last executing test programs: 5m53.860133843s ago: executing program 4 (id=284): socket$netlink(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto(r3, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 5m52.773440409s ago: executing program 4 (id=288): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x2b73, 0x1b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x80, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x5, 0x7, {0x7, 0x25, 0x1, 0x4, 0x45, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x7, 0x6, {0x7, 0x25, 0x1, 0xc, 0x8, 0x6}}}}}}}}]}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0, 0x4}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000140)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 5m49.551813639s ago: executing program 4 (id=302): r0 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r0, 0x0, 0x0, 0x1c) 5m49.423664802s ago: executing program 4 (id=303): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000980)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=r0, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56a, &(0x7f0000002c80)="$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") fallocate(r1, 0x5b, 0x8000000000000000, 0x6) syz_create_resource$binfmt(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8100, 0x101) lseek(r2, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r7, 0x107, 0x11, 0x0, &(0x7f0000001600)) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x40012100, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000600)={0x80, 0x6, 0x8efb, 0xb91, 0xec, 0x951, 0x0}) getdents64(r2, 0x0, 0x0) 5m48.487348465s ago: executing program 4 (id=307): add_key$user(&(0x7f0000001e40), &(0x7f0000001e80)={'syz', 0x3}, &(0x7f0000001ec0)='\\', 0x1, 0xfffffffffffffffd) 5m45.899703049s ago: executing program 4 (id=312): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x40800, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5f, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffec6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000b00)="000000952ba30000002f000000008919", 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) connect$bt_sco(r1, &(0x7f0000000700), 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x21) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000180)) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$nfs(0x0, 0x0, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='local_lock\x00', &(0x7f0000000200)='all\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1008000, &(0x7f0000002340)=ANY=[], 0xfe, 0x5f3, &(0x7f0000000400)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0xa4, 0x0, 0x4}, {0x4c, 0x0, 0x0, 0x10000}, {0x6, 0x8}]}) 5m45.733595283s ago: executing program 32 (id=312): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x40800, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5f, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffec6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000b00)="000000952ba30000002f000000008919", 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) connect$bt_sco(r1, &(0x7f0000000700), 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x21) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000180)) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$nfs(0x0, 0x0, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='local_lock\x00', &(0x7f0000000200)='all\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1008000, &(0x7f0000002340)=ANY=[], 0xfe, 0x5f3, &(0x7f0000000400)="$eJzs3cFPG9kZAPBvDBhDJdZhyW5arVS0lVZVURPbSCXbS9vttkLVqlqph55RIYBi2AiciuTQ0qqHqKf8Cakq/oGqx1Ti0OTQQ3vKmSrHSr1zczXjsTHBJQQMmOT3k8bz3ryZN9/7PDOeMUIO4J01PxPDu5HE/MwXW2l9b2e2vrczu9YuR8RoRBQiShGRpIv/GhEvI7ajNcXX2w1d8yNePC0tP3/87FGrlvZVSoZb6yfHbXcynVjKrVizeb/6q529v0MjnIyI6TP3B33QbPt3z+YznpcAwCBLIoZ6LS9HjOc37OlzQOuuuHWPfaVtX3YAAAAAcAHe24/92IqJy44DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArpL89/+TfCq0y9ORtH//v5gvi7x8pe1edgAAAAAAAAAA0Aff3I/92IqJdr2ZZH/z/zirTGWvX4v7sRlLsRE3YysWohGN2IhqRJS7OipuLTQaG9UTbFnruWXtYsYLAAAAAAAAAG+p38f8wd//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgECQRQ61ZNk21y+UoDEdEKSKK6XrbEf9ql6+y3csOAAAAAM5Joav83n7sx1ZMtOvNJHvm/yB77i/F/ViPRqxGI+qxFIvZdwGtp/7C3s5sfW9ndi2dju7jR/9tzUez15HXhVTMwxrKar32fCNbYyzuxGq25Gb8Kr6KeixGoTOgG+14esf1uzSm5Ae5EyZrMZ+nI/9ZPh8M5SwjI52MVPLY0mxcOz4T7XfnlHuqRqHzzc/UOeR8PP9iKR3P5wOd81rX0ffB8ZmImPzlH+dW6ut3V+5szgzOkE7p1UzMdmXiw3cqE5UsE9c79fn4afwiZmI6voyNWI1fx0I0Yimm4/OstJAfz+lr+fhM/fBQ7cvXRVLM35fWVfTNYvo423YiVuPn8VUsZu9oJeZiLmrxvfg0Kofe4es94/5tM2/ebzabUXizs/5b384L6YfFT07yoXFh0rxe68pr9zW3nLV1LznI0mT/r43D38gL6dHz2cBdG6+98inRzsT7x2fiT9mBs1lfv7uxsnDvhPv7JJ+nGfhxJxPD+dLmUF8GdSrp8TLZieXw0ZG2vd+zrZq1TXXaCkfarnfaXnemFvN7uKM91bK2D3u2tba70dXW634LgIE3/p3x4th/xv459mTsD2MrY1+UPhu9PfpRMUb+PvL94crQJ4WPkr/Ek/jNwfM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwepsPHt5dqNeXNk5daP8S0Vn7eXcLUvfWF/pxol1w4bKvTMB5u9VYu3dr88HD766uLSwvLS+tf1q5fbtarc5Vbt1ZrS/lr5cdJQDQT11PoQAAAAAAAAAAAAAAwIC6kP9vBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEfzMzG8G0lUKzcraX1vZ7aeTu3ywZqliEjSwt8i4mXEdrSmKHd1l/y//bx4Wlp+/vjZo4O+Stn6/6j1YxSHYim8EtNZ+6t19ffnU3WXdDIzHRGT+Rwu3f8CAAD//zpgBYM=") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0xa4, 0x0, 0x4}, {0x4c, 0x0, 0x0, 0x10000}, {0x6, 0x8}]}) 11.968989985s ago: executing program 5 (id=1402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) read$FUSE(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff080007400000000d2c000680140004000000000000000000000000000000000114000500fc"], 0xc0}}, 0x4) 10.838699542s ago: executing program 5 (id=1405): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x1, 0x102, '\x00@\x00', 0x1, 0x1}) 8.08410545s ago: executing program 5 (id=1413): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x20, 0x84, "daf2d780d00f8409952eb854b674ab175166927ae9bf74f60ef2d23b8551c53b5e71ef37a519b12696b9c03294c95716945bb6b142ce42aba569592c1b13068ed760efed1bbdc1462c3429bed4e72e95b476c24deca38ab15ee9ada33d23addbb65dbb2f961eb1d14b84347c1b0d2cadbfc60b43edc169fefa9265fc305b3546dd5ce075"}}) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1a0f"], 0x1d) 7.995055763s ago: executing program 0 (id=1416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) read$FUSE(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff080007400000000d2c000680140004000000000000000000000000000000000114000500fc"], 0xc0}}, 0x4) 5.987495442s ago: executing program 0 (id=1418): open(0x0, 0x1a1342, 0x162) clock_nanosleep(0x2, 0x1, &(0x7f0000000140), 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') pread64(r0, &(0x7f0000000140)=""/95, 0x5f, 0x72) 5.007375366s ago: executing program 2 (id=1421): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) lseek(r0, 0x4, 0x5) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000010c0)=""/4096, 0x1000) 4.933665518s ago: executing program 2 (id=1422): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000680)="b94a6430e0d5", 0x6}], 0x1}, 0x95) sendmsg$inet(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)="aa", 0x1}], 0x1}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 4.83593919s ago: executing program 2 (id=1423): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 4.747462193s ago: executing program 2 (id=1424): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x1, 0x102, '\x00@\x00', 0x1, 0x1}) 3.560387232s ago: executing program 2 (id=1425): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x20, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.531403273s ago: executing program 1 (id=1426): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x13c) read(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.466586264s ago: executing program 5 (id=1428): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, r0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file1\x00', 0x4002, &(0x7f00000001c0)=ANY=[@ANYBLOB='longad,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,volume=00000000000000000003,shortad,gid=', @ANYRESDEC=0x0, @ANYBLOB=',session=18446744073709551489,gid=ignore,lastblock=0000001002,partition=18446744073709551612,undelete,\x00'], 0x2, 0xc30, &(0x7f0000002740)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x2c, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 3.441217385s ago: executing program 0 (id=1429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff080007400000000d2c000680140004000000000000000000000000000000000114000500fc"], 0xc0}}, 0x4) 3.387690586s ago: executing program 3 (id=1430): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xfb) 3.283908789s ago: executing program 3 (id=1431): socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="0000000000000000660000000000010018000000000082d700000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 3.115565473s ago: executing program 0 (id=1432): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000640), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x2, 0x0, 0x98, &(0x7f0000002340)={0x1000000000000, 0x24000, 0x1}}) 2.392644341s ago: executing program 0 (id=1433): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) lseek(0xffffffffffffffff, 0x1100, 0x1) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb) 2.303966523s ago: executing program 3 (id=1434): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@noload}, {@init_itable}]}, 0x4, 0x4d1, &(0x7f0000000500)="$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") unshare(0x28000600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 2.197003966s ago: executing program 1 (id=1435): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d3030303030303030303030303030000000000000dc599bad22eebebb0002372c6e6f6465000000000000000000"], 0xff, 0x6b4, &(0x7f00000010c0)="$eJzs3UuIXXcdB/DvuZncyY2QTts0jSJ0aKBog8lMLjURhEYRySJI0E23QzJphtykZTKVtIi5UevClSvpwkVF4qIrERHqSlrXguDGVfYBdy6CqFPO487cmbmZRx5zp+3nA2fO/9z/63d+c865955JOAE+t869lv39FDl3/PzNcvvunW7v7p3utUE5yWSSVjJRr1J0kuLj5GzqJV8sX2yGKx40zyv3Piwm3vugW29NNEvVvrVZvw1GtuwnB1Y29iWZrov/3fawG8arlmqci6vjPaRiJe4yYccGiYNxW96gv1rZ2rL79s9bYM+6Vb9vbjCVHEz97lp+Dkhzddj6yjB+m16b+rsXBwAAADwpI7/LD3vqfu7nZg7tTjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw2VDUzwwsmqU1KE+nGDz/vz30TP32mMN9RO9erlbff2rcgQAAAAAAAADAI3nhfu7nZg4NtpeL6m/+L1Ybh6ufX8hbuZH5LOZEbmYuS1nKYmaTTA0N1L45t7S0OLux569S9lxeXr7V9Dw1sueptXH11wc66l8abGgEAAAAAAAAAJ9bP8m51b//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXlAk++pVtRwelKfSmkhyIEm7mF5p3h5rsI/BX8YdAAAAADx5nWZ9qPh/XVguqu/8R6rv/QfyVq5nKQtZSi/zuVTdC6i/9bf+3u/27t7pXiuXjQN/6187iqMaMfW9h9Ezz1QtnktytmpzLt/ND3I807mQxSzkh5nLUuYzne9UpbkUmWruXkzdvdPJINaN8Z5ds3VhfWwvDJXL+I5WkXRyOQtVbCdysT0IvdW0Ozo025/ayboZb5fZKV5tbDNHl5p1uUe/bNZ7w1S15/tXMjLT5L7MxtPDed+Y+x0eJ+tnmk1r5R7U4dVZys31Mz1Uzg826zLXP3+yOd/hrbS1mej/otwaHH1HNs958tV/fHThSuv61SuXbxzfO4fRQxpkotUcE92hTDy/VSaKfHThSq/MRP8RMnHgUeJ/fNpNNuqraH21rG19tXyx6nsoC/le3silzOd0ZjKbM5nJN3Iq3Zwayutzm+e1OtdaOzvXjn2lKXTyn+XaY0nK9k0+qKLM69NDeR2+0k1VdcOvrGbpmW1kqWhndJb+OTKUiS81hXKOnw6944zf+kzMDmXi2c0z8Zv/lb/rG73rVxevzL25zfleatblafvu2mvzbx/LDu1cs7vl8fJM+ctK/bYxfHSUdc8O6tblq938xWWiGWxNXTvV+VzXbXWmliMduT1qpLru+ZGzdKu6o0N1az7l5I30Vj6FALCHHXz5YLtzr/O3zvudn3WudM4f+Pbkmckvt7P/rxN/3vf71u9a3yxezvv5cQ6NO1IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgsuPH2O1fner35xT1YSOsxD3h7ZNUgFfUr7b2x75/WwuRmR9QfkmzSvT2OmDtJ9kTqMrELc01mRNX5lVc6SWslniRX98gD7oAn4eTStTdP3nj7na8tXJt7ff71+eunzpx+9XT367O3Tl5e6M3P1D/HHSXwJKx+DNh+nwc+LxUAAAAAAAAAAADYFbvx3xtGTFv0x7CvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKfTudeyv58iszMnZsrtu3e6vXIZlFdbTiRpJSl+lBQfJ2dTL5kaGq540Dyv3Pvw1y+990F3dayJQfvWun5//Pfy8g73ot8smU6yr1lvbXJb410cGq+/w8Bqxcoelgk7NkgcjNsnAQAA//8Rcg4Y") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 1.976363441s ago: executing program 5 (id=1436): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000d00)={[{@grpjquota}, {@dioread_lock}, {@nobarrier}]}, 0xfe, 0x244, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x4040000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000005e80)=ANY=[@ANYBLOB="020d0000100000002f3144e90000000003000600eb1f00000200403fe0000001000000f5000000000800120002000100000000000000000030006c100201009f6eae02000000adb20200000000152c000000ffffffff00010a0014bb7acde1b8e96408d700000000030005000020000002"], 0x80}}, 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl(r1, 0x8b18, &(0x7f0000000040)) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40040) 1.859899424s ago: executing program 1 (id=1437): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x1, 0x102, '\x00@\x00', 0x1, 0x1}) 1.094913583s ago: executing program 1 (id=1438): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)) 1.054544304s ago: executing program 3 (id=1439): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 695.830013ms ago: executing program 3 (id=1440): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x10, &(0x7f0000000040)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobh}]}, 0x41, 0x4e8, &(0x7f00000005c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000006c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x8}}}}}, 0x0) 623.341055ms ago: executing program 5 (id=1441): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000001c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@nombcache}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@nodiscard}, {@nobarrier}, {@usrjquota}]}, 0xfa, 0x491, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvTLulgNiK+AMEqaKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezM0NLutlu6ZQv7+SS7fW/mte99Z+btvJk33QA61kD2lkQ8EBF/RkRfnr29wED+48a1C2P/XrswlkS1+s4/Sa3c9WsXxsqi5e9tzTPVapHfVKfei+9HjE5NTZwt8kOzpz8amjl3/qXJ06MnJ05OnBk5evTQwT09R0YOtyTOLK7ruz6d3r3z2HuX3ho7fumDX5I08rhjURytMpBv3bqebXVlbbZtQTrpzt57i9ze3+bX1DsSaKeuiMh2V6XW//uiKzbfWtcXb3zR1sYB66parVaX+VSeqwL3sSTa3QKgPcoTfXb9W77u0tBjQ7j6an4BlMV9o3jla7ojzRN7K4uub1tpICKOz928nL1ine5DAAAs9EM2/nmx3vgvjUfzRE/29mAxh9IfEQ9FxPaIeDgidkTEIxG1so9FxOOrrH/xDMnS8U965Y6Da0I2/nulmNu6ffyXlkX6u4rctlr8leTE5NTEgWKb7I/KphOTycTwMnX8+PofXzVaVxv/lYPxuZuXs/rLsWDRjivdi27QjY/Ojq4l5oWufh6xq7te/EltXiCKeb2dEbHrDuuYfL674bqF49/jdeNfRuM/27TqNxHP5ft/LhbFX0oazk8Ov3xk5PBQb0xNHBgqj4qlfv394tuN6l9T/C2Q7f8tdY//W/H3J70RM+fOn6rN186svo6Lf33Z8Jpm5fhvO/6PbSuO/57k3dqCnmLFJ6Ozs2eHI3qSN5cuH5n/a2W+LJ/Fv39f/f6/Pea3xBMRsTsi9kTEk9lFYdH2pyLi6YjYt0z8P7/2zIerj7/+XfnKMvXciSz+8ZX2fyzc/6tPdJ366fuV4++NiEb7/1Attb9Y0sznX7MNXMu2AwAAgHtF/gx8kg7Op5PBwfwZ/h2xJZ2anpl94cT0x2fG82fl+6OSlne6+hbcDx0u7g2X+ZFF+YPFfeOvuzbX8oNj01Pj7Q4eOtzWJf0/TbP+n/m7q92tA9ZdC+bRgHuU/g+dS/+HzpSs2P9b/cgRsJE4/0Pnqtf/P2tYevC7dW0McFc5/0PnaqL/z+U/Go8KgHuT8z90Lv0fOlLD/41P1/Qv/y1N7Pk2b+tyZf4rvkJlo7T5/k9EuiGacf8nupv+MotGicrSvlzty/tUtmRT3d9q68cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAy/wfAAD//3gk5XA=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) 552.165306ms ago: executing program 0 (id=1442): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0xd0, 0x0, 0xd0, 0x0, 0x270, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x6}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, [0xff, 0xff], [0xff000000, 0xff000000, 0xff, 0xff], 'bridge0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x33, 0x1, 0x2}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@multicast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000400, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x1, 0x6eb, &(0x7f0000001240)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1005004, 0x0, 0x0, 0x0, &(0x7f0000000140)) syz_open_procfs$pagemap(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r3, 0x10000000005, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) open(0x0, 0x149040, 0x40) removexattr(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000100), 0x8) listen(r4, 0x5) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04040aaaaaaa198b1000000000"], 0xd) syz_emit_vhci(0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) 163.862016ms ago: executing program 1 (id=1443): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2c, r0, 0x1, 0x40, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 108.655287ms ago: executing program 3 (id=1444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$FUSE_LSEEK(r4, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)="303132333a616263643a63ed7b188db386fd353596a17062fe01637654c85ba3a1dfc61bf255cc6e5bbfa4b6dbccec74416c116f64ae3b5fc3616004a22fec19a3b0842f45f04f319b706ab85b", 0x4d) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017"], &(0x7f00000001c0)='syzkaller\x00', 0xa4d, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 46.146119ms ago: executing