1f61ced64b19c9e56"], 0x5, 0x18e, &(0x7f0000002780)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x40000008005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x202]}) 58.114616437s ago: executing program 7 (id=5060): r0 = socket(0x28, 0x1, 0x0) r1 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) 56.597907548s ago: executing program 7 (id=5079): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000300)) 56.224673964s ago: executing program 43 (id=5079): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000300)) 14.850693268s ago: executing program 2 (id=5505): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000200)) 12.272431941s ago: executing program 2 (id=5531): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000003c0)={0x40, 0x10, 0x4, "7792a2a0"}, 0x0, 0x0, 0x0, 0x0}) 6.997059265s ago: executing program 2 (id=5556): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 5.202646603s ago: executing program 0 (id=5573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) semctl$IPC_INFO(0x0, 0x2, 0x3, 0x0) 5.019032523s ago: executing program 0 (id=5577): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 4.730593542s ago: executing program 0 (id=5579): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x44040) recvmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 4.512930995s ago: executing program 0 (id=5585): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="400323"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.006467834s ago: executing program 3 (id=5589): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x96) close(r0) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) 3.923704967s ago: executing program 5 (id=5590): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000040)={0x18, r1}) 3.718730016s ago: executing program 5 (id=5592): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="19", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 3.666657531s ago: executing program 3 (id=5593): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000800)={@flat=@binder={0x73622a85, 0xa, 0x0, 0x38}, @flat=@weak_handle={0x77682a85, 0xb, 0x1}, @fda={0x66642a85, 0x3, 0x1, 0x1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) 3.538914021s ago: executing program 3 (id=5595): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000940)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) close(0x3) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x1000) 3.5043458s ago: executing program 5 (id=5596): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) 3.186681463s ago: executing program 3 (id=5597): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 3.186063743s ago: executing program 5 (id=5598): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983", 0x13}], 0x1, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}, 0x4004080) 3.184843331s ago: executing program 1 (id=5599): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.010653688s ago: executing program 2 (id=5600): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) unshare(0x28000600) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x10, 0x0) unshare(0xc000400) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2.945862105s ago: executing program 1 (id=5601): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xec23, 0x488, 0x3, 0x15f}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x4, 0x0, &(0x7f0000001740)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.369416279s ago: executing program 5 (id=5602): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file1\x00', 0x200800, &(0x7f00000001c0), 0x1, 0x968d, &(0x7f000001fd00)="$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") openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) 2.295534704s ago: executing program 1 (id=5603): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24048c00}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r2) 1.986467162s ago: executing program 3 (id=5604): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001600), 0xfc, 0x559e, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000dcd80)={0xffffffffffffffff, [], 0x6, "e51b9845992cdc"}) 1.558745168s ago: executing program 9 (id=5605): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) 1.547895163s ago: executing program 0 (id=5606): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x40, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x0, 0x800000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1.336790662s ago: executing program 0 (id=5607): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x20048880) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000f80)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x20, 0x80, 0x1c, {0x1, 0x2, 0x5, 0x116f, 0xaec8, 0x6, 0x1fb, 0xce, 0x97, 0x8001, 0x0, 0x202}}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) 1.272522377s ago: executing program 1 (id=5608): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080), 0x0}, 0x20) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1.271361322s ago: executing program 9 (id=5609): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="2002b9000000ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x0, 0x8, 0x4, "8e1f559f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000600)={0x0, 0x1, 0x4, "884ff5d8"}, 0x0, 0x0}) 1.070572987s ago: executing program 1 (id=5610): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) io_uring_enter(r0, 0x7277, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.056048113s ago: executing program 2 (id=5611): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x30, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x4, 0x2, 0x0, 0x9, 0xfffd, 0x7f]}}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x580, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffe, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 793.212127ms ago: executing program 1 (id=5612): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 706.7514ms ago: executing program 2 (id=5613): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) syz_clone(0x80, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 607.705928ms ago: executing program 9 (id=5614): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 431.358873ms ago: executing program 9 (id=5615): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x20000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000149202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, 0x0) 212.182552ms ago: executing program 9 (id=5616): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0xca56c000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 210.74357ms ago: executing program 3 (id=5617): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x48}, 0x94) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) 166.752065ms ago: executing program 5 (id=5618): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 0s ago: executing program 9 (id=5619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): [T18077] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 667.053924][T18077] ntfs3(loop5): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ntfs_sync_inode failed, -22. [ 667.087487][T18084] loop3: detected capacity change from 0 to 2048 [ 667.138847][T18084] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 667.173005][T18084] UDF-fs: Scanning with blocksize 512 failed [ 667.204663][T18084] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 667.292089][ T3524] ntfs3(loop5): ino=1e, ntfs3_write_inode failed, -22. [ 667.813455][T18104] netlink: 'syz.9.4320': attribute type 1 has an invalid length. [ 667.967755][T18104] bond2: entered promiscuous mode [ 668.040626][T18104] 8021q: adding VLAN 0 to HW filter on device bond2 [ 668.134999][T18109] 8021q: adding VLAN 0 to HW filter on device bond2 [ 668.153874][T18109] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 668.175143][T18109] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 668.185704][T18109] bond2: (slave gre1): Opening slave failed [ 668.238454][T18113] netlink: 'syz.3.4322': attribute type 2 has an invalid length. [ 668.589665][T18135] ªªªªªª: renamed from wg2 [ 668.813581][T18140] bond0: entered promiscuous mode [ 668.819068][T18140] bond_slave_0: entered promiscuous mode [ 668.821636][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4337'. [ 668.826555][T18140] bond_slave_1: entered promiscuous mode [ 668.842546][T18140] bridge_slave_1: entered promiscuous mode [ 668.849828][T18140] batadv0: entered promiscuous mode [ 668.860261][T18140] debugfs: 'hsr0' already exists in 'hsr' [ 668.867971][T18145] loop3: detected capacity change from 0 to 2048 [ 668.870167][T18140] Cannot create hsr debugfs directory [ 668.882126][T18140] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 668.892868][T18140] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 668.904713][T18140] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 668.926318][T18145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.065912][T18145] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 669.088570][T18145] overlayfs: failed to verify upper root origin [ 669.248776][T12263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.501087][T18167] tipc: New replicast peer: 0.0.0.0 [ 669.507122][T18167] tipc: Enabled bearer , priority 10 [ 669.569340][T18168] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 669.970288][T18172] loop7: detected capacity change from 0 to 32768 [ 670.054686][T18172] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4348 (18172) [ 670.564903][T18183] netlink: 'syz.5.4353': attribute type 10 has an invalid length. [ 670.591123][T18183] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4353'. [ 670.795821][ T6370] block nbd0: Possible stuck request ffff888026287000: control (read@0,1024B). Runtime 540 seconds [ 670.818808][T18172] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 670.829281][T18172] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 671.044736][T18172] BTRFS info (device loop7): enabling ssd optimizations [ 671.053358][T18172] BTRFS info (device loop7): turning on async discard [ 671.060478][T18172] BTRFS info (device loop7): enabling free space tree [ 671.090411][T18174] loop0: detected capacity change from 0 to 131072 [ 671.106642][T18174] F2FS-fs (loop0): invalid crc value [ 671.134870][T12900] tipc: Node number set to 3758096385 [ 671.222357][T18174] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 671.234754][T18174] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 671.244286][ T7258] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 671.804187][T18174] F2FS-fs (loop0): project quota file already specified [ 671.820732][T18215] netlink: 'syz.5.4360': attribute type 10 has an invalid length. [ 671.874841][T18215] syz_tun: entered promiscuous mode [ 671.927290][T18215] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 672.402534][T18227] loop5: detected capacity change from 0 to 2031 [ 672.441439][T18227] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 672.461777][T18228] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4359'. [ 672.504658][T18206] loop3: detected capacity change from 0 to 32768 [ 672.566642][T18206] [ 672.566642][T18206] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 672.566642][T18206] [ 672.595287][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 672.595308][ T30] audit: type=1800 audit(1764685684.546:536): pid=18206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4356" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 672.652131][T18206] ERROR: (device loop3): diWrite: ixpxd invalid [ 672.652131][T18206] [ 672.677071][T18206] ERROR: (device loop3): txAbort: [ 672.677071][T18206] [ 672.713074][T18206] [ 672.713074][T18206] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 672.713074][T18206] [ 672.734024][T18206] [ 672.734024][T18206] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 672.734024][T18206] [ 672.762007][T18206] [ 672.762007][T18206] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 672.762007][T18206] [ 672.797585][T18206] [ 672.797585][T18206] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 672.797585][T18206] [ 672.831906][T18206] [ 672.831906][T18206] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 672.831906][T18206] [ 673.022655][T12263] [ 673.022655][T12263] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 673.022655][T12263] [ 673.050500][T12263] [ 673.050500][T12263] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 673.050500][T12263] [ 674.070119][ T48] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 674.232243][ T48] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 674.251775][ T48] usb 6-1: config 0 has no interface number 0 [ 674.257910][ T48] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 674.280081][ T48] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 674.293753][ T48] usb 6-1: config 0 interface 255 has no altsetting 0 [ 674.301887][ T48] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 674.314594][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.325730][ T48] usb 6-1: config 0 descriptor?? [ 674.335802][ T48] cp210x 6-1:0.255: cp210x converter detected [ 674.600164][T12896] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 674.770397][ T48] cp210x 6-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 674.781649][T12896] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 674.800424][T12896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.821633][T12896] usb 2-1: config 0 descriptor?? [ 674.832172][T12896] cp210x 2-1:0.0: cp210x converter detected [ 674.850684][T18279] loop0: detected capacity change from 0 to 32768 [ 674.877287][T18279] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 674.970890][T18291] veth3: entered promiscuous mode [ 674.981130][T18279] XFS (loop0): Ending clean mount [ 674.996898][ T48] cp210x 6-1:0.255: GPIO initialisation failed: -19 [ 675.004115][T18279] XFS (loop0): Quotacheck needed: Please wait. [ 675.033383][ T48] usb 6-1: cp210x converter now attached to ttyUSB0 [ 675.104944][T18279] XFS (loop0): Quotacheck: Done. [ 675.194697][ T30] audit: type=1804 audit(1764685687.156:537): pid=18279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4386" name="/newroot/110/file1/file1" dev="loop0" ino=6150 res=1 errno=0 [ 675.231501][ T48] usb 6-1: USB disconnect, device number 10 [ 675.279855][ T48] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 675.289234][ T48] cp210x 6-1:0.255: device disconnected [ 675.367117][T15985] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 675.435311][T12896] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 675.444465][T12896] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 675.455257][T12896] usb 2-1: cp210x converter now attached to ttyUSB0 [ 675.514850][T12896] usb 2-1: USB disconnect, device number 29 [ 675.524492][T12896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 675.534696][T12896] cp210x 2-1:0.0: device disconnected [ 675.764317][T18313] loop3: detected capacity change from 0 to 2048 [ 675.807504][T18313] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 676.385411][T18327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4402'. [ 676.528583][T18317] loop5: detected capacity change from 0 to 65536 [ 676.584339][T18317] XFS (loop5): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 676.616992][T18317] XFS (loop5): Ending clean mount [ 