last executing test programs: 5m19.077751478s ago: executing program 4 (id=324): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 5m18.769934739s ago: executing program 4 (id=326): syz_emit_ethernet(0x6e, &(0x7f0000000f00)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0x12, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0) 5m18.473629488s ago: executing program 4 (id=329): syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f0000002100)=ANY=[], 0x3, 0x1a9, &(0x7f0000000300)="$eJzs0M9qE1EUx/HvuXcySYQqU11FsAGL40g1f6ouBDG4SiED4k40aEhjU0zUNlnYolAXUpDUPoOruhRBVyIWXBcXggsdEbqTZhFciIsSmebmKbwfmPnNOTAz95xmZ6mTBPYHj+uUOKA5zOek4ABTMuopNcp3pv5lcnMUXDV1T0jF+crUGWH1Xq3VaixnL2XxINNZGTe4PvidxfvJqPXUfIq+UEK+DnS9JndChiXaaj7Eq3BmA11NE7wg40xw7Daaod9jTrEkfgWO5Lrth7nOyurZxfbNhcZC436xOHsxfz6fv1DM3V1sNfJvkeC5qHi0+JzJkHTwhESVZzvOIWYECZoq0pIGt8rmjj59cqZ/RQV7DBE++n2S351mVsEpUrfigcocFV6iQ6YrpJVrhigj19QbKThfnD8JRWpN63P1B6359RtK/3W3SrKXksIuCb9AbW7j8my8Gib3t1mPmI4oR2xFzu4PpuR9/Jee2aezFt9fm+o4J8DlUa3bXS648En8kGJ8eTDBJNuog3N58MG8Y4Jv4wfLsizLsizLsizrP/AvAAD//wKbX+w=") 5m18.098341428s ago: executing program 4 (id=336): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0xd, 0x20000, 0x0) 5m17.237019899s ago: executing program 4 (id=342): syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xa7, 0xa3, 0xb1, 0x20, 0x9fb, 0xebbe, 0xeafe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7a, 0x25, 0xe0}}]}}]}}, 0x0) 5m15.69226413s ago: executing program 4 (id=357): syz_read_part_table(0x1053, &(0x7f0000000000)="$eJzsz7GtwkAQBNC9b99Z/gmNUAsJohyEiemEliiEcJGxER0AwXvRaHaSDb5q9z+c1jhGxPmZah0iI/ooczv3Zd1c/vKemVmiK9kv3TSux/Yevvb7sattidvoYsoam3nY4niLFofrp/4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/2CAAA//9k+Q8+") 5m0.341744312s ago: executing program 32 (id=357): syz_read_part_table(0x1053, &(0x7f0000000000)="$eJzsz7GtwkAQBNC9b99Z/gmNUAsJohyEiemEliiEcJGxER0AwXvRaHaSDb5q9z+c1jhGxPmZah0iI/ooczv3Zd1c/vKemVmiK9kv3TSux/Yevvb7sattidvoYsoam3nY4niLFofrp/4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/2CAAA//9k+Q8+") 4m55.063584692s ago: executing program 2 (id=513): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000004000000000000000000850000005600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m54.617118415s ago: executing program 2 (id=516): syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0xc000, &(0x7f00000006c0), 0x1, 0x25f, &(0x7f0000000340)="$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") 4m54.159988605s ago: executing program 2 (id=521): syz_usb_connect(0x0, 0x3f, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109022d0001000000000904000000020a0000052406000005380000000d"], 0x0) 4m51.924663068s ago: executing program 2 (id=536): syz_usb_connect(0x0, 0x36, &(0x7f0000001b40)={{0x12, 0x1, 0x0, 0x2d, 0x3d, 0x6a, 0x8, 0x5c6, 0x9205, 0x29ac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x4f, 0x9b}}, {{0x9, 0x4, 0xb0, 0x0, 0x0, 0x3a, 0x38, 0x46}}, {{0x9, 0x4, 0x31, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 4m49.760146166s ago: executing program 2 (id=544): syz_emit_ethernet(0x2e, &(0x7f00000006c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e1f, 0x4, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 4m49.476750682s ago: executing program 2 (id=548): unshare(0x64000600) 4m34.334126039s ago: executing program 33 (id=548): unshare(0x64000600) 19.848703652s ago: executing program 1 (id=2385): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x5599, &(0x7f0000005680)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0xa) 14.430489827s ago: executing program 1 (id=2414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 13.628244085s ago: executing program 1 (id=2418): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd7127cfc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029c1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4ed842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) 12.78209606s ago: executing program 1 (id=2425): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x48080}, 0x4000) 11.735892228s ago: executing program 1 (id=2433): r0 = fsopen(&(0x7f0000002f80)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) 10.938758462s ago: executing program 1 (id=2438): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 8.973621917s ago: executing program 5 (id=2449): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 8.276102675s ago: executing program 5 (id=2452): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsm_list_modules(0x0, 0x0, 0x0) 7.744123105s ago: executing program 3 (id=2455): setrlimit(0x1, &(0x7f0000000000)={0xfffb, 0x5}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) 7.656822827s ago: executing program 5 (id=2456): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 7.14389154s ago: executing program 3 (id=2459): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x1}}, 0x10) 7.017258825s ago: executing program 5 (id=2460): futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc), 0xa, 0x0, 0x0, 0x0, 0x1) 6.592670589s ago: executing program 3 (id=2461): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000000000000840000000800000044140823e000000200000002e00000010000100000000000dc00000000000000000000000700000094040000863900000001000cb2ffb69602013567ffcb060f19367d2b99bdc0f59e428bc33a050a3660f2bb77c7045b050a31efe0215e235d56060495ae0144243471ac14142700000006ac1414bb00000001ac1414bb0000ffff0a01010200000009009404010000866000000000000c253d78b48f9458beb62d0102000d3bf9f2dbdddfea00b260f00503db010436b20603c70109e35e3ab5244a640709675e60e1799f870512e123b12c8654130f6a1f80f526064d12061127d9c9821b1bfe4b42fcb33e2e2d2594040000000000001400000000000000000000000200000022a20000000000001400000000000000000000000200000005000000000000001c"], 0x158}, 0x40) 6.013812768s ago: executing program 3 (id=2465): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) 5.823566485s ago: executing program 6 (id=2466): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x288, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xc8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 5.712503297s ago: executing program 5 (id=2467): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800001, &(0x7f000000ac40), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) 5.454883148s ago: executing program 0 (id=2469): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000008c0)={0x1, @pix={0x0, 0x0, 0x34324142}}) 5.225533128s ago: executing program 6 (id=2470): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) 4.740637825s ago: executing program 6 (id=2472): syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.513539339s ago: executing program 7 (id=2474): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x4b, 0x1, 0x0, "0ba7dfad1c8c32b840ed7ae32b99c8080000f90b00ff917656b396f76800", 0x30323953}) 3.434214784s ago: executing program 0 (id=2475): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xf}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cf565685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 2.893791043s ago: executing program 7 (id=2476): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x10000001}) 2.597162125s ago: executing program 0 (id=2477): r0 = syz_open_dev$video(&(0x7f0000000280), 0x3, 0x480) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x2, 0xa, 0x6, 0x0, 0xff}) 2.166784229s ago: executing program 7 (id=2478): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000008001300", @ANYRESOCT=r0], 0x24}}, 0x0) 1.868934137s ago: executing program 0 (id=2479): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_deladdr={0x17, 0x15, 0x1, 0x0, 0x0, {0x2, 0x18}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x4) 1.818907451s ago: executing program 6 (id=2480): move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 1.511249581s ago: executing program 7 (id=2481): ioperm(0x0, 0x2, 0x1fe) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000040)=0x2, 0x800800000000008, 0x0) 1.099070503s ago: executing program 0 (id=2482): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x149a82, 0x0) write$sysctl(r0, &(0x7f0000000100)='7\x00', 0x2) 843.726708ms ago: executing program 7 (id=2483): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000240)={'nat\x00', 0x0, [0xe75, 0xec, 0x9546, 0x1990, 0x4]}, &(0x7f0000000140)=0x54) 820.937611ms ago: executing program 5 (id=2484): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xffffff00], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0xffc, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4a3) 746.014639ms ago: executing program 3 (id=2485): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001800dd8d00000000000000000200000000000006000000000600150006000000100016800c"], 0x34}}, 0x20000000) 698.921497ms ago: executing program 6 (id=2486): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x10) 315.472506ms ago: executing program 0 (id=2487): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) 204.626978ms ago: executing program 7 (id=2488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x6c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}]}]}], {0x14, 0x10}}, 0x10c}}, 0x0) 24.83315ms ago: executing program 3 (id=2489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) 0s ago: executing program 6 (id=2490): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={[{@usrquota}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@nointegrity}, {@nointegrity}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@discard_size={'discard', 0x3d, 0x8}}, {@usrquota, 0x0}, {}, {@resize_size}, {@quota}, {@errors_continue}, {@quota}, {@umask={'umask', 0x3d, 0x5}}, {@uid}], [{@dont_hash}, {@fowner_gt}, {@subj_user={'subj_user', 0x3d, 'integrity'}}]}, 0x1, 0x6164, &(0x7f000000f9c0)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x2000) kernel console output (not intermixed with test programs): ad_dquot: Can't read quota structure for id 0 [ 204.733388][ T8480] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1021: Failed to acquire dquot type 0 [ 204.787272][ T8480] EXT4-fs (loop1): 1 truncate cleaned up [ 204.824575][ T8480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.903781][ T58] usb 4-1: USB disconnect, device number 30 [ 205.150241][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.581471][ T8496] loop0: detected capacity change from 0 to 32768 [ 205.637573][ T8496] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1026 (8496) [ 205.664257][ T8509] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 205.692587][ T8512] loop1: detected capacity change from 0 to 512 [ 205.715268][ T8511] dccp_invalid_packet: pskb_may_pull failed [ 205.733918][ T8512] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 205.745584][ T8512] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 205.763313][ T8512] EXT4-fs (loop1): group descriptors corrupted! [ 205.994703][ T7182] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by udevd (7182) [ 206.185671][ T8528] loop5: detected capacity change from 0 to 8 [ 206.250632][ T8528] unable to read id index table [ 207.173365][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 207.364384][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 207.408342][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 207.433353][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.482114][ T9] usb 8-1: Product: syz [ 207.490542][ T9] usb 8-1: Manufacturer: syz [ 207.522581][ T9] usb 8-1: SerialNumber: syz [ 207.550016][ T9] usb 8-1: config 0 descriptor?? [ 207.600002][ T9] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input11 [ 207.804364][ T5183] bcm5974 8-1:0.0: could not read from device [ 207.813516][ T58] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 207.841187][ T5183] bcm5974 8-1:0.0: could not read from device [ 207.847753][ T9] usb 8-1: USB disconnect, device number 5 [ 207.973444][ T5954] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 207.983458][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 207.991562][ T58] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 208.001448][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.022230][ T58] usb 1-1: config 0 descriptor?? [ 208.039400][ T58] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 208.052334][ T58] gspca_mr97310a: reg write [21] error -22 [ 208.060974][ T58] mr97310a 1-1:0.0: probe with driver mr97310a failed with error -22 [ 208.175270][ T5954] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 208.208974][ T5954] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 208.223531][ T5954] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 208.233651][ T5954] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 208.279698][ T5891] usb 1-1: USB disconnect, device number 32 [ 208.290419][ T5954] usb 4-1: string descriptor 0 read error: -22 [ 208.298416][ T5954] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 208.309374][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.423613][ T58] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 208.440814][ T8606] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0108 with DS=0x7 [ 208.500920][ T8604] loop6: detected capacity change from 0 to 2048 [ 208.573035][ T5891] usb 4-1: USB disconnect, device number 31 [ 208.583451][ T8604] Dev loop6: unable to read partition block 5898240 [ 208.595312][ T58] usb 2-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=ab.a0 [ 208.605160][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.610165][ T8604] loop6: RDSK (1536) unable to read partition table [ 208.639342][ T8604] loop6: partition table beyond EOD, truncated [ 208.645474][ T58] usb 2-1: config 0 descriptor?? [ 208.657147][ T58] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 208.661094][ T8604] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 208.670026][ T58] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 208.720623][ T5198] Dev loop6: unable to read partition block 5898240 [ 208.730978][ T5198] loop6: RDSK (1536) unable to read partition table [ 208.748317][ T5198] loop6: partition table beyond EOD, truncated [ 208.901891][ T5955] usb 2-1: USB disconnect, device number 21 [ 209.063603][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 209.243518][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 209.269532][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 209.304497][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.335021][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.357529][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.386136][ T9] usb 8-1: Product: syz [ 209.400691][ T9] usb 8-1: Manufacturer: syz [ 209.443568][ T9] usb 8-1: SerialNumber: syz [ 209.456332][ T8602] loop5: detected capacity change from 0 to 40427 [ 209.527367][ T8602] F2FS-fs (loop5): invalid crc value [ 209.572635][ T8602] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 209.630524][ T8623] loop3: detected capacity change from 0 to 4096 [ 209.675447][ T8623] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 209.685866][ T9] cdc_mbim 8-1:1.0: MBIM functional descriptor missing [ 209.692790][ T9] cdc_mbim 8-1:1.0: bind() failure [ 209.717849][ T8623] ntfs3(loop3): RAW NTFS volume: Filesystem size 8192.00 Gb > volume size 0.00 Gb. Mount in read-only. [ 209.771253][ T8623] ntfs3(loop3): NTFS 8192.00 Gb is too big to use 32 bits per cluster. [ 209.814170][ T9] usb 8-1: USB disconnect, device number 6 [ 209.833166][ T8623] ntfs3(loop3): try to read out of volume at offset 0x1ffe00 [ 209.900890][ T8602] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 209.963768][ T5891] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 210.160302][ T8616] loop0: detected capacity change from 0 to 32768 [ 210.182971][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 210.380895][ T5891] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=6c.de [ 210.390472][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.398687][ T5891] usb 2-1: Product: syz [ 210.403343][ T5891] usb 2-1: Manufacturer: syz [ 210.407958][ T5891] usb 2-1: SerialNumber: syz [ 210.437755][ T5891] usb 2-1: config 0 descriptor?? [ 210.456100][ T5891] ems_usb 2-1:0.