last executing test programs: 3m14.36889328s ago: executing program 2 (id=91): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000440)={{0x2, 0x4e24, @local}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x2, {0x2, 0x4e24, @local}, 'veth0_macvtap\x00'}) 3m14.110726227s ago: executing program 2 (id=95): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0) 3m13.987667087s ago: executing program 2 (id=96): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="8d6f2811032d68bea0612044f47c2842b275eb4bc53070416c6050e46d2e0d055c97c9e7f9bf0b5d4072798ea32b9c22e3afe4af56eba9024644942e3645a3e6db0d1191090000007d"]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 3m13.63541997s ago: executing program 2 (id=104): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000c00)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c756d61736b3d30303030303030303030303030303030303030303030362c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d85f194712c626172726965722c63726561746f723d25b5e9122c6e6f6465636f6d706f73652c6e6f626172726965722c666f7263652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c6372626172726965722c6e6f621a32b86172726965722c646f6e745f6d65617375757365723d3b5e283a232c0000000000000000"], 0x1, 0x6df, &(0x7f0000000d40)="$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") mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x111800, 0x0) 3m13.318916474s ago: executing program 2 (id=107): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 3m12.499977625s ago: executing program 2 (id=114): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f90d, 0x100, '\x00', @string=&(0x7f0000000100)}}) 3m12.333364435s ago: executing program 32 (id=114): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f90d, 0x100, '\x00', @string=&(0x7f0000000100)}}) 3.422153558s ago: executing program 0 (id=2644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x800}, @val={0x2, 0x4, 0x6, 0x3, 0x80, 0x6}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x8, 0x1c, 0x0, 0x0, 0x9, 0x11, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x14}}, {0x0, 0x4e23, 0x8}}}}, 0x2a) 3.271834271s ago: executing program 5 (id=2645): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @broadcast}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 3.099702634s ago: executing program 5 (id=2647): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000003240)=""/218, 0xda}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000002140)=""/4086, 0xff6}, {&(0x7f0000004680)=""/4094, 0xffe}, {&(0x7f0000000cc0)=""/88, 0x58}], 0xc}, 0x0) 3.062688393s ago: executing program 0 (id=2649): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040ec13060000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "2d02b3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.927030364s ago: executing program 5 (id=2650): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f0000000540)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000004,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,iocharset=iso8859-15,utf8,umask=00000000000000000177777,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,umask=00000000000000000005454,dmask=00000000000000000000011,euid=', @ANYRESDEC, @ANYBLOB=',uid>', @ANYRESDEC, @ANYBLOB="2c7375626a5f747970653d696f636861727365742c7375626a5f747970653d2c99708160e42db27072726f72733d636f6e74696e75652c726f6f74636f6e746578743d73797361646d5f752c7375626a5f757365723dc5b09b45c8a2fec720b73428c62e2e2c7375626a5f726f6c653d666f", @ANYRESDEC=0x0, @ANYBLOB='\x00@'], 0x21, 0x14ff, &(0x7f0000003f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) 2.681912014s ago: executing program 5 (id=2653): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x400002000000803, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f045}) ppoll(&(0x7f0000000040)=[{r0, 0x42}], 0x1, 0x0, 0x0, 0x0) 2.583604663s ago: executing program 4 (id=2655): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000003b40)={&(0x7f0000003b00)=""/24, 0x18}) 2.505155225s ago: executing program 6 (id=2656): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004a00030000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB='('], 0x1c}}, 0x400) 2.24448018s ago: executing program 6 (id=2658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 2.202729857s ago: executing program 4 (id=2659): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000140)={0x28, 0x10002, 0x0, r1, 0x200, 0x7, 0xa, 0x30182e}) 2.063566813s ago: executing program 5 (id=2660): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x11, 0x5109, &(0x7f000000f400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x4}) 1.97142269s ago: executing program 6 (id=2662): syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[@ANYBLOB="005bdefa8134"], 0x1, 0x5bd, &(0x7f0000000680)="$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") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1.934809929s ago: executing program 4 (id=2663): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff690000000000000004bafff200000000861f4104bfeacd1f639265dd530700", 0x28, r1) 1.694323678s ago: executing program 4 (id=2664): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="38000300010003", 0x7) 1.643757575s ago: executing program 3 (id=2666): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000030c0), 0x82200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000003100)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f00000001c0)={0x281, 0x1}) 1.455115616s ago: executing program 4 (id=2667): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x2, r1, 0x0, 0x0, 0xfcd1, 0x2}) 1.391162922s ago: executing program 1 (id=2668): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x13, 0x7c5, 0x1, 0x2, 0xd59f80, 0x4, 0x5, 0xc, 0x2000008, 0x4, 0x722, 0x200, 0x7, 0x8, 0x2b, 0x0, {0xffff945a, 0x1}, 0x3, 0xf1}}) 1.323070318s ago: executing program 6 (id=2669): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x2, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.32199484s ago: executing program 3 (id=2670): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000010c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_dest={0x18}, @rdma_dest={0x18}], 0x30}, 0x0) 1.254963477s ago: executing program 4 (id=2671): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x40, 0xd0, 0x7d, 0x40, 0x1286, 0x1fa4, 0xfb16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0x0, 0x0, 0xee, 0x67, 0x8}}]}}]}}, 0x0) 1.116290478s ago: executing program 1 (id=2672): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x9, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) 1.084162576s ago: executing program 3 (id=2673): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(r0, &(0x7f00000026c0)={0x2, 0x4e24, @loopback}, 0x10) 1.067292757s ago: executing program 1 (id=2674): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) 993.700026ms ago: executing program 0 (id=2675): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000007c0)={0xc, {"a2e3ad21ed0d52f91b5d350887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d020890e0878f0e1ac6e7049b3b6d959bfd9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 973.592132ms ago: executing program 6 (id=2676): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) 863.208525ms ago: executing program 3 (id=2677): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1080c, &(0x7f0000000180)=ANY=[], 0x3, 0xa53, &(0x7f0000000bc0)="$eJzs3U2MW0cdAPBn73rzWeKUhIa0tAmFtgK62+yG8BFBUzUXoqbiVqniEqVpiUgDIpWgVQ5JTtxoFYUb4kOceqkAIdELinriUolG4tJT4cCBKEiROEBLYhTvjNf+x+6zk9196/XvJ43H783YM8/7/PZ53puZAphY9fZjo/146e2Lh//5yD823Xr+ZCdHs/043bV0K3ctLU+H9/tgajG+cf3s8X5xrZhvP+bl4tlrndduKYriXLGnuFw0i92Xrrzx7vwzR88fubD3vTcPXl2JbQcAgEnz7csH9+/821/u3/7hWw8eKjZ01ufz82Za3prO+w+lE/98/l8vepdrXaHbTMg3nUI95Jvqk6+7nEbOt7H3dbH8mfC+jQH5NpSUP9W1rt92wzjL+3GzqNVne5br9dnZxd/kRft3/Uxt9vTJUy+eqaiiwLL790NFUewRhEkLrW2dL0HldakudH0KAJWK1wtvcy62LNydzrtND1f+tafq/V8Py2C193/lx/fvrcdql1+2/b8574jD8hl+b9q4ovVYbnm78vdoa1qO1xHi/UujHn/y+02F92sMWc9B1xHG5frCoHpOrXI97tSg+sf9Yr36Rorz5/DNkN79/Yl/03H5GwP9/WfNtf9vWqpc5XUZKWwc03oLExxa1Rx2gDEQ75trJTk93tcX0zeUpG8sSd9Ukr65JH1LSTpMst+/8tPi9drS7/z4m/7G9bPtL8uw7WG5ne2eFH9ixPrE9shR2+Pifb+jutvy4/3EsJb98dhzJ776wvNXFu//r3X2/5tpf9+Tlpvpu3U5ZcjthbFdvXPvf7O3nPqAfPeG+tzTJ3/7+Y7efLUdS+9TdB1nbqvHrt7XbRuU74HefM2Qb1MK8SpIPD/ZHF6Xzz/ycTV/XtNhexthO2ZCPfJxZXuKx+tqDGtV3h8H3f+f989dRaP24slTJ55Iy3k//fNUY8Ot9ftWud7A3Ru2/8+uorf/z9bO+ka9+7iwbWl9rfu40Azr5wesX0jL+f/cd6c2tdfPHv/+qReWe+Nhwp159bXvHTt16sQPPfHEE086T6o+MgErbe6Vl38wd+bV1x4/+fKxl068dOL0woEDC/PzB762sH+ufV4/1312D6wnS//0q64JAAAAAAAAAAAAMKwfHTl85a/vfOX9xf7/S/3/cv//fOdv7v//k9D/P/aTz/3gcz/A7X3S23nCAKszIV8jhU+G+u4I5ewMr/tUijvz+KX+/7m4OK5rrs99YX0cvzfnC8MJ3DZeykwYgyTOF/jZFF9I8a8LqFDt5/1Xp7hsfOu8r+fxKYxLMZ7y3y2PZ5LHMcn9vweN65SP/9tXoY4sv9XoTlj1NgL9/WvNjf+93kPXL4bK6yKstXCj1WqtZnmtllk8gLWh6vk/c7tnjk//6Vsbb4Wc7dpTvcfLOH4p3I2q57+srPzcsDip2z9k+cs9/2dn/ruhj39hxrzmnZX7319cfb+r2GL3sOXH7c/jQO8YrfwPU/l5ax4thiu/9atQfrwgNKSPQvmbhyw/bv/FUQtOBf4vlZ8/tsceHrb8xTeo1XvrEduN8/W/2G6c3Qjbn8f2HPnvf4cTNd5M5cMkG5d5Zkc1LvP/DhLvw/hyWs4HwnyfQ5zvZNT65/sr8v+BneH9ayX/38z/O96+nuKy70Oe/zfvj80+y/Wu5Uafz3a9HmtgXH3g+p8w5qF9RrMG6jGOodVqrWyDVolKC6fyz7/q3wlVl1/1518mzv8bz+Hj/L8xPc7/G9Pj/L8xvd2u+NHSpL0xPc7/Gz/POP9vTL8vlBvnB95Vkv7pkvTdJen3l6Q/UJL+mZL0vSXpD5akP1SSfm9J+sMl6Z8rSf98SfojJemPfXz6wo9LXr/e5f4ok7r9MMli/zzff5gc+frPoO//jpJ0YHz97K19Tz//u+80F/v/z3TaQ/J1vENpuZF+O8ffS7H9ZCqlvZOW/x7S13p7B0ySOH5G/P/+aEk6ML7yfV6+3zCBav1H7Bl23KpB5/mMly+k+Isp/lKKH0/xbIrnUrwvxfOrVD9WxtO//cPB12tLv/e3hfRh7yeP/YHiOFELQ9Yntg+Mej97HMdvVHdb/h12BwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKhMvf24f/+uWlFcevvi4eeOnpy7tebJTo5m+3G6a6nReV1RPJHiqRT/Mj25cf3s8e74ZoprxXxRK2qd9cWz1zolbSmK4lyxp7hcNIvdl6688e78M0fPH7mw9703D15duU8AAAAA1r//BwAA///3txjh") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2401}) 661.872839ms ago: executing program 0 (id=2678): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0x400}) 661.114149ms ago: executing program 6 (id=2679): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f0000000e80)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000f00)='.\x00', 0x3a03cb0, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES16, @ANYRES8=0x0, @ANYRESDEC], 0xb, 0x0, &(0x7f0000000000)) 467.570147ms ago: executing program 1 (id=2680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005c00)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 307.561499ms ago: executing program 0 (id=2681): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0xfd, 0x0, 0x8}}, @TCA_RED_MAX_P={0x8, 0x3, 0x2000}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x150}}, 0x0) 306.7802ms ago: executing program 1 (id=2682): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x3808008, &(0x7f0000000540)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c757466383d312c757466383d302c636865636b3d7374726963742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c636f6465706167653d3836362c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c646d61736b3d30303030303030303030303030303030303030303130302c757466383d312c757466383d312c757466383d302c756e695f786c6174653d312c6e6e6f6e756d7461696c3d312c73686f72746e616d653d77696e39352c726f6469722c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d302c726f6f74636f6e746578743d73797374656d5f752c00e0035aa2cd29c600891cd4d693993d07e9df4154c218b442a453"], 0x0, 0x2df, &(0x7f0000003740)="$eJzs3b1rJGUcB/DfbGZ3R5tNYSXCDWhhdVyutUmQOxBTeaQ4LTR4OZBMEC4Q8QXXq8TOxtK/QBAE/w0bO0vBVrDzhIORectk98Y1OdyI5vMpkiczv+88z7wkWRbyyzsvHB3ey+P+w09+jixLYrQ9jXiUxGaMovNZLNj+MgCA/7JHZRm/lY2B3T99sSKbrXFdAMD69L//xyuq0vrj3eoVwneXtjQAYE3u3H3z9Z3d3Vtv5HkWt48+P9lLIqL63OzfuR/vRREHcSNm8TiifalQv1tQDW+XZTlP8+/zPN+Ml47mJ3tV8ujtH9rj7/waUee3Yhab9abTdxvq/Gu7t7byxpn8vFrHs+3821X+ZsziudPwQv7mQD72JvHyi2fWfz1m8eO78X4Uca9eRJ//dCvPXy2/+v3jt6rlVflkfrI3ret65UY3+fyS7xEAAAAAAAAAAAAAAAAAAAAAAP8/19veOdOo+/dUm9r+OxuPqy/GkXc2F/vzNPmkO1DfHyhGZVnOy/i6669zI8/zsi3s82k8n7aNBQEAAAAAAAAAAAAAAAAAAOCKO/7wo8P9ojh48I8Mum4AaUT8cSfiaY+zfWbLtVhdPG3n3C+KUTtcrEnPbomNriaJWLmM6iSe8mpcu2DqmSfW3A6++XYwVZ3RcRpDu7K/n3Q8PNcFBx+Mm+s4WNM9XYf7yfA1nJ4uPqtuXCzfuEkMzz6OpS2T7n4uF3eP4vlOZzK4a3ahy9I1wyiKg/mK4qrqr4/zyi8Lp5PEUvGknmQwPm4HQ1ejeTb6e5ENfqc08ayJP/mzItGtAwAAAAAAAAAAAAAAAAAA1qr/69+BnQ9XRkfldG3LAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBL1f////MM0sXwOVKTeHD8b50bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV8efAQAA///bPknz") chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0) 294.602626ms ago: executing program 3 (id=2683): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') lseek(r0, 0xfffffffffffffffe, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/198, 0xc6}], 0x1) 150.928564ms ago: executing program 5 (id=2684): r0 = landlock_create_ruleset(&(0x7f0000006f80)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000100)={0x2, 0x3}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000280)={0x1, 0x3}, 0x0) 95.712689ms ago: executing program 0 (id=2685): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 83.047145ms ago: executing program 3 (id=2686): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4004, @fd_index=0xfffffffe, 0x17, 0x20000000, 0x2, 0x8, 0x0, {0x3}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 0s ago: executing program 1 (id=2687): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'sh\x00', 0x2b, 0x4, 0x23}, 0x2c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e21, 0x8}}}}}, 0x0) kernel console output (not intermixed with test programs): 294][ T3603] usb 4-1: New USB device found, idVendor=19d2, idProduct=7858, bcdDevice=8d.d2 [ 183.993504][ T3603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.009712][ T3603] usb 4-1: Product: syz [ 184.025115][ T3603] usb 4-1: Manufacturer: syz [ 184.042761][ T3603] usb 4-1: SerialNumber: syz [ 184.061544][ T3603] usb 4-1: config 0 descriptor?? [ 184.062091][ T5835] ocfs2: Unmounting device (7,5) on (node local) [ 184.090596][ T3603] usb 4-1: bad CDC descriptors [ 184.270800][ T9676] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1512'. [ 184.278993][ T5941] usb 4-1: USB disconnect, device number 6 [ 184.529730][ T9684] (unnamed net_device) (uninitialized): option mode: invalid value (81) [ 184.663270][ T9682] loop4: detected capacity change from 0 to 4096 [ 184.710031][ T9682] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 184.868063][ T9682] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 184.927608][ T9682] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 184.973621][ T9700] loop3: detected capacity change from 0 to 8 [ 185.068344][ T9700] SQUASHFS error: Failed to read block 0x6e6: -5 [ 185.097793][ T9698] loop6: detected capacity change from 0 to 4096 [ 185.107015][ T9700] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 185.128249][ T9700] SQUASHFS error: Unable to read directory block [631:26] [ 185.253218][ T9702] loop5: detected capacity change from 0 to 4096 [ 185.322029][ T9688] loop1: detected capacity change from 0 to 40427 [ 185.345203][ T9702] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 185.387365][ T9688] F2FS-fs (loop1): invalid crc value [ 185.452918][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 185.537907][ T9702] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 185.562419][ T9688] F2FS-fs (loop1): Found nat_bits in checkpoint [ 185.769569][ T9714] loop4: detected capacity change from 0 to 4096 [ 185.843952][ T9688] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 185.892122][ T9723] Cannot find del_set index 29 as target [ 186.400267][ T9750] loop3: detected capacity change from 0 to 64 [ 186.656085][ T9766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1555'. [ 187.209445][ T9794] netlink: 'syz.6.1564': attribute type 3 has an invalid length. [ 187.380056][ T5899] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 187.569487][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 187.629479][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short [ 187.670108][ T5899] usb 1-1: config 13 has an invalid interface number: 59 but max is 1 [ 187.722873][ T5899] usb 1-1: config 13 has an invalid interface number: 162 but max is 1 [ 187.788075][ T5899] usb 1-1: config 13 has no interface number 0 [ 187.826319][ T5899] usb 1-1: config 13 has no interface number 1 [ 187.869541][ T5899] usb 1-1: config 13 interface 59 has no altsetting 0 [ 187.876348][ T5899] usb 1-1: config 13 interface 162 has no altsetting 0 [ 188.156307][ T5899] usb 1-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=40.e6 [ 188.169900][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.177912][ T5899] usb 1-1: Product: syz [ 188.192844][ T5899] usb 1-1: Manufacturer: syz [ 188.197466][ T5899] usb 1-1: SerialNumber: syz [ 188.227116][ T9841] netlink: 'syz.3.1589': attribute type 21 has an invalid length. [ 188.614075][ T9853] loop5: detected capacity change