program 1 (id=1445): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0xf, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x2, 0x0, 'queue0\x00', 0x32a}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) 0s ago: executing program 2 (id=1446): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x81, 0xffffffff, 0x20000}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000020000000", 0x1e5) kernel console output (not intermixed with test programs): change from 0 to 8 [ 297.180039][ T7071] loop3: detected capacity change from 0 to 1024 [ 298.930220][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 300.309067][ T7104] loop3: detected capacity change from 0 to 512 [ 300.732004][ T7104] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 300.782336][ T7118] loop0: detected capacity change from 0 to 16 [ 300.807701][ T7104] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.677: corrupted in-inode xattr [ 300.921104][ T7118] erofs: (device loop0): mounted with root inode @ nid 36. [ 300.957152][ T7118] attempt to access beyond end of device [ 300.957152][ T7118] loop0: rw=0, want=40, limit=16 [ 300.960002][ T7104] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.677: couldn't read orphan inode 15 (err -117) [ 301.091543][ T7104] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,nombcache,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 301.132684][ T7121] loop1: detected capacity change from 0 to 16 [ 301.648805][ T7131] loop2: detected capacity change from 0 to 128 [ 301.729208][ T7132] loop5: detected capacity change from 0 to 16 [ 301.891971][ T7121] erofs: (device loop1): mounted with root inode @ nid 36. [ 301.907979][ T7132] erofs: (device loop5): mounted with root inode @ nid 36. [ 301.923319][ T7129] attempt to access beyond end of device [ 301.923319][ T7129] loop5: rw=0, want=40, limit=16 [ 301.938028][ T7129] attempt to access beyond end of device [ 301.938028][ T7129] loop5: rw=524288, want=48, limit=16 [ 301.949585][ T7129] attempt to access beyond end of device [ 301.949585][ T7129] loop5: rw=524288, want=40, limit=16 [ 301.982822][ T7131] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 302.048262][ T7131] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 302.342450][ T7113] attempt to access beyond end of device [ 302.342450][ T7113] loop1: rw=0, want=40, limit=16 [ 302.898539][ T7121] attempt to access beyond end of device [ 302.898539][ T7121] loop1: rw=524288, want=48, limit=16 [ 302.910607][ T7121] attempt to access beyond end of device [ 302.910607][ T7121] loop1: rw=524288, want=40, limit=16 [ 302.984326][ T7146] loop5: detected capacity change from 0 to 8 [ 303.901353][ T7154] loop5: detected capacity change from 0 to 1024 [ 305.140663][ T7167] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 305.174884][ T7167] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 305.450819][ T7182] loop0: detected capacity change from 0 to 512 [ 305.516697][ T7184] loop2: detected capacity change from 0 to 8 [ 305.625789][ T7182] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 305.704772][ T7182] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.695: corrupted in-inode xattr [ 305.839211][ T7182] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.695: couldn't read orphan inode 15 (err -117) [ 305.873476][ T7182] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,nombcache,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 306.495925][ T7192] loop5: detected capacity change from 0 to 16 [ 306.545049][ T7192] erofs: (device loop5): mounted with root inode @ nid 36. [ 306.554794][ T7192] attempt to access beyond end of device [ 306.554794][ T7192] loop5: rw=0, want=40, limit=16 [ 306.566059][ T7192] attempt to access beyond end of device [ 306.566059][ T7192] loop5: rw=524288, want=48, limit=16 [ 306.577338][ T7192] attempt to access beyond end of device [ 306.577338][ T7192] loop5: rw=524288, want=40, limit=16 [ 307.659014][ T7200] loop0: detected capacity change from 0 to 128 [ 307.826463][ T7200] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 307.918989][ T7200] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 308.845829][ T7211] loop3: detected capacity change from 0 to 16 [ 308.914006][ T7211] erofs: (device loop3): mounted with root inode @ nid 36. [ 308.927428][ T7209] attempt to access beyond end of device [ 308.927428][ T7209] loop3: rw=0, want=40, limit=16 [ 308.955520][ T7209] attempt to access beyond end of device [ 308.955520][ T7209] loop3: rw=524288, want=48, limit=16 [ 309.025408][ T7209] attempt to access beyond end of device [ 309.025408][ T7209] loop3: rw=524288, want=40, limit=16 [ 309.094018][ T7213] loop0: detected capacity change from 0 to 1024 [ 310.286149][ T7221] loop2: detected capacity change from 0 to 16 [ 310.341022][ T7221] erofs: (device loop2): mounted with root inode @ nid 36. [ 310.412577][ T7223] kvm [7222]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 310.461677][ T7223] kvm [7222]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 310.492100][ T7223] APIC base relocation is unsupported by KVM [ 310.527520][ T7202] attempt to access beyond end of device [ 310.527520][ T7202] loop2: rw=0, want=40, limit=16 [ 310.668483][ T7231] loop1: detected capacity change from 0 to 8 [ 310.687537][ T7221] attempt to access beyond end of device [ 310.687537][ T7221] loop2: rw=524288, want=48, limit=16 [ 312.460114][ T7247] loop5: detected capacity change from 0 to 512 [ 312.775066][ T7247] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 312.824459][ T7247] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.712: corrupted in-inode xattr [ 312.904523][ T7247] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.712: couldn't read orphan inode 15 (err -117) [ 312.984940][ T7247] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,nombcache,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 313.387733][ T7256] loop5: detected capacity change from 0 to 1024 [ 314.307157][ T7262] loop3: detected capacity change from 0 to 128 [ 314.411772][ T7262] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 314.500693][ T7262] ext4 filesystem being mounted at /159/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 315.584233][ T7289] loop5: detected capacity change from 0 to 16 [ 315.644940][ T7289] erofs: (device loop5): mounted with root inode @ nid 36. [ 315.654091][ T7289] attempt to access beyond end of device [ 315.654091][ T7289] loop5: rw=0, want=40, limit=16 [ 315.675399][ T7289] attempt to access beyond end of device [ 315.675399][ T7289] loop5: rw=524288, want=48, limit=16 [ 315.686413][ T7289] attempt to access beyond end of device [ 315.686413][ T7289] loop5: rw=524288, want=40, limit=16 [ 315.748193][ T7282] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 315.759299][ T7282] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 316.008707][ T7291] loop1: detected capacity change from 0 to 8 [ 316.272155][ T7295] loop3: detected capacity change from 0 to 16 [ 317.210326][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.216851][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.223887][ T7295] erofs: (device loop3): mounted with root inode @ nid 36. [ 317.241517][ T7292] attempt to access beyond end of device [ 317.241517][ T7292] loop3: rw=0, want=40, limit=16 [ 317.253117][ T7292] attempt to access beyond end of device [ 317.253117][ T7292] loop3: rw=524288, want=48, limit=16 [ 317.264245][ T7292] attempt to access beyond end of device [ 317.264245][ T7292] loop3: rw=524288, want=40, limit=16 [ 317.987152][ T7305] loop1: detected capacity change from 0 to 1024 [ 318.972487][ T7318] loop3: detected capacity change from 0 to 128 [ 318.986680][ T7316] loop5: detected capacity change from 0 to 16 [ 319.072141][ T7316] erofs: (device loop5): mounted with root inode @ nid 36. [ 319.091729][ T7316] attempt to access beyond end of device [ 319.091729][ T7316] loop5: rw=0, want=40, limit=16 [ 319.124088][ T7316] attempt to access beyond end of device [ 319.124088][ T7316] loop5: rw=524288, want=48, limit=16 [ 319.243970][ T7318] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 319.270006][ T7316] attempt to access beyond end of device [ 319.270006][ T7316] loop5: rw=524288, want=40, limit=16 [ 319.335128][ T7318] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 319.335431][ T7327] loop0: detected capacity change from 0 to 512 [ 319.466727][ T7327] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 319.637647][ T7327] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.725: corrupted in-inode xattr [ 319.655007][ T7327] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.725: couldn't read orphan inode 15 (err -117) [ 319.799905][ T7327] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,nombcache,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 320.302993][ T7337] loop3: detected capacity change from 0 to 1024 [ 320.449124][ T26] audit: type=1800 audit(1791070117.267:94): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.733" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 320.452554][ T7337] attempt to access beyond end of device [ 320.452554][ T7337] loop3: rw=0, want=5780, limit=1024 [ 320.520362][ T26] audit: type=1800 audit(1791070117.267:95): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.733" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 320.594131][ T7337] Buffer I/O error on dev loop3, logical block 2889, async page read [ 320.612080][ T26] audit: type=1800 audit(1791070117.267:96): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.733" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 320.621259][ T7336] Buffer I/O error on dev loop3, logical block 2889, async page read [ 320.719455][ T7337] handle_bad_sector: 1 callbacks suppressed [ 320.719474][ T7337] attempt to access beyond end of device [ 320.719474][ T7337] loop3: rw=0, want=5780, limit=1024 [ 320.782088][ T7337] Buffer I/O error on dev loop3, logical block 2889, async page read [ 320.814960][ T7337] attempt to access beyond end of device [ 320.814960][ T7337] loop3: rw=0, want=5780, limit=1024 [ 320.832318][ T7337] Buffer I/O error on dev loop3, logical block 2889, async page read [ 320.881409][ T7336] attempt to access beyond end of device [ 320.881409][ T7336] loop3: rw=0, want=5780, limit=1024 [ 321.045976][ T7343] loop0: detected capacity change from 0 to 16 [ 321.062855][ T7336] Buffer I/O error on dev loop3, logical block 2889, async page read [ 321.084422][ T7337] attempt to access beyond end of device [ 321.084422][ T7337] loop3: rw=0, want=5780, limit=1024 [ 321.255265][ T7337] Buffer I/O error on dev loop3, logical block 2889, async page read [ 322.146363][ T7343] erofs: (device loop0): mounted with root inode @ nid 36. [ 322.161633][ T7340] attempt to access beyond end of device [ 322.161633][ T7340] loop0: rw=0, want=40, limit=16 [ 322.174098][ T7340] attempt to access beyond end of device [ 322.174098][ T7340] loop0: rw=524288, want=48, limit=16 [ 322.184442][ T7337] attempt to access beyond end of device [ 322.184442][ T7337] loop3: rw=0, want=5780, limit=1024 [ 322.185536][ T7340] attempt to access beyond end of device [ 322.185536][ T7340] loop0: rw=524288, want=40, limit=16 [ 322.239611][ T7337] Buffer I/O error on dev loop3, logical block 2889, async page read [ 322.258373][ T7337] attempt to access beyond end of device [ 322.258373][ T7337] loop3: rw=0, want=5780, limit=1024 [ 322.286289][ T7337] Buffer I/O error on dev loop3, logical block 2889, async page read [ 322.295513][ T7336] attempt to access beyond end of device [ 322.295513][ T7336] loop3: rw=0, want=5780, limit=1024 [ 322.309146][ T7336] Buffer I/O error on dev loop3, logical block 2889, async page read [ 322.317723][ T7337] Buffer I/O error on dev loop3, logical block 2889, async page read [ 323.563212][ T7359] loop0: detected capacity change from 0 to 1024 [ 324.725620][ T7370] loop2: detected capacity change from 0 to 256 [ 324.916085][ T7370] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 325.152517][ T7374] loop0: detected capacity change from 0 to 128 [ 325.316499][ T7374] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 325.349715][ T7377] loop2: detected capacity change from 0 to 512 [ 325.362765][ T7374] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 325.369490][ T7381] loop5: detected capacity change from 0 to 8 [ 325.416774][ T7383] loop3: detected capacity change from 0 to 128 [ 325.505886][ T7383] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 326.007687][ T7377] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 326.029686][ T26] audit: type=1800 audit(1791070122.847:97): pid=7383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.746" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 326.111803][ T26] audit: type=1800 audit(1791070122.867:98): pid=7389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.746" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 326.132281][ T26] audit: type=1800 audit(1791070122.877:99): pid=7383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.746" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 326.153390][ T7377] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.745: corrupted inode contents [ 326.175109][ T7377] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #16: comm syz.2.745: mark_inode_dirty error [ 326.222100][ T7377] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.745: corrupted inode contents [ 326.264253][ T7377] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.745: mark_inode_dirty error [ 326.304539][ T7377] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.745: corrupted inode contents [ 327.015686][ T7377] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 327.070962][ T7377] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.745: corrupted inode contents [ 327.198346][ T7377] EXT4-fs error (device loop2): ext4_truncate:4286: inode #16: comm syz.2.745: mark_inode_dirty error [ 327.259158][ T7377] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 327.300769][ T7377] EXT4-fs (loop2): 1 truncate cleaned up [ 327.335844][ T7377] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 327.368744][ T7377] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.962992][ T7406] loop5: detected capacity change from 0 to 16 [ 328.074262][ T7406] erofs: (device loop5): mounted with root inode @ nid 36. [ 328.084018][ T7406] handle_bad_sector: 22 callbacks suppressed [ 328.084034][ T7406] attempt to access beyond end of device [ 328.084034][ T7406] loop5: rw=0, want=40, limit=16 [ 328.101497][ T7406] attempt to access beyond end of device [ 328.101497][ T7406] loop5: rw=524288, want=48, limit=16 [ 328.112521][ T7406] attempt to access beyond end of device [ 328.112521][ T7406] loop5: rw=524288, want=40, limit=16 [ 328.230516][ T7410] loop2: detected capacity change from 0 to 1024 [ 330.263374][ T7426] loop2: detected capacity change from 0 to 128 [ 330.496015][ T7426] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 330.520016][ T7426] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 330.625263][ T7434] loop3: detected capacity change from 0 to 256 [ 330.728739][ T7434] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 331.289023][ T7437] loop3: detected capacity change from 0 to 8 [ 332.660555][ T1107] Bluetooth: hci4: command 0x0405 tx timeout [ 333.215047][ T7454] loop5: detected capacity change from 0 to 1024 [ 333.334228][ T7454] EXT4-fs (loop5): inline encryption not supported [ 333.402993][ T7454] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 333.410805][ T7454] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 333.465649][ T7454] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,grpquota,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 333.596001][ T7454] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.192932][ T7480] loop5: detected capacity change from 0 to 256 [ 334.311793][ T7480] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 337.063484][ T7490] loop0: detected capacity change from 0 to 16 [ 337.116362][ T7490] erofs: (device loop0): mounted with root inode @ nid 36. [ 337.150979][ T7490] attempt to access beyond end of device [ 337.150979][ T7490] loop0: rw=0, want=40, limit=16 [ 337.493398][ T7493] loop5: detected capacity change from 0 to 128 [ 337.564176][ T7493] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 337.585595][ T7493] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 337.667685][ T7499] loop3: detected capacity change from 0 to 256 [ 337.835619][ T7499] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 337.851679][ T7504] loop2: detected capacity change from 0 to 8 [ 338.264806][ T4286] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 338.383316][ T7513] loop3: detected capacity change from 0 to 16 [ 339.137493][ T7513] erofs: (device loop3): mounted with root inode @ nid 36. [ 339.162038][ T7513] attempt to access beyond end of device [ 339.162038][ T7513] loop3: rw=0, want=40, limit=16 [ 339.222920][ T7523] attempt to access beyond end of device [ 339.222920][ T7523] loop3: rw=524288, want=48, limit=16 [ 339.344928][ T4286] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.375762][ T4286] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 339.394393][ T4286] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 339.419281][ T4286] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 339.449059][ T4286] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 339.474279][ T4286] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 339.508022][ T4286] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 339.533494][ T4286] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 339.560019][ T4286] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 339.589012][ T4286] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 339.609432][ T4286] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 339.629451][ T4286] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 339.630693][ T4232] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 339.649503][ T4286] usb 2-1: config 1 interface 0 altsetting 0 has 10 endpoint descriptors, different from the interface descriptor's value: 14 [ 339.833511][ T26] audit: type=1800 audit(1791070136.647:100): pid=7531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.787" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 339.855050][ T4286] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 339.865550][ T4286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.873572][ T4286] usb 2-1: Product: syz [ 339.888178][ T4286] usb 2-1: Manufacturer: syz [ 339.892830][ T4286] usb 2-1: SerialNumber: syz [ 339.925048][ T7508] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 339.935679][ T7508] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 339.951340][ T7508] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 339.998477][ T7508] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 340.023043][ T7508] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 340.047419][ T7508] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 340.066215][ T4232] usb 6-1: Using ep0 maxpacket: 16 [ 340.082549][ T7508] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 340.082700][ T7508] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 340.082778][ T7508] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 340.087162][ T4286] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 340.089494][ T4286] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 340.092755][ T4286] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 5 [ 340.108745][ T4286] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 340.140712][ T4286] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 4 [ 340.177314][ T4286] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 340.195717][ T4232] usb 6-1: config 1 has an invalid interface number: 193 but max is 0 [ 340.211593][ T4232] usb 6-1: config 1 has no interface number 0 [ 340.227661][ T4232] usb 6-1: config 1 interface 193 has no altsetting 0 [ 340.324442][ T4286] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 340.427424][ T4232] usb 6-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice= 3.b3 [ 340.443112][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.448461][ T7542] loop3: detected capacity change from 0 to 512 [ 340.451907][ T4232] usb 6-1: Product: syz [ 340.477935][ T4232] usb 6-1: Manufacturer: syz [ 340.482776][ T4232] usb 6-1: SerialNumber: syz [ 340.571474][ T7542] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 340.638621][ T7542] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.790: corrupted in-inode xattr [ 340.675479][ T7542] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.790: couldn't read orphan inode 15 (err -117) [ 340.708044][ T7542] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,nombcache,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 340.743640][ T4286] usb 2-1: USB disconnect, device number 2 [ 340.760144][ T4286] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 340.780727][ T4286] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 340.799211][ T4286] keyspan 2-1:1.0: device disconnected [ 340.855960][ T7549] loop2: detected capacity change from 0 to 128 [ 340.951325][ T7549] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 340.989974][ T7549] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 341.320865][ T4232] usb 6-1: USB disconnect, device number 2 [ 341.360242][ T7559] loop3: detected capacity change from 0 to 8 [ 342.724283][ T7571] loop2: detected capacity change from 0 to 256 [ 343.152242][ T7571] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 344.583149][ T7584] loop5: detected capacity change from 0 to 512 [ 344.613533][ T7583] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 344.673604][ T7573] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 344.705618][ T7584] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 344.717680][ T7573] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 344.785460][ T7584] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.803: corrupted in-inode xattr [ 344.899881][ T7584] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.803: couldn't read orphan inode 15 (err -117) [ 344.915034][ T7584] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,nombcache,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 345.620102][ T7599] loop3: detected capacity change from 0 to 128 [ 345.726609][ T7599] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 345.772047][ T7603] loop2: detected capacity change from 0 to 8 [ 345.854321][ T7599] ext4 filesystem being mounted at /178/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 346.276320][ T7607] loop1: detected capacity change from 0 to 2048 [ 346.366686][ T7607] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 348.118669][ T7641] loop1: detected capacity change from 0 to 1024 [ 348.774461][ T7641] hfsplus: walked past end of dir [ 349.379953][ T7649] loop1: detected capacity change from 0 to 128 [ 349.956956][ T7649] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 349.968221][ T7655] loop2: detected capacity change from 0 to 8 [ 349.970695][ T7649] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 351.365878][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'. [ 351.474991][ T1107] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 351.542917][ T7678] loop3: detected capacity change from 0 to 512 [ 351.835158][ T1107] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.031619][ T1107] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 352.047069][ T7678] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 352.101597][ T1107] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 352.134975][ T7678] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.186918][ T1107] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 352.272922][ T1107] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 352.313665][ T1107] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 352.344382][ T1107] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 352.371338][ T1107] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 352.394416][ T1107] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 352.421732][ T1107] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 352.442224][ T1107] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 352.470173][ T1107] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 352.480324][ T1107] usb 6-1: config 1 interface 0 altsetting 0 has 10 endpoint descriptors, different from the interface descriptor's value: 14 [ 352.679349][ T1107] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 352.702790][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.728788][ T1107] usb 6-1: Product: syz [ 352.753464][ T1107] usb 6-1: Manufacturer: syz [ 352.763607][ T1107] usb 6-1: SerialNumber: syz [ 352.835098][ T7665] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 352.869671][ T7665] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 352.914934][ T7665] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 352.922050][ T7665] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 353.014356][ T7665] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 353.042212][ T7665] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 353.081590][ T7665] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 353.099918][ T7665] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 353.122413][ T7665] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 353.147136][ T1107] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 353.160895][ T1107] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 353.201793][ T1107] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 5 [ 353.234356][ T1107] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 353.242779][ T4279] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 353.273235][ T1107] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 353.291701][ T1107] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 353.313126][ T1107] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 353.940902][ T7706] loop3: detected capacity change from 0 to 8 [ 353.974962][ T4279] usb 2-1: Using ep0 maxpacket: 16 [ 354.184863][ T4279] usb 2-1: config 1 has an invalid interface number: 193 but max is 0 [ 354.193063][ T4279] usb 2-1: config 1 has no interface number 0 [ 354.200624][ T4279] usb 2-1: config 1 interface 193 has no altsetting 0 [ 354.370518][ T4229] usb 6-1: USB disconnect, device number 3 [ 354.395236][ T4279] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice= 3.b3 [ 354.399479][ T4229] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 354.404306][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.404329][ T4279] usb 2-1: Product: syz [ 354.404342][ T4279] usb 2-1: Manufacturer: syz [ 354.454958][ T4279] usb 2-1: SerialNumber: syz [ 354.474567][ T4229] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 354.512637][ T4229] keyspan 6-1:1.0: device disconnected [ 354.978442][ T4279] usb 2-1: USB disconnect, device number 3 [ 355.073033][ T7717] loop5: detected capacity change from 0 to 128 [ 355.415873][ T7717] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 355.597147][ T7717] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 356.042852][ T7729] loop1: detected capacity change from 0 to 764 [ 356.315263][ T7739] loop5: detected capacity change from 0 to 512 [ 356.359976][ T7736] kvm: pic: level sensitive irq not supported [ 356.392851][ T7739] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 356.392851][ T7739] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 356.392851][ T7739] [ 356.426340][ T7739] EXT4-fs (loop5): Unrecognized mount option "dont_hash" or missing value [ 356.464287][ T7743] loop3: detected capacity change from 0 to 8 [ 357.683848][ T7755] loop1: detected capacity change from 0 to 256 [ 358.285305][ T4232] Bluetooth: hci4: command 0x0405 tx timeout [ 358.360951][ T7755] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 358.737031][ T7766] loop3: detected capacity change from 0 to 128 [ 358.955717][ T7766] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 359.041040][ T7766] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 359.446024][ T4286] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 359.924957][ T4286] usb 6-1: unable to get BOS descriptor or descriptor too short [ 360.005149][ T4286] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 109, changing to 10 [ 360.170009][ T7796] loop2: detected capacity change from 0 to 256 [ 360.811928][ T7796] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 361.025015][ T4286] usb 6-1: string descriptor 0 read error: -22 [ 361.034365][ T4286] usb 6-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice= 0.40 [ 361.082436][ T4286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.166482][ T4286] usb 6-1: MIDIStreaming interface descriptor not found [ 361.345894][ T26] audit: type=1326 audit(1791070158.167:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.1.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e1258159 code=0x7ffc0000 [ 361.411606][ T26] audit: type=1326 audit(1791070158.167:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.1.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e1258159 code=0x7ffc0000 [ 361.434267][ T7809] loop1: detected capacity change from 0 to 256 [ 361.449193][ T7809] exfat: Unknown parameter '' [ 361.490313][ T4232] usb 6-1: USB disconnect, device number 4 [ 361.521611][ T26] audit: type=1326 audit(1791070158.167:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.1.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f44e12145ac code=0x7ffc0000 [ 361.607322][ T7815] loop2: detected capacity change from 0 to 1024 [ 361.654494][ T26] audit: type=1326 audit(1791070158.167:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.1.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f44e121460e code=0x7ffc0000 [ 361.687941][ T7815] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 361.750179][ T7815] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 361.800810][ T26] audit: type=1326 audit(1791070158.167:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.1.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44e1257deb code=0x7ffc0000 [ 361.829072][ T7815] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 361.857699][ T7815] System zones: 0-1, 3-36 [ 361.877400][ T7815] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 361.899286][ T26] audit: type=1326 audit(1791070158.167:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.1.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f44e1258159 code=0x7ffc0000 [ 361.924352][ T26] audit: type=1326 audit(1791070158.167:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.1.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e1258159 code=0x7ffc0000 [ 361.956776][ T26] audit: type=1326 audit(1791070158.167:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.1.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e1258159 code=0x7ffc0000 [ 361.988133][ T26] audit: type=1326 audit(1791070158.167:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.1.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e1258159 code=0x7ffc0000 [ 362.013536][ T26] audit: type=1326 audit(1791070158.167:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.1.