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 210.466969][ T5891] ems_usb 2-1:0.0: probe with driver ems_usb failed with error -22 [ 210.632163][ T8616] JBD2: Invalid start block of journal: 0 [ 210.660055][ T8616] (syz.0.1076,8616,1):ocfs2_journal_init:951 ERROR: Linux journal layer error [ 210.698209][ T5891] usb 2-1: USB disconnect, device number 22 [ 210.713941][ T8616] (syz.0.1076,8616,0):ocfs2_check_volume:2399 ERROR: Could not initialize journal! [ 210.726759][ T8616] (syz.0.1076,8616,0):ocfs2_check_volume:2484 ERROR: status = -22 [ 210.740343][ T8616] (syz.0.1076,8616,0):ocfs2_mount_volume:1819 ERROR: status = -22 [ 210.764406][ T8616] (syz.0.1076,8616,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 210.975756][ T9] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 211.065435][ T8642] loop6: detected capacity change from 0 to 40427 [ 211.100421][ T8642] F2FS-fs (loop6): Invalid log sectors per block(0) log sectorsize(9) [ 211.111274][ T8642] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 211.159759][ T9] usb 4-1: config 0 has an invalid interface number: 189 but max is 0 [ 211.161685][ T8642] F2FS-fs (loop6): invalid crc value [ 211.168472][ T9] usb 4-1: config 0 has no interface number 0 [ 211.210265][ T9] usb 4-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.221747][ T8642] F2FS-fs (loop6): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:2, type:0, next_blkoff:0, blkofs:1 [ 211.239400][ T9] usb 4-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 211.323362][ T9] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 211.328062][ T8642] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-117) [ 211.392016][ T9] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 211.402724][ T9] usb 4-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 211.536131][ T9] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 211.547078][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.555239][ T9] usb 4-1: Product: syz [ 211.559527][ T9] usb 4-1: Manufacturer: syz [ 211.593568][ T5891] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 211.653304][ T9] usb 4-1: SerialNumber: syz [ 211.676526][ T9] usb 4-1: config 0 descriptor?? [ 211.683066][ T8654] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 211.700089][ T9] ums-alauda 4-1:0.189: USB Mass Storage device detected [ 211.728201][ T9] scsi host1: usb-storage 4-1:0.189 [ 211.763330][ T5891] usb 8-1: Using ep0 maxpacket: 32 [ 211.772067][ T5891] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.783426][ T5891] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 211.792375][ T5891] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.815204][ T5891] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.824808][ T5891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.832844][ T5891] usb 8-1: Product: syz [ 211.838776][ T5891] usb 8-1: Manufacturer: syz [ 211.844110][ T5891] usb 8-1: SerialNumber: syz [ 211.861377][ T5891] cdc_ncm 8-1:1.0: skipping garbage [ 211.869385][ T5891] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 211.883379][ T5891] cdc_ncm 8-1:1.0: bind() failure [ 211.997883][ T25] usb 4-1: USB disconnect, device number 32 [ 212.060662][ T5955] usb 8-1: USB disconnect, device number 7 [ 212.122976][ T8692] loop0: detected capacity change from 0 to 8 [ 212.150419][ T8692] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 212.407305][ T8695] loop5: detected capacity change from 0 to 128 [ 212.697456][ T8705] loop0: detected capacity change from 0 to 128 [ 212.913427][ T8685] loop1: detected capacity change from 0 to 32768 [ 212.931737][ T8685] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1097 (8685) [ 212.965407][ T8715] loop7: detected capacity change from 0 to 16 [ 213.011001][ T8715] erofs (device loop7): mounted with root inode @ nid 36. [ 213.046680][ T8685] BTRFS info (device loop1): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 213.085404][ T8685] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 213.094502][ T25] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 213.153094][ T8685] BTRFS info (device loop1): using free-space-tree [ 213.236079][ T8724] loop0: detected capacity change from 0 to 512 [ 213.259429][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 213.283906][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.284212][ T8724] EXT4-fs: Ignoring removed oldalloc option [ 213.295431][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.00 [ 213.333404][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.792734][ T8741] loop6: detected capacity change from 0 to 512 [ 213.809184][ T8724] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1110: Parent and EA inode have the same ino 15 [ 213.851398][ T8724] EXT4-fs (loop0): Remounting filesystem read-only [ 213.858138][ T8724] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -5) [ 213.868629][ T8724] EXT4-fs (loop0): 1 orphan inode deleted [ 213.879894][ T8724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.950588][ T25] usb 4-1: config 0 descriptor?? [ 213.952520][ T8741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.958480][ T8750] loop7: detected capacity change from 0 to 512 [ 213.988406][ T8710] loop5: detected capacity change from 0 to 32768 [ 214.009911][ T25] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 214.033701][ T8710] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1105 (8710) [ 214.043766][ T8741] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.108269][ T8710] BTRFS info (device loop5): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 214.118283][ T8750] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.139078][ T8710] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 214.180950][ T8710] BTRFS info (device loop5): using free-space-tree [ 214.205543][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.236185][ T5183] bcm5974 4-1:0.0: could not read from device [ 214.331234][ T5825] BTRFS info (device loop1): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 214.403531][ T25] usb 4-1: USB disconnect, device number 33 [ 214.413259][ T7013] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.637334][ T7479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.686883][ T8788] loop6: detected capacity change from 0 to 64 [ 214.749772][ T8788] hfs: request for non-existent node 293 in B*Tree [ 214.763319][ T8788] hfs: request for non-existent node 293 in B*Tree [ 214.813309][ T8788] hfs: get root inode failed [ 214.876798][ T8793] loop7: detected capacity change from 0 to 128 [ 215.048134][ T5839] BTRFS info (device loop5): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 215.442071][ T8801] loop6: detected capacity change from 0 to 2048 [ 215.664456][ T8801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.704182][ T8814] loop7: detected capacity change from 0 to 256 [ 215.740630][ T8814] exFAT-fs (loop7): failed to read boot sector [ 215.747986][ T8814] exFAT-fs (loop7): failed to recognize exfat type [ 215.838436][ T7013] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.873353][ T25] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 215.881352][ T8812] loop3: detected capacity change from 0 to 2048 [ 216.003522][ T8812] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 216.008804][ T8812] loop3: partition table partially beyond EOD, truncated [ 216.053587][ T8812] loop3: p1 size 33024 extends beyond EOD, truncated [ 216.070907][ T8812] loop3: p2 start 16908804 is beyond EOD, truncated [ 216.123284][ T8812] loop3: p3 start 4284289 is beyond EOD, truncated [ 216.152150][ T8812] loop3: p5 size 33024 extends beyond EOD, truncated [ 216.161463][ T8818] loop7: detected capacity change from 0 to 2048 [ 216.232954][ T8812] loop3: p6 start 16908804 is beyond EOD, truncated [ 216.436193][ T8822] loop6: detected capacity change from 0 to 4096 [ 216.467592][ T8818] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.469717][ T8782] loop0: detected capacity change from 0 to 32768 [ 216.487537][ T8782] bcachefs: bch2_parse_one_mount_opt() Invalid mount option gc_reserve_bytes: must be a number [ 216.498662][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 216.512178][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.522992][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 216.535816][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 216.553003][ T25] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 216.573534][ T8818] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.623291][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.749674][ T25] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 216.793441][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.832022][ T8822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.913647][ T25] usb 6-1: Product: syz [ 216.943433][ T25] usb 6-1: Manufacturer: syz [ 216.948089][ T25] usb 6-1: SerialNumber: syz [ 217.039799][ T25] usb 6-1: config 0 descriptor?? [ 217.067914][ T25] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 217.109916][ T7479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.221512][ T8834] loop3: detected capacity change from 0 to 4096 [ 217.231590][ T7013] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.319634][ T8834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.352822][ T58] usb 6-1: USB disconnect, device number 34 [ 217.631330][ T8826] loop1: detected capacity change from 0 to 32768 [ 217.671806][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.752623][ T8826] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1130 (8826) [ 217.823386][ T8826] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.874811][ T8826] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 217.909762][ T8848] loop0: detected capacity change from 0 to 2048 [ 217.967160][ T8826] BTRFS info (device loop1): using free-space-tree [ 217.975614][ T8848] EXT4-fs: Ignoring removed bh option [ 218.207031][ T8848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.348310][ T8840] loop7: detected capacity change from 0 to 32768 [ 218.366902][ T8840] jfs: Bad value for 'gid' [ 218.371368][ T8840] jfs: Bad value for 'gid' [ 218.794399][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.102846][ T8882] loop7: detected capacity change from 0 to 1024 [ 219.303925][ T5825] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 219.380136][ T8843] loop6: detected capacity change from 0 to 40427 [ 219.476871][ T8843] F2FS-fs (loop6): Invalid segment/section count (31, 24 x 1) [ 219.520115][ T8843] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 219.764070][ T8854] loop3: detected capacity change from 0 to 32768 [ 220.021533][ T5955] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 220.121837][ T8892] loop6: detected capacity change from 0 to 32768 [ 220.246000][ T8899] loop7: detected capacity change from 0 to 164 [ 220.264034][ T8892] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section replicas_v0: no devices in entry journal: 1/0 [] [ 220.264034][ T8892] replicas_v0 (size 24): [ 220.264034][ T8892] btree: 0 [] journal: 0 [] [ 220.264034][ T8892] [ 220.289669][ T8892] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry [ 220.350513][ T8854] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 220.359365][ T8854] dlm: no local IP address has been set [ 220.400666][ T8854] dlm: cannot start dlm midcomms -107 [ 220.491380][ T8854] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 220.653170][ T8903] loop6: detected capacity change from 0 to 2 [ 220.661127][ T8903] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 220.758633][ T5955] usb 1-1: Using ep0 maxpacket: 16 [ 220.868702][ T8911] loop6: detected capacity change from 0 to 128 [ 220.965073][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 220.975001][ T5955] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 220.985564][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 220.996161][ T5955] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 221.022873][ T8915] loop7: detected capacity change from 0 to 512 [ 221.103561][ T5955] usb 1-1: New USB device found, idVendor=04ca, idProduct=9e6d, bcdDevice= 2.c8 [ 221.112674][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.120979][ T5955] usb 1-1: Product: syz [ 221.125229][ T5955] usb 1-1: Manufacturer: syz [ 221.129854][ T5955] usb 1-1: SerialNumber: syz [ 221.165405][ T5955] usb 1-1: config 0 descriptor?? [ 221.280079][ T8920] loop3: detected capacity change from 0 to 128 [ 221.378402][ T8915] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.453900][ T5955] usb 1-1: USB disconnect, device number 33 [ 221.574762][ T8928] loop6: detected capacity change from 0 to 128 [ 221.597088][ T8923] loop1: detected capacity change from 0 to 1024 [ 221.630023][ T7479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.928324][ T8933] loop3: detected capacity change from 0 to 2048 [ 221.999443][ T8938] loop5: detected capacity change from 0 to 512 [ 222.259970][ T8941] loop6: detected capacity change from 0 to 2048 [ 222.391940][ T8941] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 222.458814][ T6033] udevd[6033]: incorrect nilfs2 checksum on /dev/loop6 [ 222.466952][ T8941] NILFS (loop6): mounting unchecked fs [ 222.543641][ T8941] NILFS (loop6): invalid segment: Checksum error in super root [ 222.592433][ T8941] NILFS (loop6): error -22 while loading super root [ 222.681171][ T8947] loop1: detected capacity change from 0 to 4096 [ 222.833464][ T8959] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.140510][ T8958] loop3: detected capacity change from 0 to 4096 [ 223.183138][ T8935] loop7: detected capacity change from 0 to 32768 [ 223.278530][ T8935] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1150 (8935) [ 223.405830][ T8935] BTRFS info (device loop7): first mount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 223.446037][ T8935] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 223.503522][ T8935] BTRFS info (device loop7): using free-space-tree [ 223.505004][ T8963] loop1: detected capacity change from 0 to 32768 [ 223.692237][ T8965] loop6: detected capacity change from 0 to 4096 [ 223.752773][ T8965] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 224.765889][ T8963] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 224.793564][ T8963] dlm: no local IP address has been set [ 224.809616][ T8963] dlm: cannot start dlm midcomms -107 [ 224.844207][ T8963] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 224.854166][ T8935] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 224.854566][ T8935] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 224.877031][ T8935] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 225.354617][ T8935] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 225.419449][ T8935] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 225.513551][ T8935] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 225.570143][ T8935] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 225.643113][ T8935] BTRFS error (device loop7): open_ctree failed [ 226.536612][ T9005] loop5: detected capacity change from 0 to 1024 [ 227.868538][ T9010] loop6: detected capacity change from 0 to 32768 [ 227.900771][ T9010] (syz.6.1162,9010,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 227.933322][ T25] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 227.950460][ T9010] (syz.6.1162,9010,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 228.093298][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 228.121347][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 228.159425][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 228.218275][ T25] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 228.243380][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.256374][ T9017] loop5: detected capacity change from 0 to 32768 [ 228.283350][ T25] usb 4-1: Product: syz [ 228.287550][ T25] usb 4-1: Manufacturer: syz [ 228.292154][ T25] usb 4-1: SerialNumber: syz [ 228.297794][ T9017] (syz.5.1165,9017,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 228.338232][ T9017] (syz.5.1165,9017,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 228.360388][ T25] usb 4-1: config 0 descriptor?? [ 228.394436][ T25] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 228.648455][ T25] usb 4-1: USB disconnect, device number 34 [ 228.663372][ T5926] usb 4-1: Failed to submit usb control message: -71 [ 228.712296][ T5926] usb 4-1: unable to send the bmi data to the device: -71 [ 228.768482][ T5926] usb 4-1: unable to get target info from device [ 228.805554][ T5926] usb 4-1: could not get target info (-71) [ 228.811439][ T5926] usb 4-1: could not probe fw (-71) [ 228.978161][ T9008] loop7: detected capacity change from 0 to 65536 [ 229.344807][ T9050] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.502416][ T9068] loop1: detected capacity change from 0 to 128 [ 230.566172][ T9068] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 230.636818][ T9051] loop0: detected capacity change from 0 to 32768 [ 230.671102][ T9051] (syz.0.1169,9051,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 230.684905][ T9068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.722006][ T9051] (syz.0.1169,9051,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 231.310312][ T9081] loop0: detected