last executing test programs: 10.762556878s ago: executing program 2 (id=491): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 10.668008081s ago: executing program 2 (id=492): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@abort}, {@barrier_val}, {@nogrpid}, {@resgid}, {@noinit_itable}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x1, 0x4ef, &(0x7f0000000a40)="$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") 10.079978755s ago: executing program 2 (id=494): openat(0xffffffffffffff9c, 0x0, 0x2, 0x4a) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x2200400, &(0x7f0000001040)=ANY=[@ANYRES8=0x0], 0xfe, 0x160, &(0x7f0000000200)="$eJzs0M+LEnEYx/H3d+brKKRYZCBBKXTIksAf1C3CiSQhGyi6dBJs+gGKkVDeUqJbB6Grh9q9Lgv7F+jqYdlFL7v/xF68LezRZWbcXZb1P9jndZvP830+D8yLp7OM4tzzVvPrN7fddj+k3zjV8tvD4bDk5RZ0ti7Mg/ejEnxGM9Iw74EXT2Lw8UvDNeqthvc9L0EYsK8tc5rx03t2QtPTkCfYz9yD8S3/ncHlzC0S8vdua7DjQZYDFv/hvgX2jSDz+o4AE5SylsfumPyuZFM3FXQG2c2NvdfT3cqjh8/cP4Vy/0E0aWZ/whq2iuxMPh2Yy63ZtPrKqTqzYqHwpJjLGzze9wu7ffTL6Hd4r0B7fQZ+n0Xyrn4HvxT89W/Nt1UMGP87dprhs3/d/WGmQaUG9VoytF5LXDcwM9qbLFjBnxBZNRJCCCGEEEIIIYQQQgghhBBCCHHVnQQAAP//A2lTBA==") syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6afe2ef6b196de1aaab99b60f44276ce4c9bd640b78c7fb5f66b7397692465"], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.765965817s ago: executing program 1 (id=500): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x20, 0xb, 0x0, 0x0, {[@md5sig={0x13, 0x12, "a16dc34416fcb1917fdf02dd82bbfc0e"}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x7, 0x5, 0x5}, @timestamp={0x8, 0xa, 0xffff, 0x3}, @mptcp=@mp_fclose={0x1e, 0xc, 0x4, 0x0, 0x6}, @sack={0x5, 0x1e, [0x7fff, 0x3ff, 0x4, 0x40, 0x5, 0xffff, 0x7]}]}}}}}}}, 0x0) 8.739831587s ago: executing program 1 (id=501): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) 8.607361991s ago: executing program 0 (id=502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="b9800000c00f3235004000000f30640f013964366436f2a566baf80cb89468af8bef66bafc0c66ed66baa000ed66baf80cb8c06ab88fef66bafc0ced410fc7ac280058000066b83b018ee0c7442400c6000000c74424028000c0feff1c2466baa000b000ee", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.511577253s ago: executing program 0 (id=503): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x4, 0x2, 0x1, 0x8, r3}, &(0x7f0000000280)=0x10) 8.479043404s ago: executing program 0 (id=504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_HYPERV_VP_INDEX(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x80) 6.426259284s ago: executing program 2 (id=514): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x120008c) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 6.302360827s ago: executing program 4 (id=515): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0}, 0x80804) 6.131317971s ago: executing program 4 (id=516): setresgid(0xee00, 0xee01, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x402, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r1, 0x0) 6.046853863s ago: executing program 2 (id=517): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 5.943920385s ago: executing program 4 (id=518): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) capset(&(0x7f0000000080)={0x20080522}, 0x0) mount$9p_tcp(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e24}}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 5.221245323s ago: executing program 1 (id=519): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x800855, &(0x7f0000000d40)={[{@check_relaxed}, {@mode={'mode', 0x3d, 0x5}}, {@map_off}, {@map_acorn}, {@hide}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@hide}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@uid}, {@uid}, {@unhide}, {@mode={'mode', 0x3d, 0x2}}]}, 0x0, 0xa21, &(0x7f0000000180)="$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") utime(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000240)={'rti802\x00', [0x100, 0x4, 0x13600, 0x4, 0x0, 0x10005, 0x79, 0x0, 0x80008, 0x8, 0x2, 0x64, 0x5, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0x6, 0xca9f, 0x9, 0x20001e58, 0x3, 0xf39e, 0x7ff, 0x1539b804, 0x7, 0x801, 0x2]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) 5.017919258s ago: executing program 4 (id=520): mkdir(0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x2000c040) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000a00)='1\x00', 0x2) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000000)) 4.835971912s ago: executing program 4 (id=521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xff7ffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffef, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r2, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 4.215333718s ago: executing program 4 (id=522): recvmmsg(0xffffffffffffffff, &(0x7f0000004380)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f00000002c0)=""/134, 0x86}, 0x1000}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/20, 0x14}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/149, 0x95}, {&(0x7f0000001cc0)=""/230, 0xe6}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/4096, 0x1000}], 0x7}, 0xad1}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003f00)=""/217, 0xd9}, {&(0x7f0000004000)=""/223, 0xdf}, {&(0x7f0000004100)=""/8, 0x8}, {&(0x7f0000004140)=""/217, 0xd9}], 0x4}, 0x2}], 0x3, 0x60, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.017613767s ago: executing program 2 (id=527): ptrace(0x10, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d10009050700000000000009058973f7"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x2000) 2.742590363s ago: executing program 1 (id=529): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$eJzs3V2IXFcBAOBzd3c2u2lrpjW1axrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZzMxmd+7O7vfB3TPnnnPnnDt75879O+cEYMOaWPq7uDhXhHDujZcPvf/AP2avzdnfylFf+jtVitVCCEWMT2Xv995kM7zywfPHuoVFWFj6m+Lh8UutZW8JIZwOO8L5UA/bzl146a2Fx46cOXx259uv7ru4OmsPAAAbyzfO71u8869/vvv2y6/dcyBsas1Px+f1NGOmedx/IB74p+P/idAZL0pT2XSWbypOE7Od+Sa75CuXU8vyTfUofzorv9Yj36Zw4/InS/O6rTeMs7Qd10MxMR9C2NyKT0zMzzfPycPSef10MX/qxMmnn62oosCK+/e9IYQdpeng2c74Wpv2r4E6LHNqrIE6jOV0YHRlXW40Vb7OI5oaW6reAwE05fcLr3M6v7Jwc1rvNjVY+Zcenei+PKyAUW//Q5U/XXH5Qfm/PmOPw8pZr1tTWq/0Pbo1xvP7CPnzS6/8oXO5tvxOR+fc/H5EbcB69rqPMC73F3rVc3LE9ViuXvXPt4v16isxTJ/DVztS7+34/uT/03H5HwPdfZhf/zeZTGt7Ch3x2s28V6Pi/Q+wduXPzTXS/dEof64vT9/UJ32mT/psn/TNfdJv6ZMOG9lvf/DT8GLRvt6Vn9MPez08XWe7LYYfGbI++fXIYcvPn/sd1s2Wnz9PDGvZ748+cfyLTz15ofn8f9Ha/q/G7T2dbtTjd+t8zJCuF+bX1VvP/tc7y5noke+OrD63dcm/9HprZ75ia/t9Qmk/c1095jqX29Ir3/bOfPUs32ycZrL65scnm7Pl0vFH2q+mz2sqW99ath7TWT3SfuX2GOb1gOVI22N6/r/dHqD5/H/aPudCrXj6xMnjj8R42k7/NFnbdG3+7hHXG1g5vb7/6fdrLnS2/7m1Nb82Ud4vbGnPL5r7hdfj+3XOX2iVU5pf+lFLv3Pfnpxdyj9/7Hsnn1qF9YaN7NkfP/edoydPHv++F8t+8bW1UY1hXqTTlrVSHy+GfbFjtYuoeMcErLpdLzQPAh4+8d2jzxx/5vipPXv37llY2PulPYu7lo7rd5WP7stOV1BbYCW1f/SrrgkAAAAAAAAAAAAwqB8ePnThnTe/8G6z/X+7/V9q/5+e/E3t/3+Stf/P28mndvCpHeDtXdKX8mQdrE5n+Wpx+mhW39QNQPFCM7wzW+5jMWyN4xfb/6fi8n5dU33uyubXekSz7gSu6y9lOuuDJB8v8L4Yno3hrwJUqJjtPjuGN+jfuviwtK2n/ilKTXgb+gceH+n/lvdflNp/d+3XqUt7bcbLKFosVr2OQHf/3FD9f/+rveKV18XUe5oabXk/27jbRKPnUfqgI9gArIyqx//8e2iWm65/nvrj12euTSnbpUc795d5/6UwjL+80xlf6+NPrnb5+bh9oy6/6vUf9fifrfHv4v4v7fd67/+yEfPqyyv3Pz+/+G6p2LBt0PLz9U/9QG8drvzLsfy0Ng+Gwcpv/DIrP78hNKD/ZuVvHrD869Z/+/LK/18sP31sD90/aPnNGhcTnfWYzdYj3f/LrxsnV7L1T3173qD8bz7Xbf2XOVDj1Vg+bGTjMs7ssLLjiNZBe7/xf4f9/b/Z8X9blc12a/lzGJ+P8bQjTs855OOdDFv/9HxF+h24M3v/os/vm/F/x9uXY9jv+5DG/03bYz3+5JfiS59lite6fLbrdV8D4+q9DXX/b1TTxeZp0PKWn6m+/qYhpsbkMpZrPWdVcf0bjcbqXtDqo9LCqfzzr/ruc9XnKfdVXH4/+fi/+TF8Pv5vnp6P/5un5+P/5umz8T/0fo/0fPzffHvOx//N0+/K3jcfH3iuT/rHu6QXoZ2+rfvyrdP2u/u8//Y+6Z/ok76zlb6/I0dKv+eGy7fz9Xr/O/qk398n/ZN90j/VJ/2BPukPldLLY0Cn9E9nyxdZ+nqX9j+9Pj9g/crb5/n+w8aR7v/0+v5vbadPl7OMtpbAanjltd0Hn/zNt+rN9v/Tresh6T7egRivxXOjH8V4ft87lOLX0t6M8b9l6VVfbwLa8v4z8t//B/ukA+MrPefl+w0bUDHTfXYM+/Vb1es4n/HymRh+Noafi+HDMZyP4a4Y7o7hwojqx+o4+Prv9r1YtM/3t2Tpgz5PnrcH6ugnKoSwZ8D65NcHhn2ePe/Hb1g3W/4ym4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUZmLp7+LiXBHCuTdePvTEkRO7rs3Z38pRX/o7VYrVWsuF8EgMJ2P4i/jiygfPHyuHV2NYhIVQhKI1Pzx+qVXSLSGE02FHOB/qYdu5Cy+9tfDYkTOHz+58+9V9F1fvEwAAAID17/8BAAD//092Bzk=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, 0x0) ftruncate(r0, 0x3) timer_create(0x0, 0x0, &(0x7f0000000300)) 2.727106054s ago: executing program 3 (id=530): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) capset(&(0x7f0000000080)={0x20080522}, 0x0) mount$9p_tcp(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e24}}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 2.658356985s ago: executing program 0 (id=531): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x82, 0x3fd]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x101080, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000280)='highspeed\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='101:0:1\x00', 0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r3, @ANYBLOB="0100"/20, @ANYRES16=r3], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r4) write(0xffffffffffffffff, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0xa1) close(0xffffffffffffffff) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES16=r3, @ANYRESDEC, @ANYRESOCT=r5, @ANYRES32=r6, @ANYRES32=r2], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x8, 0x8001, 0x6}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000340)=[{0x2, 0x1, 0x3, 0x9}, {0x0, 0x3, 0x7, 0x3}, {0xfffffffd, 0x3, 0xb, 0x7}, {0x2, 0x4, 0xc, 0x6}, {0x3, 0x3, 0x10, 0x8}, {0x0, 0x2, 0x9, 0x9}, {0x0, 0x4, 0x5}, {0x3, 0x3, 0x1, 0x3}, {0x4, 0x2, 0xb, 0x3}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r7, 0x0, 0x0, 0x8d, &(0x7f0000000540), &(0x7f0000000740)=""/141, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x50) mkdirat(r3, &(0x7f0000000540)='./sys\x00', 0x10) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c706f7274373078303430303030303030303030346532342c74696d656f75743d3078303030303030303030303030303030302c0096c8ef61a7d0e12e74cf322b8d5245092afef8b6f2968e062da99da4b2d1c0e03771e755eaf5a05f0f24e2fd9ac9920b4b0847e6304498c0253735ecf5e3734b11e69d0901bb4474a7fb8bad58922b267f046c1d7baeae3ab4192fb14ed846856edf861d5e3e1e5f801ddc64"]) 1.699714899s ago: executing program 3 (id=532): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f4940000850000000800000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330021ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 1.666569409s ago: executing program 0 (id=533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xffe0}, {0x0, 0x9}, {0xe, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x24, 0x6}]}}]}, 0x3c}}, 0x2000a100) 1.582088021s ago: executing program 1 (id=534): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000840)=""/167, 0xa7}, {&(0x7f0000000900)=""/149, 0x95}, {&(0x7f00000010c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002100)=""/183, 0xb7}], 0x5) close(r1) 1.355793147s ago: executing program 3 (id=535): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003540)=@vmx={0x100, 0x0, 0x2080, {0x6000, 0x40000, {}, 0x1, 0x9a3}, {"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", "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"}}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000440)=@svm={0x0, 0x1, 0x1080, {0xeeef0000}, {"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"}}) 1.22706203s ago: executing program 3 (id=536): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x82, 0x3fd]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x101080, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write(r3, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r5, &(0x7f0000000800)='101:0:1\x00', 0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r4, @ANYBLOB="0100"/20, @ANYRES16=r4], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r5) write(0xffffffffffffffff, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0xa1) close(0xffffffffffffffff) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES16=r4, @ANYRESDEC, @ANYRESOCT=r6, @ANYRES32=r7, @ANYRES32=r2], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x8, 0x8001, 0x6}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000340)=[{0x2, 0x1, 0x3, 0x9}, {0x0, 0x3, 0x7, 0x3}, {0xfffffffd, 0x3, 0xb, 0x7}, {0x2, 0x4, 0xc, 0x6}, {0x3, 0x3, 0x10, 0x8}, {0x0, 0x2, 0x9, 0x9}, {0x0, 0x4, 0x5}, {0x3, 0x3, 0x1, 0x3}, {0x4, 0x2, 0xb, 0x3}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r9, 0x0, 0x0, 0x8d, &(0x7f0000000540), &(0x7f0000000740)=""/141, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r8, 0x0) mkdirat(r4, &(0x7f0000000540)='./sys\x00', 0x10) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c706f7274373078303430303030303030303030346532342c74696d656f75743d3078303030303030303030303030303030302c0096c8ef61a7d0e12e74cf322b8d5245092afef8b6f2968e062da99da4b2d1c0e03771e755eaf5a05f0f24e2fd9ac9920b4b0847e6304498c0253735ecf5e3734b11e69d0901bb4474a7fb8bad58922b267f046c1d7baeae3ab4192fb14ed846856edf861d5e3e1e5f801ddc64"]) 1.142256272s ago: executing program 3 (id=537): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x800855, &(0x7f0000000d40)={[{@check_relaxed}, {@mode={'mode', 0x3d, 0x5}}, {@map_off}, {@map_acorn}, {@hide}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@hide}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@uid}, {@uid}, {@unhide}, {@mode={'mode', 0x3d, 0x2}}]}, 0x0, 0xa21, &(0x7f0000000180)="$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") utime(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0xfffffffffffffe26, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r4, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a40)={0x50, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000001300)="b461802305624431", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x83a7}, 0x50) syz_open_dev$sg(&(0x7f0000000140), 0xffffffffffff1810, 0xa482) 1.057590154s ago: executing program 0 (id=538): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10}}, 0x1c}}, 0x0) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0xf4, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_NAT={0xe0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x200108a4}, 0x40000) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7) syz_open_dev$usbfs(0x0, 0x80, 0x113201) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1', 0x1) r4 = openat(r3, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x50680, 0xd0) write(r4, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) pipe2$watch_queue(&(0x7f0000000140), 0x80) 19.23046ms ago: executing program 1 (id=539): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000a00)={0x40, 0xc, 0x5, "be128742a0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000007c0)=ANY=[@ANYBLOB="000c04000000ca"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=540): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x800855, &(0x7f0000000d40)={[{@check_relaxed}, {@mode={'mode', 0x3d, 0x5}}, {@map_off}, {@map_acorn}, {@hide}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@hide}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@uid}, {@uid}, {@unhide}, {@mode={'mode', 0x3d, 0x2}}]}, 0x0, 0xa21, &(0x7f0000000180)="$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") utime(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000240)={'rti802\x00', [0x100, 0x4, 0x13600, 0x4, 0x0, 0x10005, 0x79, 0x0, 0x80008, 0x8, 0x2, 0x64, 0x5, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0x6, 0xca9f, 0x9, 0x20001e58, 0x3, 0xf39e, 0x7ff, 0x1539b804, 0x7, 0x801, 0x2]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) kernel console output (not intermixed with test programs): op0: detected capacity change from 0 to 32768 [ 111.546951][ T26] audit: type=1800 audit(1787593964.481:4): pid=4485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.63" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 111.579378][ T4488] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.64 (4488) [ 111.635311][ T4486] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.62 (4486) [ 111.648567][ T4488] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 111.662514][ T2304] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.677120][ T4488] BTRFS info (device loop2): setting nodatacow, compression disabled [ 111.696504][ T4486] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 111.710031][ T4488] BTRFS info (device loop2): setting datasum, datacow enabled [ 111.719411][ T4486] BTRFS info (device loop0): setting nodatasum [ 111.742743][ T4488] BTRFS info (device loop2): force clearing of disk cache [ 111.750264][ T4486] BTRFS info (device loop0): force zlib compression, level 3 [ 111.757706][ T4486] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 111.778138][ T4488] BTRFS info (device loop2): enabling ssd optimizations [ 111.807812][ T4488] BTRFS info (device loop2): using spread ssd allocation scheme [ 111.815923][ T4486] BTRFS info (device loop0): use lzo compression, level 0 [ 111.838623][ T4488] BTRFS info (device loop2): turning on sync discard [ 111.850487][ T4486] BTRFS info (device loop0): turning on flush-on-commit [ 111.870568][ T4488] BTRFS info (device loop2): turning off barriers [ 111.877079][ T4488] BTRFS info (device loop2): setting nodatacow, compression disabled [ 111.895663][ T4486] BTRFS info (device loop0): enabling auto defrag [ 111.917050][ T4486] BTRFS info (device loop0): max_inline at 4096 [ 111.936460][ T4488] BTRFS info (device loop2): not using ssd optimizations [ 111.948778][ T4486] BTRFS info (device loop0): using free space tree [ 111.961092][ T4488] BTRFS info (device loop2): not using spread ssd allocation scheme [ 111.969537][ T4486] BTRFS info (device loop0): has skinny extents [ 112.010464][ T4488] BTRFS info (device loop2): using free space tree [ 112.031449][ T4488] BTRFS info (device