from 0 to 512 [ 188.640924][ T5899] usb 1-1: USB disconnect, device number 5 [ 188.810408][ T9810] loop4: detected capacity change from 0 to 40427 [ 188.850605][ T9810] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 188.858498][ T9810] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 188.963465][ T9810] F2FS-fs (loop4): invalid crc value [ 188.972464][ T9853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.999268][ T9810] F2FS-fs (loop4): Found nat_bits in checkpoint [ 189.043631][ T9853] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.223551][ T9833] loop6: detected capacity change from 0 to 32768 [ 189.240085][ T9833] XFS: attr2 mount option is deprecated. [ 189.252017][ T9833] XFS: ikeep mount option is deprecated. [ 189.257697][ T9833] XFS: noikeep mount option is deprecated. [ 189.276920][ T9810] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 189.295485][ T9810] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 189.345450][ T5835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.590849][ T9833] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 189.827654][ T9833] XFS (loop6): Ending clean mount [ 189.887499][ T9833] XFS (loop6): Quotacheck needed: Please wait. [ 189.942218][ T9833] XFS (loop6): Quotacheck: Done. [ 189.969596][ T5898] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 190.058611][ T6226] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 190.298734][ T9903] loop4: detected capacity change from 0 to 32768 [ 190.314332][ T9903] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1606 (9903) [ 190.378250][ T9903] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 190.405681][ T5898] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 190.425208][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.448773][ T9917] xt_ecn: cannot match TCP bits for non-tcp packets [ 190.455579][ T9903] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 190.545449][ T9923] netlink: 'syz.1.1622': attribute type 2 has an invalid length. [ 190.562481][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 190.573726][ T5898] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 190.583078][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.594399][ T9903] BTRFS info (device loop4): using free-space-tree [ 190.683580][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1625'. [ 190.695888][ T5898] usb 6-1: config 0 descriptor?? [ 190.702681][ T9891] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 190.719994][ T5898] gspca_main: spca561-2.14.0 probing abcd:cdee [ 190.919734][ T5898] spca561 6-1:0.0: probe with driver spca561 failed with error -22 [ 190.955434][ T5898] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.962625][ T5898] usb 6-1: MIDIStreaming interface descriptor not found [ 191.004304][ T5898] usb 6-1: USB disconnect, device number 5 [ 191.099676][ T9957] i2c i2c-0: Invalid block write size 253 [ 191.236533][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.296353][ T9965] loop1: detected capacity change from 0 to 512 [ 191.313588][ T9965] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 191.333512][ T9965] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 191.446112][ T9965] EXT4-fs error (device loop1): __ext4_iget:4952: inode #15: block 1803188595: comm syz.1.1635: invalid block [ 191.487406][ T5851] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.510661][ T9965] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1635: couldn't read orphan inode 15 (err -117) [ 191.523069][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1637'. [ 191.560728][ T9965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.596802][ T9974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1637'. [ 191.810247][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 191.810268][ T29] audit: type=1400 audit(1731815622.591:51): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9980 comm="syz.5.1642" [ 191.842321][ T9970] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 329: padding at end of block bitmap is not set [ 192.008456][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.156187][T10035] loop3: detected capacity change from 0 to 1024 [ 193.239398][ T5898] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 193.399634][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 193.410494][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 193.433336][ T5898] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 193.443875][ T5899] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 193.479374][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 193.508905][ T5898] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 193.553585][ T5898] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 193.580073][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 193.617768][ T5899] usb 1-1: New USB device found, idVendor=18ec, idProduct=3290, bcdDevice=c4.47 [ 193.627242][ T5898] usb 6-1: Product: syz [ 193.637303][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.649635][ T5898] usb 6-1: Manufacturer: syz [ 193.654257][ T5898] usb 6-1: SerialNumber: syz [ 193.674115][ T5899] usb 1-1: config 0 descriptor?? [ 193.692950][ T5898] usb 6-1: config 0 descriptor?? [ 193.698549][T10008] loop6: detected capacity change from 0 to 32768 [ 193.703197][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.711564][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.728509][ T5898] usb 6-1: NFC: intf ffff88805fa11000 id ffffffff8f31bc80 [ 193.942273][ T5899] usb 1-1: string descriptor 0 read error: -71 [ 193.967159][ T5941] usb 6-1: USB disconnect, device number 6 [ 193.982932][ T5899] usb 1-1: Found UVC 0.00 device (18ec:3290) [ 194.001199][ T5899] usb 1-1: No valid video chain found. [ 194.037091][ T5899] usb 1-1: USB disconnect, device number 6 [ 195.604855][T10129] netlink: 'syz.3.1714': attribute type 2 has an invalid length. [ 195.622214][T10130] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1712'. [ 195.627863][T10076] loop6: detected capacity change from 0 to 32768 [ 195.659121][T10076] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1686 (10076) [ 195.723456][T10076] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 195.754742][T10076] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 195.810674][T10076] BTRFS info (device loop6): disk space caching is enabled [ 195.817938][T10076] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 195.976428][T10150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1720'. [ 195.987645][T10150] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1720'. [ 196.000890][T10150] IPv6: sit2: Disabled Multicast RS [ 196.155390][T10076] BTRFS info (device loop6): rebuilding free space tree [ 196.240441][T10167] loop3: detected capacity change from 0 to 16 [ 196.275095][T10167] erofs: (device loop3): mounted with root inode @ nid 36. [ 196.408239][T10076] BTRFS info (device loop6): disabling free space tree [ 196.440297][T10076] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 196.521158][ T29] audit: type=1326 audit(1731815627.251:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.5.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b457e719 code=0x7ffc0000 [ 196.543685][T10076] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 196.558291][ T29] audit: type=1326 audit(1731815627.251:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.5.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b457e719 code=0x7ffc0000 [ 196.626444][ T29] audit: type=1326 audit(1731815627.261:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.5.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f92b457e719 code=0x7ffc0000 [ 196.699338][ T29] audit: type=1326 audit(1731815627.261:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.5.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b457e719 code=0x7ffc0000 [ 196.759333][ T29] audit: type=1326 audit(1731815627.261:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.5.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b457e719 code=0x7ffc0000 [ 196.790046][ T29] audit: type=1326 audit(1731815627.541:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b457e719 code=0x7ffc0000 [ 196.812418][ T29] audit: type=1326 audit(1731815627.541:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f92b457e719 code=0x7ffc0000 [ 196.835123][ T29] audit: type=1326 audit(1731815627.541:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b457e719 code=0x7ffc0000 [ 196.857643][ T29] audit: type=1326 audit(1731815627.541:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b457e719 code=0x7ffc0000 [ 196.889419][T10190] loop3: detected capacity change from 0 to 512 [ 196.896679][ T6226] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 197.035351][T10190] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.1735: casefold flag without casefold feature [ 197.072190][T10190] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1735: couldn't read orphan inode 15 (err -117) [ 197.190388][T10190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.390912][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.480181][T10215] loop4: detected capacity change from 0 to 64 [ 197.569683][T10217] openvswitch: netlink: Actions may not be safe on all matching packets [ 197.786805][T10225] sp0: Synchronizing with TNC [ 197.906530][T10229] loop6: detected capacity change from 0 to 256 [ 198.023004][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1754'. [ 198.231268][T10248] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1764'. [ 198.479764][ T3603] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 198.621885][T10267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1772'. [ 198.641322][ T3603] usb 6-1: config 0 has an invalid interface number: 242 but max is 0 [ 198.671338][ T3603] usb 6-1: config 0 has no interface number 0 [ 198.700277][ T3603] usb 6-1: New USB device found, idVendor=0403, idProduct=bdc8, bcdDevice=cb.ec [ 198.753665][ T3603] usb 6-1: New USB device strings: Mfr=1, Product=142, SerialNumber=70 [ 198.779261][ T3603] usb 6-1: Product: syz [ 198.799973][ T3603] usb 6-1: Manufacturer: syz [ 198.816257][T10278] usb usb8: usbfs: process 10278 (syz.4.1773) did not claim interface 0 before use [ 198.860955][ T3603] usb 6-1: SerialNumber: syz [ 198.890327][ T3603] usb 6-1: config 0 descriptor?? [ 198.909443][ T3603] ftdi_sio 6-1:0.242: FTDI USB Serial Device converter detected [ 198.917987][ T3603] ftdi_sio ttyUSB0: unknown device type: 0xcbec [ 198.935562][T10281] loop6: detected capacity change from 0 to 128 [ 198.962676][T10283] loop3: detected capacity change from 0 to 16 [ 199.032005][T10283] erofs: (device loop3): mounted with root inode @ nid 36. [ 199.091171][T10281] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.103990][T10281] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.163573][ T3603] usb 6-1: USB disconnect, device number 7 [ 199.200824][ T3603] ftdi_sio 6-1:0.242: device disconnected [ 199.203074][T10283] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 32811 of nid 36 [ 199.217762][ T6226] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.327497][T10283] block device autoloading is deprecated and will be removed. [ 199.405587][T10293] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1784'. [ 199.603564][T10301] loop6: detected capacity change from 0 to 128 [ 199.625962][T10302] loop3: detected capacity change from 0 to 256 [ 199.673597][T10301] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.731573][T10301] ext4 filesystem being mounted at /217/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.778823][T10301] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 199.896661][ T6226] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.898541][T10306] program syz.4.1791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.939933][T10268] loop1: detected capacity change from 0 to 32768 [ 200.115103][T10268] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 200.538079][T10268] XFS (loop1): Ending clean mount [ 200.682022][ T5837] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 200.846524][ T47] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 200.911188][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 200.917869][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 200.924144][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 200.931710][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 200.940299][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 201.081028][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.094198][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.114594][ T47] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 201.139804][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.161780][ T47] usb 6-1: config 0 descriptor?? [ 201.179427][ T3603] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 201.354436][ T3603] usb 1-1: Using ep0 maxpacket: 32 [ 201.390285][ T3603] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 201.425471][ T3603] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 201.441343][ T3603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.459648][ T3603] usb 1-1: Product: syz [ 201.470612][ T3603] usb 1-1: Manufacturer: syz [ 201.479876][ T3603] usb 1-1: SerialNumber: syz [ 201.510688][ T3603] usb 1-1: config 0 descriptor?? [ 201.516950][T10363] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 201.559118][ T3603] hub 1-1:0.0: bad descriptor, ignoring hub [ 201.579623][ T3603] hub 1-1:0.0: probe with driver hub failed with error -5 [ 201.601774][ T47] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 201.621898][ T47] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 201.632468][ T3603] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 201.643420][ T47] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 201.668258][ T47] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 201.712646][ T47] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 201.755590][ T47] holtek 0003:1241:5015.0001: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0 [ 201.781466][ T5941] IPVS: starting estimator thread 0... [ 201.849601][ T47] holtek 0003:1241:5015.0001: no inputs found [ 201.876766][ T47] usb 6-1: USB disconnect, device number 8 [ 201.896493][T10358] loop6: detected capacity change from 0 to 32768 [ 201.931956][T10363] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 201.938850][T10363] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 201.948107][T10370] IPVS: using max 17 ests per chain, 40800 per kthread [ 202.050528][T10363] vhci_hcd vhci_hcd.0: Device attached [ 202.064787][T10358] (syz.6.1812,10358,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 202.148740][T10371] vhci_hcd: connection closed [ 202.314291][T10358] (syz.6.1812,10358,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 202.341806][ T5941] usb 1-1: USB disconnect, device number 7 [ 202.341926][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 202.350199][ T2884] vhci_hcd: stop threads [ 202.361515][ T2884] vhci_hcd: release socket [ 202.366381][ T2884] vhci_hcd: disconnect device [ 202.436317][T10378] loop1: detected capacity change from 0 to 1024 [ 202.490827][T10378] EXT4-fs: Ignoring removed bh option [ 202.675628][T10358] JBD2: Ignoring recovery information on journal [ 202.791251][T10380] loop4: detected capacity change from 0 to 40427 [ 202.841216][T10380] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 202.847874][T10380] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 202.880258][T10378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.957602][T10358] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 202.999166][T10380] F2FS-fs (loop4): Found nat_bits in checkpoint [ 203.075572][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.207098][T10380] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 203.216241][ T6226] ocfs2: Unmounting device (7,6) on (node local) [ 203.224163][ T5941] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 203.232859][T10380] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 203.350478][ T5898] usb usb34-port1: attempt power cycle [ 203.428708][ T5941] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 203.464165][ T5941] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 203.486521][ T5941] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.500247][T10411] openvswitch: netlink: Actions may not be safe on all matching packets [ 203.513780][ T5941] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.556628][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.579400][ T5941] usb 1-1: Product: syz [ 203.583587][ T5941] usb 1-1: Manufacturer: syz [ 203.588193][ T5941] usb 1-1: SerialNumber: syz [ 203.910938][ T5898] usb usb34-port1: unable to enumerate USB device [ 204.079635][ T5941] usb 1-1: 0:2 : does not exist [ 204.296722][ T5941] usb 1-1: USB disconnect, device number 8 [ 204.601751][T10438] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 204.608342][T10438] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 204.620433][ T5843] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 204.627978][ T5843] Bluetooth: Wrong link type (-22) [ 204.633489][ T5843] Bluetooth: hci4: link tx timeout [ 204.638839][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 204.773939][T10438] vhci_hcd vhci_hcd.0: Device attached [ 204.787232][T10439] vhci_hcd: connection closed [ 204.809759][ T3513] vhci_hcd: stop threads [ 204.818961][ T3513] vhci_hcd: release socket [ 204.829115][ T3513] vhci_hcd: disconnect device [ 204.952549][T10443] program syz.0.1845 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.019735][T10413] loop5: detected capacity change from 0 to 32768 [ 205.091616][T10445] syz.1.1846 uses old SIOCAX25GETINFO [ 205.092367][T10413] XFS: ikeep mount option is deprecated. [ 205.259781][T10413] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 205.389274][T10465] tmpfs: Cannot change global quota limit on remount [ 205.475090][T10437] loop4: detected capacity change from 0 to 32768 [ 205.528577][T10462] loop1: detected capacity change from 0 to 4096 [ 205.594841][T10437] (syz.4.1843,10437,1):ocfs2_verify_volume:2374 ERROR: Superblock slots found greater than file system maximum: found 65535, max 255 [ 205.657099][T10476] loop3: detected capacity change from 0 to 256 [ 205.658838][T10437] (syz.4.1843,10437,1):ocfs2_verify_volume:2383 ERROR: status = -22 [ 205.666434][T10476] exfat: Deprecated parameter 'utf8' [ 205.683783][T10476] exfat: Deprecated parameter 'namecase' [ 205.689842][T10476] exfat: Deprecated parameter 'utf8' [ 205.701871][T10437] (syz.4.1843,10437,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 205.718174][T10479] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.746096][T10476] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 205.756101][T10437] (syz.4.1843,10437,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 205.810055][T10476] exFAT-fs (loop3): hint_cluster is invalid (1), rewind to the first cluster [ 205.838886][T10413] XFS (loop5): Ending clean mount [ 205.852347][T10413] XFS (loop5): Quotacheck needed: Please wait. [ 205.910912][T10413] XFS (loop5): Quotacheck: Done. [ 205.933227][T10480] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 205.949571][ T3603] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 205.957447][T10480] exFAT-fs (loop3): error, failed to bmap (inode : ffff88807bf22188 iblock : 0, err : -5) [ 205.985561][T10482] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 205.992102][T10482] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.030161][T10482] vhci_hcd vhci_hcd.0: Device attached [ 206.066769][T10487] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.140706][ T3603] usb 7-1: Using ep0 maxpacket: 16 [ 206.160770][ T3603] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.209595][ T3603] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.239766][ T5835] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 206.257610][ T3603] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.259419][ T5898] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 206.316569][ T3603] usb 7-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 206.328557][ T3603] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.397240][ T3603] usb 7-1: config 0 descriptor?? [ 206.518156][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1862'. [ 206.659786][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 206.679838][T10489] loop3: detected capacity change from 0 to 32768 [ 206.761351][T10495] loop4: detected capacity change from 0 to 2048 [ 206.831519][ T3603] wacom 0003:056A:0022.0002: Unknown device_type for 'HID 056a:0022'. Assuming pen. [ 206.851889][ T3603] wacom 0003:056A:0022.0002: hidraw0: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.6-1/input0 [ 206.881242][ T3603] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0022.0002/input/input12 [ 206.908400][T10485] loop1: detected capacity change from 0 to 32768 [ 206.974159][T10495] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 206.989530][T10495] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 207.038182][ T3603] usb 7-1: USB disconnect, device number 6 [ 207.047750][T10495] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.097318][T10483] vhci_hcd: connection reset by peer [ 207.120033][ T3455] vhci_hcd: stop threads [ 207.139424][ T3455] vhci_hcd: release socket [ 207.153591][ T3455] vhci_hcd: disconnect device [ 207.179429][ T5898] vhci_hcd: vhci_device speed not set [ 207.362830][T10501] loop5: detected capacity change from 0 to 2048 [ 207.391676][T10501] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 207.455753][T10507] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.466759][T10501] syz.5.1865: attempt to access beyond end of device [ 207.466759][T10501] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 207.763922][T10515] loop6: detected capacity change from 0 to 64 [ 207.987160][T10518] loop3: detected capacity change from 0 to 2048 [ 207.993745][ T5899] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 208.150084][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 208.185369][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.197605][T10518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.233797][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.284293][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 208.300486][T10518] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.1873: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 208.359307][ T5899] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 208.402601][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.468364][ T5899] usb 5-1: config 0 descriptor?? [ 208.474720][ T29] audit: type=1326 audit(1731815639.251:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10526 comm="syz.6.1877" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8081f7e719 code=0x0 [ 208.501272][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.697054][T10516] loop5: detected capacity change from 0 to 32768 [ 208.725156][T10516] (syz.5.1870,10516,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 208.773877][T10516] (syz.5.1870,10516,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 208.851561][T10516] JBD2: Ignoring recovery information on journal [ 208.943230][T10516] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 209.003837][ T5899] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 209.018336][ T5899] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 209.043355][ T5899] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 209.080695][T10538] netlink: 408 bytes leftover after parsing attributes in process `syz.3.1880'. [ 209.107560][ T5899] microsoft 0003:045E:07DA.0003: no inputs found [ 209.120972][ T5899] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 209.139944][T10538] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1880'. [ 209.238464][ T3603] usb 5-1: USB disconnect, device number 9 [ 209.283593][ T5835] ocfs2: Unmounting device (7,5) on (node local) [ 209.757698][T10559] binder: 10558:10559 ioctl c018620c 20000040 returned -22 [ 209.960430][ T964] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 210.151519][ T964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.175611][T10574] loop5: detected capacity change from 0 to 64 [ 210.178289][ T964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.230101][T10578] fuse: Bad value for 'user_id' [ 210.235012][T10578] fuse: Bad value for 'user_id' [ 210.245332][ T964] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 210.257314][ T964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.301081][ T964] usb 1-1: config 0 descriptor?? [ 210.731321][ T964] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 210.919065][T10601] loop4: detected capacity change from 0 to 1024 [ 210.931631][ T964] hid-led 0003:0FC5:B080.0004: probe with driver hid-led failed with error -71 [ 210.971924][ T964] usb 1-1: USB disconnect, device number 9 [ 211.115605][ T3455] hfsplus: b-tree write err: -5, ino 4 [ 211.167735][T10607] Cannot find del_set index 286 as target [ 211.499700][T10624] loop6: detected capacity change from 0 to 512 [ 211.512297][T10624] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.540088][T10624] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 211.556160][T10624] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 211.573079][T10626] loop4: detected capacity change from 0 to 1024 [ 211.601658][T10629] loop3: detected capacity change from 0 to 64 [ 211.604507][T10624] System zones: 1-12 [ 211.691078][T10624] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.1919: corrupted in-inode xattr: e_value size too large [ 211.692231][T10626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.719195][T10624] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.1919: couldn't read orphan inode 15 (err -117) [ 211.743467][T10634] atomic_op ffff88802837b998 conn xmit_atomic 0000000000000000 [ 211.755222][ T5842] hfs: node 4:3 still has 1 user(s)! [ 211.812032][T10624] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.838518][T10626] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.857352][T10626] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 211.926746][T10626] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 211.999964][T10626] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring [ 212.039779][T10626] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 212.058549][ T6226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.284375][ T5851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.314653][T10648] loop6: detected capacity change from 0 to 256 [ 212.333710][T10648] exfat: Deprecated parameter 'namecase' [ 212.517036][T10648] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 212.549907][T10659] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 212.558838][T10659] team0: Device ipvlan2 is already an upper device of the team interface [ 213.263392][T10671] loop1: detected capacity change from 0 to 32768 [ 213.265349][T10671] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1941 (10671) [ 213.282289][T10671] BTRFS info (device loop1): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 213.282379][T10671] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 213.282413][T10671] BTRFS info (device loop1): using free-space-tree [ 213.320415][ T3603] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 213.456468][ T5898] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 213.469315][ T3603] usb 4-1: Using ep0 maxpacket: 32 [ 213.471373][ T3603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.510835][ T3603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.520666][ T3603] usb 4-1: New USB device found, idVendor=056a, idProduct=00b7, bcdDevice= 0.00 [ 213.529778][ T3603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.546202][ T3603] usb 4-1: config 0 descriptor?? [ 213.584524][ T5837] BTRFS info (device loop1): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 213.618414][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.618454][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.618493][ T5898] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 213.618521][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.635526][T10701] tipc: Enabling of bearer rejected, failed to enable media [ 213.637192][ T5898] usb 5-1: config 0 descriptor?? [ 213.980130][ T3603] wacom 0003:056A:00B7.0005: unknown main item tag 0x0 [ 213.980182][ T3603] wacom 0003:056A:00B7.0005: unknown main item tag 0x0 [ 213.980207][ T3603] wacom 0003:056A:00B7.0005: unknown main item tag 0x0 [ 213.980898][ T3603] wacom 0003:056A:00B7.0005: Unknown device_type for 'HID 056a:00b7'. Assuming pen. [ 213.982350][ T3603] wacom 0003:056A:00B7.0005: hidraw0: USB HID v0.00 Device [HID 056a:00b7] on usb-dummy_hcd.3-1/input0 [ 213.983929][ T3603] input: Wacom Intuos3 4x6 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B7.0005/input/input15 [ 214.057498][ T5898] cm6533_jd 0003:0D8C:0022.0006: unknown global tag 0xc [ 214.206216][ T5898] cm6533_jd 0003:0D8C:0022.0006: item 0 1 1 12 parsing failed [ 214.214412][ T5898] cm6533_jd 0003:0D8C:0022.0006: parse failed [ 214.220807][ T5898] cm6533_jd 0003:0D8C:0022.0006: probe with driver cm6533_jd failed with error -22 [ 214.265908][ T5941] usb 5-1: USB disconnect, device number 10 [ 214.285261][T10715] loop6: detected capacity change from 0 to 64 [ 214.409128][ T47] usb 4-1: USB disconnect, device number 7 [ 214.427200][ T5900] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 214.445901][T10719] loop1: detected capacity change from 0 to 512 [ 214.468992][T10719] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 214.531717][T10719] EXT4-fs (loop1): 1 truncate cleaned up [ 214.541654][T10719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.592061][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.605312][ T5900] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.625314][ T5900] usb 6-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 214.635421][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.646488][ T5900] usb 6-1: config 0 descriptor?? [ 214.687754][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.782648][T10729] loop6: detected capacity change from 0 to 256 [ 214.899499][T10729] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 215.066311][ T5900] aquacomputer_d5next 0003:0C70:F011.0007: unknown main item tag 0x0 [ 215.097548][ T5900] aquacomputer_d5next 0003:0C70:F011.0007: unknown main item tag 0x0 [ 215.118272][ T5900] aquacomputer_d5next 0003:0C70:F011.0007: unknown main item tag 0x0 [ 215.127219][ T5900] aquacomputer_d5next 0003:0C70:F011.0007: unknown main item tag 0x0 [ 215.136030][ T5900] aquacomputer_d5next 0003:0C70:F011.0007: unknown main item tag 0x0 [ 215.160239][ T5900] aquacomputer_d5next 0003:0C70:F011.0007: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.5-1/input0 [ 215.297349][ T5900] usb 6-1: USB disconnect, device number 9 [ 215.329718][ T5941] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 215.489700][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 215.502925][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.531966][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.565141][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.578516][ T5941] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 215.588742][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.608778][ T5941] usb 4-1: config 0 descriptor?? [ 215.623132][T10758] loop6: detected capacity change from 0 to 16 [ 215.636552][ T5941] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 215.660832][T10758] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 215.679167][ T5194] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 215.711298][ T5194] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 215.723031][T10758] MTD: Attempt to mount non-MTD device "/dev/nbd6" [ 215.732726][ T5194] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 215.751101][T10758] cramfs: wrong magic [ 215.763654][ T5194] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 215.793034][ T5194] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 215.899829][ T6009] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 215.968598][T10740] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 216.020101][ T5194] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 216.051311][ T47] usb 4-1: USB disconnect, device number 8 [ 216.117836][T10771] loop4: detected capacity change from 0 to 2048 [ 216.204916][T10771] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 216.315670][T10780] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.450647][T10783] loop5: detected capacity change from 0 to 512 [ 216.482295][T10783] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 216.517356][T10783] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 216.545951][T10783] System zones: 1-12 [ 216.550788][T10783] EXT4-fs (loop5): orphan cleanup on readonly fs [ 216.557834][T10783] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1982: invalid indirect mapped block 12 (level 1) [ 216.577979][T10783] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1982: invalid indirect mapped block 2 (level 2) [ 216.592165][T10783] EXT4-fs (loop5): 1 truncate cleaned up [ 216.598820][T10783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 