capacity change from 0 to 2048 [ 231.407474][ T9081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.467829][ T9076] loop1: detected capacity change from 0 to 8192 [ 231.597996][ T9088] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.862606][ T9069] loop7: detected capacity change from 0 to 32768 [ 231.908956][ T9094] loop0: detected capacity change from 0 to 128 [ 231.933721][ T9069] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1171 (9069) [ 231.958103][ T9094] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 232.021438][ T9069] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 232.061204][ T9094] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.093756][ T9069] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 232.139198][ T9069] BTRFS info (device loop7): using free-space-tree [ 232.224445][ T9100] loop1: detected capacity change from 0 to 1024 [ 232.357985][ T9100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.475167][ T9114] loop5: detected capacity change from 0 to 128 [ 232.491574][ T9114] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 232.543364][ T9114] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.556613][ T9112] loop6: detected capacity change from 0 to 128 [ 232.700906][ T9112] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 232.760474][ T9112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.094044][ T7479] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 233.301497][ T9131] loop5: detected capacity change from 0 to 512 [ 233.352663][ T9135] loop1: detected capacity change from 0 to 128 [ 233.838079][ T9121] loop0: detected capacity change from 0 to 32768 [ 233.904620][ T9145] syz.5.1186: attempt to access beyond end of device [ 233.904620][ T9145] loop5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 234.028563][ T9145] SQUASHFS error: Failed to read block 0x0: -5 [ 234.069751][ T9145] unable to read squashfs_super_block [ 234.172882][ T9148] loop7: detected capacity change from 0 to 128 [ 234.203565][ T9149] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.418403][ T9153] loop5: detected capacity change from 0 to 256 [ 234.735708][ T9156] loop7: detected capacity change from 0 to 2048 [ 235.050838][ T9161] loop5: detected capacity change from 0 to 2048 [ 235.997997][ T9169] loop7: detected capacity change from 0 to 16384 [ 236.451890][ T9179] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.699905][ T9165] loop0: detected capacity change from 0 to 32768 [ 236.814800][ T9165] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1188 (9165) [ 237.023683][ T9165] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 237.563457][ T9165] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 237.572511][ T9165] BTRFS info (device loop0): using free-space-tree [ 238.157549][ T9187] loop1: detected capacity change from 0 to 32768 [ 238.352933][ T5835] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 238.666046][ T9187] XFS (loop1): Mounting V5 Filesystem 41ca08f1-94d2-48aa-bd9e-c0e7c187d3a2 [ 239.782601][ T9203] loop6: detected capacity change from 0 to 65536 [ 240.508333][ T9203] XFS (loop6): Deprecated V4 format (crc=0) not supported by kernel. [ 240.733534][ T9187] XFS (loop1): Ending clean mount [ 240.897706][ T5825] XFS (loop1): Unmounting Filesystem 41ca08f1-94d2-48aa-bd9e-c0e7c187d3a2 [ 241.604637][ T9238] loop0: detected capacity change from 0 to 32768 [ 241.683809][ T9227] loop5: detected capacity change from 0 to 32768 [ 241.701626][ T9227] BTRFS: device fsid 9c2593b3-5c40-4e29-8ff3-7b58260955bc devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1198 (9227) [ 242.029612][ T9238] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 242.250931][ T9238] XFS (loop0): Ending clean mount [ 242.573795][ T5835] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 242.808142][ T9240] loop3: detected capacity change from 0 to 131072 [ 242.833653][ T9227] BTRFS info (device loop5): first mount of filesystem 9c2593b3-5c40-4e29-8ff3-7b58260955bc [ 242.872303][ T9240] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 242.903574][ T9227] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 242.912080][ T9227] BTRFS info (device loop5): using free-space-tree [ 242.957672][ T9234] loop7: detected capacity change from 0 to 32768 [ 243.011511][ T9234] (syz.7.1199,9234,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 243.253795][ T9227] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 243.254059][ T9227] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 243.371890][ T9227] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 243.414398][ T9227] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 243.424055][ T9227] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 243.433827][ T9227] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 243.444003][ T9227] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 243.453999][ T9227] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 243.500733][ T9227] BTRFS error (device loop5): open_ctree failed [ 243.583288][ T9234] (syz.7.1199,9234,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 243.863695][ T9279] netlink: 'syz.0.1203': attribute type 21 has an invalid length. [ 243.941315][ T9253] loop6: detected capacity change from 0 to 32768 [ 244.001864][ T9279] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1203'. [ 244.078304][ T9253] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1202 (9253) [ 244.141698][ T9283] loop0: detected capacity change from 0 to 8 [ 244.515280][ T9247] loop1: detected capacity change from 0 to 131072 [ 244.542551][ T9291] trusted_key: encrypted_key: master key parameter is missing [ 244.664097][ T9294] trusted_key: encrypted_key: keylen parameter is missing [ 244.743036][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1212'. [ 244.881439][ T9247] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 244.885346][ T9253] BTRFS info (device loop6): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 244.901076][ T9253] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 244.913381][ T9253] BTRFS info (device loop6): using free-space-tree [ 244.928416][ T9303] loop5: detected capacity change from 0 to 512 [ 245.157975][ T9253] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 245.158301][ T9253] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 245.198518][ T9253] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 245.286004][ T9253] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 245.305213][ T9303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.343799][ T9253] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 245.344152][ T9253] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 245.354630][ T9303] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.390699][ T9253] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 245.390957][ T9253] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 245.588801][ T9253] BTRFS error (device loop6): open_ctree failed [ 246.007432][ T9351] loop3: detected capacity change from 0 to 256 [ 246.022695][ T5839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.395910][ T9356] x_tables: unsorted underflow at hook 4 [ 246.419842][ T9351] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 246.488841][ T9351] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff) [ 246.923128][ T9376] loop7: detected capacity change from 0 to 16 [ 246.973411][ T9376] erofs (device loop7): mounted with root inode @ nid 36. [ 247.272825][ T9389] loop6: detected capacity change from 0 to 1024 [ 247.583791][ T9404] capability: warning: `syz.3.1249' uses deprecated v2 capabilities in a way that may be insecure [ 247.657363][ T9389] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.825201][ T9410] loop3: detected capacity change from 0 to 256 [ 247.832873][ T9410] exfat: Deprecated parameter 'namecase' [ 248.005814][ T9410] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6d92195, utbl_chksum : 0xe619d30d) [ 248.080525][ T7013] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.080985][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1262'. [ 248.213239][ T9425] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1264'. [ 248.425199][ T9430] loop6: detected capacity change from 0 to 256 [ 248.506455][ T9435] loop5: detected capacity change from 0 to 4096 [ 248.721232][ T9430] FAT-fs (loop6): Directory bread(block 64) failed [ 248.728686][ T9430] FAT-fs (loop6): Directory bread(block 65) failed [ 248.736542][ T9430] FAT-fs (loop6): Directory bread(block 66) failed [ 248.743092][ T9430] FAT-fs (loop6): Directory bread(block 67) failed [ 248.750606][ T9430] FAT-fs (loop6): Directory bread(block 68) failed [ 248.757229][ T9430] FAT-fs (loop6): Directory bread(block 69) failed [ 248.764014][ T9430] FAT-fs (loop6): Directory bread(block 70) failed [ 248.770992][ T9430] FAT-fs (loop6): Directory bread(block 71) failed [ 248.777717][ T9430] FAT-fs (loop6): Directory bread(block 72) failed [ 248.784343][ T9430] FAT-fs (loop6): Directory bread(block 73) failed [ 248.828221][ T9442] loop1: detected capacity change from 0 to 256 [ 248.836879][ T9432] loop0: detected capacity change from 0 to 32768 [ 248.968189][ T9442] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 249.010916][ T9432] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 249.064148][ T9451] loop3: detected capacity change from 0 to 128 [ 249.263447][ T5955] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 249.304508][ T9451] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.324402][ T9432] XFS (loop0): Ending clean mount [ 249.371045][ T9451] ext4 filesystem being mounted at /195/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.389077][ T9451] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 1029 (only 1 groups) [ 249.409825][ T5835] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 249.465305][ T5955] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 249.505651][ T5955] usb 8-1: config 0 has no interface number 0 [ 249.511849][ T5955] usb 8-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 249.522046][ T5955] usb 8-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.539860][ T5838] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.618429][ T5955] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 249.627692][ T5955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.641406][ T5955] usb 8-1: Product: syz [ 249.646153][ T5955] usb 8-1: Manufacturer: syz [ 249.650780][ T5955] usb 8-1: SerialNumber: syz [ 249.660276][ T5955] usb 8-1: config 0 descriptor?? [ 249.685213][ T9448] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 249.696573][ T5955] cyberjack 8-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 249.833829][ T5955] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 250.165282][ T9480] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 250.284543][ T5906] usb 8-1: USB disconnect, device number 8 [ 250.298988][ T5906] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 250.371268][ T5906] cyberjack 8-1:0.69: device disconnected [ 250.505456][ T9498] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 250.526195][ T5955] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 250.780268][ T5955] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 250.793266][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.808761][ T5955] usb 1-1: Product: syz [ 250.813043][ T5955] usb 1-1: Manufacturer: syz [ 250.819478][ T5955] usb 1-1: SerialNumber: syz [ 250.832344][ T5955] usb 1-1: config 0 descriptor?? [ 250.848113][ T5955] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 251.042110][ T9517] netlink: 'syz.5.1302': attribute type 21 has an invalid length. [ 251.071091][ T9519] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1303'. [ 251.250745][ T5955] gspca_sunplus: reg_w_riv err -71 [ 251.267379][ T5955] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 251.322007][ T5955] usb 1-1: USB disconnect, device number 34 [ 251.421417][ T9523] loop6: detected capacity change from 0 to 4096 [ 251.589260][ T29] audit: type=1326 audit(1734780044.402:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.7.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f43185d29 code=0x7ffc0000 [ 251.649153][ T29] audit: type=1326 audit(1734780044.402:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.7.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f43185d29 code=0x7ffc0000 [ 251.721376][ T29] audit: type=1326 audit(1734780044.412:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.7.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f7f43185d29 code=0x7ffc0000 [ 251.796714][ T29] audit: type=1326 audit(1734780044.412:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.7.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f43185d29 code=0x7ffc0000 [ 251.906391][ T29] audit: type=1326 audit(1734780044.412:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.7.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f43185d29 code=0x7ffc0000 [ 252.200828][ T9537] loop6: detected capacity change from 0 to 32768 [ 252.208138][ T9537] XFS: attr2 mount option is deprecated. [ 252.260815][ T9511] loop1: detected capacity change from 0 to 32768 [ 252.384415][ T9537] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 252.427944][ T9511] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 252.459811][ T9527] loop5: detected capacity change from 0 to 32768 [ 252.469458][ T9527] (syz.5.1306,9527,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 252.491959][ T9557] xt_cgroup: xt_cgroup: no path or classid specified [ 252.504752][ T9527] (syz.5.1306,9527,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 252.707416][ T9571] loop7: detected capacity change from 0 to 2048 [ 252.718282][ T9511] XFS (loop1): Ending clean mount [ 252.867902][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'. [ 252.893345][ T9571] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.911196][ T9577] netlink: 'syz.0.1323': attribute type 2 has an invalid length. [ 252.916112][ T9527] JBD2: Ignoring recovery information on journal [ 252.963057][ T5825] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 253.023093][ T9527] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 253.046137][ T9537] XFS (loop6): Ending clean mount [ 253.069037][ T9537] XFS (loop6): Quotacheck needed: Please wait. [ 253.252437][ T9537] XFS (loop6): Quotacheck: Done. [ 253.366234][ T5839] ocfs2: Unmounting device (7,5) on (node local) [ 253.518976][ T7013] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 253.790411][ T9594] loop1: detected capacity change from 0 to 64 [ 254.368644][ T9614] netlink: 'syz.7.1340': attribute type 1 has an invalid length. [ 254.399928][ T9614] netlink: 'syz.7.1340': attribute type 2 has an invalid length. [ 254.434796][ T9614] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1340'. [ 254.558616][ T58] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 254.564797][ T9622] loop1: detected capacity change from 0 to 512 [ 254.578112][ T9620] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1341'. [ 254.630023][ T9620] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1341'. [ 254.669839][ T9622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.680196][ T9620] netlink: 'syz.6.1341': attribute type 6 has an invalid length. [ 254.703463][ T9620] netlink: 'syz.6.1341': attribute type 5 has an invalid length. [ 254.733358][ T9620] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1341'. [ 254.748195][ T9629] loop7: detected capacity change from 0 to 256 [ 254.754704][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 254.762550][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 254.772568][ T58] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 254.773992][ T9622] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.784957][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 254.804469][ T58] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 254.831544][ T58] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 254.842717][ T58] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 254.873264][ T58] usb 6-1: Product: syz [ 254.877709][ T58] usb 6-1: Manufacturer: syz [ 254.899926][ T9631] loop3: detected capacity change from 0 to 2048 [ 254.912867][ T58] usb 6-1: SerialNumber: syz [ 254.934548][ T58] usb 6-1: config 0 descriptor?? [ 254.960658][ T58] usb 6-1: NFC: intf ffff88805ec66000 id ffffffff8f30c7e0 [ 254.961000][ T9631] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 255.057167][ T9631] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.110205][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.139568][ T9631] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376) [ 