loop2): has skinny extents [ 112.040509][ T2304] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 112.075675][ T2304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.174125][ T2304] usb 2-1: config 0 descriptor?? [ 112.339795][ T4486] BTRFS info (device loop0): enabling ssd optimizations [ 112.359367][ T4497] loop3: detected capacity change from 0 to 65536 [ 112.458919][ T4488] BTRFS info (device loop2): clearing free space tree [ 112.544423][ T4488] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.584377][ T4488] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.591769][ T26] audit: type=1800 audit(1787593965.521:5): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.62" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 112.641909][ T2304] ath6kl: Failed to submit usb control message: -71 [ 112.648929][ T2304] ath6kl: unable to send the bmi data to the device: -71 [ 112.668358][ T2304] ath6kl: Unable to send get target info: -71 [ 112.681027][ T2304] ath6kl: Failed to init ath6kl core: -71 [ 112.711100][ T4497] XFS (loop3): Mounting V5 Filesystem [ 112.716760][ T4488] BTRFS info (device loop2): creating free space tree [ 112.727672][ T4488] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.743738][ T2304] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 112.749337][ T4488] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.841337][ T2304] usb 2-1: USB disconnect, device number 2 [ 112.882643][ T4497] XFS (loop3): Ending clean mount [ 113.008732][ T4497] XFS (loop3): Quotacheck needed: Please wait. [ 113.063092][ T26] audit: type=1800 audit(1787593966.001:6): pid=4488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.64" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 113.129237][ T1276] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x1 [ 113.154083][ T1276] XFS (loop3): Unmount and run xfs_repair [ 113.159865][ T1276] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 113.170203][ T1276] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 113.179171][ T1276] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 113.188515][ T1276] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 113.197758][ T1276] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 113.206981][ T1276] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 113.216224][ T1276] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.241775][ T1276] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.302728][ T1276] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.327334][ T1276] XFS (loop3): metadata I/O error in "xfs_read_agf+0x239/0x4f0" at daddr 0x1 len 1 error 74 [ 113.351577][ T4488] BTRFS info (device loop2): balance: start -sconvert=raid0,usage=0..9 [ 113.396850][ T4488] BTRFS info (device loop2): balance: ended with status: 0 [ 113.418510][ T4497] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 113.782062][ T4584] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x1 [ 114.616203][ T4584] XFS (loop3): Unmount and run xfs_repair [ 114.629822][ T4570] loop4: detected capacity change from 0 to 40427 [ 114.631205][ T4584] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 114.736355][ T4584] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 114.915448][ T4584] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 114.947438][ T4570] F2FS-fs (loop4): invalid crc value [ 115.057174][ T4584] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 115.208076][ T4570] F2FS-fs (loop4): Found nat_bits in checkpoint [ 115.244567][ T4584] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 115.383587][ T4584] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 115.547381][ T4584] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.707810][ T4584] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.856165][ T4584] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.972980][ T4497] XFS (loop3): metadata I/O error in "xfs_read_agf+0x239/0x4f0" at daddr 0x1 len 1 error 74 [ 116.018606][ T4497] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 116.357578][ T4497] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 118.733087][ T4195] XFS (loop3): Unmounting Filesystem [ 119.665720][ T4617] loop0: detected capacity change from 0 to 256 [ 119.680371][ T4263] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 120.110960][ T4263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.134357][ T4263] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 121.795866][ T4263] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 121.835604][ T4629] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 121.918499][ T4263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.168886][ T4263] usb 2-1: config 0 descriptor?? [ 122.436725][ T4633] loop0: detected capacity change from 0 to 2048 [ 122.520556][ T4263] usb 2-1: can't set config #0, error -71 [ 122.604302][ T4263] usb 2-1: USB disconnect, device number 3 [ 122.861347][ T4633] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 123.111173][ T4633] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.089809][ T4655] loop3: detected capacity change from 0 to 1764 [ 126.097936][ T4656] loop2: detected capacity change from 0 to 64 [ 126.164042][ T4658] loop4: detected capacity change from 0 to 256 [ 126.177861][ T4655] process 'syz.3.96' launched './file0' with NULL argv: empty string added [ 126.213223][ T4658] exfat: Deprecated parameter 'namecase' [ 126.299037][ T4658] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 126.436316][ T4669] loop3: detected capacity change from 0 to 2048 [ 126.476580][ T4673] loop0: detected capacity change from 0 to 256 [ 126.504021][ T4675] capability: warning: `syz.4.105' uses deprecated v2 capabilities in a way that may be insecure [ 126.524343][ T4673] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 126.585553][ T4676] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.650175][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.670473][ T4678] loop4: detected capacity change from 0 to 128 [ 126.726086][ T4682] loop0: detected capacity change from 0 to 64 [ 126.771593][ T4678] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 126.833941][ T4678] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.964030][ T4686] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 127.006900][ T4686] 9pnet_virtio: no channels available for device 127.0.0.1 [ 127.110024][ T1107] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.180301][ T21] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 127.202459][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.212083][ T21] usb 3-1: Product: syz [ 127.216692][ T21] usb 3-1: Manufacturer: syz [ 127.234753][ T21] usb 3-1: SerialNumber: syz [ 127.265728][ T21] usb 3-1: config 0 descriptor?? [ 127.322848][ T21] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 127.390142][ T1107] usb 2-1: Using ep0 maxpacket: 32 [ 127.506221][ T4702] netlink: 'syz.3.118': attribute type 29 has an invalid length. [ 127.514869][ T4702] netlink: 'syz.3.118': attribute type 29 has an invalid length. [ 127.524545][ T4702] netlink: 'syz.3.118': attribute type 29 has an invalid length. [ 127.533065][ T1107] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 127.540312][ T4552] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 127.552952][ T1107] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 127.562970][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.581694][ T1107] usb 2-1: config 0 descriptor?? [ 127.600201][ T4566] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.890576][ T4552] usb 5-1: not running at top speed; connect to a high speed hub [ 127.980428][ T4566] usb 1-1: config index 0 descriptor too short (expected 12336, got 82) [ 127.991468][ T4552] usb 5-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 127.991723][ T21] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 128.011151][ T21] sq905c: probe of 3-1:0.0 failed with error -71 [ 128.074176][ T4566] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 128.101300][ T21] usb 3-1: USB disconnect, device number 2 [ 128.185955][ T4552] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.222777][ T4566] usb 1-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 128.353197][ T4552] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 128.370588][ T4566] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 128.417685][ T4552] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 128.454708][ T4552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.570690][ T4566] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 128.589059][ T4566] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.626017][ T4566] usb 1-1: Product: syz [ 128.643695][ T4566] usb 1-1: Manufacturer: syz [ 128.663301][ T4566] usb 1-1: SerialNumber: syz [ 129.676392][ T4552] usb 5-1: config 0 descriptor?? [ 129.850918][ T4552] usb 5-1: Found UVC 9.00 device (046d:0825) [ 130.198827][ T4566] usb 1-1: USB disconnect, device number 2 [ 130.430622][ T4552] uvcvideo 5-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 130.489769][ T4716] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 130.490291][ T4552] uvcvideo 5-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 130.544358][ T4716] 9pnet_virtio: no channels available for device 127.0.0.1 [ 130.673849][ T1107] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 130.683066][ T1107] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 130.690591][ T1107] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 130.697979][ T1107] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 130.705475][ T1107] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 130.712902][ T1107] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x0 [ 130.732771][ T1107] magicmouse 0003:05AC:0265.0001: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 130.753360][ T1107] usb 2-1: USB disconnect, device number 4 [ 130.790479][ T4552] uvcvideo 5-1:0.1: Failed to initialize the device (-5). [ 130.897287][ T4552] usb 5-1: USB disconnect, device number 2 [ 130.902963][ T4727] binder: 4724:4727 ioctl 4018620d 0 returned -22 [ 130.921097][ T4727] binder: 4724:4727 ioctl c00c6211 0 returned -22 [ 131.062855][ T4723] fido_id[4723]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 131.118698][ T4731] loop3: detected capacity change from 0 to 1764 [ 131.281252][ T4737] loop2: detected capacity change from 0 to 32768 [ 131.358607][ T4737] XFS (loop2): Mounting V5 Filesystem [ 131.430160][ T4552] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.477420][ T4737] XFS (loop2): Starting recovery (logdev: internal) [ 132.509686][ T4737] XFS (loop2): Metadata CRC error detected at xfs_refcountbt_read_verify+0x3a/0xd0, xfs_refcountbt block 0x8 [ 132.522219][ T4737] XFS (loop2): Unmount and run xfs_repair [ 132.527959][ T4737] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 132.535447][ T4737] 00000000: 52 33 46 43 00 00 00 03 ff ff ff ff ff ff ff ff R3FC............ [ 132.544349][ T4737] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 132.553244][ T4737] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 132.562122][ T4737] 00000030: 00 00 00 00 ea d5 90 f3 00 00 00 07 00 00 00 01 ................ [ 132.571102][ T4737] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 132.579981][ T4737] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 132.588835][ T4737] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 132.601265][ T4737] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 132.613712][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.622992][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.662702][ T4737] XFS (loop2): log mount/recovery failed: error -74 [ 132.817190][ T4737] XFS (loop2): log mount failed [ 134.483447][ T4758] loop3: detected capacity change from 0 to 4096 [ 134.505735][ T4763] loop4: detected capacity change from 0 to 128 [ 134.538989][ T4758] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 134.558877][ T4765] loop0: detected capacity change from 0 to 128 [ 134.604185][ T4763] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nolazytime,errors=remount-ro,grpjquota=,acl,. Quota mode: none. [ 134.624610][ T4765] ufs: ufstype=old is supported read-only [ 134.639019][ T4763] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.641182][ T4758] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 134.691238][ T4768] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 134.703107][ T4765] ufs: ufs_fill_super(): bad magic number [ 134.754453][ T4763] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.4.138: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 134.811646][ T4763] EXT4-fs (loop4): Remounting filesystem read-only [ 134.938996][ T4779] loop3: detected capacity change from 0 to 256 [ 135.020947][ T4781] loop4: detected capacity change from 0 to 1764 [ 135.053084][ T4779] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 135.517317][ C0] Unknown status report in ack skb [ 136.322347][ T4791] loop3: detected capacity change from 0 to 1024 [ 136.331799][ T4774] loop0: detected capacity change from 0 to 32768 [ 136.391178][ T4774] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.145 (4774) [ 136.448619][ T4791] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 136.471235][ T4774] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 136.487959][ T4791] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 136.545462][ T4774] BTRFS info (device loop0): enabling ssd optimizations [ 136.552456][ T4791] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 136.583558][ T4778] loop2: detected capacity change from 0 to 40427 [ 136.584501][ T4776] loop1: detected capacity change from 0 to 32768 [ 136.616475][ T4791] EXT4-fs error (device loop3): ext4_get_journal_inode:5187: inode #17: comm syz.3.149: iget: bad i_size value: 4398046511204 [ 136.639932][ T4774] BTRFS info (device loop0): not using ssd optimizations [ 136.654722][ T4774] BTRFS info (device loop0): turning off barriers [ 136.679928][ T4774] BTRFS info (device loop0): using free space tree [ 136.695735][ T4778] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 136.708661][ T4794] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 136.717072][ T4778] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 136.717887][ T4774] BTRFS info (device loop0): has skinny extents [ 136.735813][ T4791] EXT4-fs (loop3): no journal found [ 136.763762][ T4778] F2FS-fs (loop2): build fault injection attr: rate: 2, type: 0x1ffff [ 136.790012][ T4778] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 136.801755][ T4778] F2FS-fs (loop2): invalid crc value [ 136.852353][ T4778] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.100049][ T4552] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 139.190006][ T4552] usb 4-1: Using ep0 maxpacket: 32 [ 140.010058][ T4552] usb 4-1: device descriptor read/all, error -71 [ 140.262603][ T4832] netlink: 'syz.4.158': attribute type 1 has an invalid length. [ 140.344727][ T4346] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop0 scanned by udevd (4346) [ 140.417246][ T4838] loop1: detected capacity change from 0 to 64 [ 140.445224][ T4836] loop3: detected capacity change from 0 to 1764 [ 140.499549][ T4841] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 141.340144][ T26] audit: type=1800 audit(1787593994.261:7): pid=4838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.157" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 141.386504][ T4850] loop0: detected capacity change from 0 to 2048 [ 141.654104][ T4850] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.696509][ T4854] loop3: detected capacity change from 0 to 4096 [ 141.721398][ T4828] loop2: detected capacity change from 0 to 40427 [ 141.859043][ T4828] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(3584) blocks(15872) [ 142.055560][ T4828] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 142.287302][ T4858] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.418125][ T4828] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.757694][ T4863] loop1: detected capacity change from 0 to 512 [ 142.944562][ T4863] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.122331][ T4863] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 143.360055][ T4863] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.785024][ T4863] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.164: Invalid block bitmap block 0 in block_group 0 [ 144.112536][ T4863] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 144.277523][ T4863] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.164: attempt to clear invalid blocks 983261 len 1 [ 144.497275][ T4863] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.164: Invalid inode table block 0 in block_group 0 [ 144.649953][ T4863] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 144.681151][ T4863] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 144.706572][ T4863] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.164: Invalid inode table block 0 in block_group 0 [ 144.771896][ T4863] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 144.787189][ T4863] EXT4-fs error (device loop1): ext4_truncate:4286: inode #11: comm syz.1.164: mark_inode_dirty error [ 144.800796][ T4863] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 144.815710][ T4863] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.164: Invalid inode table block 0 in block_group 0 [ 144.830124][ T4863] EXT4-fs (loop1): 1 truncate cleaned up [ 144.835911][ T4863] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 144.895162][ T4873] loop0: detected capacity change from 0 to 64 [ 145.241670][ T4877] loop4: detected capacity change from 0 to 256 [ 