216.706742][ T5835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 217.031218][T10796] loop5: detected capacity change from 0 to 4096 [ 217.079301][T10796] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 217.124471][T10779] loop6: detected capacity change from 0 to 32768 [ 217.145980][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 217.221582][ T5900] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 217.259033][T10779] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.394173][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 217.413725][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.426286][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.463721][ T5900] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 217.495115][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.535773][ T5900] usb 5-1: config 0 descriptor?? [ 217.581041][T10779] XFS (loop6): Ending clean mount [ 217.609109][T10779] XFS (loop6): Quotacheck needed: Please wait. [ 217.665546][T10779] XFS (loop6): Quotacheck: Done. [ 217.888006][ T6226] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.981511][ T5900] hid-picolcd 0003:04D8:F002.0008: unknown main item tag 0x2 [ 217.981548][ T5900] hid-picolcd 0003:04D8:F002.0008: unknown main item tag 0x0 [ 217.981574][ T5900] hid-picolcd 0003:04D8:F002.0008: item fetching failed at offset 2/5 [ 217.982096][ T5900] hid-picolcd 0003:04D8:F002.0008: device report parse failed [ 217.982174][ T5900] hid-picolcd 0003:04D8:F002.0008: probe with driver hid-picolcd failed with error -22 [ 218.197856][ T3603] usb 5-1: USB disconnect, device number 11 [ 219.012419][T10853] openvswitch: netlink: Actions may not be safe on all matching packets [ 219.036342][T10843] loop6: detected capacity change from 0 to 4096 [ 219.242122][T10843] ntfs3: Cannot use different iocharset when remounting! [ 219.259814][ T3603] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 219.440763][ T3603] usb 4-1: Using ep0 maxpacket: 32 [ 219.479495][ T3603] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 219.488604][ T3603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.534973][ T3603] usb 4-1: config 0 descriptor?? [ 219.571791][ T3603] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 219.879172][T10875] loop5: detected capacity change from 0 to 128 [ 219.902902][T10875] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 220.239328][ T3603] gspca_nw80x: reg_w err -71 [ 220.244265][ T3603] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 220.290523][T10852] loop4: detected capacity change from 0 to 40427 [ 220.299533][ T3603] usb 4-1: USB disconnect, device number 9 [ 220.350466][T10852] F2FS-fs (loop4): invalid crc value [ 220.380040][T10852] F2FS-fs (loop4): Found nat_bits in checkpoint [ 220.480365][T10884] loop1: detected capacity change from 0 to 512 [ 220.497207][T10884] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 220.518758][T10852] F2FS-fs (loop4): Start checkpoint disabled! [ 220.554948][T10852] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 220.585623][T10884] EXT4-fs (loop1): 1 truncate cleaned up [ 220.610279][T10884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.668281][T10852] syz.4.2010: attempt to access beyond end of device [ 220.668281][T10852] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 220.691719][T10884] EXT4-fs error (device loop1): ext4_nfs_get_inode:1538: inode #11: comm syz.1.2023: iget: bad extra_isize 46 (inode size 256) [ 220.706176][T10884] EXT4-fs (loop1): Remounting filesystem read-only [ 220.791891][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.922323][ T5898] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 220.944812][ T5849] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 220.945347][ T3421] kworker/u8:7: attempt to access beyond end of device [ 220.945347][ T3421] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 221.047727][ T3421] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 221.073461][ T3421] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 221.100930][ T5849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.118413][ T5849] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.133595][ T5898] usb 7-1: Using ep0 maxpacket: 16 [ 221.145163][ T5849] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 221.160393][ T5898] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.163849][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 221.209361][ T5898] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.219254][ T5849] usb 1-1: SerialNumber: syz [ 221.249361][ T5898] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 221.305568][ T5898] usb 7-1: config 0 interface 0 has no altsetting 0 [ 221.332677][ T5898] usb 7-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 221.369413][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.401524][ T5898] usb 7-1: config 0 descriptor?? [ 221.433542][ T5849] usb 1-1: 0:2 : does not exist [ 221.576372][T10907] loop3: detected capacity change from 0 to 2048 [ 221.652650][T10896] loop1: detected capacity change from 0 to 32768 [ 221.672386][T10908] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.696496][T10896] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2027 (10896) [ 221.728698][ T5849] usb 1-1: USB disconnect, device number 10 [ 221.759085][T10907] NILFS (loop3): unable to set label with more than 80 bytes [ 221.801116][T10896] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 221.811630][T10896] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 221.820582][T10896] BTRFS info (device loop1): using free-space-tree [ 221.837555][ T5898] hid-generic 0003:045E:05DA.0009: item 0 0 0 9 parsing failed [ 221.849983][ T5898] hid-generic 0003:045E:05DA.0009: probe with driver hid-generic failed with error -22 [ 222.030685][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.252548][T10914] loop5: detected capacity change from 0 to 32768 [ 222.260673][ T5898] usb 7-1: USB disconnect, device number 7 [ 222.414970][T10914] BTRFS: device /dev/loop5 (7:5) using temp-fsid 2297e14c-4bae-4b67-a479-d9aa8822c984 [ 222.448501][T10914] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2035 (10914) [ 222.529060][T10914] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.539526][T10914] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 222.548236][T10914] BTRFS info (device loop5): using free-space-tree [ 222.633544][T10896] BTRFS info (device loop1): checking UUID tree [ 222.840452][T10960] loop4: detected capacity change from 0 to 8 [ 222.910247][T10960] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 223.033311][ T5835] BTRFS info (device loop5): last unmount of filesystem 2297e14c-4bae-4b67-a479-d9aa8822c984 [ 223.046353][ T5837] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 223.068482][T10921] loop3: detected capacity change from 0 to 32768 [ 223.221508][T10921] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 223.680291][ T5842] ocfs2: Unmounting device (7,3) on (node local) [ 223.709381][ T5941] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 223.880184][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.899379][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.935919][T10990] capability: warning: `syz.4.2055' uses 32-bit capabilities (legacy support in use) [ 223.937228][ T5941] usb 7-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 224.019393][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.073056][ T5941] usb 7-1: config 0 descriptor?? [ 224.519783][ T5941] chicony 0003:04F2:1421.000A: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.6-1/input0 [ 224.589004][T11006] loop1: detected capacity change from 0 to 1024 [ 224.747707][ T5941] usb 7-1: USB disconnect, device number 8 [ 225.032687][T11013] loop3: detected capacity change from 0 to 256 [ 225.162901][T11013] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 225.542312][T10998] loop4: detected capacity change from 0 to 32768 [ 225.710501][T11008] loop5: detected capacity change from 0 to 32768 [ 225.718872][T11008] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2062 (11008) [ 225.756360][T11008] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 225.777760][T11008] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 225.811364][T11008] BTRFS info (device loop5): using free-space-tree [ 225.831649][T10998] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 225.997647][T11020] loop3: detected capacity change from 0 to 32768 [ 226.016978][T11020] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2067 (11020) [ 226.054128][T11020] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 226.095993][T11020] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 226.133641][ T5851] ocfs2: Unmounting device (7,4) on (node local) [ 226.197905][T11020] BTRFS info (device loop3): using free-space-tree [ 226.579926][ T5835] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 226.689456][T11020] BTRFS info (device loop3): rebuilding free space tree [ 226.746655][T11070] loop4: detected capacity change from 0 to 8 [ 226.915724][T11070] SQUASHFS error: Unable to read directory block [629:26] [ 227.038779][ T5842] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 227.311219][T11079] loop4: detected capacity change from 0 to 128 [ 227.318232][T11079] udf: Unknown parameter 'ÔËš‘þAÍsðËP' [ 227.396244][ T5146] Bluetooth: hci5: unexpected event for opcode 0x2012 [ 227.588431][T11085] loop3: detected capacity change from 0 to 512 [ 227.693679][T11066] loop6: detected capacity change from 0 to 32768 [ 227.780021][T11085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.792692][T11066] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2075 (11066) [ 227.865680][T11085] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.938085][T11066] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.973679][T11066] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 227.986556][T11085] EXT4-fs: Cannot specify journal on remount [ 228.030104][T11066] BTRFS info (device loop6): using free-space-tree [ 228.077226][T11108] loop1: detected capacity change from 0 to 1024 [ 228.136692][T11114] loop4: detected capacity change from 0 to 64 [ 228.192225][T11114] hfs: small file entry [ 228.214500][T11108] hfsplus: bad catalog entry type [ 228.244805][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.312088][ T3455] hfsplus: b-tree write err: -5, ino 4 [ 228.737912][ T6226] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.862065][T11137] loop3: detected capacity change from 0 to 1024 [ 229.535540][T11105] loop5: detected capacity change from 0 to 32768 [ 229.646392][T11105] XFS (loop5): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 229.757760][T11159] loop3: detected capacity change from 0 to 512 [ 229.818247][T11159] EXT4-fs: Ignoring removed oldalloc option [ 229.879978][T11159] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 229.888397][T11159] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=84fc01c, mo2=0002] [ 229.893246][T11105] XFS (loop5): Ending clean mount [ 229.985201][T11159] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 229.990419][T11105] XFS (loop5): Quotacheck needed: Please wait. [ 230.045435][T11159] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 230.080841][T11159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.154940][T11105] XFS (loop5): Quotacheck: Done. [ 230.192403][T11159] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.2103: dx entry: limit 65535 != root limit 120 [ 230.216931][T11159] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2103: Corrupt directory, running e2fsck is recommended [ 230.263673][T11159] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.2103: path /364/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 230.279418][ T5941] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 230.305165][ T3603] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 230.436771][ T5835] XFS (loop5): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 230.469354][ T5941] usb 7-1: Using ep0 maxpacket: 16 [ 230.470521][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.479665][ T5941] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.491645][ T5941] usb 7-1: config 0 has no interface number 0 [ 230.497760][ T5941] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.510029][ T5941] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.520056][ T5941] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.522026][ T3603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.533176][ T5941] usb 7-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 230.553368][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.599464][ T3603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.629354][ T3603] usb 1-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 230.648782][ T3603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.665685][ T5941] usb 7-1: config 0 descriptor?? [ 230.672674][ T3603] usb 1-1: config 0 descriptor?? [ 230.764403][T11183] loop3: detected capacity change from 0 to 64 [ 230.976759][T11183] hfs: small file entry [ 231.009991][T11142] loop1: detected capacity change from 0 to 32768 [ 231.054711][T11142] (syz.1.2099,11142,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 231.120458][ T3603] viewsonic 0003:0543:E621.000B: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.0-1/input0 [ 231.138694][ T5941] holtek_mouse 0003:04D9:A072.000C: unknown main item tag 0x0 [ 231.154174][ T5941] holtek_mouse 0003:04D9:A072.000C: hidraw1: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.6-1/input1 [ 231.172489][T11142] (syz.1.2099,11142,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 231.342279][T11195] loop3: detected capacity change from 0 to 64 [ 231.395084][ T3603] usb 1-1: USB disconnect, device number 11 [ 231.447553][ T5849] usb 7-1: USB disconnect, device number 9 [ 231.471044][ T5146] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 231.482800][ T5146] Bluetooth: hci5: Injecting HCI hardware error event [ 231.492062][ T5146] Bluetooth: hci5: hardware error 0x00 [ 231.535681][T11198] loop5: detected capacity change from 0 to 128 [ 231.549152][T11198] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 231.551958][T11142] JBD2: Ignoring recovery information on journal [ 231.568805][T11198] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.633988][ T5842] hfs: node 4:3 still has 1 user(s)! [ 231.783853][ T5843] Bluetooth: hci5: unexpected event for opcode 0x2042 [ 232.007728][T11142] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 232.067270][T11209] loop4: detected capacity change from 0 to 4096 [ 232.132457][T11209] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 232.557580][ T5837] ocfs2: Unmounting device (7,1) on (node local) [ 232.707977][T11229] Bluetooth: MGMT ver 1.23 [ 232.892133][T11232] loop5: detected capacity change from 0 to 64 [ 233.200155][T11237] loop4: detected capacity change from 0 to 4096 [ 233.215970][T11237] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 233.280179][T11207] loop3: detected capacity change from 0 to 40427 [ 233.327248][T11207] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 233.360224][T11207] F2FS-fs (loop3): Image doesn't support compression [ 233.395181][T11207] F2FS-fs (loop3): Image doesn't support compression [ 233.414885][T11207] F2FS-fs (loop3): invalid crc value [ 233.529523][T11207] F2FS-fs (loop3): Found nat_bits in checkpoint [ 233.566579][ T29] audit: type=1326 audit(1731815664.341:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.4.2141" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14ab57e719 code=0x0 [ 233.620353][ T5146] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 233.772316][T11207] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 233.881412][ T5842] syz-executor: attempt to access beyond end of device [ 233.881412][ T5842] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 233.922432][ T5842] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 234.441305][ T29] audit: type=1326 audit(1731815665.221:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11266 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0f97e719 code=0x7ffc0000 [ 234.573355][ T29] audit: type=1326 audit(1731815665.221:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11266 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0f97e719 code=0x7ffc0000 [ 234.646233][T11278] loop6: detected capacity change from 0 to 1024 [ 234.663063][ T29] audit: type=1326 audit(1731815665.411:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11266 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f0a0f97e719 code=0x7ffc0000 [ 234.769413][ T29] audit: type=1326 