255.209259][ T5891] usb 6-1: USB disconnect, device number 35 [ 255.269943][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.279954][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.339463][ T9645] loop7: detected capacity change from 0 to 16 [ 255.364805][ T25] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 255.498725][ T9645] erofs (device loop7): mounted with root inode @ nid 36. [ 255.543792][ T25] usb 7-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 255.563337][ T25] usb 7-1: config 253 interface 0 altsetting 0 has an endpoint descriptor with address 0x65, changing to 0x5 [ 255.617387][ T9654] mmap: syz.0.1360 (9654) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 255.623346][ T25] usb 7-1: config 253 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 255.679884][ T25] usb 7-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 255.804369][ T25] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.833611][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 255.865742][ T25] usb 7-1: SerialNumber: syz [ 256.155522][ T25] usb 7-1: USB disconnect, device number 11 [ 256.440314][ T9685] sctp: [Deprecated]: syz.3.1373 (pid 9685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.440314][ T9685] Use struct sctp_sack_info instead [ 256.506960][ T9695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1376'. [ 256.801134][ T9704] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1382'. [ 256.947425][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1385'. [ 257.139305][ T9708] loop0: detected capacity change from 0 to 8192 [ 257.269646][ T9708] syz.0.1383: attempt to access beyond end of device [ 257.269646][ T9708] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 257.335242][ T9708] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 257.345020][ T5848] Bluetooth: hci6: command 0x0406 tx timeout [ 257.353771][ T9708] FAT-fs (loop0): Filesystem has been set read-only [ 257.430084][ T9708] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 257.460542][ T9726] xt_time: unknown flags 0x18 [ 257.496435][ T9708] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 258.170827][ T9755] netlink: 'syz.7.1405': attribute type 1 has an invalid length. [ 258.227474][ T9746] loop6: detected capacity change from 0 to 4096 [ 258.263055][ T9746] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 258.373108][ T9746] ntfs3(loop6): Failed to load $Extend (-22). [ 258.434817][ T9746] ntfs3(loop6): Failed to initialize $Extend. [ 258.827947][ T9778] Illegal XDP return value 4294967283 on prog (id 101) dev N/A, expect packet loss! [ 259.740072][ T9823] loop3: detected capacity change from 0 to 1024 [ 259.848780][ T9823] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 259.908228][ T9829] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 259.922128][ T9823] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 259.983338][ T9823] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 260.034845][ T9831] loop0: detected capacity change from 0 to 1024 [ 260.094023][ T9823] EXT4-fs error (device loop3): ext4_get_journal_inode:5809: inode #5: comm syz.3.1438: unexpected bad inode w/o EXT4_IGET_BAD [ 260.146073][ T9835] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1445'. [ 260.153472][ T9823] EXT4-fs (loop3): no journal found [ 260.155505][ T9835] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1445'. [ 260.162889][ T9823] EXT4-fs (loop3): can't get journal size [ 260.198857][ T9835] netlink: 'syz.1.1445': attribute type 5 has an invalid length. [ 260.246543][ T9823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.261266][ T9835] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1445'. [ 260.617145][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.864745][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1455'. [ 261.099894][ T9876] netlink: 'syz.7.1466': attribute type 2 has an invalid length. [ 261.108024][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1466'. [ 261.379111][ T9885] : renamed from hsr_slave_0 (while UP) [ 261.519817][ T9888] xfrm0 speed is unknown, defaulting to 1000 [ 261.563686][ T9888] xfrm0 speed is unknown, defaulting to 1000 [ 261.572920][ T9888] xfrm0 speed is unknown, defaulting to 1000 [ 261.649072][ T9888] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 261.705169][ T9888] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 261.792076][ T9888] xfrm0 speed is unknown, defaulting to 1000 [ 261.804014][ T9888] xfrm0 speed is unknown, defaulting to 1000 [ 261.811624][ T9888] xfrm0 speed is unknown, defaulting to 1000 [ 261.830521][ T9888] xfrm0 speed is unknown, defaulting to 1000 [ 261.843324][ T5954] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 261.884966][ T9888] xfrm0 speed is unknown, defaulting to 1000 [ 261.959103][ T9888] xfrm0 speed is unknown, defaulting to 1000 [ 261.989477][ T9906] loop1: detected capacity change from 0 to 64 [ 262.030002][ T5954] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 262.049550][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.076498][ T5954] usb 1-1: Product: syz [ 262.096765][ T5954] usb 1-1: Manufacturer: syz [ 262.120147][ T5954] usb 1-1: SerialNumber: syz [ 262.170483][ T5954] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 262.211683][ T5891] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 262.512639][ T9919] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 262.746839][ T9889] loop7: detected capacity change from 0 to 40427 [ 262.923839][ T9889] F2FS-fs (loop7): heap/no_heap options were deprecated [ 262.996047][ T9889] F2FS-fs (loop7): invalid crc value [ 263.012050][ T9889] F2FS-fs (loop7): Found nat_bits in checkpoint [ 263.096975][ T9932] openvswitch: netlink: IPv4 tunnel dst address is zero [ 263.107495][ T9931] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1491'. [ 263.184535][ T9931] netlink: 'syz.5.1491': attribute type 2 has an invalid length. [ 263.263361][ T9931] netlink: 'syz.5.1491': attribute type 1 has an invalid length. [ 263.305851][ T9931] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1491'. [ 263.466361][ T9889] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 264.117513][ T7479] syz-executor: attempt to access beyond end of device [ 264.117513][ T7479] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 264.245763][ T7479] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 264.442887][ T9951] loop5: detected capacity change from 0 to 164 [ 264.634314][ T9951] Unsupported NM flag settings (8) [ 264.643378][ T9953] loop3: detected capacity change from 0 to 1024 [ 265.118499][ T62] hfsplus: b-tree write err: -5, ino 4 [ 265.182879][ T9959] loop1: detected capacity change from 0 to 4096 [ 265.323921][ T9959] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 265.703520][ T9959] ntfs3(loop1): failed to convert "c46c" to default [ 266.812238][ T9988] loop1: detected capacity change from 0 to 1764 [ 267.216271][ T9997] geneve2: entered promiscuous mode [ 267.976636][T10012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1526'. [ 268.068968][T10012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1526'. [ 268.179743][T10012] ip6gretap1: entered allmulticast mode [ 268.604939][T10022] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 268.773592][T10027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.053358][ T5955] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 269.314102][ T5955] usb 4-1: config 0 has an invalid interface number: 150 but max is 0 [ 269.361003][ T5955] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 269.460329][ T5955] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 269.530743][ T5955] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 269.613288][ T5955] usb 4-1: config 0 has no interface number 0 [ 269.662399][ T5955] usb 4-1: config 0 has no interface number 1 [ 269.708965][ T5955] usb 4-1: config 0 has no interface number 2 [ 269.784046][ T5955] usb 4-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.884419][T10051] capability: warning: `syz.0.1543' uses 32-bit capabilities (legacy support in use) [ 269.896881][ T5955] usb 4-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 269.998049][ T5955] usb 4-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 270.116030][ T5955] usb 4-1: config 0 interface 150 has no altsetting 0 [ 270.183306][ T5955] usb 4-1: config 0 interface 112 has no altsetting 0 [ 270.242121][ T5955] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 270.351973][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.396007][T10058] loop5: detected capacity change from 0 to 128 [ 270.438925][ T5955] usb 4-1: config 0 descriptor?? [ 270.503719][T10058] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 270.583303][T10058] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.963827][ T5955] usb 4-1: string descriptor 0 read error: -71 [ 271.110445][ T5955] usb 4-1: USB disconnect, device number 35 [ 271.343399][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 271.461866][ T7182] udevd[7182]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.150/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.580761][T10070] loop6: detected capacity change from 0 to 4096 [ 271.663488][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 271.732991][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.823838][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 271.834730][T10078] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 271.934054][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.955127][T10070] NILFS error (device loop6): nilfs_dotdot: directory #12 missing '.' [ 271.998582][T10082] netlink: 'syz.5.1558': attribute type 10 has an invalid length. [ 272.010394][ T8] usb 2-1: config 0 descriptor?? [ 272.053374][T10070] Remounting filesystem read-only [ 272.062382][ T8] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 272.073315][T10082] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1558'. [ 272.137771][T10082] bridge0: port 3(macvlan1) entered blocking state [ 272.223669][T10082] bridge0: port 3(macvlan1) entered disabled state [ 272.280306][T10082] macvlan1: entered allmulticast mode [ 272.346463][T10082] veth1_vlan: entered allmulticast mode [ 272.430967][T10082] macvlan1: entered promiscuous mode [ 272.471071][T10082] bridge0: port 3(macvlan1) entered blocking state [ 272.478280][T10082] bridge0: port 3(macvlan1) entered forwarding state [ 272.491081][ T8] gspca_vc032x: reg_w err -71 [ 272.539142][ T8] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 272.660784][ T8] usb 2-1: USB disconnect, device number 23 [ 274.029876][T10113] loop6: detected capacity change from 0 to 2048 [ 274.183099][T10113] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 274.319258][T10113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.072120][T10129] loop0: detected capacity change from 0 to 64 [ 276.233356][ T5848] Bluetooth: hci2: command 0x0405 tx timeout [ 276.462832][T10137] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 276.502234][T10105] loop7: detected capacity change from 0 to 40427 [ 276.798983][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1594'. [ 277.753492][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 278.057091][T10175] rtc_cmos 00:00: Alarms can be up to one day in the future [ 278.269453][T10177] loop7: detected capacity change from 0 to 64 [ 279.293345][ T8] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 279.543718][ T8] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 279.594063][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.602181][ T8] usb 4-1: Product: syz [ 279.694023][ T8] usb 4-1: Manufacturer: syz [ 279.698696][ T8] usb 4-1: SerialNumber: syz [ 279.775679][ T8] usb 4-1: config 0 descriptor?? [ 279.831327][T10197] loop6: detected capacity change from 0 to 4096 [ 280.039658][ T8] mos7840 4-1:0.0: required endpoints missing [ 280.271565][ T8] usb 4-1: USB disconnect, device number 36 [ 280.992950][T10183] loop1: detected capacity change from 0 to 32768 [ 281.082875][T10183] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1606 (10183) [ 281.227039][T10183] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 281.285293][T10183] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 281.361107][T10183] BTRFS info (device loop1): using free-space-tree [ 281.503283][ T8] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 281.703423][ C1] sched: DL replenish lagged too much [ 281.754180][T10183] BTRFS error (device loop1): open_ctree failed [ 281.785501][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 281.898511][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 281.950975][T10248] loop5: detected capacity change from 0 to 256 [ 281.981425][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.060428][ T8] usb 4-1: Product: syz [ 282.117426][T10251] overlayfs: conflicting options: userxattr,redirect_dir=on [ 282.142768][ T8] usb 4-1: Manufacturer: syz [ 282.165480][ T8] usb 4-1: SerialNumber: syz [ 282.245728][ T8] usb 4-1: config 0 descriptor?? [ 282.283325][T10248] FAT-fs (loop5): Directory bread(block 64) failed [ 282.374013][T10248] FAT-fs (loop5): Directory bread(block 65) failed [ 282.394551][T10253] @: renamed from bond_slave_0 (while UP) [ 282.443610][T10248] FAT-fs (loop5): Directory bread(block 66) failed [ 282.488587][T10248] FAT-fs (loop5): Directory bread(block 67) failed [ 282.586425][T10248] FAT-fs (loop5): Directory bread(block 68) failed [ 282.653355][T10248] FAT-fs (loop5): Directory bread(block 69) failed [ 282.660040][T10248] FAT-fs (loop5): Directory bread(block 70) failed [ 282.763444][ T5955] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 282.773308][T10248] FAT-fs (loop5): Directory bread(block 71) failed [ 282.780061][T10248] FAT-fs (loop5): Directory bread(block 72) failed [ 282.928257][ T8] usb 4-1: USB disconnect, device number 37 [ 282.953520][T10248] FAT-fs (loop5): Directory bread(block 73) failed [ 283.033321][ T5955] usb 2-1: Using ep0 maxpacket: 32 [ 283.094409][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.125157][ T5955] usb 2-1: config index 0 descriptor too short (expected 2210, got 1175) [ 283.195561][ T5955] usb 2-1: config 0 has an invalid interface number: 241 but max is 2 [ 283.311246][ T5955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.400191][ T5955] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 283.521495][ T5955] usb 2-1: config 0 has no interface number 0 [ 283.570863][ T5955] usb 2-1: config 0 interface 241 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 283.680896][ T5955] usb 2-1: config 0 interface 241 altsetting 4 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 283.799007][ T5955] usb 2-1: config 0 interface 241 altsetting 4 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 283.911730][ T5955] usb 2-1: config 0 interface 241 altsetting 4 endpoint 0x8E has invalid wMaxPacketSize 0 [ 284.000279][ T5955] usb 2-1: config 0 interface 241 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 284.119014][ T5955] usb 2-1: config 0 interface 241 has no altsetting 0 [ 284.221969][ T5955] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e0.70 [ 284.319993][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.411788][ T5955] usb 2-1: Product: syz [ 284.483388][ T5955] usb 2-1: Manufacturer: syz [ 284.510191][ T5955] usb 2-1: SerialNumber: syz [ 284.593735][ T5955] usb 2-1: config 0 descriptor?? [ 284.987043][ T5955] usb 2-1: USB disconnect, device number 24 [ 285.389670][T10291] loop3: detected capacity change from 0 to 512 [ 285.584914][T10291] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.591630][T10291] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.753978][T10291] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 285.957960][T10291] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 286.074491][T10291] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 286.254151][T10291] EXT4-fs (loop3): 1 truncate cleaned up [ 286.261220][T10291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.536805][T10291] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 286.763600][T10291] EXT4-fs (loop3): Remounting filesystem read-only [ 287.204548][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.077384][ T5848] Bluetooth: hci2: command 0x0405 tx timeout [ 288.407168][T10325] loop3: detected capacity change from 0 to 16 [ 288.450927][T10325] erofs (device loop3): mounted with root inode @ nid 36. [ 289.073774][T10333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1666'. [ 289.390686][T10336] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1668'. [ 289.753572][T10340] loop5: detected capacity change