145.553040][ T4877] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.990642][ T4877] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.959123][ T4885] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 147.966057][ T4885] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.063051][ T4893] loop1: detected capacity change from 0 to 128 [ 148.081120][ T4885] vhci_hcd vhci_hcd.0: Device attached [ 148.087909][ T4892] loop3: detected capacity change from 0 to 256 [ 148.115230][ T4891] loop4: detected capacity change from 0 to 1764 [ 148.164667][ T4893] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 148.180151][ T4892] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 148.220382][ T4886] vhci_hcd: connection closed [ 148.230388][ T144] vhci_hcd: stop threads [ 148.263905][ T4893] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.273787][ T26] audit: type=1800 audit(1787594001.211:8): pid=4892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.175" name="file1" dev="loop3" ino=1048598 res=0 errno=0 [ 148.301570][ T144] vhci_hcd: release socket [ 148.310454][ T144] vhci_hcd: disconnect device [ 148.489708][ T4893] overlayfs: upper fs needs to support d_type. [ 148.518278][ T4228] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 148.526358][ T4228] usb 33-1: enqueue for inactive port 0 [ 148.560904][ T4893] overlayfs: upper fs does not support tmpfile. [ 149.188070][ T4228] vhci_hcd: vhci_device speed not set [ 149.345831][ T4903] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 149.374995][ T4903] 9pnet_virtio: no channels available for device 127.0.0.1 [ 149.547093][ T4881] loop2: detected capacity change from 0 to 40427 [ 149.554039][ T4581] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 149.673707][ T4881] F2FS-fs (loop2): invalid crc value [ 149.868374][ T4881] F2FS-fs (loop2): Found nat_bits in checkpoint [ 149.951040][ T4913] loop4: detected capacity change from 0 to 1024 [ 150.345911][ T4913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.670179][ T4581] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.540581][ T4581] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.550899][ T4581] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.560064][ T4581] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.571831][ T4581] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.626518][ T4923] loop4: detected capacity change from 0 to 8 [ 152.640121][ T4581] usb 4-1: string descriptor 0 read error: -71 [ 152.649177][ T4581] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.665152][ T4581] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.700057][ T4581] usb 4-1: can't set config #1, error -71 [ 152.762692][ T4581] usb 4-1: USB disconnect, device number 4 [ 152.791368][ T4923] SQUASHFS error: Failed to read block 0x2d7: -5 [ 152.812267][ T4923] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 153.082806][ T4933] loop1: detected capacity change from 0 to 1764 [ 153.225273][ T4939] loop3: detected capacity change from 0 to 1024 [ 153.311319][ T4941] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 153.347158][ T4939] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 153.392456][ T4939] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.442171][ T4941] 9pnet_virtio: no channels available for device 127.0.0.1 [ 153.516727][ T4939] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 153.532626][ T4939] System zones: 0-1, 3-36 [ 153.591669][ T4939] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 153.841532][ T4921] loop2: detected capacity change from 0 to 32768 [ 153.912808][ T4921] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.186 (4921) [ 154.247183][ T4921] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 154.273011][ T4921] BTRFS info (device loop2): using free space tree [ 154.283780][ T4921] BTRFS info (device loop2): has skinny extents [ 154.362727][ T4937] loop4: detected capacity change from 0 to 32768 [ 154.463438][ T4937] XFS (loop4): Mounting V5 Filesystem [ 154.506602][ T4921] BTRFS info (device loop2): enabling ssd optimizations [ 154.530680][ T1107] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 154.550188][ T4581] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 154.600002][ T4555] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 154.632374][ T4937] XFS (loop4): Ending clean mount [ 154.653298][ T4937] XFS (loop4): Quotacheck needed: Please wait. [ 154.824203][ T1107] usb 1-1: Using ep0 maxpacket: 8 [ 154.920179][ T4555] usb 4-1: not running at top speed; connect to a high speed hub [ 154.955732][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.967000][ T4581] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.987369][ T4581] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.006020][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.020414][ T4555] usb 4-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 155.039836][ T4581] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.084399][ T1107] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.131150][ T4581] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.157809][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.200349][ T4581] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.256590][ T1107] usb 1-1: config 0 descriptor?? [ 155.440748][ T4581] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.459300][ T4581] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.491771][ T4581] usb 2-1: Product: syz [ 155.508385][ T4581] usb 2-1: Manufacturer: syz [ 155.644097][ T4581] cdc_wdm 2-1:1.0: skipping garbage [ 155.674011][ T4581] cdc_wdm 2-1:1.0: skipping garbage [ 155.717179][ T1107] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 155.745341][ T4581] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 155.768124][ T4581] cdc_wdm 2-1:1.0: Unknown control protocol [ 155.964640][ T1107] usb 1-1: USB disconnect, device number 3 [ 156.571201][ T4581] usb 2-1: USB disconnect, device number 5 [ 157.381781][ T4555] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.959922][ T4555] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 157.973013][ T4555] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 157.982309][ T4555] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.001470][ T4555] usb 4-1: config 0 descriptor?? [ 158.012678][ T4937] XFS (loop4): Quotacheck: Done. [ 158.020087][ T4555] usb 4-1: can't set config #0, error -71 [ 158.034371][ T4555] usb 4-1: USB disconnect, device number 5 [ 158.072121][ T4998] loop3: detected capacity change from 0 to 8 [ 158.085763][ T4993] loop0: detected capacity change from 0 to 1024 [ 158.158426][ T4998] SQUASHFS error: Failed to read block 0x2d7: -5 [ 158.176122][ T4187] XFS (loop4): Unmounting Filesystem [ 158.182972][ T4998] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 158.216351][ T4993] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.269745][ T5002] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 158.302773][ T5002] 9pnet_virtio: no channels available for device 127.0.0.1 [ 158.469098][ T5008] loop2: detected capacity change from 0 to 1764 [ 158.580060][ T1107] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 158.594735][ T5012] loop3: detected capacity change from 0 to 512 [ 158.633815][ T5012] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 158.861579][ T5012] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 159.020313][ T1107] usb 2-1: config index 0 descriptor too short (expected 12336, got 82) [ 159.119976][ T5012] EXT4-fs (loop3): orphan cleanup on readonly fs [ 159.137370][ T1107] usb 2-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 159.293363][ T5017] netlink: 'syz.4.205': attribute type 3 has an invalid length. [ 159.302000][ T5012] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 159.316778][ T1107] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 159.352352][ T1107] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 159.380090][ T5012] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 159.424571][ T5012] EXT4-fs (loop3): 1 orphan inode deleted [ 159.477203][ T5012] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 159.580110][ T1107] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 159.593998][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.643385][ T1107] usb 2-1: Product: syz [ 159.647631][ T1107] usb 2-1: Manufacturer: syz [ 159.660318][ T1107] usb 2-1: SerialNumber: syz [ 160.115149][ T5032] loop3: detected capacity change from 0 to 256 [ 160.160536][ T5010] loop0: detected capacity change from 0 to 32768 [ 160.276895][ T5032] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.319544][ T5010] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.210 (5010) [ 160.458104][ T5032] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 160.802736][ T5032] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 161.171528][ T4555] usb 2-1: USB disconnect, device number 6 [ 162.164796][ T5010] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 162.247699][ T5010] BTRFS info (device loop0): using free space tree [ 162.411474][ T5010] BTRFS info (device loop0): has skinny extents [ 162.855127][ T5040] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 162.886828][ T5040] 9pnet_virtio: no channels available for device 127.0.0.1 [ 162.936045][ T5034] loop2: detected capacity change from 0 to 4096 [ 163.070763][ T5034] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 163.079286][ T5010] BTRFS error (device loop0): open_ctree failed: -12 [ 163.097181][ T5057] loop4: detected capacity change from 0 to 1764 [ 163.375982][ T26] audit: type=1800 audit(1787594016.311:9): pid=5034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.218" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 166.482990][ T5072] loop2: detected capacity change from 0 to 512 [ 166.566171][ T5074] loop3: detected capacity change from 0 to 4096 [ 166.595103][ T5072] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 166.657631][ T5072] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 166.681231][ T5084] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.701142][ T5072] EXT4-fs (loop2): orphan cleanup on readonly fs [ 166.720619][ T5074] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 166.740712][ T5072] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 166.841562][ T5072] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 166.903486][ T5072] EXT4-fs (loop2): 1 orphan inode deleted [ 166.947215][ T5072] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 167.248015][ T5100] loop1: detected capacity change from 0 to 512 [ 167.386951][ T5105] loop2: detected capacity change from 0 to 1764 [ 167.550385][ T5100] EXT4-fs (loop1): Test dummy encryption mode enabled [ 167.629518][ T5100] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.237: inode has both inline data and extents flags [ 167.816322][ T5082] loop4: detected capacity change from 0 to 32768 [ 167.865532][ T5100] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.237: couldn't read orphan inode 15 (err -117) [ 167.986146][ T5100] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 168.564875][ T5121] jffs2: notice: (5121) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 168.602885][ T5100] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 168.675185][ T5116] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 168.827778][ T5089] loop0: detected capacity change from 0 to 40427 [ 168.835757][ T5101] loop3: detected capacity change from 0 to 32768 [ 168.878475][ T5089] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 168.888546][ T5089] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 168.926400][ T5101] (syz.3.238,5101,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 168.964011][ T5089] F2FS-fs (loop0): invalid crc value [ 169.008041][ T5089] F2FS-fs (loop0): Found nat_bits in checkpoint [ 169.047982][ T5101] (syz.3.238,5101,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 169.115035][ T5101] (syz.3.238,5101,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8f82798b. Applying ECC. [ 169.164201][ T5101] (syz.3.238,5101,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x656d756e, computed 0x9ff0a2a3 [ 169.188066][ T5089] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 169.197831][ T5101] (syz.3.238,5101,1):ocfs2_validate_dir_block:452 ERROR: Checksum failed for dinode 288 [ 169.213959][ T5089] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 169.223699][ T5101] (syz.3.238,5101,1):ocfs2_read_virt_blocks:1021 ERROR: status = -5 [ 169.236379][ T5101] (syz.3.238,5101,1):ocfs2_read_dir_block:511 ERROR: status = -5 [ 169.246606][ T5101] (syz.3.238,5101,1):ocfs2_find_entry_el:728 ERROR: reading directory 18, offset 0 [ 169.276295][ T5101] (syz.3.238,5101,1):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 169.326758][ T5142] loop4: detected capacity change from 0 to 4096 [ 169.342468][ T5101] (syz.3.238,5101,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 169.342518][ T5101] (syz.3.238,5101,1):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 169.382823][ T5142] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 169.404331][ T5089] attempt to access beyond end of device [ 169.404331][ T5089] loop0: rw=2051, want=45064, limit=40427 [ 169.430252][ T5089] attempt to access beyond end of device [ 169.430252][ T5089] loop0: rw=2051, want=65536, limit=40427 [ 169.471726][ T5089] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 169.471772][ T5089] F2FS-fs (loop0): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 169.488260][ T5142] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 169.520742][ T5101] (syz.3.238,5101,1):ocfs2_initialize_super:2279 ERROR: status = -22 [ 169.530828][ T5101] (syz.3.238,5101,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 169.601711][ T5142] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 169.623600][ T5142] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 169.717223][ T5142] ntfs: volume version 3.1. [ 169.875530][ T4228] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 169.943112][ T5140] loop1: detected capacity change from 0 to 32768 [ 169.982624][ T4187] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 170.122185][ T5140] XFS (loop1): Mounting V5 Filesystem [ 170.196514][ T5159] loop4: detected capacity change from 0 to 512 [ 170.234419][ T5159] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 170.260521][ T4228] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.272673][ T5159] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 170.305393][ T5159] EXT4-fs (loop4): orphan cleanup on readonly fs [ 170.312918][ T5159] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 170.328053][ T5159] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 170.341003][ T5140] XFS (loop1): Ending clean mount [ 170.350289][ T5159] EXT4-fs (loop4): 1 orphan inode deleted [ 170.356062][ T5159] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 170.415371][ T4185] XFS (loop1): Unmounting Filesystem [ 170.430171][ T4228] usb 3-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 170.439272][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.447419][ T4552] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 170.625197][ T4228] usb 3-1: Product: syz [ 170.630061][ T4228] usb 3-1: Manufacturer: syz [ 170.634697][ T4228] usb 3-1: SerialNumber: syz [ 170.693906][ T4228] kl5kusb105 3-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 171.373462][ T4228] usb 3-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 171.485946][ T5176] netlink: 48 bytes leftover after parsing attributes in process `syz.4.256'. [ 171.527214][ T5177] set_capacity_and_notify: 1 callbacks suppressed [ 171.527229][ T5177] loop0: detected capacity change from 0 to 4096 [ 171.770306][ T5177] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 171.780360][ T4552] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 171.798328][ T5185] loop1: detected capacity change from 0 to 1024 [ 171.805059][ T4552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.814576][ T4552] usb 4-1: Product: syz [ 171.824355][ T4552] usb 4-1: Manufacturer: syz [ 171.832005][ T4552] usb 4-1: SerialNumber: syz [ 171.861367][ T4552] usb 4-1: config 0 descriptor?? [ 171.889802][ T5185] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,block_validity,norecovery,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,grpjquota=,bsddf,norecovery,,errors=continue. Quota mode: none. [ 171.905557][ T4552] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 006 [ 171.936543][ T26] audit: type=1800 audit(1787594024.871:10): pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.255" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 172.024665][ T4186] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 172.034155][ T4186] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 172.043858][ T4186] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 172.120235][ T4552] (null): failure setting delay to 10us [ 172.129840][ T4552] i2c-tiny-usb: probe of 4-1:0.0 failed with error -5 [ 172.148370][ T4552] usb 4-1: USB disconnect, device number 6 [ 172.404481][ T5199] loop4: detected capacity change from 0 to 4096 [ 172.467081][ T5199] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 172.521319][ T26] audit: type=1800 audit(1787594025.451:11): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.261" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 172.620169][ T4228] usb 3-1: USB disconnect, device number 3 [ 172.658752][ T4228] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 172.698669][ T4228] kl5kusb105 3-1:1.0: device disconnected [ 172.955895][ T5218] loop4: detected capacity change from 