676.624062][T18317] XFS (loop5): Quotacheck needed: Please wait. [ 676.630264][ T48] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 676.745250][T18317] XFS (loop5): Quotacheck: Done. [ 676.783887][ T48] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 676.806629][ T48] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 676.819981][ T48] usb 1-1: config 1 interface 0 has no altsetting 0 [ 676.840857][ T48] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 676.859999][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.868010][ T48] usb 1-1: Product: syz [ 676.879972][ T48] usb 1-1: Manufacturer: syz [ 676.884581][ T48] usb 1-1: SerialNumber: syz [ 676.912287][T18329] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 676.919577][T18329] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 676.953358][T17768] XFS (loop5): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 677.529218][T18357] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4414'. [ 677.918156][T18365] netlink: 'syz.9.4418': attribute type 10 has an invalid length. [ 677.936575][T18365] syz_tun: entered promiscuous mode [ 677.953092][T18365] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 678.023884][ T48] (unnamed net_device) (uninitialized): Assigned a random MAC address: 26:8b:ff:8a:d0:c8 [ 678.078052][ T48] rtl8150 1-1:1.0: eth13: rtl8150 is detected [ 678.110600][ T48] usb 1-1: USB disconnect, device number 11 [ 678.373544][T18359] loop7: detected capacity change from 0 to 32768 [ 678.391611][T18359] [ 678.391611][T18359] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 678.391611][T18359] [ 678.442467][T18359] ERROR: (device loop7): diWrite: ixpxd invalid [ 678.442467][T18359] [ 678.462838][T18359] ERROR: (device loop7): txAbort: [ 678.462838][T18359] [ 678.490232][T18359] jfs_readdir: bad index table [ 678.555288][ T13] ERROR: (device loop7): diWrite: ixpxd invalid [ 678.555288][ T13] [ 678.579094][ T13] ERROR: (device loop7): txAbort: [ 678.579094][ T13] [ 678.604189][ T13] jfs_write_inode: jfs_commit_inode failed! [ 678.621526][ T7258] [ 678.621526][ T7258] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 678.621526][ T7258] [ 678.644569][ T7258] [ 678.644569][ T7258] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 678.644569][ T7258] [ 680.088687][ T1132] bridge_slave_1: left allmulticast mode [ 680.118742][ T1132] bridge_slave_1: left promiscuous mode [ 680.164375][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.251932][ T1132] bridge_slave_0: left allmulticast mode [ 680.299432][ T1132] bridge_slave_0: left promiscuous mode [ 680.345556][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.869827][T18426] loop5: detected capacity change from 0 to 32768 [ 680.969228][T18413] loop0: detected capacity change from 0 to 131072 [ 680.983082][T18413] F2FS-fs (loop0): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 680.991739][T18413] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 681.002341][T18413] F2FS-fs (loop0): invalid crc value [ 681.011830][T18426] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 681.020633][T18426] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 681.047582][T18426] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 681.057736][T12876] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 681.081788][T18413] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 681.092750][T18413] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 681.094904][T12876] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 681.099786][T18413] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 681.248799][T18413] fscrypt (loop0, inode 8): Error -61 getting encryption context [ 681.255678][T12876] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 160ms [ 681.295521][T12876] gfs2: fsid=syz:syz.0: jid=0: Done [ 681.320586][T18426] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 681.888257][T18452] loop3: detected capacity change from 0 to 512 [ 681.945004][T18452] EXT4-fs: Ignoring removed nobh option [ 682.060422][T18452] EXT4-fs (loop3): orphan cleanup on readonly fs [ 682.081120][T18452] EXT4-fs warning (device loop3): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 682.093858][T18452] EXT4-fs warning (device loop3): dx_probe:848: Enable large directory feature to access it [ 682.105140][T18452] EXT4-fs warning (device loop3): dx_probe:933: inode #2: comm syz.3.4456: Corrupt directory, running e2fsck is recommended [ 682.135801][T18452] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 682.144467][T18452] EXT4-fs error (device loop3): ext4_iget_extra_inode:5070: inode #15: comm syz.3.4456: corrupted in-inode xattr: invalid ea_ino [ 682.158415][T18452] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.4456: couldn't read orphan inode 15 (err -117) [ 682.173900][T18452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 682.211266][T18452] EXT4-fs warning (device loop3): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 682.224158][T18452] EXT4-fs warning (device loop3): dx_probe:848: Enable large directory feature to access it [ 682.234394][T18452] EXT4-fs warning (device loop3): dx_probe:933: inode #2: comm syz.3.4456: Corrupt directory, running e2fsck is recommended [ 682.279477][T18452] EXT4-fs warning (device loop3): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 682.331163][T18452] EXT4-fs warning (device loop3): dx_probe:848: Enable large directory feature to access it [ 682.350566][T18452] EXT4-fs warning (device loop3): dx_probe:933: inode #2: comm syz.3.4456: Corrupt directory, running e2fsck is recommended [ 682.397057][T18452] EXT4-fs warning (device loop3): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 682.429230][T18452] EXT4-fs warning (device loop3): dx_probe:848: Enable large directory feature to access it [ 682.455206][T18452] EXT4-fs warning (device loop3): dx_probe:933: inode #2: comm syz.3.4456: Corrupt directory, running e2fsck is recommended [ 682.512507][T18463] EXT4-fs warning (device loop3): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 682.572272][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.715114][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.748906][T12263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.764056][ T1132] bond0 (unregistering): Released all slaves [ 683.227168][T18466] loop5: detected capacity change from 0 to 65536 [ 683.324152][T18466] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 683.358889][T18466] XFS (loop5): Ending clean mount [ 683.365795][T18466] XFS (loop5): Quotacheck needed: Please wait. [ 683.372012][T18460] geneve3: entered allmulticast mode [ 683.438810][T18466] XFS (loop5): Quotacheck: Done. [ 683.584051][T17768] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 683.628296][T18487] loop0: detected capacity change from 0 to 128 [ 683.645513][ T48] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 683.744789][T18487] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 683.793039][T18487] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 683.825032][ T1132] hsr_slave_0: left promiscuous mode [ 683.849989][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 683.857419][ T48] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 683.866086][ T48] usb 4-1: config 0 has no interface number 0 [ 683.872555][ T48] usb 4-1: config 0 interface 32 has no altsetting 0 [ 683.906350][ T1132] hsr_slave_1: left promiscuous mode [ 683.917805][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.943907][ T48] usb 4-1: New USB device found, idVendor=0856, idProduct=bc03, bcdDevice=44.6e [ 683.944739][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.999992][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.008037][ T48] usb 4-1: Product: syz [ 684.043782][ T48] usb 4-1: Manufacturer: syz [ 684.048432][ T48] usb 4-1: SerialNumber: syz [ 684.082678][ T48] usb 4-1: config 0 descriptor?? [ 684.292657][T15985] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 684.749882][ T48] mos7840 4-1:0.32: required endpoints missing [ 684.801557][ T48] usb 4-1: USB disconnect, device number 16 [ 685.180428][T12877] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 685.345587][T12877] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 685.364861][T12877] usb 2-1: config 0 has no interface number 0 [ 685.392103][T12877] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 685.404819][T12877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.427148][T12877] usb 2-1: Product: syz [ 685.439997][T12877] usb 2-1: Manufacturer: syz [ 685.444606][T12877] usb 2-1: SerialNumber: syz [ 685.478462][T12877] usb 2-1: config 0 descriptor?? [ 685.708205][T12877] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 685.730972][T12877] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 685.755318][T12877] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 685.770127][T12876] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 685.784688][T12877] usb 2-1: media controller created [ 685.847986][T12877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 685.943042][T12876] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 685.957047][T12876] usb 4-1: config 0 has no interface number 0 [ 685.987205][T12876] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 686.007082][T12876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.029764][T12876] usb 4-1: Product: syz [ 686.047768][T12876] usb 4-1: Manufacturer: syz [ 686.057845][T12876] usb 4-1: SerialNumber: syz [ 686.092457][T12876] usb 4-1: config 0 descriptor?? [ 686.181629][T12877] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 686.220469][T12900] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 686.303710][T12877] usb 2-1: USB disconnect, device number 30 [ 686.316397][T12876] uvcvideo 4-1:0.64: Found Unit with invalid ID 0 [ 686.331614][T12876] uvcvideo 4-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 686.339713][T12876] uvcvideo 4-1:0.64: No valid video chain found. [ 686.358522][T12876] usb 4-1: USB disconnect, device number 17 [ 686.419564][T12900] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 686.428155][T12900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.479869][T12900] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 686.502181][T12900] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 686.524005][T18541] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4485'. [ 686.532166][T12900] usb 6-1: Manufacturer: syz [ 686.553092][T12900] usb 6-1: config 0 descriptor?? [ 686.789976][T12900] rc_core: IR keymap rc-hauppauge not found [ 686.800105][T12900] Registered IR keymap rc-empty [ 686.806801][T12900] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 686.851553][T12900] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input45 [ 686.930616][ C0] igorplugusb 6-1:0.0: Error: urb status = -32 [ 687.008718][T12900] usb 6-1: USB disconnect, device number 11 [ 687.123944][T18553] loop7: detected capacity change from 0 to 1024 [ 687.179007][T18555] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 687.202625][T18553] EXT4-fs: Ignoring removed nobh option [ 687.224404][T18553] EXT4-fs: Ignoring removed bh option [ 687.247197][T18557] loop3: detected capacity change from 0 to 256 [ 687.270966][T18557] exfat: Deprecated parameter 'namecase' [ 687.301971][T18557] exfat: Deprecated parameter 'utf8' [ 687.334746][T18553] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.345312][T18560] dummy0: entered promiscuous mode [ 687.383837][T18560] bond_slave_0: entered promiscuous mode [ 687.389654][T18560] bond_slave_0: left promiscuous mode [ 687.439000][T18557] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 687.452523][T18560] dummy0: left promiscuous mode [ 687.541745][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.548981][T18564] loop0: detected capacity change from 0 to 2048 [ 687.566341][ T1132] IPVS: stop unused estimator thread 0... [ 687.612796][T18566] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 687.621230][T18564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 687.869527][T18574] loop5: detected capacity change from 0 to 1024 [ 687.925473][T18574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 687.964240][T18574] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 688.054306][T18574] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.4498: bg 0: block 112: padding at end of block bitmap is not set [ 688.097726][T18574] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 688.132765][T18574] EXT4-fs (loop5): This should not happen!! Data will be lost [ 688.132765][T18574] [ 688.142933][T18573] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: block 4: comm syz.5.4498: lblock 4 mapped to illegal pblock 4 (length 1) [ 688.161257][T18573] EXT4-fs error (device loop5): ext4_map_blocks:777: inode #15: block 4: comm syz.5.4498: lblock 4 mapped to illegal pblock 4 (length 1) [ 688.220771][T18573] EXT4-fs error (device loop5): ext4_map_blocks:777: inode #15: block 4: comm syz.5.4498: lblock 4 mapped to illegal pblock 4 (length 1) [ 688.263774][T18573] EXT4-fs error (device loop5): ext4_map_blocks:777: inode #15: block 4: comm syz.5.4498: lblock 4 mapped to illegal pblock 4 (length 1) [ 688.279854][T18573] EXT4-fs error (device loop5): ext4_map_blocks:777: inode #15: block 4: comm syz.5.4498: lblock 4 mapped to illegal pblock 4 (length 1) [ 688.388946][T18588] loop0: detected capacity change from 0 to 512 [ 688.407937][T18588] EXT4-fs: Ignoring removed bh option [ 688.417542][T18573] EXT4-fs error (device loop5): ext4_map_blocks:777: inode #15: block 4: comm syz.5.4498: lblock 4 mapped to illegal pblock 4 (length 1) [ 688.420317][T18588] EXT4-fs: Ignoring removed mblk_io_submit option [ 688.453260][T18574] EXT4-fs error (device loop5): ext4_map_blocks:777: inode #15: block 4: comm syz.5.4498: lblock 4 mapped to illegal pblock 4 (length 1) [ 688.468908][T18588] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 688.543700][T18588] EXT4-fs (loop0): 1 truncate cleaned up [ 688.553782][T18588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.637337][ T6021] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: comm kworker/u8:14: lblock 0 mapped to illegal pblock 0 (length 1) [ 688.665931][T15985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.697420][ T6021] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 688.711732][ T6021] EXT4-fs (loop5): This should not happen!! Data will be lost [ 688.711732][ T6021] [ 688.727700][T17768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 689.019789][T18607] loop0: detected capacity change from 0 to 1024 [ 689.028093][T18607] EXT4-fs: Ignoring removed nobh option [ 689.039345][T18607] EXT4-fs: Ignoring removed bh option [ 689.072563][T18607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.294026][T15985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.601692][T18625] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4518'. [ 689.795202][T18632] loop7: detected capacity change from 0 to 1024 [ 689.881500][T18632] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 689.928371][T18632] ext4 filesystem being mounted at /683/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 690.007407][T18632] EXT4-fs error (device loop7): ext4_validate_block_bitmap:440: comm syz.7.4520: bg 0: block 112: padding at end of block bitmap is not set [ 690.023340][T18632] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 