from 0 to 256 [ 289.830215][T10343] loop6: detected capacity change from 0 to 64 [ 290.402259][T10346] loop6: detected capacity change from 0 to 1024 [ 290.546025][T10346] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 290.583739][T10346] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 291.169620][T10342] loop3: detected capacity change from 0 to 32768 [ 291.204008][T10342] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1671 (10342) [ 291.300469][T10342] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 291.351808][T10342] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 291.393455][T10342] BTRFS info (device loop3): using free-space-tree [ 291.758932][ T5838] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 292.626976][T10349] loop6: detected capacity change from 0 to 40427 [ 292.690570][T10349] F2FS-fs (loop6): heap/no_heap options were deprecated [ 292.781181][T10349] F2FS-fs (loop6): invalid crc value [ 292.846763][T10349] F2FS-fs (loop6): Found nat_bits in checkpoint [ 293.143306][T10349] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 293.281536][T10349] syz.6.1675: attempt to access beyond end of device [ 293.281536][T10349] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 293.551290][ T7013] syz-executor: attempt to access beyond end of device [ 293.551290][ T7013] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 293.601606][ T7013] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 294.642940][T10375] loop3: detected capacity change from 0 to 32768 [ 294.795885][T10375] ea_get: invalid extended attribute [ 296.146062][ T5891] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 296.155779][ T5891] ath9k_htc: Failed to initialize the device [ 296.680671][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'. [ 296.841135][T10400] loop0: detected capacity change from 0 to 128 [ 296.865234][ T8] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 296.931225][T10400] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 297.002150][ T5906] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 297.145467][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 297.203521][ T8] usb 4-1: config 0 has an invalid interface number: 244 but max is 0 [ 297.288756][ T8] usb 4-1: config 0 has no interface number 0 [ 297.298000][ T5906] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 297.343326][ T5906] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 297.394694][ T8] usb 4-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 297.479036][ T5906] usb 7-1: config 0 has no interface number 0 [ 297.507836][ T8] usb 4-1: config 0 interface 244 has no altsetting 0 [ 297.541957][ T5906] usb 7-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.613329][ T8] usb 4-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 297.673634][ T5906] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 297.695861][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.778730][ T8] usb 4-1: Product: syz [ 297.798833][ T5906] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.825788][ T8] usb 4-1: Manufacturer: syz [ 297.830452][ T8] usb 4-1: SerialNumber: syz [ 297.944434][ T8] usb 4-1: config 0 descriptor?? [ 297.954871][ T5906] usb 7-1: config 0 interface 52 has no altsetting 0 [ 298.032348][ T8] snd_usb_toneport 4-1:0.244: Line 6 GuitarPort found [ 298.068477][ T5906] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 298.142919][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 298.195961][ T8] snd_usb_toneport 4-1:0.244: cannot get proper max packet size [ 298.228427][ T5906] usb 7-1: Product: syz [ 298.232646][ T5906] usb 7-1: SerialNumber: syz [ 298.251986][ T29] audit: type=1326 audit(1734780091.062:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31385d29 code=0x7ffc0000 [ 298.296869][ T8] snd_usb_toneport 4-1:0.244: Line 6 GuitarPort now disconnected [ 298.364266][ T5906] usb 7-1: config 0 descriptor?? [ 298.397170][ T8] snd_usb_toneport 4-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 298.530306][ T29] audit: type=1326 audit(1734780091.142:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f6a31385d29 code=0x7ffc0000 [ 298.552743][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.583333][ T8] usb 4-1: USB disconnect, device number 38 [ 298.764580][ T5906] input: syz (Stick) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input13 [ 298.948142][ T5906] usb 7-1: USB disconnect, device number 12 [ 298.948207][ C0] synaptics_usb 7-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 298.966159][ T29] audit: type=1326 audit(1734780091.142:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31385d29 code=0x7ffc0000 [ 298.988592][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.126151][ T5183] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 299.362416][ T29] audit: type=1326 audit(1734780091.142:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31385d29 code=0x7ffc0000 [ 299.384893][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.113443][T10442] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1705'. [ 300.122573][T10442] 0: renamed from hsr0 (while UP) [ 300.259973][T10446] loop5: detected capacity change from 0 to 512 [ 300.337378][T10442] 0: entered promiscuous mode [ 300.373900][T10442] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 300.393735][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1708'. [ 300.561291][T10446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.769750][T10446] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.155967][T10456] loop3: detected capacity change from 0 to 4096 [ 301.201744][T10446] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.1707: corrupted inode contents [ 301.266194][T10456] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 301.450563][T10446] EXT4-fs (loop5): Remounting filesystem read-only [ 301.871114][T10456] ntfs3(loop3): failed to convert "c46c" to cp437 [ 301.890381][ T5839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.921697][ T52] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 303.201742][T10485] batadv0: entered promiscuous mode [ 305.953327][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 306.243604][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 306.309986][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.456351][ T9] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 306.577350][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.672725][T10541] loop5: detected capacity change from 0 to 128 [ 306.684499][ T9] usb 8-1: Product: syz [ 306.688880][ T9] usb 8-1: Manufacturer: syz [ 306.770818][ T9] usb 8-1: SerialNumber: syz [ 306.826454][T10541] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 306.862112][ T9] usb 8-1: config 0 descriptor?? [ 307.031088][T10541] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.173477][ T9] cxacru 8-1:0.0: usbatm_usb_probe: bind failed: -19! [ 307.463791][ T8] usb 8-1: USB disconnect, device number 9 [ 308.670292][T10571] loop7: detected capacity change from 0 to 512 [ 308.937574][T10571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.093127][T10571] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.655885][ T7479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.730124][T10620] IPv6: sit1: Disabled Multicast RS [ 312.287924][T10586] loop5: detected capacity change from 0 to 32768 [ 312.603505][T10637] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 313.162849][T10645] loop0: detected capacity change from 0 to 1024 [ 313.408373][T10650] netlink: 'syz.6.1784': attribute type 5 has an invalid length. [ 313.510114][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1784'. [ 313.731505][T10652] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1785'. [ 314.316918][ T81] hfsplus: b-tree write err: -5, ino 4 [ 315.161528][T10673] ip6erspan0: entered promiscuous mode [ 315.248258][T10677] loop1: detected capacity change from 0 to 1024 [ 315.854827][T10681] netlink: 'syz.0.1798': attribute type 4 has an invalid length. [ 315.862919][T10681] netlink: 'syz.0.1798': attribute type 11 has an invalid length. [ 316.014587][T10681] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1798'. [ 316.596786][T10694] loop6: detected capacity change from 0 to 2048 [ 316.743902][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.750614][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.757449][T10694] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 316.948480][T10699] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.504270][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 317.764090][ T9] usb 8-1: config 0 has an invalid interface number: 204 but max is 0 [ 317.813260][ T9] usb 8-1: config 0 has no interface number 0 [ 317.941729][ T9] usb 8-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 317.991705][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.077400][ T9] usb 8-1: Product: syz [ 318.097646][ T9] usb 8-1: Manufacturer: syz [ 318.102311][ T9] usb 8-1: SerialNumber: syz [ 318.224513][ T9] usb 8-1: config 0 descriptor?? [ 318.266558][ T9] ems_usb 8-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -8 [ 318.370500][ T9] ems_usb 8-1:0.204: probe with driver ems_usb failed with error -8 [ 318.516416][ T9] usb 8-1: USB disconnect, device number 10 [ 319.550774][T10725] loop6: detected capacity change from 0 to 4096 [ 319.821222][T10707] loop5: detected capacity change from 0 to 32768 [ 319.974501][T10707] btrfs: Deprecated parameter 'usebackuproot' [ 319.980651][T10707] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 320.173998][T10707] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1810 (10707) [ 321.028251][T10744] netlink: 'syz.5.1829': attribute type 10 has an invalid length. [ 321.260622][T10744] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 321.686973][T10753] binfmt_misc: register: failed to install interpreter file ./file0 [ 322.477785][T10767] netlink: 'syz.1.1839': attribute type 1 has an invalid length. [ 322.543576][T10767] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1839'. [ 325.483693][T10803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1854'. [ 326.663680][T10820] netlink: 'syz.7.1861': attribute type 1 has an invalid length. [ 326.671566][T10820] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1861'. [ 329.307371][T10866] loop7: detected capacity change from 0 to 512 [ 329.446876][T10866] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 329.594526][ T29] audit: type=1326 audit(1734780122.402:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10868 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31385d29 code=0x7ffc0000 [ 329.687520][T10866] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 329.728329][T10876] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 329.808844][T10866] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.829709][ T29] audit: type=1326 audit(1734780122.452:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10868 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31385d29 code=0x7ffc0000 [ 330.041162][T10866] Quota error (device loop7): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 330.073918][ T29] audit: type=1326 audit(1734780122.452:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10868 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6a31385d29 code=0x7ffc0000 [ 330.173785][T10866] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 330.312997][ T29] audit: type=1326 audit(1734780122.492:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10868 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31385d29 code=0x7ffc0000 [ 330.359585][T10866] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.1880: Failed to acquire dquot type 0 [ 330.751204][T10886] netlink: 'syz.1.1886': attribute type 10 has an invalid length. [ 330.781602][ T7479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 330.859177][T10843] loop5: detected capacity change from 0 to 32768 [ 330.923727][T10886] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 331.490615][T10894] xt_NFQUEUE: number of total queues is 0 [ 331.763494][T10897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.771257][T10897] IPv6: NLM_F_CREATE should be set when creating new route [ 332.163339][ T8] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 332.394585][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 332.465753][ T8] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 332.557825][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.656540][ T8] usb 4-1: config 0 descriptor?? [ 332.943426][ T8] usb 4-1: string descriptor 0 read error: -71 [ 333.044929][ T8] usb 4-1: selecting invalid altsetting 3 [ 333.050731][ T8] comedi comedi0: could not set alternate setting 3 in high speed [ 333.181766][ T8] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 333.278365][ T8] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 333.443264][ T8] usb 4-1: USB disconnect, device number 39 [ 334.034992][T10929] loop7: detected capacity change from 0 to 1024 [ 334.176243][T10936] loop5: detected capacity change from 0 to 64 [ 334.299771][T10936] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 334.673674][ T35] hfsplus: b-tree write err: -5, ino 4 [ 335.455200][T10953] netlink: 'syz.1.1919': attribute type 13 has an invalid length. [ 335.714271][T10953] gretap0: refused to change device tx_queue_len [ 335.792261][T10953] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 336.597191][T10971] loop1: detected capacity change from 0 to 1024 [ 336.765099][T10971] hfsplus: bad catalog entry type [ 337.033995][T10974] loop5: detected capacity change from 0 to 512 [ 337.114372][T10979] netlink: 'syz.3.1932': attribute type 49 has an invalid length. [ 337.134623][ T81] hfsplus: b-tree write err: -5, ino 4 [ 337.147247][T10974] EXT4-fs (loop5): orphan cleanup on readonly fs [ 337.154019][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 337.223628][T10974] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 337.301512][T10974] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 337.461406][T10974] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1929: attempt to clear invalid blocks 2 len 1 [ 337.483416][ T9] usb 8-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 337.528448][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.579493][T10974] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1929: invalid indirect mapped block 1819239214 (level 0) [ 337.601878][ T9] usb 8-1: Product: syz [ 337.640122][ T9] usb 8-1: Manufacturer: syz [ 337.703933][ T9] usb 8-1: SerialNumber: syz [ 337.764146][ T9] usb 8-1: config 0 descriptor?? [ 337.782752][T10974] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1929: invalid indirect mapped block 1819239214 (level 1) [ 337.937710][T10974] EXT4-fs (loop5): 1 truncate cleaned up [ 337.990018][T10974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 338.064017][ T9] usb 8-1: ignoring: probably an ADSL modem [ 338.263728][T10974] EXT4-fs error (device loop5): ext4_lookup:1810: inode #2: comm syz.5.1929: 'file1' linked to parent dir [ 338.304946][ T9] cxacru 8-1:0.0: usbatm_usb_probe: bind failed: -19! [ 338.379996][T10994] loop3: detected capacity change from 0 to 8 [ 338.395013][ T9] usb 8-1: USB disconnect, device number 11 [ 338.616529][T10992] loop1: detected capacity change from 0 to 4096 [ 338.681661][T10992] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 338.714730][ T5839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.754929][T10996] netlink: 1284 bytes leftover after parsing attributes in process `syz.6.1940'. [ 338.777589][T10994] SQUASHFS error: xz decompression failed, data probably corrupt [ 338.855576][T10994] SQUASHFS error: Failed to read block 0x60: -5 [ 338.986962][T10994] SQUASHFS error: xz decompression failed, data probably corrupt [ 339.073624][T10994] SQUASHFS error: Failed to read block 0x60: -5 [ 339.126671][ T29] audit: type=1800 audit(1734780131.942:25): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1939" name="file1" dev="loop3" ino=1 res=0 errno=0 [ 339.743265][T11004] xt_cgroup: xt_cgroup: no path or classid specified [ 340.013091][T11009] netlink: 'syz.3.1946': attribute type 1 has an invalid length. [ 340.629236][T11017] Invalid ELF header magic: != ELF [ 341.197440][T11024] netlink: 'syz.0.1953': attribute type 2 has an invalid length. [ 341.243555][T11029] netlink: 'syz.5.1955': attribute type 11 has an invalid length. [ 341.472072][T11024] Tq: entered promiscuous mode [ 341.613361][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 341.893801][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 341.953519][ T9] usb 2-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 342.061047][ T9] usb 2-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 342.217855][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 342.319800][ T9] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 342.344475][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.452398][ T9] usb 2-1: Product: syz [ 342.514704][ T9] usb 2-1: Manufacturer: syz [ 342.519459][ T9] usb 2-1: SerialNumber: syz [ 342.630744][ T9] usb 2-1: config 0 descriptor?? [ 342.738092][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 343.016650][T11062] loop6: detected capacity change from 0 to 736 [ 343.412882][T11062] rock: directory entry would overflow storage [ 343.435670][ T9] usb 2-1: USB disconnect, device number 25 [ 343.500968][T11062] rock: sig=0x5850, size=36, remaining=14 [ 345.578783][T11103] loop3: detected capacity change from 0 to 128 [ 345.676538][T11103] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 345.861706][T11103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.043480][T11123] netlink: 'syz.5.1991': attribute type 2 has an invalid length. [ 347.555667][T11135] kAFS: unable to lookup cell '.,' [ 347.949217][T11146] xt_hashlimit: max too large, truncated to 1048576 [ 348.036775][T11146] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 348.999286][T11155] loop7: detected capacity change from 0 to 4096 [ 350.641088][T11182] loop6: detected capacity change from 0 to 1024 [ 351.205322][T11188] libceph: resolve '. [ 351.205322][T11188] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 351.205322][T11188] ' (ret=-3): failed [ 352.286314][T11141] netlink: 'syz.5.1998': attribute type 13 has an invalid length. [ 352.335202][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2024'. [ 354.122777][T11231] loop6: detected capacity change from 0 to 4096 [ 354.551252][ T29] audit: type=1326 audit(1734780147.262:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.1.