0 to 64 [ 173.063335][ T5207] loop1: detected capacity change from 0 to 32768 [ 173.070318][ T4228] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 173.084122][ T5207] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.265 (5207) [ 173.176712][ T5207] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 173.207050][ T5207] BTRFS info (device loop1): force clearing of disk cache [ 173.220048][ T5207] BTRFS info (device loop1): metadata ratio 0 [ 173.226268][ T5207] BTRFS info (device loop1): enabling ssd optimizations [ 173.239956][ T5207] BTRFS info (device loop1): using spread ssd allocation scheme [ 173.249269][ T5207] BTRFS info (device loop1): using free space tree [ 173.264252][ T5207] BTRFS info (device loop1): has skinny extents [ 173.280018][ T1107] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 173.307199][ T5207] BTRFS info (device loop1): clearing free space tree [ 173.315030][ T5207] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 173.325333][ T5207] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 173.335774][ T4228] usb 3-1: Using ep0 maxpacket: 32 [ 173.358161][ T5207] BTRFS info (device loop1): creating free space tree [ 173.368797][ T5207] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 173.382409][ T5207] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 173.460047][ T4228] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 173.468186][ T4228] usb 3-1: config 0 has no interface number 0 [ 173.475160][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 173.490021][ T4228] usb 3-1: config 0 interface 12 has no altsetting 0 [ 173.490143][ T4986] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 173.524815][ T4240] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 173.585444][ T1107] usb 4-1: Using ep0 maxpacket: 8 [ 173.653997][ T4228] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 173.664060][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.676190][ T4228] usb 3-1: Product: syz [ 173.680930][ T4228] usb 3-1: Manufacturer: syz [ 173.685563][ T4228] usb 3-1: SerialNumber: syz [ 173.702561][ T4228] usb 3-1: config 0 descriptor?? [ 173.733382][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 173.760043][ T4986] usb 5-1: Using ep0 maxpacket: 16 [ 173.850355][ T21] usb 1-1: config index 0 descriptor too short (expected 27632, got 27) [ 173.858756][ T21] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 173.870366][ T4986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.885863][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 173.890042][ T4986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.900190][ T21] usb 1-1: config 1 has no interface number 0 [ 173.906577][ T1107] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 173.930044][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.944438][ T21] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.955652][ T4986] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 173.957987][ T21] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 173.970488][ T1107] usb 4-1: Product: syz [ 173.991701][ T21] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 173.997136][ T1107] usb 4-1: Manufacturer: syz [ 174.005462][ T4986] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 174.014817][ T1107] usb 4-1: SerialNumber: syz [ 174.020278][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.023527][ T1107] usb 4-1: config 0 descriptor?? [ 174.033629][ T4986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.045176][ T4986] usb 5-1: config 0 descriptor?? [ 174.083349][ T21] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 174.091933][ T1107] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 174.109137][ T1107] pctv452e: pctv452e_power_ctrl: 1 [ 174.109137][ T1107] [ 174.116842][ T1107] usb 4-1: selecting invalid altsetting 3 [ 174.129266][ T1107] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 174.129266][ T1107] [ 174.140395][ T1107] dvb-usb: bulk message failed: -22 (5/0) [ 174.159801][ T1107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 174.196123][ T1107] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 174.206355][ T1107] usb 4-1: media controller created [ 174.218541][ T1107] dvb-usb: bulk message failed: -22 (8/0) [ 174.224951][ T1107] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 174.239473][ T1107] dvb-usb: MAC address reading failed. [ 174.259048][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.301155][ T21] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 174.318539][ T5219] pctv452e: I2C error -22; AA 02 00 00 EA -> 00 00 00 00 00 00 00 [ 174.324578][ T1107] DVB: Unable to find symbol stb0899_attach() [ 174.340186][ T1107] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 174.353455][ T5244] loop1: detected capacity change from 0 to 32768 [ 174.407789][ T5244] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.274 (5244) [ 174.441875][ T5244] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 174.454321][ T5244] BTRFS info (device loop1): using free space tree [ 174.461334][ T5244] BTRFS info (device loop1): has skinny extents [ 174.470171][ T1107] rc_core: IR keymap rc-tt-1500 not found [ 174.476777][ T1107] Registered IR keymap rc-empty [ 174.484038][ T1107] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 174.495776][ T1107] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input5 [ 174.514736][ T1107] dvb-usb: schedule remote query interval to 100 msecs. [ 174.521982][ T1107] pctv452e: pctv452e_power_ctrl: 0 [ 174.521982][ T1107] [ 174.529308][ T1107] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 174.541734][ T4986] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 174.552457][ T4986] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 174.575591][ T4986] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 174.587467][ T4986] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 174.595464][ T4986] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 174.602932][ T4986] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 174.610841][ T4986] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 174.618931][ T4986] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 174.626757][ T4986] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 174.638818][ T4986] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 174.646591][ T4986] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 174.654218][ T4986] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 174.661757][ T4986] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 174.670157][ T4986] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 174.687481][ T1107] usb 4-1: USB disconnect, device number 7 [ 174.697181][ T5244] BTRFS info (device loop1): enabling ssd optimizations [ 174.706585][ T4983] dvb-usb: bulk message failed: -22 (4/0) [ 174.714160][ T4983] dvb-usb: error -22 while querying for an remote control event. [ 174.740577][ T4986] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 174.781965][ T4986] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 174.813660][ T4986] microsoft 0003:045E:07DA.0002: no inputs found [ 174.822000][ T4986] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 174.832834][ T1107] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 174.851006][ T4228] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 174.870269][ T4228] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 174.877695][ T4228] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 174.968412][ T4228] f81534: probe of 3-1:0.12 failed with error -71 [ 174.994611][ T21] usb 5-1: USB disconnect, device number 4 [ 175.024719][ T4228] usb 3-1: USB disconnect, device number 4 [ 175.181905][ T5268] loop3: detected capacity change from 0 to 256 [ 175.314924][ T4232] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 175.659963][ T4583] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 175.940117][ T4583] usb 2-1: Using ep0 maxpacket: 8 [ 176.007370][ T4231] usb 1-1: USB disconnect, device number 4 [ 176.090593][ T4583] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 176.141693][ T4231] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 176.182275][ T4583] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.376173][ T4583] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.566634][ T4583] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 176.739171][ T4583] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 176.898941][ T4583] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 177.041828][ T4583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.222947][ T4583] usb 2-1: config 0 descriptor?? [ 177.470199][ T4581] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 177.517372][ T4199] Bluetooth: hci5: urb ffff88802a621300 submission failed (90) [ 177.633529][ T4583] usb 2-1: USB disconnect, device number 7 [ 177.890374][ T4581] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 177.921156][ T4581] usb 3-1: config 0 has no interface number 0 [ 177.993225][ T4581] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 178.316185][ T4581] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 178.403035][ T4581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.508045][ T4581] usb 3-1: Product: syz [ 178.543551][ T4581] usb 3-1: Manufacturer: syz [ 178.548889][ T4581] usb 3-1: SerialNumber: syz [ 178.568742][ T4581] usb 3-1: config 0 descriptor?? [ 178.623907][ T5294] loop1: detected capacity change from 0 to 256 [ 178.648485][ T4581] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 178.699505][ T5296] loop3: detected capacity change from 0 to 1764 [ 178.710634][ T5294] exfat: Deprecated parameter 'namecase' [ 178.731495][ T5294] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 178.819463][ T5300] loop4: detected capacity change from 0 to 1024 [ 179.027974][ T5292] loop0: detected capacity change from 0 to 40427 [ 179.040080][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 179.065172][ T4581] usb 3-1: USB disconnect, device number 5 [ 179.089694][ T4581] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 179.146022][ T5292] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 179.171492][ T5292] F2FS-fs (loop0): invalid crc value [ 179.190936][ T5292] F2FS-fs (loop0): Found nat_bits in checkpoint [ 179.450240][ T4231] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 179.733790][ T5292] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 179.888590][ T5292] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 179.900232][ T4231] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 179.916878][ T4231] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.926330][ T5310] netlink: 'syz.4.291': attribute type 29 has an invalid length. [ 179.970177][ T5310] netlink: 'syz.4.291': attribute type 29 has an invalid length. [ 179.984950][ T4231] usb 2-1: config 0 has no interface number 0 [ 180.000145][ T4231] usb 2-1: config 0 interface 205 has no altsetting 0 [ 180.221011][ T4231] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 180.239301][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.284353][ T4231] usb 2-1: Product: syz [ 180.288587][ T4231] usb 2-1: Manufacturer: syz [ 180.301083][ T4231] usb 2-1: SerialNumber: syz [ 180.326872][ T4231] usb 2-1: config 0 descriptor?? [ 182.375307][ T4231] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 183.304065][ T4231] dvb-usb: bulk message failed: -22 (3/0) [ 183.361148][ T4231] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 183.390167][ T4231] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 183.414979][ T4231] usb 2-1: media controller created [ 183.431339][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.457934][ T4231] dvb-usb: bulk message failed: -22 (6/0) [ 184.281010][ T5345] loop4: detected capacity change from 0 to 1764 [ 185.592600][ T4231] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 186.473763][ T4581] Bluetooth: hci5: command 0x1003 tx timeout [ 186.480029][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 186.521500][ T4231] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 186.534203][ T4231] dvb-usb: schedule remote query interval to 150 msecs. [ 186.541375][ T4231] dvb-usb: bulk message failed: -22 (3/0) [ 186.580180][ T4231] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 186.629666][ T4231] usb 2-1: USB disconnect, device number 8 [ 186.700958][ T4231] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 186.844091][ T5369] loop2: detected capacity change from 0 to 64 [ 189.689775][ T4581] Bluetooth: hci5: command 0x1001 tx timeout [ 189.696324][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 189.825186][ T5383] loop2: detected capacity change from 0 to 1764 [ 189.891526][ T5387] loop4: detected capacity change from 0 to 1764 [ 190.745984][ T4231] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 191.061491][ T4555] Bluetooth: hci0: command 0x0406 tx timeout [ 191.186293][ T4555] Bluetooth: hci3: command 0x0406 tx timeout [ 191.280873][ T4555] Bluetooth: hci4: command 0x0406 tx timeout [ 191.349494][ T4555] Bluetooth: hci1: command 0x0406 tx timeout [ 193.057984][ T4581] Bluetooth: hci2: command 0x0406 tx timeout [ 193.070028][ T4581] Bluetooth: hci5: command 0x1009 tx timeout [ 193.259279][ T5409] loop2: detected capacity change from 0 to 512 [ 193.327076][ T5409] EXT4-fs (loop2): Test dummy encryption mode enabled [ 193.339380][ T5411] loop4: detected capacity change from 0 to 2048 [ 193.378734][ T5409] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.329: inode has both inline data and extents flags [ 193.394958][ T5409] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.329: couldn't read orphan inode 15 (err -117) [ 193.442121][ T5411] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 193.499254][ T5409] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 193.530900][ T5411] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.569966][ T4231] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 193.794104][ T5409] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 193.848325][ T5417] loop0: detected capacity change from 0 to 32768 [ 193.940318][ T4231] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 193.948687][ T4231] usb 2-1: config 127 has no interface number 0 [ 193.960558][ T4231] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 194.003108][ T5417] (syz.0.332,5417,1):ocfs2_verify_heartbeat:836 ERROR: Heartbeat has to be started to mount a read-write clustered device. [ 194.016951][ T5427] loop2: detected capacity change from 0 to 1764 [ 194.042792][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.063345][ T4986] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 194.073411][ T5417] (syz.0.332,5417,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 194.291794][ T4231] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 194.301056][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.013395][ T4231] usb 2-1: Product: syz [ 195.017668][ T4231] usb 2-1: Manufacturer: syz [ 195.022390][ T4231] usb 2-1: SerialNumber: syz [ 195.041852][ T5398] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 195.110350][ T4232] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 195.130693][ T4986] usb 5-1: Using ep0 maxpacket: 16 [ 195.400114][ T4232] usb 1-1: Using ep0 maxpacket: 32 [ 195.540653][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.627278][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.762367][ T4232] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 195.895618][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.038086][ T4232] usb 1-1: config 0 descriptor?? [ 196.173671][ T4232] hub 1-1:0.0: USB hub found [ 196.251470][ T4231] asix: probe of 2-1:127.57 failed with error -71 [ 196.317724][ T5442] loop1: detected capacity change from 0 to 1024 [ 196.420710][ T4232] hub 1-1:0.0: 5 ports detected [ 196.450400][ T4232] hub 1-1:0.0: insufficient power available to use all downstream ports [ 196.472138][ T5442] EXT4-fs (loop1): Ignoring removed bh option [ 196.634139][ T4232] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 196.654551][ T5442] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 196.703222][ T4232] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 196.770062][ T4986] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 196.980788][ T4232] usbhid 1-1:0.0: can't add hid device: -71 [ 196.992630][ T4232] usbhid: probe of 1-1:0.0 failed with error -71 [ 197.262986][ T4232] usb 1-1: USB disconnect, device number 5 [ 197.854612][ T5442] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 198.093489][ T4231] usb 2-1: USB disconnect, device number 10 [ 198.099702][ T4986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.107901][ T4986] usb 5-1: Product: syz [ 198.112238][ T4986] usb 5-1: Manufacturer: syz [ 198.116934][ T4986] usb 5-1: SerialNumber: syz [ 198.201439][ T4986] usb 5-1: config 0 descriptor?? [ 198.220059][ T4986] usb 5-1: can't set config #0, error -71 [ 198.247348][ T4986] usb 5-1: USB disconnect, device number 5 [ 198.274175][ T5450] loop0: detected capacity change from 0 to 128 [ 198.644895][ T5458] loop3: detected capacity change from 0 to 4096 [ 198.677350][ T5460] 9pnet_virtio: no channels available for device 127.0.0.1 [ 198.692182][ T5448] loop4: detected capacity change from 0 to 32768 [ 198.696496][ T5462] loop1: detected capacity change from 0 to 512 [ 198.765459][ T5463] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.828993][ T5448] JBD2: Ignoring recovery information on journal [ 198.878837][ T5462] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 198.903514][ T5469] loop0: detected capacity change from 0 to 1764 [ 198.969229][ T5462] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.185934][ T5448] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 199.257854][ T1276] (kworker/u4:3,1276,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 199.593417][ T5454] loop2: detected capacity change from 0 to 32768 [ 199.763998][ T5454] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.343 (5454) [ 199.925120][ T5454] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 199.956984][ T5454] BTRFS info (device loop2): force clearing of disk cache [ 199.964346][ T5454] BTRFS info (device loop2): metadata ratio 0 [ 199.976587][ T5454] BTRFS info (device loop2): enabling ssd optimizations [ 199.984397][ T5454] BTRFS info (device loop2): using spread ssd allocation scheme [ 199.997894][ T5454] BTRFS info (device loop2): using free space tree [ 200.004615][ T5454] BTRFS info (device loop2): has skinny extents [ 200.130569][ T5475] (syz.4.340,5475,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 200.220235][ T4986] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 200.255892][ T5475] (syz.4.340,5475,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 200.447171][ T5454] BTRFS info (device loop2): clearing free space tree [ 200.495399][ T5475] (syz.4.340,5475,0):__ocfs2_prepare_orphan_dir:2168 ERROR: status = -2 [ 200.509058][ T5454] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 200.579469][ T5475] (syz.4.340,5475,0):ocfs2_prepare_orphan_dir:2210 ERROR: status = -2 [ 200.608543][ T5454] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 200.630748][ T4986] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 200.664317][ T4986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.729526][ T5448] syz.4.340 (5448) used greatest stack depth: 18496 bytes left [ 200.852083][ T4986] usb 2-1: config 0 descriptor?? [ 200.875024][ T5475] (syz.4.340,5475,0):ocfs2_prepare_orphan_dir:2226 ERROR: status = -2 [ 201.017347][ T4986] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 201.026865][ T5475] (syz.4.340,5475,0):ocfs2_unlink:964 ERROR: status = -2 [ 201.071687][ T5454] BTRFS info (device loop2): creating free space tree [ 201.238218][ T5454] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 201.357842][ T5454] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 201.420640][ T4986] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 201.860164][ T4986] gspca_cpia1: usb_control_msg 02, error -71 [ 201.868710][ T4986] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 202.067695][ T4986] usb 2-1: USB disconnect, device number 11 [ 202.512392][ T4187] ocfs2: Unmounting device (7,4) on (node local) [ 206.006789][ T5507] loop4: detected capacity change from 0 to 4096 [ 206.077880][ T5507] EXT4-fs (loop4): Test dummy encryption mode enabled [ 206.109243][ T5507] EXT4-fs (loop4): Test dummy encryption mode enabled [ 206.169291][ T5507] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 206.198749][ T5519] loop2: detected capacity change from 0 to 1024 [ 206.382508][ T4987] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 206.540035][ T21] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 206.700631][ T5532] loop1: detected capacity change from 0 to 64 [ 206.722833][ T5534] loop2: detected capacity change from 0 to 512 [ 206.823795][ T5534] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 206.840451][ T4987] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 206.849540][ T4987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.870457][ T5534] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.948344][ T4987] usb 4-1: config 0 descriptor?? [ 206.971052][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.981646][ T21] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 206.999051][ T21] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 207.014318][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.027986][ T21] usb 1-1: config 0 descriptor?? [ 207.041285][ T4987] cp210x 4-1:0.0: cp210x converter detected [ 207.082105][ T21] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 207.108833][ T21] dvb-usb: bulk message failed: -22 (3/0) [ 207.152425][ T21] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 207.170992][ T5543] jffs2: notice: (5543) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 207.210279][ T21] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 207.219471][ T21] usb 1-1: media controller created [ 207.228247][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.248197][ T21] dvb-usb: bulk message failed: -22 (6/0) [ 207.254318][ T21] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 207.311591][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 207.328936][ T21] dvb-usb: schedule remote query interval to 150 msecs. [ 207.337949][ T21] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 207.378216][ T21] usb 1-1: USB disconnect, device number 6 [ 207.471220][ T4987] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 207.498222][ T21] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 207.534367][ T4987] usb 4-1: cp210x converter now attached to ttyUSB0 [ 207.589247][ T5555] loop2: detected capacity change from 0 to 4096 [ 207.697405][ T5555] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 207.757122][ T5555] EXT4-fs (loop2): Test dummy encryption mode enabled [ 208.053684][ T5555] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 208.396938][ T4987] usb 4-1: USB disconnect, device number 8 [ 210.247353][ T5565] device bond_slave_0 entered promiscuous mode [ 210.254150][ T5565] device bond_slave_1 entered promiscuous mode [ 210.497249][ T5555] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 210.506543][ T4987] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 210.652677][ T4987] cp210x 4-1:0.0: device disconnected [ 210.668116][ T5565] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 210.710152][ T5565] device bond_slave_0 left promiscuous mode [ 210.716165][ T5565] device bond_slave_1 left promiscuous mode [ 210.844172][ T5573] loop1: detected capacity change from 0 to 2048 [ 210.935652][ T5573] loop1: p3 < > p4 < > [ 210.947196][ T5573] loop1: partition table partially beyond EOD, truncated [ 210.982469][ T5573] loop1: p3 start 4284289 is beyond EOD, truncated [ 211.170924][ T26] audit: type=1326 audit(1787594064.101:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.383" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc690660d9 code=0x7ffc0000 [ 211.208296][ T4346] udevd[4346]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 211.245640][ T5590] device syzkaller1 entered promiscuous mode [ 211.257769][ T26] audit: type=1326 audit(1787594064.111:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.383" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc690660d9 code=0x7ffc0000 [ 211.291319][ T26] audit: type=1326 audit(1787594064.131:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.383" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc690660d9 code=0x7ffc0000 [ 211.355049][ T26] audit: type=1326 audit(1787594064.131:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.383" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efc690660d9 code=0x7ffc0000 [ 211.384087][ T26] audit: type=1326 audit(1787594064.131:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.383" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc690660d9 code=0x7ffc0000 [ 211.409258][ T5510] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 211.417280][ T26] audit: type=1326 audit(1787594064.131:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.383" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc6902690e code=0x7ffc0000 [ 211.445963][ T26] audit: type=1326 audit(1787594064.131:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.383" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc690660d9 code=0x7ffc0000 [ 211.470605][ T4983] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 211.478567][ T26] audit: type=1326 audit(1787594064.141:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.383" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc6902690e code=0x7ffc0000 [ 211.505608][ T26] audit: type=1326 audit(1787594064.141:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.383" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc6902690e code=0x7ffc0000 [ 211.514552][ T5593] loop0: detected capacity change from 0 to 1764 [ 211.532581][ T26] audit: type=1326 audit(1787594064.141:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.383" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc6902690e code=0x7ffc0000 [ 211.990707][ T5510] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 212.030578][ T5510] usb 3-1: config 0 has no interface number 0 [ 212.050278][ T4983] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 212.110709][ T4983] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 212.128464][ T5510] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 212.239209][ T4983] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 212.265845][ T5510] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 212.372876][ T4983] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 212.406709][ T5510] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 212.631339][ T4983] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 212.683630][ T4983] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 212.730794][ T5510] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 212.768525][ T5510] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 212.798016][ T4983] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 212.858999][ T5510] usb 3-1: Product: syz [ 212.898242][ T4983] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 212.917060][ T5510] usb 3-1: Manufacturer: syz [ 212.963262][ T5510] usb 3-1: SerialNumber: syz [ 213.078173][ T5510] usb 3-1: config 0 descriptor?? [ 213.231068][ T5510] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 213.243308][ T4983] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 213.293234][ T4983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.399052][ T4983] usb 2-1: Product: syz [ 213.421308][ T5510] xpad: probe of 3-1:0.237 failed with error -5 [ 213.498039][ T4983] usb 2-1: Manufacturer: syz [ 213.559662][ T4983] usb 2-1: SerialNumber: syz [ 213.649594][ T5510] usb 3-1: USB disconnect, device number 6 [ 213.858471][ T4983] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 214.192081][ T4983] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 214.342227][ T4983] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 214.508360][ T4983] usb 2-1: USB disconnect, device number 12 [ 214.866215][ T4983] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 214.942331][ T4983] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 214.990881][ T4983] ti_usb_3410_5052 2-1:2.0: device disconnected [ 215.668277][ T5609] loop2: detected capacity change from 0 to 32768 [ 215.755121][ T5613] loop3: detected capacity change from 0 to 32768 [ 215.783060][ T5609] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 215.880051][ T5613] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 216.005223][ T5615] loop1: detected capacity change from 0 to 40427 [ 216.017525][ T5613] JBD2: Ignoring recovery information on journal [ 216.067851][ T5615] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 216.097195][ T5615] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 216.169084][ T5615] F2FS-fs (loop1): Found nat_bits in checkpoint [ 216.213875][ T5613] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 216.265947][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 216.420924][ T26] kauditd_printk_skb: 219 callbacks suppressed [ 216.420940][ T26] audit: type=1800 audit(1787594069.361:241): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.394" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 216.448621][ T5615] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 216.479908][ T5615] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 216.557931][ T4195] ocfs2: Unmounting device (7,3) on (node local) [ 216.633017][ T5619] loop4: detected capacity change from 0 to 40427 [ 216.737124][ T5619] F2FS-fs (loop4): invalid crc value [ 216.784770][ T5619] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 217.102807][ T5619] F2FS-fs (loop4): Start checkpoint disabled! [ 217.123500][ T5619] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e7 [ 217.363051][ T5643] loop3: detected capacity change from 0 to 4096 [ 218.084111][ T5628] loop0: detected capacity change from 0 to 32768 [ 218.110511][ T5649] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.483920][ T1462] attempt to access beyond end of device [ 218.483920][ T1462] loop4: rw=2049, want=45104, limit=40427 [ 218.668537][ T5628] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 218.952593][ T5643] NILFS (loop3): error -2 reading inode: ino=835371204608 [ 219.710727][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 220.227322][ T5653] loop0: detected capacity change from 0 to 256 [ 220.329941][ T5653] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.380795][ T5653] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 220.462029][ T5653] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 220.667557][ T5665] loop3: detected capacity change from 0 to 4096 [ 220.680184][ T4983] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 220.703886][ T5670] device syzkaller1 entered promiscuous mode [ 220.731449][ T5665] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 220.763562][ T5665] EXT4-fs (loop3): Test dummy encryption mode enabled [ 220.874487][ T5665] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 220.960014][ T4983] usb 2-1: Using ep0 maxpacket: 8 [ 221.012949][ T5679] Illegal XDP return value 5, expect packet loss! [ 221.100808][ T4983] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 221.122407][ T4983] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 221.147740][ T4983] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.162791][ T5510] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 221.186245][ T4983] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.219460][ T4983] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.237923][ T5665] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 221.256078][ T4983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.430992][ T5510] usb 1-1: Using ep0 maxpacket: 8 [ 221.487919][ T5697] loop3: detected capacity change from 0 to 1764 [ 221.540193][ T4983] usb 2-1: GET_CAPABILITIES returned 0 [ 221.545980][ T4983] usbtmc 2-1:16.0: can't read capabilities [ 221.716566][ T5510] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 221.725312][ T5510] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.738701][ T5510] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 221.749343][ T5510] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.767110][ T5510] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.789714][ T5510] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 222.311340][ T4199] block nbd2: Receive control failed (result -32) [ 222.423849][ T5695] block nbd2: shutting down sockets [ 222.497528][ T5510] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.510221][ T4983] usb 2-1: USB disconnect, device number 13 [ 222.719637][ T5720] loop3: detected capacity change from 0 to 2048 [ 222.767733][ T5720] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.840070][ T4189] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 223.068798][ T5729] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 223.084215][ T5729] 9pnet_virtio: no channels available for device 127.0.0.1 [ 223.220159][ T4189] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.231543][ T4189] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.244970][ T4189] usb 3-1: config 0 interface 0 has no altsetting 0 [ 223.251939][ T4189] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 223.261413][ T4189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.276287][ T4189] usb 3-1: config 0 descriptor?? [ 223.310172][ T5510] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 223.378717][ T5736] loop1: detected capacity change from 0 to 1764 [ 223.400425][ T5735] usbtmc 1-1:16.0: simple usb_control_msg failed -32 [ 223.409797][ T4987] usb 1-1: USB disconnect, device number 7 [ 223.432659][ T4983] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 224.334948][ T26] audit: type=1800 audit(1787594077.241:242): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.438" name="control" dev="configfs" ino=37391 res=0 errno=0 [ 224.404455][ T5743] loop0: detected capacity change from 0 to 512 [ 224.455494][ T5743] EXT4-fs (loop0): Test dummy encryption mode enabled [ 224.463137][ T5743] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 224.498224][ T5743] EXT4-fs (loop0): 1 truncate cleaned up [ 224.504326][ T5743] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,test_dummy_encryption=v1,errors=remount-ro,nogrpid,. Quota mode: none. [ 224.513136][ T5510] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 224.536907][ T5510] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.555212][ T5510] usb 4-1: config 0 descriptor?? [ 224.560311][ T4983] usb 5-1: Using ep0 maxpacket: 8 [ 224.612345][ T5510] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 224.760639][ T4189] sony 0003:054C:0268.0003: can't set operational mode: step 2 [ 224.768272][ T4189] sony 0003:054C:0268.0003: Failed to set controller into operational mode [ 224.803759][ T4189] sony 0003:054C:0268.0003: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 224.816803][ T4189] sony 0003:054C:0268.0003: failed to claim input [ 224.840289][ T5510] gp8psk: usb in 128 operation failed. [ 224.896430][ T4189] usb 3-1: USB disconnect, device