last executing test programs: 4m32.183180341s ago: executing program 5 (id=1319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xd) 4m31.924856363s ago: executing program 5 (id=1320): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 4m31.678896245s ago: executing program 5 (id=1322): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f00000011c0)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@ssd_spread}, {@compress_force}, {@enospc_debug}, {@ssd_spread}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002480)={{r0}, 0x0, 0x0, @inherit={0x0, 0x0}, @devid}) 4m30.247358018s ago: executing program 5 (id=1339): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$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") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) 4m29.613169406s ago: executing program 5 (id=1345): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) 4m28.838326524s ago: executing program 5 (id=1356): r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 4m28.515142816s ago: executing program 32 (id=1356): r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 4m26.223712272s ago: executing program 3 (id=1386): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "87cfcdda6219d3dcb7744773b3819bce721e0b1f97e0f4b3", "2fc72613b81c11588e4a2be73556ee12cdaccc1b5e4113c894f0693edd32545f"}}}}}}, 0x0) 4m25.889526206s ago: executing program 3 (id=1389): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10dc, &(0x7f0000001600)={[{0xb6, 0x4e00, "bc8605407074b4cfcde2394419d331e188b3408b2a05a1f60b6a95abbc5f043ac03692169e07fa762235d76ad6b4a697609ff388157fc093ec0596bee3b8fb19055d161b89f434288a5f08d0db6420d3b5122de0bac251d78943752e9b8ac2e9904c584f30a09e2778b6883f19b3706377991c9c0ec902de6ea4586c8726e557348564a1364fd5258d81c3c9ca1d66f29dff3741ac7b2d739aff193dff63c2f9e579610902d47acc08e998a5a852fd943998ae926bb0"}, {0x19, 0x4e00, "01c2ebd99eaf3acf056a6d9f7ea34261d92618dbce0b0bcc00"}, {0xff9, 0x4e00, "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"}]}) 4m23.578221918s ago: executing program 3 (id=1404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 4m23.326404749s ago: executing program 3 (id=1407): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000140)={[{@gid}, {@errors_remount}, {@discard_size={'discard', 0x3d, 0x1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@noquota}, {}, {@errors_continue}, {@errors_remount}, {@uid}]}, 0x24, 0x6220, &(0x7f0000006840)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000200)='./file0/file0\x00') 4m21.85009247s ago: executing program 3 (id=1422): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x14fc, &(0x7f0000001540)="$eJzs3Au0jtX2OP4511oPm6Q3yX3NNR/e5LJIklyS5JIkSXIkt4SQJElIbHJLQpL7Lck9JLeQ3Mk99yQ5kiQJCUnWfyiNOt/O//T9fc/5Hmd89/yM8Yy95l7vms989nzHc3nH2O/XHQZVrlulQm1mhn8K/vIjFQBSAKAvAFwDABEAlMhSIsul+QwaU/+5nYh/rYemXekKxJUk/U/bpP9pm/Q/bZP+p23S/7RN+p+2Sf/TNum/EGnZ1uk5r5Ut7W7y+f//beofzsr1P00a8utA+p+2Sf//D8rw+6D8P3yp9D9tk/6nbdL/tE36n7ZJ/9M26b8Qadn/4DPjSg//B3xu/W/cFABcif1m+Hfs90q//4QQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCpA3nwm8MAPw6vtJ1CSGEEEIIIYQQ4l8npL/SFQghhBBCCCGEEOJ/H4ICDQYiSAfpIQUyQEa4CjLB1ZAZroEEXAtZ4DrICtdDNsgOOSAn5ILckAcsEDhgiCEv5IMk3AD54UYoAAWhEBQGD0WgKNwExeBmKA63QAm4FUrCbVAKSkMZKAu3Qzm4A8rDnVAB7oKKUAkqQxW4G6rCPVAN7oXqcB/UgPuhJjwAteBBqA0PQR34C9SFh6EePAL1oQE0hEbQ+H+0/nnoAi9AV+gGqdAdesCL0BN6QW/oA33hJegHL0N/eAUGwEAYBK/CYHgNhsDrMBSGwXAYASNhFIyGMTAWxsF4eAMmwJswEd6CSTAZpsBUmAbTYQa8DTNhFsyGd2AOvAtzYR7MhwWwEN6DRbAYlsD7sBQ+gGWwHFbASlgFq2ENrIV18CGshw2wETbBZtgCW+Ej2AbbYQfshF2wG/bAx7AXPoF98Cnsh8/+H9ef/S/rOyIgoEKFBg2mw3SYgimYETNiJsyEmTEzJjCBWTALZsWsmA2zYQ7MgbkwF+bBPEhIyMiYF/NiEpOYH/NjASyAhbAQevRYFItiMbwZi2NxLIElsCSWxFJYGktjWSyL5bAclsfyWAErYEWsiJWxMt6Nd+M9WA2rYXWsjjWwBtbEmlgLa2FtrI11sA7WxbpYD+thfayPDbEhNsbG2ASbYFNsis2xObbAFtgKW2FrbI1tsA22xLbYDtthe2yPHbADdsRO2Amfx+fxBXwBu2FF1R17YA/siT2xN/bBPvgS9sOX8WV8BQfgQByEr+Kr+BoOwTM4FIfhcByO5dQoHI1jkNU4HI/jcQJOwIk4ESfhZJyMU3EaTscZOANn4iyche/gHHwX38V5OA8X4EJciItwMS7BJbgUz+IyXI4rcCWuwtW4CtfiOlyL63EDrsdNuAm34Bb8CD/CEbgdd+JO3I278WP8GD/BT3AA7sf9eAAP4EE8iIfwEB7Gw3gEj+BRPIrH8Bgex+N4Ak/iKTyJp/E0nsGzeA7P4Xk8jxfw2Vxf1tld8MMBoC4xyqh0Kp1KUSkqo8qoMqlMKrPKrBIqobKoLCqryqqyqWwqh8qhcqlcKo/Ko0iRYhWrvCqvSqqkyq9SLp9TCimvvCqqiqpiqpgqroqrEupWVVLdpkqp0qqZL6vKqnKquS+v7lQVVAVVUVVSlVUVBEhVVVU1VU1VV9VVDVVD1VQPqFqqO/bGh9SlztRVA7GeGoT1VQPV8EIj9Ro+qpqoIdhUNVPN1eNqGA7FVqqJb62eVG3UaGyrnlZj8BnVXo3DDuo51VF1Up3V86qLauq7qm5qEnZXPdRU7Kl6qd6qj5qJldSljlVWr6gBaqAapF5VC/A1NUS9roaqYWq4GqFGqlFqtBqjxqpxarx6Q01Qb6qJ6i01SU1WU9RUNU1NVzPU22qmmlV+tnpHzVHvqrlqnpqvFqiF6j21SC1WS9T7aqn6QC1Ty9UKtVKtUqvVGrU2IIBarzaojWqT2qy2qK3qI7VNbVc71E61S+1We9THaq/6RO1Tn6r96jN1QP1VHVSfq0PqC3VYfamOqK/UUfW1Oqa+UcfVt+qEOqlOqe/UafW9OqPOqnPqB3Ve/aguqJ/URRUUaNRKa210pNPp9DpFZ9AZ9VU6k75aZ9bX6IS+VmfR1+ms+nqdTWfXOXROnUvn1qB+6TTrWOfV+XRS36Dz6xt1AV1QF9KFtddFdFF9ky6mb9bF9S26hL5Vl9S36VK6tC6jy+rbdTl9hy6v79QV9F26oq6kK+sq+m5dVd+jq+l7dXV9n66h79c19QO6ln5Q19YP6Tr6L7qufljX04/o+rqBbqgb6cb6Ud1EP6ab6ma6uX5ct9AtdSv9hG6tn9Rt9FO6rX5at9PP6Pb6Wd1BP6c76k66s/5JX9RBd9XddKrurnvoF3VP3Uv31n10X/2S7qdf1v31K3qAHqgH6Vf1YP2aHqJf10P1MD1cj9Aj9Sg9Wo/RY/U4PV6/oSfoN/VE/ZaepCfrKXqqnqan696XM83+b6x/8++s7//z3rforfojvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9g/5On9bf6zP6rD6rf9Dn9Xl94fLfAAwaZbQxJjLpTHqTYjKYjOYqk8lcbTKba0zCXGuymOtMVnO9yWaymxwmp8llcps8xhoyzrCJTV6TzyTNDSa/udEUMAVNIVPYeFPEFDU3/dPr/6y+xqaxaWKamKamqWlumpsWpoVpZVqZ1qa1aWPamLamrWln2pn2pr3pYDqYjqaj6Ww6my6mi+lquppUk2p6mBdNT9PL9DZ9TF/zkuln+pn+pr8ZYAaYQWaQGWwGmyFmiBlqhprhZrgZaUaa0Wa0GWvGmvFmvJlgJpiJZqKZZCaZKWaKmWammRlmhplpZprZZraZY+aYuWaumW/mm4VmoVlkFpklZolZapaaZWa5WW5WmpVmtVlt1pq15kPzodlgNphNZpNZZraarWab2WZ2mB1ml9ll9pg9Zq/Za/aZfWa/2W8OmAPmoDloDplD5vCl0685Yo6ao+aYOWaOm+PmhDlhTplT5rQ5bc6YM+acOWfOm/PmgrlgLpqLl277IhWpyEQmSheli1KilChjlDHKFGWKMkeZo0SUiLJEWaKs0fVRtih7lCPKGeWKckd5IhtR5CKO4ihvlC9KRjdE+aMbowJRwahQVDjyUZGoaHRTVCy6OSoe3RKViG6NSka3RaWi0lGZqGx0e1QuuiMqH90ZVYjuiipGlaLKUZXo7qhqdE9ULbo3qh7dF9WI7o9qRg9EtaIHo9rRQ1GdyFy+vjwS1Y8aRA2jRlHjf2n+EM5kf8x3td1squ1ue9gXbU/by/a2fWxf+5LtZ1+2/e0rdoAdaAfZV+1g+5odYl+3Q+0wO9yOsCPtKDvajrFj7Tg73r6Bl4u1k+xkO8VOtdPsdDvDvm1n2ll2tn3HzrHv2rl2np1vF9h0ALDILrZL7Pt2qf3ALrPL7Qq70q6yq+0au9ausx/a9XaD3Wg32c12i91qP7Lb7Ha7w+60u+xuu8d+bPfaT+w++6ndbz+zB+xf7UH7uT1kv7CH7Zf2iP3KHrVf22P2G3vcfmtP2JP2lP3Onrbf2zP2rD1nf7Dn7Y/2gv3JXrTh0s39pcs7GTKUjtJRCqVQRspImSgTZabMlKAEZaEslJWyUjbKRjkoB+WiXJSH8tAlTEx5KS8lKUn5KT8VoAJUiAqRJ09FqSgVo2JUnIpTCSpBJakklaJSVIbK0O10O91Bd9CddCfdRXdRJapEVagKVaWqVI2qUXWqTjWoBtWkmlSLalFtqk11qA7VpbpUj+pRfapPDakhNabG1ISaUFNqSs2pObWgFtSKWlFrak1tqA21pbbUjtpRe2pPHagDdaSO1Jk6UxfqQl2pK6VSKvWgHtSTelJv6k19qS/1o37Un/rTABpAg2gQDabBNISG0FAaRsNpBI2kUTSaxtBYGkfjaTxNoAk0kSbSJJpEU2gKTaNpNINm0EyaSbNpNs2hOTSX5tJ8mk8LaSEtokW0hJbQUlpKy2gZraAVtIpW0RpaQ+toHa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nH+kC/UQXKVCKy+AyuqtcJne1y+yucf81zuFyulwut8vjrMvmsv9NTM65Aq6gK+QKO++KuKLupj/EpVxpV8aVdbe7cu4OV/4PcVV3j6vm7nXV3X2uirv7b+Ia7n5Xs/zDrpZ7xNV2DVwd18jVdQ+7eu4RV981cA1dI9fCtXSt3BOutXvStXFP/SFe5BYjuA/derfB7XWfuHPuB3fUfe3Oux9dV9fN9XUvuX7uZdffveIGuIF/iIe7EW6kG+VGuzFurBv3h3iKm+qmueluhnvbzXSz/hAvdO+5OW6Jm+vmufluwc/xIrfYLXHvu6XuA7fMLXcr3Eq3yq12a9xat+5yrSvdJrfZbXF73Mdum9vudridbpfb/XN86Tj2uU/dfveZO+K+cgfd5+6QO+YOuy9/ji8d3zH3jTvuvnUn3El3yn3nTrvv3Rl39ufjv3Ts37mf3EUXHDCyYs2GI07H6TmFM3BGvooz8dWcma/hBF/LWfg6zsrXczbOzjk4J+fi3JyHLRM7Zo45L+fjJN/A+flGLsAFuRAXZs9FuCjfxMX4Zi7Ot3AJvpVL8m1ciktzGS7Lt3M5voPL851cge/iilyJK3MVvpur8j1cje/l6nwf1+D7uSY/wLX4Qa7ND3Ed/gvX5Ye5Hj/C9bkBN+RG3Jgf5Sb8GDflZtycH+cW3JJb8RPcmp/kNvwUt+WnGVJ/OUF34Oe4I3fizvw8d+EXuCt341RO5R78IvfkXtyb+3Bffon78cvcn1/hATyQB/GrPJhf4yH8Og/lYTycR/BIHsWjeQyP5XE8nt/gCfwmT+S3eBJP5ik8lafxdJ7Bb/NMnsWz+R2ew+/yXJ7H83kBL+T3eBEv5iX8Pi/lD3gZL+cVvJJX8Wpew2t5HX/I63kDb+RNvJm38Fb+iLfxdt7BO3kX7+Y9/DHv5U94H3/K+/kzPsB/5YP8OR/iL/gwf8lH+Cs+yl/zMf6Gj/O3fIJP8in+jk/z93yGz/I5/oHP8498gX/iixwYYoxVrGMTR3G6OH2cEmeIMx5YEWeKr44zx9fEifjaOEt8XZw1vj7OFmePc8Q541xx7jhPbGOKXcxxHOeN88XJ+IY4f3xjXCAuGBeKC8c+LhIXjW+Ki8U3x8XjW+IS8a1xyfi2uFRcOn74vrLx7XG5+I64fHxnXCG+K64YV4orx1Xiu+Oq8T1xtfjeuHp8X1w8vj+uGT8Q14ofjGvHD8V14r/EdeOH43rxI3H9uEHcMG4UN44fjZvEj8VN42Zx8/jxuEXcMm4VPxG3jp+M28RP/el8atw97hG/GL8Yh3Cvnp9ckFyYfC+5KLk4meHyZX1ZcnlyRXJlclVydXJNcm1yXfLD5PrkhuTG5Kbk5uSWZAhV0oNHr7z2xkc+nU/vU3wGn9Ff5TP5q31mf41P+Gt9Fn+dz+qv99l8dp/D5/S5fG6fx1tP3nn2sc/r8/mkv8Hn9zf6Ar6gL+QLe++L+KK+kW/sG/sm/jHf1Dfzzf3j/nHf0rf0T/gn/JO+jX/Kt/VP+3b+Gd/eP+uf9c/5jr6T7+yf9138C76r7+ZTfarv4Xv4nr6n7+17+76+r+/n+/n+vr8f4Af4QX6QH+wH+yF+iB/qh/rhfrgf6Uf60X60H+vH+vF+vJ/gJ/iJfqKf5Cf5KX6Kn+an+Rl+hp/pZ/rZfrafU2COn+vn+vl+vl/oF/pFfpFf4pf4pX6pX+aX+RV+hV/lV/k1fo1f59f59X693+g3+s1+s9/qt/ptfpvf4Xf4XX6X3+P3+L1+r9/n9/n9fr8/4A/4g/6gP+S/8If9l/6I/8of9V/7Y/4bf9x/60/4k/6U/86f9t/7M/6sP+d/8Of9j/6C/8lf9MGPT7yRmJB4MzEx8VZiUmJyYkpiamJaYnpiRuLtxMzErMTsxDuJOYl3E3MT8xLzEwsSCxPvJRYlFieWJN5PLE18kFiWWJ5YkViZWJVYnQgh97Y45A35ukG4IeQPN4YCoWAoFAoHH4qEouGmUCzcHIqHW0KJcGsoGW4LpULpUCY8EuqHBqFhaBQah0dDk/BYaBqahebh8dAitAytwhOhdXgytAlPhbbh6dAuPBPah2dDh/Bc6Bg6hc7h+dAlvBC6hm4hNXQPPcKLoWfoFXqHPqFveCn0Cy+H/uGVMCAMDIPCq2FweC0MCa+HoWFYGB5GhJFhVBgdxoSxYVwYH94IE8KbYWJ4K0wKk8OUMDVMC9PDjPB2mBlmhdnhnTAnvBvmhnlhflgQFob3wqKwOCwJ74el4YOwLCwPK8LKsCqsDmvC2rAu/HoLvClsDlvC1vBR2Ba2hx1hZ9gVdoc94eOwN3wS9oVPw/7wWTgQ/hoOhs/DofBFOBy+DEfCV+Fo+DocC9+E4+HbcCKcDKfCd+F0+D6cCWfDufBDOB9+DBfCT+Gi/M+aEEIIIcR/y4Q/me/+d36nLm+X9ACAq7fnPPz7eQ0AG7P9Mk5RuVokAODJbh0e+nWrWDE19fKjNyzTEOWbBwAJSPfr+p+/fyDxy3g5NIeW0BqaQbG/W18v7HSe/yR/8laAjL/mvlQT/C7u9mv+m/9+fjVqzp/mnwdQIN9vay49If4a/1Z/8f+f/Nmb/En+DJ+PB2j6uzWZ4Lf4t/xF4TF4Clr/zSuFEEIIIYQQQohf9FJl2v3Z8+2l5/Nc5rc16eG3eDngP3w+F0IIIYQQQgghxJX3TKfOTzzaunWzdmly0P0/o4z//IG+/Hb53VShkgBXvjAZ/G8NrvCJSQghhBBCCPEv99tN/5WuRAghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESLv+HV8ndqWPUQghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhLjS/r8AAAD//9LtH/I=") getdents64(r0, &(0x7f0000005900)=""/149, 0x95) 4m19.800257505s ago: executing program 3 (id=1443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f00000002c0), &(0x7f00000002c0)=""/157}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4m19.372109581s ago: executing program 33 (id=1443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f00000002c0), &(0x7f00000002c0)=""/157}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m31.828577845s ago: executing program 1 (id=2533): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x40b02) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0) 2m31.582647972s ago: executing program 7 (id=2536): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) 2m31.436258627s ago: executing program 1 (id=2537): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x24, &(0x7f0000000800)={[{0x1d, 0x4e00, "8a10fa72ff5b8865bae5fcd0bd9ae28544a5c2ce41a34d4236bd0fd0ff"}]}) 2m30.989082769s ago: executing program 7 (id=2540): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c090000000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m30.529414947s ago: executing program 2 (id=2544): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) 2m30.351721961s ago: executing program 7 (id=2545): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="2ed6020000000019f70587e26419fa879970ebb99a393900001f02cb4ebb32", 0x1f}], 0x1}, 0x4880) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) 2m30.164302231s ago: executing program 4 (id=2546): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000540)) 2m30.04378008s ago: executing program 2 (id=2548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008300000020000e801c00008004000380000200000100080211"], 0x34}}, 0x0) 2m29.779195468s ago: executing program 7 (id=2549): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001380)={0x2000}) 2m29.619164858s ago: executing program 4 (id=2550): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003e80)=@ipv6_getaddrlabel={0x1c, 0x4a, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 2m29.418254702s ago: executing program 7 (id=2551): syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file7\x00', 0x10000, &(0x7f0000000380)=ANY=[@ANYBLOB="00836ff72fade23c61cbd9945f8896d17cbdfd900654502a5633b10a0955c42d383bb9111515948df8004659731518e51d33257dc290a6e9970e3ec72b6f36a0d60119414ea3b3ead33927eabfc29fd10666aba01469c0eeea0b06b28a413b11ed189a780bc1ac8841fc3b9f24e33ce91f2edef46175c459a198b282fcd83d4bc8f2f36b9237605007f369df066c7d3133728ccbb0cd8be818de9f8b91912963a80b114202"], 0x1, 0x5e28, &(0x7f0000011a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FITRIM(r0, 0xc0185879, 0x0) 2m29.371243601s ago: executing program 0 (id=2552): unshare(0x22020600) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x10}, 0x10) 2m29.147540697s ago: executing program 4 (id=2554): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000940)='./bus\x00', 0x1010000, &(0x7f0000000600)={[{@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@shortname_win95}, {@utf8}, {@shortname_mixed}, {@utf8no}, {@fat=@showexec}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@shortname_lower}, {@fat=@check_strict}, {@uni_xlate}]}, 0x1, 0x363, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 2m29.034687789s ago: executing program 1 (id=2555): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000780)=[{&(0x7f0000000280)="fe7a", 0x2}], 0x1, 0x1, 0x0) 2m28.953539311s ago: executing program 0 (id=2556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c010000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c0001800b0001006e756d67656e00001c000280080002400000000008000140000000000800034000000001d00004802c0001800a00010071756f74610000001c0002800c00044000000000000000020c0001"], 0x154}}, 0x0) 2m28.902267857s ago: executing program 6 (id=2557): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x24, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0xd2, 0xb}, [@NDA_VLAN={0x6}]}, 0x24}}, 0x0) 2m28.77127939s ago: executing program 2 (id=2558): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) 2m28.54084544s ago: executing program 1 (id=2559): setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xd, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 2m28.426525904s ago: executing program 0 (id=2560): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="ee000000", @ANYRES16=0x0, @ANYBLOB="36b8c5d949c048d102000100000008000100", @ANYRES32, @ANYBLOB="c00002803c0001"], 0x5c}, 0x1, 0xf000, 0x0, 0x8c1}, 0x20040) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000008"], 0x118}], 0x1, 0x0, 0x0, 0x40}, 0x0) 2m28.359066046s ago: executing program 6 (id=2561): prctl$PR_SET_SECUREBITS(0x1c, 0x40) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) 2m28.262082371s ago: executing program 2 (id=2562): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRES32, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESDEC, @ANYRES64, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239e0442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87f38e08ed924527c0e45f594c78d32118cd03202a8875"], 0x1, 0xda6, &(0x7f0000006680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x80186e84, &(0x7f0000000800)={@desc={0x1, 0x0, @auto="0b2882a48f00"}}) 2m27.981120261s ago: executing program 6 (id=2563): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_robust_list(&(0x7f0000000640)={0x0, 0x3}, 0x18) 2m27.838623577s ago: executing program 1 (id=2564): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x0, 0x23, 0x3, {0x3, 0x21, "e6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m27.554188413s ago: executing program 4 (id=2565): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x2, 0x0, 0x402, 0x200000000000}) 2m27.43532266s ago: executing program 0 (id=2566): unshare(0x2a020480) r0 = mq_open(&(0x7f0000000100)='!selinuxselinux\x00', 0x6e93ebbbcc088553, 0x14, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x401, 0x0) 2m27.432679539s ago: executing program 6 (id=2567): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x970026, &(0x7f0000000380)=ANY=[@ANYBLOB='mode=00000000000000000000000,uid=', @ANYRESHEX=0x0]) 2m27.043941095s ago: executing program 0 (id=2568): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x228, &(0x7f0000000300)="$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") mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, 0x0) 2m26.979909189s ago: executing program 2 (id=2569): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x0, 0x1}, {0x50, 0x2}, @period={0x5d, 0x6, 0x2, 0x7f, 0x2, {0x1, 0x3, 0x4, 0x2}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 2m26.875976038s ago: executing program 6 (id=2570): r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8907, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 2m26.748550485s ago: executing program 4 (id=2571): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000052c0)=""/4086, 0xff6}], 0x1, 0x922, 0x0) 2m26.607715736s ago: executing program 0 (id=2572): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x905, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4c, 0x0, 0x38081, 0xda672aad9fad3374}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888, 0x0, 0x8801}, 0x20008004) 2m26.322186372s ago: executing program 7 (id=2573): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2m26.306122876s ago: executing program 4 (id=2574): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0x53}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x27) 2m26.168156372s ago: executing program 2 (id=2575): r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'batadv0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "c84222d73cd41ca0e96d60299b83e24038877f9b95f0edd6924c2ecd52821703", "9ec138aba62ea207e30c40525efa26f5c43abd20b5fb0b53be3add0b493b7f6c", "1fa3de7fac26dacbfeb51b53af4ef62ea17700", "68720530cf5ae6a8a517bfe229690be79379b87b129f047ed4d948c3cb3c8c78", "473676ffd175e7097a93814c76264c32ace7097e9f7f5119b613631b1567034d", "000000b658b85f0236796900", 0x1, 0x7fff, 0xffffce7f, 0x2, 0xffff}}) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 2m17.96320007s ago: executing program 6 (id=2576): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x801, &(0x7f0000000080), 0x64, 0x526, &(0x7f0000000740)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0xa4004, 0x97) finit_module(r0, 0x0, 0x3) 2m6.833302444s ago: executing program 1 (id=2577): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280), 0x8) 1m44.976831887s ago: executing program 34 (id=2572): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x905, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4c, 0x0, 0x38081, 0xda672aad9fad3374}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888, 0x0, 0x8801}, 0x20008004) 3.187740391s ago: executing program 35 (id=2575): r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'batadv0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "c84222d73cd41ca0e96d60299b83e24038877f9b95f0edd6924c2ecd52821703", "9ec138aba62ea207e30c40525efa26f5c43abd20b5fb0b53be3add0b493b7f6c", "1fa3de7fac26dacbfeb51b53af4ef62ea17700", "68720530cf5ae6a8a517bfe229690be79379b87b129f047ed4d948c3cb3c8c78", "473676ffd175e7097a93814c76264c32ace7097e9f7f5119b613631b1567034d", "000000b658b85f0236796900", 0x1, 0x7fff, 0xffffce7f, 0x2, 0xffff}}) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 0s ago: executing program 36 (id=2573): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) kernel console output (not intermixed with test programs): loop5: detected capacity change from 0 to 32768 [ 190.821231][ T9038] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1322 (9038) [ 190.821488][ T9057] erofs (device loop2): mounted with root inode @ nid 36. [ 190.894571][ T5829] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 190.904445][ T9038] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 190.916997][ T9038] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 190.930170][ T9038] BTRFS info (device loop5): using free-space-tree [ 190.937770][ T5829] bcachefs (loop3): marking filesystem clean [ 191.041348][ T9038] BTRFS info (device loop5): rebuilding free space tree [ 191.088202][ T5829] bcachefs (loop3): shutdown complete [ 191.151824][ T9079] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1334'. [ 191.171100][ T29] audit: type=1326 audit(1739833946.826:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.4.1335" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82d758cde9 code=0x0 [ 191.358007][ T5830] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 191.723110][ T9092] loop5: detected capacity change from 0 to 2048 [ 191.774633][ T9092] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.026828][ T5830] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 192.099192][ T5830] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 192.586277][ T9096] loop2: detected capacity change from 0 to 32768 [ 193.281568][ T9130] random: crng reseeded on system resumption [ 193.796784][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.803661][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.943390][ T9145] loop3: detected capacity change from 0 to 256 [ 194.005623][ T9145] FAT-fs (loop3): Directory bread(block 64) failed [ 194.018264][ T9145] FAT-fs (loop3): Directory bread(block 65) failed [ 194.047481][ T9145] FAT-fs (loop3): Directory bread(block 66) failed [ 194.061261][ T9145] FAT-fs (loop3): Directory bread(block 67) failed [ 194.088240][ T9145] FAT-fs (loop3): Directory bread(block 68) failed [ 194.111201][ T9145] FAT-fs (loop3): Directory bread(block 69) failed [ 194.117826][ T9145] FAT-fs (loop3): Directory bread(block 70) failed [ 194.211674][ T9145] FAT-fs (loop3): Directory bread(block 71) failed [ 194.218335][ T9145] FAT-fs (loop3): Directory bread(block 72) failed [ 194.263714][ T9145] FAT-fs (loop3): Directory bread(block 73) failed [ 194.280626][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.315314][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.325006][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.347515][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.361690][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 194.377421][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.490385][ T9161] loop2: detected capacity change from 0 to 16 [ 194.517847][ T9161] erofs (device loop2): mounted with root inode @ nid 36. [ 194.619570][ T9161] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 194.637274][ T9161] erofs (device loop2): failed to decompress -35 in[64, 4032] out[1851] [ 194.650004][ T9161] erofs (device loop2): read error -117 @ 43 of nid 36 [ 194.661320][ T9167] loop3: detected capacity change from 0 to 256 [ 195.069383][ T9178] loop3: detected capacity change from 0 to 1024 [ 195.112277][ T9143] chnl_net:caif_netlink_parms(): no params data found [ 195.165913][ T9178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.270184][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1384'. [ 195.337708][ T9165] loop4: detected capacity change from 0 to 32768 [ 195.361900][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.380374][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.391466][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.398820][ T9143] bridge_slave_0: entered allmulticast mode [ 195.406052][ T9143] bridge_slave_0: entered promiscuous mode [ 195.415000][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.447426][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.478057][ T51] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 195.488477][ T9143] bridge_slave_1: entered allmulticast mode [ 195.496649][ T9143] bridge_slave_1: entered promiscuous mode [ 195.579759][ T9143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.600946][ T9202] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1386'. [ 195.613303][ T9143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.623493][ T9202] unsupported nlmsg_type 40 [ 195.654764][ T9165] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 195.693983][ T9165] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 195.710414][ T9165] bcachefs (loop4): Version upgrade required: [ 195.710414][ T9165] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 195.710414][ T9165] Doing incompatible version upgrade from 0.8: (unknown version) to 1.20: directory_size [ 195.710414][ T9165] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 195.782008][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 195.799359][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.820840][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.833756][ T51] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 195.856384][ T9165] bcachefs (loop4): dropping and reconstructing all alloc info [ 195.864272][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.878581][ T9143] team0: Port device team_slave_0 added [ 195.892013][ T51] usb 3-1: config 0 descriptor?? [ 195.912283][ T9143] team0: Port device team_slave_1 added [ 195.919272][ T9165] bcachefs (loop4): accounting_read... done [ 195.951308][ T9165] bcachefs (loop4): alloc_read... done [ 195.965656][ T9165] bcachefs (loop4): stripes_read... done [ 195.983522][ T9165] bcachefs (loop4): snapshots_read... done [ 196.015252][ T9165] bcachefs (loop4): done starting filesystem [ 196.026663][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.051238][ T5836] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 196.051834][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.115520][ T9143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.129023][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.136480][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.163826][ T9143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.228748][ T5827] bcachefs (loop4): shutting down [ 196.243501][ T5836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.268113][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 196.310806][ T51] koneplus 0003:1E7D:2D51.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 196.317605][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.342181][ T5827] bcachefs (loop4): shutdown complete [ 196.347318][ T9143] hsr_slave_0: entered promiscuous mode [ 196.361272][ T5836] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 196.367188][ T9143] hsr_slave_1: entered promiscuous mode [ 196.385710][ T5836] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 196.401699][ T9143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.424476][ T5836] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 196.433003][ T9143] Cannot create hsr debugfs directory [ 196.441275][ T5836] usb 4-1: Manufacturer: syz [ 196.441440][ T5834] Bluetooth: hci2: command tx timeout [ 196.474279][ T5836] usb 4-1: config 0 descriptor?? [ 196.507076][ T51] koneplus 0003:1E7D:2D51.0010: couldn't init struct koneplus_device [ 196.525792][ T51] koneplus 0003:1E7D:2D51.0010: couldn't install mouse [ 196.542493][ T51] koneplus 0003:1E7D:2D51.0010: probe with driver koneplus failed with error -71 [ 196.564430][ T51] usb 3-1: USB disconnect, device number 9 [ 196.780509][ T9143] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.814240][ T9143] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.821261][ T5836] rc_core: IR keymap rc-hauppauge not found [ 196.821282][ T5836] Registered IR keymap rc-empty [ 196.821375][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 196.850419][ T9143] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 196.861605][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 196.871912][ T9143] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 196.894643][ T5836] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 196.942629][ T5836] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 196.982966][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.001313][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.021399][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.051637][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.101529][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.125881][ T9143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.133484][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.151271][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.191387][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.199654][ T9143] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.221241][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.230603][ T9221] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.1395'. [ 197.255714][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.282319][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.289460][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.293043][ T5836] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 197.320942][ T5836] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 197.340420][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.343862][ T5836] usb 4-1: USB disconnect, device number 6 [ 197.347557][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.865652][ T9143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.206488][ T9250] loop2: detected capacity change from 0 to 1024 [ 198.512679][ T5834] Bluetooth: hci2: command tx timeout [ 198.638903][ T9143] veth0_vlan: entered promiscuous mode [ 198.722958][ T9143] veth1_vlan: entered promiscuous mode [ 198.829537][ T9143] veth0_macvtap: entered promiscuous mode [ 198.868255][ T9143] veth1_macvtap: entered promiscuous mode [ 198.944408][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.976233][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.986774][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.998156][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.008793][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.019627][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.031492][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.044331][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.079207][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.097946][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.139891][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.173621][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.212611][ T9143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.250930][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.287269][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.311253][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.353398][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.391523][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.411360][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.435293][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.458298][ T9254] loop3: detected capacity change from 0 to 32768 [ 199.491118][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.516981][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.543743][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.576930][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.661066][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.687539][ T9281] loop2: detected capacity change from 0 to 1024 [ 199.701950][ T9281] EXT4-fs: Ignoring removed nobh option [ 199.702382][ T9143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.746491][ T9281] EXT4-fs: Ignoring removed bh option [ 199.763164][ T9143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.785396][ T9143] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.795404][ T9143] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.804851][ T9143] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.822504][ T9281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.849105][ T5829] read_mapping_page failed! [ 199.862206][ T5829] ERROR: (device loop3): txCommit: [ 199.862206][ T5829] [ 199.896089][ T5829] ERROR: (device loop3): remounting filesystem as read-only [ 200.043950][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.064518][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.083983][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.181423][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.211193][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.282171][ T51] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 200.305153][ T9300] netlink: 'syz.2.1426': attribute type 1 has an invalid length. [ 200.441453][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 200.458598][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 200.489122][ T51] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 200.533554][ T51] usb 2-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 200.543307][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.562381][ T51] usb 2-1: config 0 descriptor?? [ 200.591597][ T54] Bluetooth: hci2: command tx timeout [ 200.811266][ T5890] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 200.843678][ T9318] loop4: detected capacity change from 0 to 64 [ 200.978451][ T51] thrustmaster 0003:044F:B323.0011: item fetching failed at offset 0/3 [ 200.995412][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 201.001641][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 201.004547][ T5142] Bluetooth: hci5: command 0x0406 tx timeout [ 201.007634][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 201.020244][ T5890] usb 7-1: Using ep0 maxpacket: 8 [ 201.035656][ T5890] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 201.045679][ T51] thrustmaster 0003:044F:B323.0011: parse failed [ 201.052731][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.060872][ T51] thrustmaster 0003:044F:B323.0011: probe with driver thrustmaster failed with error -22 [ 201.071477][ T5890] usb 7-1: Product: syz [ 201.075667][ T5890] usb 7-1: Manufacturer: syz [ 201.080275][ T5890] usb 7-1: SerialNumber: syz [ 201.106268][ T5890] usb 7-1: config 0 descriptor?? [ 201.147740][ T5890] gspca_main: sq905-2.14.0 probing 2770:9120 [ 201.190205][ T51] usb 2-1: USB disconnect, device number 13 [ 201.379455][ T9312] loop2: detected capacity change from 0 to 32768 [ 201.588713][ T9312] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 2815,journal_flush_delay=1003,nojournal_transaction_names [ 201.662335][ T9312] bcachefs (loop2): initializing new filesystem [ 201.681674][ T9312] bcachefs (loop2): going read-write [ 201.731098][ T2926] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.743874][ T5890] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 201.760213][ T9312] bcachefs (loop2): marking superblocks [ 201.771861][ T5890] sq905 7-1:0.0: probe with driver sq905 failed with error -71 [ 201.792705][ T5890] usb 7-1: USB disconnect, device number 2 [ 201.950239][ T9312] bcachefs (loop2): initializing freespace [ 201.963219][ T9312] bcachefs (loop2): done initializing freespace [ 201.998858][ T9312] bcachefs (loop2): reading snapshots table [ 202.005179][ T9312] bcachefs (loop2): reading snapshots done [ 202.033717][ T9312] bcachefs (loop2): done starting filesystem [ 202.104322][ T2926] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.172077][ T9312] bcachefs (loop2): going read-only [ 202.201267][ T9312] bcachefs (loop2): finished waiting for writes to stop [ 202.277493][ T9312] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2 [ 202.319703][ T2926] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.397661][ T9312] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 2 [ 202.427370][ T9312] bcachefs (loop2): clean shutdown complete, journal seq 3 [ 202.437481][ T9312] bcachefs (loop2): marking filesystem clean [ 202.458085][ T9349] bcachefs (loop2): going read-write [ 202.542907][ T2926] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.671914][ T5834] Bluetooth: hci2: command tx timeout [ 202.729819][ T5831] bcachefs (loop2): shutting down [ 202.751040][ T5831] bcachefs (loop2): going read-only [ 202.756502][ T5831] bcachefs (loop2): finished waiting for writes to stop [ 202.923870][ T5831] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 202.988923][ T5831] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 203.168961][ T5831] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 203.181074][ T9360] loop6: detected capacity change from 0 to 65536 [ 203.207153][ T5831] bcachefs (loop2): marking filesystem clean [ 203.256431][ T9360] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 203.406312][ T9] XFS (loop6): Metadata corruption detected at xfs_buf_ioend+0x206/0x610, xfs_inode block 0x20 xfs_inode_buf_verify [ 203.423045][ T5831] bcachefs (loop2): shutdown complete [ 203.474724][ T9] XFS (loop6): Unmount and run xfs_repair [ 203.519413][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.528687][ T9] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 203.537846][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.551559][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.561900][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.572652][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 203.580621][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.583900][ T9] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 203.627487][ T2926] bridge_slave_1: left allmulticast mode [ 203.645897][ T2926] bridge_slave_1: left promiscuous mode [ 203.657639][ T2926] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.691175][ T9] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.718741][ T2926] bridge_slave_0: left allmulticast mode [ 203.741215][ T2926] bridge_slave_0: left promiscuous mode [ 203.751150][ T9] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 203.759189][ T2926] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.760776][ T9] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 0a 4.Xhz.DM........ [ 203.807880][ T9] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 203.827956][ T9] 00000050: 00 00 25 01 00 00 00 00 00 00 00 00 38 03 00 00 ..%.........8... [ 203.853776][ T9] 00000060: 00 ff ff ff da a2 56 a4 00 00 00 00 00 00 00 08 ......V......... [ 203.891423][ T9] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 203.921657][ T9360] XFS (loop6): metadata I/O error in "xfs_imap_to_bp+0x18d/0x380" at daddr 0x20 len 32 error 117 [ 203.932690][ T9360] XFS (loop6): Failed to read root inode 0x20, error 117 [ 203.940348][ T9360] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair. [ 204.507707][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1468'. [ 204.549297][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1468'. [ 204.580747][ T9402] netlink: 'syz.4.1468': attribute type 14 has an invalid length. [ 204.609721][ T9402] netlink: 'syz.4.1468': attribute type 11 has an invalid length. [ 204.768020][ T29] audit: type=1326 audit(1739833960.426:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.6.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad778cde9 code=0x7ffc0000 [ 204.806352][ T9412] loop6: detected capacity change from 0 to 512 [ 204.854747][ T29] audit: type=1326 audit(1739833960.426:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.6.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad778cde9 code=0x7ffc0000 [ 204.926418][ T29] audit: type=1326 audit(1739833960.456:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.6.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffad778cde9 code=0x7ffc0000 [ 204.989450][ T9412] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.020166][ T9412] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.054541][ T29] audit: type=1326 audit(1739833960.456:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.6.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffad778ce23 code=0x7ffc0000 [ 205.157977][ T29] audit: type=1326 audit(1739833960.456:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.6.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffad778b89f code=0x7ffc0000 [ 205.228939][ T29] audit: type=1326 audit(1739833960.466:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.6.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ffad778ce77 code=0x7ffc0000 [ 205.333340][ T29] audit: type=1326 audit(1739833960.466:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.6.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffad778b750 code=0x7ffc0000 [ 205.344179][ T9143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.458427][ T29] audit: type=1326 audit(1739833960.466:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.6.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffad778c9eb code=0x7ffc0000 [ 205.550461][ T29] audit: type=1326 audit(1739833960.486:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.6.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffad778ba4a code=0x7ffc0000 [ 205.622532][ T29] audit: type=1326 audit(1739833960.486:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.6.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffad778ba4a code=0x7ffc0000 [ 205.646306][ T5846] Bluetooth: hci1: command tx timeout [ 206.149239][ T2926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.183945][ T2926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.231302][ T2926] bond0 (unregistering): Released all slaves [ 206.567426][ T9437] loop4: detected capacity change from 0 to 736 [ 207.711392][ T5846] Bluetooth: hci1: command tx timeout [ 207.754312][ T9385] chnl_net:caif_netlink_parms(): no params data found [ 208.191467][ T2926] hsr_slave_0: left promiscuous mode [ 208.197577][ T2926] hsr_slave_1: left promiscuous mode [ 208.203868][ T2926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.211820][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.234478][ T2926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.270418][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.397632][ T2926] veth1_macvtap: left promiscuous mode [ 208.413966][ T2926] veth0_macvtap: left promiscuous mode [ 208.431909][ T2926] veth1_vlan: left promiscuous mode [ 208.448908][ T2926] veth0_vlan: left promiscuous mode [ 208.848030][ T9475] loop6: detected capacity change from 0 to 32768 [ 208.957299][ T9475] find_entry called with index >= next_index [ 208.987952][ T9475] find_entry called with index >= next_index [ 209.018308][ T9475] find_entry called with index >= next_index [ 209.089208][ T9497] loop4: detected capacity change from 0 to 1024 [ 209.222541][ T9497] hfsplus: bad catalog entry type [ 209.302788][ T66] hfsplus: b-tree write err: -5, ino 4 [ 209.565614][ T9505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1502'. [ 209.801152][ T5846] Bluetooth: hci1: command tx timeout [ 210.814506][ T2926] team0 (unregistering): Port device team_slave_1 removed [ 210.857062][ T9546] loop6: detected capacity change from 0 to 256 [ 211.001552][ T2926] team0 (unregistering): Port device team_slave_0 removed [ 211.144467][ T9554] loop6: detected capacity change from 0 to 1024 [ 211.302305][ T12] hfsplus: b-tree write err: -5, ino 4 [ 211.819569][ T9522] tipc: Started in network mode [ 211.831445][ T9522] tipc: Node identity 5f0000000000000004, cluster identity 4711 [ 211.872177][ T5846] Bluetooth: hci1: command tx timeout [ 211.896594][ T9385] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.904042][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.911401][ T9385] bridge_slave_0: entered allmulticast mode [ 211.918557][ T9385] bridge_slave_0: entered promiscuous mode [ 212.001828][ T9385] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.008961][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.058580][ T9385] bridge_slave_1: entered allmulticast mode [ 212.085883][ T9385] bridge_slave_1: entered promiscuous mode [ 212.205689][ T9385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.259959][ T9385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.495101][ T9385] team0: Port device team_slave_0 added [ 212.620821][ T9385] team0: Port device team_slave_1 added [ 212.896811][ T9385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.933548][ T9385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.051139][ T9385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.155600][ T9597] loop4: detected capacity change from 0 to 4096 [ 213.213997][ T9385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.244943][ T9385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.340448][ T9568] loop6: detected capacity change from 0 to 32768 [ 213.354600][ T9385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.373917][ T9568] btrfs: Deprecated parameter 'usebackuproot' [ 213.393816][ T9600] tipc: Enabled bearer , priority 10 [ 213.395567][ T9568] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 213.497772][ T9568] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1530 (9568) [ 213.601121][ T9568] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 213.652691][ T9568] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 213.686047][ T9568] BTRFS info (device loop6): using free-space-tree [ 213.763001][ T9621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1549'. [ 213.798977][ T9385] hsr_slave_0: entered promiscuous mode [ 213.823330][ T9385] hsr_slave_1: entered promiscuous mode [ 213.846379][ T9385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.857652][ T9385] Cannot create hsr debugfs directory [ 213.889024][ T66] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 213.912250][ T9568] BTRFS error (device loop6): failed to load root extent [ 213.951308][ T9568] BTRFS warning (device loop6): try to load backup roots slot 1 [ 213.959388][ T66] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 213.995433][ T9568] BTRFS warning (device loop6): couldn't read tree root [ 214.015233][ T9568] BTRFS warning (device loop6): try to load backup roots slot 2 [ 214.051763][ T66] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 214.075540][ T9568] BTRFS warning (device loop6): couldn't read tree root [ 214.085904][ T9568] BTRFS warning (device loop6): try to load backup roots slot 3 [ 214.141407][ T9568] BTRFS info (device loop6): rebuilding free space tree [ 214.226789][ T9568] BTRFS info (device loop6): checking UUID tree [ 214.428353][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'. [ 214.523134][ T25] tipc: Node number set to 1526726656 [ 214.610283][ T9385] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 214.641179][ T5890] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 214.686435][ T9385] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 214.749165][ T9143] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.813055][ T9385] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 214.840803][ T5890] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.865755][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.928915][ T5890] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 214.942460][ T9385] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 214.961042][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 214.969064][ T5890] usb 5-1: SerialNumber: syz [ 215.254910][ T5890] usb 5-1: 0:2 : does not exist [ 215.310620][ T5890] usb 5-1: unit 4 not found! [ 215.338461][ T9385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.438275][ T5890] usb 5-1: USB disconnect, device number 6 [ 215.438496][ T9385] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.549530][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.556730][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.618693][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.625908][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.674782][ T9682] loop6: detected capacity change from 0 to 512 [ 215.721057][ T9682] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 215.816645][ T9385] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.844850][ T6020] udevd[6020]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.849777][ T9682] EXT4-fs (loop6): 1 truncate cleaned up [ 215.860955][ T9385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.992314][ T9682] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.312321][ T9143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.545322][ T9665] loop2: detected capacity change from 0 to 32768 [ 216.564597][ T9385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.595639][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 216.595660][ T29] audit: type=1326 audit(1739833972.246:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad778cde9 code=0x7ff00000 [ 216.713900][ T9665] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 216.717200][ T29] audit: type=1326 audit(1739833972.246:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad778cde9 code=0x7ff00000 [ 216.795943][ T29] audit: type=1326 audit(1739833972.246:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad778cde9 code=0x7ff00000 [ 216.911365][ T29] audit: type=1326 audit(1739833972.246:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad778cde9 code=0x7ff00000 [ 216.953889][ T5831] ocfs2: Unmounting device (7,2) on (node local) [ 217.013424][ T29] audit: type=1326 audit(1739833972.246:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad778cde9 code=0x7ff00000 [ 217.094295][ T29] audit: type=1326 audit(1739833972.246:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad778cde9 code=0x7ff00000 [ 217.187285][ T9692] loop4: detected capacity change from 0 to 32768 [ 217.199383][ T29] audit: type=1326 audit(1739833972.246:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad778cde9 code=0x7ff00000 [ 217.320858][ T29] audit: type=1326 audit(1739833972.246:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad778cde9 code=0x7ff00000 [ 217.401110][ T29] audit: type=1326 audit(1739833972.246:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad778cde9 code=0x7ff00000 [ 217.512590][ T29] audit: type=1326 audit(1739833972.246:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.6.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad778cde9 code=0x7ff00000 [ 217.591428][ T9385] veth0_vlan: entered promiscuous mode [ 217.647424][ T9385] veth1_vlan: entered promiscuous mode [ 217.753776][ T9385] veth0_macvtap: entered promiscuous mode [ 217.790945][ T9385] veth1_macvtap: entered promiscuous mode [ 217.873061][ T9385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.911392][ T9385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.948679][ T9385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.991063][ T9385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.000930][ T9385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.049199][ T9385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.070094][ T9385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.111234][ T9385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.141123][ T9385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.154720][ T9743] loop4: detected capacity change from 0 to 256 [ 218.168901][ T9385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.221061][ T9385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.251178][ T9385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.272803][ T9385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.324570][ T9385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.371098][ T9385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.380961][ T9385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.411075][ T9385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.420937][ T9385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.514163][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'. [ 218.514940][ T9385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.561140][ T9385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.611065][ T9385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.620914][ T9385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.671163][ T9385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.692973][ T9385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.721105][ T9385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.742271][ T9385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.797551][ T9385] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.829077][ T9385] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.851080][ T9385] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.859903][ T9385] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.944389][ T9753] netlink: 'syz.2.1585': attribute type 1 has an invalid length. [ 219.187647][ T795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.220953][ T795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.386779][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.444918][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.012164][ T9789] autofs: Bad value for 'fd' [ 220.442801][ T9764] loop2: detected capacity change from 0 to 32768 [ 220.520768][ T9764] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 220.795886][ T9764] XFS (loop2): Ending clean mount [ 220.851288][ T9764] XFS (loop2): Quotacheck needed: Please wait. [ 220.938600][ T9764] XFS (loop2): Quotacheck: Done. [ 221.073894][ T5831] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 221.353448][ T9830] devtmpfs: Bad value for 'nr_blocks' [ 222.073178][ T9836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.386199][ T29] kauditd_printk_skb: 1938 callbacks suppressed [ 222.386221][ T29] audit: type=1326 audit(1739833978.046:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.0.1611" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19dbd8cde9 code=0x0 [ 222.656667][ T9829] loop6: detected capacity change from 0 to 40427 [ 222.675428][ T9839] loop4: detected capacity change from 0 to 32768 [ 222.682323][ T9829] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 222.721797][ T9829] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 222.789796][ T9829] F2FS-fs (loop6): invalid crc value [ 222.838531][ T9829] F2FS-fs (loop6): Found nat_bits in checkpoint [ 222.899141][ T9839] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 2815,journal_flush_delay=1003,nojournal_transaction_names [ 222.981911][ T9839] bcachefs (loop4): initializing new filesystem [ 223.037962][ T9839] bcachefs (loop4): going read-write [ 223.085881][ T9839] bcachefs (loop4): marking superblocks [ 223.147261][ T9829] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 223.185468][ T9839] bcachefs (loop4): initializing freespace [ 223.199134][ T9829] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 223.230155][ T9839] bcachefs (loop4): done initializing freespace [ 223.263140][ T9839] bcachefs (loop4): reading snapshots table [ 223.291176][ T9839] bcachefs (loop4): reading snapshots done [ 223.348438][ T9839] bcachefs (loop4): done starting filesystem [ 223.598601][ T9909] loop7: detected capacity change from 0 to 64 [ 223.648691][ T9839] bcachefs (loop4): going read-only [ 223.724450][ T9839] bcachefs (loop4): finished waiting for writes to stop [ 223.795663][ T9839] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2 [ 224.051370][ T9839] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 2 [ 224.114363][ T9839] bcachefs (loop4): clean shutdown complete, journal seq 3 [ 224.149833][ T9839] bcachefs (loop4): marking filesystem clean [ 224.199476][ T9912] bcachefs (loop4): going read-write [ 224.300848][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1621'. [ 224.534864][ T5827] bcachefs (loop4): shutting down [ 224.551667][ T5827] bcachefs (loop4): going read-only [ 224.579231][ T5827] bcachefs (loop4): finished waiting for writes to stop [ 224.637560][ T5827] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 224.670524][ T5827] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 224.732775][ T5827] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 224.745786][ T9946] loop6: detected capacity change from 0 to 1024 [ 224.774118][ T5827] bcachefs (loop4): marking filesystem clean [ 224.918089][ T5827] bcachefs (loop4): shutdown complete [ 224.938472][ T9949] loop2: detected capacity change from 0 to 2048 [ 225.018572][ T9949] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 225.054511][ T9949] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.328944][ T9967] loop7: detected capacity change from 0 to 256 [ 225.394728][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1640'. [ 225.504667][ T9967] FAT-fs (loop7): Directory bread(block 64) failed [ 225.531179][ T9967] FAT-fs (loop7): Directory bread(block 65) failed [ 225.538008][ T9967] FAT-fs (loop7): Directory bread(block 66) failed [ 225.548951][ T9967] FAT-fs (loop7): Directory bread(block 67) failed [ 225.561225][ T9967] FAT-fs (loop7): Directory bread(block 68) failed [ 225.576126][ T9967] FAT-fs (loop7): Directory bread(block 69) failed [ 225.584871][ T9967] FAT-fs (loop7): Directory bread(block 70) failed [ 225.593072][ T9967] FAT-fs (loop7): Directory bread(block 71) failed [ 225.599839][ T9967] FAT-fs (loop7): Directory bread(block 72) failed [ 225.606851][ T9967] FAT-fs (loop7): Directory bread(block 73) failed [ 225.639777][ T9967] syz.7.1643: attempt to access beyond end of device [ 225.639777][ T9967] loop7: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 225.703742][ T9967] syz.7.1643: attempt to access beyond end of device [ 225.703742][ T9967] loop7: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 225.717346][ T5889] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 225.751316][ T29] audit: type=1800 audit(1739833981.406:2055): pid=9967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1643" name="memory.events" dev="loop7" ino=199 res=0 errno=0 [ 225.881382][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 225.892142][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.933251][ T5889] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 225.952653][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1648'. [ 225.964821][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.037028][ T5889] usb 3-1: config 0 descriptor?? [ 226.163008][ T9991] loop7: detected capacity change from 0 to 1024 [ 226.519714][ T5889] lenovo 0003:17EF:6062.0012: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.2-1/input0 [ 226.699490][ T51] usb 3-1: USB disconnect, device number 10 [ 227.687378][T10041] loop2: detected capacity change from 0 to 4096 [ 227.764604][T10041] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 227.930484][T10041] ntfs3(loop2): ino=1a, mi_enum_attr [ 227.950744][T10041] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 228.011210][T10041] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 228.531439][T10075] atomic_op ffff888058b75998 conn xmit_atomic 0000000000000000 [ 228.643708][T10078] syz.4.1677: attempt to access beyond end of device [ 228.643708][T10078] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 228.685872][ T58] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 228.837213][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 228.862651][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1681'. [ 229.411731][T10116] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1686'. [ 229.604664][T10124] loop2: detected capacity change from 0 to 256 [ 229.800725][T10124] FAT-fs (loop2): Directory bread(block 64) failed [ 229.841580][T10124] FAT-fs (loop2): Directory bread(block 65) failed [ 229.848225][T10124] FAT-fs (loop2): Directory bread(block 66) failed [ 229.884359][T10124] FAT-fs (loop2): Directory bread(block 67) failed [ 229.931770][T10124] FAT-fs (loop2): Directory bread(block 68) failed [ 229.951260][T10124] FAT-fs (loop2): Directory bread(block 69) failed [ 229.957881][T10124] FAT-fs (loop2): Directory bread(block 70) failed [ 230.044107][T10124] FAT-fs (loop2): Directory bread(block 71) failed [ 230.097166][T10124] FAT-fs (loop2): Directory bread(block 72) failed [ 230.116269][T10124] FAT-fs (loop2): Directory bread(block 73) failed [ 230.187412][T10144] loop4: detected capacity change from 0 to 64 [ 230.290486][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.401906][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 230.571321][ T5934] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 230.663713][T10156] loop4: detected capacity change from 0 to 2048 [ 230.665752][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.712062][T10161] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1700'. [ 230.745509][T10156] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.773751][T10163] netlink: 'syz.2.1702': attribute type 1 has an invalid length. [ 230.810840][ T5934] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 230.841122][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.882193][ T5934] usb 2-1: config 0 descriptor?? [ 230.906510][ T5934] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 230.941128][ T5934] dw2102: su3000_power_ctrl: 1, initialized 0 [ 230.987481][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 231.016226][ T5934] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 231.058983][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.127146][ T5934] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 231.167446][ T5934] usb 2-1: USB disconnect, device number 14 [ 231.275723][T10174] loop4: detected capacity change from 0 to 1764 [ 231.338830][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.376530][T10174] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 231.693985][ T35] bridge_slave_1: left allmulticast mode [ 231.694235][ T35] bridge_slave_1: left promiscuous mode [ 231.694482][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.728382][ T35] bridge_slave_0: left allmulticast mode [ 231.728413][ T35] bridge_slave_0: left promiscuous mode [ 231.728590][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.965993][T10159] loop7: detected capacity change from 0 to 32768 [ 231.978710][T10159] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 232.093767][ T5934] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 232.254579][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 232.272736][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.305236][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.345594][ T5934] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 232.411212][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.453020][ T5934] usb 2-1: config 0 descriptor?? [ 232.463614][T10159] XFS (loop7): Ending clean mount [ 232.556127][T10159] XFS (loop7): Quotacheck needed: Please wait. [ 232.677535][T10159] XFS (loop7): Quotacheck: Done. [ 232.921487][ T5934] hid-multitouch 0003:1FD2:6007.0013: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 232.939288][ T9385] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 233.129551][ T5889] usb 2-1: USB disconnect, device number 15 [ 233.439474][T10217] loop2: detected capacity change from 0 to 8 [ 233.675411][T10219] loop7: detected capacity change from 0 to 16 [ 233.710668][T10219] erofs (device loop7): mounted with root inode @ nid 36. [ 233.774424][T10219] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 233.826989][T10219] erofs (device loop7): failed to decompress -44 in[46, 4050] out[1851] [ 233.875234][T10219] erofs (device loop7): read error -117 @ 43 of nid 36 [ 234.451994][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.501510][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.531709][ T35] bond0 (unregistering): Released all slaves [ 234.598386][T10244] loop2: detected capacity change from 0 to 4096 [ 234.875140][T10258] netlink: 'syz.0.1741': attribute type 1 has an invalid length. [ 235.391372][ T51] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 235.584189][ T51] usb 7-1: Using ep0 maxpacket: 16 [ 235.609231][ T51] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.671080][ T51] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.748118][ T51] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 235.791992][ T51] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 235.828754][ T51] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.861848][ T51] usb 7-1: config 0 descriptor?? [ 236.180294][ T35] hsr_slave_0: left promiscuous mode [ 236.192023][ T35] hsr_slave_1: left promiscuous mode [ 236.202138][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.221263][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.267273][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.323704][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.426612][ T51] logitech 0003:046D:C20E.0014: rdesc size test failed for formula gp [ 236.468119][ T51] logitech 0003:046D:C20E.0014: unbalanced collection at end of report description [ 236.479417][ T35] veth1_macvtap: left promiscuous mode [ 236.491440][ T35] veth0_macvtap: left promiscuous mode [ 236.497081][ T35] veth1_vlan: left promiscuous mode [ 236.508836][ T51] logitech 0003:046D:C20E.0014: parse failed [ 236.538190][ T51] logitech 0003:046D:C20E.0014: probe with driver logitech failed with error -22 [ 236.551198][ T35] veth0_vlan: left promiscuous mode [ 236.673960][ T5889] usb 7-1: USB disconnect, device number 3 [ 237.847077][T10331] loop7: detected capacity change from 0 to 32768 [ 237.919235][T10331] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 238.047546][T10331] XFS (loop7): Ending clean mount [ 238.053443][T10335] loop6: detected capacity change from 0 to 4096 [ 238.104544][T10335] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.150565][ T35] team0 (unregistering): Port device team_slave_1 removed [ 238.195534][ T9385] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 238.197085][T10335] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 238.252726][ T35] team0 (unregistering): Port device team_slave_0 removed [ 238.318940][ T9143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.673007][T10373] loop6: detected capacity change from 0 to 512 [ 239.701108][T10373] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 239.744315][T10373] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 239.758609][T10373] System zones: 1-12 [ 239.781232][T10373] EXT4-fs (loop6): 1 truncate cleaned up [ 239.787919][T10373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.029477][ T9143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.139193][T10370] loop7: detected capacity change from 0 to 32768 [ 240.304939][T10392] netlink: 'syz.0.1784': attribute type 1 has an invalid length. [ 240.411913][T10392] netlink: 'syz.0.1784': attribute type 8 has an invalid length. [ 240.434930][T10392] netlink: 134664 bytes leftover after parsing attributes in process `syz.0.1784'. [ 241.857782][T10393] loop2: detected capacity change from 0 to 32768 [ 242.586379][T10460] loop4: detected capacity change from 0 to 164 [ 242.712210][T10460] rock: directory entry would overflow storage [ 242.718664][T10460] rock: sig=0x4f50, size=4, remaining=3 [ 242.779935][T10460] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 242.861445][T10467] pim6reg: entered allmulticast mode [ 242.866955][T10470] pim6reg: left allmulticast mode [ 243.742021][T10495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.532096][T10471] loop7: detected capacity change from 0 to 40427 [ 244.568851][T10471] F2FS-fs (loop7): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 244.619354][T10471] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 244.667954][T10471] F2FS-fs (loop7): invalid crc value [ 244.716500][T10471] F2FS-fs (loop7): Found nat_bits in checkpoint [ 244.878417][T10471] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 244.931128][T10471] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 245.202889][ T3512] kworker/u8:10: attempt to access beyond end of device [ 245.202889][ T3512] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 245.273665][ T3512] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 246.113855][ T29] audit: type=1326 audit(1739834001.766:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10584 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d758cde9 code=0x7ffc0000 [ 246.227167][ T29] audit: type=1326 audit(1739834001.766:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10584 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d758cde9 code=0x7ffc0000 [ 246.337029][ T29] audit: type=1326 audit(1739834001.776:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10584 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f82d758cde9 code=0x7ffc0000 [ 246.425452][ T29] audit: type=1326 audit(1739834001.776:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10584 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d758cde9 code=0x7ffc0000 [ 246.510384][ T29] audit: type=1326 audit(1739834001.776:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10584 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d758cde9 code=0x7ffc0000 [ 246.541403][ T5934] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 246.604128][ T29] audit: type=1326 audit(1739834001.776:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10584 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f82d758cde9 code=0x7ffc0000 [ 246.654244][ T29] audit: type=1326 audit(1739834001.776:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10584 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d758cde9 code=0x7ffc0000 [ 246.736209][ T5934] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 246.744807][ T5934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.791214][ T5934] usb 2-1: config 0 has no interface number 0 [ 246.820072][ T5934] usb 2-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 246.912272][ T5934] usb 2-1: config 0 interface 52 has no altsetting 0 [ 246.933821][T10606] block nbd7: NBD_DISCONNECT [ 246.941218][ T5934] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 246.981045][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 247.008417][ T5934] usb 2-1: Product: syz [ 247.015759][T10569] loop6: detected capacity change from 0 to 32768 [ 247.027396][ T5934] usb 2-1: SerialNumber: syz [ 247.043320][ T5934] usb 2-1: config 0 descriptor?? [ 247.162289][T10569] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 247.267057][ T5934] usb 2-1: Can not set alternate setting to 1, error: -71 [ 247.274880][ T29] audit: type=1326 audit(1739834002.926:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.2.1862" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a80d8cde9 code=0x0 [ 247.306180][ T5934] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -71 [ 247.339578][ T5934] usb 2-1: USB disconnect, device number 16 [ 247.463934][T10569] XFS (loop6): Ending clean mount [ 247.512413][T10569] XFS (loop6): Quotacheck needed: Please wait. [ 247.568725][T10635] cifs: Bad value for 'port' [ 247.596437][T10569] XFS (loop6): Quotacheck: Done. [ 247.764031][ T9143] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 247.883278][T10639] netlink: 1264 bytes leftover after parsing attributes in process `syz.7.1864'. [ 248.125587][T10610] loop4: detected capacity change from 0 to 32768 [ 248.262266][T10610] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 248.436455][T10664] netlink: 'syz.6.1865': attribute type 33 has an invalid length. [ 248.488553][T10664] netlink: 'syz.6.1865': attribute type 3 has an invalid length. [ 248.546018][T10610] XFS (loop4): Ending clean mount [ 248.553849][T10664] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.1865'. [ 248.727347][ T5827] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 248.756622][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1874'. [ 249.334343][T10697] loop2: detected capacity change from 0 to 512 [ 249.443516][T10697] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1882: corrupted in-inode xattr: invalid ea_ino [ 249.523378][T10697] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1882: couldn't read orphan inode 15 (err -117) [ 249.539325][T10697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.656932][T10710] tipc: Started in network mode [ 249.718466][T10710] tipc: Node identity ac14140f, cluster identity 4711 [ 249.766553][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.775959][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 249.787135][T10710] tipc: Enabled bearer , priority 10 [ 249.991124][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 250.024751][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.058789][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.120371][ T25] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 250.147478][T10731] netlink: 'syz.7.1893': attribute type 1 has an invalid length. [ 250.159820][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.205382][ T25] usb 2-1: config 0 descriptor?? [ 250.466102][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1897'. [ 250.617866][ T25] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x0 [ 250.617907][ T25] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x0 [ 250.617933][ T25] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x0 [ 250.617957][ T25] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x0 [ 250.629636][ T25] konepure 0003:1E7D:2DB4.