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31385d29 code=0x7ffc0000 [ 354.793455][ T29] audit: type=1326 audit(1734780147.312:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.1.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f6a31385d29 code=0x7ffc0000 [ 355.036840][ T29] audit: type=1326 audit(1734780147.312:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.1.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31385d29 code=0x7ffc0000 [ 355.282063][ T29] audit: type=1326 audit(1734780147.312:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.1.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31385d29 code=0x7ffc0000 [ 355.650515][T11253] loop1: detected capacity change from 0 to 4096 [ 355.782622][T11253] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 356.294747][T11265] binder: 11263:11265 ioctl c00c620f 0 returned -14 [ 356.695595][T11269] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2051'. [ 356.793605][T11269] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2051'. [ 356.890309][T11272] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 357.670713][T11283] libceph: resolve '0.' (ret=-3): failed [ 358.389782][T11295] loop6: detected capacity change from 0 to 512 [ 358.584106][T11295] EXT4-fs: Ignoring removed bh option [ 358.887797][T11295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.980342][T11309] loop1: detected capacity change from 0 to 256 [ 359.063481][T11295] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.197234][T11309] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 359.507386][T11295] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.2061: corrupted xattr block 32: bad e_name length [ 359.567865][T11319] loop5: detected capacity change from 0 to 256 [ 359.666040][T11319] exfat: Deprecated parameter 'utf8' [ 359.697613][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 359.713381][T11295] EXT4-fs (loop6): Remounting filesystem read-only [ 359.762703][T11319] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 359.793307][ T29] audit: type=1800 audit(1734780152.602:30): pid=11295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2061" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 360.013276][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 360.023409][ T29] audit: type=1400 audit(1734780152.712:31): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=11321 comm="syz.3.2070" [ 360.053775][T11318] loop0: detected capacity change from 0 to 4096 [ 360.061068][T11319] ./file0: Can't lookup blockdev [ 360.132351][ T9] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 360.190275][ T7013] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.219983][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.306170][ T9] usb 8-1: Product: syz [ 360.310486][ T9] usb 8-1: Manufacturer: syz [ 360.432698][ T9] usb 8-1: SerialNumber: syz [ 360.522261][ T9] r8152-cfgselector 8-1: Unknown version 0x0000 [ 360.595630][ T9] r8152-cfgselector 8-1: config 0 descriptor?? [ 361.233311][ T9] r8152-cfgselector 8-1: USB disconnect, device number 12 [ 363.508621][T11371] netlink: 'syz.3.2092': attribute type 1 has an invalid length. [ 363.586297][T11371] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2092'. [ 363.639305][T11370] usb usb7: usbfs: process 11370 (syz.0.2093) did not claim interface 63 before use [ 365.143405][T11395] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2105'. [ 365.204275][T11397] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.2106'. [ 366.084959][T11409] loop0: detected capacity change from 0 to 512 [ 366.205009][T11409] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 366.297945][T11409] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 366.441198][T11409] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 366.553387][T11409] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 366.561540][T11409] System zones: 0-2, 18-18, 34-34 [ 366.728022][T11409] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 366.970998][T11409] EXT4-fs (loop0): 1 truncate cleaned up [ 367.026364][T11409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.045869][T11399] loop7: detected capacity change from 0 to 32768 [ 368.231571][T11399] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2107 (11399) [ 368.287222][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.661176][T11407] loop1: detected capacity change from 0 to 32768 [ 368.776302][T11407] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2111 (11407) [ 368.811594][T11407] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 368.811694][T11407] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 368.811731][T11407] BTRFS info (device loop1): using free-space-tree [ 368.885024][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2128'. [ 368.931793][T11407] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 368.932193][T11407] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 368.932495][T11407] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 368.964019][T11407] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 368.964327][T11407] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 368.964596][T11407] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 369.091478][T11407] BTRFS error (device loop1): open_ctree failed [ 369.191392][T11455] loop0: detected capacity change from 0 to 1764 [ 369.716282][T11455] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 371.430398][T11487] loop5: detected capacity change from 0 to 512 [ 371.549814][T11487] EXT4-fs: Invalid want_extra_isize 2047 [ 372.167628][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 372.415666][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 372.494773][ T9] usb 6-1: too many endpoints for config 11 interface 0 altsetting 0: 202, using maximum allowed: 30 [ 372.663359][ T9] usb 6-1: config 11 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 202 [ 372.833570][ T9] usb 6-1: New USB device found, idVendor=0421, idProduct=0508, bcdDevice=91.94 [ 372.933426][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.032904][ T9] usb 6-1: Product: syz [ 373.094159][T11507] dccp_v6_rcv: dropped packet with invalid checksum [ 373.143333][ T9] usb 6-1: Manufacturer: syz [ 373.203326][ T9] usb 6-1: SerialNumber: syz [ 373.297163][ T9] usb 6-1: bad CDC descriptors [ 373.547799][ T8] usb 6-1: USB disconnect, device number 36 [ 373.562435][T11512] loop0: detected capacity change from 0 to 16 [ 373.682607][T11512] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 374.894856][T11527] netlink: 'syz.1.2156': attribute type 32 has an invalid length. [ 376.227974][T11550] syz.6.2167: attempt to access beyond end of device [ 376.227974][T11550] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 376.477548][T11550] efs: cannot read volume header [ 376.793729][T11557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.939997][T11559] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2170'. [ 378.146949][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.783287][ T5955] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 379.120747][ T5955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.203945][ T5955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.316489][ T5955] usb 7-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 379.388303][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.490912][ T5955] usb 7-1: config 0 descriptor?? [ 379.811028][T11602] loop0: detected capacity change from 0 to 4096 [ 379.915032][T11602] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 379.968097][ T5955] appletouch 7-1:0.0: Failed to request geyser raw mode [ 380.030228][ T5955] appletouch 7-1:0.0: probe with driver appletouch failed with error -5 [ 380.164560][ T5955] usb 7-1: USB disconnect, device number 13 [ 380.288918][T11602] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 381.728238][T11628] loop6: detected capacity change from 0 to 8 [ 381.945286][T11628] SQUASHFS error: Unable to read inode 0xa7 [ 382.655922][T11642] netlink: 'syz.6.2207': attribute type 21 has an invalid length. [ 382.734565][T11642] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2207'. [ 382.954741][T11649] netlink: 'syz.1.2211': attribute type 25 has an invalid length. [ 383.392228][T11656] loop7: detected capacity change from 0 to 64 [ 383.438550][T11654] loop5: detected capacity change from 0 to 512 [ 383.507083][T11652] loop0: detected capacity change from 0 to 2048 [ 383.578655][T11659] loop3: detected capacity change from 0 to 64 [ 383.683481][T11654] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 383.753815][T11652] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.769670][T11659] syz.3.2216: attempt to access beyond end of device [ 383.769670][T11659] loop3: rw=0, sector=32783, nr_sectors = 1 limit=64 [ 383.793340][T11654] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 383.885446][T11654] EXT4-fs (loop5): 1 truncate cleaned up [ 383.926183][T11654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.226188][T11654] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 384.377567][T11668] loop7: detected capacity change from 0 to 512 [ 384.594626][T11668] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.2219: corrupted in-inode xattr: invalid ea_ino [ 384.721722][T11663] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 384.763583][T11668] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.2219: couldn't read orphan inode 15 (err -117) [ 384.778954][T11672] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2221'. [ 384.854485][T11672] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2221'. [ 384.876792][T11668] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.964310][ T5839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.474661][ T7479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.679843][T11682] loop5: detected capacity change from 0 to 2048 [ 385.828226][T11682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.963448][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'. [ 386.151355][T11693] loop6: detected capacity change from 0 to 64 [ 386.277950][T11693] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 386.765482][T11701] loop7: detected capacity change from 0 to 256 [ 386.888015][T11701] vfat: Unknown parameter 'ioch`rset' [ 387.085327][T11699] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2233'. [ 388.164337][T11712] loop1: detected capacity change from 0 to 4096 [ 388.433464][T11712] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 388.892491][T11694] loop0: detected capacity change from 0 to 32768 [ 388.989828][T11694] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2230 (11694) [ 389.179226][T11694] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 389.313359][T11694] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 389.413375][T11694] BTRFS info (device loop0): disk space caching is enabled [ 389.470143][T11694] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 389.622966][T11727] netlink: 'syz.7.2247': attribute type 7 has an invalid length. [ 389.683509][T11694] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 389.683837][T11694] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 389.709844][T11727] netlink: 'syz.7.2247': attribute type 8 has an invalid length. [ 389.804019][T11694] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 389.804410][T11694] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 389.934478][T11694] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 390.053941][T11694] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 390.152152][T11694] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 390.199561][T11736] loop1: detected capacity change from 0 to 256 [ 390.239431][T11694] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 390.239722][T11694] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 390.338730][T11694] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 390.473700][T11694] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 390.572371][T11694] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 390.673526][T11694] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 390.824734][T11694] BTRFS error (device loop0): open_ctree failed [ 391.348267][T11754] loop7: detected capacity change from 0 to 128 [ 391.469363][T11754] VFS: Found a Xenix FS (block size = 1024) on device loop7 [ 391.976604][ T7479] sysv_free_block: flc_count > flc_size [ 391.982719][ T7479] sysv_free_block: flc_count > flc_size [ 392.069537][ T7479] sysv_free_block: flc_count > flc_size [ 392.153199][ T7479] sysv_free_block: flc_count > flc_size [ 392.158883][ T7479] sysv_free_block: flc_count > flc_size [ 392.273740][ T7479] sysv_free_block: flc_count > flc_size [ 392.312754][ T7479] sysv_free_block: flc_count > flc_size [ 392.373371][ T7479] sysv_free_block: flc_count > flc_size [ 392.413920][ T29] audit: type=1326 audit(1734780185.222:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11763 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe956985d29 code=0x7ffc0000 [ 392.453201][ T7479] sysv_free_block: flc_count > flc_size [ 392.512042][ T7479] sysv_free_block: flc_count > flc_size [ 392.592548][ T7479] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 392.630039][ T29] audit: type=1326 audit(1734780185.252:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11763 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe956985d29 code=0x7ffc0000 [ 393.420644][ T5955] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 393.643223][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 393.733341][ T5955] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 393.804811][ T5955] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 393.907824][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.983553][T11781] TCP: TCP_TX_DELAY enabled [ 393.990867][ T5955] usb 4-1: Product: syz [ 394.049820][ T5955] usb 4-1: Manufacturer: syz [ 394.086671][ T5955] usb 4-1: SerialNumber: syz [ 394.133891][ T5955] usb 4-1: config 0 descriptor?? [ 394.203002][T11775] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 394.280758][ T5955] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 394.583462][ T5955] usb 4-1: USB disconnect, device number 40 [ 395.023066][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.093553][T11788] loop1: detected capacity change from 0 to 256 [ 395.134637][T11787] netlink: 'syz.0.2269': attribute type 2 has an invalid length. [ 395.237612][T11787] netlink: 'syz.0.2269': attribute type 1 has an invalid length. [ 395.344414][T11788] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 395.873683][T11796] i2c i2c-0: Invalid block write size 252 [ 396.290605][ T29] audit: type=1326 audit(1734780189.092:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11804 comm="syz.1.