last executing test programs: 5m42.519890397s ago: executing program 3 (id=15670): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4014) 5m41.978473467s ago: executing program 3 (id=15681): syz_mount_image$erofs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xfd, 0x1f5, &(0x7f0000000180)="$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") listxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 5m41.622923559s ago: executing program 3 (id=15687): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000076000d0b20000000ffdbdf25030000000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000a008aa2e2be"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m41.200161851s ago: executing program 3 (id=15696): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0xc01c, &(0x7f0000000040)=ANY=[], 0x6, 0x21c, &(0x7f0000000500)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m40.707249309s ago: executing program 3 (id=15705): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000002000)=@raw=[@generic={0x95, 0x0, 0x0, 0x0, 0x338}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m39.23659915s ago: executing program 3 (id=15721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7e7d}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 5m38.720658944s ago: executing program 32 (id=15721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7e7d}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 44.823241998s ago: executing program 4 (id=19602): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 44.560360519s ago: executing program 4 (id=19607): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="01"]) ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f0000000040)) 44.303536787s ago: executing program 4 (id=19612): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 44.068087307s ago: executing program 4 (id=19616): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x800, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 43.462200085s ago: executing program 4 (id=19621): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, 0xdfd}}, {@space_cache_v2}, {@compress_force}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x1a22a}}, {@flushoncommit}, {@skip_balance}, {@max_inline={'max_inline', 0x3d, [0x38, 0x6b, 0x65]}}, {@nodiscard}]}, 0x1, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x3, 0x2, 0xd}) 42.308700542s ago: executing program 4 (id=19635): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) 41.726503771s ago: executing program 33 (id=19635): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) 3.305825944s ago: executing program 6 (id=19978): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xa, &(0x7f0000000200)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4, 0x0, 0x0, 0xffffffff}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x55}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.305692155s ago: executing program 5 (id=19979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbc4252c0000002000018008000100", @ANYRES32=r1, @ANYBLOB="140002"], 0x34}, 0x1, 0x0, 0x0, 0x8811}, 0xc080) 3.083672959s ago: executing program 6 (id=19984): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.99750096s ago: executing program 5 (id=19986): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000000c0)) 2.841964931s ago: executing program 6 (id=19989): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="680b53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) 2.763216907s ago: executing program 5 (id=19990): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="eb37b5a422c093828cbc8f19d03b000068000100fdfc00"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11}}) 2.724621757s ago: executing program 1 (id=19991): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x401, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 2.590111462s ago: executing program 5 (id=19993): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="6800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a34001280110001006272696467655f736c617665000000001c0005800500010000000000050020000100000005002100a1000000140003006272696467655f736c6176655f30"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 2.452652035s ago: executing program 2 (id=19995): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1444c, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="68dc27454d2e2e9040c99f2221a7ac0d9b621736f9", @ANYRES16, @ANYRES16], 0xfe, 0xc17, &(0x7f0000001dc0)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22ZXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkJPBYGbfikuKsmRTpEj7+2zqNzv73ux7b9YzsqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN97+dKZ59KjbgUAsJ+ujH/1zFn3fwD4RLnq//8BAAAAAAAAAAAAAOCgS1HE45Fi/sp6mqxedwxcbs/euj0xMrpztWOpqnmkKl/+DDx39tz5Lz0/fKGbH1z/YXsyXh2/eqn+0tzN+YXW4mJruj4x256am2498BF2W3+7oWoA6jdfuzV9/fpi/eyz57a8fXvwvf7HTg5eHH769FPdshMjo6PjPWVqfR/50+9yrxkeR6OI05Hime/9JDUjoojdj8V9vjt77VjViaGqExMjo1VHZtrN2aXyzbHuQBQR9Z5Kje4Y7cO52JVGxHLZ/LLBQ2X3xuebC81rM636WHNhqb3UnpsdS53Wlv2pRxEXUsRKRKz13324viiiFim+c2I9XYuII91x+GI1Mfje7Sj2sI8PoGxnvS9ipTgE5+wA648iXokUP327iKlyzPJPfCHilTJ/EPFmmS9GpPKLcT7i3R2+RxxOtSjiL8rzf3E9TVfXg+515fLX6l+ZvT7XU7Z7XTn094f9dMCvTQNRRLO64q+nj/6bHQAAAAAAAAAAAAAAAAAetmNRxJOR4uX/+KNqXnFU89JPXBz+/cFf7J0z/sR9jlOWfTYilosHm5N7NE8hHktjKT3iucSfZANRxB/n+X/fetSNAQAAAAAAAAAAAAAAAAAA+EQr4seR4oV3TqWV6F1TvD17o361eW2msypsd+3f7prpGxsbG/XUyUbOyZzLOVdyruZcyxlFrp+zkXMy53LOlZyrOddyxpFcP2cj52TO5ZwrOVdzruWMWq6fs5FzMudyzpWcqznXcsYBWbsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODjpIgi3o8U3/7GeooUEY2Iyejkan+3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwKPWnIr4fKep/0LizrxYRqfq341T5y/loHC3z09EYLvPFaFzK2ayy1vjWI2g/u9OXivhRpOgfeOvOCc/nv6/z6s7XIN785uarX6l18kj3zcH3+h87eeLi8OivPXGv7bRTA4Yut2dv3a5PjIyOjvfsruVP/3TPvsH8ucXD6ToRsfj6G681Z2ZaCzY+GRu1zkYtDkh79msjX6/ioLRn+0bjYDRjc+MRX5jYF+X9/91I8dvv/Gf3ht+9//9C59WdO3z87E827/8vbD/QHt3/H+/Z90L+3UhfLWJg6eZ838mIgcXX3zjdvtm80brRmj1/5syXh4e/fO5M39GIgevtmVbP1q6HCgAAAAAAAAAAAAAAAGB/pSJ+N1I0f7Se6hFxu5qvNXhx+OnTTx2JI9V8qy3ztl4dv3qp/tLczfmF1uJia7o+MduemptuPejHDVTTvSZGRvekM/d1bI/bf2zgpbn51xfaN/5wacf3jw9cura4tNCc2vntOBZFRKN3z1DV4ImR0arRM+3mbFV1bMfJdB9eXyrivyLF1Pl6+nzel+f/bZ/hv2X+//L2A+3R/L9P9ewrPzOlIn4WKX7rL5+Iz1ftPB53jVku97eRYujC53K5OFqW67ah81yBzszAsuz/RYp/fH9r2e58yMc3yz73wAN7SJTn/0Sk+P6ffzd+Pe/b+vyHnc//8e0H2qPz/5mefce3PK9g110nn//TkeLFx9+K38j7Puj5H0VsbGz8acSpXPjO8zn26Px/tmffYHQ+9zcfXvcBAAAAAAAAAAAOrb5UxN9FiqdGa+n5vO9B/v7f9PYD7dHf//rlnn3T+7Re0a4HFQAAAAAOiL5UxI8jxY2lt+7Mod46/7tn/ufvbK69PpK2vVv9Od8vVc8NeJh//tdrMH/u5O67DQAAAAAAAAAAAAAAAAAAAAdKSkU8n9dTn7zPeuqrkeLl/3kml0sny3LddeAHq18HrszNnr40MzM31VxqXptp1cfnm1Otsu5nIsX633wu1y2q9dW768131ngf2Oiuxb4QKUb/vlu2sxZ7d23yznrgnbXYy7KfihT//Q9by3bXsf7sZtmzZdm/jhRf/+edy57cLHuuLPvdSPHDr9e7ZY+XZbvPR+08k3SgFjOtZ6fmZu56FCoAAAAAAAAAAAAAAAAAAAB8WH2piD+LFP97cyWW87T/vP5/dwX+Wrfsm9/sWe9/m9vVOv+D1fr/99r+KOv/Dz60ngIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOGRoog3IsX8lfW02l++7hi43J69dXtiZHTnasdSVfNIVb78GXju7LnzX3p++EI3P7j+w/ZkvDp+9VL9pbmb8wutxcXWdH1itj01N9164CPstv7m0HUMVQNQv/narenr1xfrZ589t+Xt24Pv9T92cvDi8NOnn+qWnRgZHR3vKVPr+xCf/qEat+loFPFXkeKZ7/0k/Ut/RBG7H4v7fHf22rGqE0NVJyZGRquOzLSbs0vlm2PdgSgi6j2VGt0x2odzsSuNiOWy+WWDh8rujc83F5rXZlr1sebCUnupPTc7ljqtLftTjyIupIiViFjrv/twfVHEa5HiOyfW07/2RxzpjsMXr4x/9czZe7ej2MM+PoCynfW+iJXiEJyzA6w/ivinSPHTt0/Fv/VH1KLzE1+IeKXMH0S8WeaLEan8YpyPeHeH7xGHUy2K+P/y/F9cT2/3l9eD7nXl8tfqX5m9PtdTtntdOfT3h/10wK9NA1HED6sr/nr6d/9dAwAAAAAAAAAAAAAAABwgRfxqpHjhnVOpmh98Z05xe/ZG/Wrz2kxnWl937l93zvTGxsZGPXWykXMy53LOlZyrOddyRpHr52zknMy5nHMl52rOtZxxJNfP2cg5mXM550rO1ZxrOaOW6+ds5JzMuZxzJedqzrWccUDm7gEAAAAAAAAAAAAAAAAAAB8vRfVPim9/Yz1t9HfWl56MTq5aD/Rj7+cBAAD//1vO/Qs=") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.428323036s ago: executing program 1 (id=19996): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0) 2.333068094s ago: executing program 6 (id=19997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}}, 0x10) 2.203113139s ago: executing program 5 (id=19999): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x82b25795b68e9dce, 0x0, {0x9, 0x21, 0x81, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x46, 0x6, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x3, 