audit(1731815665.411:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11266 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0f97e719 code=0x7ffc0000 [ 234.828635][ T29] audit: type=1326 audit(1731815665.411:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11266 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0f97e719 code=0x7ffc0000 [ 235.026712][T11287] mkiss: ax0: crc mode is auto. [ 235.282321][T11294] loop4: detected capacity change from 0 to 256 [ 235.318935][T11289] loop5: detected capacity change from 0 to 1764 [ 235.341901][T11294] exfat: Deprecated parameter 'utf8' [ 235.406966][T11294] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 235.479429][ T5899] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 235.643325][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 235.663073][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.708279][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.754160][ T5899] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 235.792166][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.898067][ T5899] usb 2-1: config 0 descriptor?? [ 236.040363][T11305] loop4: detected capacity change from 0 to 4096 [ 236.237822][T11310] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.362914][T11305] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 236.389367][T11305] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 236.406219][ T5899] cypress 0003:04B4:0001.000D: unknown main item tag 0x0 [ 236.436536][ T5899] cypress 0003:04B4:0001.000D: hidraw0: USB HID v0.00 Device [HID 04b4:0001] on usb-dummy_hcd.1-1/input0 [ 236.449468][T11305] Remounting filesystem read-only [ 236.462295][T11305] NILFS (loop4): error -5 truncating bmap (ino=12) [ 236.648773][ T5941] usb 2-1: USB disconnect, device number 4 [ 236.661156][ T5851] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 236.802455][T11295] loop6: detected capacity change from 0 to 40427 [ 236.859365][T11295] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 236.877545][T11295] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 236.903355][T11319] openvswitch: netlink: nsh attribute has 883 unknown bytes. [ 236.925982][T11299] loop5: detected capacity change from 0 to 32768 [ 236.930907][T11319] openvswitch: netlink: Actions may not be safe on all matching packets [ 236.954504][T11295] F2FS-fs (loop6): invalid crc value [ 236.965816][T11299] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2162 (11299) [ 236.977895][T11295] F2FS-fs (loop6): Found nat_bits in checkpoint [ 237.035540][T11299] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 237.092118][T11299] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 237.159394][T11299] BTRFS info (device loop5): using free-space-tree [ 237.198966][T11295] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 237.219464][T11295] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 238.018700][T11356] loop1: detected capacity change from 0 to 2048 [ 238.025781][ T5835] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 238.070002][T11321] loop4: detected capacity change from 0 to 32768 [ 238.137102][T11321] syz.4.2171: attempt to access beyond end of device [ 238.137102][T11321] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 238.225878][T11321] lbmIODone: I/O error in JFS log [ 238.279377][T11321] *** Log Format Error ! *** [ 238.284319][T11321] lmLogInit: exit(-22) [ 238.288950][T11321] lmLogOpen: exit(-22) [ 238.330478][T11321] jfs: Unrecognized mount option "ÿÿÿÿ¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" or missing value [ 238.727576][T11373] loop1: detected capacity change from 0 to 1024 [ 238.811945][T11373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.868632][T11350] loop3: detected capacity change from 0 to 32768 [ 238.957859][ T29] audit: type=1800 audit(1731815669.731:68): pid=11373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2184" name="bus" dev="loop1" ino=861 res=0 errno=0 [ 239.159661][ T5849] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 239.218254][T11350] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 239.218606][T11350] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 239.250863][T11350] bcachefs (loop3): Version upgrade required: [ 239.250863][T11350] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 239.250863][T11350] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 239.250863][T11350] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 239.413484][T11350] bcachefs (loop3): dropping and reconstructing all alloc info [ 239.470895][ T5849] usb 1-1: Using ep0 maxpacket: 16 [ 239.473101][T11350] bcachefs (loop3): check_topology... done [ 239.484720][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.535201][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.563993][T11350] bcachefs (loop3): accounting_read... [ 239.568265][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2192'. [ 239.577809][ T5849] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 239.599966][T11350] done [ 239.602757][T11350] bcachefs (loop3): alloc_read... done [ 239.608293][T11350] bcachefs (loop3): stripes_read... done [ 239.619109][T11404] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2192'. [ 239.642450][T11350] bcachefs (loop3): snapshots_read... done [ 239.655214][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.671850][T11350] bcachefs (loop3): check_allocations... [ 239.701234][ T5849] usb 1-1: config 0 descriptor?? [ 239.828715][T11350] done [ 239.859847][T11350] bcachefs (loop3): going read-write [ 239.894872][T11350] bcachefs (loop3): done starting filesystem [ 240.079359][ T29] audit: type=1800 audit(1731815670.841:69): pid=11350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2177" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4101 res=0 errno=0 [ 240.130305][ T5898] kernel write not supported for file /dsp (pid: 5898 comm: kworker/0:4) [ 240.185478][ T5849] elan 0003:04F3:0755.000E: failed to start in urb: -90 [ 240.197850][ T5849] elan 0003:04F3:0755.000E: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 240.289324][T11350] syz.3.2177 (11350) used greatest stack depth: 18296 bytes left [ 240.384878][ T5842] bcachefs (loop3): shutting down [ 240.405511][ T5842] bcachefs (loop3): going read-only [ 240.413414][ T5842] bcachefs (loop3): finished waiting for writes to stop [ 240.441831][ T5941] usb 1-1: USB disconnect, device number 12 [ 240.477653][ T5842] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 240.591283][ T5842] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [ 240.603883][ T5842] bcachefs (loop3): unshutdown complete, journal seq 15 [ 240.615631][ T5842] bcachefs (loop3): done going read-only, filesystem not clean [ 240.619399][ T5898] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 240.652581][ T5842] bcachefs (loop3): shutdown complete [ 240.801752][T11410] loop6: detected capacity change from 0 to 32768 [ 240.819514][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 240.830362][ T5898] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 240.845134][ T5898] usb 6-1: config 0 has no interface number 0 [ 240.854460][ T5898] usb 6-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 240.889389][ T5898] usb 6-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 240.903306][ T5898] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 240.921637][ T5898] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 240.940099][T11429] loop1: detected capacity change from 0 to 32768 [ 240.948062][T11429] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2207 (11429) [ 240.966791][ T5898] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 240.993505][T11429] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.002451][ T5898] usb 6-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 241.030188][T11429] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 241.031403][ T5898] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 241.058818][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.068795][ T5898] usb 6-1: Product: syz [ 241.109537][ T5898] usb 6-1: Manufacturer: syz [ 241.114192][ T5898] usb 6-1: SerialNumber: syz [ 241.169881][ T5898] usb 6-1: config 0 descriptor?? [ 241.179830][T11428] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 241.187095][T11428] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 241.209954][T11429] BTRFS info (device loop1): using free-space-tree [ 241.620176][T11436] loop4: detected capacity change from 0 to 32768 [ 241.647920][ T5898] etas_es58x 6-1:0.219: Starting syz syz (Serial Number syz) [ 241.733604][T11436] read_mapping_page failed! [ 241.738638][T11436] ERROR: (device loop4): txCommit: [ 241.738638][T11436] [ 241.746827][T11436] ERROR: (device loop4): remounting filesystem as read-only [ 241.838952][ T5898] etas_es58x 6-1:0.219: could not parse product info: '䑸' [ 242.116263][ T3603] usb 6-1: USB disconnect, device number 10 [ 242.124464][ T3603] etas_es58x 6-1:0.219: Disconnecting syz syz [ 242.190548][ T5837] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.733938][T11490] loop6: detected capacity change from 0 to 1024 [ 243.013689][ T3513] hfsplus: b-tree write err: -5, ino 4 [ 243.272121][T11506] loop4: detected capacity change from 0 to 2048 [ 243.458950][T11511] loop6: detected capacity change from 0 to 2048 [ 243.513959][T11516] loop5: detected capacity change from 0 to 512 [ 243.569771][T11506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.595052][T11516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.610517][T11523] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.632102][ T29] audit: type=1800 audit(1731815674.411:70): pid=11506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2233" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 243.726525][ T5851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.997447][ T5835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.168556][T11534] loop4: detected capacity change from 0 to 4096 [ 244.185705][T11541] loop6: detected capacity change from 0 to 1024 [ 244.265441][T11547] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.576716][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2248'. [ 244.642403][T11557] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2248'. [ 244.733205][T11562] openvswitch: netlink: Actions may not be safe on all matching packets [ 244.766918][T11566] loop1: detected capacity change from 0 to 16 [ 244.849341][T11566] erofs: (device loop1): mounted with root inode @ nid 36. [ 245.192244][T11581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2259'. [ 245.416436][T11594] loop1: detected capacity change from 0 to 256 [ 245.505691][T11594] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4e1f5d09, utbl_chksum : 0xe619d30d) [ 245.578820][ T29] audit: type=1326 audit(1731815676.351:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11599 comm="syz.6.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8081f7e719 code=0x7ffc0000 [ 245.601567][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.655544][ T29] audit: type=1326 audit(1731815676.381:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11599 comm="syz.6.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8081f7e719 code=0x7ffc0000 [ 245.702579][T11602] hugetlbfs: Bad value for 'uid' [ 245.728176][T11602] hugetlbfs: Bad value for 'uid' [ 245.753769][ T29] audit: type=1326 audit(1731815676.381:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11599 comm="syz.6.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f8081f7e719 code=0x7ffc0000 [ 245.804566][T11604] netlink: 'syz.6.2270': attribute type 2 has an invalid length. [ 245.827168][T11606] loop1: detected capacity change from 0 to 128 [ 245.838232][ T29] audit: type=1326 audit(1731815676.381:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11599 comm="syz.6.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8081f7e719 code=0x7ffc0000 [ 245.969374][ T29] audit: type=1326 audit(1731815676.391:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11599 comm="syz.6.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8081f7e719 code=0x7ffc0000 [ 246.011905][T11586] loop5: detected capacity change from 0 to 32768 [ 246.078234][T11606] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.104417][T11606] ext4 filesystem being mounted at /378/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 246.203140][ T5837] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.368724][T11586] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,fsck,norecovery,nojournal_transaction_names,read_only,reconstruct_alloc,nocow [ 246.421103][T11586] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 246.429972][T11586] bcachefs (loop5): Version upgrade required: [ 246.429972][T11586] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 246.429972][T11586] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 246.429972][T11586] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 246.501052][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.566411][T11636] netlink: 'syz.1.2276': attribute type 1 has an invalid length. [ 246.614980][T11586] bcachefs (loop5): dropping and reconstructing all alloc info [ 246.668492][T11586] bcachefs (loop5): check_topology... done [ 246.687845][T11586] bcachefs (loop5): accounting_read... done [ 246.737082][T11586] bcachefs (loop5): alloc_read... done [ 246.737156][T11586] bcachefs (loop5): stripes_read... done [ 246.737205][T11586] bcachefs (loop5): snapshots_read... done [ 246.737333][T11586] bcachefs (loop5): check_allocations... done [ 246.822926][T11586] bcachefs (loop5): going read-write [ 246.927005][T11586] bcachefs (loop5): going read-only [ 246.935010][T11586] bcachefs (loop5): finished waiting for writes to stop [ 246.983447][T11586] bcachefs (loop5): flushing journal and stopping allocators, journal seq 10 [ 247.027291][T11586] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 10 [ 247.073404][T11586] bcachefs (loop5): unshutdown complete, journal seq 11 [ 247.140387][T11586] bcachefs (loop5): done going read-only, filesystem not clean [ 247.147969][T11586] bcachefs (loop5): done starting filesystem [ 247.159956][T11653] loop4: detected capacity change from 0 to 4096 [ 247.236020][T11662] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.361511][ T5835] bcachefs (loop5): shutting down [ 247.562208][ T5835] bcachefs (loop5): shutdown complete [ 247.873843][T11655] loop6: detected capacity change from 0 to 32768 [ 247.901434][T11655] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2289 (11655) [ 247.945224][T11680] loop4: detected capacity change from 0 to 128 [ 247.955986][T11655] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 247.987659][T11655] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 247.997404][T11655] BTRFS info (device loop6): using free-space-tree [ 248.007269][T11680] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.042549][T11680] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.192793][ T5851] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 248.388346][T11705] openvswitch: netlink: Actions may not be safe on all matching packets [ 248.764308][ T6226] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 248.871411][ T5146] Bluetooth: hci3: unexpected event for opcode 0x080c [ 249.757826][T11738] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2323'. [ 249.825497][T11742] random: crng reseeded on system resumption [ 249.891558][T11724] loop1: detected capacity change from 0 to 32768 [ 250.185033][T11724] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 250.395610][T11724] XFS (loop1): Ending clean mount [ 250.418996][T11724] XFS (loop1): Quotacheck needed: Please wait. [ 250.481890][T11724] XFS (loop1): Quotacheck: Done. [ 250.639756][ T5837] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 251.325260][T11754] loop6: detected capacity change from 0 to 40427 [ 251.424334][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2338'. [ 251.449453][T11754] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x1fffff [ 251.460080][T11782] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2339'. [ 251.470855][T11754] F2FS-fs (loop6): heap/no_heap options were deprecated [ 251.477904][T11754] F2FS-fs (loop6): Image doesn't support compression [ 251.497047][T11754] F2FS-fs (loop6): invalid crc value [ 251.508761][T11754] F2FS-fs (loop6): Found nat_bits in checkpoint [ 251.819495][T11754] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 252.010029][T11786] loop5: detected capacity change from 0 to 32768 [ 252.023494][T11786] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2340 (11786) [ 252.260660][T11786] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 