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31385d29 code=0x7ffc0000 [ 396.543201][ T29] audit: type=1326 audit(1734780189.092:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11804 comm="syz.1.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31385d29 code=0x7ffc0000 [ 396.810096][ T29] audit: type=1326 audit(1734780189.162:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11804 comm="syz.1.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f6a31385d29 code=0x7ffc0000 [ 397.015647][ T29] audit: type=1326 audit(1734780189.162:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11804 comm="syz.1.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31385d29 code=0x7ffc0000 [ 397.133350][T11813] loop3: detected capacity change from 0 to 4096 [ 397.269696][ T29] audit: type=1326 audit(1734780189.162:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11804 comm="syz.1.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31385d29 code=0x7ffc0000 [ 397.375544][T11813] ntfs3(loop3): It is recommened to use chkdsk. [ 397.437421][T11813] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 397.533528][T11813] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 397.609835][T11813] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 397.684267][T11813] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 397.776707][T11813] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00 [ 397.863334][T11813] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00 [ 397.913482][T11813] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00 [ 398.007313][T11813] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00 [ 398.083358][T11813] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00 [ 399.100711][T11845] loop1: detected capacity change from 0 to 512 [ 399.293090][T11845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.320536][T11844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.345981][T11850] loop3: detected capacity change from 0 to 512 [ 399.482417][T11845] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.514964][T11850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.537085][T11844] bond0: (slave rose0): Enslaving as an active interface with an up link [ 399.650384][T11850] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.662585][T11845] Quota error (device loop1): do_check_range: Getting block 50331648 out of range 0-5 [ 399.722346][T11859] loop5: detected capacity change from 0 to 1024 [ 399.883915][T11859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 399.989663][T11859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 400.164404][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.215420][T11859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.332129][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.794791][ T5839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.540396][T11888] loop1: detected capacity change from 0 to 256 [ 401.751579][T11892] loop3: detected capacity change from 0 to 256 [ 401.883108][T11893] loop0: detected capacity change from 0 to 256 [ 402.026205][T11888] FAT-fs (loop1): Directory bread(block 64) failed [ 402.032900][T11888] FAT-fs (loop1): Directory bread(block 65) failed [ 402.064737][T11892] FAT-fs (loop3): Directory bread(block 64) failed [ 402.071330][T11892] FAT-fs (loop3): Directory bread(block 65) failed [ 402.176365][T11888] FAT-fs (loop1): Directory bread(block 66) failed [ 402.182970][T11888] FAT-fs (loop1): Directory bread(block 67) failed [ 402.236034][T11892] FAT-fs (loop3): Directory bread(block 66) failed [ 402.242638][T11892] FAT-fs (loop3): Directory bread(block 67) failed [ 402.270630][T11898] loop5: detected capacity change from 0 to 2048 [ 402.363345][T11888] FAT-fs (loop1): Directory bread(block 68) failed [ 402.369949][T11888] FAT-fs (loop1): Directory bread(block 69) failed [ 402.393692][T11892] FAT-fs (loop3): Directory bread(block 68) failed [ 402.400586][T11892] FAT-fs (loop3): Directory bread(block 69) failed [ 402.500870][T11888] FAT-fs (loop1): Directory bread(block 70) failed [ 402.511187][T11898] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 402.560579][T11892] FAT-fs (loop3): Directory bread(block 70) failed [ 402.583402][T11888] FAT-fs (loop1): Directory bread(block 71) failed [ 402.590075][T11888] FAT-fs (loop1): Directory bread(block 72) failed [ 402.613549][T11892] FAT-fs (loop3): Directory bread(block 71) failed [ 402.693457][T11892] FAT-fs (loop3): Directory bread(block 72) failed [ 402.753424][T11888] FAT-fs (loop1): Directory bread(block 73) failed [ 402.819495][T11892] FAT-fs (loop3): Directory bread(block 73) failed [ 402.914943][T11906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.239839][ T29] audit: type=1800 audit(1734780196.052:39): pid=11892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2313" name="bus" dev="loop3" ino=1048621 res=0 errno=0 [ 403.553386][T11908] netlink: 'syz.0.2320': attribute type 8 has an invalid length. [ 403.704608][T11913] netlink: 8280 bytes leftover after parsing attributes in process `syz.5.2321'. [ 404.085243][T11913] netlink: 8280 bytes leftover after parsing attributes in process `syz.5.2321'. [ 405.059465][T11933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2330'. [ 405.133314][T11933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2330'. [ 405.942252][T11955] loop5: detected capacity change from 0 to 16 [ 406.097164][T11955] erofs (device loop5): mounted with root inode @ nid 36. [ 406.550243][T11962] loop3: detected capacity change from 0 to 512 [ 406.830143][T11962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.973328][T11962] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.424529][T11979] loop6: detected capacity change from 0 to 16 [ 407.511552][T11979] erofs (device loop6): mounted with root inode @ nid 36. [ 407.602028][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.500152][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2358'. [ 409.576386][T12011] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 409.672952][T12011] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 411.448649][T12045] overlayfs: unescaped trailing colons in lowerdir mount option. [ 411.966982][T12049] 9pnet: Found fid 0 not clunked [ 411.983710][T12044] loop0: detected capacity change from 0 to 4096 [ 413.269013][T12059] loop3: detected capacity change from 0 to 512 [ 413.424012][T12059] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 413.604585][T12059] EXT4-fs (loop3): 1 truncate cleaned up [ 413.684401][T12059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.779432][T12059] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2377: corrupted in-inode xattr: overlapping e_value [ 413.825557][T12059] EXT4-fs (loop3): Remounting filesystem read-only [ 413.825598][T12059] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1772: inode #15: comm syz.3.2377: unable to update i_inline_off [ 414.185538][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.313265][ T29] audit: type=1326 audit(1734780207.112:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.0.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707a185d29 code=0x7ffc0000 [ 414.313333][ T29] audit: type=1326 audit(1734780207.112:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.0.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707a185d29 code=0x7ffc0000 [ 414.396625][ T29] audit: type=1326 audit(1734780207.202:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.0.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f707a185d29 code=0x7ffc0000 [ 414.396687][ T29] audit: type=1326 audit(1734780207.202:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.0.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707a185d29 code=0x7ffc0000 [ 414.396732][ T29] audit: type=1326 audit(1734780207.202:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.0.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707a185d29 code=0x7ffc0000 [ 415.085435][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.327966][T12086] usb usb8: usbfs: process 12086 (syz.3.2389) did not claim interface 0 before use [ 415.520520][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.878139][T12092] loop3: detected capacity change from 0 to 128 [ 415.929578][T12092] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 416.078768][T12092] syz.3.2392: attempt to access beyond end of device [ 416.078768][T12092] loop3: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 416.078852][T12092] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 416.374105][ T5838] sysv_free_block: flc_count > flc_size [ 416.374190][ T5838] sysv_free_block: flc_count > flc_size [ 416.374204][ T5838] sysv_free_block: flc_count > flc_size [ 416.374217][ T5838] sysv_free_block: flc_count > flc_size [ 416.374230][ T5838] sysv_free_block: flc_count > flc_size [ 416.374243][ T5838] sysv_free_block: flc_count > flc_size [ 416.374256][ T5838] sysv_free_block: flc_count > flc_size [ 416.374270][ T5838] sysv_free_block: flc_count > flc_size [ 416.374283][ T5838] sysv_free_block: flc_count > flc_size [ 416.374296][ T5838] sysv_free_block: flc_count > flc_size [ 416.407367][ T5838] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 417.325194][T12104] loop7: detected capacity change from 0 to 8 [ 417.459579][T12104] SQUASHFS error: Unable to read inode 0xa7 [ 417.521140][T12079] loop1: detected capacity change from 0 to 32768 [ 417.726585][T12079] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2385 (12079) [ 417.869594][T12083] loop0: detected capacity change from 0 to 32768 [ 417.889027][T12079] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 417.993505][T12079] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 418.017353][T12083] XFS: ikeep mount option is deprecated. [ 418.072619][T12083] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop0": -EINTR [ 418.088379][T12079] BTRFS info (device loop1): using free-space-tree [ 418.231122][T12079] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 418.231428][T12079] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 418.343050][T12079] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 418.458928][T12079] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 418.598633][T12079] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 418.759164][T12079] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 418.873828][T12079] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 418.981439][T12079] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 419.083819][T12079] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 419.098280][T12135] loop5: detected capacity change from 0 to 256 [ 419.178219][T12079] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 419.178610][T12079] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 419.286431][T12079] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 419.367323][T12135] FAT-fs (loop5): Directory bread(block 64) failed [ 419.423775][T12079] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 419.446126][T12079] BTRFS error (device loop1): open_ctree failed [ 419.573354][T12135] FAT-fs (loop5): Directory bread(block 65) failed [ 419.580056][T12135] FAT-fs (loop5): Directory bread(block 66) failed [ 419.713786][T12135] FAT-fs (loop5): Directory bread(block 67) failed [ 419.791669][T12135] FAT-fs (loop5): Directory bread(block 68) failed [ 419.864944][T12135] FAT-fs (loop5): Directory bread(block 69) failed [ 419.951723][T12135] FAT-fs (loop5): Directory bread(block 70) failed [ 420.009318][T12135] FAT-fs (loop5): Directory bread(block 71) failed [ 420.113361][T12135] FAT-fs (loop5): Directory bread(block 72) failed [ 420.119961][T12135] FAT-fs (loop5): Directory bread(block 73) failed [ 420.649364][ T29] audit: type=1800 audit(1734780213.462:45): pid=12135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2409" name="file1" dev="loop5" ino=1048622 res=0 errno=0 [ 421.183673][T12161] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2418'. [ 424.069703][T12206] loop6: detected capacity change from 0 to 64 [ 424.103340][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 424.326900][ T9] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 424.431866][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.511686][ T9] usb 8-1: config 0 descriptor?? [ 424.835173][ T9] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 424.933640][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 425.054038][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 425.245411][ T9] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 425.333290][ T9] [drm] Initialized udl on minor 2 [ 425.411483][ T9] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 425.551058][ T9] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 425.656833][ T5955] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 425.700115][ T9] usb 8-1: USB disconnect, device number 13 [ 425.707263][T12228] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 425.810528][T12228] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 425.823482][ T5955] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 427.633900][T12257] netlink: 'syz.6.2458': attribute type 1 has an invalid length. [ 427.641875][T12257] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2458'. [ 428.053033][T12222] loop0: detected capacity change from 0 to 32768 [ 428.213808][T12222] workqueue: Failed to create a rescuer kthread for wq "bcachefs_btree_io": -EINTR [ 428.213994][T12222] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 428.575853][T12222] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 428.843302][T12275] x_tables: unsorted entry at hook 2 [ 430.193271][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 430.444075][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 430.503948][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 430.564397][ T9] usb 7-1: config 179 has no interface number 0 [ 430.570832][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 430.697857][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 430.773192][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 430.861841][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 430.963057][ T9] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 430.985518][T12273] loop3: detected capacity change from 0 to 32768 [ 431.073636][T12273] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2465 (12273) [ 431.096995][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 431.135864][T12277] loop5: detected capacity change from 0 to 32768 [ 431.168985][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.218633][T12277] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2467 (12277) [ 431.270075][T12287] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 431.316955][T12273] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 431.341210][ T9] xpad 7-1:179.65: probe with driver xpad failed with error -5 [ 431.414709][T12273] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 431.432188][T12277] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 431.538116][T12273] BTRFS info (device loop3): disk space caching is enabled [ 431.546316][T12277] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 431.633766][T12273] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 431.677923][T12277] BTRFS info (device loop5): using free-space-tree [ 431.783539][T12273] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 431.783851][T12273] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 431.804556][ T5955] usb 7-1: USB disconnect, device number 14 [ 431.882634][T12273] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 431.883002][T12273] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 431.977359][T12277] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 432.058345][T12273] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 432.114466][T12277] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 432.169066][T12277] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 432.283017][T12273] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 432.353780][T12273] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 432.445363][T12277] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 432.468758][T12273] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 432.560446][T12277] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 432.653692][T12277] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 432.753741][T12273] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 432.784457][T12273] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 432.859723][T12273] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 