0x2e, {0x2e, 0xa, "83efb949f0ff7f562348d180df827ff0478fa22a61a54607b71ea9e43d359c479c37f525cde32758cc0738b4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.189549961s ago: executing program 1 (id=20000): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x8001, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0xa1, 0x1, 0x4, r0, &(0x7f0000000040)="1d", 0x1}]) 2.106103745s ago: executing program 6 (id=20002): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000040)={[{@part={'part', 0x3d, 0x4}}, {@creator={'creator', 0x3d, "3743985e"}}, {@nls={'nls', 0x3d, 'cp1251'}}]}, 0x1, 0x5c8, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2640, 0x9) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.881356457s ago: executing program 2 (id=20003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x4) 1.865032466s ago: executing program 1 (id=20004): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="5600000011002914000602080000000000000400200000", 0x17) 1.823314135s ago: executing program 7 (id=20005): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40044) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 1.764716314s ago: executing program 0 (id=20006): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e20, 0x3, 'lc\x00', 0x12, 0xa, 0x55}, {@remote, 0x4e27, 0x2000, 0x84000000, 0x12d5c, 0x12d5c}}, 0x44) 1.571671178s ago: executing program 7 (id=20007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x200004f}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 1.549462879s ago: executing program 1 (id=20008): socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009780)='./file0\x00', 0x41, &(0x7f0000000000)={[{@norecovery}]}, 0x1, 0x97f7, &(0x7f0000013c80)="$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") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000002780)={0x7d, 0x6, 0x0, 0x6}) 1.438057358s ago: executing program 0 (id=20009): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x856}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.395547643s ago: executing program 6 (id=20010): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f000904"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 1.255558062s ago: executing program 2 (id=20011): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffe5}, 0x0) sendmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000001"], 0x20}, 0x0) 1.193983429s ago: executing program 7 (id=20012): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="6800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a34001280110001006272696467655f736c617665000000001c0005800500010000000000050020000100000005002100a1000000140003006272696467655f736c6176655f30"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 1.09662296s ago: executing program 0 (id=20013): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0xd000}], 0x1, &(0x7f0000001740)=[@zcopy_cookie={0x13, 0x114, 0xc, 0x800}], 0x18}, 0x4000000) 937.755042ms ago: executing program 0 (id=20014): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x6) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) 864.601436ms ago: executing program 2 (id=20015): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_MKDIRAT={0x25, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 823.35402ms ago: executing program 7 (id=20016): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@getlink={0x28, 0x12, 0x1, 0x70bd25, 0x25dfdbfc, {0x7}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 664.038569ms ago: executing program 0 (id=20017): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r0, 0x80047456, 0xffefff1f00000000) 575.383644ms ago: executing program 1 (id=20018): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0) 564.626533ms ago: executing program 7 (id=20019): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c, 0x0, 0x0, 0x4}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r1, &(0x7f00000009c0)="95ae6df3", &(0x7f0000000000)=""/95, 0x2}, 0x20) 485.281511ms ago: executing program 2 (id=20020): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x2004000, &(0x7f0000000140)=ANY=[], 0xff, 0xb14, &(0x7f00000003c0)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) getdents64(r0, 0x0, 0x0) 293.261682ms ago: executing program 7 (id=20021): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) 262.211586ms ago: executing program 5 (id=20022): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 231.965984ms ago: executing program 0 (id=20023): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000000c0)=0x31) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x1) 0s ago: executing program 2 (id=20024): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4) kernel console output (not intermixed with test programs): T9411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.251566][ T9411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.251636][ T9411] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1639.251701][ T9411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.266916][ T9411] usb 1-1: config 0 descriptor?? [ 1639.276674][T15451] loop2: detected capacity change from 0 to 32768 [ 1639.322843][T29278] usb 6-1: config 0 descriptor?? [ 1639.351163][T15451] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1639.459298][T15451] XFS (loop2): Ending clean mount [ 1639.540475][T15480] loop4: detected capacity change from 0 to 32768 [ 1639.587868][T15451] XFS (loop2): User initiated shutdown received. [ 1639.588381][T15451] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x16b/0x1a0 (fs/xfs/xfs_fsops.c:464). Shutting down filesystem. [ 1639.588502][T15451] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 1639.636947][T15480] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1639.693229][ T5859] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1639.770646][ T5858] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1639.837418][ T9411] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0019/input/input171 [ 1639.865724][T29278] uvcvideo 6-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1639.865767][T29278] uvcvideo 6-1:0.64: No valid video chain found. [ 1639.906299][ T9411] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1640.007214][ T9411] usb 1-1: USB disconnect, device number 2 [ 1640.154953][T29278] usb 6-1: USB disconnect, device number 18 [ 1640.255653][ T5863] ocfs2: Unmounting device (7,4) on (node local) [ 1640.358002][T15492] fido_id[15492]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1640.491405][T15497] loop4: detected capacity change from 0 to 8 [ 1641.240751][ T9411] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1641.402614][ T9411] usb 2-1: Using ep0 maxpacket: 32 [ 1641.403528][ T9411] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1641.405179][ T9411] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1641.405220][ T9411] usb 2-1: config 0 has no interface number 0 [ 1641.409548][ T9411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.409590][ T9411] usb 2-1: Product: syz [ 1641.409618][ T9411] usb 2-1: Manufacturer: syz [ 1641.409646][ T9411] usb 2-1: SerialNumber: syz [ 1641.420127][ T9411] usb 2-1: config 0 descriptor?? [ 1641.432447][ T9411] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1641.664779][ T9411] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1641.726675][ T9411] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1641.921797][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 1642.140490][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1642.141052][T29278] usb 2-1: USB disconnect, device number 14 [ 1642.166510][T29278] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1642.195594][T29278] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1642.198149][T29278] quatech2 2-1:0.51: device disconnected [ 1643.241450][T15567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1643.493081][T15578] loop4: detected capacity change from 0 to 1024 [ 1643.564577][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1643.564607][ T31] audit: type=1800 audit(2000525516.478:422): pid=15578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19148" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 