252.272136][T11786] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 252.282430][T11786] BTRFS info (device loop5): using free-space-tree [ 252.400915][T11791] loop1: detected capacity change from 0 to 40427 [ 252.506279][T11791] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1fffff [ 252.591783][T11791] F2FS-fs (loop1): invalid crc value [ 252.690500][T11791] F2FS-fs (loop1): Found nat_bits in checkpoint [ 252.816059][T11791] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 252.890574][T11829] loop6: detected capacity change from 0 to 1024 [ 252.899419][ T5146] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 252.927673][ T5146] Bluetooth: hci3: Injecting HCI hardware error event [ 252.936148][ T5843] Bluetooth: hci3: hardware error 0x00 [ 252.993414][T11829] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.044541][ T5837] syz-executor: attempt to access beyond end of device [ 253.044541][ T5837] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 253.055437][ T29] audit: type=1800 audit(1731815683.821:76): pid=11829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2351" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 253.130378][ T5837] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 253.332437][ T29] audit: type=1800 audit(1731815683.921:77): pid=11786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2340" name="file0" dev="loop5" ino=258 res=0 errno=0 [ 253.397404][T11786] syz.5.2340 (11786) used greatest stack depth: 16400 bytes left [ 253.548270][T11797] loop3: detected capacity change from 0 to 40427 [ 253.580705][ T5835] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 253.635108][T11797] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 253.709372][T11797] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 253.759404][T11797] F2FS-fs (loop3): inline encryption not supported [ 253.782054][ T6226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.850293][T11797] F2FS-fs (loop3): invalid crc value [ 253.939682][T11797] F2FS-fs (loop3): Found nat_bits in checkpoint [ 254.319556][T11797] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 254.326707][T11797] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 254.485995][T11872] loop1: detected capacity change from 0 to 1024 [ 254.700628][ T5842] syz-executor: attempt to access beyond end of device [ 254.700628][ T5842] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.755815][T11872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.776304][T11860] loop4: detected capacity change from 0 to 32768 [ 254.793661][ T5842] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 254.801285][T11872] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.875375][T11860] ERROR: (device loop4): diAllocBit: iag inconsistent [ 254.875375][T11860] [ 254.957825][T11860] ERROR: (device loop4): remounting filesystem as read-only [ 254.981634][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.002100][T11860] ialloc: diAlloc returned -5! [ 255.059813][ T5843] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 255.134294][T11871] loop5: detected capacity change from 0 to 32768 [ 255.144756][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.151172][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.213461][T11868] loop6: detected capacity change from 0 to 32768 [ 255.247910][T11871] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2366 (11871) [ 255.272217][T11871] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 255.313462][T11871] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 255.322512][T11871] BTRFS info (device loop5): using free-space-tree [ 255.366235][T11868] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 255.672654][T11897] loop3: detected capacity change from 0 to 4096 [ 255.956445][ T29] audit: type=1800 audit(1731815686.731:78): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2375" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 256.107789][T11921] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2378'. [ 256.142974][T11897] ntfs3(loop3): failed to convert name for inode 1e. [ 256.152712][T11897] ntfs3(loop3): ino=1f, Correct links count -> 1. [ 256.169600][T11897] ntfs3(loop3): ino=1f, Correct links count -> 1. [ 256.508059][ T5835] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 256.558687][T11868] XFS (loop6): Ending clean mount [ 256.595926][T11868] XFS (loop6): Quotacheck needed: Please wait. [ 256.668260][T11868] XFS (loop6): Quotacheck: Done. [ 256.946766][T11925] loop4: detected capacity change from 0 to 32768 [ 257.002211][ T6226] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 257.284310][T11925] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 257.393098][ T29] audit: type=1800 audit(1731815688.171:79): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2379" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 257.656536][ T5851] ocfs2: Unmounting device (7,4) on (node local) [ 257.679356][ T5849] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 257.841055][ T5849] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 257.869265][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.891757][ T5849] usb 4-1: config 0 descriptor?? [ 257.933437][ T5849] cp210x 4-1:0.0: cp210x converter detected [ 258.581845][ T5849] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 258.590145][ T5849] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 258.634956][ T5849] usb 4-1: cp210x converter now attached to ttyUSB0 [ 258.666877][ T5849] usb 4-1: USB disconnect, device number 10 [ 258.693955][T11986] loop5: detected capacity change from 0 to 1024 [ 258.701675][ T5849] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 258.710426][ T5849] cp210x 4-1:0.0: device disconnected [ 258.819530][ T5900] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 258.857222][T11986] hfsplus: bad catalog entry type [ 258.970542][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 258.980201][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.014560][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.039772][ T12] hfsplus: b-tree write err: -5, ino 4 [ 259.098006][ T5900] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 259.142225][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.185578][ T5900] usb 5-1: config 0 descriptor?? [ 259.471393][ T5849] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 259.573323][T12017] loop6: detected capacity change from 0 to 256 [ 259.579376][ T3603] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 259.581079][T12016] loop3: detected capacity change from 0 to 512 [ 259.605191][T12016] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 259.620724][ T5900] konepure 0003:1E7D:2DB4.000F: unknown main item tag 0x0 [ 259.670091][ T5900] konepure 0003:1E7D:2DB4.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 259.710006][ T5849] usb 6-1: Using ep0 maxpacket: 32 [ 259.729630][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.741415][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.814950][ T3603] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 259.834076][ T3603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.842703][ T5900] usb 5-1: USB disconnect, device number 12 [ 259.851935][ T5849] usb 6-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 259.876438][ T3603] usb 2-1: Product: syz [ 259.894758][ T3603] usb 2-1: Manufacturer: syz [ 259.907635][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.929108][ T3603] usb 2-1: SerialNumber: syz [ 259.948649][ T5849] usb 6-1: config 0 descriptor?? [ 259.961562][ T3603] usb 2-1: config 0 descriptor?? [ 260.248381][ T3603] usb 2-1: USB disconnect, device number 5 [ 260.403429][ T5849] nzxt-smart2 0003:1E71:200F.0010: item fetching failed at offset 2/5 [ 260.429863][ T5849] nzxt-smart2 0003:1E71:200F.0010: probe with driver nzxt-smart2 failed with error -22 [ 260.531028][ T5843] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 260.637815][ T3603] usb 6-1: USB disconnect, device number 11 [ 260.641251][T12021] loop3: detected capacity change from 0 to 32768 [ 261.089520][ T5898] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 261.182425][T12045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2433'. [ 261.234223][T12045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2433'. [ 261.261194][ T5898] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 261.278349][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.358113][ T5898] usb 7-1: config 0 descriptor?? [ 261.394985][ T5898] cp210x 7-1:0.0: cp210x converter detected [ 261.412328][T12056] loop4: detected capacity change from 0 to 512 [ 261.420879][T12056] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 261.449934][T12056] EXT4-fs (loop4): 1 orphan inode deleted [ 261.504948][T12056] EXT4-fs (loop4): 1 truncate cleaned up [ 261.560204][T12056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.680369][T12056] EXT4-fs error (device loop4): ext4_search_dir:1505: inode #12: block 7: comm syz.4.2439: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 261.782376][T12056] EXT4-fs (loop4): Remounting filesystem read-only [ 261.930575][ T5851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.002995][ T5898] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 262.036217][ T5898] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 262.039839][T12075] loop5: detected capacity change from 0 to 4096 [ 262.062515][ T5898] usb 7-1: cp210x converter now attached to ttyUSB0 [ 262.136079][ T5898] usb 7-1: USB disconnect, device number 10 [ 262.202427][ T5898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 262.239735][ T5898] cp210x 7-1:0.0: device disconnected [ 262.270017][T12081] loop3: detected capacity change from 0 to 256 [ 262.340421][T12081] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.983898][T12109] loop6: detected capacity change from 0 to 256 [ 263.109960][T12116] netlink: 'syz.1.2467': attribute type 4 has an invalid length. [ 263.245928][T12120] loop1: detected capacity change from 0 to 64 [ 263.346945][T12122] loop5: detected capacity change from 0 to 24 [ 263.397201][T12126] loop4: detected capacity change from 0 to 512 [ 263.473722][T12126] EXT4-fs (loop4): orphan cleanup on readonly fs [ 263.511106][T12126] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 263.537193][T12126] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 263.547723][T12126] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.2473: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 263.617373][T12126] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.2473: couldn't read orphan inode 13 (err -117) [ 263.644591][T12126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 263.849374][ T3603] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 263.872064][ T5851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.946419][T12140] loop1: detected capacity change from 0 to 2048 [ 263.966697][T12142] loop3: detected capacity change from 0 to 1024 [ 263.995660][T12140] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.032219][ T3603] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 264.057589][ T3603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.101372][ T3603] usb 6-1: config 0 descriptor?? [ 264.379281][ T3603] kaweth 6-1:0.0: Firmware present in device. [ 264.422388][T12156] netlink: 252 bytes leftover after parsing attributes in process `syz.6.2485'. [ 264.524238][ T3603] kaweth 6-1:0.0: Statistics collection: 0 [ 264.569464][ T3603] kaweth 6-1:0.0: Multicast filter limit: 0 [ 264.576864][ T3603] kaweth 6-1:0.0: MTU: 0 [ 264.609698][ T5843] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 264.620357][ T5843] Bluetooth: hci4: Injecting HCI hardware error event [ 264.630463][ T5843] Bluetooth: hci4: hardware error 0x00 [ 264.638525][ T3603] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 264.722901][ T3603] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 264.747412][ T3603] usb 6-1: USB disconnect, device number 12 [ 265.026600][T12175] loop6: detected capacity change from 0 to 256 [ 265.060690][ T5849] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 265.180053][T12175] exfat: Deprecated parameter 'namecase' [ 265.212433][T12145] loop4: detected capacity change from 0 to 32768 [ 265.227364][T12175] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 265.276758][T12175] syz.6.2495: attempt to access beyond end of device [ 265.276758][T12175] loop6: rw=524288, sector=34359738488, nr_sectors = 1 limit=256 [ 265.290770][ T5849] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.309263][ T5849] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.332704][T12175] syz.6.2495: attempt to access beyond end of device [ 265.332704][T12175] loop6: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 265.354861][T12180] syz.6.2495: attempt to access beyond end of device [ 265.354861][T12180] loop6: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 265.370084][ T29] audit: type=1800 audit(1731815696.131:80): pid=12175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2495" name="file1" dev="loop6" ino=1048646 res=0 errno=0 [ 265.409365][ T5849] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 265.418520][ T29] audit: type=1800 audit(1731815696.171:81): pid=12180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2495" name="file1" dev="loop6" ino=1048646 res=0 errno=0 [ 265.450019][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 265.458214][ T5849] usb 4-1: SerialNumber: syz [ 265.537434][T12184] loop5: detected capacity change from 0 to 24 [ 265.684994][ T5849] usb 4-1: 0:2 : does not exist [ 265.690169][ T5849] usb 4-1: unit 255 not found! [ 265.763539][T12145] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,background_compression=zstd,norecovery,reconstruct_alloc,no_data_io [ 265.801970][T12145] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 265.802045][ T5849] usb 4-1: USB disconnect, device number 11 [ 265.823058][T12145] bcachefs (loop4): Version upgrade required: [ 265.823058][T12145] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 265.823058][T12145] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 265.823058][T12145] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 266.021087][T12193] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2500'. [ 266.025423][T12145] bcachefs (loop4): dropping and reconstructing all alloc info [ 266.070011][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.098637][T12145] bcachefs (loop4): accounting_read... done [ 266.114830][T12145] bcachefs (loop4): alloc_read... done [ 266.138476][T12145] bcachefs (loop4): stripes_read... done [ 266.208606][T12145] bcachefs (loop4): snapshots_read... done [ 266.221561][T12145] bcachefs (loop4): check_allocations... done [ 266.410590][T12145] bcachefs (loop4): going read-write [ 266.505304][T12145] bcachefs (loop4): done starting filesystem [ 266.660961][T12210] loop6: detected capacity change from 0 to 136 [ 266.720229][ T5851] bcachefs (loop4): shutting down [ 266.726248][ T5851] bcachefs (loop4): going read-only [ 266.749336][ T5851] bcachefs (loop4): finished waiting for writes to stop [ 266.791149][ T5843] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 266.850301][ T5851] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 266.865151][ T5851] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 266.890882][ T5851] bcachefs (loop4): unshutdown complete, journal seq 11 [ 266.892825][T12181] loop1: detected capacity change from 0 to 32768 [ 266.898954][ T5851] bcachefs (loop4): done going read-only, filesystem not clean [ 267.122471][ T5851] bcachefs (loop4): shutdown complete [ 267.184226][T12202] loop5: detected capacity change from 0 to 32768 [ 267.199342][ T6226] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 267.212265][T12202] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2503 (12202) [ 267.214035][ T6226] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 267.292964][T12202] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 267.307557][T12202] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 267.328729][T12202] BTRFS info (device loop5): using free-space-tree [ 267.462663][T12181] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 267.535543][T12208] loop3: detected capacity change from 0 to 40427 [ 267.606175][T12231] usb usb8: usbfs: process 12231 (syz.0.2512) did not claim interface 0 before use [ 267.657633][T12208] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 267.665987][T12208] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 267.852937][T12227] loop6: detected capacity change from 0 to 32768 [ 267.917121][T12208] F2FS-fs (loop3): Found nat_bits in checkpoint [ 