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f44e1258159 code=0x7ffc0000 [ 362.132247][ T7821] loop3: detected capacity change from 0 to 128 [ 362.186920][ T4229] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 362.232413][ T7821] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 362.370870][ T7821] ext4 filesystem being mounted at /192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 362.394750][ T4229] usb 3-1: device descriptor read/64, error -71 [ 362.590586][ T7830] loop0: detected capacity change from 0 to 256 [ 362.769545][ T4286] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 362.898658][ T7830] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 363.335060][ T4229] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 364.275035][ T4286] usb 6-1: config 8 has an invalid interface number: 55 but max is 0 [ 364.314865][ T4286] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 364.325500][ T4229] usb 3-1: device descriptor read/64, error -71 [ 364.369990][ T4286] usb 6-1: config 8 has no interface number 0 [ 364.393935][ T4286] usb 6-1: config 8 interface 55 altsetting 9 endpoint 0x86 has invalid wMaxPacketSize 0 [ 364.400628][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'. [ 364.433358][ T4286] usb 6-1: config 8 interface 55 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.451728][ T4229] usb usb3-port1: attempt power cycle [ 364.484561][ T4286] usb 6-1: config 8 interface 55 has no altsetting 0 [ 364.715074][ T4286] usb 6-1: New USB device found, idVendor=0bda, idProduct=817c, bcdDevice= 2.b8 [ 364.724646][ T4286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.754774][ T4286] usb 6-1: Product: syz [ 364.769277][ T4286] usb 6-1: Manufacturer: syz [ 364.801246][ T4286] usb 6-1: SerialNumber: syz [ 364.951707][ T7868] loop2: detected capacity change from 0 to 128 [ 365.050462][ T7868] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 365.074904][ T7868] ext4 filesystem being mounted at /177/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 365.227843][ T4286] usb 6-1: USB disconnect, device number 5 [ 367.077598][ T7887] loop2: detected capacity change from 0 to 2048 [ 367.202319][ T7887] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 367.223454][ T7887] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.804806][ T4279] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 368.265021][ T4279] usb 3-1: config 128 has an invalid interface number: 1 but max is 0 [ 368.294409][ T4279] usb 3-1: config 128 has no interface number 0 [ 368.535078][ T4279] usb 3-1: New USB device found, idVendor=16d8, idProduct=7251, bcdDevice=5a.84 [ 368.556549][ T4279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.565994][ T4279] usb 3-1: Product: syz [ 368.571403][ T4279] usb 3-1: Manufacturer: syz [ 368.579202][ T4279] usb 3-1: SerialNumber: syz [ 368.717641][ T7909] loop5: detected capacity change from 0 to 512 [ 368.766338][ T7910] loop1: detected capacity change from 0 to 16 [ 368.783272][ T7909] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 368.830758][ T7909] EXT4-fs (loop5): 1 truncate cleaned up [ 368.841306][ T7909] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 368.895904][ T7910] erofs: (device loop1): mounted with root inode @ nid 36. [ 368.977538][ T4279] usb 3-1: USB disconnect, device number 9 [ 369.116831][ T7910] attempt to access beyond end of device [ 369.116831][ T7910] loop1: rw=0, want=40, limit=16 [ 369.288298][ T7918] loop0: detected capacity change from 0 to 256 [ 369.852770][ T7910] attempt to access beyond end of device [ 369.852770][ T7910] loop1: rw=524288, want=48, limit=16 [ 369.870805][ T7920] loop5: detected capacity change from 0 to 128 [ 369.881727][ T7918] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 369.986883][ T7910] attempt to access beyond end of device [ 369.986883][ T7910] loop1: rw=524288, want=40, limit=16 [ 370.103838][ T7920] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 370.181360][ T7924] loop2: detected capacity change from 0 to 256 [ 370.238278][ T7920] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 370.310534][ T7924] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 370.727603][ T1107] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 370.971171][ T4286] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 371.074896][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 371.075752][ T7935] loop1: detected capacity change from 0 to 16 [ 371.131305][ T7935] erofs: (device loop1): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 371.275119][ T1107] usb 3-1: config 9 has an invalid interface number: 197 but max is 0 [ 371.292919][ T1107] usb 3-1: config 9 has no interface number 0 [ 371.300218][ T1107] usb 3-1: config 9 interface 197 altsetting 15 has an invalid endpoint with address 0x80, skipping [ 371.300865][ T7938] loop5: detected capacity change from 0 to 16 [ 371.330298][ T1107] usb 3-1: config 9 interface 197 has no altsetting 0 [ 371.374093][ T7938] erofs: (device loop5): mounted with root inode @ nid 36. [ 371.383178][ T7938] attempt to access beyond end of device [ 371.383178][ T7938] loop5: rw=0, want=40, limit=16 [ 371.394805][ T7938] attempt to access beyond end of device [ 371.394805][ T7938] loop5: rw=524288, want=48, limit=16 [ 371.405978][ T7938] attempt to access beyond end of device [ 371.405978][ T7938] loop5: rw=524288, want=40, limit=16 [ 371.544857][ T4286] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 371.553073][ T4286] usb 1-1: config 0 has no interface number 0 [ 371.564867][ T4286] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 371.586384][ T4286] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 371.606165][ T1107] usb 3-1: string descriptor 0 read error: -22 [ 371.614650][ T1107] usb 3-1: New USB device found, idVendor=413c, idProduct=8185, bcdDevice= 1.b6 [ 371.615003][ T4286] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 371.624058][ T4286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.631986][ T4286] usb 1-1: config 0 descriptor?? [ 371.681548][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.698078][ T4286] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input7 [ 371.842383][ T7945] loop1: detected capacity change from 0 to 1024 [ 371.956023][ T2302] usb 1-1: USB disconnect, device number 2 [ 372.058542][ T1107] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 372.314810][ T1107] usb 4-1: Using ep0 maxpacket: 32 [ 373.265352][ T4232] usb 3-1: USB disconnect, device number 10 [ 373.325361][ T1107] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 373.333388][ T7957] loop1: detected capacity change from 0 to 1024 [ 373.341706][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.454800][ T1107] usb 4-1: Product: syz [ 373.469410][ T1107] usb 4-1: Manufacturer: syz [ 373.475441][ T1107] usb 4-1: SerialNumber: syz [ 373.557218][ T7962] loop0: detected capacity change from 0 to 256 [ 373.717705][ T7962] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 374.113701][ T7963] input: syz0 as /devices/virtual/input/input8 [ 374.225670][ T1107] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 374.277080][ T1107] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 374.372886][ T1107] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 374.463059][ T1107] usb 4-1: USB disconnect, device number 5 [ 374.582259][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.386512][ T7971] loop0: detected capacity change from 0 to 16 [ 375.460670][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 375.485687][ T7971] erofs: (device loop0): mounted with root inode @ nid 36. [ 375.494967][ T7971] attempt to access beyond end of device [ 375.494967][ T7971] loop0: rw=0, want=40, limit=16 [ 375.506279][ T7971] attempt to access beyond end of device [ 375.506279][ T7971] loop0: rw=524288, want=48, limit=16 [ 375.517270][ T7971] attempt to access beyond end of device [ 375.517270][ T7971] loop0: rw=524288, want=40, limit=16 [ 375.788331][ T7981] loop0: detected capacity change from 0 to 2048 [ 375.887416][ T7981] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 375.951056][ T7981] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 375.991318][ T7981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.179259][ T7987] loop2: detected capacity change from 0 to 16 [ 376.349555][ T7986] loop1: detected capacity change from 0 to 2048 [ 376.369201][ T7987] erofs: (device loop2): mounted with root inode @ nid 36. [ 376.383980][ T7984] attempt to access beyond end of device [ 376.383980][ T7984] loop2: rw=0, want=40, limit=16 [ 376.409659][ T7984] attempt to access beyond end of device [ 376.409659][ T7984] loop2: rw=524288, want=48, limit=16 [ 376.420740][ T7984] attempt to access beyond end of device [ 376.420740][ T7984] loop2: rw=524288, want=40, limit=16 [ 376.582989][ T7986] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.628033][ T7992] loop0: detected capacity change from 0 to 256 [ 376.706933][ T7992] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 376.731818][ T7993] loop3: detected capacity change from 0 to 16 [ 376.793387][ T7992] exFAT-fs (loop0): hint_cluster is invalid (17) [ 377.509134][ T7993] erofs: (device loop3): mounted with root inode @ nid 36. [ 377.668216][ T8003] loop5: detected capacity change from 0 to 256 [ 377.719084][ T8003] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 377.767637][ T7993] attempt to access beyond end of device [ 377.767637][ T7993] loop3: rw=0, want=40, limit=16 [ 378.060422][ T8009] loop2: detected capacity change from 0 to 128 [ 378.201670][ T8009] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 378.292504][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.933'. [ 378.315038][ T8009] ext4 filesystem being mounted at /186/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 378.545169][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.551504][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.689606][ T8023] loop1: detected capacity change from 0 to 512 [ 379.097064][ T8023] EXT4-fs (loop1): Ignoring removed orlov option [ 380.443103][ T8038] loop5: detected capacity change from 0 to 256 [ 380.451034][ T8037] loop3: detected capacity change from 0 to 2048 [ 380.532202][ T8023] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,orlov,,errors=continue. Quota mode: writeback. [ 380.619479][ T8037] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.622353][ T8038] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 380.655033][ T8023] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.328962][ T8023] capability: warning: `syz.1.935' uses 32-bit capabilities (legacy support in use) [ 381.386175][ T8038] exFAT-fs (loop5): hint_cluster is invalid (17) [ 381.401174][ T8045] loop2: detected capacity change from 0 to 1024 [ 381.655021][ T8058] loop5: detected capacity change from 0 to 128 [ 381.740418][ T8055] loop1: detected capacity change from 0 to 2048 [ 381.777514][ T8062] loop3: detected capacity change from 0 to 128 [ 381.973747][ T8055] loop1: p2 < > p3 < p5 > p4 [ 381.983766][ T8062] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 381.991395][ T8055] loop1: partition table partially beyond EOD, truncated [ 382.042675][ T8062] ext4 filesystem being mounted at /204/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 382.614817][ T8071] loop0: detected capacity change from 0 to 16 [ 382.754857][ T8055] loop1: p2 start 4278190080 is beyond EOD, truncated [ 382.831223][ T8055] loop1: p4 size 8192 extends beyond EOD, truncated [ 382.879300][ T8055] loop1: p5 size 8192 extends beyond EOD, truncated [ 384.073602][ T8082] loop2: detected capacity change from 0 to 128 [ 384.202969][ T8082] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 384.629457][ T7811] udevd[7811]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 384.643376][ T6522] udevd[6522]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 384.670647][ T8089] loop2: detected capacity change from 0 to 764 [ 384.708880][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 385.942731][ T8101] loop0: detected capacity change from 0 to 1024 [ 386.022884][ T8089] Symlink component flag not implemented [ 386.044897][ T8089] Symlink component flag not implemented [ 386.168063][ T8110] loop2: detected capacity change from 0 to 512 [ 386.265632][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 387.829428][ T8116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.962'. [ 388.374736][ T8110] netlink: 60 bytes leftover after parsing attributes in process `syz.2.962'. [ 388.384053][ T8110] unsupported nlmsg_type 40 [ 391.041109][ T8146] loop5: detected capacity change from 0 to 16 [ 391.387438][ T8146] erofs: (device loop5): mounted with root inode @ nid 36. [ 391.402453][ T8144] attempt to access beyond end of device [ 391.402453][ T8144] loop5: rw=0, want=40, limit=16 [ 391.414403][ T8144] attempt to access beyond end of device [ 391.414403][ T8144] loop5: rw=524288, want=48, limit=16 [ 391.425427][ T8144] attempt to access beyond end of device [ 391.425427][ T8144] loop5: rw=524288, want=40, limit=16 [ 391.560860][ T8152] loop2: detected capacity change from 0 to 1024 [ 392.851933][ T8160] loop3: detected capacity change from 0 to 256 [ 393.003698][ T8160] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 393.091229][ T8160] attempt to access beyond end of device [ 393.091229][ T8160] loop3: rw=524288, want=408, limit=256 [ 393.129699][ T8160] attempt to access beyond end of device [ 393.129699][ T8160] loop3: rw=524288, want=664, limit=256 [ 393.170153][ T8160] attempt to access beyond end of device [ 393.170153][ T8160] loop3: rw=0, want=288, limit=256 [ 393.228945][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 393.228960][ T26] audit: type=1800 audit(1791070190.047:167): pid=8160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.976" name="file1" dev="loop3" ino=1048629 res=0 errno=0 [ 393.278179][ T8171] loop5: detected capacity change from 0 to 1024 [ 393.549896][ T8177] loop0: detected capacity change from 0 to 512 [ 393.710314][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 395.034258][ T8194] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 395.045945][ T8194] exFAT-fs (loop2): unable to read boot sector [ 395.052187][ T8194] exFAT-fs (loop2): failed to read boot sector [ 395.058464][ T8194] exFAT-fs (loop2): failed to recognize exfat type [ 395.793972][ T8201] capability: warning: `syz.3.989' uses deprecated v2 capabilities in a way that may be insecure [ 396.273043][ T8203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.975'. [ 396.686945][ T8177] netlink: 60 bytes leftover after parsing attributes in process `syz.0.975'. [ 397.198548][ T8210] loop5: detected capacity change from 0 to 256 [ 397.223178][ T8210] exfat: Deprecated parameter 'utf8' [ 397.236292][ T8210] exfat: Deprecated parameter 'namecase' [ 397.254869][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 397.274047][ T8210] exfat: Deprecated parameter 'utf8' [ 397.320958][ T8210] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 397.382800][ T8210] attempt to access beyond end of device [ 397.382800][ T8210] loop5: rw=524288, want=34359738496, limit=256 [ 397.420737][ T8210] attempt to access beyond end of device [ 397.420737][ T8210] loop5: rw=0, want=34359738496, limit=256 [ 397.446554][ T26] audit: type=1800 audit(1791070194.267:168): pid=8210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.993" name="file1" dev="loop5" ino=1048630 res=0 errno=0 [ 398.390240][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 398.495110][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.607138][ T8225] loop0: detected capacity change from 0 to 128 [ 398.684990][ T23] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 398.704833][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 398.720210][ T23] usb 4-1: Product: syz [ 398.724459][ T23] usb 4-1: Manufacturer: syz [ 398.730346][ T8225] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 398.759834][ T8225] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 398.788794][ T23] usb 4-1: Found UVC 1.00 device syz (8086:0ad2) [ 399.784839][ T23] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 399.847188][ T23] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input10 [ 400.970731][ T8257] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.981962][ T8257] exFAT-fs (loop0): unable to read boot sector [ 400.988375][ T8257] exFAT-fs (loop0): failed to read boot sector [ 400.994582][ T8257] exFAT-fs (loop0): failed to recognize exfat type [ 401.394778][ T8258] loop1: detected capacity change from 0 to 512 [ 401.403001][ T4289] usb 4-1: USB disconnect, device number 6 [ 401.439904][ T8260] loop2: detected capacity change from 0 to 512 [ 401.483106][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 401.527792][ T8260] EXT4-fs (loop2): Ignoring removed bh option [ 401.533976][ T8260] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 402.432941][ T8260] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 402.505148][ T8260] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.831690][ T8265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1003'. [ 403.904400][ T8265] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1003'. [ 406.358793][ T8323] input: syz1 as /devices/virtual/input/input11 [ 406.962759][ T6522] udevd[6522]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 407.066083][ T8331] loop0: detected capacity change from 0 to 1024 [ 407.162394][ T8331] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 407.236354][ T8331] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 407.243963][ T8331] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 407.761933][ T8349] loop0: detected capacity change from 0 to 16 [ 407.840522][ T8349] erofs: Unknown parameter '"©ŠÖm¹R€[œp¡[Ì