number 7 [ 224.902567][ T4983] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 224.923511][ T4983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.943253][ T4983] usb 5-1: Product: syz [ 224.947468][ T4983] usb 5-1: Manufacturer: syz [ 224.970001][ T4983] usb 5-1: SerialNumber: syz [ 224.985074][ T4983] usb 5-1: config 0 descriptor?? [ 225.045250][ T5756] fido_id[5756]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 225.064325][ T4983] gspca_main: se401-2.14.0 probing 047d:5003 [ 225.090127][ T5510] gp8psk: FW Version = 115.179.157 (0x73b39d) Build 2061/179/161 [ 225.155931][ T5752] loop1: detected capacity change from 0 to 32768 [ 225.245401][ T5752] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.442 (5752) [ 225.281070][ T5752] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 225.295893][ T5752] BTRFS info (device loop1): metadata ratio 0 [ 225.302230][ T4230] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 225.310418][ T5510] gp8psk: usb in 149 operation failed. [ 225.311049][ T5752] BTRFS info (device loop1): turning on sync discard [ 225.315919][ T5510] gp8psk: failed to get FPGA version [ 225.340156][ T5510] gp8psk: usb in 138 operation failed. [ 225.345669][ T5510] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 225.358552][ T5752] BTRFS info (device loop1): using free space tree [ 225.367843][ T5752] BTRFS info (device loop1): has skinny extents [ 225.371784][ T5510] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 225.395286][ T5510] usb 4-1: USB disconnect, device number 9 [ 225.433962][ T5760] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 225.454107][ T5760] 9pnet_virtio: no channels available for device 127.0.0.1 [ 225.504451][ T4983] gspca_se401: ExtraFeatures: 255 [ 225.509749][ T4983] gspca_se401: Frame size: 0x65535 bayer [ 225.536603][ T4983] gspca_se401: Frame size: 0x0 1/16th janggu [ 225.548366][ T4983] gspca_se401: Frame size: 12x0 bayer [ 225.570073][ T4230] usb 1-1: Using ep0 maxpacket: 8 [ 225.596739][ T5752] BTRFS info (device loop1): enabling ssd optimizations [ 225.691642][ T4230] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 225.736633][ T4983] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 225.885455][ T26] audit: type=1800 audit(1787594078.811:243): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.442" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 226.134106][ T4983] usb 5-1: USB disconnect, device number 6 [ 227.832854][ T4230] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 227.873352][ T5791] loop4: detected capacity change from 0 to 512 [ 227.988613][ T5791] EXT4-fs (loop4): Ignoring removed bh option [ 228.169043][ T5791] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 228.289609][ T5791] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 228.399518][ T5791] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.450: Corrupt directory, running e2fsck is recommended [ 228.644329][ T4230] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 228.655219][ T4230] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 228.657997][ T5791] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 228.666756][ T4230] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 228.666787][ T4230] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.698657][ T4230] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.707840][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.732991][ T5791] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.450: corrupted in-inode xattr [ 228.745230][ T4230] usb 1-1: can't set config #16, error -71 [ 228.755913][ T5791] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.450: couldn't read orphan inode 15 (err -117) [ 228.774360][ T5791] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,jqfmt=vfsold,nolazytime,grpjquota=.errors=continue,resuid=0x0000000000000000,bh,noload,,,errors=continue. Quota mode: writeback. [ 228.797670][ T4230] usb 1-1: USB disconnect, device number 8 [ 228.845083][ T5791] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 228.858101][ T5791] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 228.872558][ T5791] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.450: Corrupt directory, running e2fsck is recommended [ 228.888781][ T5791] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 228.900546][ T5791] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 228.911105][ T5791] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.450: Corrupt directory, running e2fsck is recommended [ 228.942391][ T5801] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 228.959252][ T5801] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 229.022759][ T5801] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.450: Corrupt directory, running e2fsck is recommended [ 229.066410][ T5791] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 229.153452][ T5791] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.450: path /99/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 229.178495][ T5791] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 22: comm syz.4.450: path /99/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0 [ 229.332517][ T5806] loop3: detected capacity change from 0 to 128 [ 229.413427][ T5810] loop4: detected capacity change from 0 to 512 [ 229.429299][ T5806] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 229.508650][ T5810] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 229.539507][ T5810] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.568779][ T5806] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 229.612112][ T26] audit: type=1800 audit(1787594082.551:244): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.456" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 229.620077][ T4230] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 229.865728][ T5827] device batadv_slave_0 entered promiscuous mode [ 229.922936][ T5826] device batadv_slave_0 left promiscuous mode [ 229.980159][ T4230] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 229.994077][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.045756][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.065821][ T4230] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.129316][ T4230] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.135303][ T5834] loop1: detected capacity change from 0 to 512 [ 230.156098][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.176451][ T5838] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 230.179143][ T4230] usb 3-1: config 0 descriptor?? [ 230.220358][ T5834] EXT4-fs (loop1): Test dummy encryption mode enabled [ 230.275575][ T5834] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.465: inode has both inline data and extents flags [ 230.316734][ T5834] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.465: couldn't read orphan inode 15 (err -117) [ 230.359945][ T5834] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 230.469986][ T4987] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 230.669144][ T5832] loop0: detected capacity change from 0 to 32768 [ 230.759975][ T4987] usb 5-1: Using ep0 maxpacket: 16 [ 230.768930][ T26] audit: type=1800 audit(1787594083.701:245): pid=5832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.463" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 230.789250][ T4230] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 230.842784][ T4230] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 230.917615][ T4230] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 230.937476][ T26] audit: type=1800 audit(1787594083.871:246): pid=5852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.463" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 230.965935][ T4987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.008792][ T4987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.029362][ T4987] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 231.060243][ T4987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.102934][ T4987] usb 5-1: config 0 descriptor?? [ 231.148475][ T4230] usb 3-1: USB disconnect, device number 8 [ 231.268328][ T5859] fido_id[5859]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 231.320036][ T5867] device bridge1 entered promiscuous mode [ 231.364137][ T5848] loop3: detected capacity change from 0 to 32768 [ 231.398453][ T5867] team0: Port device bridge1 added [ 231.437643][ T5868] bridge0: port 3(team0) entered blocking state [ 231.454277][ T5848] JBD2: Ignoring recovery information on journal [ 231.504179][ T5868] bridge0: port 3(team0) entered disabled state [ 231.519922][ T5848] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 231.538367][ T5868] device team0 entered promiscuous mode [ 231.544470][ T5868] device team_slave_0 entered promiscuous mode [ 231.553791][ T5837] loop4: detected capacity change from 0 to 16 [ 231.560522][ T5868] device team_slave_1 entered promiscuous mode [ 231.580392][ T5837] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 231.617450][ T5868] bridge0: port 3(team0) entered blocking state [ 231.624177][ T5868] bridge0: port 3(team0) entered forwarding state [ 231.634687][ T4987] apple 0003:05AC:024B.0005: unknown global tag 0xe [ 231.641989][ T4987] apple 0003:05AC:024B.0005: item 0 1 1 14 parsing failed [ 231.650831][ T4987] apple 0003:05AC:024B.0005: parse failed [ 231.656685][ T4987] apple: probe of 0003:05AC:024B.0005 failed with error -22 [ 231.670778][ T4195] ocfs2: Unmounting device (7,3) on (node local) [ 231.852719][ T5877] input: syz1 as /devices/virtual/input/input12 [ 231.871252][ T4987] usb 5-1: USB disconnect, device number 7 [ 232.040271][ T4985] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 232.101590][ T5880] kvm [5879]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 232.112244][ T5880] kvm [5879]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 232.265213][ T5893] loop1: detected capacity change from 0 to 128 [ 232.329076][ T5893] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 232.370131][ T4985] usb 4-1: not running at top speed; connect to a high speed hub [ 232.380355][ T5893] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 232.494461][ T4985] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.525267][ T4985] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 232.547501][ T4985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.622366][ T5905] syz.0.485 uses obsolete (PF_INET,SOCK_PACKET) [ 232.657317][ T4985] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 232.670555][ T4985] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 232.686051][ T4985] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 232.695661][ T4985] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 232.703697][ T4985] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 232.718894][ T4985] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 232.734945][ T4985] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 232.743700][ T4985] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 232.768698][ T4985] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 232.940223][ T4584] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 233.029990][ T2304] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 233.057585][ T4987] usb 4-1: USB disconnect, device number 10 [ 233.086766][ T4987] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 233.138556][ T4987] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 233.148729][ T4987] keyspan 4-1:1.0: device disconnected [ 233.159985][ T4230] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 233.233687][ T5920] loop2: detected capacity change from 0 to 512 [ 233.276906][ T5920] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 233.294390][ T5920] EXT4-fs (loop2): orphan cleanup on readonly fs [ 233.313803][ T5920] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.492: Allocating blocks 41-42 which overlap fs metadata [ 233.334345][ T5920] Quota error (device loop2): write_blk: dquota write failed [ 233.343565][ T5920] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 233.353776][ T5920] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.492: Failed to acquire dquot type 0 [ 233.366997][ T5920] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 233.386745][ T5920] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.492: corrupted inode contents [ 233.399057][ T5920] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #12: comm syz.2.492: mark_inode_dirty error [ 233.400350][ T2304] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.421910][ T2304] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.431261][ T5920] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.492: corrupted inode contents [ 233.445145][ T5920] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.492: mark_inode_dirty error [ 233.457422][ T5920] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.492: corrupted inode contents [ 233.471817][ T5920] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 233.484540][ T5920] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.492: corrupted inode contents [ 233.497411][ T5920] EXT4-fs error (device loop2): ext4_truncate:4286: inode #12: comm syz.2.492: mark_inode_dirty error [ 233.509514][ T5920] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 233.520239][ T2304] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 233.523162][ T5920] EXT4-fs (loop2): 1 truncate cleaned up [ 233.529306][ T2304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.529332][ T2304] usb 2-1: SerialNumber: syz [ 233.550875][ T5920] EXT4-fs (loop2): pa ffff8880745131c0: logic 1, phys. 41, len 23 [ 233.559173][ T5920] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 233.561617][ T4584] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 233.578849][ T4230] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 233.590229][ T5920] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,noblock_validity,abort,barrier=0x0000000000000000,nogrpid,resgid=0x0000000000000000,noinit_itable,nombcache,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 233.599568][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.614523][ T4584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.625264][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.643425][ T4230] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.656718][ T4230] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.670031][ T4584] usb 5-1: Product: syz [ 233.674237][ T4584] usb 5-1: Manufacturer: syz [ 233.678864][ T4584] usb 5-1: SerialNumber: syz [ 233.699614][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.711276][ T4230] usb 1-1: config 0 descriptor?? [ 233.736219][ T4584] usb 5-1: config 0 descriptor?? [ 233.880799][ T5926] 9pnet: p9_fd_create_tcp (5926): problem connecting socket to 127.0.0.1 [ 233.934239][ T2304] usb 2-1: 0:2 : does not exist [ 234.242209][ T4230] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 234.512447][ T4230] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 234.571564][ T4584] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 234.618142][ T2304] usb 2-1: USB disconnect, device number 14 [ 234.657616][ T4230] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 234.723922][ T4230] usb 1-1: USB disconnect, device number 9 [ 234.835340][ T5937] fido_id[5937]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 234.878122][ T5939] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 234.939976][ T4985] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 234.961208][ T4584] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 234.982752][ T4584] usb 5-1: USB disconnect, device number 8 [ 234.990677][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.220045][ T4555] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 235.340076][ T4985] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.350811][ T4985] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.430102][ T4230] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 235.450196][ T4985] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 235.459752][ T4985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 235.470893][ T4555] usb 3-1: Using ep0 maxpacket: 16 [ 235.477269][ T4985] usb 4-1: SerialNumber: syz [ 235.631622][ T4555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.670024][ T4555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.690254][ T4555] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 235.699380][ T4555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.707837][ T4230] usb 2-1: Using ep0 maxpacket: 16 [ 235.730942][ T4555] usb 3-1: config 0 descriptor?? [ 235.763488][ T4985] usb 4-1: 0:2 : does not exist [ 235.830320][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.867304][ T5963] 9pnet: p9_fd_create_tcp (5963): problem connecting socket to 127.0.0.1 [ 235.933445][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.055353][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 236.183977][ T4230] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 236.244153][ T5929] loop2: detected capacity change from 0 to 16 [ 236.401959][ T5929] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 236.432932][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.651045][ T4985] usb 4-1: USB disconnect, device number 11 [ 236.685198][ T4555] apple 0003:05AC:024B.0007: unknown global tag 0xe [ 236.702754][ T4230] usb 2-1: config 0 descriptor?? [ 236.725954][ T4555] apple 0003:05AC:024B.0007: item 0 1 1 14 parsing failed [ 236.760603][ T4555] apple 0003:05AC:024B.0007: parse failed [ 236.786926][ T4555] apple: probe of 0003:05AC:024B.0007 failed with error -22 [ 236.872653][ T5968] block nbd4: NBD_DISCONNECT [ 236.877904][ T5968] block nbd4: Send disconnect failed -32 [ 236.920261][ T4555] usb 3-1: USB disconnect, device number 9 [ 236.938122][ T5968] block nbd4: Disconnected due to user request. [ 236.947537][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.969297][ T5968] block nbd4: shutting down sockets [ 237.203802][ T4230] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 237.223265][ T4230] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 237.239469][ T4230] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 237.258837][ T5975] loop3: detected capacity change from 0 to 8192 [ 237.268256][ T4230] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 237.295135][ T4230] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 237.317292][ T4230] appleir 0003:05AC:8241.0008: No inputs registered, leaving [ 237.345315][ T4230] appleir 0003:05AC:8241.