690.037127][T18632] EXT4-fs (loop7): This should not happen!! Data will be lost [ 690.037127][T18632] [ 690.080166][T18629] EXT4-fs error (device loop7): ext4_map_blocks:813: inode #15: block 4: comm syz.7.4520: lblock 4 mapped to illegal pblock 4 (length 1) [ 690.124029][T18646] loop5: detected capacity change from 0 to 512 [ 690.150413][T18629] EXT4-fs error (device loop7): ext4_map_blocks:777: inode #15: block 4: comm syz.7.4520: lblock 4 mapped to illegal pblock 4 (length 1) [ 690.151414][T18646] EXT4-fs: Ignoring removed nobh option [ 690.214840][T18629] EXT4-fs error (device loop7): ext4_map_blocks:777: inode #15: block 4: comm syz.7.4520: lblock 4 mapped to illegal pblock 4 (length 1) [ 690.214880][T18646] EXT4-fs (loop5): orphan cleanup on readonly fs [ 690.215231][T18646] EXT4-fs warning (device loop5): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 690.251266][T18629] EXT4-fs error (device loop7): ext4_map_blocks:777: inode #15: block 4: comm syz.7.4520: lblock 4 mapped to illegal pblock 4 (length 1) [ 690.281122][T18629] EXT4-fs error (device loop7): ext4_map_blocks:777: inode #15: block 4: comm syz.7.4520: lblock 4 mapped to illegal pblock 4 (length 1) [ 690.300019][T18646] EXT4-fs warning (device loop5): dx_probe:848: Enable large directory feature to access it [ 690.313347][T18646] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.4526: Corrupt directory, running e2fsck is recommended [ 690.327388][T18629] EXT4-fs error (device loop7): ext4_map_blocks:777: inode #15: block 4: comm syz.7.4520: lblock 4 mapped to illegal pblock 4 (length 1) [ 690.331313][T18646] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 690.361043][T18646] EXT4-fs error (device loop5): ext4_iget_extra_inode:5070: inode #15: comm syz.5.4526: corrupted in-inode xattr: invalid ea_ino [ 690.381006][T18646] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.4526: couldn't read orphan inode 15 (err -117) [ 690.401800][T18632] EXT4-fs error (device loop7): ext4_map_blocks:777: inode #15: block 4: comm syz.7.4520: lblock 4 mapped to illegal pblock 4 (length 1) [ 690.442961][T18646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 690.500482][T18646] EXT4-fs warning (device loop5): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 690.513453][T18655] overlayfs: failed to clone lowerpath [ 690.566305][T18646] EXT4-fs warning (device loop5): dx_probe:848: Enable large directory feature to access it [ 690.600047][T18646] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.4526: Corrupt directory, running e2fsck is recommended [ 690.620730][ T6961] EXT4-fs error (device loop7): ext4_map_blocks:813: inode #15: comm kworker/u8:19: lblock 0 mapped to illegal pblock 0 (length 1) [ 690.651364][T18660] EXT4-fs warning (device loop5): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 690.660503][ T6961] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 690.681214][ T6961] EXT4-fs (loop7): This should not happen!! Data will be lost [ 690.681214][ T6961] [ 690.705394][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 690.715088][T18660] EXT4-fs warning (device loop5): dx_probe:848: Enable large directory feature to access it [ 690.730213][T18660] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.4526: Corrupt directory, running e2fsck is recommended [ 690.838269][T18646] EXT4-fs warning (device loop5): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 690.870108][T18646] EXT4-fs warning (device loop5): dx_probe:848: Enable large directory feature to access it [ 690.930165][T18646] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.4526: Corrupt directory, running e2fsck is recommended [ 690.976753][T18660] EXT4-fs warning (device loop5): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 690.995561][T18673] loop3: detected capacity change from 0 to 1024 [ 691.045605][T18673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.167873][T17768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.344640][T12263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.600091][ T48] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 691.760030][ T48] usb 6-1: Using ep0 maxpacket: 8 [ 691.772684][ T48] usb 6-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 691.786298][ T48] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 691.807153][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.840695][ T48] hub 6-1:32.0: bad descriptor, ignoring hub [ 691.849736][T18708] erspan0: entered promiscuous mode [ 691.853206][ T48] hub 6-1:32.0: probe with driver hub failed with error -5 [ 691.865635][T18708] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4554'. [ 692.156242][T18718] loop0: detected capacity change from 0 to 1024 [ 692.156326][T18717] loop3: detected capacity change from 0 to 512 [ 692.191472][T18718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.216573][T18717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.250617][T18717] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 692.293903][T18725] EXT4-fs error (device loop0): mb_free_blocks:2014: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 692.325230][T18717] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 692.348074][T18717] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 692.351493][ T48] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 692.361141][T18725] EXT4-fs (loop0): Remounting filesystem read-only [ 692.386356][T18717] EXT4-fs (loop3): This should not happen!! Data will be lost [ 692.386356][T18717] [ 692.399460][T18717] EXT4-fs (loop3): Total free blocks count 0 [ 692.405679][T18717] EXT4-fs (loop3): Free/Dirty block details [ 692.411802][T18717] EXT4-fs (loop3): free_blocks=65280 [ 692.441666][T18717] EXT4-fs (loop3): dirty_blocks=1 [ 692.450297][T18717] EXT4-fs (loop3): Block reservation details [ 692.456299][T18717] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 692.473123][T15985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.563865][T12263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.999055][T18734] loop0: detected capacity change from 0 to 32768 [ 693.007691][T18734] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4563 (18734) [ 693.020004][T12900] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 693.033005][T18742] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.4568'. [ 693.044941][T18734] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 693.055692][T18734] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 693.162746][T18734] BTRFS info (device loop0): rebuilding free space tree [ 693.180039][T12900] usb 2-1: Using ep0 maxpacket: 32 [ 693.181740][T18734] BTRFS info (device loop0): disabling free space tree [ 693.187635][T12900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.200024][T18734] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 693.204139][T12900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.226526][ T5999] kernel read not supported for file /dsp1 (pid: 5999 comm: kworker/0:7) [ 693.236848][T12900] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 693.246985][T12900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.258383][T12900] usb 2-1: config 0 descriptor?? [ 693.267000][T12900] hub 2-1:0.0: USB hub found [ 693.310430][T18734] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 693.367015][T18734] BTRFS info (device loop0): setting nodatasum [ 693.386827][T18735] [U]  [ 693.391865][T18734] BTRFS info (device loop0): setting nodatacow [ 693.398045][T18734] BTRFS info (device loop0): turning off barriers [ 693.422426][T18734] BTRFS info (device loop0): force clearing of disk cache [ 693.460256][ T48] usb 6-1: USB disconnect, device number 12 [ 693.524073][T12900] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 693.665435][T15985] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 693.944027][T12900] hid-generic 0003:046D:C31C.002A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 694.239510][T18778] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4579'. [ 694.275008][T18778] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4579'. [ 694.402710][ T48] usb 2-1: USB disconnect, device number 31 [ 694.623468][T12900] kernel read not supported for file /sequencer (pid: 12900 comm: kworker/0:16) [ 694.734625][T18793] netlink: 'syz.5.4584': attribute type 10 has an invalid length. [ 694.817036][T18802] netlink: 'syz.5.4584': attribute type 10 has an invalid length. [ 694.849879][T18793] team0: Port device dummy0 added [ 694.863556][T18803] use of bytesused == 0 is deprecated and will be removed in the future, [ 694.910107][T18803] use the actual size instead. [ 694.986391][T18802] team0: Port device dummy0 removed [ 695.011725][T18802] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 695.171101][T18815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4591'. [ 695.325549][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.334624][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.640282][T12876] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 695.854720][T12876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 695.890043][T12876] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 695.899130][T12876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.941025][T12876] usb 4-1: config 0 descriptor?? [ 695.953006][T18821] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 696.215971][T18841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.225539][T18841] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.282665][T18841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 696.305140][T18829] loop5: detected capacity change from 0 to 32768 [ 696.314769][T18829] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4597 (18829) [ 696.326887][T18846] loop0: detected capacity change from 0 to 512 [ 696.370555][T18829] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 696.382318][T18844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 696.399255][T18829] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 696.410811][T18846] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 696.426731][T18846] System zones: 0-2, 18-18, 34-35 [ 696.452659][T18846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.459422][T12876] elan 0003:04F3:0755.002B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 696.510675][T18846] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 696.529823][T18829] BTRFS info (device loop5): enabling ssd optimizations [ 696.537223][T18829] BTRFS info (device loop5): turning on async discard [ 696.552619][T18829] BTRFS info (device loop5): enabling free space tree [ 696.605249][ T30] audit: type=1800 audit(1764685708.566:538): pid=18829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4597" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 696.689078][ T5999] usb 4-1: USB disconnect, device number 18 [ 696.744948][T15985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.918784][T17768] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 697.130114][T12900] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 697.310194][T12900] usb 1-1: Using ep0 maxpacket: 32 [ 697.325992][T12900] usb 1-1: config 0 has an invalid interface number: 250 but max is 0 [ 697.349860][T12900] usb 1-1: config 0 has no interface number 0 [ 697.373180][T12900] usb 1-1: config 0 interface 250 has no altsetting 0 [ 697.403455][T12900] usb 1-1: New USB device found, idVendor=093a, idProduct=262c, bcdDevice=ae.31 [ 697.435663][T12900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.462074][T18888] input: syz1 as /devices/virtual/input/input46 [ 697.901590][ T7797] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 697.953031][T18896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4615'. [ 697.973730][T12900] usb 1-1: Product: syz [ 697.978052][T12900] usb 1-1: Manufacturer: syz [ 697.982766][T12900] usb 1-1: SerialNumber: syz [ 697.991837][T12900] usb 1-1: config 0 descriptor?? [ 698.001068][T12900] gspca_main: gspca_pac7302-2.14.0 probing 093a:262c [ 698.071125][ T7797] usb 6-1: Using ep0 maxpacket: 8 [ 698.078398][ T7797] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 698.088994][ T7797] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 698.105542][ T7797] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 698.116794][ T7797] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.135165][ T7797] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 698.165055][ T7797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.424471][ T7797] usb 6-1: GET_CAPABILITIES returned 0 [ 698.442065][ T7797] usbtmc 6-1:16.0: can't read capabilities [ 698.662990][T12868] usb 6-1: USB disconnect, device number 13 [ 698.818892][T12900] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input47 [ 699.023658][T12900] usb 1-1: USB disconnect, device number 12 [ 699.092110][T18920] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4622'. [ 699.848886][T18938] loop3: detected capacity change from 0 to 512 [ 700.232509][T18953] loop0: detected capacity change from 0 to 512 [ 700.257465][T18953] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 700.311641][T18953] EXT4-fs (loop0): 1 truncate cleaned up [ 700.346264][T18953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.442163][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.489747][T18967] ªªªªªª: renamed from wg2 [ 700.490438][T18953] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 700.678174][T15985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.905923][T18978] netlink: 428 bytes leftover after parsing attributes in process `syz.0.4649'. [ 701.008547][T18932] loop5: detected capacity change from 0 to 32768 [ 701.079031][T18932] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 701.127084][ T6370] block nbd0: Possible stuck request ffff888026287000: control (read@0,1024B). Runtime 570 seconds [ 701.127133][T18978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4649'. [ 701.271311][T18932] XFS (loop5): Ending clean mount [ 701.292361][T18932] XFS (loop5): Quotacheck needed: Please wait. [ 701.387583][T18932] XFS (loop5): Quotacheck: Done. [ 701.512519][T18994] loop0: detected capacity change from 0 to 2048 [ 701.621864][T18994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.626629][T18996] syzkaller1: entered promiscuous mode [ 701.639758][T18996] syzkaller1: entered allmulticast mode [ 701.706490][T17768] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 701.824510][T18994] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 701.878163][T18994] overlayfs: failed to verify upper root origin [ 702.076474][T15985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.278146][T19003] netlink: 'syz.7.4658': attribute type 2 has an invalid length. [ 702.464686][T19008] kernel read not supported for file /file1 (pid: 19008 comm: syz.0.4659) [ 702.513087][ T30] audit: type=1800 audit(1764685714.476:539): pid=19008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4659" name="file1" dev="mqueue" ino=58516 res=0 errno=0 [ 702.533768][T19011] tipc: Started in network mode [ 702.538674][T19011] tipc: Node identity ac14142f, cluster identity 4711 [ 702.570343][T19011] tipc: New replicast peer: 0.0.0.0 [ 702.606442][T19011] tipc: Enabled bearer , priority 10 [ 702.642653][T19014] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 702.788552][T19017] bond0: entered promiscuous mode [ 702.814202][T19017] bond_slave_0: entered promiscuous mode [ 