šcòŸ¦1iu±¤»ÿˆú3þ˜8½/arwð°Eåµè˜rÇ‹' [ 407.864772][ T4232] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 408.383229][ T8367] loop5: detected capacity change from 0 to 16 [ 408.485882][ T4232] usb 2-1: unable to get BOS descriptor or descriptor too short [ 408.618219][ T4232] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 408.837932][ T4232] usb 2-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 409.066153][ T8367] erofs: (device loop5): mounted with root inode @ nid 36. [ 409.114610][ T8374] loop0: detected capacity change from 0 to 512 [ 409.125362][ T4232] usb 2-1: config 63 has no interface number 0 [ 409.128679][ T8367] attempt to access beyond end of device [ 409.128679][ T8367] loop5: rw=0, want=40, limit=16 [ 409.131580][ T4232] usb 2-1: config 63 interface 66 has no altsetting 0 [ 409.186556][ T8367] attempt to access beyond end of device [ 409.186556][ T8367] loop5: rw=524288, want=48, limit=16 [ 409.214799][ T8367] attempt to access beyond end of device [ 409.214799][ T8367] loop5: rw=524288, want=40, limit=16 [ 409.260957][ T8374] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 409.297733][ T4232] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 409.309946][ T8374] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 409.331868][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.340583][ T8374] Quota error (device loop0): write_blk: dquota write failed [ 409.359057][ T8374] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 409.402510][ T4232] usb 2-1: Product: syz [ 409.412797][ T4232] usb 2-1: Manufacturer: syz [ 409.424069][ T8374] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1045: Failed to acquire dquot type 0 [ 409.467595][ T4232] usb 2-1: SerialNumber: syz [ 409.473139][ T8374] EXT4-fs (loop0): 1 truncate cleaned up [ 409.491764][ T8374] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,abort,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 409.570466][ T8387] loop3: detected capacity change from 0 to 512 [ 409.727390][ T8387] EXT4-fs (loop3): Ignoring removed oldalloc option [ 409.801983][ T8387] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 409.863593][ T8391] loop0: detected capacity change from 0 to 512 [ 409.944907][ T4232] uvcvideo 2-1:63.66: Found Unit with invalid ID 0 [ 409.964812][ T4232] usb 2-1: Found UVC 0.07 device syz (174f:8acf) [ 409.966305][ T8391] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 409.985004][ T8391] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 410.036771][ T4232] usb 2-1: No valid video chain found. [ 410.098688][ T4232] usb 2-1: USB disconnect, device number 4 [ 410.478167][ T8401] loop1: detected capacity change from 0 to 2048 [ 410.584350][ T8401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.624960][ T4289] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 410.775112][ T8403] loop3: detected capacity change from 0 to 1024 [ 410.830785][ T8403] EXT4-fs (loop3): Ignoring removed nobh option [ 410.894766][ T4289] usb 1-1: Using ep0 maxpacket: 32 [ 411.020715][ T8403] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 411.065104][ T8403] System zones: 0-1, 3-12 [ 411.094620][ T8403] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,nojournal_checksum,debug,. Quota mode: none. [ 411.126292][ T8411] loop1: detected capacity change from 0 to 16 [ 411.145574][ T4289] usb 1-1: unable to get BOS descriptor or descriptor too short [ 411.216443][ T8411] erofs: (device loop1): mounted with root inode @ nid 36. [ 411.319610][ T8411] attempt to access beyond end of device [ 411.319610][ T8411] loop1: rw=0, want=40, limit=16 [ 411.425018][ T4289] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 411.444832][ T4289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.452865][ T4289] usb 1-1: Product: syz [ 411.539365][ T4289] usb 1-1: Manufacturer: syz [ 411.549248][ T4289] usb 1-1: SerialNumber: syz [ 411.945666][ T4289] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 411.969012][ T4289] usb 1-1: unit 7 not found! [ 412.077214][ T4289] usb 1-1: USB disconnect, device number 3 [ 412.294575][ T8434] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1062'. [ 412.412824][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.228401][ T8452] loop3: detected capacity change from 0 to 16 [ 413.788371][ T8452] erofs: (device loop3): mounted with root inode @ nid 36. [ 413.824452][ T8449] attempt to access beyond end of device [ 413.824452][ T8449] loop3: rw=524288, want=48, limit=16 [ 413.835729][ T8449] attempt to access beyond end of device [ 413.835729][ T8449] loop3: rw=524288, want=40, limit=16 [ 414.138044][ T8460] loop2: detected capacity change from 0 to 512 [ 414.637056][ T8462] loop5: detected capacity change from 0 to 4096 [ 415.194812][ T8462] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 416.626486][ T8500] loop1: detected capacity change from 0 to 16 [ 416.796082][ T8500] erofs: (device loop1): mounted with root inode @ nid 36. [ 416.811140][ T8494] attempt to access beyond end of device [ 416.811140][ T8494] loop1: rw=0, want=40, limit=16 [ 416.832748][ T8494] attempt to access beyond end of device [ 416.832748][ T8494] loop1: rw=524288, want=48, limit=16 [ 416.840963][ T8499] loop5: detected capacity change from 0 to 1024 [ 416.843822][ T8494] attempt to access beyond end of device [ 416.843822][ T8494] loop1: rw=524288, want=40, limit=16 [ 416.936022][ T8460] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 416.975007][ T8460] ext4 filesystem being mounted at /210/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.987337][ T8499] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 417.880932][ T8514] loop3: detected capacity change from 0 to 16 [ 417.938586][ T8514] erofs: (device loop3): mounted with root inode @ nid 36. [ 417.948027][ T8514] attempt to access beyond end of device [ 417.948027][ T8514] loop3: rw=0, want=40, limit=16 [ 417.975507][ T8514] attempt to access beyond end of device [ 417.975507][ T8514] loop3: rw=524288, want=48, limit=16 [ 417.986903][ T8514] attempt to access beyond end of device [ 417.986903][ T8514] loop3: rw=524288, want=40, limit=16 [ 418.113385][ T8526] loop1: detected capacity change from 0 to 256 [ 418.185207][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1090'. [ 418.344561][ T8530] loop3: detected capacity change from 0 to 16 [ 419.121046][ T8526] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 419.164600][ T8530] erofs: (device loop3): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 419.272931][ T8530] erofs: (device loop3): mounted with root inode @ nid 36. [ 420.092321][ T8547] loop2: detected capacity change from 0 to 16 [ 420.277835][ T8547] erofs: (device loop2): mounted with root inode @ nid 36. [ 420.293198][ T8544] attempt to access beyond end of device [ 420.293198][ T8544] loop2: rw=0, want=40, limit=16 [ 420.304571][ T8544] attempt to access beyond end of device [ 420.304571][ T8544] loop2: rw=524288, want=48, limit=16 [ 420.315568][ T8544] attempt to access beyond end of device [ 420.315568][ T8544] loop2: rw=524288, want=40, limit=16 [ 420.534894][ T1107] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 420.709910][ T8560] loop2: detected capacity change from 0 to 8 [ 421.056892][ T1107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 421.797432][ T1107] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 421.806355][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1103'. [ 421.855148][ T1107] usb 6-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 421.974805][ T1107] usb 6-1: config 63 has no interface number 0 [ 421.981045][ T1107] usb 6-1: config 63 interface 66 has no altsetting 0 [ 422.504862][ T1107] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 422.549410][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.599362][ T1107] usb 6-1: Product: syz [ 422.603875][ T1107] usb 6-1: Manufacturer: syz [ 422.605746][ T8593] loop0: detected capacity change from 0 to 128 [ 422.633492][ T1107] usb 6-1: SerialNumber: syz [ 422.718523][ T8597] loop3: detected capacity change from 0 to 256 [ 423.197112][ T8597] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 423.885391][ T1107] uvcvideo 6-1:63.66: Found Unit with invalid ID 0 [ 423.908018][ T1107] usb 6-1: Found UVC 0.07 device syz (174f:8acf) [ 423.908800][ T8601] loop3: detected capacity change from 0 to 512 [ 423.914480][ T1107] usb 6-1: No valid video chain found. [ 424.044510][ T1107] usb 6-1: USB disconnect, device number 6 [ 424.109091][ T8601] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.1113: iget: bad i_size value: 38620345925642 [ 424.122467][ T8601] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1113: couldn't read orphan inode 15 (err -117) [ 424.134932][ T8601] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 424.149444][ T8601] EXT4-fs (loop3): shut down requested (0) [ 424.805947][ T8623] loop3: detected capacity change from 0 to 8 [ 425.047108][ T8627] loop0: detected capacity change from 0 to 256 [ 425.280158][ T8627] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 426.092716][ T8637] loop5: detected capacity change from 0 to 256 [ 426.416857][ T8637] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 426.642689][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 426.848218][ T8647] loop5: detected capacity change from 0 to 256 [ 427.106516][ T8647] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 430.968536][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'. [ 431.254767][ T4286] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 431.504809][ T4286] usb 4-1: Using ep0 maxpacket: 16 [ 431.664883][ T4286] usb 4-1: unable to get BOS descriptor or descriptor too short [ 431.745042][ T4286] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 8 [ 431.774793][ T4286] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 431.813569][ T4286] usb 4-1: config 1 interface 0 has no altsetting 0 [ 431.985028][ T4286] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.007189][ T4286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.031225][ T4286] usb 4-1: Product: syz [ 432.059860][ T4286] usb 4-1: Manufacturer: syz [ 432.084494][ T4286] usb 4-1: SerialNumber: syz [ 432.124960][ T8688] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 432.136341][ T8688] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 432.506136][ T4286] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 432.554964][ T4286] usb 4-1: USB disconnect, device number 7 [ 432.855654][ T8710] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 432.884128][ T8710] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 433.127454][ T8719] loop0: detected capacity change from 0 to 256 [ 433.297134][ T8719] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 433.652240][ T8726] loop5: detected capacity change from 0 to 256 [ 434.086505][ T8726] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 434.574579][ T8736] loop5: detected capacity change from 0 to 256 [ 434.756181][ T8736] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 437.056487][ T8732] loop3: detected capacity change from 0 to 4096 [ 437.144734][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 437.384804][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 437.555431][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 437.702945][ T8768] loop3: detected capacity change from 0 to 256 [ 437.942605][ T8768] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 438.014828][ T7] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 438.214861][ T7] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 438.237227][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.276185][ T7] usb 3-1: Product: syz [ 438.280386][ T7] usb 3-1: Manufacturer: syz [ 438.304028][ T7] usb 3-1: SerialNumber: syz [ 438.597304][ T7] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 438.615174][ T7] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 439.105763][ T8786] loop3: detected capacity change from 0 to 16 [ 439.292004][ T8786] erofs: (device loop3): mounted with root inode @ nid 36. [ 439.308160][ T8779] attempt to access beyond end of device [ 439.308160][ T8779] loop3: rw=0, want=40, limit=16 [ 439.325388][ T8779] attempt to access beyond end of device [ 439.325388][ T8779] loop3: rw=524288, want=48, limit=16 [ 439.337081][ T8779] attempt to access beyond end of device [ 439.337081][ T8779] loop3: rw=524288, want=40, limit=16 [ 439.444935][ T7] usb 3-1: 2:1 : bogus bTerminalLink 6 [ 439.640304][ T8796] loop5: detected capacity change from 0 to 1024 [ 439.744941][ T7] usb 3-1: USB disconnect, device number 11 [ 439.831826][ T8796] EXT4-fs (loop5): Ignoring removed nobh option [ 439.854799][ T8796] EXT4-fs (loop5): Ignoring removed bh option [ 439.860969][ T8796] EXT4-fs (loop5): Ignoring removed nobh option [ 439.899858][ T8801] loop3: detected capacity change from 0 to 256 [ 439.967547][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.973958][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.002483][ T8796] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,nombcache,mb_optimize_scan=0x0000000000000001,nobh,. Quota mode: none. [ 440.095206][ T8801] exfat: Deprecated parameter 'namecase' [ 440.141048][ T8801] exfat: Deprecated parameter 'utf8' [ 440.223573][ T8801] exfat: Unknown parameter 'keep_last_dots' [ 440.246692][ T8796] EXT4-fs (loop5): shut down requested (2) [ 441.464757][ T4289] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 442.084850][ T4289] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 442.193393][ T8834] loop0: detected capacity change from 0 to 256 [ 442.554832][ T4289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.562881][ T4289] usb 3-1: Product: syz [ 442.568446][ T8834] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 442.584722][ T4289] usb 3-1: Manufacturer: syz [ 442.589954][ T4289] usb 3-1: SerialNumber: syz [ 442.610088][ T4289] usb 3-1: config 0 descriptor?? [ 442.841493][ T4289] ch341 3-1:0.0: ch341-uart converter detected [ 442.905840][ T8842] syz.3.1182 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 442.917028][ T8842] CPU: 0 PID: 8842 Comm: syz.3.1182 Not tainted syzkaller #0 [ 442.924442][ T8842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.934524][ T8842] Call Trace: [ 442.936019][ T8841] loop5: detected capacity change from 0 to 2048 [ 442.937818][ T8842] [ 442.947113][ T8842] dump_stack_lvl+0x188/0x250 [ 442.951816][ T8842] ? show_regs_print_info+0x20/0x20 [ 442.957035][ T8842] ? load_image+0x410/0x410 [ 442.961559][ T8842] ? local_lock_release+0x170/0x170 [ 442.966808][ T8842] ? __rwlock_init+0x140/0x140 [ 442.971591][ T8842] dump_header+0xd9/0x780 [ 442.975943][ T8842] oom_kill_process+0x20e/0x3d0 [ 442.980813][ T8842] out_of_memory+0xdb2/0x1190 [ 442.985483][ T8842] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 442.991118][ T8842] ? mutex_lock_io_nested+0x60/0x60 [ 442.996315][ T8842] ? unregister_oom_notifier+0x20/0x20 [ 443.001785][ T8842] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 443.007355][ T8842] ? mem_cgroup_oom_trylock+0x210/0x210 [ 443.012921][ T8842] ? do_raw_spin_unlock+0x11d/0x230 [ 443.018297][ T8842] try_charge_memcg+0x1075/0x15b0 [ 443.023347][ T8842] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 443.029210][ T8842] ? rcu_lock_acquire+0x30/0x30 [ 443.034084][ T8842] charge_memcg+0x100/0x300 [ 443.038603][ T8842] ? __mem_cgroup_charge+0x80/0x80 [ 443.043738][ T8842] __mem_cgroup_charge+0x21/0x80 [ 443.048700][ T8842] shmem_add_to_page_cache+0xa8a/0x14d0 [ 443.054281][ T8842] ? put_page+0x200/0x200 [ 443.058629][ T8842] ? mark_lock+0x94/0x320 [ 443.062961][ T8842] ? verify_lock_unused+0x140/0x140 [ 443.068172][ T8842] ? __lock_acquire+0x13b3/0x7d40 [ 443.073212][ T8842] shmem_getpage_gfp+0x1735/0x2c10 [ 443.078371][ T8842] shmem_fault+0x1ac/0x550 [ 443.082809][ T8842] ? shmem_fallocate+0xec0/0xec0 [ 443.087770][ T8842] ? filemap_read_page+0x4b0/0x4b0 [ 443.092886][ T8842] ? count_memcg_event_mm+0x324/0x370 [ 443.098293][ T8842] __do_fault+0x141/0x330 [ 443.102612][ T8842] handle_mm_fault+0x2982/0x4440 [ 443.107539][ T8842] ? get_page+0xe0/0xe0 [ 443.111682][ T8842] ? follow_page_mask+0xa51/0x12b0 [ 443.116782][ T8842] __get_user_pages+0x952/0x11e0 [ 443.121717][ T8842] ? populate_vma_page_range+0x290/0x290 [ 443.127362][ T8842] ? read_lock_is_recursive+0x10/0x10 [ 443.132726][ T8842] populate_vma_page_range+0x213/0x290 [ 443.138175][ T8842] __mm_populate+0x275/0x3b0 [ 443.142764][ T8842] ? check_vma_flags+0x470/0x470 [ 443.147683][ T8842] ? up_write+0x1b6/0x410 [ 443.152017][ T8842] vm_mmap_pgoff+0x212/0x2d0 [ 443.156613][ T8842] ? account_locked_vm+0xe0/0xe0 [ 443.161532][ T8842] ? __context_tracking_exit+0x4c/0x80 [ 443.166988][ T8842] ? __lock_acquire+0x7d40/0x7d40 [ 443.171999][ T8842] ksys_mmap_pgoff+0x140/0x790 [ 443.176784][ T8842] ? mmap_region+0x1730/0x1730 [ 443.181554][ T8842] ? lockdep_hardirqs_on+0x94/0x140 [ 443.186763][ T8842] do_syscall_64+0x4c/0xa0 [ 443.191164][ T8842] ? clear_bhb_loop+0x30/0x80 [ 443.195840][ T8842] ? clear_bhb_loop+0x30/0x80 [ 443.200502][ T8842] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 443.206375][ T8842] RIP: 0033:0x7fbb5574e159 [ 443.210775][ T8842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.230377][ T8842] RSP: 002b:00007fbb539a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 443.238778][ T8842] RAX: ffffffffffffffda RBX: 00007fbb559d5fa0 RCX: 00007fbb5574e159 [ 443.246759][ T8842] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 443.254814][ T8842] RBP: 00007fbb557e506b R08: ffffffffffffffff R09: 0000000000000000 [ 443.262775][ T8842] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 443.270728][ T8842] R13: 00007fbb559d6038 R14: 00007fbb559d5fa0 R15: 00007fffa4aa7968 [ 443.279081][ T8842] [ 443.282870][ T8842] memory: usage 307156kB, limit 307200kB, failcnt 6594 [ 443.289758][ T8842] memory+swap: usage 377920kB, limit 9007199254740988kB, failcnt 0 [ 443.297663][ T8842] kmem: usage 5192kB, limit 9007199254740988kB, failcnt 0 [ 443.304786][ T8842] Memory cgroup stats for /syz3: [ 443.305544][ T8842] anon 327680 [ 443.305544][ T8842] file 308563968 [ 443.305544][ T8842] kernel_stack 458752 [ 443.305544][ T8842] pagetables 1470464 [ 443.305544][ T8842] percpu 14368 [ 443.305544][ T8842] sock 0 [ 443.305544][ T8842] shmem 308555776 [ 443.305544][ T8842] file_mapped 141041664 [ 443.305544][ T8842] file_dirty 0 [ 443.305544][ T8842] file_writeback 0 [ 443.305544][ T8842] swapcached 72462336 [ 443.305544][ T8842] anon_thp 0 [ 443.305544][ T8842] file_thp 0 [ 443.305544][ T8842] shmem_thp 0 [ 443.305544][ T8842] inactive_anon 203055104 [ 443.305544][ T8842] active_anon 105828352 [ 443.305544][ T8842] inactive_file 323584 [ 443.305544][ T8842] active_file 4096 [ 443.305544][ T8842] unevictable 0 [ 443.305544][ T8842] slab_reclaimable 1521952 [ 443.305544][ T8842] slab_unreclaimable 1624808 [ 443.305544][ T8842] slab 3146760 [ 443.305544][ T8842] workingset_refault_anon 0 [ 443.305544][ T8842] workingset_refault_file 38 [ 443.398104][ T8842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1012,pid=8299,uid=0 [ 443.413504][ T8842] Memory cgroup out of memory: Killed process 8299 (syz.3.1012) total-vm:200816kB, anon-rss:1252kB, file-rss:20544kB, shmem-rss:128824kB, UID:0 pgtables:364kB oom_score_adj:1000 [ 446.057042][ T4289] usb 3-1: failed to receive control message: -71 [ 446.063623][ T4289] ch341-uart: probe of ttyUSB0 failed with error -71 [ 446.074348][ T28] oom_reaper: reaped process 8299 (syz.3.1012), now anon-rss:0kB, file-rss:20480kB, shmem-rss:128824kB [ 446.087816][ T4289] usb 3-1: USB disconnect, device number 12 [ 447.046571][ T4289] ch341 3-1:0.0: device disconnected [ 447.106680][ T8842] syz.3.1182 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 447.117261][ T8842] CPU: 0 PID: 8842 Comm: syz.3.1182 Not tainted syzkaller #0 [ 447.124657][ T8842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 447.134719][ T8842] Call Trace: [ 447.138001][ T8842] [ 447.140928][ T8842] dump_stack_lvl+0x188/0x250 [ 447.145620][ T8842] ? show_regs_print_info+0x20/0x20 [ 447.150826][ T8842] ? load_image+0x410/0x410 [ 447.155339][ T8842] ? local_lock_release+0x170/0x170 [ 447.160546][ T8842] ? __rwlock_init+0x140/0x140 [ 447.165324][ T8842] dump_header+0xd9/0x780 [ 447.169666][ T8842] oom_kill_process+0x20e/0x3d0 [ 447.174536][ T8842] out_of_memory+0xdb2/0x1190 [ 447.179233][ T8842] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 447.184887][ T8842] ? mutex_lock_io_nested+0x60/0x60 [ 447.190104][ T8842] ? unregister_oom_notifier+0x20/0x20 [ 447.195580][ T8842] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 447.201140][ T8842] ? mem_cgroup_oom_trylock+0x210/0x210 [ 447.206706][ T8842] ? do_raw_spin_unlock+0x11d/0x230 [ 447.211912][ T8842] try_charge_memcg+0x1075/0x15b0 [ 447.216951][ T8842] ? free_unref_page_list+0x769/0x830 [ 447.222424][ T8842] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 447.228256][ T8842] ? rcu_lock_acquire+0x30/0x30 [ 447.233121][ T8842] charge_memcg+0x100/0x300 [ 447.237634][ T8842] ? __mem_cgroup_charge+0x80/0x80 [ 447.242756][ T8842] __mem_cgroup_charge+0x21/0x80 [ 447.247720][ T8842] shmem_add_to_page_cache+0xa8a/0x14d0 [ 447.253329][ T8842] ? put_page+0x200/0x200 [ 447.257680][ T8842] ? mark_lock+0x94/0x320 [ 447.262020][ T8842] ? verify_lock_unused+0x140/0x140 [ 447.267231][ T8842] ? __lock_acquire+0x13b3/0x7d40 [ 447.272278][ T8842] shmem_getpage_gfp+0x1735/0x2c10 [ 447.277444][ T8842] shmem_fault+0x1ac/0x550 [ 447.281886][ T8842] ? shmem_fallocate+0xec0/0xec0 [ 447.286840][ T8842] ? filemap_read_page+0x4b0/0x4b0 [ 447.291956][ T8842] ? count_memcg_event_mm+0x324/0x370 [ 447.297339][ T8842] __do_fault+0x141/0x330 [ 447.301680][ T8842] handle_mm_fault+0x2982/0x4440 [ 447.306639][ T8842] ? get_page+0xe0/0xe0 [ 447.310815][ T8842] ? follow_page_mask+0xa51/0x12b0 [ 447.315946][ T8842] __get_user_pages+0x952/0x11e0 [ 447.320928][ T8842] ? populate_vma_page_range+0x290/0x290 [ 447.326573][ T8842] ? read_lock_is_recursive+0x10/0x10 [ 447.331973][ T8842] populate_vma_page_range+0x213/0x290 [ 447.337449][ T8842] __mm_populate+0x275/0x3b0 [ 447.342061][ T8842] ? check_vma_flags+0x470/0x470 [ 447.347010][ T8842] ? up_write+0x1b6/0x410 [ 447.351334][ T8842] vm_mmap_pgoff+0x212/0x2d0 [ 447.355921][ T8842] ? account_locked_vm+0xe0/0xe0 [ 447.360848][ T8842] ? __context_tracking_exit+0x4c/0x80 [ 447.366292][ T8842] ? __lock_acquire+0x7d40/0x7d40 [ 447.371312][ T8842] ksys_mmap_pgoff+0x140/0x790 [ 447.376235][ T8842] ? mmap_region+0x1730/0x1730 [ 447.381005][ T8842] ? lockdep_hardirqs_on+0x94/0x140 [ 447.386206][ T8842] do_syscall_64+0x4c/0xa0 [ 447.390626][ T8842] ? clear_bhb_loop+0x30/0x80 [ 447.395284][ T8842] ? clear_bhb_loop+0x30/0x80 [ 447.399966][ T8842] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 447.405854][ T8842] RIP: 0033:0x7fbb5574e159 [ 447.410253][ T8842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.429882][ T8842] RSP: 002b:00007fbb539a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 447.438305][ T8842] RAX: ffffffffffffffda RBX: 00007fbb559d5fa0 RCX: 00007fbb5574e159 [ 447.446276][ T8842] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 447.454267][ T8842] RBP: 00007fbb557e506b R08: ffffffffffffffff R09: 0000000000000000 [ 447.462254][ T8842] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 447.470236][ T8842] R13: 00007fbb559d6038 R14: 00007fbb559d5fa0 R15: 00007fffa4aa7968 [ 447.478209][ T8842] [ 447.481871][ T8842] memory: usage 307200kB, limit 307200kB, failcnt 8540 [ 447.488761][ T8842] memory+swap: usage 377964kB, limit 9007199254740988kB, failcnt 0 [ 447.496700][ T8842] kmem: usage 5172kB, limit 9007199254740988kB, failcnt 0 [ 447.503819][ T8842] Memory cgroup stats for /syz3: [ 447.504159][ T8842] anon 327680 [ 447.504159][ T8842] file 308629504 [ 447.504159][ T8842] kernel_stack 458752 [ 447.504159][ T8842] pagetables 1470464 [ 447.504159][ T8842] percpu 14368 [ 447.504159][ T8842] sock 0 [ 447.504159][ T8842] shmem 308625408 [ 447.504159][ T8842] file_mapped 141303808 [ 447.504159][ T8842] file_dirty 0 [ 447.504159][ T8842] file_writeback 0 [ 447.504159][ T8842] swapcached 72654848 [ 447.504159][ T8842] anon_thp 0 [ 447.504159][ T8842] file_thp 0 [ 447.504159][ T8842] shmem_thp 0 [ 447.504159][ T8842] inactive_anon 203386880 [ 447.504159][ T8842] active_anon 105566208 [ 447.504159][ T8842] inactive_file 319488 [ 447.504159][ T8842] active_file 4096 [ 447.504159][ T8842] unevictable 0 [ 447.504159][ T8842] slab_reclaimable 1521568 [ 447.504159][ T8842] slab_unreclaimable 1602216 [ 447.504159][ T8842] slab 3123784 [ 447.504159][ T8842] workingset_refault_anon 0 [ 447.504159][ T8842] workingset_refault_file 38 [ 447.596630][ T8842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1182,pid=8840,uid=0 [ 447.613256][ T8842] Memory cgroup out of memory: Killed process 8840 (syz.3.1182) total-vm:104292kB, anon-rss:1404kB, file-rss:21780kB, shmem-rss:8708kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 448.084846][ T7] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 448.085357][ T8864] loop0: detected capacity change from 0 to 256 [ 448.241987][ T8864] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 448.564865][ T7] usb 6-1: unable to get BOS descriptor or descriptor too short [ 448.720259][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.767481][ T7] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 448.782786][ T8873] loop0: detected capacity change from 0 to 16 [ 448.791689][ T7] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 448.802936][ T8873] erofs: (device loop0): mounted with root inode @ nid 36. [ 448.811924][ T8873] attempt to access beyond end of device [ 448.811924][ T8873] loop0: rw=0, want=40, limit=16 [ 448.823232][ T7] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 448.836468][ T7] usb 6-1: config 1 interface 1 has no altsetting 1 [ 448.856005][ T8873] attempt to access beyond end of device [ 448.856005][ T8873] loop0: rw=524288, want=48, limit=16 [ 448.867044][ T8873] attempt to access beyond end of device [ 448.867044][ T8873] loop0: rw=524288, want=40, limit=16 [ 449.015658][ T7] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 449.028136][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.038509][ T7] usb 6-1: Product: syz [ 449.045973][ T7] usb 6-1: Manufacturer: syz [ 449.052818][ T7] usb 6-1: SerialNumber: syz [ 449.432929][ T7] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 449.509349][ T6522] udevd[6522]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.011016][ T8881] syz.3.1194 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 450.021211][ T8881] CPU: 0 PID: 8881 Comm: syz.3.1194 Not tainted syzkaller #0 [ 450.028596][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 450.038638][ T8881] Call Trace: [ 450.041908][ T8881] [ 450.044820][ T8881] dump_stack_lvl+0x188/0x250 [ 450.049570][ T8881] ? show_regs_print_info+0x20/0x20 [ 450.054763][ T8881] ? load_image+0x410/0x410 [ 450.059248][ T8881] ? local_lock_release+0x170/0x170 [ 450.064424][ T8881] ? __rwlock_init+0x140/0x140 [ 450.069168][ T8881] dump_header+0xd9/0x780 [ 450.073496][ T8881] oom_kill_process+0x20e/0x3d0 [ 450.078331][ T8881] out_of_memory+0xdb2/0x1190 [ 450.082988][ T8881] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 450.088605][ T8881] ? mutex_lock_io_nested+0x60/0x60 [ 450.093786][ T8881] ? unregister_oom_notifier+0x20/0x20 [ 450.099225][ T8881] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 450.104752][ T8881] ? mem_cgroup_oom_trylock+0x210/0x210 [ 450.110281][ T8881] ? do_raw_spin_unlock+0x11d/0x230 [ 450.115463][ T8881] try_charge_memcg+0x1075/0x15b0 [ 450.120482][ T8881] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 450.126279][ T8881] ? rcu_lock_acquire+0x30/0x30 [ 450.131115][ T8881] charge_memcg+0x100/0x300 [ 450.135619][ T8881] ? __mem_cgroup_charge+0x80/0x80 [ 450.140714][ T8881] __mem_cgroup_charge+0x21/0x80 [ 450.145632][ T8881] shmem_add_to_page_cache+0xa8a/0x14d0 [ 450.151166][ T8881] ? put_page+0x200/0x200 [ 450.155496][ T8881] ? mark_lock+0x94/0x320 [ 450.159819][ T8881] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 450.165781][ T8881] shmem_getpage_gfp+0x1735/0x2c10 [ 450.170895][ T8881] shmem_write_begin+0xcd/0x1a0 [ 450.175730][ T8881] generic_perform_write+0x2b6/0x550 [ 450.181027][ T8881] ? atime_needs_update+0x770/0x770 [ 450.186232][ T8881] ? grab_cache_page_write_begin+0xa0/0xa0 [ 450.192033][ T8881] ? file_remove_privs+0x5d0/0x5d0 [ 450.197142][ T8881] ? rwsem_write_trylock+0x135/0x1c0 [ 450.202410][ T8881] ? clear_nonspinnable+0x60/0x60 [ 450.207416][ T8881] __generic_file_write_iter+0x261/0x4e0 [ 450.213034][ T8881] ? generic_write_checks+0x3be/0x460 [ 450.218392][ T8881] generic_file_write_iter+0xa6/0x1b0 [ 450.223748][ T8881] __kernel_write+0x522/0x980 [ 450.228408][ T8881] ? vfs_read+0xd50/0xd50 [ 450.232718][ T8881] ? __lock_acquire+0x7d40/0x7d40 [ 450.237725][ T8881] ? get_dump_page+0xee/0x670 [ 450.242383][ T8881] ? down_read_killable+0x1ce/0x340 [ 450.247561][ T8881] __dump_emit+0x258/0x380 [ 450.251960][ T8881] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 450.257399][ T8881] ? generic_file_llseek_size+0x34a/0x3a0 [ 450.263098][ T8881] ? dump_emit+0x145/0x3d0 [ 450.267501][ T8881] dump_user_range+0x84/0x340 [ 450.272190][ T8881] elf_core_dump+0x2fe0/0x3530 [ 450.276946][ T8881] ? load_elf_library+0x980/0x980 [ 450.282087][ T8881] ? verify_lock_unused+0x140/0x140 [ 450.287289][ T8881] ? dump_vma_snapshot+0xaf1/0xe40 [ 450.292423][ T8881] ? rcu_read_lock_any_held+0xb0/0x130 [ 450.297887][ T8881] ? getname_kernel+0x142/0x2e0 [ 450.302727][ T8881] do_coredump+0x14e8/0x2a40 [ 450.307312][ T8881] ? nfs_stat_to_errno+0x170/0x170 [ 450.312422][ T8881] ? lock_chain_count+0x20/0x20 [ 450.317284][ T8881] ? _raw_spin_unlock_irq+0x1f/0x40 [ 450.322478][ T8881] ? lockdep_hardirqs_on+0x94/0x140 [ 450.327677][ T8881] get_signal+0x531/0x12e0 [ 450.332088][ T8881] arch_do_signal_or_restart+0xe6/0x12a0 [ 450.337727][ T8881] ? _raw_spin_unlock+0x40/0x40 [ 450.342583][ T8881] ? force_sig_info_to_task+0x318/0x3c0 [ 450.348116][ T8881] ? get_sigframe_size+0x10/0x10 [ 450.353043][ T8881] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 450.359013][ T8881] ? exit_to_user_mode_loop+0x3b/0x130 [ 450.364461][ T8881] exit_to_user_mode_loop+0x9e/0x130 [ 450.369731][ T8881] exit_to_user_mode_prepare+0xee/0x180 [ 450.375276][ T8881] irqentry_exit_to_user_mode+0x5/0x30 [ 450.380719][ T8881] exc_page_fault+0x88/0x100 [ 450.385447][ T8881] asm_exc_page_fault+0x22/0x30 [ 450.390318][ T8881] RIP: 0033:0x7fbb5574e161 [ 450.394727][ T8881] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 450.414317][ T8881] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 450.420373][ T8881] RAX: 0000000000000000 RBX: 00007fbb559d6090 RCX: 00007fbb5574e159 [ 450.428348][ T8881] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 450.436326][ T8881] RBP: 00007fbb557e506b R08: 0000000000000000 R09: 0000000000000000 [ 450.444312][ T8881] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 450.452299][ T8881] R13: 00007fbb559d6128 R14: 00007fbb559d6090 R15: 00007fffa4aa7968 [ 450.460272][ T8881] [ 450.465489][ T8881] memory: usage 307200kB, limit 307200kB, failcnt 9298 [ 450.472379][ T8881] memory+swap: usage 377956kB, limit 9007199254740988kB, failcnt 0 [ 450.480295][ T8881] kmem: usage 5196kB, limit 9007199254740988kB, failcnt 0 [ 450.487428][ T8881] Memory cgroup stats for /syz3: [ 450.488005][ T8881] anon 471040 [ 450.488005][ T8881] file 308457472 [ 450.488005][ T8881] kernel_stack 557056 [ 450.488005][ T8881] pagetables 1323008 [ 450.488005][ T8881] percpu 14368 [ 450.488005][ T8881] sock 0 [ 450.488005][ T8881] shmem 308449280 [ 450.488005][ T8881] file_mapped 11755520 [ 450.488005][ T8881] file_dirty 8192 [ 450.488005][ T8881] file_writeback 0 [ 450.488005][ T8881] swapcached 72654848 [ 450.488005][ T8881] anon_thp 0 [ 450.488005][ T8881] file_thp 0 [ 450.488005][ T8881] shmem_thp 0 [ 450.488005][ T8881] inactive_anon 215093248 [ 450.488005][ T8881] active_anon 93814784 [ 450.488005][ T8881] inactive_file 319488 [ 450.488005][ T8881] active_file 8192 [ 450.488005][ T8881] unevictable 0 [ 450.488005][ T8881] slab_reclaimable 1619128 [ 450.488005][ T8881] slab_unreclaimable 1564680 [ 450.488005][ T8881] slab 3183808 [ 450.488005][ T8881] workingset_refault_anon 0 [ 450.488005][ T8881] workingset_refault_file 2164 [ 450.581001][ T8881] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1194,pid=8881,uid=0 [ 450.596319][ T8881] Memory cgroup out of memory: Killed process 8881 (syz.3.1194) total-vm:102376kB, anon-rss:1432kB, file-rss:53440kB, shmem-rss:3712kB, UID:0 pgtables:216kB oom_score_adj:1000 [ 450.664822][ T7] usb 6-1: USB disconnect, device number 7 [ 451.618260][ T8898] loop5: detected capacity change from 0 to 256 [ 451.996403][ T8898] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 452.137335][ T8305] syz.2.1017 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 452.294933][ T8305] CPU: 1 PID: 8305 Comm: syz.2.1017 Not tainted syzkaller #0 [ 452.302363][ T8305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.312470][ T8305] Call Trace: [ 452.315760][ T8305] [ 452.318677][ T8305] dump_stack_lvl+0x188/0x250 [ 452.323342][ T8305] ? show_regs_print_info+0x20/0x20 [ 452.328525][ T8305] ? load_image+0x410/0x410 [ 452.333013][ T8305] ? local_lock_release+0x170/0x170 [ 452.338224][ T8305] ? __rwlock_init+0x140/0x140 [ 452.342987][ T8305] dump_header+0xd9/0x780 [ 452.347305][ T8305] oom_kill_process+0x20e/0x3d0 [ 452.352149][ T8305] out_of_memory+0xdb2/0x1190 [ 452.356809][ T8305] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 452.362447][ T8305] ? mutex_lock_io_nested+0x60/0x60 [ 452.367654][ T8305] ? unregister_oom_notifier+0x20/0x20 [ 452.373109][ T8305] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 452.378673][ T8305] ? mem_cgroup_oom_trylock+0x210/0x210 [ 452.384211][ T8305] ? do_raw_spin_unlock+0x11d/0x230 [ 452.389398][ T8305] try_charge_memcg+0x1075/0x15b0 [ 452.394420][ T8305] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 452.400220][ T8305] ? rcu_lock_acquire+0x30/0x30 [ 452.405076][ T8305] charge_memcg+0x100/0x300 [ 452.409590][ T8305] ? __mem_cgroup_charge+0x80/0x80 [ 452.414712][ T8305] __mem_cgroup_charge+0x21/0x80 [ 452.419638][ T8305] shmem_add_to_page_cache+0xa8a/0x14d0 [ 452.425176][ T8305] ? put_page+0x200/0x200 [ 452.429489][ T8305] ? mark_lock+0x94/0x320 [ 452.433810][ T8305] ? verify_lock_unused+0x140/0x140 [ 452.438987][ T8305] ? __lock_acquire+0x13b3/0x7d40 [ 452.444017][ T8305] shmem_getpage_gfp+0x1735/0x2c10 [ 452.449149][ T8305] shmem_fault+0x1ac/0x550 [ 452.453555][ T8305] ? shmem_fallocate+0xec0/0xec0 [ 452.458491][ T8305] ? filemap_read_page+0x4b0/0x4b0 [ 452.463585][ T8305] ? count_memcg_event_mm+0x324/0x370 [ 452.468956][ T8305] __do_fault+0x141/0x330 [ 452.473300][ T8305] handle_mm_fault+0x2982/0x4440 [ 452.478235][ T8305] ? get_page+0xe0/0xe0 [ 452.482378][ T8305] ? follow_page_mask+0xa51/0x12b0 [ 452.487480][ T8305] __get_user_pages+0x952/0x11e0 [ 452.492419][ T8305] ? read_lock_is_recursive+0x10/0x10 [ 452.497781][ T8305] ? populate_vma_page_range+0x290/0x290 [ 452.503533][ T8305] ? get_dump_page+0xee/0x670 [ 452.508205][ T8305] ? down_read_killable+0x1ce/0x340 [ 452.513391][ T8305] get_dump_page+0x18c/0x670 [ 452.517995][ T8305] ? fault_in_readable+0x150/0x150 [ 452.523095][ T8305] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 452.528546][ T8305] ? dump_user_range+0xdd/0x340 [ 452.533383][ T8305] ? dump_emit+0x145/0x3d0 [ 452.538057][ T8305] dump_user_range+0x54/0x340 [ 452.543114][ T8305] elf_core_dump+0x2fe0/0x3530 [ 452.547885][ T8305] ? load_elf_library+0x980/0x980 [ 452.552904][ T8305] ? verify_lock_unused+0x140/0x140 [ 452.558092][ T8305] ? dump_vma_snapshot+0xaf1/0xe40 [ 452.563230][ T8305] ? rcu_read_lock_any_held+0xb0/0x130 [ 452.568678][ T8305] ? getname_kernel+0x142/0x2e0 [ 452.573534][ T8305] do_coredump+0x14e8/0x2a40 [ 452.578155][ T8305] ? nfs_stat_to_errno+0x170/0x170 [ 452.583279][ T8305] ? lock_chain_count+0x20/0x20 [ 452.588135][ T8305] ? _raw_spin_unlock_irq+0x1f/0x40 [ 452.593327][ T8305] ? lockdep_hardirqs_on+0x94/0x140 [ 452.598532][ T8305] get_signal+0x531/0x12e0 [ 452.602964][ T8305] arch_do_signal_or_restart+0xe6/0x12a0 [ 452.608691][ T8305] ? _raw_spin_unlock+0x40/0x40 [ 452.613539][ T8305] ? force_sig_info_to_task+0x318/0x3c0 [ 452.619270][ T8305] ? get_sigframe_size+0x10/0x10 [ 452.624225][ T8305] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 452.630257][ T8305] ? exit_to_user_mode_loop+0x3b/0x130 [ 452.635718][ T8305] exit_to_user_mode_loop+0x9e/0x130 [ 452.640998][ T8305] exit_to_user_mode_prepare+0xee/0x180 [ 452.646543][ T8305] irqentry_exit_to_user_mode+0x5/0x30 [ 452.652023][ T8305] exc_page_fault+0x88/0x100 [ 452.656608][ T8305] asm_exc_page_fault+0x22/0x30 [ 452.661463][ T8305] RIP: 0033:0x7f2ef09fe161 [ 452.665864][ T8305] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 452.685453][ T8305] RSP: 002b:0000000000000040 EFLAGS: 00010217 [ 452.691510][ T8305] RAX: 0000000000000000 RBX: 00007f2ef0c85fa0 RCX: 00007f2ef09fe159 [ 452.699478][ T8305] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000097068000 [ 452.707451][ T8305] RBP: 00007f2ef0a9506b R08: 0000000000000000 R09: 0000000000000000 [ 452.715404][ T8305] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 452.723375][ T8305] R13: 00007f2ef0c86038 R14: 00007f2ef0c85fa0 R15: 00007ffeaf7e7068 [ 452.731340][ T8305] [ 452.814783][ T4232] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 452.922466][ T8305] memory: usage 306868kB, limit 307200kB, failcnt 6999 [ 452.949802][ T8305] memory+swap: usage 361236kB, limit 9007199254740988kB, failcnt 0 [ 452.989041][ T8305] kmem: usage 4796kB, limit 9007199254740988kB, failcnt 0 [ 453.041966][ T8305] Memory cgroup stats for /syz2: [ 453.042990][ T8305] anon 368640 [ 453.042990][ T8305] file 309006336 [ 453.042990][ T8305] kernel_stack 491520 [ 453.042990][ T8305] pagetables 1511424 [ 453.042990][ T8305] percpu 14368 [ 453.042990][ T8305] sock 0 [ 453.042990][ T8305] shmem 309006336 [ 453.042990][ T8305] file_mapped 110395392 [ 453.042990][ T8305] file_dirty 0 [ 453.042990][ T8305] file_writeback 0 [ 453.042990][ T8305] swapcached 55541760 [ 453.042990][ T8305] anon_thp 0 [ 453.042990][ T8305] file_thp 0 [ 453.042990][ T8305] shmem_thp 0 [ 453.042990][ T8305] inactive_anon 169365504 [ 453.042990][ T8305] active_anon 140005376 [ 453.042990][ T8305] inactive_file 245760 [ 453.042990][ T8305] active_file 4096 [ 453.042990][ T8305] unevictable 0 [ 453.042990][ T8305] slab_reclaimable 1318720 [ 453.042990][ T8305] slab_unreclaimable 1273120 [ 453.042990][ T8305] slab 2591840 [ 453.042990][ T8305] workingset_refault_anon 0 [ 453.042990][ T8305] workingset_refault_file 151 [ 453.265095][ T4232] usb 1-1: not running at top speed; connect to a high speed hub [ 453.313394][ T26] audit: type=1326 audit(1791070250.127:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.1.1216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44e1258159 code=0x0 [ 453.351960][ T8924] loop5: detected capacity change from 0 to 16 [ 453.353792][ T8305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1017,pid=8305,uid=0 [ 453.377073][ T8305] Memory cgroup out of memory: Killed process 8305 (syz.2.1017) total-vm:200548kB, anon-rss:1252kB, file-rss:20544kB, shmem-rss:107584kB, UID:0 pgtables:320kB oom_score_adj:1000 [ 453.398372][ T4232] usb 1-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 453.410652][ T4232] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.425114][ T8924] erofs: (device loop5): mounted with root inode @ nid 36. [ 453.441336][ T8908] attempt to access beyond end of device [ 453.441336][ T8908] loop5: rw=0, want=40, limit=16 [ 453.470764][ T4232] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 453.485435][ T8908] attempt to access beyond end of device [ 453.485435][ T8908] loop5: rw=524288, want=48, limit=16 [ 453.514364][ T4232] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 453.524971][ T8908] attempt to access beyond end of device [ 453.524971][ T8908] loop5: rw=524288, want=40, limit=16 [ 453.528062][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.568483][ T4232] usb 1-1: config 0 descriptor?? [ 453.832053][ T4232] usb 1-1: USB disconnect, device number 4 [ 454.103542][ T8935] loop5: detected capacity change from 0 to 256 [ 454.496965][ T8935] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 455.615196][ T8953] futex_wake_op: syz.5.1225 tries to shift op by -1; fix this program [ 455.660716][ T8958] loop3: detected capacity change from 0 to 16 [ 455.708638][ T8958] erofs: (device loop3): mounted with root inode @ nid 36. [ 455.718322][ T8955] attempt to access beyond end of device [ 455.718322][ T8955] loop3: rw=0, want=40, limit=16 [ 455.732274][ T8955] attempt to access beyond end of device [ 455.732274][ T8955] loop3: rw=524288, want=48, limit=16 [ 455.743243][ T8955] attempt to access beyond end of device [ 455.743243][ T8955] loop3: rw=524288, want=40, limit=16 [ 455.958486][ T8960] loop0: detected capacity change from 0 to 1024 [ 456.291004][ T8967] loop2: detected capacity change from 0 to 256 [ 456.483661][ T8967] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 456.984126][ T8972] loop2: detected capacity change from 0 to 4096 [ 458.177577][ T4289] hid-generic 0007:0004:0002.0001: hidraw0: HID v8.00 Device [syz0] on syz1 [ 458.331806][ T8972] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 458.431388][ T8980] udevd[8980]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 459.094868][ T1107] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 459.224330][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1227'. [ 459.240794][ T8998] syz.1.1232 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 459.521280][ T1107] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.547400][ T1107] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 459.580996][ T1107] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 459.744462][ T9008] loop2: detected capacity change from 0 to 16 [ 459.824556][ T9008] erofs: (device loop2): mounted with root inode @ nid 36. [ 459.833909][ T9008] attempt to access beyond end of device [ 459.833909][ T9008] loop2: rw=0, want=40, limit=16 [ 459.845389][ T1107] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 459.845525][ T9008] attempt to access beyond end of device [ 459.845525][ T9008] loop2: rw=524288, want=48, limit=16 [ 459.854855][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.865594][ T9008] attempt to access beyond end of device [ 459.865594][ T9008] loop2: rw=524288, want=40, limit=16 [ 459.979454][ T1107] usb 1-1: Product: syz [ 459.996965][ T1107] usb 1-1: Manufacturer: syz [ 460.002896][ T1107] usb 1-1: SerialNumber: syz [ 460.082495][ T8299] syz.3.1012 (8299) used greatest stack depth: 18976 bytes left [ 460.299339][ T9012] loop5: detected capacity change from 0 to 16 [ 460.375568][ T9012] erofs: (device loop5): mounted with root inode @ nid 36. [ 460.385673][ T9012] attempt to access beyond end of device [ 460.385673][ T9012] loop5: rw=0, want=40, limit=16 [ 460.399554][ T9012] attempt to access beyond end of device [ 460.399554][ T9012] loop5: rw=524288, want=48, limit=16 [ 460.410605][ T9012] attempt to access beyond end of device [ 460.410605][ T9012] loop5: rw=524288, want=40, limit=16 [ 460.459347][ T8305] syz.2.1017 (8305) used greatest stack depth: 18672 bytes left [ 461.697262][ T1107] cdc_ncm 1-1:1.0: bind() failure [ 461.775434][ T1107] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 461.814974][ T1107] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 461.924989][ T1107] usbtest: probe of 1-1:1.1 failed with error -71 [ 461.967358][ T1107] usb 1-1: USB disconnect, device number 5 [ 462.288065][ T9027] loop5: detected capacity change from 0 to 4096 [ 462.419726][ T9027] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 462.424357][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1250'. [ 463.518392][ T9048] loop0: detected capacity change from 0 to 4096 [ 463.528430][ T9053] loop2: detected capacity change from 0 to 512 [ 463.596013][ T9048] EXT4-fs (loop0): Test dummy encryption mode enabled [ 463.633361][ T9048] EXT4-fs (loop0): Test dummy encryption mode enabled [ 463.689216][ T9053] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 463.743759][ T9048] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 463.905336][ T9053] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.968182][ T9067] loop5: detected capacity change from 0 to 16 [ 464.013574][ T9067] erofs: (device loop5): mounted with root inode @ nid 36. [ 464.022882][ T9067] attempt to access beyond end of device [ 464.022882][ T9067] loop5: rw=0, want=40, limit=16 [ 464.045299][ T9067] attempt to access beyond end of device [ 464.045299][ T9067] loop5: rw=524288, want=48, limit=16 [ 464.056380][ T9067] attempt to access beyond end of device [ 464.056380][ T9067] loop5: rw=524288, want=40, limit=16 [ 465.117779][ T9082] loop2: detected capacity change from 0 to 128 [ 465.279998][ T9082] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 465.332260][ T9082] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 465.736488][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1265'. [ 466.038599][ T9082] fscrypt: Error allocating hmac(sha512): -2 [ 466.537878][ T9127] loop0: detected capacity change from 0 to 256 [ 466.853382][ T9127] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 469.047103][ T9168] loop2: detected capacity change from 0 to 256 [ 469.473134][ T9168] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 470.288831][ T9156] loop5: detected capacity change from 0 to 4096 [ 470.384829][ T9079] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 470.446656][ T9156] EXT4-fs (loop5): Ignoring removed nobh option [ 470.794822][ T9079] usb 3-1: not running at top speed; connect to a high speed hub [ 470.871056][ T9156] fscrypt: Error allocating hmac(sha512): -2 [ 470.931046][ T9194] loop0: detected capacity change from 0 to 256 [ 471.005254][ T9079] usb 3-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 471.101297][ T9194] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 471.123092][ T9156] EXT4-fs (loop5): Error processing option "test_dummy_encryption" [-2] [ 471.391999][ T9079] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.433042][ T9079] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 471.461683][ T9079] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 471.492194][ T9079] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.135609][ T9079] usb 3-1: config 0 descriptor?? [ 472.282448][ T9203] loop0: detected capacity change from 0 to 512 [ 472.413780][ T2302] usb 3-1: USB disconnect, device number 13 [ 472.487977][ T9203] EXT4-fs (loop0): 1 orphan inode deleted [ 472.493743][ T9203] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 472.574993][ T9203] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.224269][ T9216] loop5: detected capacity change from 0 to 256 [ 473.340533][ T9216] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 473.610255][ T9213] loop2: detected capacity change from 0 to 4096 [ 473.764699][ T9213] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 474.808036][ T9242] loop2: detected capacity change from 0 to 16 [ 474.895908][ T9234] loop0: detected capacity change from 0 to 4096 [ 476.080186][ T9242] erofs: (device loop2): mounted with root inode @ nid 36. [ 476.089404][ T9242] attempt to access beyond end of device [ 476.089404][ T9242] loop2: rw=0, want=40, limit=16 [ 476.126231][ T9234] EXT4-fs (loop0): Ignoring removed nobh option [ 477.010428][ T9234] EXT4-fs (loop0): Test dummy encryption mode enabled [ 477.022401][ T9234] EXT4-fs (loop0): Ignoring removed bh option [ 477.096281][ T9234] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 477.160907][ T9261] loop2: detected capacity change from 0 to 512 [ 477.324250][ T9265] loop3: detected capacity change from 0 to 256 [ 477.393084][ T9261] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 477.431495][ T9265] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 477.789695][ T9261] EXT4-fs (loop2): 1 truncate cleaned up [ 477.796625][ T9261] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 478.262105][ T9275] loop2: detected capacity change from 0 to 4096 [ 478.938211][ T9275] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 479.156916][ T9280] loop3: detected capacity change from 0 to 4096 [ 479.661184][ T9280] EXT4-fs (loop3): Test dummy encryption mode enabled [ 479.670417][ T9280] EXT4-fs (loop3): Test dummy encryption mode enabled [ 479.764012][ T9280] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 481.436242][ T9320] loop0: detected capacity change from 0 to 16 [ 483.098658][ T9320] erofs: (device loop0): mounted with root inode @ nid 36. [ 483.115240][ T9315] attempt to access beyond end of device [ 483.115240][ T9315] loop0: rw=0, want=40, limit=16 [ 483.362363][ T9334] loop3: detected capacity change from 0 to 4096 [ 483.456488][ T9339] loop0: detected capacity change from 0 to 256 [ 483.474167][ T9339] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 483.665012][ T9334] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 485.586687][ T9361] loop2: detected capacity change from 0 to 8 [ 488.749405][ T4233] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 489.215387][ T4233] usb 4-1: unable to get BOS descriptor or descriptor too short [ 489.360324][ T4233] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 489.530947][ T9388] loop0: detected capacity change from 0 to 512 [ 489.536963][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1351'. [ 489.555118][ T4233] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 489.576784][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.590832][ T4233] usb 4-1: Product: syz [ 489.595549][ T4233] usb 4-1: Manufacturer: syz [ 489.600779][ T4233] usb 4-1: SerialNumber: syz [ 489.637825][ T9388] EXT4-fs (loop0): 1 truncate cleaned up [ 489.643536][ T9388] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 490.426761][ T9400] loop5: detected capacity change from 0 to 256 [ 490.471574][ T9400] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 490.841137][ T9373] loop3: detected capacity change from 0 to 512 [ 490.971111][ T9373] EXT4-fs (loop3): 1 truncate cleaned up [ 491.010179][ T9373] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 492.477228][ T4233] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 492.514937][ T4233] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 492.595021][ T4233] usb 4-1: failed to enable PITCH for EP 0x82 [ 492.699083][ T4233] usb 4-1: USB disconnect, device number 8 [ 492.854223][ T9432] loop0: detected capacity change from 0 to 256 [ 493.125030][ T4233] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 493.702755][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'. [ 493.775046][ T4233] usb 4-1: not running at top speed; connect to a high speed hub [ 495.059905][ T4233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25702, setting to 64 [ 495.220473][ T9448] loop2: detected capacity change from 0 to 8 [ 495.239746][ T4233] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 495.254790][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.262808][ T4233] usb 4-1: Product: syz [ 495.310858][ T4233] usb 4-1: Manufacturer: syz [ 495.315784][ T4233] usb 4-1: SerialNumber: syz [ 495.355303][ T9424] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 495.524097][ T4233] oti6858 4-1:1.0: oti6858 converter detected [ 495.559542][ T4233] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 495.649074][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.277823][ T4233] usb 4-1: USB disconnect, device number 9 [ 496.298368][ T4233] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 496.335947][ T4233] oti6858 4-1:1.0: device disconnected [ 497.904773][ T9476] loop0: detected capacity change from 0 to 4096 [ 497.953311][ T9476] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 498.175244][ T9482] loop3: detected capacity change from 0 to 16 [ 498.705898][ T9482] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 498.817660][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1373'. [ 498.944734][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1374'. [ 501.008753][ T9511] loop0: detected capacity change from 0 to 2048 [ 501.110458][ T9514] loop2: detected capacity change from 0 to 4096 [ 501.132049][ T9511] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 501.137568][ T9511] loop0: partition table partially beyond EOD, truncated [ 501.195595][ T9511] loop0: p1 start 3405774849 is beyond EOD, truncated [ 501.221631][ T9514] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 501.247037][ T9511] loop0: p2 start 53543428 is beyond EOD, truncated [ 501.265403][ T9511] loop0: p3 start 4284289 is beyond EOD, truncated [ 501.274794][ T9511] loop0: p5 start 3405774849 is beyond EOD, truncated [ 501.282166][ T9511] loop0: p6 start 53543428 is beyond EOD, truncated [ 501.455099][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.461426][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.947100][ T9532] loop3: detected capacity change from 0 to 16 [ 502.085212][ T9532] erofs: (device loop3): mounted with root inode @ nid 36. [ 502.104499][ T9532] attempt to access beyond end of device [ 502.104499][ T9532] loop3: rw=0, want=40, limit=16 [ 502.127693][ T9532] attempt to access beyond end of device [ 502.127693][ T9532] loop3: rw=524288, want=48, limit=16 [ 502.139077][ T9532] attempt to access beyond end of device [ 502.139077][ T9532] loop3: rw=524288, want=40, limit=16 [ 503.641886][ T4233] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 503.750195][ T9548] loop2: detected capacity change from 0 to 256 [ 503.793888][ T9548] exFAT-fs (loop2): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 503.831257][ T9550] loop3: detected capacity change from 0 to 256 [ 503.842061][ T9548] attempt to access beyond end of device [ 503.842061][ T9548] loop2: rw=524288, want=4281, limit=256 [ 503.880072][ T9550] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 503.906997][ T9548] attempt to access beyond end of device [ 503.906997][ T9548] loop2: rw=0, want=4281, limit=256 [ 503.934308][ T9550] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 503.954979][ T26] audit: type=1800 audit(1791070300.767:170): pid=9548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1388" name="file1" dev="loop2" ino=1048633 res=0 errno=0 [ 503.955152][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 503.981944][ T9548] exFAT-fs (loop2): invalid start cluster (520) [ 504.104989][ T4233] usb 1-1: device descriptor read/all, error -71 [ 504.139663][ T9552] loop2: detected capacity change from 0 to 8 [ 504.380609][ T9558] loop0: detected capacity change from 0 to 2048 [ 504.461479][ T9558] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 504.528344][ T9562] netlink: 'syz.3.1399': attribute type 11 has an invalid length. [ 507.131749][ T9587] loop0: detected capacity change from 0 to 256 [ 507.247040][ T9589] loop3: detected capacity change from 0 to 2048 [ 507.293046][ T9587] exFAT-fs (loop0): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 507.550480][ T9589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 507.583870][ T9587] attempt to access beyond end of device [ 507.583870][ T9587] loop0: rw=524288, want=4281, limit=256 [ 507.682836][ T9587] attempt to access beyond end of device [ 507.682836][ T9587] loop0: rw=0, want=4281, limit=256 [ 508.833768][ T26] audit: type=1800 audit(1791070305.647:171): pid=9587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1407" name="file1" dev="loop0" ino=1048635 res=0 errno=0 [ 508.867118][ T9587] exFAT-fs (loop0): invalid start cluster (520) [ 511.245048][ T4174] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 511.514877][ T4174] usb 4-1: Using ep0 maxpacket: 32 [ 511.655305][ T4174] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 511.701159][ T4174] usb 4-1: config 0 has no interface number 0 [ 511.914973][ T4174] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 511.954843][ T4174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.965700][ T4174] usb 4-1: Product: syz [ 511.969888][ T4174] usb 4-1: Manufacturer: syz [ 511.984913][ T4174] usb 4-1: SerialNumber: syz [ 512.000797][ T4174] usb 4-1: config 0 descriptor?? [ 512.056588][ T4174] smsc95xx v2.0.0 [ 513.414887][ T4174] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 513.454426][ T4174] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 513.514792][ T4174] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 513.563655][ T9642] loop5: detected capacity change from 0 to 2048 [ 513.565867][ T4174] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 513.598306][ T4174] usb 4-1: USB disconnect, device number 10 [ 513.685543][ T9642] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 514.622023][ T26] audit: type=1800 audit(1791070311.437:172): pid=9654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1428" name="file2" dev="loop5" ino=1347 res=0 errno=0 [ 514.859097][ T9662] loop3: detected capacity change from 0 to 512 [ 515.080353][ T9662] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 515.147091][ T9672] loop5: detected capacity change from 0 to 128 [ 515.162800][ T9662] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.970264][ T9672] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 515.984996][ T9672] ext4 filesystem being mounted at /201/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 516.292333][ T9681] loop3: detected capacity change from 0 to 512 [ 516.414308][ T9681] EXT4-fs (loop3): Ignoring removed nobh option [ 516.433850][ T9683] loop5: detected capacity change from 0 to 512 [ 516.492839][ T9685] loop0: detected capacity change from 0 to 1024 [ 516.505816][ T9681] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobh,,errors=continue. Quota mode: none. [ 516.642742][ T9683] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 516.668546][ T9683] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.1441: corrupted in-inode xattr [ 516.805284][ T9683] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.1441: couldn't read orphan inode 15 (err -117) [ 516.863959][ T9683] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,nombcache,noload,grpjquota=.,noblock_validity,nodiscard,nobarrier,usrjquota=,,errors=continue. Quota mode: writeback. [ 516.998538][ T146] [ 517.000905][ T146] ====================================================== [ 517.007918][ T146] WARNING: possible circular locking dependency detected [ 517.014939][ T146] syzkaller #0 Not tainted [ 517.019348][ T146] ------------------------------------------------------ [ 517.026348][ T146] kworker/u5:0/146 is trying to acquire lock: [ 517.032405][ T146] ffff88801bcfa120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x70a/0xd00 [ 517.043108][ T146] [ 517.043108][ T146] but task is already holding lock: [ 517.050464][ T146] ffffffff8d594a88 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_connect_cfm+0x2c/0x130 [ 517.059812][ T146] [ 517.059812][ T146] which lock already depends on the new lock. [ 517.059812][ T146] [ 517.070216][ T146] [ 517.070216][ T146] the existing dependency chain (in reverse order) is: [ 517.079226][ T146] [ 517.079226][ T146] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 517.086976][ T146] __mutex_lock_common+0x1e5/0x2400 [ 517.092693][ T146] mutex_lock_nested+0x17/0x20 [ 517.097979][ T146] hci_remote_features_evt+0x5d9/0xa10 [ 517.103964][ T146] hci_event_packet+0x600/0x1310 [ 517.109420][ T146] hci_rx_work+0x255/0xa10 [ 517.114363][ T146] process_one_work+0x867/0xff0 [ 517.119740][ T146] worker_thread+0xad7/0x12a0 [ 517.124941][ T146] kthread+0x42e/0x520 [ 517.129532][ T146] ret_from_fork+0x1f/0x30 [ 517.134487][ T146] [ 517.134487][ T146] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 517.141794][ T146] __mutex_lock_common+0x1e5/0x2400 [ 517.147526][ T146] mutex_lock_nested+0x17/0x20 [ 517.152822][ T146] sco_sock_connect+0x189/0x940 [ 517.158206][ T146] __sys_connect+0x3cb/0x450 [ 517.163322][ T146] __x64_sys_connect+0x76/0x80 [ 517.168618][ T146] do_syscall_64+0x4c/0xa0 [ 517.173566][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 517.179987][ T146] [ 517.179987][ T146] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}: [ 517.189108][ T146] __lock_acquire+0x38f7/0x7d40 [ 517.194487][ T146] lock_acquire+0x19f/0x400 [ 517.199519][ T146] lock_sock_nested+0x44/0x100 [ 517.204803][ T146] sco_connect_cfm+0x70a/0xd00 [ 517.210086][ T146] hci_connect_cfm+0x8f/0x130 [ 517.215278][ T146] hci_conn_request_evt+0x712/0xae0 [ 517.220993][ T146] hci_event_packet+0x735/0x1310 [ 517.226448][ T146] hci_rx_work+0x255/0xa10 [ 517.231389][ T146] process_one_work+0x867/0xff0 [ 517.236757][ T146] worker_thread+0xad7/0x12a0 [ 517.241958][ T146] kthread+0x42e/0x520 [ 517.246556][ T146] ret_from_fork+0x1f/0x30 [ 517.251533][ T146] [ 517.251533][ T146] other info that might help us debug this: [ 517.251533][ T146] [ 517.261768][ T146] Chain exists of: [ 517.261768][ T146] sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock [ 517.261768][ T146] [ 517.276025][ T146] Possible unsafe locking scenario: [ 517.276025][ T146] [ 517.283478][ T146] CPU0 CPU1 [ 517.288855][ T146] ---- ---- [ 517.294221][ T146] lock(hci_cb_list_lock); [ 517.298732][ T146] lock(&hdev->lock); [ 517.305317][ T146] lock(hci_cb_list_lock); [ 517.312334][ T146] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 517.318222][ T146] [ 517.318222][ T146] *** DEADLOCK *** [ 517.318222][ T146] [ 517.326358][ T146] 4 locks held by kworker/u5:0/146: [ 517.331548][ T146] #0: ffff888076bd7138 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 517.341826][ T146] #1: ffffc9000174fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 517.353144][ T146] #2: ffff888078618478 (&hdev->lock){+.+.}-{3:3}, at: hci_conn_request_evt+0x350/0xae0 [ 517.362904][ T146] #3: ffffffff8d594a88 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_connect_cfm+0x2c/0x130 [ 517.372573][ T146] [ 517.372573][ T146] stack backtrace: [ 517.378463][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 517.385928][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 517.395987][ T146] Workqueue: hci0 hci_rx_work [ 517.400664][ T146] Call Trace: [ 517.403942][ T146] [ 517.406875][ T146] dump_stack_lvl+0x188/0x250 [ 517.411568][ T146] ? load_image+0x410/0x410 [ 517.416071][ T146] ? show_regs_print_info+0x20/0x20 [ 517.421275][ T146] ? print_circular_bug+0x12b/0x1a0 [ 517.426476][ T146] check_noncircular+0x2f8/0x400 [ 517.431412][ T146] ? print_deadlock_bug+0x5d0/0x5d0 [ 517.436599][ T146] ? lockdep_lock+0xf1/0x1f0 [ 517.441192][ T146] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 517.447180][ T146] ? mark_lock+0x94/0x320 [ 517.451503][ T146] ? _find_first_zero_bit+0xd1/0xf0 [ 517.456705][ T146] __lock_acquire+0x38f7/0x7d40 [ 517.461561][ T146] ? finish_lock_switch+0x12d/0x290 [ 517.466769][ T146] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 517.472756][ T146] ? verify_lock_unused+0x140/0x140 [ 517.477956][ T146] ? lock_chain_count+0x20/0x20 [ 517.482812][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 517.488006][ T146] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 517.493636][ T146] ? release_firmware_map_entry+0x190/0x190 [ 517.499525][ T146] lock_acquire+0x19f/0x400 [ 517.504025][ T146] ? sco_connect_cfm+0x70a/0xd00 [ 517.508959][ T146] ? preempt_schedule+0xbc/0xd0 [ 517.513812][ T146] ? preempt_schedule_common+0xa5/0xd0 [ 517.519264][ T146] ? preempt_schedule+0xbc/0xd0 [ 517.524114][ T146] ? read_lock_is_recursive+0x10/0x10 [ 517.529485][ T146] ? __lock_acquire+0x7d40/0x7d40 [ 517.534505][ T146] ? do_raw_spin_lock+0x128/0x2f0 [ 517.539526][ T146] ? __rwlock_init+0x140/0x140 [ 517.544285][ T146] lock_sock_nested+0x44/0x100 [ 517.549042][ T146] ? sco_connect_cfm+0x70a/0xd00 [ 517.553974][ T146] sco_connect_cfm+0x70a/0xd00 [ 517.558780][ T146] ? sco_skb_put_cmsg+0xa0/0xa0 [ 517.563637][ T146] ? sco_skb_put_cmsg+0xa0/0xa0 [ 517.568492][ T146] hci_connect_cfm+0x8f/0x130 [ 517.573174][ T146] hci_conn_request_evt+0x712/0xae0 [ 517.578379][ T146] ? __lock_acquire+0x7d40/0x7d40 [ 517.583411][ T146] ? hci_conn_complete_evt+0x1460/0x1460 [ 517.589047][ T146] ? hci_event_packet+0x2de/0x1310 [ 517.594160][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 517.599802][ T146] ? mutex_unlock+0x10/0x10 [ 517.604308][ T146] ? preempt_schedule+0xbc/0xd0 [ 517.609157][ T146] ? schedule_preempt_disabled+0x20/0x20 [ 517.614796][ T146] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 517.620435][ T146] hci_event_packet+0x735/0x1310 [ 517.625381][ T146] ? _raw_spin_unlock+0x40/0x40 [ 517.630233][ T146] ? rcu_lock_release+0x20/0x20 [ 517.635090][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 517.640300][ T146] hci_rx_work+0x255/0xa10 [ 517.644724][ T146] process_one_work+0x867/0xff0 [ 517.649585][ T146] ? worker_detach_from_pool+0x240/0x240 [ 517.655221][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 517.660511][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 517.665535][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 517.671081][ T146] ? wq_worker_running+0x97/0x170 [ 517.676104][ T146] worker_thread+0xad7/0x12a0 [ 517.680791][ T146] kthread+0x42e/0x520 [ 517.684857][ T146] ? rcu_lock_release+0x20/0x20 [ 517.689704][ T146] ? kthread_blkcg+0xd0/0xd0 [ 517.694298][ T146] ret_from_fork+0x1f/0x30 [ 517.698720][ T146] [ 519.804704][ T4279] Bluetooth: hci0: command 0x042a tx timeout