1643.655328][T29278] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1643.826321][T29278] usb 3-1: Using ep0 maxpacket: 32 [ 1643.827209][T29278] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1643.828784][T29278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.828836][T29278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1643.828895][T29278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.835667][T29278] usb 3-1: config 0 descriptor?? [ 1643.900513][T29278] hub 3-1:0.0: USB hub found [ 1643.943936][ T5992] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1644.115633][ T5992] usb 2-1: Using ep0 maxpacket: 32 [ 1644.116883][T29278] hub 3-1:0.0: 26 ports detected [ 1644.117277][ T5992] usb 2-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 1644.117640][T29278] hub 3-1:0.0: insufficient power available to use all downstream ports [ 1644.120739][ T5992] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1644.120792][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.121587][T15592] loop4: detected capacity change from 0 to 128 [ 1644.179223][ T5992] usb 2-1: config 0 descriptor?? [ 1644.305162][T15594] loop6: detected capacity change from 0 to 512 [ 1644.335235][T29278] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1644.339034][T15594] EXT4-fs error (device loop6): ext4_xattr_inode_iget:470: comm syz.6.19157: EA inode 11 has unexpected i_nlink=0 ref_count=7168870745731235840 [ 1644.340414][T15594] loop6: lost filesystem error report for type 5 error -117 [ 1644.357182][T29278] usbhid 3-1:0.0: can't add hid device: -71 [ 1644.357353][T29278] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1644.371474][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1644.371504][ C0] EXT4-fs (loop6): initial error at time 2000525517: ext4_xattr_inode_iget:470 [ 1644.371544][ C0] EXT4-fs (loop6): last error at time 2000525517: ext4_xattr_inode_iget:470 [ 1644.374766][T29278] usb 3-1: USB disconnect, device number 17 [ 1644.409847][T15594] EXT4-fs (loop6): 1 orphan inode deleted [ 1644.415963][T15594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1644.441022][T15572] loop5: detected capacity change from 0 to 32768 [ 1644.477028][T15572] (syz.5.19146,15572,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1644.494898][T15572] (syz.5.19146,15572,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1644.570263][T15572] JBD2: Ignoring recovery information on journal [ 1644.663505][ T5992] hid_parser_main: 14 callbacks suppressed [ 1644.663542][ T5992] hid_mf 0003:0079:1803.001A: unknown main item tag 0x0 [ 1644.663584][ T5992] hid_mf 0003:0079:1803.001A: global environment stack underflow [ 1644.663613][ T5992] hid_mf 0003:0079:1803.001A: item 0 0 1 11 parsing failed [ 1644.669343][T15572] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1644.679951][ T5992] hid_mf 0003:0079:1803.001A: HID parse failed. [ 1644.680050][ T5992] hid_mf 0003:0079:1803.001A: probe with driver hid_mf failed with error -22 [ 1644.750719][ T7699] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1644.918336][ T9411] usb 2-1: USB disconnect, device number 15 [ 1644.936412][T15572] ocfs2: Unmounting device (7,5) on (node local) [ 1645.040825][T15609] loop0: detected capacity change from 0 to 64 [ 1645.090759][T15609] syz.0.19162: attempt to access beyond end of device [ 1645.090759][T15609] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1645.579085][ T5992] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1645.703084][T15628] loop1: detected capacity change from 0 to 1024 [ 1645.752084][ T5992] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1645.753695][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.788002][T15628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1646.159421][ T5859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1646.329775][T15632] loop0: detected capacity change from 0 to 65536 [ 1646.333896][ T5992] usb 6-1: config 0 descriptor?? [ 1646.373988][ T5992] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1646.392989][T15632] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1646.472631][T15632] XFS (loop0): Ending clean mount [ 1646.485459][T15632] XFS (loop0): Quotacheck needed: Please wait. [ 1646.525590][ T7642] XFS (loop0): Metadata corruption detected at xfs_dinode_verify.part.0+0xa7c/0x16d0, inode 0x25 dinode [ 1646.525700][ T7642] XFS (loop0): Unmount and run xfs_repair [ 1646.525722][ T7642] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1646.525754][ T7642] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 1646.525783][ T7642] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1646.525811][ T7642] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 1646.525869][ T7642] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 1646.525898][ T7642] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1646.525927][ T7642] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 1646.525956][ T7642] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 1646.526015][ T7642] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 1646.526050][ T7642] loop0: lost filesystem error report for type 5 error -117 [ 1646.582832][T15632] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1646.583152][T15632] loop0: lost filesystem error report for type 5 error -117 [ 1646.734627][ T5860] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1646.796751][ T5860] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 1646.820167][T15655] netdevsim0 speed is unknown, defaulting to 1000 [ 1646.822724][T15655] lo speed is unknown, defaulting to 1000 [ 1647.062501][ T9411] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1647.081117][ T5992] usb 6-1: USB disconnect, device number 19 [ 1647.236485][ T9411] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1647.238193][ T9411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1647.238271][ T9411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1647.238327][ T9411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.285343][ T9411] usb 5-1: config 0 descriptor?? [ 1647.413906][T15669] loop0: detected capacity change from 0 to 512 [ 1647.556920][T15669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1647.557058][T15669] ext4 filesystem being mounted at /3200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1647.736811][ T9411] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 1647.736865][ T9411] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 1647.736902][ T9411] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 1647.736938][ T9411] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 1647.736972][ T9411] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 1647.737008][ T9411] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 1647.737053][ T9411] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 1647.802053][ T9411] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1647.956249][ T9411] cp2112 0003:10C4:EA90.001B: error requesting version [ 1647.969525][ T9411] cp2112 0003:10C4:EA90.001B: probe with driver cp2112 failed with error -71 [ 1648.041419][ T9411] usb 5-1: USB disconnect, device number 26 [ 1648.102591][T15676] fido_id[15676]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1648.160101][T15669] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz.0.19180: directory missing '..' [ 1648.434634][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1648.613474][T15688] loop5: detected capacity change from 0 to 2048 [ 1648.636863][T15688] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=18881, location=18881 [ 1648.644852][T15688] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1648.709210][T15690] macvlan3: entered promiscuous mode [ 1649.368547][T15705] loop2: detected capacity change from 0 to 1024 [ 1649.413116][T15685] loop1: detected capacity change from 0 to 32768 [ 1649.433460][T15685] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.19190 (15685) [ 1649.450889][ T5992] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1649.496107][T15685] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1649.496158][T15685] BTRFS