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 237.501399][ T5975] loop3: p1 < > p3 < > p4 [ 237.505891][ T5975] loop3: partition table partially beyond EOD, truncated [ 237.524666][ T4555] usb 2-1: USB disconnect, device number 15 [ 237.544200][ T5975] loop3: p1 start 4294967295 is beyond EOD, truncated [ 237.622083][ T5975] loop3: p4 start 33554432 is beyond EOD, truncated [ 237.632665][ T5983] fido_id[5983]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 237.820095][ T4230] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 238.073883][ T5996] 9pnet: p9_fd_create_tcp (5996): problem connecting socket to 127.0.0.1 [ 238.170550][ T2304] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 238.370701][ T4230] usb 4-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40 [ 238.431522][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.500018][ T2304] usb 3-1: Using ep0 maxpacket: 8 [ 238.548143][ T4230] usb 4-1: Product: syz [ 238.613586][ T4230] usb 4-1: Manufacturer: syz [ 238.620939][ T2304] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 238.677078][ T2304] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.722228][ T4230] usb 4-1: SerialNumber: syz [ 238.866913][ T2304] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.877146][ T2304] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.888254][ T2304] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.902230][ T2304] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 238.911889][ T2304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.965608][ T5998] cgroup: fork rejected by pids controller in /syz4 [ 238.998678][ T6000] loop1: detected capacity change from 0 to 1764 [ 239.190163][ T2304] usb 3-1: usb_control_msg returned -32 [ 239.197826][ T2304] usbtmc 3-1:16.0: can't read capabilities [ 239.292602][ T4230] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 239.318898][ T4230] usb 4-1: USB disconnect, device number 12 [ 239.560820][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.686936][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.853458][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.006397][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.120060][ T6006] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 240.143713][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.238459][ T6012] input: syz0 as /devices/virtual/input/input14 [ 240.311644][ T4584] usb 3-1: USB disconnect, device number 10 [ 240.520038][ T6017] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 241.094311][ T6010] chnl_net:caif_netlink_parms(): no params data found [ 241.108426][ T5956] Set syz1 is full, maxelem 65536 reached [ 241.320131][ T4584] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 241.334112][ T6039] loop1: detected capacity change from 0 to 2048 [ 241.427016][ T6048] 9pnet: p9_fd_create_tcp (6048): problem connecting socket to 127.0.0.1 [ 241.500982][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.508592][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.535728][ T6045] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 241.643710][ T6010] device bridge_slave_0 entered promiscuous mode [ 241.853384][ T6050] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.870531][ T6045] 9pnet_virtio: no channels available for device 127.0.0.1 [ 242.048792][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.170395][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.225589][ T6010] device bridge_slave_1 entered promiscuous mode [ 242.349996][ T4230] Bluetooth: hci0: command 0x0409 tx timeout [ 242.403459][ T6010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.453018][ T6010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.560490][ T4584] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 242.602802][ T4584] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 242.619321][ T4584] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 247, setting to 64 [ 242.637707][ T4584] usb 3-1: config 0 interface 0 has no altsetting 0 [ 242.704616][ T6010] team0: Port device team_slave_0 added [ 242.713944][ T6071] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 242.736866][ T6010] team0: Port device team_slave_1 added [ 242.815681][ T6073] loop3: detected capacity change from 0 to 1764 [ 242.822730][ T4584] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 242.835661][ T4584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.844636][ T4584] usb 3-1: Product: syz [ 242.848842][ T4584] usb 3-1: Manufacturer: syz [ 242.853564][ T4584] usb 3-1: SerialNumber: syz [ 242.860896][ T4584] usb 3-1: config 0 descriptor?? [ 242.890513][ T6030] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 243.776782][ T6068] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 243.940685][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.250937][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.436297][ T4985] Bluetooth: hci0: command 0x041b tx timeout [ 244.594067][ T6010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.821514][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.869428][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.075845][ T6010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.863687][ T154] device hsr_slave_0 left promiscuous mode [ 245.908615][ T154] device hsr_slave_1 left promiscuous mode [ 245.915968][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.923708][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.938064][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.948773][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.958790][ T154] device bridge_slave_1 left promiscuous mode [ 245.967601][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.990844][ T154] device bridge_slave_0 left promiscuous mode [ 245.997114][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.029434][ T154] device veth1_macvtap left promiscuous mode [ 246.037808][ T154] device veth0_macvtap left promiscuous mode [ 246.044299][ T154] device veth1_vlan left promiscuous mode [ 246.051198][ T154] device veth0_vlan left promiscuous mode [ 246.322864][ T154] team0 (unregistering): Port device team_slave_1 removed [ 246.337891][ T154] team0 (unregistering): Port device team_slave_0 removed [ 246.356886][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.375138][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.449000][ T154] bond0 (unregistering): Released all slaves [ 246.510107][ T4189] Bluetooth: hci0: command 0x040f tx timeout [ 246.526795][ T6010] device hsr_slave_0 entered promiscuous mode [ 246.537174][ T6010] device hsr_slave_1 entered promiscuous mode [ 247.338396][ T6010] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 247.355151][ T6010] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.388204][ T6010] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.408673][ T6010] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.546752][ T6010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.567830][ T6010] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.582878][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.592461][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.610776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.624622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.637378][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.644547][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.658764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.667672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.684060][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.691217][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.706990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.716083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.739156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.754084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.774189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.785687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.799155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.814599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.832209][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.845919][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.864926][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.885401][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.913865][ T6010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.159347][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.169327][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.198555][ T6010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.505531][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.550729][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.593153][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.601163][ T4379] Bluetooth: hci0: command 0x0419 tx timeout [ 248.617265][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.646910][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.660448][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.700326][ T6010] device veth0_vlan entered promiscuous mode [ 248.731164][ T6010] device veth1_vlan entered promiscuous mode [ 248.775177][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.790824][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.810480][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.826488][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.850116][ T4584] usb 3-1: Can not set alternate setting to 1, error: -110 [ 248.857395][ T4584] synaptics_usb: probe of 3-1:0.0 failed with error -110 [ 248.873028][ T6010] device veth0_macvtap entered promiscuous mode [ 248.912077][ T6010] device veth1_macvtap entered promiscuous mode [ 248.967533][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.978417][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.988980][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.008024][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.025658][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.037734][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.053452][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.065331][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.077699][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.088135][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.097947][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.109196][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.125346][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.137364][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.154851][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.166247][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.182821][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.195256][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.209582][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.226901][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.251404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.264968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.278707][ T6010] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.293852][ T6010] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.304124][ T6010] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.330040][ T6010] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.468343][ T4367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.488668][ T4367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.513649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 249.546139][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.565454][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.586076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.472153][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.913442][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 365.070064][ T4988] Bluetooth: hci0: command 0x0406 tx timeout [ 378.361458][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.520072][ T27] INFO: task syz-executor:4173 blocked for more than 143 seconds. [ 390.527972][ T27] Not tainted syzkaller #0 [ 390.533210][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.545887][ T27] task:syz-executor state:D stack:22800 pid: 4173 ppid: 4172 flags:0x00004002 [ 390.557261][ T27] Call Trace: [ 390.563618][ T27] [ 390.566586][ T27] __schedule+0x11c3/0x4350 [ 390.573460][ T27] ? release_firmware_map_entry+0x190/0x190 [ 390.579427][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 390.588540][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 390.598620][ T27] schedule+0x11b/0x1e0 [ 390.607000][ T27] io_schedule+0x7c/0xd0 [ 390.613648][ T27] bit_wait_io+0xd/0xc0 [ 390.617859][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 390.628510][ T27] ? bit_wait+0xc0/0xc0 [ 390.635031][ T27] ? __wait_on_bit+0x170/0x170 [ 390.643727][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 390.648788][ T27] ? bit_waitqueue+0x30/0x30 [ 390.655742][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 390.664059][ T27] do_get_write_access+0x134/0xe40 [ 390.669230][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 390.682826][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 390.689025][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 390.695295][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 390.700706][ T27] ? __might_sleep+0xf0/0xf0 [ 390.705331][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 390.710960][ T27] __ext4_mark_inode_dirty+0x136/0x6c0 [ 390.716455][ T27] ext4_dirty_inode+0xbf/0x100 [ 390.722635][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 390.728546][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 390.733653][ T27] generic_update_time+0x1cd/0x1f0 [ 390.738802][ T27] file_update_time+0x3c0/0x440 [ 390.743859][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 390.750116][ T27] ? percpu_down_read+0x17d/0x1b0 [ 390.755204][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 390.760539][ T27] ? wp_page_shared+0x15b/0x6c0 [ 390.765429][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 390.771894][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 390.776967][ T27] do_page_mkwrite+0x168/0x3c0 [ 390.781890][ T27] wp_page_shared+0x163/0x6c0 [ 390.786693][ T27] handle_mm_fault+0x1fbd/0x4440 [ 390.792836][ T27] ? get_page+0xe0/0xe0 [ 390.797063][ T27] ? vmacache_find+0x238/0x590 [ 390.802004][ T27] ? find_vma+0xd2/0x230 [ 390.806287][ T27] do_user_addr_fault+0x494/0xc90 [ 390.811503][ T27] exc_page_fault+0x60/0x100 [ 390.816205][ T27] asm_exc_page_fault+0x22/0x30 [ 390.823771][ T27] RIP: 0033:0x7fd6de595662 [ 390.828246][ T27] RSP: 002b:00007ffdbe0803a0 EFLAGS: 00010202 [ 390.839723][ T27] RAX: 00007fd6dc5d5000 RBX: 0000555573777dc0 RCX: 0000000000000005 [ 390.848752][ T27] RDX: 00000000000034f1 RSI: 0000555573785740 RDI: 0000000000000020 [ 390.856993][ T27] RBP: 00007ffdbe0808a0 R08: 0000555573785760 R09: 0000000000000087 [ 390.865116][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdbe0806e0 [ 390.873227][ T27] R13: 00007ffdbe0804d0 R14: 585858582e7a7973 R15: 00007ffdbe080420 [ 390.881276][ T27] [ 390.884385][ T27] INFO: task syz.2.527:6028 blocked for more than 143 seconds. [ 390.892082][ T27] Not tainted syzkaller #0 [ 390.897040][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.905779][ T27] task:syz.2.527 state:D stack:27440 pid: 6028 ppid: 4188 flags:0x00004004 [ 390.915162][ T27] Call Trace: [ 390.918457][ T27] [ 390.921456][ T27] __schedule+0x11c3/0x4350 [ 390.926030][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 390.932584][ T27] ? lock_chain_count+0x20/0x20 [ 390.937486][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 390.943637][ T27] ? release_firmware_map_entry+0x190/0x190 [ 390.950372][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 390.956378][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 390.961850][ T27] schedule+0x11b/0x1e0 [ 390.966039][ T27] io_schedule+0x7c/0xd0 [ 390.970549][ T27] bit_wait_io+0xd/0xc0 [ 390.974743][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 390.980512][ T27] ? bit_wait+0xc0/0xc0 [ 390.984702][ T27] ? __wait_on_bit+0x170/0x170 [ 390.989480][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 390.994599][ T27] ? bit_waitqueue+0x30/0x30 [ 390.999227][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 391.004496][ T27] do_get_write_access+0x134/0xe40 [ 391.009843][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 391.015872][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 391.022154][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 391.029306][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 391.034672][ T27] ? __might_sleep+0xf0/0xf0 [ 391.039295][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 391.046556][ T27] __ext4_mark_inode_dirty+0x136/0x6c0 [ 391.052677][ T27] ext4_dirty_inode+0xbf/0x100 [ 391.057495][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 391.063447][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 391.068658][ T27] generic_update_time+0x1cd/0x1f0 [ 391.074092][ T27] file_update_time+0x3c0/0x440 [ 391.079000][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 391.084272][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 391.089499][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 391.095539][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 391.101884][ T27] ? count_memcg_event_mm+0x324/0x370 [ 391.107281][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 391.113608][ T27] ? finish_lock_switch+0x12d/0x290 [ 391.118844][ T27] do_page_mkwrite+0x168/0x3c0 [ 391.124445][ T27] handle_mm_fault+0x1e47/0x4440 [ 391.129425][ T27] ? get_page+0xe0/0xe0 [ 391.133710][ T27] ? vmacache_find+0x4e3/0x590 [ 391.138510][ T27] ? vmacache_update+0xa0/0x100 [ 391.143506][ T27] ? find_vma+0x1df/0x230 [ 391.147865][ T27] do_user_addr_fault+0x494/0xc90 [ 391.153112][ T27] exc_page_fault+0x60/0x100 [ 391.158098][ T27] asm_exc_page_fault+0x22/0x30 [ 391.163499][ T27] RIP: 0033:0x7f1df2e79eb2 [ 391.167953][ T27] RSP: 002b:00007ffdad47e2a0 EFLAGS: 00010202 [ 391.174373][ T27] RAX: 0000000000001008 RBX: 00007f1df3d5c720 RCX: 0000000000000000 [ 391.182593][ T27] RDX: 0000001b32823000 RSI: 0000000000000008 RDI: 00007f1df3d5c720 [ 391.190909][ T27] RBP: 00000000000005a8 R08: 00007f1df3217000 R09: 00007f1df322d038 [ 391.198904][ T27] R10: 0000000000000003 R11: 0000000000000002 R12: ffffffff86356e7c [ 391.207013][ T27] R13: 00007f1df322d038 R14: 00000000000000be R15: fffffffffffff000 [ 391.215157][ T27] ? usb_gadget_connect+0xfc/0x2f0 [ 391.220396][ T27] [ 391.223515][ T27] INFO: task syz.1.539:6083 blocked for more than 144 seconds. [ 391.231963][ T27] Not tainted syzkaller #0 [ 391.236935][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.245734][ T27] task:syz.1.539 state:D stack:26672 pid: 6083 ppid: 4185 flags:0x00004004 [ 391.255039][ T27] Call Trace: [ 391.258686][ T27] [ 391.261776][ T27] __schedule+0x11c3/0x4350 [ 391.266370][ T27] ? release_firmware_map_entry+0x190/0x190 [ 391.272344][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 391.278275][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 391.283633][ T27] schedule+0x11b/0x1e0 [ 391.287822][ T27] io_schedule+0x7c/0xd0 [ 391.292147][ T27] bit_wait_io+0xd/0xc0 [ 391.296355][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 391.301977][ T27] ? bit_wait+0xc0/0xc0 [ 391.306175][ T27] ? __wait_on_bit+0x170/0x170 [ 391.311068][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 391.316135][ T27] ? bit_waitqueue+0x30/0x30 [ 391.320891][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 391.326133][ T27] do_get_write_access+0x134/0xe40 [ 391.331374][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 391.337396][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 391.344456][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 391.350711][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 391.356027][ T27] ? __might_sleep+0xf0/0xf0 [ 391.361177][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 391.366774][ T27] __ext4_mark_inode_dirty+0x136/0x6c0 [ 391.372330][ T27] ext4_dirty_inode+0xbf/0x100 [ 391.377130][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 391.383057][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 391.388124][ T27] generic_update_time+0x1cd/0x1f0 [ 391.393440][ T27] file_update_time+0x3c0/0x440 [ 391.398543][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 391.403766][ T27] ? mark_lock+0x94/0x320 [ 391.408137][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 391.413273][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 391.419043][ T27] ? pte_alloc_one+0x287/0x310 [ 391.423946][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 391.430305][ T27] ? __rwlock_init+0x140/0x140 [ 391.435099][ T27] ? count_memcg_event_mm+0x324/0x370 [ 391.440609][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 391.445852][ T27] do_page_mkwrite+0x168/0x3c0 [ 391.451480][ T27] handle_mm_fault+0x1e47/0x4440 [ 391.456465][ T27] ? get_page+0xe0/0xe0 [ 391.461107][ T27] ? vmacache_find+0x4e3/0x590 [ 391.465912][ T27] ? vmacache_update+0xa0/0x100 [ 391.473943][ T27] ? find_vma+0x1df/0x230 [ 391.478320][ T27] do_user_addr_fault+0x494/0xc90 [ 391.484652][ T27] exc_page_fault+0x60/0x100 [ 391.489286][ T27] ? clear_bhb_loop+0x30/0x80 [ 391.494138][ T27] asm_exc_page_fault+0x22/0x30 [ 391.499065][ T27] RIP: 0033:0x7f585cefaa23 [ 391.503569][ T27] RSP: 002b:00007ffdf01d7230 EFLAGS: 00010246 [ 391.509668][ T27] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b32164000 [ 391.517783][ T27] RDX: 0000001b32124000 RSI: 0000000000600000 RDI: 00007f585d26f708 [ 391.525815][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 391.533923][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 391.541980][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdf01d74c0 [ 391.550173][ T27] [ 391.553452][ T27] INFO: task syz.3.540:6084 blocked for more than 144 seconds. [ 391.561737][ T27] Not tainted syzkaller #0 [ 391.567036][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.575839][ T27] task:syz.3.540 state:D stack:26544 pid: 6084 ppid: 4195 flags:0x00004004 [ 391.585419][ T27] Call Trace: [ 391.588749][ T27] [ 391.591949][ T27] __schedule+0x11c3/0x4350 [ 391.596524][ T27] ? release_firmware_map_entry+0x190/0x190 [ 391.602728][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 391.608654][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 391.614154][ T27] schedule+0x11b/0x1e0 [ 391.618346][ T27] io_schedule+0x7c/0xd0 [ 391.622919][ T27] bit_wait_io+0xd/0xc0 [ 391.627222][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 391.633536][ T27] ? bit_wait+0xc0/0xc0 [ 391.637750][ T27] ? __wait_on_bit+0x170/0x170 [ 391.642879][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 391.647958][ T27] ? bit_waitqueue+0x30/0x30 [ 391.652923][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 391.658168][ T27] do_get_write_access+0x134/0xe40 [ 391.663650][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 391.671108][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 391.677331][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 391.683829][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 391.689154][ T27] ? __might_sleep+0xf0/0xf0 [ 391.694146][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 391.699959][ T27] __ext4_mark_inode_dirty+0x136/0x6c0 [ 391.705474][ T27] ext4_dirty_inode+0xbf/0x100 [ 391.710577][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 391.716436][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 391.722339][ T27] generic_update_time+0x1cd/0x1f0 [ 391.727504][ T27] file_update_time+0x3c0/0x440 [ 391.732723][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 391.737899][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 391.743223][ T27] ? lock_chain_count+0x20/0x20 [ 391.748135][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 391.754788][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 391.760268][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 391.765958][ T27] do_page_mkwrite+0x168/0x3c0 [ 391.771517][ T27] handle_mm_fault+0x1e47/0x4440 [ 391.776524][ T27] ? get_page+0xe0/0xe0 [ 391.781676][ T27] ? vmacache_find+0x4e3/0x590 [ 391.786482][ T27] ? vmacache_update+0xa0/0x100 [ 391.792013][ T27] ? find_vma+0x1df/0x230 [ 391.796409][ T27] do_user_addr_fault+0x494/0xc90 [ 391.801758][ T27] exc_page_fault+0x60/0x100 [ 391.806398][ T27] ? clear_bhb_loop+0x30/0x80 [ 391.811418][ T27] asm_exc_page_fault+0x22/0x30 [ 391.816423][ T27] RIP: 0033:0x7feece876a23 [ 391.821103][ T27] RSP: 002b:00007ffc212d86c0 EFLAGS: 00010246 [ 391.827214][ T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b32364000 [ 391.835503][ T27] RDX: 0000001b32324000 RSI: 0000000000400000 RDI: 00007feecebeb708 [ 391.843828][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 391.852103][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 391.860287][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc212d8950 [ 391.868324][ T27] [ 391.872366][ T27] [ 391.872366][ T27] Showing all locks held in the system: [ 391.880318][ T27] 2 locks held by kworker/u4:0/9: [ 391.885372][ T27] 1 lock held by khungtaskd/27: [ 391.891000][ T27] #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 391.900621][ T27] 6 locks held by kworker/u4:2/154: [ 391.905849][ T27] #0: ffff8880199ba138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 391.916541][ T27] #1: ffffc90002067d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 391.928425][ T27] #2: ffff88814ce8c0e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 391.938618][ T27] #3: ffff88814ce8ec58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x213/0x2d40 [ 391.949434][ T27] #4: ffff88814cf50990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 391.960173][ T27] #5: ffff888074634840 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 391.970299][ T27] 2 locks held by getty/3943: [ 391.975342][ T27] #0: ffff88802ceb0098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 391.985422][ T27] #1: ffffc900025ce2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 391.995928][ T27] 3 locks held by syz-executor/4173: [ 392.002081][ T27] #0: ffff88807567a428 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 392.012667][ T27] #1: ffff88814ce8c558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 392.022681][ T27] #2: ffff88814cf50990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 392.032671][ T27] 3 locks held by syz-executor/6010: [ 392.037986][ T27] #0: ffff88814ce8c460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 392.047223][ T27] #1: ffff88805e1dd3b0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 392.058011][ T27] #2: ffff88814cf50990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 392.067774][ T27] 3 locks held by syz.2.527/6028: [ 392.072920][ T27] #0: ffff88807ebb0128 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 392.083200][ T27] #1: ffff88814ce8c558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 392.093171][ T27] #2: ffff88814cf50990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 392.102928][ T27] 3 locks held by syz.1.539/6083: [ 392.107964][ T27] #0: ffff88807e23a428 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 392.118643][ T27] #1: ffff88814ce8c558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 392.128505][ T27] #2: ffff88814cf50990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 392.138324][ T27] 3 locks held by syz.3.540/6084: [ 392.143454][ T27] #0: ffff88807e23b228 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 392.153384][ T27] #1: ffff88814ce8c558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 392.163240][ T27] #2: ffff88814cf50990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 392.173034][ T27] [ 392.175380][ T27] ============================================= [ 392.175380][ T27] [ 392.184209][ T27] NMI backtrace for cpu 1 [ 392.188570][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 392.195786][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.205852][ T27] Call Trace: [ 392.209171][ T27] [ 392.212111][ T27] dump_stack_lvl+0x188/0x250 [ 392.216815][ T27] ? show_regs_print_info+0x20/0x20 [ 392.222034][ T27] ? load_image+0x410/0x410 [ 392.226560][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 392.231963][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 392.237101][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 392.242049][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 392.248233][ T27] ? _printk+0xda/0x130 [ 392.252411][ T27] ? load_image+0x410/0x410 [ 392.256954][ T27] ? load_image+0x410/0x410 [ 392.261488][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 392.267577][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 392.273612][ T27] watchdog+0xe1b/0xe60 [ 392.277800][ T27] kthread+0x42e/0x520 [ 392.281874][ T27] ? hungtask_pm_notify+0x40/0x40 [ 392.286924][ T27] ? kthread_blkcg+0xd0/0xd0 [ 392.291543][ T27] ret_from_fork+0x1f/0x30 [ 392.296002][ T27] [ 392.299443][ T27] Sending NMI from CPU 1 to CPUs 0: [ 392.304825][ C0] NMI backtrace for cpu 0 [ 392.304835][ C0] CPU: 0 PID: 4367 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 392.304851][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.304861][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 392.304883][ C0] RIP: 0010:unwind_get_return_address+0x4/0x80 [ 392.304905][ C0] Code: 49 89 fe 48 89 f7 49 89 f7 e8 68 1b 89 00 4c 89 f7 4c 89 fe e9 2d ff ff ff e8 08 37 8b 08 0f 1f 84 00 00 00 00 00 41 57 41 56 <53> 48 89 fb 49 be 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 [ 392.304919][ C0] RSP: 0018:ffffc900034e6f70 EFLAGS: 00000202 [ 392.304932][ C0] RAX: 0000000080000201 RBX: ffffc900034e7040 RCX: 0000000080000201 [ 392.304945][ C0] RDX: ffffc900034e6f01 RSI: ffffc900034e7c30 RDI: ffffc900034e6f88 [ 392.304957][ C0] RBP: ffffc900034e7010 R08: ffffc900034e7c30 R09: ffffc900034e6fd8 [ 392.304969][ C0] R10: dffffc0000000000 R11: fffff5200069cdfd R12: ffff888028d61dc0 [ 392.304982][ C0] R13: dffffc0000000000 R14: ffffffff81676df0 R15: ffffc900034e6f88 [ 392.304994][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 392.305021][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.305031][ C0] CR2: 000055ecb3aa6660 CR3: 000000001e704000 CR4: 00000000003506f0 [ 392.305046][ C0] Call Trace: [ 392.305050][ C0] [ 392.305054][ C0] ? stack_trace_save+0xf0/0xf0 [ 392.305071][ C0] arch_stack_walk+0xf2/0x140 [ 392.305091][ C0] ? process_one_work+0x867/0xff0 [ 392.305110][ C0] stack_trace_save+0xa6/0xf0 [ 392.305125][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 392.305140][ C0] ? mark_lock+0x94/0x320 [ 392.305157][ C0] kasan_save_stack+0x35/0x60 [ 392.305173][ C0] ? kasan_save_stack+0x35/0x60 [ 392.305195][ C0] ? kasan_record_aux_stack+0xb8/0x100 [ 392.305212][ C0] ? kvfree_call_rcu+0x105/0x7f0 [ 392.305227][ C0] ? cfg80211_update_known_bss+0x184/0xb60 [ 392.305243][ C0] ? cfg80211_bss_update+0x156/0x21a0 [ 392.305258][ C0] ? cfg80211_inform_bss_frame_data+0x88d/0x1ed0 [ 392.305275][ C0] ? ieee80211_bss_info_update+0x6ba/0xa80 [ 392.305293][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 392.305310][ C0] ? ieee80211_iface_work+0x714/0xc50 [ 392.305326][ C0] ? cfg80211_wiphy_work+0x224/0x260 [ 392.305362][ C0] kasan_record_aux_stack+0xb8/0x100 [ 392.305381][ C0] kvfree_call_rcu+0x105/0x7f0 [ 392.305397][ C0] ? cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 392.305414][ C0] ? call_rcu+0x900/0x900 [ 392.305429][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 392.305449][ C0] cfg80211_update_known_bss+0x184/0xb60 [ 392.305468][ C0] cfg80211_bss_update+0x156/0x21a0 [ 392.305492][ C0] ? cfg80211_inform_bss_frame_data+0x6c7/0x1ed0 [ 392.305511][ C0] cfg80211_inform_bss_frame_data+0x88d/0x1ed0 [ 392.305536][ C0] ? sched_core_alloc_cookie+0x64/0xa0 [ 392.305557][ C0] ? cfg80211_parse_mbssid_data+0x30e0/0x30e0 [ 392.305583][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 392.305606][ C0] ieee80211_bss_info_update+0x6ba/0xa80 [ 392.305630][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 392.305652][ C0] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 392.305673][ C0] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 392.305702][ C0] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 392.305718][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 392.305735][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 392.305753][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 392.305769][ C0] ? _raw_spin_unlock+0x40/0x40 [ 392.305783][ C0] ? kcov_remote_start+0x6a/0x490 [ 392.305802][ C0] ? kcov_remote_start+0xfa/0x490 [ 392.305819][ C0] ieee80211_iface_work+0x714/0xc50 [ 392.305836][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 392.305854][ C0] cfg80211_wiphy_work+0x224/0x260 [ 392.305873][ C0] process_one_work+0x867/0xff0 [ 392.305896][ C0] ? worker_detach_from_pool+0x240/0x240 [ 392.305913][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 392.305931][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 392.305964][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 392.305982][ C0] ? wq_worker_running+0x97/0x170 [ 392.305999][ C0] worker_thread+0xad7/0x12a0 [ 392.306021][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 392.306038][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 392.306060][ C0] kthread+0x42e/0x520 [ 392.306074][ C0] ? rcu_lock_release+0x20/0x20 [ 392.306090][ C0] ? kthread_blkcg+0xd0/0xd0 [ 392.306105][ C0] ret_from_fork+0x1f/0x30 [ 392.306129][ C0] [ 392.307523][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 392.743306][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 392.750533][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.760615][ T27] Call Trace: [ 392.763916][ T27] [ 392.766866][ T27] dump_stack_lvl+0x188/0x250 [ 392.771572][ T27] ? show_regs_print_info+0x20/0x20 [ 392.776779][ T27] ? load_image+0x410/0x410 [ 392.781304][ T27] panic+0x2f8/0x850 [ 392.785229][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 392.790890][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 392.795436][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 392.801628][ T27] watchdog+0xe5a/0xe60 [ 392.805838][ T27] kthread+0x42e/0x520 [ 392.809929][ T27] ? hungtask_pm_notify+0x40/0x40 [ 392.814977][ T27] ? kthread_blkcg+0xd0/0xd0 [ 392.819618][ T27] ret_from_fork+0x1f/0x30 [ 392.824056][ T27] [ 392.827393][ T27] Kernel Offset: disabled [ 392.831744][ T27] Rebooting in 86400 seconds..