432.983631][T12273] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 433.116616][T12273] BTRFS error (device loop3): open_ctree failed [ 433.144830][T12277] BTRFS error (device loop5): open_ctree failed [ 434.026923][T12343] xt_hashlimit: invalid interval [ 434.474406][ T30] INFO: task jbd2/sda1-8:5160 blocked for more than 143 seconds. [ 434.482183][ T30] Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 434.583265][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.674152][ T30] task:jbd2/sda1-8 state:D stack:24176 pid:5160 tgid:5160 ppid:2 flags:0x00004000 [ 434.753660][ T30] Call Trace: [ 434.780203][ T30] [ 434.810630][ T30] __schedule+0x1850/0x4c30 [ 434.849467][ T30] ? __pfx___schedule+0x10/0x10 [ 434.900627][ T30] ? __pfx_lock_release+0x10/0x10 [ 434.977269][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 435.025574][ T30] ? schedule+0x90/0x320 [ 435.053636][ T30] schedule+0x14b/0x320 [ 435.085976][ T30] io_schedule+0x8d/0x110 [ 435.129011][ T30] bit_wait_io+0x12/0xd0 [ 435.162399][ T30] __wait_on_bit+0xb2/0x2f0 [ 435.187664][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 435.235899][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 435.272529][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 435.307319][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 435.363172][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 435.423262][ T30] jbd2_journal_commit_transaction+0x3cfa/0x6560 [ 435.470660][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 435.531327][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 435.550813][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.601580][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 435.640117][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.670035][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 435.721328][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 435.749933][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 435.810210][ T30] ? __pfx_do_raw_write_lock+0x10/0x10 [ 435.832616][ T30] ? prepare_to_wait+0x186/0x210 [ 435.869127][ T30] ? schedule+0x90/0x320 [ 435.891734][ T30] kjournald2+0x41c/0x7b0 [ 435.926432][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 435.975543][ T30] ? __pfx_kjournald2+0x10/0x10 [ 436.000278][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 436.035735][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.077249][ T30] ? __kthread_parkme+0x169/0x1d0 [ 436.106180][ T30] ? __pfx_kjournald2+0x10/0x10 [ 436.134597][ T30] kthread+0x2f2/0x390 [ 436.168974][ T30] ? __pfx_kjournald2+0x10/0x10 [ 436.211334][ T30] ? __pfx_kthread+0x10/0x10 [ 436.239006][ T30] ret_from_fork+0x4d/0x80 [ 436.259481][ T30] ? __pfx_kthread+0x10/0x10 [ 436.285880][ T30] ret_from_fork_asm+0x1a/0x30 [ 436.342465][ T30] [ 436.356240][ T30] [ 436.356240][ T30] Showing all locks held in the system: [ 436.446059][ T30] 4 locks held by kworker/1:0/25: [ 436.480018][ T30] 1 lock held by khungtaskd/30: [ 436.498799][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 436.558993][ T30] 2 locks held by kworker/1:1/58: [ 436.599692][ T30] 2 locks held by getty/5578: [ 436.627348][ T30] #0: ffff8880312740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 436.692724][ T30] #1: ffffc90002fd62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 436.743288][ T30] 2 locks held by kworker/1:3/5891: [ 436.773566][ T30] 1 lock held by udevd/5981: [ 436.794840][T12352] loop6: detected capacity change from 0 to 32768 [ 436.804871][ T30] 2 locks held by syz.7.2488/12348: [ 436.834665][ T30] #0: ffff88802d36a4c8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x32/0x100 [ 436.902766][ T30] #1: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 436.998894][ T30] 4 locks held by syz.6.2490/12352: [ 437.046784][ T30] #0: ffff8880b863e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 437.100091][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 437.160495][ T30] #2: ffff8880253ab168 (&(&sig->stats_lock)->lock){....}-{3:3}, at: release_task+0x83a/0x1830 [ 437.175625][ T30] #3: ffff8880253ab120 (&____s->seqcount#6){....}-{0:0}, at: do_exit+0x1b01/0x28e0 [ 437.219647][ T30] [ 437.230501][ T30] ============================================= [ 437.230501][ T30] [ 437.269015][ T30] NMI backtrace for cpu 0 [ 437.273515][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 437.284048][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 437.294133][ T30] Call Trace: [ 437.297434][ T30] [ 437.300392][ T30] dump_stack_lvl+0x241/0x360 [ 437.305122][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.310363][ T30] ? __pfx__printk+0x10/0x10 [ 437.315002][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 437.320003][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 437.325590][ T30] ? _printk+0xd5/0x120 [ 437.329792][ T30] ? __pfx__printk+0x10/0x10 [ 437.334415][ T30] ? __wake_up_klogd+0xcc/0x110 [ 437.339301][ T30] ? __pfx__printk+0x10/0x10 [ 437.343929][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.349600][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 437.354666][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 437.360689][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 437.366716][ T30] watchdog+0xff6/0x1040 [ 437.371054][ T30] ? watchdog+0x1ea/0x1040 [ 437.375519][ T30] ? __pfx_watchdog+0x10/0x10 [ 437.380244][ T30] kthread+0x2f2/0x390 [ 437.384353][ T30] ? __pfx_watchdog+0x10/0x10 [ 437.389068][ T30] ? __pfx_kthread+0x10/0x10 [ 437.393706][ T30] ret_from_fork+0x4d/0x80 [ 437.398156][ T30] ? __pfx_kthread+0x10/0x10 [ 437.402777][ T30] ret_from_fork_asm+0x1a/0x30 [ 437.407581][ T30] [ 437.411875][ T30] Sending NMI from CPU 0 to CPUs 1: [ 437.417799][ C1] NMI backtrace for cpu 1 [ 437.417816][ C1] CPU: 1 UID: 0 PID: 58 Comm: kworker/1:1 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 437.417842][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 437.417858][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 437.417901][ C1] RIP: 0010:unwind_next_frame+0x486/0x22d0 [ 437.417932][ C1] Code: c6 03 01 48 c7 c2 00 26 08 8c 48 8b 6c 24 50 4c 8d 7a 04 48 8d 5a 05 4c 89 f8 48 c1 e8 03 48 89 44 24 70 42 0f b6 04 20 84 c0 <48> 89 54 24 10 0f 85 79 16 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 [ 437.417952][ C1] RSP: 0018:ffffc90000a18130 EFLAGS: 00000046 [ 437.417971][ C1] RAX: 0000000000000000 RBX: ffffffff90fe34f3 RCX: ffffffff90693b50 [ 437.417988][ C1] RDX: ffffffff90fe34ee RSI: ffffffff90fe34ee RDI: 0000000000000001 [ 437.418005][ C1] RBP: ffffc90000a18250 R08: 0000000000000001 R09: ffffc90000a182f0 [ 437.418022][ C1] R10: dffffc0000000000 R11: ffffffff818b39e0 R12: dffffc0000000000 [ 437.418039][ C1] R13: ffffc90000a18200 R14: ffffffff90fe34f3 R15: ffffffff90fe34f2 [ 437.418060][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 437.418079][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.418096][ C1] CR2: 0000001b2fd12ff8 CR3: 000000000e736000 CR4: 0000000000350ef0 [ 437.418114][ C1] Call Trace: [ 437.418122][ C1] [ 437.418132][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 437.418161][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 437.418192][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 437.418226][ C1] ? nmi_handle+0x2a/0x5a0 [ 437.418266][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 437.418288][ C1] ? nmi_handle+0x151/0x5a0 [ 437.418315][ C1] ? nmi_handle+0x2a/0x5a0 [ 437.418344][ C1] ? unwind_next_frame+0x486/0x22d0 [ 437.418371][ C1] ? default_do_nmi+0x63/0x160 [ 437.418398][ C1] ? exc_nmi+0x123/0x1f0 [ 437.418422][ C1] ? end_repeat_nmi+0xf/0x53 [ 437.418445][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 437.418474][ C1] ? unwind_next_frame+0x486/0x22d0 [ 437.418502][ C1] ? unwind_next_frame+0x486/0x22d0 [ 437.418530][ C1] ? unwind_next_frame+0x486/0x22d0 [ 437.418557][ C1] [ 437.418565][ C1] [ 437.418579][ C1] ? usb_hcd_submit_urb+0x36e/0x1e80 [ 437.418612][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 437.418637][ C1] arch_stack_walk+0x11c/0x150 [ 437.418669][ C1] ? usb_hcd_submit_urb+0x36e/0x1e80 [ 437.418702][ C1] stack_trace_save+0x118/0x1d0 [ 437.418724][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.418749][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 437.418769][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.418798][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.418824][ C1] kasan_save_track+0x3f/0x80 [ 437.418848][ C1] ? kasan_save_track+0x3f/0x80 [ 437.418871][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 437.418896][ C1] ? __kmalloc_cache_noprof+0x243/0x390 [ 437.418927][ C1] ? dummy_urb_enqueue+0x7d/0x780 [ 437.418949][ C1] ? usb_hcd_submit_urb+0x36e/0x1e80 [ 437.419009][ C1] __kasan_kmalloc+0x98/0xb0 [ 437.419036][ C1] __kmalloc_cache_noprof+0x243/0x390 [ 437.419067][ C1] ? dummy_urb_enqueue+0x7d/0x780 [ 437.419092][ C1] dummy_urb_enqueue+0x7d/0x780 [ 437.419119][ C1] usb_hcd_submit_urb+0x36e/0x1e80 [ 437.419155][ C1] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 437.419184][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 437.419213][ C1] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 437.419245][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.419268][ C1] ? usb_submit_urb+0x10e4/0x1930 [ 437.419306][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.419334][ C1] ath9k_hif_usb_reg_in_cb+0x4ce/0x6e0 [ 437.419371][ C1] ? kcov_remote_start+0x97/0x7d0 [ 437.419400][ C1] __usb_hcd_giveback_urb+0x42e/0x6e0 [ 437.419433][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 437.419467][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 437.419489][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.419517][ C1] dummy_timer+0x856/0x4620 [ 437.419539][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.419568][ C1] ? debug_object_deactivate+0x2d5/0x390 [ 437.419619][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.419659][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 437.419686][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 437.419709][ C1] __hrtimer_run_queues+0x59d/0xd30 [ 437.419742][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 437.419781][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 437.419814][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.419837][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.419859][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 437.419891][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 437.419928][ C1] handle_softirqs+0x2d6/0x9b0 [ 437.419964][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.419992][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 437.420029][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 437.420066][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.420089][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 437.420121][ C1] __irq_exit_rcu+0xf7/0x220 [ 437.420156][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 437.420194][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.420224][ C1] irq_exit_rcu+0x9/0x30 [ 437.420257][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 437.420287][ C1] [ 437.420295][ C1] [ 437.420304][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 437.420339][ C1] RIP: 0010:raw_spin_rq_unlock_irq+0x19/0x90 [ 437.420371][ C1] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 53 48 89 fb 66 90 48 89 df e8 5e 82 5b 0a e8 e9 74 37 00 fb 5b <41> 5e 41 5f e9 09 89 80 0a f3 0f 1e fa 49 bf 00 00 00 00 00 fc ff [ 437.420390][ C1] RSP: 0018:ffffc9000102f688 EFLAGS: 00000282 [ 437.420409][ C1] RAX: c071063fe2065500 RBX: ffff8880b873e8c0 RCX: ffffffff817b275a [ 437.420428][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a9760 RDI: ffffffff8c5faee0 [ 437.420445][ C1] RBP: ffffc9000102f8b0 R08: ffffffff942a4987 R09: 1ffffffff2854930 [ 437.420464][ C1] R10: dffffc0000000000 R11: fffffbfff2854931 R12: ffffc9000102f830 [ 437.420481][ C1] R13: 1ffff110170e7ed9 R14: ffff8880232a9e00 R15: ffff8880232aa570 [ 437.420505][ C1] ? mark_lock+0x9a/0x360 [ 437.420539][ C1] __schedule+0x1a09/0x4c30 [ 437.420566][ C1] ? ip6_finish_output2+0x107f/0x17b0 [ 437.420598][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.420620][ C1] ? mark_lock+0x9a/0x360 [ 437.420651][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 437.420680][ C1] ? __ip6_local_out+0x7c1/0x800 [ 437.420712][ C1] ? __pfx___schedule+0x10/0x10 [ 437.420742][ C1] ? irqentry_exit+0x63/0x90 [ 437.420772][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.420795][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 437.420827][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.420856][ C1] ? mark_lock+0x9a/0x360 [ 437.420887][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 437.420917][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 437.420949][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 437.420984][ C1] irqentry_exit+0x5e/0x90 [ 437.421014][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 437.421049][ C1] RIP: 0010:__local_bh_enable_ip+0x170/0x200 [ 437.421085][ C1] Code: 8c e8 14 d4 66 0a 65 66 8b 05 34 11 a2 7e 66 85 c0 75 5d bf 01 00 00 00 e8 5d bd 0b 00 e8 d8 67 45 00 fb 65 8b 05 f8 10 a2 7e <85> c0 75 05 e8 77 82 a8 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c [ 437.421105][ C1] RSP: 0018:ffffc9000102fa40 EFLAGS: 00000286 [ 437.421123][ C1] RAX: 0000000080000000 RBX: 1ffff92000205f4c RCX: ffffffff817b275a [ 437.421140][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a9760 RDI: ffffffff8c5faee0 [ 437.421158][ C1] RBP: ffffc9000102faf8 R08: ffffffff942a4987 R09: 1ffffffff2854930 [ 437.421176][ C1] R10: dffffc0000000000 R11: fffffbfff2854931 R12: dffffc0000000000 [ 437.421193][ C1] R13: 1ffff92000205f50 R14: ffffc9000102fa80 R15: 0000000000000201 [ 437.421220][ C1] ? mark_lock+0x9a/0x360 [ 437.421254][ C1] ? wg_socket_send_skb_to_peer+0x176/0x1d0 [ 437.421278][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 437.421314][ C1] ? mod_peer_timer+0x21/0x260 [ 437.421347][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.421373][ C1] wg_socket_send_skb_to_peer+0x176/0x1d0 [ 437.421398][ C1] wg_packet_tx_worker+0x1bf/0x810 [ 437.421438][ C1] ? process_scheduled_works+0x976/0x1840 [ 437.421462][ C1] process_scheduled_works+0xa68/0x1840 [ 437.421502][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 437.421532][ C1] ? assign_work+0x364/0x3d0 [ 437.421557][ C1] worker_thread+0x870/0xd30 [ 437.421590][ C1] ? __kthread_parkme+0x169/0x1d0 [ 437.421618][ C1] ? __pfx_worker_thread+0x10/0x10 [ 437.421642][ C1] kthread+0x2f2/0x390 [ 437.421669][ C1] ? __pfx_worker_thread+0x10/0x10 [ 437.421692][ C1] ? __pfx_kthread+0x10/0x10 [ 437.421721][ C1] ret_from_fork+0x4d/0x80 [ 437.421744][ C1] ? __pfx_kthread+0x10/0x10 [ 437.421772][ C1] ret_from_fork_asm+0x1a/0x30 [ 437.421804][ C1] [ 438.387720][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 438.394636][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 438.405163][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 438.415246][ T30] Call Trace: [ 438.418541][ T30] [ 438.421488][ T30] dump_stack_lvl+0x241/0x360 [ 438.426214][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.431448][ T30] ? __pfx__printk+0x10/0x10 [ 438.436068][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 438.442090][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.447751][ T30] ? vscnprintf+0x5d/0x90 [ 438.452122][ T30] panic+0x349/0x880 [ 438.456050][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.461712][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 438.467897][ T30] ? __pfx_panic+0x10/0x10 [ 438.472341][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 438.477750][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.483407][ T30] ? __irq_work_queue_local+0x137/0x410 [ 438.488983][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.494637][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 438.500039][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 438.506229][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 438.512419][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.518076][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 438.524276][ T30] watchdog+0x1035/0x1040 [ 438.528650][ T30] ? watchdog+0x1ea/0x1040 [ 438.533107][ T30] ? __pfx_watchdog+0x10/0x10 [ 438.537819][ T30] kthread+0x2f2/0x390 [ 438.541950][ T30] ? __pfx_watchdog+0x10/0x10 [ 438.546677][ T30] ? __pfx_kthread+0x10/0x10 [ 438.551303][ T30] ret_from_fork+0x4d/0x80 [ 438.555749][ T30] ? __pfx_kthread+0x10/0x10 [ 438.560382][ T30] ret_from_fork_asm+0x1a/0x30 [ 438.565192][ T30] [ 438.569275][ T30] Kernel Offset: disabled [ 438.573605][ T30] Rebooting in 86400 seconds..