info (device loop1): using crc32c checksum algorithm [ 1649.627963][T15685] BTRFS info (device loop1): setting nodatasum [ 1649.628003][T15685] BTRFS info (device loop1): setting nodatacow [ 1649.628032][T15685] BTRFS info (device loop1): enabling ssd optimizations [ 1649.628063][T15685] BTRFS info (device loop1): turning on flush-on-commit [ 1649.628093][T15685] BTRFS info (device loop1): turning on async discard [ 1649.628124][T15685] BTRFS info (device loop1): enabling free space tree [ 1649.643519][ T5992] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1649.684638][ T5992] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1649.684684][ T5992] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1649.684722][ T5992] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1649.684760][ T5992] usb 1-1: config 1 has no interface number 0 [ 1649.684818][ T5992] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1649.684867][ T5992] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1649.684930][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.781639][ T5992] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1649.867202][ T31] audit: type=1800 audit(2000525522.373:423): pid=15685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19190" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 1650.061757][ T5992] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1650.184257][ T5859] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1650.475396][T15732] netlink: NAT attribute has 4 unknown bytes [ 1650.475440][T15732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1650.580216][ T9411] usb 1-1: USB disconnect, device number 3 [ 1650.582650][ T9411] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1651.261884][T15740] IPVS: Error connecting to the multicast addr [ 1651.437910][T15742] loop2: detected capacity change from 0 to 4096 [ 1651.579706][T15728] loop5: detected capacity change from 0 to 32768 [ 1651.641983][T15728] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1651.806028][T15742] ntfs3(loop2): failed to convert "0000" to cp949 [ 1651.806713][T15728] XFS (loop5): Ending clean mount [ 1651.856954][T15742] ntfs3(loop2): failed to convert name for inode 1e. [ 1651.860194][T15742] ntfs3(loop2): ino=1f, mi_enum_attr [ 1651.860273][T15742] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1652.333951][ T5883] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1652.742692][T15761] loop6: detected capacity change from 0 to 65536 [ 1652.757719][T15762] loop4: detected capacity change from 0 to 256 [ 1652.799375][T15744] loop0: detected capacity change from 0 to 32768 [ 1652.816765][T15761] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1652.884442][T15762] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1652.905478][T15744] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1652.919949][T15761] XFS (loop6): Ending clean mount [ 1652.925175][T15761] XFS (loop6): Quotacheck needed: Please wait. [ 1653.057792][T15744] XFS (loop0): Ending clean mount [ 1653.205012][ T7642] XFS (loop6): Metadata corruption detected at xfs_dinode_verify.part.0+0xa7c/0x16d0, inode 0x25 dinode [ 1653.205105][ T7642] XFS (loop6): Unmount and run xfs_repair [ 1653.205129][ T7642] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 1653.205162][ T7642] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 1653.205193][ T7642] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1653.205223][ T7642] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 1653.205253][ T7642] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 1653.205283][ T7642] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1653.205312][ T7642] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 1653.205342][ T7642] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 1653.205371][ T7642] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 1653.205403][ T7642] loop6: lost filesystem error report for type 5 error -117 [ 1653.235751][T15761] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1653.236025][T15761] loop6: lost filesystem error report for type 5 error -117 [ 1653.440747][ T7699] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1653.479569][ T5860] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1653.501927][ T7699] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair. [ 1653.948162][T15799] ip_tables: iptables: counters copy to user failed while replacing table [ 1654.237276][T15803] netlink: 'syz.0.19226': attribute type 2 has an invalid length. [ 1654.237312][T15803] netlink: 200 bytes leftover after parsing attributes in process `syz.0.19226'. [ 1654.474553][T15802] loop2: detected capacity change from 0 to 4096 [ 1654.745221][T15802] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1654.841827][T15811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19230'. [ 1655.003059][T15792] loop5: detected capacity change from 0 to 32768 [ 1655.097520][T15792] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1655.156337][T15821] futex_wake_op: syz.0.19232 tries to shift op by -1; fix this program [ 1655.156686][T15821] futex_wake_op: syz.0.19232 tries to shift op by -1; fix this program [ 1655.232536][T15792] XFS (loop5): Ending clean mount [ 1655.707361][T15835] loop0: detected capacity change from 0 to 512 [ 1655.759559][T15835] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1655.774339][T15835] EXT4-fs (loop0): invalid journal inode [ 1655.774430][T15835] EXT4-fs (loop0): can't get journal size [ 1655.806640][ T5883] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1655.832123][T15829] loop4: detected capacity change from 0 to 65536 [ 1655.871910][T15835] EXT4-fs (loop0): 1 truncate cleaned up [ 1655.874039][T15835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1655.941251][T15829] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1656.000723][ T9411] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 1656.079288][T15829] XFS (loop4): Ending clean mount [ 1656.089923][T15829] XFS (loop4): Quotacheck needed: Please wait. [ 1656.158672][ T9411] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1656.160048][ T9411] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1656.160118][ T9411] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1656.160166][ T9411] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1656.160213][ T9411] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1656.160262][ T9411] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1656.161532][ T9411] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1656.161592][ T9411] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1656.161640][ T9411] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1656.161702][ T9411] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1656.161751][ T9411] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1656.163104][ T9411] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1656.163164][ T9411] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1656.163240][ T9411] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1656.163287][ T9411] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1656.163336][ T9411] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1656.248512][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1656.262509][ T40] XFS (loop4): Metadata corruption detected at xfs_dinode_verify.part.0+0xa7c/0x16d0, inode 0x25 dinode [ 1656.262592][ T40] XFS (loop4): Unmount and run xfs_repair [ 1656.262614][ T40] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1656.262645][ T40] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 1656.262674][ T40] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1656.262702][ T40] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 1656.262731][ T40] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 1656.262760][ T40] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1656.262789][ T40] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 1656.262818][ T40] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 1656.262847][ T40] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 1656.262895][ T40] loop4: lost filesystem error report for type 5 error -117 [ 1656.289863][ T9411] usb 3-1: string descriptor 0 read error: -22 [ 1656.290026][ T9411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.312726][T15829] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1656.313196][T15829] loop4: lost filesystem error report for type 5 error -117 [ 1656.496652][ T9411] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1656.603148][T15851] ip_tables: iptables: counters copy to user failed while replacing table [ 1656.612043][ T5863] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1656.616227][ T5863] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 1657.228070][T15863] loop5: detected capacity change from 0 to 256 [ 1657.270811][T15863] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x2ab34fd4, utbl_chksum : 0xe619d30d) [ 1657.658635][T15873] atomic_op ffff88802cdbe9e0 conn xmit_atomic 0000000000000000 [ 1657.860476][T15883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19254'. [ 1657.860546][T15883] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 1657.998349][T15890] loop0: detected capacity change from 0 to 256 [ 1658.036720][T15890] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1658.252922][ T5992] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1658.423526][ T5992] usb 2-1: Using ep0 maxpacket: 8 [ 1658.424431][ T5992] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1658.425896][ T5992] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1658.425949][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.437597][ T5992] usb 2-1: config 0 descriptor?? [ 1658.490778][T15905] loop5: detected capacity change from 0 to 1024 [ 1658.565886][T15905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1658.688516][T15905] EXT4-fs (loop5): stripe (536871160) is not aligned with cluster size (16), stripe is disabled [ 1658.712560][T15905] EXT4-fs (loop5): can't enable nombcache during remount [ 1658.857248][ T9411] kernel write not supported for file /vcs (pid: 9411 comm: kworker/1:13) [ 1658.931978][ T5992] koneplus 0003:1E7D:2D51.001C: unknown global tag 0xc [ 1658.932020][ T5992] koneplus 0003:1E7D:2D51.001C: item 0 2 1 12 parsing failed [ 1658.938890][ T5992] koneplus 0003:1E7D:2D51.001C: parse failed [ 1658.938983][ T5992] koneplus 0003:1E7D:2D51.001C: probe with driver koneplus failed with error -22 [ 1658.946983][ T5883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1658.997665][ T9411] usb 3-1: USB disconnect, device number 18 [ 1659.181014][ T5992] usb 2-1: USB disconnect, device number 16 [ 1659.605640][T15939] loop6: detected capacity change from 0 to 1764 [ 1659.999599][T15951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19287'. [ 1660.034695][T15928] loop4: detected capacity change from 0 to 32768 [ 1660.060521][T15928] (syz.4.19275,15928,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1660.063355][T15928] (syz.4.19275,15928,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1660.173210][T15928] JBD2: Ignoring recovery information on journal [ 1660.317955][T15928] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1660.447624][T15928] ocfs2: Unmounting device (7,4) on (node local) [ 1660.754337][ T5992] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1660.816056][T15928] Process accounting resumed [ 1660.859879][ T5866] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1660.930756][ T5992] usb 6-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1660.940891][ T5992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.940937][ T5992] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1660.941000][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.957501][ T5992] usb 6-1: config 0 descriptor?? [ 1661.044165][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 1661.045368][ T5866] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1661.046902][ T5866] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1661.046975][ T5866] usb 3-1: config 0 has no interface number 0 [ 1661.056024][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.056066][ T5866] usb 3-1: Product: syz [ 1661.056124][ T5866] usb 3-1: Manufacturer: syz [ 1661.056152][ T5866] usb 3-1: SerialNumber: syz [ 1661.064871][ T5866] usb 3-1: config 0 descriptor?? [ 1661.433267][T15997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19307'. [ 1661.436121][ T5992] uclogic 0003:5543:0004.001D: unknown main item tag 0x0 [ 1661.445972][ T5992] uclogic 0003:5543:0004.001D: unknown main item tag 0x0 [ 1661.446043][ T5992] uclogic 0003:5543:0004.001D: unknown main item tag 0x0 [ 1661.446078][ T5992] uclogic 0003:5543:0004.001D: unknown main item tag 0x0 [ 1661.446113][ T5992] uclogic 0003:5543:0004.001D: unknown main item tag 0x0 [ 1661.446146][ T5992] uclogic 0003:5543:0004.001D: unknown main item tag 0x0 [ 1661.458322][ T5992] uclogic 0003:5543:0004.001D: hidraw0: USB HID v0.02 Device [HID 5543:0004] on usb-dummy_hcd.5-1/input0 [ 1661.565464][ T9411] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1661.692321][ T5992] usb 6-1: USB disconnect, device number 20 [ 1661.725491][ T9411] usb 5-1: Using ep0 maxpacket: 8 [ 1661.726282][ T9411] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1661.727692][ T9411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1661.727745][ T9411] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1661.727816][ T9411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.764400][ T5866] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1661.764453][ T5866] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1661.768690][ T5866] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1661.768988][ T5866] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1661.815417][ T5866] usb 3-1: USB disconnect, device number 19 [ 1661.834417][ T9411] usb 5-1: config 0 descriptor?? [ 1662.108882][T16011] loop6: detected capacity change from 0 to 2048 [ 1662.159631][T16011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1662.194311][ T31] audit: type=1800 audit(2000000004.183:424): pid=16011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.19314" name="file2" dev="loop6" ino=1416 res=0 errno=0 [ 1662.300341][ T9411] lenovo 0003:17EF:6047.001E: ignoring exceeding usage max [ 1662.315780][ T9411] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 1662.315826][ T9411] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 1662.317643][ T9411] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 1662.317687][ T9411] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 1662.356452][ T9411] lenovo 0003:17EF:6047.001E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 1662.420075][T12796] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1662.509012][ T9411] lenovo 0003:17EF:6047.001E: Failed to switch F7/9/11 mode: -71 [ 1662.511977][ T9411] lenovo 0003:17EF:6047.001E: Failed to switch middle button: -71 [ 1662.513043][ T9411] lenovo 0003:17EF:6047.001E: Fn-lock setting failed: -71 [ 1662.513701][ T9411] lenovo 0003:17EF:6047.001E: Sensitivity setting failed: -71 [ 1662.558066][ T9411] usb 5-1: USB disconnect, device number 27 [ 1662.589596][T12796] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1662.601664][T12796] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1662.601710][T12796] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1662.601754][T12796] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1662.611342][T12796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.611384][T12796] usb 1-1: Product: syz [ 1662.611411][T12796] usb 1-1: Manufacturer: syz [ 1662.611439][T12796] usb 1-1: SerialNumber: syz [ 1662.674489][T12796] hub 1-1:1.0: bad descriptor, ignoring hub [ 1662.674533][T12796] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1662.737872][T16023] loop1: detected capacity change from 0 to 1024 [ 1662.746818][T16023] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1662.749000][T16016] fido_id[16016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1662.918171][T12796] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1663.409485][T16049] netlink: 'syz.4.19330': attribute type 142 has an invalid length. [ 