267.929626][T12227] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 268.069429][T12208] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 268.075004][T12181] XFS (loop1): Ending clean mount [ 268.086219][T12181] XFS (loop1): Quotacheck needed: Please wait. [ 268.086870][T12208] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 268.238142][ T6226] ocfs2: Unmounting device (7,6) on (node local) [ 268.272422][T12181] XFS (loop1): Quotacheck: Done. [ 268.319553][ T5835] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 268.342196][ T29] audit: type=1800 audit(1731815699.071:82): pid=12208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2505" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 268.532234][ T5837] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 268.703684][T12257] loop6: detected capacity change from 0 to 512 [ 268.751528][T12257] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 268.795998][T12257] EXT4-fs (loop6): 1 truncate cleaned up [ 268.847529][T12257] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.979418][T12257] EXT4-fs error (device loop6): ext4_lookup:1813: comm syz.6.2518: inode #13: comm syz.6.2518: iget: illegal inode # [ 269.191167][ T6226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.919075][T12282] loop6: detected capacity change from 0 to 1764 [ 269.998263][ T3603] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 270.192516][T12288] loop1: detected capacity change from 0 to 1024 [ 270.230638][ T3603] usb 1-1: Using ep0 maxpacket: 16 [ 270.242306][ T3603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.260016][ T3603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.289268][ T3603] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 270.359822][ T3603] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 270.379417][ T3603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.408104][ T3603] usb 1-1: config 0 descriptor?? [ 270.458574][T12292] loop5: detected capacity change from 0 to 512 [ 270.482662][T12294] loop3: detected capacity change from 0 to 64 [ 270.614469][T12292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.860108][ T3603] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 270.869684][ T5835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.988541][ T3603] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0011/input/input21 [ 271.027427][ T3603] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 271.076210][ T3603] usb 1-1: USB disconnect, device number 13 [ 271.566831][T12304] loop3: detected capacity change from 0 to 32768 [ 271.622998][T12317] loop6: detected capacity change from 0 to 8 [ 271.739351][T12319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2543'. [ 271.871141][T12297] loop1: detected capacity change from 0 to 40427 [ 271.877678][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2548'. [ 271.887200][T12326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2548'. [ 271.912555][T12297] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 271.920783][T12297] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 272.068793][T12297] F2FS-fs (loop1): invalid crc value [ 272.249900][T12297] F2FS-fs (loop1): Found nat_bits in checkpoint [ 272.299489][T12339] loop4: detected capacity change from 0 to 4096 [ 272.307422][T12339] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 272.401724][T12345] loop3: detected capacity change from 0 to 512 [ 272.435156][T12345] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 272.437637][T12346] loop5: detected capacity change from 0 to 2048 [ 272.495145][T12297] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 272.509331][T12297] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 272.515779][T12345] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 272.531700][T12345] EXT4-fs (loop3): 1 truncate cleaned up [ 272.538326][T12345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.590820][T12350] loop6: detected capacity change from 0 to 4096 [ 272.590943][T12346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.639389][T12350] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 272.691336][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.864379][ T5835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.046562][T12360] loop1: detected capacity change from 0 to 16 [ 273.075718][T12360] erofs: (device loop1): mounted with root inode @ nid 36. [ 273.394603][T12365] loop4: detected capacity change from 0 to 512 [ 273.435470][T12365] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 273.560390][T12365] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.2562: invalid indirect mapped block 4294967295 (level 0) [ 273.766267][T12365] EXT4-fs (loop4): Remounting filesystem read-only [ 273.773734][T12365] EXT4-fs (loop4): 1 orphan inode deleted [ 273.808452][T12365] EXT4-fs (loop4): 1 truncate cleaned up [ 273.841392][T12365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.959415][T12384] loop1: detected capacity change from 0 to 32768 [ 274.084648][ T5851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.438468][T12384] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 274.475937][T12356] syz.3.2557 (12356): drop_caches: 2 [ 274.571494][T12384] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 274.579975][T12384] bcachefs (loop1): Version upgrade required: [ 274.579975][T12384] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 274.579975][T12384] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 274.579975][T12384] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 274.651082][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.883346][T12384] bcachefs (loop1): dropping and reconstructing all alloc info [ 274.916433][T12384] bcachefs (loop1): check_topology... done [ 274.949350][T12384] bcachefs (loop1): accounting_read... done [ 274.965461][T12384] bcachefs (loop1): alloc_read... done [ 275.030445][T12384] bcachefs (loop1): stripes_read... done [ 275.036280][T12384] bcachefs (loop1): snapshots_read... done [ 275.065397][T12384] bcachefs (loop1): check_allocations... done [ 275.403260][T12397] loop6: detected capacity change from 0 to 40427 [ 275.412838][T12384] bcachefs (loop1): going read-write [ 275.528170][T12397] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1fffff [ 275.545998][T12384] bcachefs (loop1): done starting filesystem [ 275.599555][T12397] F2FS-fs (loop6): invalid crc value [ 275.696425][T12397] F2FS-fs (loop6): Found nat_bits in checkpoint [ 275.759705][T12397] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 275.767942][T12440] loop3: detected capacity change from 0 to 128 [ 275.904110][ T6226] syz-executor: attempt to access beyond end of device [ 275.904110][ T6226] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 275.949019][ T6226] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 276.003344][ T5837] bcachefs (loop1): shutting down [ 276.018829][ T5837] bcachefs (loop1): going read-only [ 276.030117][ T5837] bcachefs (loop1): finished waiting for writes to stop [ 276.057629][T12447] loop3: detected capacity change from 0 to 2048 [ 276.202051][ T5837] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 276.292687][ T5837] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 14 [ 276.310609][ T5837] bcachefs (loop1): unshutdown complete, journal seq 15 [ 276.360324][ T5837] bcachefs (loop1): done going read-only, filesystem not clean [ 276.449792][ T5837] bcachefs (loop1): shutdown complete [ 276.478803][T12447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.515430][T12422] loop4: detected capacity change from 0 to 32768 [ 276.568143][T12447] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2593: corrupted in-inode xattr: invalid ea_ino [ 276.572426][ T5146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 276.591638][ T5146] CPU: 0 UID: 0 PID: 5146 Comm: kworker/u9:1 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 276.602862][ T5146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 276.612933][ T5146] Workqueue: hci0 hci_rx_work [ 276.613459][T12422] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2582 (12422) [ 276.617637][ T5146] Call Trace: [ 276.617649][ T5146] [ 276.617661][ T5146] dump_stack_lvl+0x241/0x360 [ 276.641285][ T5146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.646502][ T5146] ? __pfx__printk+0x10/0x10 [ 276.651106][ T5146] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.656755][ T5146] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 276.662062][ T5146] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 276.667721][ T5146] sysfs_create_dir_ns+0x2ce/0x3a0 [ 276.672861][ T5146] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 276.678507][ T5146] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.684166][ T5146] kobject_add_internal+0x435/0x8d0 [ 276.689388][ T5146] kobject_add+0x152/0x220 [ 276.693817][ T5146] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.699469][ T5146] ? do_raw_spin_unlock+0x13c/0x8b0 [ 276.704680][ T5146] ? device_add+0x3e7/0xbf0 [ 276.709197][ T5146] ? __pfx_kobject_add+0x10/0x10 [ 276.714329][ T5146] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.720112][ T5146] ? _raw_spin_unlock+0x28/0x50 [ 276.724970][ T5146] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.730619][ T5146] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.736263][ T5146] ? get_device_parent+0x165/0x410 [ 276.741387][ T5146] device_add+0x4e5/0xbf0 [ 276.745745][ T5146] hci_conn_add_sysfs+0xe8/0x200 [ 276.750709][ T5146] le_conn_complete_evt+0xc9f/0x12e0 [ 276.756023][ T5146] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 276.761759][ T5146] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.767409][ T5146] ? __mutex_unlock_slowpath+0x21d/0x750 [ 276.773077][ T5146] ? __copy_skb_header+0x437/0x5b0 [ 276.778205][ T5146] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.783949][ T5146] ? skb_pull_data+0x112/0x230 [ 276.788737][ T5146] hci_le_enh_conn_complete_evt+0x185/0x420 [ 276.794647][ T5146] hci_event_packet+0xa57/0x1540 [ 276.799607][ T5146] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 276.804905][ T5146] ? __pfx_hci_event_packet+0x10/0x10 [ 276.810385][ T5146] ? do_raw_spin_unlock+0x13c/0x8b0 [ 276.815602][ T5146] ? __entry_text_end+0xfdfc5/0x1020c9 [ 276.821077][ T5146] ? hci_send_to_monitor+0xd8/0x7f0 [ 276.826283][ T5146] ? kcov_remote_start+0x97/0x7d0 [ 276.831325][ T5146] hci_rx_work+0x3e8/0xca0 [ 276.835856][ T5146] ? process_scheduled_works+0x976/0x1850 [ 276.841592][ T5146] process_scheduled_works+0xa65/0x1850 [ 276.847179][ T5146] ? __pfx_process_scheduled_works+0x10/0x10 [ 276.853181][ T5146] ? assign_work+0x364/0x3d0 [ 276.857813][ T5146] worker_thread+0x870/0xd30 [ 276.862440][ T5146] ? __kthread_parkme+0x169/0x1d0 [ 276.867491][ T5146] ? __pfx_worker_thread+0x10/0x10 [ 276.872648][ T5146] kthread+0x2f2/0x390 [ 276.876723][ T5146] ? __pfx_worker_thread+0x10/0x10 [ 276.881862][ T5146] ? __pfx_kthread+0x10/0x10 [ 276.886458][ T5146] ret_from_fork+0x4d/0x80 [ 276.890893][ T5146] ? __pfx_kthread+0x10/0x10 [ 276.895486][ T5146] ret_from_fork_asm+0x1a/0x30 [ 276.900280][ T5146] [ 276.904629][ T5146] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 276.919165][ T5146] Bluetooth: hci0: failed to register connection device [ 276.946400][T12422] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 276.956812][T12422] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 276.989314][T12422] BTRFS info (device loop4): using free-space-tree [ 277.038664][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.257753][T12480] loop3: detected capacity change from 0 to 256 [ 277.329948][ T5851] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 277.362105][T12480] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 277.426242][ T964] IPVS: starting estimator thread 0... [ 277.437040][T12482] IPVS: lc: UDP 0.0.0.0:0 - no destination available [ 277.559164][T12483] IPVS: using max 16 ests per chain, 38400 per kthread [ 277.963137][T12496] loop5: detected capacity change from 0 to 512 [ 278.048063][T12496] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.2607: Parent and EA inode have the same ino 15 [ 278.186358][T12496] EXT4-fs (loop5): 1 orphan inode deleted [ 278.211420][T12496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.631971][ T5835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.677114][T12515] loop4: detected capacity change from 0 to 512 [ 278.836361][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2619'. [ 278.878982][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2619'. [ 278.952251][T12515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.010092][T12515] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.098753][T12532] loop6: detected capacity change from 0 to 4096 [ 279.139155][T12532] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 279.215260][ T5851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.730988][ T5900] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 280.109367][ T5900] usb 7-1: Using ep0 maxpacket: 32 [ 280.117107][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.128300][ T5900] usb 7-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 280.137536][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.148817][ T5900] usb 7-1: config 0 descriptor?? [ 280.351831][ T3603] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 280.511921][ T3603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 280.540159][ T3603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 83, setting to 64 [ 280.571678][ T5900] elecom 0003:056E:00FC.0012: unknown main item tag 0xd [ 280.587604][ T5900] elecom 0003:056E:00FC.0012: unexpected long global item [ 280.616978][ T5900] elecom 0003:056E:00FC.0012: probe with driver elecom failed with error -22 [ 280.626632][ T3603] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 280.648417][ T3603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.707759][ T3603] usb 2-1: Product: syz [ 280.722636][ T3603] usb 2-1: Manufacturer: syz [ 280.727257][ T3603] usb 2-1: SerialNumber: syz [ 280.730251][T12575] loop4: detected capacity change from 0 to 512 [ 280.773265][ T5900] usb 7-1: USB disconnect, device number 11 [ 280.775799][T12564] loop3: detected capacity change from 0 to 32768 [ 280.780097][ T3603] usb 2-1: config 0 descriptor?? [ 280.804394][T12575] EXT4-fs (loop4): 1 truncate cleaned up [ 280.846019][T12562] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 280.909994][ T3603] hub 2-1:0.0: bad descriptor, ignoring hub [ 280.915954][ T3603] hub 2-1:0.0: probe with driver hub failed with error -5 [ 280.933592][T12575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.954267][ T3603] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 280.981756][T12575] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.2643: Directory hole found for htree leaf block 0 [ 281.004754][T12575] EXT4-fs (loop4): Remounting filesystem read-only [ 281.066314][T12582] netlink: 'syz.5.2647': attribute type 29 has an invalid length. [ 281.097409][T12582] netlink: 'syz.5.2647': attribute type 29 has an invalid length. [ 281.126868][ T5851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.199000][ T964] usb 2-1: USB disconnect, device number 6 [ 281.292769][T12588] loop5: detected capacity change from 0 to 256 [ 281.323651][T12588] exfat: Deprecated parameter 'namecase' [ 281.330242][T12588] exfat: Deprecated parameter 'utf8' [ 281.335656][T12588] exfat: Deprecated parameter 'namecase' [ 281.343006][T12588] exfat: Deprecated parameter 'utf8' [ 281.366637][T12588] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 281.383687][ T5898] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 281.415987][T12590] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2651'. [ 281.603501][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.615766][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.627122][ T5898] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 281.813565][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.851494][ T5898] usb 1-1: config 0 descriptor?? [ 282.226764][T12613] loop3: detected capacity change from 0 to 256 [ 282.230825][T12614] loop1: detected capacity change from 0 to 256 [ 282.288680][ T5898] zydacron 0003:13EC:0006.0013: item fetching failed at offset 4/5 [ 282.316390][T12613] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 282.329647][ T5898] zydacron 0003:13EC:0006.0013: parse failed [ 282.335000][T12618] loop6: detected capacity change from 0 to 512 [ 282.335844][ T5898] zydacron 0003:13EC:0006.0013: probe with driver zydacron failed with error -22 [ 282.457327][T12618] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 282.479441][T12618] UDF-fs: Scanning with blocksize 512 failed [ 