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 250.635186][T10748] ptrace attach of "./syz-executor exec"[5835] was attempted by "i"[10748] [ 250.819668][ T25] usb 2-1: USB disconnect, device number 17 [ 250.842756][T10752] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1901'. [ 250.911464][ T5889] tipc: Node number set to 2886997007 [ 250.927570][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1903'. [ 251.271409][ T5934] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 251.453966][ T5934] usb 7-1: Using ep0 maxpacket: 8 [ 251.482454][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.523335][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.565906][ T5934] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 251.620232][ T5934] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 251.648624][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.688108][ T5934] usb 7-1: config 0 descriptor?? [ 252.132596][ T5934] uclogic 0003:28BD:0094.0016: interface is invalid, ignoring [ 252.223599][T10806] xt_hashlimit: max too large, truncated to 1048576 [ 252.345401][ T9] usb 7-1: USB disconnect, device number 4 [ 252.766522][T10783] loop2: detected capacity change from 0 to 32768 [ 252.820568][T10783] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 252.960467][T10783] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 253.145069][ T29] audit: type=1800 audit(1739834008.806:2064): pid=10783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1912" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 253.201839][T10841] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1930'. [ 253.243015][ T5831] ocfs2: Unmounting device (7,2) on (node local) [ 254.356035][T10871] loop2: detected capacity change from 0 to 1024 [ 254.389627][T10871] EXT4-fs: Ignoring removed orlov option [ 254.426271][T10871] EXT4-fs: Ignoring removed orlov option [ 254.549788][T10871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.571206][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 254.631886][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1947'. [ 254.668073][T10886] tipc: Started in network mode [ 254.694345][T10886] tipc: Node identity aef4677d09d8, cluster identity 4711 [ 254.705983][T10871] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.2.1940: corrupted in-inode xattr: bad magic number in in-inode xattr [ 254.706175][T10886] tipc: Enabled bearer , priority 10 [ 254.771541][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.783896][T10871] EXT4-fs (loop2): Remounting filesystem read-only [ 254.803563][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.852645][ T25] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 254.892843][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.947329][ T25] usb 5-1: config 0 descriptor?? [ 254.963072][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.234045][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.241423][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.377912][T10904] loop7: detected capacity change from 0 to 4096 [ 255.411495][ T25] steelseries 0003:1038:12B6.0017: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 255.577663][T10904] ntfs3(loop7): failed to convert "0080" to cp850 [ 255.616010][ T25] steelseries 0003:1038:12B6.0017: hid_hw_raw_request() failed with -71 [ 255.650898][T10904] ntfs3(loop7): failed to convert name for inode 1e. [ 255.657238][ T25] usb 5-1: USB disconnect, device number 7 [ 255.701246][ T5890] tipc: Node number set to 2804705149 [ 255.719724][T10904] ntfs3(loop7): ino=1f, mi_enum_attr [ 255.763072][T10904] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 255.818234][T10904] ntfs3(loop7): ino=1f, mi_enum_attr [ 256.088150][T10932] loop2: detected capacity change from 0 to 1024 [ 256.225028][T10932] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 256.533500][T10902] loop6: detected capacity change from 0 to 32768 [ 256.584587][T10902] XFS: ikeep mount option is deprecated. [ 256.771528][T10902] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 256.932648][T10902] XFS (loop6): Ending clean mount [ 256.966960][T10902] XFS (loop6): Quotacheck needed: Please wait. [ 257.131091][T10902] XFS (loop6): Quotacheck: Done. [ 257.545378][T10980] loop2: detected capacity change from 0 to 1024 [ 257.566548][ T9143] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 257.607055][T10980] hfsplus: bad catalog entry type [ 257.619871][T10940] loop4: detected capacity change from 0 to 32768 [ 257.662111][T10940] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1961 (10940) [ 257.711431][T10940] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.767335][T10940] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 257.807614][T10940] BTRFS info (device loop4): using free-space-tree [ 258.204887][T10940] BTRFS info (device loop4): rebuilding free space tree [ 258.439279][ T29] audit: type=1800 audit(1739834014.076:2065): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1961" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 258.442866][T10940] fs-verity: sha512 using implementation "sha512-avx2" [ 258.528601][T11020] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1982'. [ 258.617057][T10940] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) [ 258.914596][T11038] loop6: detected capacity change from 0 to 64 [ 258.917432][T11037] loop7: detected capacity change from 0 to 512 [ 258.939664][ T5827] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 259.031718][T11037] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #15: comm syz.7.1986: casefold flag without casefold feature [ 259.075022][T11037] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.1986: couldn't read orphan inode 15 (err -117) [ 259.127122][T11037] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.144822][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 259.328857][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 259.376662][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.409565][ T8] usb 3-1: Product: syz [ 259.409797][ T9385] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.426810][ T8] usb 3-1: Manufacturer: syz [ 259.454092][ T8] usb 3-1: SerialNumber: syz [ 259.523052][ T8] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 259.666612][ T5934] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 259.718895][T11055] loop7: detected capacity change from 0 to 1024 [ 259.755918][ T5889] kernel write not supported for file /snd/midiC2D0 (pid: 5889 comm: kworker/1:3) [ 259.768785][T11055] EXT4-fs: Ignoring removed orlov option [ 259.816462][T11055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.873738][T11055] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.290673][ T9385] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.945151][T11088] sp0: Synchronizing with TNC [ 261.041166][ T5890] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 261.308196][ T5890] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 261.371522][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.446736][ T5890] usb 7-1: Product: syz [ 261.473176][ T5890] usb 7-1: Manufacturer: syz [ 261.501589][ T5890] usb 7-1: SerialNumber: syz [ 261.718965][T11091] can0: slcan on ptm0. [ 261.837108][ T5890] usb 7-1: can't set config #1, error -71 [ 261.908117][ T5890] usb 7-1: USB disconnect, device number 5 [ 262.291287][T11061] loop4: detected capacity change from 0 to 40427 [ 262.371073][T11061] F2FS-fs (loop4): Found nat_bits in checkpoint [ 262.382701][T11091] can0 (unregistered): slcan off ptm0. [ 262.773345][ T51] IPVS: starting estimator thread 0... [ 262.781168][T11061] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 262.921561][T11106] IPVS: using max 18 ests per chain, 43200 per kthread [ 262.974423][ T5934] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 263.214196][ T9] usb 3-1: USB disconnect, device number 11 [ 263.226190][ T5934] ath9k_htc: Failed to initialize the device [ 263.241294][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 263.611581][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 263.772634][T11128] loop2: detected capacity change from 0 to 512 [ 263.780841][T11128] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 263.801118][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 263.822905][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 263.833212][T11128] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.2019: bad orphan inode 131083 [ 263.844276][ T8] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 263.871456][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.880631][T11128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.904044][ T8] usb 2-1: Product: syz [ 263.908979][T11133] loop4: detected capacity change from 0 to 1024 [ 263.916909][ T8] usb 2-1: Manufacturer: syz [ 263.932065][ T8] usb 2-1: SerialNumber: syz [ 263.972006][ T8] usb 2-1: config 0 descriptor?? [ 264.010847][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.024514][ T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 264.067992][ T52] hfsplus: b-tree write err: -5, ino 4 [ 264.193815][T11140] loop4: detected capacity change from 0 to 256 [ 264.194420][ T8] usb 2-1: USB disconnect, device number 18 [ 264.206654][T11140] exfat: Deprecated parameter 'namecase' [ 264.237277][T11140] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 264.356401][ T29] audit: type=1326 audit(1739834020.016:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11146 comm="syz.2.2026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a80d8cde9 code=0x0 [ 264.452772][T11151] loop4: detected capacity change from 0 to 1024 [ 264.460110][T11151] EXT4-fs: Ignoring removed nobh option [ 264.466308][T11151] EXT4-fs: Ignoring removed bh option [ 264.498712][T11151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.544626][T11151] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.2027: Allocating blocks 497-513 which overlap fs metadata [ 264.565231][T11151] EXT4-fs (loop4): pa ffff8880782c0d98: logic 624, phys. 113, len 25 [ 264.573727][T11151] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 24, pa_free 25 [ 264.623974][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.795397][T11165] loop6: detected capacity change from 0 to 1024 [ 264.808848][T11166] netlink: 'syz.4.2031': attribute type 30 has an invalid length. [ 264.812946][T11165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.894610][T11169] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2035'. [ 265.415721][T11193] loop4: detected capacity change from 0 to 512 [ 265.440652][T11193] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.2046: invalid block [ 265.451768][T11195] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 265.460288][T11193] EXT4-fs (loop4): Remounting filesystem read-only [ 265.467281][T11193] EXT4-fs (loop4): 2 truncates cleaned up [ 265.496604][T11194] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 265.506358][T11193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.746973][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.784820][T11203] loop7: detected capacity change from 0 to 512 [ 265.831744][T11203] EXT4-fs: Ignoring removed nobh option [ 265.873521][T11203] EXT4-fs (loop7): invalid first ino: 0 [ 265.965850][T11209] loop4: detected capacity change from 0 to 256 [ 265.992960][T11209] exfat: Deprecated parameter 'namecase' [ 266.011856][T11209] exfat: Deprecated parameter 'namecase' [ 266.065425][T11209] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 266.141527][ T5934] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 266.301356][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 266.313149][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.335629][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.361077][ T5934] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 266.370137][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.389057][T11189] loop2: detected capacity change from 0 to 32768 [ 266.413444][ T5934] usb 2-1: config 0 descriptor?? [ 266.576452][T11189] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 266.608129][T11189] bcachefs (loop2): initializing new filesystem [ 266.632523][T11189] bcachefs (loop2): going read-write [ 266.669724][T11189] bcachefs (loop2): marking superblocks [ 266.766429][T11227] loop4: detected capacity change from 0 to 4096 [ 266.776227][T11189] bcachefs (loop2): initializing freespace [ 266.814103][T11189] bcachefs (loop2): done initializing freespace [ 266.827696][T11189] bcachefs (loop2): reading snapshots table [ 266.850687][ T5934] greenasia 0003:0E8F:0012.0018: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.1-1/input0 [ 266.870179][T11189] bcachefs (loop2): reading snapshots done [ 266.875766][T11227] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 266.893767][ T5934] greenasia 0003:0E8F:0012.0018: no inputs found [ 266.941202][T11189] bcachefs (loop2): done starting filesystem [ 267.065740][ T5934] usb 2-1: USB disconnect, device number 19 [ 267.115269][T11189] syz.2.2045 (11189) used greatest stack depth: 11056 bytes left [ 267.188907][T11216] loop6: detected capacity change from 0 to 32768 [ 267.205586][ T5831] bcachefs (loop2): shutting down [ 267.210635][ T5831] bcachefs (loop2): going read-only [ 267.237192][ T5831] bcachefs (loop2): finished waiting for writes to stop [ 267.271659][ T5831] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2 [ 267.354298][ T5831] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 267.365488][ T5831] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 267.378464][ T5831] bcachefs (loop2): marking filesystem clean [ 267.385290][T11245] loop4: detected capacity change from 0 to 1024 [ 267.393076][T11245] EXT4-fs: Ignoring removed nobh option [ 267.398730][T11245] EXT4-fs: Ignoring removed bh option [ 267.414112][ T5831] bcachefs (loop2): shutdown complete [ 267.461099][T11245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.571337][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.827427][T11263] loop4: detected capacity change from 0 to 512 [ 267.852577][T11263] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.870103][T11265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2075'. [ 267.900701][T11263] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 267.941189][T11263] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 267.981860][T11263] EXT4-fs (loop4): 1 truncate cleaned up [ 267.989293][T11263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.010814][T11263] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 4: comm syz.4.2074: lblock 0 mapped to illegal pblock 4 (length 1) [ 268.032315][T11263] EXT4-fs (loop4): Remounting filesystem read-only [ 268.068325][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.251288][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2078'. [ 268.295986][T11278] vlan0: entered promiscuous mode [ 268.310912][T11278] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 269.336490][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2096'. [ 269.762931][T11328] netlink: 'syz.4.2103': attribute type 1 has an invalid length. [ 269.859092][ T8] IPVS: starting estimator thread 0... [ 269.981377][T11335] IPVS: using max 18 ests per chain, 43200 per kthread [ 270.469147][T11318] loop6: detected capacity change from 0 to 40427 [ 270.487947][T11318] F2FS-fs (loop6): invalid crc value [ 270.510531][T11362] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 270.517065][T11362] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 270.527338][T11360] loop7: detected capacity change from 0 to 1024 [ 270.542454][T11318] F2FS-fs (loop6): Found nat_bits in checkpoint [ 270.577872][T11362] vhci_hcd vhci_hcd.0: Device attached [ 270.683071][ T3512] hfsplus: b-tree write err: -5, ino 4 [ 270.714228][T11318] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 270.811123][ T8] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 271.086822][T11380] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2125'. [ 271.245131][T11350] loop2: detected capacity change from 0 to 32768 [ 271.294380][T11350] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 271.442696][T11350] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 271.634846][T11394] [U]  [ 271.673028][ T5831] ocfs2: Unmounting device (7,2) on (node local) [ 271.740884][T11363] vhci_hcd: connection reset by peer [ 271.772012][ T3512] vhci_hcd: stop threads [ 271.781555][ T3512] vhci_hcd: release socket [ 271.811465][ T3512] vhci_hcd: disconnect device [ 271.891063][ T8] usb 33-1: device descriptor read/64, error -71 [ 272.091163][ T8] vhci_hcd: vhci_device speed not set [ 272.257347][T11414] loop6: detected capacity change from 0 to 512 [ 272.373543][T11414] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 272.411538][T11414] System zones: 0-2, 18-18, 34-35 [ 272.466335][T11414] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.481799][T11414] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.658694][ T9143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.795720][T11390] loop7: detected capacity change from 0 to 40427 [ 272.811623][T11390] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x1fffff [ 272.820474][T11390] F2FS-fs (loop7): Image doesn't support compression [ 272.836599][T11390] F2FS-fs (loop7): Image doesn't support compression [ 272.847941][T11390] F2FS-fs (loop7): invalid crc value [ 272.905330][T11390] F2FS-fs (loop7): Found nat_bits in checkpoint [ 272.957721][T11400] loop4: detected capacity change from 0 to 32768 [ 272.996188][T11400] XFS: ikeep mount option is deprecated. [ 273.051263][T11400] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 273.105301][T11390] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 273.117592][T11441] loop6: detected capacity change from 0 to 256 [ 273.169547][T11443] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.2146'. [ 273.170196][ T29] audit: type=1800 audit(1739834028.806:2067): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2128" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 273.178957][T11443] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 273.250568][T11441] FAT-fs (loop6): Directory bread(block 64) failed [ 273.267327][ T9385] syz-executor: attempt to access beyond end of device [ 273.267327][ T9385] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 273.277423][T11441] FAT-fs (loop6): Directory bread(block 65) failed [ 273.296616][T11441] FAT-fs (loop6): Directory bread(block 66) failed [ 273.305107][T11400] XFS (loop4): Ending clean mount [ 273.316716][T11400] XFS (loop4): Quotacheck needed: Please wait. [ 273.326180][ T9385] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 273.329296][T11441] FAT-fs (loop6): Directory bread(block 67) failed [ 273.371734][T11441] FAT-fs (loop6): Directory bread(block 68) failed [ 273.391369][T11441] FAT-fs (loop6): Directory bread(block 69) failed [ 273.398986][T11441] FAT-fs (loop6): Directory bread(block 70) failed [ 273.436284][T11400] XFS (loop4): Quotacheck: Done. [ 273.467784][T11441] FAT-fs (loop6): Directory bread(block 71) failed [ 273.500352][T11441] FAT-fs (loop6): Directory bread(block 72) failed [ 273.502645][ T5934] kernel write not supported for file /audio (pid: 5934 comm: kworker/0:8) [ 273.507229][T11441] FAT-fs (loop6): Directory bread(block 73) failed [ 273.673535][ T5827] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 274.448309][T11471] dvmrp5: entered allmulticast mode [ 274.502661][T11470] dvmrp5: left allmulticast mode [ 275.244878][T11463] loop4: detected capacity change from 0 to 32768 [ 275.327416][T11463] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 275.380568][ T5827] ocfs2: Unmounting device (7,4) on (node local) [ 275.592098][T11509] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 276.349835][T11507] loop7: detected capacity change from 0 to 32768 [ 276.402254][T11507] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 276.439778][T11507] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 276.523649][T11537] loop4: detected capacity change from 0 to 512 [ 276.551031][T11537] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 276.597320][T11537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.635004][T11511] loop6: detected capacity change from 0 to 40427 [ 276.643627][T11511] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 276.651393][T11511] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 276.675229][T11511] F2FS-fs (loop6): invalid crc value [ 276.695897][T11537] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.720135][T11511] F2FS-fs (loop6): Found nat_bits in checkpoint [ 276.738510][ T9385] ocfs2: Unmounting device (7,7) on (node local) [ 276.874544][T11511] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 276.884688][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.893164][T11511] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 277.610686][T11570] hub 2-0:1.0: USB hub found [ 277.621061][T11570] hub 2-0:1.0: 1 port detected [ 277.869092][T11553] loop2: detected capacity change from 0 to 32768 [ 277.915378][T11553] [ 277.915378][T11553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.915378][T11553] [ 277.915451][T11583] loop6: detected capacity change from 0 to 16 [ 277.988747][T11583] erofs (device loop6): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 278.044914][T11583] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 278.088386][ T2952] ERROR: (device loop2): diWrite: ixpxd invalid [ 278.088386][ T2952] [ 278.125920][ T2952] ERROR: (device loop2): txCommit: [ 278.125920][ T2952] [ 278.125991][T11583] CIFS mount error: No usable UNC path provided in device string! [ 278.125991][T11583] [ 278.133541][ T2952] jfs_write_inode: jfs_commit_inode failed! [ 278.155947][ T5831] [ 278.155947][ T5831] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.155947][ T5831] [ 278.178026][ T5831] [ 278.178026][ T5831] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.178026][ T5831] [ 278.199262][T11583] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 278.340686][T11595] tipc: Enabling of bearer rejected, failed to enable media [ 279.169961][T11634] netlink: 'syz.1.2236': attribute type 3 has an invalid length. [ 279.169989][T11634] netlink: 'syz.1.2236': attribute type 1 has an invalid length. [ 279.170008][T11634] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2236'. [ 279.376903][T11641] netlink: 'syz.4.2238': attribute type 4 has an invalid length. [ 279.408165][T11641] netlink: 'syz.4.2238': attribute type 2 has an invalid length. [ 279.493399][T11647] No such timeout policy "syz0" [ 280.581236][ T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 280.741306][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 280.753355][ T8] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 280.771788][T11658] loop2: detected capacity change from 0 to 32768 [ 280.781848][ T8] usb 7-1: config 0 has no interface number 0 [ 280.802956][ T8] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 280.816670][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.835121][ T8] usb 7-1: Product: syz [ 280.839990][ T8] usb 7-1: Manufacturer: syz [ 280.849828][T11658] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 280.858840][ T8] usb 7-1: SerialNumber: syz [ 280.872313][ T8] usb 7-1: config 0 descriptor?? [ 280.880157][ T8] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 281.057068][T11658] XFS (loop2): Ending clean mount [ 281.090008][ T8] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 281.116446][ T8] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 281.233348][ T5831] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 281.447429][T11714] loop7: detected capacity change from 0 to 512 [ 281.501649][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 281.502431][ T51] usb 7-1: USB disconnect, device number 6 [ 281.549689][T11714] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.604396][ T51] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 281.651579][T11714] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.683889][ T51] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 281.738812][ T51] quatech2 7-1:0.51: device disconnected [ 281.844859][ T9385] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.005371][T11722] loop7: detected capacity change from 0 to 256 [ 282.080567][T11722] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 282.133491][T11722] exFAT-fs (loop7): start_clu is invalid cluster(0xffffffff) [ 282.367669][T11730] loop6: detected capacity change from 0 to 256 [ 282.381593][T11727] Invalid ELF header magic: != ELF [ 282.487526][T11730] FAT-fs (loop6): Directory bread(block 64) failed [ 282.508428][T11730] FAT-fs (loop6): Directory bread(block 65) failed [ 282.531250][T11730] FAT-fs (loop6): Directory bread(block 66) failed [ 282.551152][T11730] FAT-fs (loop6): Directory bread(block 67) failed [ 282.581571][T11730] FAT-fs (loop6): Directory bread(block 68) failed [ 282.588143][T11730] FAT-fs (loop6): Directory bread(block 69) failed [ 282.625399][T11730] FAT-fs (loop6): Directory bread(block 70) failed [ 282.661345][T11730] FAT-fs (loop6): Directory bread(block 71) failed [ 282.696411][T11730] FAT-fs (loop6): Directory bread(block 72) failed [ 282.714444][T11730] FAT-fs (loop6): Directory bread(block 73) failed [ 282.732859][T11740] mkiss: ax0: crc mode is auto. [ 282.891193][ T5934] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 283.058641][ T5934] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 283.080481][ T5934] usb 3-1: config 0 interface 0 has no altsetting 0 [ 283.110889][ T5934] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 283.136261][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.173023][ T5934] usb 3-1: config 0 descriptor?? [ 283.189458][T11728] loop4: detected capacity change from 0 to 32768 [ 283.196630][T11736] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 283.639603][ T5934] lenovo 0003:17EF:60B5.0019: unknown main item tag 0x0 [ 283.655890][T11759] loop6: detected capacity change from 0 to 4096 [ 283.663655][ T5934] lenovo 0003:17EF:60B5.0019: unknown main item tag 0x0 [ 283.689176][ T5934] lenovo 0003:17EF:60B5.0019: hidraw0: USB HID v80.00 Device [HID 17ef:60b5] on usb-dummy_hcd.2-1/input0 [ 283.700518][T11759] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 283.804562][T11759] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 283.866134][ T5934] usb 3-1: USB disconnect, device number 12 [ 284.073469][T11773] netlink: 'syz.7.2296': attribute type 25 has an invalid length. [ 284.531092][ T5890] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 284.704108][ T5890] usb 7-1: Using ep0 maxpacket: 32 [ 284.720179][ T5890] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 284.759206][ T5890] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8346, setting to 1024 [ 284.797407][ T5890] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 284.806833][ T5890] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 284.824375][ T5890] usb 7-1: Product: syz [ 284.830352][ T5890] usb 7-1: Manufacturer: syz [ 284.841622][ T5890] hub 7-1:4.0: USB hub found [ 284.961585][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2316'. [ 285.045448][ T5890] hub 7-1:4.0: 7 ports detected [ 285.062539][ T5890] hub 7-1:4.0: insufficient power available to use all downstream ports [ 285.323711][T11825] loop7: detected capacity change from 0 to 128 [ 285.406601][T11829] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.2325'. [ 285.460696][ T5890] hub 7-1:4.0: set hub depth failed [ 285.513852][ T5890] usb 7-1: USB disconnect, device number 7 [ 285.530844][T11831] loop4: detected capacity change from 0 to 1024 [ 285.579650][T11836] loop7: detected capacity change from 0 to 64 [ 285.652410][T11839] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2328'. [ 285.706786][T11831] EXT4-fs (loop4): Test dummy encryption mode enabled [ 285.754426][T11831] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 285.813474][T11831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.898778][T11848] loop7: detected capacity change from 0 to 256 [ 285.922633][T11831] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 285.970394][T11831] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 285.991575][T11848] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 286.132608][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.308569][T11858] loop7: detected capacity change from 0 to 8 [ 286.336310][T11827] loop2: detected capacity change from 0 to 32768 [ 286.374879][T11858] SQUASHFS error: Unable to read directory block [2c0:35] [ 286.431363][T11827] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 286.466263][T11862] loop6: detected capacity change from 0 to 4096 [ 286.523758][ T5834] Bluetooth: hci1: command tx timeout [ 286.564331][T11827] XFS (loop2): Ending clean mount [ 286.569155][T11876] netlink: 'syz.4.2341': attribute type 29 has an invalid length. [ 286.580555][T11876] netlink: 'syz.4.2341': attribute type 29 has an invalid length. [ 286.630196][T11827] XFS (loop2): Quotacheck needed: Please wait. [ 286.706521][T11827] XFS (loop2): Quotacheck: Done. [ 286.786519][T11862] ntfs3(loop6): failed to convert "0080" to macgaelic [ 286.827039][T11862] ntfs3(loop6): failed to convert name for inode 1e. [ 286.870486][T11862] ntfs3(loop6): ino=1f, mi_enum_attr [ 286.888129][T11862] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 286.907271][T11862] ntfs3(loop6): ino=1f, mi_enum_attr [ 286.942591][ T5831] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 287.119427][T11893] loop7: detected capacity change from 0 to 512 [ 287.181399][T11893] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 287.212851][ T5890] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 287.323417][T11893] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #15: comm syz.7.2350: iget: bad extended attribute block 19 [ 287.375340][T11893] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.2350: couldn't read orphan inode 15 (err -117) [ 287.404299][ T5890] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 287.431218][T11893] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.449864][ T5890] usb 2-1: config 0 has an invalid descriptor of length 180, skipping remainder of the config [ 287.500754][ T5890] usb 2-1: config 0 has no interface number 0 [ 287.510872][ T5890] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 19414, setting to 64 [ 287.546518][ T5890] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.580264][ T5890] usb 2-1: config 0 interface 52 has no altsetting 0 [ 287.608050][ T5890] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 287.642511][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 287.650815][ T5890] usb 2-1: Product: syz [ 287.661002][ T5890] usb 2-1: SerialNumber: syz [ 287.674933][ T9385] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.684860][ T5890] usb 2-1: config 0 descriptor?? [ 287.752313][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2358'. [ 287.832087][T11918] loop7: detected capacity change from 0 to 256 [ 287.851972][T11918] exfat: Deprecated parameter 'utf8' [ 287.886692][T11918] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 287.904374][ T5890] input: syz (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input17 [ 287.920070][T11920] loop2: detected capacity change from 0 to 512 [ 287.975560][T11920] EXT4-fs (loop2): invalid inodes per group: 32800 [ 287.975560][T11920] [ 288.107414][ T5890] usb 2-1: USB disconnect, device number 20 [ 288.246374][T11930] netlink: 'syz.7.2364': attribute type 3 has an invalid length. [ 288.406529][T11903] loop4: detected capacity change from 0 to 40427 [ 288.434650][T11903] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 288.461066][T11903] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 288.511059][T11903] F2FS-fs (loop4): Found nat_bits in checkpoint [ 288.616211][T11903] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 288.627166][T11903] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 288.685333][T11942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2371'. [ 288.701223][ T8] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 288.843260][ T5827] syz-executor: attempt to access beyond end of device [ 288.843260][ T5827] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 288.854176][T11926] loop6: detected capacity change from 0 to 32768 [ 288.870662][ T5827] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 288.871840][ T8] usb 3-1: config index 0 descriptor too short (expected 38, got 36) [ 288.899748][ T8] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 288.916757][T11926] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 288.924801][ T8] usb 3-1: config 4 has no interface number 0 [ 288.940306][ T8] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 288.963163][ T8] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.974139][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 288.984466][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.996673][ T8] hub 3-1:4.128: USB hub found [ 289.024582][T11926] XFS (loop6): Ending clean mount [ 289.059724][T11926] XFS (loop6): Quotacheck needed: Please wait. [ 289.112442][T11926] XFS (loop6): Quotacheck: Done. [ 289.159371][ T29] audit: type=1800 audit(1739834044.816:2068): pid=11926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2366" name="file1" dev="loop6" ino=1062 res=0 errno=0 [ 289.211215][ T8] hub 3-1:4.128: 2 ports detected [ 289.225412][ T8] hub 3-1:4.128: Using single TT (err -22) [ 289.275727][ T9143] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 289.427804][ T8] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 289.441955][ T8] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 289.507294][ T8] usb 3-1: USB disconnect, device number 13 [ 289.842602][T11975] loop6: detected capacity change from 0 to 1024 [ 289.849513][T11975] EXT4-fs: Ignoring removed bh option [ 289.865459][T11975] EXT4-fs: Ignoring removed orlov option [ 289.881903][T11975] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 289.910706][T11975] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.094580][ T9143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.215706][T11997] loop2: detected capacity change from 0 to 32768 [ 291.237507][T11997] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2389 (11997) [ 291.286115][T11997] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 291.325670][T11997] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 291.349990][T11997] BTRFS info (device loop2): using free-space-tree [ 291.436541][T12030] loop6: detected capacity change from 0 to 1024 [ 291.484977][T12030] EXT4-fs: Ignoring removed orlov option [ 291.517892][T12030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.607889][ T5831] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 291.636639][T12030] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.886102][ T9143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.996767][T12047] loop4: detected capacity change from 0 to 4096 [ 292.025996][T12047] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 292.368082][T12062] loop2: detected capacity change from 0 to 2048 [ 292.381502][ T5934] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 292.439622][T12062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.543135][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.572228][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 292.594000][ T5934] usb 2-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.623845][ T5934] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 292.632362][T12070] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2415'. [ 292.645894][ T5934] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 292.656255][ T5934] usb 2-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 292.669589][ T5934] usb 2-1: config 1 interface 0 has no altsetting 0 [ 292.677756][ T5934] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.688274][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 292.696338][ T5934] usb 2-1: SerialNumber: syz [ 292.703959][T12056] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 292.711908][T12056] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 292.712095][T12069] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2415'. [ 293.131296][T12080] program syz.2.2421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.597865][T12059] loop6: detected capacity change from 0 to 40427 [ 293.641678][T12059] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 293.669052][T12059] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 293.705614][T12059] F2FS-fs (loop6): heap/no_heap options were deprecated [ 293.758371][T12059] F2FS-fs (loop6): invalid crc value [ 293.780441][T12059] F2FS-fs (loop6): Found nat_bits in checkpoint [ 293.964534][T12059] F2FS-fs (loop6): Start checkpoint disabled! [ 294.042441][T12059] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 294.090757][T12059] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 294.802825][T12088] loop2: detected capacity change from 0 to 32768 [ 294.860505][T12088] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2425 (12088) [ 294.999146][ T35] kworker/u8:2: attempt to access beyond end of device [ 294.999146][ T35] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 295.078925][ T35] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 295.135490][ T35] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 295.241155][T12088] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 295.345475][T12088] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 295.370224][ T5934] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 295.461189][ T5934] usb 2-1: USB disconnect, device number 21 [ 295.668221][T12088] BTRFS info (device loop2): rebuilding free space tree [ 295.758711][T12088] BTRFS info (device loop2): disabling free space tree [ 295.808202][T12088] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 295.859459][T12088] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 296.220680][ T5831] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 297.193133][ T29] audit: type=1326 audit(1739834052.826:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12146 comm="syz.7.