702.844870][T19017] bond_slave_1: entered promiscuous mode [ 702.867584][T19017] batadv0: entered promiscuous mode [ 702.891930][T19017] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 702.926292][T19017] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 702.934089][T19024] loop7: detected capacity change from 0 to 2048 [ 702.974595][T19024] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 702.993510][T19024] UDF-fs: Scanning with blocksize 512 failed [ 703.050337][T19024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 703.268345][T19005] loop3: detected capacity change from 0 to 32768 [ 703.284408][T19005] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4670 (19005) [ 703.303462][T19005] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 703.314112][T19005] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 703.492306][T19005] BTRFS info (device loop3): rebuilding free space tree [ 703.553351][T19005] BTRFS info (device loop3): disabling free space tree [ 703.570062][T19005] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 703.580647][T19005] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 703.600227][T12900] tipc: Node number set to 2886997039 [ 703.606653][T19005] BTRFS info (device loop3): setting nodatasum [ 703.613188][T19005] BTRFS info (device loop3): setting nodatacow [ 703.619501][T19005] BTRFS info (device loop3): turning off barriers [ 703.630748][T19005] BTRFS info (device loop3): force clearing of disk cache [ 703.686799][ T30] audit: type=1800 audit(1764685715.646:540): pid=19005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4670" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 703.810716][T12263] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 703.826305][T19057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4675'. [ 704.482262][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4678'. [ 704.896734][T19060] loop0: detected capacity change from 0 to 32768 [ 704.925459][T19060] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4677 (19060) [ 704.962607][T19060] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 704.982976][T19060] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 705.095770][T19060] BTRFS info (device loop0): enabling ssd optimizations [ 705.138224][T19060] BTRFS info (device loop0): turning on async discard [ 705.219971][T19060] BTRFS info (device loop0): enabling free space tree [ 705.454751][T19065] loop7: detected capacity change from 0 to 32768 [ 705.573959][T19065] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 705.623326][T15985] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 705.720014][T19065] XFS (loop7): Ending clean mount [ 705.739185][T19065] XFS (loop7): Quotacheck needed: Please wait. [ 705.833857][T19065] XFS (loop7): Quotacheck: Done. [ 706.252896][ T7258] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 706.492352][T19141] input: syz1 as /devices/virtual/input/input48 [ 706.717866][T19149] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4706'. [ 707.021299][T19151] team0: Port device team_slave_0 removed [ 708.008858][T19154] loop0: detected capacity change from 0 to 131072 [ 708.123793][T19154] F2FS-fs (loop0): Test dummy encryption mode enabled [ 708.133501][T19154] F2FS-fs (loop0): invalid crc value [ 708.256011][T19154] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 708.268510][T19154] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 708.883704][ T48] kernel read not supported for file /rfkill (pid: 48 comm: kworker/1:1) [ 709.020136][T19190] overlayfs: failed to clone lowerpath [ 709.027097][T19175] loop5: detected capacity change from 0 to 131072 [ 709.045643][T19175] F2FS-fs (loop5): Test dummy encryption mode enabled [ 709.100816][T19175] F2FS-fs (loop5): invalid crc value [ 709.208023][T19175] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 709.226104][T19175] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 709.341020][T19199] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.4721'. [ 709.601364][T19200] loop3: detected capacity change from 0 to 4096 [ 709.670213][T19210] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 711.043124][T19239] loop0: detected capacity change from 0 to 1024 [ 711.137739][ T30] audit: type=1800 audit(1764685723.096:541): pid=19239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4718" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 711.222837][T19243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 711.268098][T19245] syzkaller1: entered promiscuous mode [ 711.310152][T19245] syzkaller1: entered allmulticast mode [ 711.528419][T19252] netlink: 'syz.0.4756': attribute type 10 has an invalid length. [ 711.588718][T19252] team0: Port device dummy0 added [ 711.607195][T19255] loop7: detected capacity change from 0 to 2048 [ 711.610536][T19257] netlink: 'syz.0.4756': attribute type 10 has an invalid length. [ 711.698167][T19255] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 711.723311][T19257] team0: Port device dummy0 removed [ 711.738945][T19257] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 712.002245][T19255] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 712.095952][T19255] overlayfs: failed to verify upper root origin [ 712.413780][T19277] netlink: 428 bytes leftover after parsing attributes in process `syz.5.4751'. [ 712.475400][T19277] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4751'. [ 712.500388][ T7258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.391596][ T7797] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 713.553363][ T7797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 713.583485][ T7797] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 713.608906][ T7797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.640958][ T7797] usb 2-1: config 0 descriptor?? [ 713.658382][T19287] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 713.667626][T19309] loop3: detected capacity change from 0 to 1024 [ 713.680037][T12877] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 713.715423][T19309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.850041][T12877] usb 1-1: Using ep0 maxpacket: 16 [ 713.890665][T12877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.925845][T12877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.970031][T12877] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 713.990720][T12877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.013676][T12877] usb 1-1: config 0 descriptor?? [ 714.026300][T19316] EXT4-fs error (device loop3): mb_free_blocks:2014: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 714.089841][ T7797] elan 0003:04F3:0755.002C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 714.120578][T19316] EXT4-fs (loop3): Remounting filesystem read-only [ 714.210030][T19301] loop5: detected capacity change from 0 to 32768 [ 714.242810][ T30] audit: type=1800 audit(1764685726.206:542): pid=19301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4762" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 714.300062][ T30] audit: type=1800 audit(1764685726.236:543): pid=19301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4762" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 714.353209][T12900] usb 2-1: USB disconnect, device number 32 [ 714.412297][T12263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.435100][T12877] apple 0003:05AC:024B.002D: fixing up MacBook JIS keyboard report descriptor [ 714.448422][T12877] apple 0003:05AC:024B.002D: unknown global tag 0xe [ 714.460051][T12877] apple 0003:05AC:024B.002D: item 0 1 1 14 parsing failed [ 714.478171][T12877] apple 0003:05AC:024B.002D: parse failed [ 714.484467][T12877] apple 0003:05AC:024B.002D: probe with driver apple failed with error -22 [ 714.637867][T12877] usb 1-1: USB disconnect, device number 13 [ 714.784643][T19328] loop3: detected capacity change from 0 to 64 [ 715.552053][T19353] overlayfs: workdir and upperdir must reside under the same mount [ 715.805254][T19355] overlayfs: missing 'lowerdir' [ 715.852880][T19356] overlayfs: missing 'lowerdir' [ 716.118625][T19337] loop7: detected capacity change from 0 to 32768 [ 716.171593][T19337] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 716.268750][T19337] XFS (loop7): Ending clean mount [ 716.317018][T19337] XFS (loop7): Quotacheck needed: Please wait. [ 716.410758][T19337] XFS (loop7): Quotacheck: Done. [ 716.685179][T19371] macvtap1: entered allmulticast mode [ 716.873888][ T7258] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 716.950534][T19377] netlink: 'syz.5.4792': attribute type 3 has an invalid length. [ 718.509723][T19379] loop0: detected capacity change from 0 to 131072 [ 718.525049][T19379] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 718.533351][T19379] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 718.545301][T19379] F2FS-fs (loop0): invalid crc value [ 718.645022][T19379] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 718.656807][T19379] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 718.663925][T19379] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 718.693123][ T30] audit: type=1800 audit(1764685730.656:544): pid=19379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4793" name="file2" dev="loop0" ino=8 res=0 errno=0 [ 719.001263][T19406] netlink: 212916 bytes leftover after parsing attributes in process `syz.5.4800'. [ 719.380796][T19375] loop3: detected capacity change from 0 to 32768 [ 719.517123][T19375] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 719.679109][T19375] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop3": -EINTR [ 719.679848][T19375] XFS (loop3): log mount failed [ 719.959476][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4808'. [ 721.934801][T19445] loop5: detected capacity change from 0 to 32768 [ 721.957954][T19445] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4815 (19445) [ 721.997451][T19445] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 722.021476][T19445] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 722.115301][T19471] ªªªªªª: renamed from wg2 [ 722.246716][T19445] BTRFS info (device loop5): enabling ssd optimizations [ 722.300051][T19445] BTRFS info (device loop5): turning on async discard [ 722.306893][T19445] BTRFS info (device loop5): enabling free space tree [ 722.676813][T17768] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 722.941736][ T48] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 723.010730][ C1] vkms_vblank_simulate: vblank timer overrun [ 723.028879][T19449] loop3: detected capacity change from 0 to 32768 [ 723.095036][T19449] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 723.112333][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 723.129807][ T48] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 723.140128][ T48] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 723.151454][ T48] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 723.169218][ T48] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.183585][ T48] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 723.193207][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.281762][T19449] XFS (loop3): Ending clean mount [ 723.303726][T19449] XFS (loop3): Quotacheck needed: Please wait. [ 723.430925][ T48] usb 1-1: GET_CAPABILITIES returned 0 [ 723.455496][T19449] XFS (loop3): Quotacheck: Done. [ 723.475793][ T48] usbtmc 1-1:16.0: can't read capabilities [ 723.590102][ T5972] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 723.656302][ T5999] usb 1-1: USB disconnect, device number 14 [ 723.666536][T12263] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 723.756564][ T5972] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 723.780279][ T5972] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 723.791987][ T5972] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 723.804984][ T5972] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 723.815760][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.840324][ T5972] usb 2-1: Product: syz [ 723.844578][ T5972] usb 2-1: Manufacturer: syz [ 723.849214][ T5972] usb 2-1: SerialNumber: syz [ 723.890037][ T5972] usb 2-1: config 0 descriptor?? [ 723.896046][T19501] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 723.925914][T19501] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 723.964079][ T5972] usb 2-1: ucan: probing device on interface #0 [ 724.415404][T19519] netlink: 'syz.7.4833': attribute type 4 has an invalid length. [ 724.470521][T19521] netlink: 'syz.7.4833': attribute type 4 has an invalid length. [ 724.620132][ T5972] ucan 2-1:0.0 can0: registered device [ 724.805984][ T5972] ucan 2-1:0.0 can0: firmware string: #G [ 725.048977][T12900] usb 2-1: USB disconnect, device number 33 [ 725.621766][T19548] can0: slcan on pty30. [ 725.691773][T19552] loop7: detected capacity change from 0 to 256 [ 725.739598][T19552] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 725.777676][T19552] exFAT-fs (loop7): start_clu is invalid cluster(0x400) [ 725.820115][T19547] can0 (unregistered): slcan off pty30. [ 726.116474][T19564] loop5: detected capacity change from 0 to 1024 [ 726.158838][ T30] audit: type=1800 audit(1764685738.116:545): pid=19564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4854" name="bus" dev="loop5" ino=26 res=0 errno=0 [ 726.311667][ T3627] hfsplus: b-tree write err: -5, ino 4 [ 726.684020][T19579] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4861'. [ 726.703915][T19579] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4861'. [ 726.813966][T19557] loop3: detected capacity change from 0 to 32768 [ 726.856780][T19557] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 727.035744][T12263] ocfs2: Unmounting device (7,3) on (node local) [ 727.202160][T19590] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4863'. [ 727.202349][T19589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.378978][T19594] netlink: 'syz.1.4865': attribute type 12 has an invalid length. [ 727.903613][ T5972] kernel write not supported for file /uhid (pid: 5972 comm: kworker/1:6) [ 727.995859][T19607] loop5: detected capacity change from 0 to 1024 [ 728.028181][T19607] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 728.114163][T19607] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 728.127912][T19607] EXT4-fs (loop5): orphan cleanup on readonly fs [ 728.135364][T19607] EXT4-fs error (device loop5): ext4_free_blocks:6705: comm syz.5.4871: Freeing blocks not in datazone - block = 0, count = 4096 [ 728.151109][T19607] EXT4-fs (loop5): 1 orphan inode deleted [ 728.161240][T19607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 728.280990][T17768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.314530][T19645] syzkaller1: entered promiscuous mode [ 729.360634][T19645] syzkaller1: entered allmulticast mode [ 730.140092][ T5999] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 730.250502][T12869] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 730.315636][ T5999] usb 2-1: Using ep0 maxpacket: 32 [ 730.326416][ T5999] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 730.350065][ T5999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.366114][ T5999] usb 2-1: config 0 descriptor?? [ 730.422743][T12869] usb 4-1: Using ep0 maxpacket: 32 [ 730.433725][T12869] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 730.450602][T12869] usb 4-1: config 0 has no interface number 