1663.409520][T16049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19330'. [ 1663.428969][T16052] ip_tables: iptables: counters copy to user failed while replacing table [ 1663.443158][T12796] usb 1-1: USB disconnect, device number 4 [ 1663.457668][T12796] usblp0: removed [ 1663.489896][T16043] loop6: detected capacity change from 0 to 1024 [ 1663.574144][T16054] loop4: detected capacity change from 0 to 512 [ 1663.624586][T16054] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1663.713575][T16054] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1663.744744][T16054] EXT4-fs error (device loop4): ext4_validate_block_bitmap:444: comm syz.4.19333: bg 0: block 248: padding at end of block bitmap is not set [ 1663.744800][T16054] loop4: lost filesystem error report for type 5 error -117 [ 1663.766488][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1663.766523][ C0] EXT4-fs (loop4): last error at time 2000000005: ext4_validate_block_bitmap:444 [ 1663.772026][T16054] Quota error (device loop4): write_blk: dquota write failed [ 1663.772136][T16054] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1663.772205][T16054] EXT4-fs error (device loop4): ext4_acquire_dquot:7067: comm syz.4.19333: Failed to acquire dquot type 1 [ 1663.772244][T16054] loop4: lost filesystem error report for type 5 error -28 [ 1663.785943][T16054] EXT4-fs (loop4): 1 truncate cleaned up [ 1663.805961][T16054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1663.913494][T16064] loop1: detected capacity change from 0 to 256 [ 1663.927526][T16054] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 1664.154682][ T5863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1664.228087][T16071] netlink: 'syz.6.19338': attribute type 2 has an invalid length. [ 1664.241009][ T31] audit: type=1326 audit(2000000006.101:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16069 comm="syz.5.19340" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f959e199 code=0x7ffc0000 [ 1664.241090][ T31] audit: type=1326 audit(2000000006.101:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16069 comm="syz.5.19340" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f959e199 code=0x7ffc0000 [ 1664.254747][ T31] audit: type=1326 audit(2000000006.101:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16069 comm="syz.5.19340" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f64f959e199 code=0x7ffc0000 [ 1664.254825][ T31] audit: type=1326 audit(2000000006.101:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16069 comm="syz.5.19340" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f959e199 code=0x7ffc0000 [ 1664.254898][ T31] audit: type=1326 audit(2000000006.101:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16069 comm="syz.5.19340" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f959e199 code=0x7ffc0000 [ 1664.269517][ T31] audit: type=1326 audit(2000000006.101:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16069 comm="syz.5.19340" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f64f959e199 code=0x7ffc0000 [ 1664.269606][ T31] audit: type=1326 audit(2000000006.101:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16069 comm="syz.5.19340" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f959e199 code=0x7ffc0000 [ 1664.316776][T16075] loop0: detected capacity change from 0 to 512 [ 1664.395727][T16075] EXT4-fs error (device loop0): ext4_validate_block_bitmap:435: comm syz.0.19354: bg 0: block 5: invalid block bitmap [ 1664.395780][T16075] loop0: lost filesystem error report for type 5 error -117 [ 1664.396462][T16075] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1664.396496][T16075] loop0: lost filesystem error report for type 5 error -117 [ 1664.399114][T16075] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.19354: invalid indirect mapped block 3 (level 2) [ 1664.399167][T16075] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1664.401371][T16075] EXT4-fs (loop0): 1 orphan inode deleted [ 1664.401402][T16075] EXT4-fs (loop0): 1 truncate cleaned up [ 1664.427128][T16075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1664.530139][T16078] loop4: detected capacity change from 0 to 256 [ 1664.567081][T16078] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1664.703526][T16086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19347'. [ 1664.811298][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1665.114964][T16100] loop4: detected capacity change from 0 to 64 [ 1665.359042][ T5992] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 1665.530759][ T5992] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1665.532340][ T5992] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1665.532405][ T5992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1665.532454][ T5992] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1665.532500][ T5992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1665.532550][ T5992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1665.535801][ T5992] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1665.535864][ T5992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1665.535913][ T5992] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1665.535967][ T5992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1665.536019][ T5992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1665.543797][ T5992] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1665.543860][ T5992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1665.543907][ T5992] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1665.543951][ T5992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1665.543998][ T5992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1665.549336][ T5992] usb 2-1: string descriptor 0 read error: -22 [ 1665.549508][ T5992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.626681][ T5992] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1665.654008][T16118] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19360'. [ 1665.740076][ T5866] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1665.904491][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 1665.908335][ T5866] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1665.909772][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1665.909824][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1665.909870][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1665.909918][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1665.916826][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.916866][ T5866] usb 5-1: Product: syz [ 1665.916894][ T5866] usb 5-1: Manufacturer: syz [ 1665.916921][ T5866] usb 5-1: SerialNumber: syz [ 1665.944035][ T5866] usb 5-1: config 0 descriptor?? [ 1665.961085][T16110] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1665.997536][ T5866] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input173 [ 1666.081477][T16125] loop5: detected capacity change from 0 to 256 [ 1666.107384][ C0] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 1666.139972][T16125] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1666.324245][ C0] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 1666.326571][ T5992] usb 5-1: USB disconnect, device number 28 [ 1666.686252][T16140] loop6: detected capacity change from 0 to 2048 [ 1666.702056][T16140] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1666.710706][T16140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1666.888415][T16129] loop2: detected capacity change from 0 to 32768 [ 1666.930647][T16129] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1667.075406][T16129] XFS (loop2): Ending clean mount [ 1667.389446][ T5858] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1667.711442][T16166] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1667.900208][T16170] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19384'. [ 1668.132872][ T5992] usb 2-1: USB disconnect, device number 17 [ 1668.156533][T16176] set_capacity_and_notify: 2 callbacks suppressed [ 1668.156563][T16176] loop6: detected capacity change from 0 to 1024 [ 1668.252978][T16177] loop5: detected capacity change from 0 to 