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0bd8cde9 code=0x7ffc0000 [ 297.341141][ T29] audit: type=1326 audit(1739834052.886:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12146 comm="syz.7.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fae0bd8cde9 code=0x7ffc0000 [ 297.485356][ T29] audit: type=1326 audit(1739834052.886:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12146 comm="syz.7.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0bd8cde9 code=0x7ffc0000 [ 297.622614][ T29] audit: type=1326 audit(1739834052.886:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12146 comm="syz.7.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0bd8cde9 code=0x7ffc0000 [ 297.750316][ T29] audit: type=1326 audit(1739834052.886:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12146 comm="syz.7.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fae0bd8cde9 code=0x7ffc0000 [ 297.891481][ T29] audit: type=1326 audit(1739834052.896:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12146 comm="syz.7.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0bd8cde9 code=0x7ffc0000 [ 299.256668][T12153] loop7: detected capacity change from 0 to 32768 [ 299.371379][T12153] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 299.469456][T12151] loop2: detected capacity change from 0 to 32768 [ 299.521183][ T8] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 299.595180][T12151] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 299.638586][ T9385] ocfs2: Unmounting device (7,7) on (node local) [ 299.772047][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 299.821398][ T8] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 299.885540][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 299.958805][ T8] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 299.993616][T12151] XFS (loop2): Ending clean mount [ 300.028173][ T8] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 300.064655][T12151] XFS (loop2): Quotacheck needed: Please wait. [ 300.092718][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.147942][ T8] usb 7-1: config 0 descriptor?? [ 300.185917][T12151] XFS (loop2): Quotacheck: Done. [ 300.438277][ T8] hdpvr 7-1:0.0: firmware version 0x33 dated ~ xe@VwSH0"nPmB]. Ǥ=UO+ [ 300.529749][ T8] hdpvr 7-1:0.0: untested firmware, the driver might not work. [ 300.593096][ T5831] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 300.689167][T12184] loop4: detected capacity change from 0 to 1024 [ 301.067873][ T8] hdpvr 7-1:0.0: Could not setup controls [ 301.098540][ T2964] hfsplus: b-tree write err: -5, ino 4 [ 301.112728][ T8] hdpvr 7-1:0.0: registering videodev failed [ 301.121896][T12188] loop7: detected capacity change from 0 to 4096 [ 301.197914][ T8] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -71 [ 301.358588][ T8] usb 7-1: USB disconnect, device number 8 [ 302.181816][ T5934] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 302.373018][ T5934] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.421798][ T5934] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.472415][ T5934] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 302.538036][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 302.591431][ T5934] usb 3-1: SerialNumber: syz [ 302.605343][ T51] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 302.693143][T12214] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2472'. [ 302.845296][ T5934] usb 3-1: 0:2 : does not exist [ 302.881567][T12218] loop4: detected capacity change from 0 to 512 [ 302.937354][T12218] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 302.961449][ T5934] usb 3-1: USB disconnect, device number 14 [ 303.008522][T12218] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 303.056443][T12218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.155784][T12218] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 3: comm syz.4.2470: lblock 0 mapped to illegal pblock 3 (length 1) [ 303.238248][T12218] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2470: error -117 reading directory block [ 303.391547][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 303.566544][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.855936][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2480'. [ 303.961643][ T51] usb 7-1: Using ep0 maxpacket: 16 [ 304.178881][ T51] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 304.201315][ T51] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 304.231039][ T51] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 304.240803][ T51] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 304.331256][ T51] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 304.527987][T12250] loop7: detected capacity change from 0 to 2048 [ 304.602503][T12256] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.872991][ T51] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 304.901701][ T51] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.909713][ T51] usb 7-1: Product: syz [ 304.945406][ T51] usb 7-1: Manufacturer: syz [ 304.950031][ T51] usb 7-1: SerialNumber: syz [ 304.997376][ T51] usb 7-1: config 0 descriptor?? [ 305.091973][ T51] port100 7-1:0.0: NFC: Could not get supported command types [ 305.095202][T12263] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2491'. [ 305.179935][T12263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.379935][ T51] usb 7-1: USB disconnect, device number 9 [ 305.547750][T12265] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 305.648331][T12267] loop6: detected capacity change from 0 to 512 [ 305.774052][T12267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.869384][T12267] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.938445][T12274] loop7: detected capacity change from 0 to 512 [ 306.013222][T12274] EXT4-fs (loop7): Test dummy encryption mode enabled [ 306.092842][T12274] EXT4-fs (loop7): 1 truncate cleaned up [ 306.247077][T12274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.294129][ T9143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.849321][T12274] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 306.899115][T12274] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2495: bg 0: block 7: invalid block bitmap [ 307.265426][ T9385] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.742667][T12308] loop7: detected capacity change from 0 to 16 [ 307.801210][T12308] erofs (device loop7): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 307.881692][T12308] erofs (device loop7): mounted with root inode @ nid 36. [ 307.997440][T12308] syz.7.2508: attempt to access beyond end of device [ 307.997440][T12308] loop7: rw=0, sector=4282368000, nr_sectors = 8 limit=16 [ 308.374672][ T8] kernel write not supported for file /sg0 (pid: 8 comm: kworker/0:0) [ 308.935961][T12335] loop6: detected capacity change from 0 to 164 [ 308.994392][T12335] Unable to read rock-ridge attributes [ 309.103057][T12335] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 309.371119][ T5934] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 309.423174][T12344] IPVS: stopping backup sync thread 12343 ... [ 309.582927][ T5934] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 309.611748][ T5934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.678794][ T5934] usb 3-1: config 0 has no interface number 0 [ 309.730225][ T5934] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 309.801111][ T5934] usb 3-1: config 0 interface 186 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.886919][ T5934] usb 3-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28 [ 309.906652][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.943884][ T5934] usb 3-1: Product: syz [ 309.979614][ T5934] usb 3-1: Manufacturer: syz [ 310.011082][ T5934] usb 3-1: SerialNumber: syz [ 310.062619][ T5934] usb 3-1: config 0 descriptor?? [ 310.091480][T12360] trusted_key: encrypted_key: key user:syz not found [ 310.316451][ T5934] usb 3-1: Found UVC 0.00 device syz (05ac:8600) [ 310.352263][T12358] loop4: detected capacity change from 0 to 4096 [ 310.381589][T12358] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 310.403562][ T5934] usb 3-1: No valid video chain found. [ 310.459484][ T5934] usb 3-1: USB disconnect, device number 15 [ 310.576495][T12358] ntfs3(loop4): ino=19, mi_enum_attr [ 310.598632][T12358] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 310.627750][T12358] ntfs3(loop4): ino=18, mi_enum_attr [ 310.651564][ T9] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 310.729699][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2539'. [ 310.846190][ T9] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 310.897555][ T9] usb 2-1: config 0 has no interface number 0 [ 310.927047][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 310.953686][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.980670][ T9] usb 2-1: Product: syz [ 311.041437][ T9] usb 2-1: Manufacturer: syz [ 311.046089][ T9] usb 2-1: SerialNumber: syz [ 311.127312][ T9] usb 2-1: config 0 descriptor?? [ 311.392681][ T9] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 311.450797][ T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 311.541487][ T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 311.617517][ T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 311.688933][ T9] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 311.875641][ T9] usb 2-1: USB disconnect, device number 22 [ 311.914481][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 311.985346][ T9] keyspan 2-1:0.133: device disconnected [ 312.728400][T12399] loop4: detected capacity change from 0 to 256 [ 312.913006][T12399] FAT-fs (loop4): Directory bread(block 64) failed [ 312.960555][T12399] FAT-fs (loop4): Directory bread(block 65) failed [ 313.022677][T12399] FAT-fs (loop4): Directory bread(block 66) failed [ 313.029279][T12399] FAT-fs (loop4): Directory bread(block 67) failed [ 313.131440][T12399] FAT-fs (loop4): Directory bread(block 68) failed [ 313.174732][T12399] FAT-fs (loop4): Directory bread(block 69) failed [ 313.252365][T12399] FAT-fs (loop4): Directory bread(block 70) failed [ 313.297609][T12399] FAT-fs (loop4): Directory bread(block 71) failed [ 313.352986][T12399] FAT-fs (loop4): Directory bread(block 72) failed [ 313.359582][T12399] FAT-fs (loop4): Directory bread(block 73) failed [ 313.552865][T12415] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2560'. [ 313.640669][T12415] netlink: 'syz.0.2560': attribute type 1 has an invalid length. [ 313.701978][T12415] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2560'. [ 313.757695][T12411] loop2: detected capacity change from 0 to 4096 [ 313.797019][T12411] NILFS (loop2): invalid segment: Checksum error in segment payload [ 313.850103][T12411] NILFS (loop2): trying rollback from an earlier position [ 313.911027][ T29] audit: type=1326 audit(1739834069.566:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.6.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad778cde9 code=0x7ffc0000 [ 314.028232][T12411] NILFS (loop2): recovery complete [ 314.105603][ T29] audit: type=1326 audit(1739834069.566:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.6.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad778cde9 code=0x7ffc0000 [ 314.152182][T12420] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.281325][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 314.310706][ T29] audit: type=1326 audit(1739834069.596:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.6.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7ffad778cde9 code=0x7ffc0000 [ 314.470712][ T29] audit: type=1326 audit(1739834069.596:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.6.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad778cde9 code=0x7ffc0000 [ 314.515893][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 314.565340][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.620815][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.646882][ T29] audit: type=1326 audit(1739834069.596:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.6.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad778cde9 code=0x7ffc0000 [ 314.710149][T12396] loop7: detected capacity change from 0 to 32768 [ 314.717631][ T9] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 314.717666][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.722332][ T9] usb 2-1: config 0 descriptor?? [ 315.005315][ T29] audit: type=1800 audit(1739834070.626:2080): pid=12396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2551" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 315.145127][ T9] uclogic 0003:5543:0003.001A: item fetching failed at offset 0/3 [ 315.195934][ T9] uclogic 0003:5543:0003.001A: parse failed [ 315.236231][ T9] uclogic 0003:5543:0003.001A: probe with driver uclogic failed with error -22 [ 315.317492][T12436] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.358750][ T5934] usb 2-1: USB disconnect, device number 23 [ 315.404233][T12436] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.796165][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.940150][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.984368][T12419] sched: DL replenish lagged too much [ 319.210220][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 378.213901][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.226157][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 416.398446][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 439.916290][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.983648][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 456.846626][T12436] tipc: Resetting bearer [ 457.535733][T12436] tipc: Resetting bearer [ 462.623480][ T795] tipc: Resetting bearer [ 462.691882][ T795] tipc: Resetting bearer [ 464.511565][ T30] INFO: task kworker/0:1:9 blocked for more than 149 seconds. [ 464.519142][ T30] Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 464.592666][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.631015][ T30] task:kworker/0:1 state:D stack:21144 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 464.700983][ T30] Workqueue: events switchdev_deferred_process_work [ 464.707718][ T30] Call Trace: [ 464.751196][ T30] [ 464.754246][ T30] __schedule+0x190e/0x4c90 [ 464.758803][ T30] ? try_to_wake_up+0x959/0x1470 [ 464.811125][ T30] ? schedule+0x90/0x320 [ 464.815647][ T30] ? __pfx___schedule+0x10/0x10 [ 464.820615][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 464.871516][ T30] ? __pfx_lock_release+0x10/0x10 [ 464.878050][ T30] ? kick_pool+0x45c/0x620 [ 464.931189][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.936502][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.981249][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 464.986556][ T30] ? schedule+0x90/0x320 [ 464.990824][ T30] schedule+0x14b/0x320 [ 465.040985][ T30] schedule_preempt_disabled+0x13/0x30 [ 465.046543][ T30] __mutex_lock+0x817/0x1010 [ 465.091432][ T30] ? __mutex_lock+0x602/0x1010 [ 465.096315][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 465.141134][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 465.146252][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 465.191178][ T30] ? process_scheduled_works+0x9c6/0x18e0 [ 465.196995][ T30] switchdev_deferred_process_work+0xe/0x20 [ 465.259766][ T30] process_scheduled_works+0xac0/0x18e0 [ 465.271172][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 465.277292][ T30] ? assign_work+0x364/0x3d0 [ 465.331112][ T30] worker_thread+0x870/0xd30 [ 465.335811][ T30] ? __kthread_parkme+0x169/0x1d0 [ 465.360978][ T30] ? __pfx_worker_thread+0x10/0x10 [ 465.366196][ T30] kthread+0x7ab/0x920 [ 465.370314][ T30] ? __pfx_kthread+0x10/0x10 [ 465.420977][ T30] ? __pfx_worker_thread+0x10/0x10 [ 465.426183][ T30] ? __pfx_kthread+0x10/0x10 [ 465.430811][ T30] ? __pfx_kthread+0x10/0x10 [ 465.461012][ T30] ? __pfx_kthread+0x10/0x10 [ 465.465737][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.492627][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.498343][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 465.526298][ T30] ? __pfx_kthread+0x10/0x10 [ 465.548436][T12437] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.555632][T12437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.563844][ T30] ret_from_fork+0x4d/0x80 [ 465.568311][ T30] ? __pfx_kthread+0x10/0x10 [ 465.591450][ T30] ret_from_fork_asm+0x1a/0x30 [ 465.596715][ T30] [ 465.625910][ T30] [ 465.625910][ T30] Showing all locks held in the system: [ 465.639939][T12437] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.647159][T12437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.681159][ T30] 3 locks held by kworker/0:1/9: [ 465.686170][ T30] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 SYZFAIL: failed to send rpc fd=3 want=5776 sent=0 n=-1 (errno 32: Broken pipe) [ 465.760997][ T30] #1: ffffc900000e7c60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 465.841014][ T30] #2: ffffffff8fed4d08 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 465.894278][T12453] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 465.901327][ T30] 1 lock held by khungtaskd/30: [ 465.958298][ T30] #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 465.968933][T12455] loop6: detected capacity change from 0 to 512 [ 465.976157][T12437] macsec1: left promiscuous mode [ 466.004590][T12453] CPU: 1 UID: 0 PID: 12453 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 466.004623][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 466.004637][T12453] Call Trace: [ 466.004646][T12453] [ 466.004655][T12453] dump_stack_lvl+0x241/0x360 [ 466.004692][T12453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.004719][T12453] ? __pfx__printk+0x10/0x10 [ 466.004749][T12453] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 466.004781][T12453] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.004820][T12453] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 466.004855][T12453] warn_alloc+0x278/0x410 [ 466.004892][T12453] ? __pfx_warn_alloc+0x10/0x10 [ 466.004922][T12453] ? kcov_ioctl+0x56/0x640 [ 466.004956][T12453] ? __get_vm_area_node+0x1c8/0x2d0 [ 466.004992][T12453] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.005028][T12453] ? __get_vm_area_node+0x25c/0x2d0 [ 466.005070][T12453] __vmalloc_node_range_noprof+0x62f/0x1380 [ 466.005138][T12453] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 466.005192][T12453] vmalloc_user_noprof+0x74/0x80 [ 466.005216][T12453] ? kcov_ioctl+0x56/0x640 [ 466.005250][T12453] kcov_ioctl+0x56/0x640 [ 466.005286][T12453] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.005324][T12453] ? __pfx_kcov_ioctl+0x10/0x10 [ 466.005362][T12453] __se_sys_ioctl+0xf7/0x170 [ 466.005392][T12453] do_syscall_64+0xf3/0x230 [ 466.005429][T12453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.005462][T12453] RIP: 0033:0x7f87fab8c9eb [ 466.005483][T12453] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 466.005503][T12453] RSP: 002b:00007fff70cbea90 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.005528][T12453] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f87fab8c9eb [ 466.005546][T12453] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d9 [ 466.005562][T12453] RBP: 00007f87fada6118 R08: 00000000000000d8 R09: 0000000000000000 [ 466.005578][T12453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.005593][T12453] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 466.005624][T12453] [ 466.005633][T12453] Mem-Info: [ 466.026808][ T30] 3 locks held by kworker/u8:5/795: [ 466.026830][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 466.026921][ T30] #1: ffffc90003a07c60 ((linkwatch_work).work [ 466.051045][T12437] macsec1: left allmulticast mode [ 466.186078][ T30] ){+.+.}-{0:0} [ 466.197400][T12453] active_anon:3051 inactive_anon:4109 isolated_anon:0 [ 466.197400][T12453] active_file:6413 inactive_file:46303 isolated_file:0 [ 466.197400][T12453] unevictable:768 dirty:34 writeback:0 [ 466.197400][T12453] slab_reclaimable:10790 slab_unreclaimable:113788 [ 466.197400][T12453] mapped:12920 shmem:5826 pagetables:676 [ 466.197400][T12453] sec_pagetables:0 bounce:0 [ 466.197400][T12453] kernel_misc_reclaimable:0 [ 466.197400][T12453] free:1317102 free_pcp:2990 free_cma:0 [ 466.232100][T12455] EXT4-fs (loop6): orphan cleanup on readonly fs [ 466.249036][T12453] Node 0 active_anon:12204kB inactive_anon:16436kB active_file:25648kB inactive_file:184704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:51680kB dirty:136kB writeback:0kB shmem:21768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11196kB pagetables:2704kB sec_pagetables:0kB all_unreclaimable? no [ 466.262983][ T30] , at: process_scheduled_works+0x9c6/0x18e0 [ 466.356386][ T30] #2: ffffffff8fed4d08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 466.365774][ T30] 3 locks held by kworker/R-ipv6_/3164: [ 466.371861][ T30] #0: ffff888030980948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 466.379507][T12455] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2576: bg 0: block 248: padding at end of block bitmap is not set [ 466.383706][ T30] #1: ffffc9000ce97be0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 466.413671][ T30] #2: ffffffff8fed4d08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 466.421315][T12453] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? yes [ 466.437818][ T30] 2 locks held by getty/5582: [ 466.458954][T12437] gtp0: left promiscuous mode [ 466.463933][T12437] gtp0: left allmulticast mode [ 466.473485][T12455] Quota error (device loop6): write_blk: dquota write failed [ 466.483296][T12455] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 466.497606][ T30] #0: ffff8880313060a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 466.505406][T12455] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.2576: Failed to acquire dquot type 1 [ 466.530686][ T30] #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 466.532077][T12453] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 466.565399][ T30] 1 lock held by syz-executor/5827: [ 466.588713][T12455] EXT4-fs (loop6): 1 truncate cleaned up [ 466.592407][ T30] #0: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x820 [ 466.609263][T12455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 466.614876][ T30] 1 lock held by syz-executor/5831: [ 466.630929][T12453] lowmem_reserve[]: 0 2490 2490 0 0 [ 466.634866][ T30] #0: [ 466.636210][T12453] Node 0 DMA32 free:1422928kB boost:58440kB min:92608kB low:101148kB high:109688kB reserved_highatomic:26624KB active_anon:11104kB inactive_anon:16380kB active_file:25320kB inactive_file:184400kB unevictable:1536kB writepending:160kB present:3129332kB managed:2549864kB mlocked:0kB bounce:0kB free_pcp:3216kB local_pcp:408kB free_cma:0kB [ 466.639000][ T30] ffffffff8fed4d08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 466.689548][ T30] 1 lock held by syz-executor/5832: [ 466.703361][ T30] #0: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 466.721000][ T30] 1 lock held by syz-executor/9385: [ 466.726224][ T30] #0: ffffffff8fed4d08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 466.740967][T12453] lowmem_reserve[]: 0 0 0 0 0 [ 466.741420][ T30] 5 locks held by syz-executor/12453: [ 466.745735][T12453] Node 0 Normal free:16kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:12kB inactive_file:260kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.779514][T12453] lowmem_reserve[]: [ 466.810634][T12455] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.824480][ T30] [ 466.826837][ T30] ============================================= [ 466.826837][ T30] [ 466.870947][ T30] NMI backtrace for cpu 0 [ 466.870969][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 466.870996][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 466.871011][ T30] Call Trace: [ 466.871020][ T30] [ 466.871029][ T30] dump_stack_lvl+0x241/0x360 [ 466.871063][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.871089][ T30] ? __pfx__printk+0x10/0x10 [ 466.871125][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 466.871157][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 466.871179][ T30] ? _printk+0xd5/0x120 [ 466.871201][ T30] ? __pfx__printk+0x10/0x10 [ 466.871223][ T30] ? __wake_up_klogd+0xcc/0x110 [ 466.871257][ T30] ? __pfx__printk+0x10/0x10 [ 466.871280][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.871319][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 466.871356][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 466.871390][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 466.871419][ T30] watchdog+0x1058/0x10a0 [ 466.871458][ T30] ? watchdog+0x1ea/0x10a0 [ 466.871500][ T30] ? __pfx_watchdog+0x10/0x10 [ 466.871537][ T30] kthread+0x7ab/0x920 [ 466.871573][ T30] ? __pfx_kthread+0x10/0x10 [ 466.871613][ T30] ? __pfx_watchdog+0x10/0x10 [ 466.871657][ T30] ? __pfx_kthread+0x10/0x10 [ 466.871692][ T30] ? __pfx_kthread+0x10/0x10 [ 466.871733][ T30] ? __pfx_kthread+0x10/0x10 [ 466.871768][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.871793][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.871830][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 466.871859][ T30] ? __pfx_kthread+0x10/0x10 [ 466.871897][ T30] ret_from_fork+0x4d/0x80 [ 466.871930][ T30] ? __pfx_kthread+0x10/0x10 [ 466.871967][ T30] ret_from_fork_asm+0x1a/0x30 [ 466.872013][ T30] [ 466.872022][ T30] Sending NMI from CPU 0 to CPUs 1: [ 467.031175][T12453] 0 0 0 0 0 [ 467.031239][T12453] Node 1 Normal free:3835340kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:32768KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:2056kB local_pcp:1832kB free_cma:0kB [ 467.031312][T12453] lowmem_reserve[]: 0 0 0 0 0 [ 467.031373][T12453] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) [ 467.036350][ C1] NMI backtrace for cpu 1 [ 467.036369][ C1] CPU: 1 UID: 0 PID: 12453 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 467.036395][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 467.036408][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x4/0x90 [ 467.036450][ C1] Code: 0a 18 4c 89 44 0a 20 e9 b5 81 4e ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <4c> 8b 04 24 65 48 8b 0c 25 80 d6 03 00 65 8b 05 00 17 42 7e 25 00 [ 467.036468][ C1] RSP: 0018:ffffc90004546f90 EFLAGS: 00000246 [ 467.036488][ C1] RAX: 1ffff920008a8e23 RBX: ffffffff9a68df00 RCX: ffff888027d38000 [ 467.036505][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 467.036518][ C1] RBP: ffffffff8ea14850 R08: ffffffff81a20223 R09: 1ffff920008a8e76 [ 467.036535][ C1] R10: dffffc0000000000 R11: fffff520008a8e77 R12: ffffc900045470e0 [ 467.036552][ C1] R13: 00000000000281c0 R14: dffffc0000000000 R15: ffffc90004547118 [ 467.036571][ C1] FS: 0000555583c12500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 467.036591][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.036606][ C1] CR2: 00007fa1e77a6038 CR3: 0000000033cd2000 CR4: 0000000000350ef0 [ 467.036623][ C1] Call Trace: [ 467.036632][ C1] [ 467.036643][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 467.036666][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 467.036702][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 467.036724][ C1] ? nmi_handle+0x2a/0x5a0 [ 467.036768][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 467.036796][ C1] ? nmi_handle+0x151/0x5a0 [ 467.036830][ C1] ? nmi_handle+0x2a/0x5a0 [ 467.036870][ C1] ? __sanitizer_cov_trace_const_cmp8+0x4/0x90 [ 467.036903][ C1] ? default_do_nmi+0x63/0x160 [ 467.036938][ C1] ? exc_nmi+0x123/0x1f0 [ 467.036971][ C1] ? end_repeat_nmi+0xf/0x53 [ 467.037007][ C1] ? _prb_read_valid+0x5c3/0xad0 [ 467.037032][ C1] ? __sanitizer_cov_trace_const_cmp8+0x4/0x90 [ 467.037066][ C1] ? __sanitizer_cov_trace_const_cmp8+0x4/0x90 [ 467.037101][ C1] ? __sanitizer_cov_trace_const_cmp8+0x4/0x90 [ 467.037134][ C1] [ 467.037142][ C1] [ 467.037149][ C1] get_data+0x51/0x880 [ 467.037170][ C1] ? _prb_read_valid+0x517/0xad0 [ 467.037196][ C1] _prb_read_valid+0x608/0xad0 [ 467.037228][ C1] ? __pfx__prb_read_valid+0x10/0x10 [ 467.037252][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.037293][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.037327][ C1] ? data_push_tail+0x716/0x730 [ 467.037354][ C1] prb_read_valid+0xa9/0xf0 [ 467.037378][ C1] ? __pfx_prb_read_valid+0x10/0x10 [ 467.037402][ C1] ? __lock_acquire+0x1397/0x2100 [ 467.037439][ C1] printk_get_next_message+0x1f3/0x8b0 [ 467.037473][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.037508][ C1] ? __pfx_printk_get_next_message+0x10/0x10 [ 467.037546][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.037584][ C1] ? console_flush_all+0x511/0xeb0 [ 467.037615][ C1] console_flush_all+0x569/0xeb0 [ 467.037641][ C1] ? mark_lock+0x9a/0x360 [ 467.037664][ C1] ? console_flush_all+0x1a3/0xeb0 [ 467.037697][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 467.037731][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.037768][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.037802][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 467.037836][ C1] console_unlock+0x14f/0x3b0 [ 467.037868][ C1] ? __pfx_console_unlock+0x10/0x10 [ 467.037894][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 467.037926][ C1] ? vprintk_emit+0x530/0xa10 [ 467.037950][ C1] vprintk_emit+0x730/0xa10 [ 467.037975][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 467.038006][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.038039][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 467.038077][ C1] _printk+0xd5/0x120 [ 467.038099][ C1] ? __show_mem+0x1f4b/0x2470 [ 467.038126][ C1] ? __pfx__printk+0x10/0x10 [ 467.038145][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 467.038169][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.038210][ C1] __show_mem+0x1fac/0x2470 [ 467.038248][ C1] ? __pfx___show_mem+0x10/0x10 [ 467.038275][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.038308][ C1] ? dump_stack_lvl+0x2f9/0x360 [ 467.038340][ C1] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 467.038368][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.038402][ C1] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 467.038431][ C1] warn_alloc+0x354/0x410 [ 467.038457][ C1] ? __pfx_warn_alloc+0x10/0x10 [ 467.038481][ C1] ? kcov_ioctl+0x56/0x640 [ 467.038512][ C1] ? __get_vm_area_node+0x1c8/0x2d0 [ 467.038544][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.038577][ C1] ? __get_vm_area_node+0x25c/0x2d0 [ 467.038614][ C1] __vmalloc_node_range_noprof+0x62f/0x1380 [ 467.038668][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 467.038712][ C1] vmalloc_user_noprof+0x74/0x80 [ 467.038733][ C1] ? kcov_ioctl+0x56/0x640 [ 467.038763][ C1] kcov_ioctl+0x56/0x640 [ 467.038795][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.038829][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 467.038866][ C1] __se_sys_ioctl+0xf7/0x170 [ 467.038892][ C1] do_syscall_64+0xf3/0x230 [ 467.038923][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.038954][ C1] RIP: 0033:0x7f87fab8c9eb [ 467.038972][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 467.038990][ C1] RSP: 002b:00007fff70cbea90 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.039011][ C1] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f87fab8c9eb [ 467.039027][ C1] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d9 [ 467.039042][ C1] RBP: 00007f87fada6118 R08: 00000000000000d8 R09: 0000000000000000 [ 467.039056][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.039069][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 467.039093][ C1] [ 467.753350][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 467.760258][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 467.770773][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 467.780845][ T30] Call Trace: [ 467.784187][ T30] [ 467.787140][ T30] dump_stack_lvl+0x241/0x360 [ 467.791836][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.797047][ T30] ? __pfx__printk+0x10/0x10 [ 467.801647][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 467.807664][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.813321][ T30] ? vscnprintf+0x5d/0x90 [ 467.817673][ T30] panic+0x349/0x880 [ 467.821583][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.827231][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 467.833390][ T30] ? __pfx_panic+0x10/0x10 [ 467.837809][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 467.843197][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.848843][ T30] ? __irq_work_queue_local+0x137/0x410 [ 467.854401][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.860053][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 467.865440][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 467.871595][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 467.877750][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.883396][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 467.889551][ T30] watchdog+0x1097/0x10a0 [ 467.893981][ T30] ? watchdog+0x1ea/0x10a0 [ 467.898411][ T30] ? __pfx_watchdog+0x10/0x10 [ 467.903096][ T30] kthread+0x7ab/0x920 [ 467.907176][ T30] ? __pfx_kthread+0x10/0x10 [ 467.911777][ T30] ? __pfx_watchdog+0x10/0x10 [ 467.916460][ T30] ? __pfx_kthread+0x10/0x10 [ 467.921057][ T30] ? __pfx_kthread+0x10/0x10 [ 467.925657][ T30] ? __pfx_kthread+0x10/0x10 [ 467.930258][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.935457][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.941100][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 467.946305][ T30] ? __pfx_kthread+0x10/0x10 [ 467.950910][ T30] ret_from_fork+0x4d/0x80 [ 467.955348][ T30] ? __pfx_kthread+0x10/0x10 [ 467.959949][ T30] ret_from_fork_asm+0x1a/0x30 [ 467.964730][ T30] [ 467.967955][ T30] Kernel Offset: disabled [ 467.972276][ T30] Rebooting in 86400 seconds..