0 [ 730.466426][T12869] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 730.480460][T12869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.505631][T12869] usb 4-1: Product: syz [ 730.510748][T12869] usb 4-1: Manufacturer: syz [ 730.524824][T12869] usb 4-1: SerialNumber: syz [ 730.545144][T12869] usb 4-1: config 0 descriptor?? [ 730.557042][T12869] smsc95xx v2.0.0 [ 730.587269][T19661] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 730.611487][ T5999] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 730.621075][T19661] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 730.663631][ T5999] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 730.678531][ T5999] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 730.701558][ T5999] usb 2-1: media controller created [ 730.748780][ T5999] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 730.791525][T19685] Bluetooth: MGMT ver 1.23 [ 730.919905][ T5999] DVB: Unable to find symbol dib7000p_attach() [ 730.960043][ T5999] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 731.080419][ T5999] rc_core: IR keymap rc-dib0700-rc5 not found [ 731.090130][ T5999] Registered IR keymap rc-empty [ 731.095375][ T5999] dvb-usb: could not initialize remote control. [ 731.121220][ T5999] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 731.140973][ T5999] usb 2-1: USB disconnect, device number 34 [ 731.324607][T19658] loop0: detected capacity change from 0 to 32768 [ 731.443409][T19658] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4890 (19658) [ 731.541088][T19694] loop5: detected capacity change from 0 to 32768 [ 731.561374][ T6370] block nbd0: Possible stuck request ffff888026287000: control (read@0,1024B). Runtime 600 seconds [ 731.575514][T19694] JBD2: Ignoring recovery information on journal [ 731.584515][T19694] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 731.593209][T19694] JBD2: bad block at offset 32 [ 731.607999][ T5999] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 731.617321][T12869] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 731.629526][T19694] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 731.640696][T12869] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 731.653732][T12869] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 731.665595][T12869] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 731.680077][T12869] usb 4-1: USB disconnect, device number 19 [ 731.695624][T19694] OCFS2: ERROR (device loop5): ocfs2_claim_suballoc_bits: Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 731.706899][T19658] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 731.710092][T19694] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 731.729077][T19694] OCFS2: File system is now read-only. [ 731.734590][T19694] (syz.5.4902,19694,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 731.743180][T19694] (syz.5.4902,19694,0):__ocfs2_claim_clusters:2438 ERROR: status = -30 [ 731.751626][T19694] (syz.5.4902,19694,0):__ocfs2_claim_clusters:2446 ERROR: status = -30 [ 731.759898][T19694] (syz.5.4902,19694,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -30 [ 731.768750][T19694] (syz.5.4902,19694,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -30 [ 731.777673][T19694] (syz.5.4902,19694,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30 [ 731.787384][T19694] (syz.5.4902,19694,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30 [ 731.797323][T19694] (syz.5.4902,19694,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30 [ 731.807769][T19694] (syz.5.4902,19694,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 731.819354][T19694] (syz.5.4902,19694,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30 [ 731.828698][T19694] (syz.5.4902,19694,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30 [ 731.838507][T19694] (syz.5.4902,19694,0):ocfs2_lock_allocators:2775 ERROR: status = -30 [ 731.839520][T19658] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 731.847999][T19694] (syz.5.4902,19694,0):ocfs2_write_begin_nolock:1723 ERROR: status = -30 [ 731.864680][T19694] (syz.5.4902,19694,0):ocfs2_write_begin:1887 ERROR: status = -30 [ 732.038838][T17768] ocfs2: Unmounting device (7,5) on (node local) [ 732.101013][T19658] BTRFS info (device loop0): enabling ssd optimizations [ 732.118271][T19658] BTRFS info (device loop0): turning on async discard [ 732.130128][T19658] BTRFS info (device loop0): enabling free space tree [ 732.670029][ T5972] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 732.775252][T15985] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 732.801904][T12869] kernel read not supported for file /dsp (pid: 12869 comm: kworker/0:12) [ 732.826014][T19738] overlayfs: failed to clone lowerpath [ 732.879499][ T5972] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 732.879551][ T5972] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.879619][ T5972] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 732.879661][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.128318][ T5972] usb 2-1: usb_control_msg returned -32 [ 733.148151][ T5972] usbtmc 2-1:16.0: can't read capabilities [ 733.254906][T19742] loop7: detected capacity change from 0 to 4096 [ 733.311114][T19742] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 733.417970][T19742] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 734.513463][T19765] loop0: detected capacity change from 0 to 128 [ 734.540239][ T5972] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 734.561755][T19765] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 734.575384][T19765] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 734.695834][T19770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.710378][ T5972] usb 6-1: Using ep0 maxpacket: 8 [ 734.745409][ T5972] usb 6-1: unable to get BOS descriptor or descriptor too short [ 734.764985][ T5972] usb 6-1: config 4 has an invalid interface number: 30 but max is 0 [ 734.773693][ T5972] usb 6-1: config 4 has no interface number 0 [ 734.785348][ T5972] usb 6-1: config 4 interface 30 has no altsetting 0 [ 734.808927][ T5972] usb 6-1: string descriptor 0 read error: -22 [ 734.816467][ T5972] usb 6-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 734.830156][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.851800][ T5972] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 734.859476][ T5972] dw2102: su3000_power_ctrl: 1, initialized 0 [ 734.867997][ T5972] dvb-usb: bulk message failed: -22 (2/0) [ 734.895869][ T5972] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 734.914662][T15985] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 734.929632][ T5972] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 734.944827][ T5972] usb 6-1: media controller created [ 734.955879][ T5972] dvb-usb: bulk message failed: -22 (6/0) [ 734.993845][ T5972] dw2102: i2c transfer failed. [ 735.009320][ T5972] dvb-usb: bulk message failed: -22 (6/0) [ 735.015394][ T5972] dw2102: i2c transfer failed. [ 735.022184][ T5972] dvb-usb: bulk message failed: -22 (6/0) [ 735.023106][T19775] loop7: detected capacity change from 0 to 4096 [ 735.028032][ T5972] dw2102: i2c transfer failed. [ 735.040013][ T5972] dvb-usb: bulk message failed: -22 (6/0) [ 735.045914][ T5972] dw2102: i2c transfer failed. [ 735.051096][ T5972] dvb-usb: bulk message failed: -22 (6/0) [ 735.057034][ T5972] dw2102: i2c transfer failed. [ 735.062985][ T5972] dvb-usb: bulk message failed: -22 (6/0) [ 735.068798][ T5972] dw2102: i2c transfer failed. [ 735.074109][ T5972] dvb-usb: MAC address: 02:02:02:02:02:02 [ 735.086130][T19758] dvb-usb: bulk message failed: -22 (3/0) [ 735.108992][ T5972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 735.117745][T19758] dw2102: i2c transfer failed. [ 735.131784][T19778] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 735.166547][ T5972] dvb-usb: bulk message failed: -22 (3/0) [ 735.173293][ T30] audit: type=1800 audit(1764685747.126:546): pid=19775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4931" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 735.200037][ T5972] dw2102: command 0x0e transfer failed. [ 735.207834][ T5972] dvb-usb: bulk message failed: -22 (3/0) [ 735.227918][ T5972] dw2102: command 0x0e transfer failed. [ 735.431055][T12877] usb 2-1: USB disconnect, device number 35 [ 735.552588][ T5972] dvb-usb: bulk message failed: -22 (3/0) [ 735.570580][ T5972] dw2102: command 0x0e transfer failed. [ 735.583218][ T5972] dvb-usb: bulk message failed: -22 (3/0) [ 735.603911][ T5972] dw2102: command 0x0e transfer failed. [ 735.609689][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 735.619651][ T5972] dw2102: command 0x51 transfer failed. [ 735.634392][ T5972] dvb-usb: bulk message failed: -22 (5/0) [ 735.673130][ T5972] dw2102: i2c probe for address 0x68 failed. [ 735.689392][ T5972] dvb-usb: bulk message failed: -22 (5/0) [ 735.706349][ T5972] dw2102: i2c probe for address 0x69 failed. [ 735.716466][ T5972] dvb-usb: bulk message failed: -22 (5/0) [ 735.752308][ T5972] dw2102: i2c probe for address 0x6a failed. [ 735.778677][ T5972] dw2102: probing for demodulator failed. Is the external power switched on? [ 735.814039][ T5972] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 735.846655][T19798] can0: slcan on pty34. [ 735.971830][T19796] can0 (unregistered): slcan off pty34. [ 736.000549][ T5972] rc_core: IR keymap rc-tt-1500 not found [ 736.022245][ T5972] Registered IR keymap rc-empty [ 736.046406][ T5972] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 736.095148][ T5972] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input50 [ 736.148334][ T5972] dvb-usb: schedule remote query interval to 250 msecs. [ 736.170309][ T5972] dw2102: su3000_power_ctrl: 0, initialized 1 [ 736.200005][ T5972] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 736.247065][ T5972] usb 6-1: USB disconnect, device number 14 [ 736.549319][ T5972] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 736.830409][T19828] netlink: 'syz.9.4953': attribute type 5 has an invalid length. [ 736.874210][T19828] netlink: 'syz.9.4953': attribute type 1 has an invalid length. [ 737.434370][T19847] vlan2: entered promiscuous mode [ 737.495337][T19847] bridge0: entered promiscuous mode [ 738.403263][T19840] loop7: detected capacity change from 0 to 131072 [ 738.413820][T19840] F2FS-fs (loop7): invalid crc value [ 738.505508][T19840] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 738.515994][T19840] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 739.217307][ T48] kernel write not supported for file bpf-map (pid: 48 comm: kworker/1:1) [ 739.342353][T19862] loop5: detected capacity change from 0 to 131072 [ 739.433451][T19862] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 739.460746][T19862] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 739.539064][T19878] dummy0: entered allmulticast mode [ 739.609241][T19877] dummy0: left allmulticast mode [ 741.790079][T12869] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 741.860005][ T7797] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 741.964126][T12869] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 741.973003][T12869] usb 6-1: config 0 has no interface number 0 [ 741.979323][T12869] usb 6-1: config 0 interface 41 has no altsetting 0 [ 742.012819][T12869] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 742.036765][T12869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.038574][ T7797] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 742.079981][ T7797] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 742.112245][T12869] usb 6-1: Product: syz [ 742.116471][T12869] usb 6-1: Manufacturer: syz [ 742.119135][ T7797] usb 1-1: Product: syz [ 742.121528][T12869] usb 6-1: SerialNumber: syz [ 742.133825][T12869] usb 6-1: config 0 descriptor?? [ 742.134237][ T7797] usb 1-1: Manufacturer: syz [ 742.169019][ T7797] usb 1-1: SerialNumber: syz [ 742.185904][ T7797] usb 1-1: config 0 descriptor?? [ 742.216920][ T7797] ch341 1-1:0.0: ch341-uart converter detected [ 743.155668][T12869] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 743.180362][T12869] usb 6-1: USB disconnect, device number 15 [ 743.253356][ T7797] usb 1-1: failed to send control message: -71 [ 743.280124][ T7797] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 743.316361][ T7797] usb 1-1: USB disconnect, device number 15 [ 743.332436][ T7797] ch341 1-1:0.0: device disconnected [ 743.875168][T20007] loop3: detected capacity change from 0 to 512 [ 743.922208][T20007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.974705][T20007] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 744.015798][ T30] audit: type=1800 audit(1764685755.976:547): pid=20007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5018" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 744.058053][T20017] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5022'. [ 744.069189][T20017] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5022'. [ 744.147402][T12263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.190052][ T5999] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 744.350130][ T5999] usb 1-1: Using ep0 maxpacket: 16 [ 744.362103][ T5999] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 744.374692][ T5999] usb 1-1: config 0 has no interface number 0 [ 744.387918][ T5999] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 744.410334][ T5999] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 744.433158][ T5999] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 744.450260][ T5999] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 744.470553][ T5999] usb 1-1: Product: syz [ 744.480040][ T5999] usb 1-1: SerialNumber: syz [ 744.494732][ T5999] usb 1-1: config 0 descriptor?? [ 744.517003][ T5999] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 744.532406][ T5999] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input51 [ 744.817994][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 745.074749][T20029] loop3: detected capacity change from 0 to 32768 [ 745.131354][T20029] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 745.235346][ T7797] usb 1-1: USB disconnect, device number 16 [ 745.262896][ T7797] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 745.318286][T12263] ocfs2: Unmounting device (7,3) on (node local) [ 746.300438][ T5972] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 746.317550][T20077] loop5: detected capacity change from 0 to 2048 [ 746.346397][T20075] syzkaller1: entered promiscuous mode [ 746.370058][T20075] syzkaller1: entered allmulticast mode [ 746.379394][T20079] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 746.472749][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.494118][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.528183][ T5972] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 746.555391][ T5972] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 746.577365][ T5972] usb 4-1: Manufacturer: syz [ 746.609370][ T5972] usb 4-1: config 0 descriptor?? [ 747.541938][T20097] loop7: detected capacity change from 0 to 64 [ 747.584846][T20095] loop0: detected capacity change from 0 to 4096 [ 747.621377][T20095] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 747.657707][T20097] loop7: detected capacity change from 64 to 63 [ 747.661963][T17768] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 747.689069][ T5972] uclogic 0003:256C:006D.002E: failed