4096 [ 1668.270991][T16177] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1668.271037][T16177] NILFS (loop5): mounting unchecked fs [ 1668.276491][T16172] loop0: detected capacity change from 0 to 4096 [ 1668.318028][T16176] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1668.344049][T16177] NILFS (loop5): recovery complete [ 1668.345089][T16184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19388'. [ 1668.369104][T16185] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1668.441223][T16176] EXT4-fs (loop6): stripe (536871160) is not aligned with cluster size (16), stripe is disabled [ 1668.469989][T16176] EXT4-fs (loop6): can't enable nombcache during remount [ 1668.709812][ T7699] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1669.876478][T16225] loop6: detected capacity change from 0 to 4096 [ 1670.150920][T16233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19410'. [ 1670.150955][T16233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19410'. [ 1670.150978][T16233] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 1670.199595][ T5992] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1670.362776][ T5992] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1670.364191][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.372905][ T5992] usb 1-1: config 0 descriptor?? [ 1670.398450][ T5992] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1670.524110][T16241] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 1670.588784][T16226] loop2: detected capacity change from 0 to 32768 [ 1670.630738][ T5992] gp8psk: usb in 128 operation failed. [ 1670.734919][T12796] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1670.855164][ T5992] gp8psk: usb in 146 operation failed. [ 1670.855191][ T5992] gp8psk: failed to get FW version [ 1670.855608][ T5992] gp8psk: usb in 149 operation failed. [ 1670.855628][ T5992] gp8psk: failed to get FPGA version [ 1670.855988][ T5992] gp8psk: usb in 138 operation failed. [ 1670.856010][ T5992] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1670.856055][ T5992] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1670.869649][ T5992] usb 1-1: USB disconnect, device number 5 [ 1670.922814][T12796] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 1670.941192][T12796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.941235][T12796] usb 2-1: Product: syz [ 1670.941262][T12796] usb 2-1: Manufacturer: syz [ 1670.941290][T12796] usb 2-1: SerialNumber: syz [ 1671.118544][T12796] usb 2-1: reset high-speed USB device number 18 using dummy_hcd [ 1671.402716][ T983] usb 2-1: driver API: 1.9.9 2016-02-15 [1-1] [ 1671.402770][ T983] usb 2-1: firmware API: 1.9.6 2012-07-07 [ 1671.697990][T16267] loop2: detected capacity change from 0 to 4096 [ 1671.714958][ C1] usb 2-1: received invalid command response:got -4, instead of 0 [ 1671.715131][ C1] usb 2-1: restart device (9) [ 1671.881892][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19429'. [ 1671.940881][ C1] usb 2-1: received invalid command response:got -4, instead of 0 [ 1672.342547][T12796] usb 2-1: USB disconnect, device number 18 [ 1672.344236][ C1] device 2-1 is not registered [ 1672.561302][ T983] usb 2-1: firmware upload failed (-110). [ 1672.582751][T16269] loop4: detected capacity change from 0 to 32768 [ 1672.602320][T16269] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1672.621066][T16269] XFS (loop4): Ending clean mount [ 1672.734261][ T5863] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1673.278261][ T40] IPVS: starting estimator thread 0... [ 1673.314036][T16287] loop0: detected capacity change from 0 to 4096 [ 1673.384095][T16297] IPVS: using max 25 ests per chain, 60000 per kthread [ 1673.571436][T16287] ntfs3(loop0): ino=5, "/" indx_read_ra [ 1673.571481][T16287] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1673.573809][T16287] ntfs3(loop0): ino=5, "/" ntfs_readdir [ 1673.688612][T16307] loop5: detected capacity change from 0 to 64 [ 1674.031485][T16318] loop0: detected capacity change from 0 to 64 [ 1674.088268][T16319] loop6: detected capacity change from 0 to 16 [ 1674.107773][T16319] erofs (device loop6): mounted with root inode @ nid 36. [ 1674.118318][T16318] syz.0.19444: attempt to access beyond end of device [ 1674.118318][T16318] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1674.139004][T16320] loop4: detected capacity change from 0 to 512 [ 1674.177210][T16320] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1674.235938][T16320] EXT4-fs (loop4): 1 truncate cleaned up [ 1674.272175][T16320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1674.380251][T16320] EXT4-fs error (device loop4): ext4_generic_delete_entry:2674: inode #2: block 13: comm syz.4.19448: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1674.427403][T16320] EXT4-fs (loop4): Remounting filesystem read-only [ 1674.427440][T16320] EXT4-fs warning (device loop4): ext4_rename_delete:3739: inode #2: comm syz.4.19448: Deleting old file: nlink 5, error=-117 [ 1674.690568][ T5863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1674.875443][T16336] loop2: detected capacity change from 0 to 2048 [ 1674.910230][T16336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1675.098318][T16343] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1675.098495][T16344] netlink: 'syz.6.19457': attribute type 7 has an invalid length. [ 1675.247990][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1675.546518][T16361] loop1: detected capacity change from 0 to 4096 [ 1675.595972][T12796] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 1675.667111][T16365] loop4: detected capacity change from 0 to 4096 [ 1675.679605][T16365] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1675.758641][T12796] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1675.762094][T12796] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1675.762161][T12796] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1675.762212][T12796] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1675.762259][T12796] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1675.762305][T12796] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1675.767007][T12796] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1675.767075][T12796] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1675.767122][T12796] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1675.767168][T12796] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1675.767217][T12796] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1675.831958][T16365] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 1675.832004][T16365] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 1675.851358][T12796] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1675.851429][T12796] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1675.851479][T12796] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1675.851525][T12796] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1675.851572][T12796] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1675.962923][T12796] usb 6-1: string descriptor 0 read error: -22 [ 1675.963099][T12796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.991702][T12796] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1676.209578][T12790] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 1676.209985][ T5863] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 1676.210026][ T5863] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1676.210055][ T5863] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 1676.210660][T12790] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 1676.403855][T16378] loop0: detected capacity change from 0 to 164 [ 1676.812133][T16394] loop1: detected capacity change from 0 to 256 [ 1676.832940][T16394] exfat: Deprecated parameter 'namecase' [ 1676.875561][T16394] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 1677.213831][T16405] netlink: 48 bytes leftover after parsing attributes in process `syz.6.19485'. [ 1677.213867][T16405] netlink: 48 bytes leftover after parsing attributes in process `syz.6.19485'. [ 1677.323150][T16406] loop2: detected capacity change