282.490928][T12618] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 282.514759][ T5898] usb 1-1: USB disconnect, device number 14 [ 282.539372][T12618] UDF-fs: Scanning with blocksize 1024 failed [ 282.575125][T12618] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 282.605485][T12618] UDF-fs: Scanning with blocksize 2048 failed [ 282.636599][T12618] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 282.689437][T12618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.037976][ T5941] kernel write not supported for file /snd/seq (pid: 5941 comm: kworker/0:6) [ 283.151766][T12610] loop5: detected capacity change from 0 to 32768 [ 283.167062][T12610] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2660 (12610) [ 283.269360][ T5898] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 283.380754][T12610] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 283.391316][T12610] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 283.400206][T12610] BTRFS info (device loop5): using free-space-tree [ 283.407609][T12644] netlink: 312 bytes leftover after parsing attributes in process `syz.6.2676'. [ 283.520109][T12648] loop3: detected capacity change from 0 to 2048 [ 283.540974][ T5898] usb 5-1: config 0 has an invalid interface number: 112 but max is 0 [ 283.550163][ T5898] usb 5-1: config 0 has no interface number 0 [ 283.563198][ T5898] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 283.578996][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.603503][T12648] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 283.663761][ T5898] usb 5-1: Product: syz [ 283.668197][ T5898] usb 5-1: Manufacturer: syz [ 283.668796][T12657] loop6: detected capacity change from 0 to 512 [ 283.673274][ T5898] usb 5-1: SerialNumber: syz [ 283.710079][ T5898] usb 5-1: config 0 descriptor?? [ 283.761999][ T5898] mvusb_mdio 5-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 283.789812][T12669] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 283.904265][T12676] loop1: detected capacity change from 0 to 256 [ 283.943623][T12657] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 283.993303][ T5898] usb 5-1: USB disconnect, device number 13 [ 284.107904][ T5835] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 284.216716][T12657] Quota error (device loop6): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 284.242801][T12657] EXT4-fs warning (device loop6): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 284.288916][T12690] ------------[ cut here ]------------ [ 284.294695][T12690] WARNING: CPU: 1 PID: 12690 at net/ipv4/route.c:1241 ip_rt_bug+0x2c/0x110 [ 284.303559][T12690] Modules linked in: [ 284.307488][T12690] CPU: 1 UID: 0 PID: 12690 Comm: syz.1.2687 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 284.318386][T12690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 284.328508][T12690] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 284.333545][T12690] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 3b 3b 73 f7 66 90 e8 34 3b 73 f7 31 ff 48 89 de ba 02 00 00 00 e8 c5 b4 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 0c 92 ce 01 f3 0f 1e [ 284.353264][T12690] RSP: 0018:ffffc9000d576be0 EFLAGS: 00010282 [ 284.359417][T12690] RAX: 60c9ee96068fa000 RBX: ffff888026509500 RCX: ffffffff8170cfaa [ 284.367419][T12690] RDX: dffffc0000000000 RSI: ffffffff8c0acac0 RDI: ffffffff8c610d20 [ 284.375503][T12690] RBP: 0000000000000001 R08: ffffffff942d089f R09: ffffffff8a21aeeb [ 284.383541][T12690] R10: dffffc0000000000 R11: fffffbfff285a114 R12: dffffc0000000000 [ 284.391603][T12690] R13: ffffc9000d576e58 R14: ffff8880351f9d80 R15: ffff8880212921c0 [ 284.399642][T12690] FS: 00007f0a106a36c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 284.408629][T12690] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.415302][T12690] CR2: 0000001b3081dff8 CR3: 000000005cd10000 CR4: 0000000000350ef0 [ 284.423346][T12690] Call Trace: [ 284.426651][T12690] [ 284.429842][T12690] ? __warn+0x168/0x4e0 [ 284.434031][T12690] ? ip_rt_bug+0x2c/0x110 [ 284.438402][T12690] ? report_bug+0x2b3/0x500 [ 284.443089][T12690] ? ip_rt_bug+0x2c/0x110 [ 284.447460][T12690] ? handle_bug+0x60/0x90 [ 284.451878][T12690] ? exc_invalid_op+0x1a/0x50 [ 284.456607][T12690] ? asm_exc_invalid_op+0x1a/0x20 [ 284.461729][T12690] ? ip_rt_bug+0x2b/0x110 [ 284.466189][T12690] ? mark_lock+0x9a/0x360 [ 284.470688][T12690] ? ip_rt_bug+0x2c/0x110 [ 284.475148][T12690] ip_push_pending_frames+0xbf/0x150 [ 284.480534][T12690] __icmp_send+0x1017/0x15c0 [ 284.485180][T12690] ? __icmp_send+0x5d2/0x15c0 [ 284.489944][T12690] ? __pfx___icmp_send+0x10/0x10 [ 284.494928][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.500635][T12690] ? __skb_checksum+0x8a0/0x9d0 [ 284.505512][T12690] ? ip_route_input_rcu+0x3851/0x3910 [ 284.510963][T12690] ? __pfx___skb_checksum_complete+0x10/0x10 [ 284.516971][T12690] ? csum_tcpudp_nofold+0x1e/0x60 [ 284.522078][T12690] ? __pfx_csum_partial_ext+0x10/0x10 [ 284.527475][T12690] ? __pfx_csum_block_add_ext+0x10/0x10 [ 284.533109][T12690] ? nf_ip_checksum+0x1bc/0x500 [ 284.537997][T12690] nf_send_unreach+0x467/0x8d0 [ 284.542847][T12690] ? __pfx_nf_send_unreach+0x10/0x10 [ 284.548167][T12690] ? __pfx_validate_chain+0x10/0x10 [ 284.553464][T12690] ? 0xffffffffa0006440 [ 284.557650][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.563377][T12690] ? validate_chain+0x11e/0x5920 [ 284.568437][T12690] ? __pfx_validate_chain+0x10/0x10 [ 284.573721][T12690] nft_reject_inet_eval+0x439/0x690 [ 284.578972][T12690] nft_do_chain+0x4af/0x1da0 [ 284.580849][T12695] Bluetooth: MGMT ver 1.23 [ 284.583648][T12690] ? __pfx_nft_do_chain+0x10/0x10 [ 284.593161][T12690] ? __local_bh_enable_ip+0x168/0x200 [ 284.598586][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.604427][T12690] nft_do_chain_inet+0x418/0x6b0 [ 284.609439][T12690] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 284.614931][T12690] ? ipt_do_table+0x312/0x1860 [ 284.619792][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.625471][T12690] ? nf_nat_ipv4_pre_routing+0x257/0x3b0 [ 284.631637][T12690] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 284.637133][T12690] nf_hook_slow+0xc5/0x220 [ 284.641633][T12690] ? __pfx_ip_rcv_finish+0x10/0x10 [ 284.646790][T12690] ? __pfx_ip_rcv_finish+0x10/0x10 [ 284.651995][T12690] NF_HOOK+0x29e/0x450 [ 284.656105][T12690] ? NF_HOOK+0x9a/0x450 [ 284.660348][T12690] ? __pfx_NF_HOOK+0x10/0x10 [ 284.664976][T12690] ? ip_rcv_core+0x801/0xd10 [ 284.669652][T12690] ? __pfx_ip_rcv_finish+0x10/0x10 [ 284.674816][T12690] ? __pfx_ip_rcv+0x10/0x10 [ 284.679395][T12690] __netif_receive_skb+0x2bf/0x650 [ 284.684556][T12690] ? __pfx_lock_acquire+0x10/0x10 [ 284.689668][T12690] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 284.695944][T12690] ? __pfx___netif_receive_skb+0x10/0x10 [ 284.701674][T12690] ? __kasan_slab_alloc+0x66/0x80 [ 284.706745][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.712638][T12690] ? timekeeping_get_ns+0x2c0/0x420 [ 284.717887][T12690] ? netif_receive_skb+0x131/0x890 [ 284.723090][T12690] ? netif_receive_skb+0x131/0x890 [ 284.728252][T12690] netif_receive_skb+0x1e8/0x890 [ 284.733279][T12690] ? tun_rx_batched+0x160/0x8f0 [ 284.738176][T12690] ? __pfx_netif_receive_skb+0x10/0x10 [ 284.743740][T12690] ? tun_rx_batched+0x160/0x8f0 [ 284.748635][T12690] tun_rx_batched+0x1b7/0x8f0 [ 284.753408][T12690] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 284.759823][T12690] ? __pfx_lock_acquire+0x10/0x10 [ 284.764897][T12690] ? __pfx_tun_rx_batched+0x10/0x10 [ 284.770379][T12690] tun_get_user+0x3056/0x47e0 [ 284.775100][T12690] ? tun_get_user+0x2b44/0x47e0 [ 284.780278][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.785957][T12690] ? __lock_acquire+0x1384/0x2050 [ 284.791077][T12690] ? __pfx_tun_get_user+0x10/0x10 [ 284.796161][T12690] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 284.801696][T12690] ? tun_get+0x1e/0x2f0 [ 284.805890][T12690] ? __pfx_lock_release+0x10/0x10 [ 284.811019][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.816696][T12690] ? tun_get+0x1e/0x2f0 [ 284.820929][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.826597][T12690] ? tun_get+0x27d/0x2f0 [ 284.830928][T12690] tun_chr_write_iter+0x10d/0x1f0 [ 284.835993][T12690] vfs_write+0xaed/0xd30 [ 284.840325][T12690] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 284.845911][T12690] ? __pfx_vfs_write+0x10/0x10 [ 284.850758][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.856442][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.862166][T12690] ? fdget_pos+0x19a/0x320 [ 284.866623][T12690] ksys_write+0x183/0x2b0 [ 284.871034][T12690] ? __pfx_ksys_write+0x10/0x10 [ 284.875915][T12690] ? do_syscall_64+0x100/0x230 [ 284.880772][T12690] ? do_syscall_64+0xb6/0x230 [ 284.885494][T12690] do_syscall_64+0xf3/0x230 [ 284.890097][T12690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.896028][T12690] RIP: 0033:0x7f0a0f97d1ff [ 284.900716][T12690] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 284.920393][T12690] RSP: 002b:00007f0a106a3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 284.928860][T12690] RAX: ffffffffffffffda RBX: 00007f0a0fb35f80 RCX: 00007f0a0f97d1ff [ 284.936913][T12690] RDX: 000000000000002a RSI: 0000000020000080 RDI: 00000000000000c8 [ 284.944950][T12690] RBP: 00007f0a0f9f175e R08: 0000000000000000 R09: 0000000000000000 [ 284.953001][T12690] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000000 [ 284.961031][T12690] R13: 0000000000000000 R14: 00007f0a0fb35f80 R15: 00007fff40369488 [ 284.969051][T12690] [ 284.972156][T12690] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 284.979453][T12690] CPU: 1 UID: 0 PID: 12690 Comm: syz.1.2687 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 284.990318][T12690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 285.000472][T12690] Call Trace: [ 285.003762][T12690] [ 285.006701][T12690] dump_stack_lvl+0x241/0x360 [ 285.011416][T12690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.016649][T12690] ? __pfx__printk+0x10/0x10 [ 285.021286][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.026953][T12690] ? vscnprintf+0x5d/0x90 [ 285.031323][T12690] panic+0x349/0x880 [ 285.035248][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.040917][T12690] ? __warn+0x177/0x4e0 [ 285.045100][T12690] ? __pfx_panic+0x10/0x10 [ 285.049566][T12690] __warn+0x34b/0x4e0 [ 285.053573][T12690] ? ip_rt_bug+0x2c/0x110 [ 285.057941][T12690] report_bug+0x2b3/0x500 [ 285.062299][T12690] ? ip_rt_bug+0x2c/0x110 [ 285.066665][T12690] handle_bug+0x60/0x90 [ 285.070866][T12690] exc_invalid_op+0x1a/0x50 [ 285.075404][T12690] asm_exc_invalid_op+0x1a/0x20 [ 285.080287][T12690] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 285.085256][T12690] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 3b 3b 73 f7 66 90 e8 34 3b 73 f7 31 ff 48 89 de ba 02 00 00 00 e8 c5 b4 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 0c 92 ce 01 f3 0f 1e [ 285.104889][T12690] RSP: 0018:ffffc9000d576be0 EFLAGS: 00010282 [ 285.110988][T12690] RAX: 60c9ee96068fa000 RBX: ffff888026509500 RCX: ffffffff8170cfaa [ 285.118981][T12690] RDX: dffffc0000000000 RSI: ffffffff8c0acac0 RDI: ffffffff8c610d20 [ 285.127234][T12690] RBP: 0000000000000001 R08: ffffffff942d089f R09: ffffffff8a21aeeb [ 285.135224][T12690] R10: dffffc0000000000 R11: fffffbfff285a114 R12: dffffc0000000000 [ 285.143224][T12690] R13: ffffc9000d576e58 R14: ffff8880351f9d80 R15: ffff8880212921c0 [ 285.151518][T12690] ? ip_rt_bug+0x2b/0x110 [ 285.155887][T12690] ? mark_lock+0x9a/0x360 [ 285.160255][T12690] ip_push_pending_frames+0xbf/0x150 [ 285.165571][T12690] __icmp_send+0x1017/0x15c0 [ 285.170213][T12690] ? __icmp_send+0x5d2/0x15c0 [ 285.175010][T12690] ? __pfx___icmp_send+0x10/0x10 [ 285.179986][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.185653][T12690] ? __skb_checksum+0x8a0/0x9d0 [ 285.190537][T12690] ? ip_route_input_rcu+0x3851/0x3910 [ 285.195951][T12690] ? __pfx___skb_checksum_complete+0x10/0x10 [ 285.202566][T12690] ? csum_tcpudp_nofold+0x1e/0x60 [ 285.207625][T12690] ? __pfx_csum_partial_ext+0x10/0x10 [ 285.213024][T12690] ? __pfx_csum_block_add_ext+0x10/0x10 [ 285.218600][T12690] ? nf_ip_checksum+0x1bc/0x500 [ 285.223489][T12690] nf_send_unreach+0x467/0x8d0 [ 285.228291][T12690] ? __pfx_nf_send_unreach+0x10/0x10 [ 285.233612][T12690] ? __pfx_validate_chain+0x10/0x10 [ 285.238865][T12690] ? 0xffffffffa0006440 [ 285.243045][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.248744][T12690] ? validate_chain+0x11e/0x5920 [ 285.253714][T12690] ? __pfx_validate_chain+0x10/0x10 [ 285.258947][T12690] nft_reject_inet_eval+0x439/0x690 [ 285.264190][T12690] nft_do_chain+0x4af/0x1da0 [ 285.268830][T12690] ? __pfx_nft_do_chain+0x10/0x10 [ 285.273883][T12690] ? __local_bh_enable_ip+0x168/0x200 [ 285.279303][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.285003][T12690] nft_do_chain_inet+0x418/0x6b0 [ 285.289983][T12690] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 285.295472][T12690] ? ipt_do_table+0x312/0x1860 [ 285.300271][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.305941][T12690] ? nf_nat_ipv4_pre_routing+0x257/0x3b0 [ 285.311619][T12690] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 285.317111][T12690] nf_hook_slow+0xc5/0x220 [ 285.321563][T12690] ? __pfx_ip_rcv_finish+0x10/0x10 [ 285.326720][T12690] ? __pfx_ip_rcv_finish+0x10/0x10 [ 285.331876][T12690] NF_HOOK+0x29e/0x450 [ 285.335986][T12690] ? NF_HOOK+0x9a/0x450 [ 285.340178][T12690] ? __pfx_NF_HOOK+0x10/0x10 [ 285.344800][T12690] ? ip_rcv_core+0x801/0xd10 [ 285.349437][T12690] ? __pfx_ip_rcv_finish+0x10/0x10 [ 285.354596][T12690] ? __pfx_ip_rcv+0x10/0x10 [ 285.359138][T12690] __netif_receive_skb+0x2bf/0x650 [ 285.364298][T12690] ? __pfx_lock_acquire+0x10/0x10 [ 285.369366][T12690] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 285.375637][T12690] ? __pfx___netif_receive_skb+0x10/0x10 [ 285.381310][T12690] ? __kasan_slab_alloc+0x66/0x80 [ 285.386370][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.392037][T12690] ? timekeeping_get_ns+0x2c0/0x420 [ 285.397280][T12690] ? netif_receive_skb+0x131/0x890 [ 285.402429][T12690] ? netif_receive_skb+0x131/0x890 [ 285.407576][T12690] netif_receive_skb+0x1e8/0x890 [ 285.412548][T12690] ? tun_rx_batched+0x160/0x8f0 [ 285.417434][T12690] ? __pfx_netif_receive_skb+0x10/0x10 [ 285.422948][T12690] ? tun_rx_batched+0x160/0x8f0 [ 285.427838][T12690] tun_rx_batched+0x1b7/0x8f0 [ 285.432730][T12690] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 285.439365][T12690] ? __pfx_lock_acquire+0x10/0x10 [ 285.444428][T12690] ? __pfx_tun_rx_batched+0x10/0x10 [ 285.449693][T12690] tun_get_user+0x3056/0x47e0 [ 285.454408][T12690] ? tun_get_user+0x2b44/0x47e0 [ 285.459305][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.464977][T12690] ? __lock_acquire+0x1384/0x2050 [ 285.470142][T12690] ? __pfx_tun_get_user+0x10/0x10 [ 285.475315][T12690] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 285.480808][T12690] ? tun_get+0x1e/0x2f0 [ 285.485012][T12690] ? __pfx_lock_release+0x10/0x10 [ 285.490088][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.495761][T12690] ? tun_get+0x1e/0x2f0 [ 285.499951][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.505616][T12690] ? tun_get+0x27d/0x2f0 [ 285.509893][T12690] tun_chr_write_iter+0x10d/0x1f0 [ 285.514956][T12690] vfs_write+0xaed/0xd30 [ 285.519234][T12690] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 285.524818][T12690] ? __pfx_vfs_write+0x10/0x10 [ 285.529619][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.535302][T12690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.540969][T12690] ? fdget_pos+0x19a/0x320 [ 285.545444][T12690] ksys_write+0x183/0x2b0 [ 285.549802][T12690] ? __pfx_ksys_write+0x10/0x10 [ 285.554684][T12690] ? do_syscall_64+0x100/0x230 [ 285.559489][T12690] ? do_syscall_64+0xb6/0x230 [ 285.564203][T12690] do_syscall_64+0xf3/0x230 [ 285.568835][T12690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.574771][T12690] RIP: 0033:0x7f0a0f97d1ff [ 285.579210][T12690] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 285.598840][T12690] RSP: 002b:00007f0a106a3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 285.607293][T12690] RAX: ffffffffffffffda RBX: 00007f0a0fb35f80 RCX: 00007f0a0f97d1ff [ 285.615291][T12690] RDX: 000000000000002a RSI: 0000000020000080 RDI: 00000000000000c8 [ 285.623285][T12690] RBP: 00007f0a0f9f175e R08: 0000000000000000 R09: 0000000000000000 [ 285.631536][T12690] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000000 [ 285.639523][T12690] R13: 0000000000000000 R14: 00007f0a0fb35f80 R15: 00007fff40369488 [ 285.647536][T12690] [ 285.650815][T12690] Kernel Offset: disabled [ 285.655234][T12690] Rebooting in 86400 seconds..