retrieving string descriptor #100: -71 [ 747.711994][ T5972] uclogic 0003:256C:006D.002E: failed retrieving pen parameters: -71 [ 747.727242][ T5972] uclogic 0003:256C:006D.002E: failed probing pen v1 parameters: -71 [ 747.738247][ T5972] uclogic 0003:256C:006D.002E: failed probing parameters: -71 [ 747.795464][ T5972] uclogic 0003:256C:006D.002E: probe with driver uclogic failed with error -71 [ 747.832736][ T5972] usb 4-1: USB disconnect, device number 20 [ 748.178703][T20107] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5062'. [ 748.410446][T20114] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5066'. [ 748.422932][T20116] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5065'. [ 748.465220][T20116] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5065'. [ 749.248582][T20134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5075'. [ 749.269122][T20134] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5075'. [ 749.538571][T20143] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5077'. [ 750.171286][T20153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 750.343712][T20159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 750.481312][T20165] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 750.585084][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 750.598974][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 750.620215][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 750.671680][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 750.684382][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 750.710416][ T3627] bridge_slave_0: left allmulticast mode [ 750.721063][T15260] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 750.731549][ T3627] bridge_slave_0: left promiscuous mode [ 750.742825][ T3627] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.760415][T15260] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 750.768245][T15260] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 750.792877][T15260] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 750.811342][T15260] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 751.700496][ T7797] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 751.739549][ T3627] bridge0 (unregistering): left allmulticast mode [ 751.770297][ T5999] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 751.872004][ T7797] usb 1-1: Using ep0 maxpacket: 16 [ 751.896530][ T7797] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 751.913883][ T7797] usb 1-1: config 0 has no interface number 0 [ 751.922912][ T5999] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.950537][ T7797] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 751.951674][ T5999] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 751.969797][ T7797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.978294][ T7797] usb 1-1: Product: syz [ 752.000680][T20199] ref_ctr_offset mismatch. inode: 0x126f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa000002 [ 752.030861][ T5999] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 752.035061][ T7797] usb 1-1: Manufacturer: syz [ 752.044898][ T5999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 752.053057][ T7797] usb 1-1: SerialNumber: syz [ 752.058145][ T5999] usb 4-1: SerialNumber: syz [ 752.079132][ T7797] usb 1-1: config 0 descriptor?? [ 752.100012][ T7797] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 752.106874][ T3627] bond0 (unregistering): left promiscuous mode [ 752.134993][ T3627] bond_slave_0: left promiscuous mode [ 752.153962][ T3627] bond_slave_1: left promiscuous mode [ 752.159621][ T3627] bridge_slave_1: left promiscuous mode [ 752.211817][ T3627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.256269][ T3627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.284900][ T3627] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 752.335627][ T3627] bond0 (unregistering): Released all slaves [ 752.350815][ T5999] usb 4-1: 0:2 : does not exist [ 752.375235][ T5999] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 752.397255][ T3627] bond1 (unregistering): Released all slaves [ 752.408321][ T5999] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 752.449247][T20203] bridge0: port 4(gretap0) entered blocking state [ 752.456123][T20203] bridge0: port 4(gretap0) entered disabled state [ 752.468872][ T5999] usb 4-1: USB disconnect, device number 21 [ 752.481427][T20203] gretap0: entered allmulticast mode [ 752.510428][T20203] gretap0: entered promiscuous mode [ 752.525779][T20203] bridge0: port 4(gretap0) entered blocking state [ 752.533108][T20203] bridge0: port 4(gretap0) entered listening state [ 752.597394][T20206] gretap0: left allmulticast mode [ 752.602879][T20206] gretap0: left promiscuous mode [ 752.608088][T20206] bridge0: port 4(gretap0) entered disabled state [ 752.682406][ T3627] tipc: Disabling bearer [ 752.691382][ T3627] tipc: Left network mode [ 752.841706][T15260] Bluetooth: hci4: command tx timeout [ 753.155314][ T7797] gspca_spca1528: reg_w err -71 [ 753.172690][ T7797] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 753.202916][ T7797] usb 1-1: USB disconnect, device number 17 [ 753.242867][ T3627] batadv0: left promiscuous mode [ 753.289179][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.343044][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.413451][T20212] loop5: detected capacity change from 0 to 32768 [ 753.455888][T20212] [ 753.455888][T20212] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 753.455888][T20212] [ 753.534276][T20212] ERROR: (device loop5): diWrite: ixpxd invalid [ 753.534276][T20212] [ 753.568393][T20212] ERROR: (device loop5): txAbort: [ 753.568393][T20212] [ 753.699387][ T6021] ERROR: (device loop5): diWrite: ixpxd invalid [ 753.699387][ T6021] [ 753.717159][ T6021] ERROR: (device loop5): txAbort: [ 753.717159][ T6021] [ 753.740447][ T6021] jfs_write_inode: jfs_commit_inode failed! [ 753.763999][T17768] [ 753.763999][T17768] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 753.763999][T17768] [ 753.784635][T17768] [ 753.784635][T17768] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 753.784635][T17768] [ 753.898419][T20237] ubi31: attaching mtd0 [ 753.929340][T20237] ubi31 error: ubi_attach_mtd_dev: bad VID header (86015) or data offsets (86079) [ 753.963650][ T7797] kernel write not supported for file [eventfd] (pid: 7797 comm: kworker/1:10) [ 754.596337][ T3627] team0 (unregistering): Port device team_slave_1 removed [ 754.741370][ T3627] team0 (unregistering): Port device team_slave_0 removed [ 754.889167][T20249] loop3: detected capacity change from 0 to 32768 [ 754.922338][T15260] Bluetooth: hci4: command tx timeout [ 754.960818][T20249] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 755.203188][T12263] ocfs2: Unmounting device (7,3) on (node local) [ 755.527447][T20255] loop5: detected capacity change from 0 to 128 [ 755.544433][T20255] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 755.708189][T20258] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 756.143167][T20262] loop3: detected capacity change from 0 to 8192 [ 756.169197][T20262] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 756.429079][T20271] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.5133'. [ 756.687510][T20169] chnl_net:caif_netlink_parms(): no params data found [ 756.766514][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.773522][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.840400][T12869] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 756.917383][T20284] loop5: detected capacity change from 0 to 512 [ 756.949018][T20284] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 756.951117][T20281] bond0: entered promiscuous mode [ 756.959722][T20279] nbd: socks must be embedded in a SOCK_ITEM attr [ 756.964255][T20281] bond_slave_0: entered promiscuous mode [ 756.975516][T20281] bond_slave_1: entered promiscuous mode [ 756.985807][T20287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 757.001105][T12869] usb 1-1: Using ep0 maxpacket: 32 [ 757.006406][T15260] Bluetooth: hci4: command tx timeout [ 757.006523][T20279] block nbd2: shutting down sockets [ 757.014273][T12869] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 757.026699][T12869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.038000][T12869] usb 1-1: config 0 descriptor?? [ 757.048092][T12869] gspca_main: sunplus-2.14.0 probing 041e:400b [ 757.103133][T20284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.144163][T20284] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 757.253579][T20284] EXT4-fs error (device loop5): ext4_do_update_inode:5628: inode #2: comm syz.5.5137: corrupted inode contents [ 757.273658][T20169] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.290244][T20169] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.301491][T20284] EXT4-fs error (device loop5): ext4_dirty_inode:6513: inode #2: comm syz.5.5137: mark_inode_dirty error [ 757.316053][T20169] bridge_slave_0: entered allmulticast mode [ 757.329299][T20169] bridge_slave_0: entered promiscuous mode [ 757.344588][T20284] EXT4-fs error (device loop5): ext4_do_update_inode:5628: inode #2: comm syz.5.5137: corrupted inode contents [ 757.364284][T20169] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.380913][T20169] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.398499][T20169] bridge_slave_1: entered allmulticast mode [ 757.405259][T20284] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.5137: mark_inode_dirty error [ 757.435355][T20169] bridge_slave_1: entered promiscuous mode [ 757.462673][ T30] audit: type=1326 audit(1764685769.426:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20302 comm="syz.3.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8b38f749 code=0x7ffc0000 [ 757.545140][ T3627] IPVS: stop unused estimator thread 0... [ 757.570324][ T30] audit: type=1326 audit(1764685769.426:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20302 comm="syz.3.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8b38f749 code=0x7ffc0000 [ 757.633976][T20169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.653705][ T30] audit: type=1326 audit(1764685769.436:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20302 comm="syz.3.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f5f8b38f749 code=0x7ffc0000 [ 757.686327][T20169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.702452][T17768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.729844][ T30] audit: type=1326 audit(1764685769.436:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20302 comm="syz.3.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8b38f749 code=0x7ffc0000 [ 757.806597][ T30] audit: type=1326 audit(1764685769.436:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20302 comm="syz.3.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8b38f749 code=0x7ffc0000 [ 757.856867][ T30] audit: type=1326 audit(1764685769.446:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20302 comm="syz.3.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5f8b38f749 code=0x7ffc0000 [ 757.914821][ T30] audit: type=1326 audit(1764685769.446:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20302 comm="syz.3.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8b38f749 code=0x7ffc0000 [ 757.927083][T20169] team0: Port device team_slave_0 added [ 757.961980][ T30] audit: type=1326 audit(1764685769.446:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20302 comm="syz.3.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8b38f749 code=0x7ffc0000 [ 757.999734][T20169] team0: Port device team_slave_1 added [ 758.011989][ T30] audit: type=1326 audit(1764685769.446:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20302 comm="syz.3.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f5f8b38f749 code=0x7ffc0000 [ 758.061887][ T30] audit: type=1326 audit(1764685769.446:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20302 comm="syz.3.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8b38f749 code=0x7ffc0000 [ 758.065851][T12869] gspca_sunplus: reg_w_riv err -71 [ 758.116804][T12869] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 758.143493][T12869] usb 1-1: USB disconnect, device number 18 [ 758.159305][T20169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.180048][T20169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.233699][T20169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.247423][T20169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.255353][T20169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.297054][T20169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.451535][T20169] hsr_slave_0: entered promiscuous mode [ 758.468679][T20169] hsr_slave_1: entered promiscuous mode [ 758.480397][T20169] debugfs: 'hsr0' already exists in 'hsr' [ 758.486162][T20169] Cannot create hsr debugfs directory [ 758.988459][T20335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5157'. [ 759.070100][ T7797] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 759.081596][T15260] Bluetooth: hci4: command tx timeout [ 759.168565][T20169] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.232443][ T7797] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 759.261514][ T7797] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 759.300569][ T7797] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 759.309599][ T7797] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 759.345190][ T7797] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 759.389530][ T7797] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 759.419708][ T7797] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 759.445974][ T7797] usb 1-1: Product: syz [ 759.460105][ T7797] usb 1-1: Manufacturer: syz [ 759.466712][T20169] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.485681][ T7797] cdc_wdm 1-1:1.0: skipping garbage [ 759.502571][ T7797] cdc_wdm 1-1:1.0: skipping garbage [ 759.523642][ T7797] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 759.554880][ T7797] cdc_wdm 1-1:1.0: Unknown control protocol [ 759.702323][T20169] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.065776][T20169] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.200151][T20352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5162'. [ 760.547935][T20169] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 760.569496][T20358] loop3: detected capacity change from 0 to 256 [ 760.606138][T20169] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 760.638280][T20358] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 760.644148][T20169] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 760.671290][T20169] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 760.778305][T20366] 9pnet_fd: Insufficient options for proto=fd [ 760.902954][T20169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.917946][T20369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5167'. [ 760.961544][T20169] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.988033][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.995237][ T6021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.044966][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.052171][ T6021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.604637][T20169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.741996][T20169] veth0_vlan: entered promiscuous mode [ 761.800640][T20169] veth1_vlan: entered promiscuous mode [ 761.900139][ T6370] block nbd0: Possible stuck request ffff888026287000: control (read@0,1024B). Runtime 630 seconds [ 761.944409][T20169] veth0_macvtap: entered promiscuous mode [ 761.959769][T12868] usb 1-1: USB disconnect, device number 19 [ 761.966491][T20169] veth1_macvtap: entered promiscuous mode [ 761.998678][T20169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.012547][T20169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.033099][ T6021] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.057085][ T6021] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.105032][ T6021] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.126258][ T6021] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.337623][ T3721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.368773][ T3721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.468971][ T6021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.502761][ T6021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.538803][T20404] loop5: detected capacity change from 0 to 512 [ 762.651430][T20404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.698033][T20387] loop3: detected capacity change from 0 to 32768 [ 762.705700][T20404] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 762.762883][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 762.762911][ T30] audit: type=1800 audit(1764685774.716:559): pid=20404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5179" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 762.805326][T20387] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 762.956217][T20387] (syz.3.5174,20387,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 762.981222][T17768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.201358][T12263] ocfs2: Unmounting device (7,3) on (node local) [ 763.625759][T20433] trusted_key: syz.9.5190 sent an empty control message without MSG_MORE. [ 763.660098][ T5999] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 763.851351][ T5999] usb 6-1: Using ep0 maxpacket: 16 [ 763.870083][ T5999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.891869][ T5999] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 763.917764][ T5999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.961814][ T5999] usb 6-1: config 0 descriptor?? [ 764.219672][T20455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5198'. [ 764.424289][ T5999] mcp2221 0003:04D8:00DD.002F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 764.619561][ T5999] usb 6-1: USB disconnect, device number 16 [ 764.711973][T20470] loop3: detected capacity change from 0 to 2048 [ 764.750709][T20478] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 765.161177][T20493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5214'. [ 765.182405][T20494] netlink: 'syz.9.5215': attribute type 10 has an invalid length. [ 765.453485][T12900] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 765.620058][T12900] usb 2-1: Using ep0 maxpacket: 16 [ 765.628135][T12900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 765.641554][T12900] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 765.651541][T12900] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 765.668742][T12900] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 765.678383][T12900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 765.687739][T12900] usb 2-1: SerialNumber: syz [ 765.696970][T20486] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 765.794934][T12263] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 765.919708][T20486] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 765.947018][T12900] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 765.978038][T12900] usb 2-1: USB disconnect, device number 36 [ 766.152165][T20510] tunl0: Caught tx_queue_len zero misconfig [ 767.043719][T20533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5235'. [ 770.800451][T20592] netlink: 'syz.0.5264': attribute type 83 has an invalid length. [ 770.977277][T20597] netlink: 360 bytes leftover after parsing attributes in process `syz.3.5262'. [ 771.451864][T20612] input: syz1 as /devices/virtual/input/input52 [ 772.900066][ T7797] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 773.004717][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 773.062825][ T7797] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 773.079982][ T7797] usb 2-1: config 1 has no interface number 0 [ 773.086200][ T7797] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 773.120034][ T7797] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 773.139980][ T7797] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 773.159330][ T7797] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 773.162407][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 773.190585][ T7797] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 107, setting to 64 [ 773.212860][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.227413][ T7797] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 773.238199][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 773.246916][ T7797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 773.264294][ T9] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 773.278311][ T7797] usb 2-1: Product: syz [ 773.284538][ T7797] usb 2-1: Manufacturer: syz [ 773.289178][ T7797] usb 2-1: SerialNumber: syz [ 773.301118][ T9] usb 4-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40 [ 773.304138][T20654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 773.327474][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.355448][ T9] usb 4-1: Product: syz [ 773.368670][ T9] usb 4-1: Manufacturer: syz [ 773.382234][ T9] usb 4-1: SerialNumber: syz [ 773.540472][T20654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 773.778861][T20654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 774.038318][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5297'. [ 774.214550][T20654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 774.226605][ T9] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 774.236099][ T7797] cdc_ncm 2-1:1.1: bind() failure [ 774.253990][ T9] cdc_ncm 4-1:1.0: bind() failure [ 774.268036][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 774.285347][ T9] cdc_ncm 4-1:1.1: bind() failure [ 774.303689][ T9] usb 4-1: USB disconnect, device number 22 [ 774.367600][T20686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5302'. [ 774.439423][T12900] usb 2-1: USB disconnect, device number 37 [ 774.487485][T20693] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 778.510037][T12900] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 778.665749][T12900] usb 2-1: Using ep0 maxpacket: 16 [ 778.683117][T12900] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 778.719311][T12900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.741133][T12900] usb 2-1: config 0 descriptor?? [ 778.757867][T20833] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5372'. [ 778.776739][T12900] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 779.180133][T12868] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 779.330142][T12868] usb 6-1: Using ep0 maxpacket: 16 [ 779.337571][T12868] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 779.347227][T12868] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.359098][T12868] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 779.372008][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 779.386071][T12868] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 779.401487][T12868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.411083][T12868] usb 6-1: Product: syz [ 779.417257][T12868] usb 6-1: Manufacturer: syz [ 779.424122][T12868] usb 6-1: SerialNumber: syz [ 779.560153][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 779.576532][ T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 779.586306][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.595693][ T9] usb 3-1: Product: syz [ 779.600439][ T9] usb 3-1: Manufacturer: syz [ 779.610246][ T9] usb 3-1: SerialNumber: syz [ 779.631682][ T9] usb 3-1: config 0 descriptor?? [ 779.796790][T12900] usb 2-1: USB disconnect, device number 38 [ 779.875936][T12868] usb 6-1: 0:2 : does not exist [ 780.058680][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 780.083437][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 780.103323][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 780.111988][ T9] usb 3-1: media controller created [ 780.147958][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 780.201435][T20874] blktrace: Concurrent blktraces are not allowed on loop6 [ 780.309332][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 780.323855][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 780.347793][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 780.372031][T20876] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5392'. [ 780.389176][ T9] usb 3-1: USB disconnect, device number 17 [ 780.500355][T12868] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 780.516509][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 780.600798][T12868] usb 6-1: USB disconnect, device number 17 [ 780.610169][T20880] geneve3: entered promiscuous mode [ 780.632633][T20880] geneve3: entered allmulticast mode [ 781.391293][T20912] loop5: detected capacity change from 0 to 8 [ 781.400207][T12900] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 781.560181][T12900] usb 2-1: Using ep0 maxpacket: 16 [ 781.567564][T12900] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.580126][T12868] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 781.600576][T12900] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 781.626747][T12900] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 781.639782][T12900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.648003][T12900] usb 2-1: Product: syz [ 781.654050][T12900] usb 2-1: Manufacturer: syz [ 781.658664][T12900] usb 2-1: SerialNumber: syz [ 782.578857][T12900] usb 2-1: 0:2 : does not exist [ 782.586456][T12900] usb 2-1: unit 6 not found! [ 782.631826][T12868] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 782.641704][T12868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.659992][T12868] usb 4-1: Product: syz [ 782.664211][T12868] usb 4-1: Manufacturer: syz [ 782.668826][T12868] usb 4-1: SerialNumber: syz [ 782.674922][T12900] usb 2-1: USB disconnect, device number 39 [ 782.694494][T12868] usb 4-1: config 0 descriptor?? [ 782.797761][T20947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5425'. [ 782.963243][ T7797] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 783.095210][T12876] usb 4-1: USB disconnect, device number 23 [ 783.130224][ T7797] usb 1-1: Using ep0 maxpacket: 32 [ 783.142361][ T7797] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 783.162316][ T7797] usb 1-1: config 0 has no interface number 0 [ 783.168452][ T7797] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 783.204281][ T7797] usb 1-1: config 0 interface 85 has no altsetting 0 [ 783.228399][ T7797] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 783.241046][ T7797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.263095][ T7797] usb 1-1: Product: syz [ 783.267289][ T7797] usb 1-1: Manufacturer: syz [ 783.293487][ T7797] usb 1-1: SerialNumber: syz [ 783.314549][ T7797] usb 1-1: config 0 descriptor?? [ 783.340346][ T5972] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 783.504005][ T5972] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 783.519958][ T5972] usb 6-1: config 0 has no interface number 0 [ 783.543952][ T5972] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 783.565819][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.584098][ T5972] usb 6-1: Product: syz [ 783.599157][ T5972] usb 6-1: Manufacturer: syz [ 783.614162][ T5972] usb 6-1: SerialNumber: syz [ 783.630806][ T5972] usb 6-1: config 0 descriptor?? [ 783.763248][T20944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.788260][T20944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.023548][ T7797] appletouch 1-1:0.85: Geyser mode initialized. [ 784.050183][ T7797] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input53 [ 784.090605][ T5972] usb 6-1: Firmware version (0.0) predates our first public release. [ 784.129378][ T5972] usb 6-1: Please update to version 0.2 or newer [ 784.137142][ T5972] usb 6-1: Firmware: build [ 784.247107][ T7797] usb 1-1: USB disconnect, device number 20 [ 784.253228][ C1] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 784.363778][ T5972] usb 6-1: USB disconnect, device number 18 [ 784.432349][ T7797] appletouch 1-1:0.85: input: appletouch disconnected [ 786.224458][T20982] loop5: detected capacity change from 0 to 32768 [ 786.247150][T20982] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5441 (20982) [ 786.288033][T20982] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 786.300420][T12900] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 786.331389][T20982] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 786.486121][T12900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.518154][T12900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.560094][T12900] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 786.581817][T20982] BTRFS info (device loop5): enabling ssd optimizations [ 786.599341][T20982] BTRFS info (device loop5): turning on async discard [ 786.602204][T21025] input: syz1 as /devices/virtual/input/input54 [ 786.606960][T12900] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 786.622070][T12900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.639190][T20982] BTRFS info (device loop5): enabling free space tree [ 786.673113][T12900] usb 1-1: config 0 descriptor?? [ 786.854612][T17768] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 787.130500][T12900] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 787.944468][T21071] bridge0: entered allmulticast mode [ 787.965377][T20941] usb 1-1: USB disconnect, device number 21 [ 788.011971][T21071] pim6reg: entered allmulticast mode [ 788.040371][T21074] pim6reg: left allmulticast mode [ 788.052676][T21074] bridge0: left allmulticast mode [ 788.747616][T21086] netlink: 'syz.0.5476': attribute type 4 has an invalid length. [ 788.835979][T21086] netlink: 'syz.0.5476': attribute type 4 has an invalid length. [ 789.340068][ T5921] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 789.790193][ T5921] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 789.799293][ T5921] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 789.823584][ T5921] usb 1-1: Product: syz [ 789.827779][ T5921] usb 1-1: Manufacturer: syz [ 789.834288][ T5921] usb 1-1: SerialNumber: syz [ 789.843673][ T5921] usb 1-1: config 0 descriptor?? [ 789.852124][ T5921] ch341 1-1:0.0: ch341-uart converter detected [ 789.867921][T21119] netlink: 'syz.3.5504': attribute type 7 has an invalid length. [ 789.944116][T21123] block device autoloading is deprecated and will be removed. [ 789.953888][ T8633] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.963779][T21119] netlink: 'syz.3.5504': attribute type 7 has an invalid length. [ 789.974987][ T8633] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.008504][ T8633] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.087956][ T8633] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.911010][ T5921] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 791.103730][T12900] usb 1-1: USB disconnect, device number 22 [ 791.146590][T12900] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 791.200386][T12900] ch341 1-1:0.0: device disconnected [ 791.920201][T12876] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 791.967722][ T6370] block nbd0: Possible stuck request ffff888026287000: control (read@0,1024B). Runtime 660 seconds [ 792.091316][T12876] usb 4-1: Using ep0 maxpacket: 16 [ 792.101688][T12876] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.130131][T12876] usb 4-1: config 0 interface 0 has no altsetting 0 [ 792.144103][T12876] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 792.172647][T12876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.187755][T12876] usb 4-1: config 0 descriptor?? [ 792.627718][T12876] nzxt-smart2 0003:1E71:2009.0031: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 792.960436][T12900] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 793.017488][T12876] usb 4-1: USB disconnect, device number 24 [ 793.132389][T12900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.144937][T12900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.162473][T12900] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 793.175564][T12900] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 793.184989][T12900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.196058][T12900] usb 2-1: config 0 descriptor?? [ 793.270249][T20941] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 793.422213][T20941] usb 6-1: config 0 has no interfaces? [ 793.431860][T20941] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 793.444072][T20941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.452255][T20941] usb 6-1: Product: syz [ 793.456543][T20941] usb 6-1: Manufacturer: syz [ 793.461484][T20941] usb 6-1: SerialNumber: syz [ 793.474938][T20941] usb 6-1: config 0 descriptor?? [ 793.632005][T12900] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 793.832640][T12876] usb 6-1: USB disconnect, device number 19 [ 794.030165][T12900] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 794.190137][T12900] usb 3-1: Using ep0 maxpacket: 32 [ 794.197758][T12900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.213575][T12900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.224001][T12900] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 794.234503][T12900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.247485][T12900] usb 3-1: config 0 descriptor?? [ 794.250522][ T5972] usb 2-1: USB disconnect, device number 40 [ 794.257998][T12900] hub 3-1:0.0: USB hub found [ 794.656820][T12900] hub 3-1:0.0: 1 port detected [ 794.707111][T21227] loop5: detected capacity change from 0 to 512 [ 795.550566][T12900] hub 3-1:0.0: activate --> -90 [ 796.063281][T12905] usb 3-1: USB disconnect, device number 18 [ 796.075426][T12900] usb 3-1-port1: config error [ 798.181253][T21252] loop5: detected capacity change from 0 to 64 [ 798.292436][ T30] audit: type=1800 audit(1764685810.246:560): pid=21252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5546" name="file2" dev="loop5" ino=22 res=0 errno=0 [ 798.821456][T21264] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 800.310253][T21302] netlink: 830 bytes leftover after parsing attributes in process `syz.5.5567'. [ 800.609503][T21309] netlink: 'syz.5.5569': attribute type 4 has an invalid length. [ 800.662296][T21306] netlink: 'syz.5.5569': attribute type 4 has an invalid length. [ 801.651752][ T30] audit: type=1326 audit(1764685813.616:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21342 comm="syz.3.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8b38f749 code=0x7ffc0000 [ 801.720035][ T30] audit: type=1326 audit(1764685813.616:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21342 comm="syz.3.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8b38f749 code=0x7ffc0000 [ 801.770159][ T30] audit: type=1326 audit(1764685813.616:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21342 comm="syz.3.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f5f8b38f749 code=0x7ffc0000 [ 801.813433][ T30] audit: type=1326 audit(1764685813.616:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21342 comm="syz.3.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8b38f749 code=0x7ffc0000 [ 801.887304][ T30] audit: type=1326 audit(1764685813.616:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21342 comm="syz.3.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8b38f749 code=0x7ffc0000 [ 801.913858][T12905] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 801.952142][T21349] input: syz0 as /devices/virtual/input/input56 [ 802.098574][T12905] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 802.107936][T12905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.128199][T12905] usb 1-1: Product: syz [ 802.154593][T12905] usb 1-1: Manufacturer: syz [ 802.159240][T12905] usb 1-1: SerialNumber: syz [ 802.173162][T12905] usb 1-1: config 0 descriptor?? [ 802.187534][T12905] ch341 1-1:0.0: ch341-uart converter detected [ 802.198115][T21355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 802.295081][T21357] overlayfs: failed to clone lowerpath [ 802.353212][T21358] overlayfs: failed to clone lowerpath [ 803.567434][T12905] ch341-uart ttyUSB0: break control not supported, using simulated break [ 803.579617][T12905] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 803.853890][ T5921] usb 1-1: USB disconnect, device number 23 [ 803.898265][ T5921] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 803.937706][ T5921] ch341 1-1:0.0: device disconnected [ 804.850719][T21407] netlink: 'syz.1.5608': attribute type 12 has an invalid length. [ 804.872395][T21407] netlink: 'syz.1.5608': attribute type 29 has an invalid length. [ 804.882033][T21407] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5608'. [ 804.910149][T21407] netlink: 'syz.1.5608': attribute type 2 has an invalid length. [ 804.918202][T21407] netlink: 23 bytes leftover after parsing attributes in process `syz.1.5608'. [ 805.080063][ T5921] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 805.118660][T21389] loop5: detected capacity change from 0 to 32768 [ 805.205467][T21389] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 805.240595][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 805.274695][ T5921] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 805.290255][ T5921] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 805.300298][ T5921] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 805.311483][ T5921] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 805.320176][T21389] XFS (loop5): Ending clean mount [ 805.321511][ T5921] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 805.341033][ T5921] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 805.350408][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.378868][T21389] XFS (loop5): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:640). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 805.411501][T21389] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x8 [ 805.424897][T21389] XFS (loop5): Unmount and run xfs_repair [ 805.435002][T21389] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 805.446382][T21389] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 805.455588][T21389] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f ................ [ 805.465708][T21389] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91 ......N..b..1... [ 805.484127][T21389] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13 ................ [ 805.510018][T21389] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 805.531488][T21389] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 805.553936][T21389] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 805.580979][T21389] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 805.600263][ T5921] usb 1-1: usb_control_msg returned -32 [ 805.606595][ T5921] usbtmc 1-1:16.0: can't read capabilities [ 805.620099][T21389] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x8 len 4 error 74 [ 805.667650][T21389] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x400/0x920 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 805.708285][T21389] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 805.850859][T17768] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 806.057121][T21420] ================================================================== [ 806.065571][T21420] BUG: KASAN: slab-use-after-free in xfs_inode_item_push+0x705/0x730 [ 806.073676][T21420] Read of size 8 at addr ffff888055334bb8 by task xfsaild/loop5/21420 [ 806.081946][T21420] [ 806.084363][T21420] CPU: 0 UID: 0 PID: 21420 Comm: xfsaild/loop5 Not tainted syzkaller #0 PREEMPT(full) [ 806.084397][T21420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 806.084415][T21420] Call Trace: [ 806.084425][T21420] [ 806.084436][T21420] dump_stack_lvl+0x116/0x1f0 [ 806.084474][T21420] print_report+0xcd/0x630 [ 806.084499][T21420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.084534][T21420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.084568][T21420] ? __phys_addr+0xe8/0x180 [ 806.084618][T21420] ? xfs_inode_item_push+0x705/0x730 [ 806.084674][T21420] kasan_report+0xe0/0x110 [ 806.084707][T21420] ? xfs_inode_item_push+0x705/0x730 [ 806.084771][T21420] xfs_inode_item_push+0x705/0x730 [ 806.084816][T21420] xfsaild+0xc5b/0x2b90 [ 806.084871][T21420] ? __pfx_xfsaild+0x10/0x10 [ 806.084912][T21420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.084948][T21420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.084982][T21420] ? lockdep_hardirqs_on+0x7c/0x110 [ 806.085016][T21420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.085051][T21420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.085085][T21420] ? __kthread_parkme+0x19e/0x250 [ 806.085113][T21420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.085148][T21420] ? __pfx_xfsaild+0x10/0x10 [ 806.085190][T21420] kthread+0x3c5/0x780 [ 806.085224][T21420] ? __pfx_kthread+0x10/0x10 [ 806.085266][T21420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.085300][T21420] ? rcu_is_watching+0x12/0xc0 [ 806.085329][T21420] ? __pfx_kthread+0x10/0x10 [ 806.085364][T21420] ret_from_fork+0x855/0xa50 [ 806.085393][T21420] ? __pfx_ret_from_fork+0x10/0x10 [ 806.085423][T21420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.085457][T21420] ? __switch_to+0x7af/0x10d0 [ 806.085491][T21420] ? __pfx_kthread+0x10/0x10 [ 806.085526][T21420] ret_from_fork_asm+0x1a/0x30 [ 806.085576][T21420] [ 806.085586][T21420] [ 806.265363][T21420] Allocated by task 21389: [ 806.269770][T21420] kasan_save_stack+0x33/0x60 [ 806.274474][T21420] kasan_save_track+0x14/0x30 [ 806.279169][T21420] __kasan_slab_alloc+0x89/0x90 [ 806.284044][T21420] kmem_cache_alloc_noprof+0x250/0x720 [ 806.289515][T21420] xfs_inode_item_init+0x24/0xc0 [ 806.294476][T21420] xfs_trans_ijoin+0xfc/0x160 [ 806.299169][T21420] xfs_icreate+0x10a/0x170 [ 806.303579][T21420] xfs_create+0x72f/0xc10 [ 806.307908][T21420] xfs_generic_create+0x6b3/0x830 [ 806.312950][T21420] vfs_create+0x63a/0x9e0 [ 806.317298][T21420] do_mknodat+0x4f2/0x6f0 [ 806.321642][T21420] __x64_sys_mknod+0x87/0xb0 [ 806.326232][T21420] do_syscall_64+0xcd/0xf80 [ 806.330748][T21420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.336641][T21420] [ 806.338950][T21420] Freed by task 21429: [ 806.343004][T21420] kasan_save_stack+0x33/0x60 [ 806.347699][T21420] kasan_save_track+0x14/0x30 [ 806.352389][T21420] __kasan_save_free_info+0x3b/0x60 [ 806.357594][T21420] __kasan_slab_free+0x5f/0x80 [ 806.362375][T21420] kmem_cache_free+0x328/0x7d0 [ 806.367150][T21420] xfs_inode_free_callback+0x159/0x240 [ 806.372608][T21420] rcu_core+0x72e/0x1500 [ 806.376870][T21420] handle_softirqs+0x219/0x8b0 [ 806.381650][T21420] __irq_exit_rcu+0x109/0x170 [ 806.386342][T21420] irq_exit_rcu+0x9/0x30 [ 806.390597][T21420] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 806.396238][T21420] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 806.402229][T21420] [ 806.404544][T21420] The buggy address belongs to the object at ffff888055334b88 [ 806.404544][T21420] which belongs to the cache xfs_ili of size 264 [ 806.418258][T21420] The buggy address is located 48 bytes inside of [ 806.418258][T21420] freed 264-byte region [ffff888055334b88, ffff888055334c90) [ 806.431986][T21420] [ 806.434305][T21420] The buggy address belongs to the physical page: [ 806.440703][T21420] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888055334000 pfn:0x55334 [ 806.450767][T21420] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 806.458308][T21420] page_type: f5(slab) [ 806.462288][T21420] raw: 00fff00000000000 ffff88801efdbb40 0000000000000000 0000000000000001 [ 806.470971][T21420] raw: ffff888055334000 00000000800c0007 00000000f5000000 0000000000000000 [ 806.479544][T21420] page dumped because: kasan: bad access detected [ 806.485946][T21420] page_owner tracks the page as allocated [ 806.491650][T21420] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x52c50(GFP_NOFS|__GFP_RECLAIMABLE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6132, tgid 6131 (syz.3.46), ts 128206214252, free_ts 35778254434 [ 806.512257][T21420] post_alloc_hook+0x1af/0x220 [ 806.517038][T21420] get_page_from_freelist+0xd0b/0x31a0 [ 806.522510][T21420] __alloc_frozen_pages_noprof+0x25f/0x2440 [ 806.528419][T21420] alloc_pages_mpol+0x1fb/0x550 [ 806.533303][T21420] new_slab+0x24a/0x360 [ 806.537473][T21420] ___slab_alloc+0xee7/0x1cd0 [ 806.542158][T21420] __slab_alloc.constprop.0+0x63/0x110 [ 806.547624][T21420] kmem_cache_alloc_noprof+0x43f/0x720 [ 806.553091][T21420] xfs_inode_item_init+0x24/0xc0 [ 806.558049][T21420] xfs_trans_ijoin+0xfc/0x160 [ 806.562739][T21420] xfs_vn_update_time+0x334/0x590 [ 806.567783][T21420] file_update_time_flags+0x2e6/0x520 [ 806.573164][T21420] kiocb_modified+0x79/0xa0 [ 806.577676][T21420] xfs_file_write_checks+0x578/0xa80 [ 806.582965][T21420] xfs_file_buffered_write+0x15c/0x8f0 [ 806.588425][T21420] xfs_file_write_iter+0x480/0xa70 [ 806.593536][T21420] page last free pid 1 tgid 1 stack trace: [ 806.599502][T21420] __free_frozen_pages+0x7df/0x1160 [ 806.604703][T21420] free_contig_range+0x183/0x4a0 [ 806.609645][T21420] destroy_args+0xc30/0x12d0 [ 806.614240][T21420] debug_vm_pgtable+0x19ec/0x3460 [ 806.619273][T21420] do_one_initcall+0x123/0x680 [ 806.624050][T21420] kernel_init_freeable+0x5c8/0x920 [ 806.629257][T21420] kernel_init+0x1c/0x2b0 [ 806.633606][T21420] ret_from_fork+0x855/0xa50 [ 806.638197][T21420] ret_from_fork_asm+0x1a/0x30 [ 806.642979][T21420] [ 806.645296][T21420] Memory state around the buggy address: [ 806.650914][T21420] ffff888055334a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 806.658983][T21420] ffff888055334b00: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc [ 806.667047][T21420] >ffff888055334b80: fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 806.675103][T21420] ^ [ 806.680985][T21420] ffff888055334c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 806.689049][T21420] ffff888055334c80: fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb [ 806.697103][T21420] ================================================================== [ 806.767482][T21420] Disabling lock debugging due to kernel taint [ 807.816144][T12905] usb 1-1: USB disconnect, device number 24