from 0 to 4096 [ 1677.340089][T16406] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1677.375771][T16406] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 1677.375819][T16406] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 1677.577163][ T7642] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 1677.577459][ T5858] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 1677.577502][ T5858] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1677.577530][ T5858] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 1677.579720][ T3271] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 1677.831827][T16418] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.19490: Directory hole found for htree index block 0 [ 1677.831884][T16418] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1677.835365][T16418] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1677.871781][T16418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1677.976205][T16425] ovs-dp0: entered promiscuous mode [ 1678.127585][T16418] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1678.158202][T16418] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 1678.330871][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1678.461153][ T5866] usb 6-1: USB disconnect, device number 21 [ 1678.470523][ T5992] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1678.475617][T16440] netlink: 52 bytes leftover after parsing attributes in process `syz.2.19500'. [ 1678.642889][ T5992] usb 5-1: New USB device found, idVendor=10b8, idProduct=1ebc, bcdDevice= 0.00 [ 1678.644609][ T5992] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1678.644665][ T5992] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1678.648045][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.648084][ T5992] usb 5-1: Product: syz [ 1678.648111][ T5992] usb 5-1: Manufacturer: syz [ 1678.648139][ T5992] usb 5-1: SerialNumber: syz [ 1678.698059][T16446] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1678.706208][T16434] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1678.706360][T16434] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1678.734639][T16446] EXT4-fs (loop1): 1 truncate cleaned up [ 1678.746739][T16446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1678.854714][ T5859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1678.953464][ T5992] dvb-usb: found a 'DiBcom STK7070P reference design' in warm state. [ 1678.991013][ T5992] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1678.991786][ T5992] dvbdev: DVB: registering new adapter (DiBcom STK7070P reference design) [ 1678.991851][ T5992] usb 5-1: media controller created [ 1679.050104][ T5992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1679.153601][ T5992] DVB: Unable to find symbol dib7000p_attach() [ 1679.153643][ T5992] dvb-usb: no frontend was attached by 'DiBcom STK7070P reference design' [ 1679.421975][ T5992] rc_core: IR keymap rc-dib0700-rc5 not found [ 1679.422020][ T5992] Registered IR keymap rc-empty [ 1679.422321][ T5992] dvb-usb: could not initialize remote control. [ 1679.422337][ T5992] dvb-usb: DiBcom STK7070P reference design successfully initialized and connected. [ 1679.429741][T16468] set_capacity_and_notify: 4 callbacks suppressed [ 1679.429793][T16468] loop0: detected capacity change from 0 to 16 [ 1679.490632][T16468] erofs (device loop0): mounted with root inode @ nid 36. [ 1679.496884][T16467] loop1: detected capacity change from 0 to 1024 [ 1679.507419][T16467] EXT4-fs: Ignoring removed mblk_io_submit option [ 1679.509189][T16467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1679.509642][T16467] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1679.540812][T16467] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.19513: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1679.540894][T16467] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1679.541663][T16467] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.19513: couldn't read orphan inode 11 (err -117) [ 1679.541712][T16467] loop1: lost filesystem error report for type 5 error -117 [ 1679.575657][T16467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1679.774631][T16467] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:486: comm syz.1.19513: Invalid block bitmap block 0 in block_group 0 [ 1679.881423][T16467] __quota_error: 1 callbacks suppressed [ 1679.881453][T16467] Quota error (device loop1): write_blk: dquota write failed [ 1679.881511][T16467] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1679.881604][T16467] EXT4-fs error (device loop1): ext4_acquire_dquot:7067: comm syz.1.19513: Failed to acquire dquot type 0 [ 1679.930387][T16472] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 1680.022516][T16483] IPVS: Error connecting to the multicast addr [ 1680.060201][ T5859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1680.262086][ T5992] usb 5-1: USB disconnect, device number 29 [ 1680.338009][ T5992] dvb-usb: DiBcom STK7070P reference design successfully deinitialized and disconnected. [ 1680.604250][T16501] sctp: [Deprecated]: syz.1.19528 (pid 16501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1680.604250][T16501] Use struct sctp_sack_info instead [ 1680.931199][T16514] loop0: detected capacity change from 0 to 256 [ 1681.027834][T16514] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3163b44b, utbl_chksum : 0xe619d30d) [ 1681.475674][ T5992] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1681.482345][T16533] netlink: 'syz.5.19540': attribute type 83 has an invalid length. [ 1681.647693][ T5992] usb 3-1: Using ep0 maxpacket: 8 [ 1681.649822][ T5992] usb 3-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 1681.652886][ T5992] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1681.652925][ T5992] usb 3-1: config 0 has no interface number 0 [ 1681.652999][ T5992] usb 3-1: config 0 interface 1 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1681.653048][ T5992] usb 3-1: config 0 interface 1 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1681.653090][ T5992] usb 3-1: config 0 interface 1 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1681.653149][ T5992] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1681.653198][ T5992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.737957][ T5992] usb 3-1: config 0 descriptor?? [ 1681.898757][T16546] loop6: detected capacity change from 0 to 256 [ 1681.920140][T16546] exfat: Deprecated parameter 'namecase' [ 1681.991334][T16546] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 1682.198022][ T5992] uclogic 0003:28BD:1903.001F: interface is invalid, ignoring [ 1682.286941][ T5866] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1682.412243][ T5992] usb 3-1: USB disconnect, device number 20 [ 1682.457175][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 1682.458076][ T5866] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 1682.459918][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1025, setting to 1024 [ 1682.459990][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.512875][ T5866] usb 5-1: config 0 descriptor?? [ 1682.515254][T16549] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1682.573939][T12796] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1682.749209][T12796] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1682.752372][T12796] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1682.752425][T12796] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1682.752574][T12796] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1682.752625][T12796] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1682.752677][T12796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.771621][T12796] usb 6-1: config 0 descriptor?? [ 1683.004887][ T5866] hid_parser_main: 24 callbacks suppressed [ 1683.004923][ T5866] monterey 0003:0566:3004.0020: unknown main item tag 0x0 [ 1683.004962][ T5866] monterey 0003:0566:3004.0020: unknown main item tag 0x0 [ 1683.004998][ T5866] monterey 0003:0566:3004.0020: unknown main item tag 0x0 [ 1683.005034][ T5866] monterey 0003:0566:3004.0020: unknown main item tag 0x0 [ 1683.005073][ T5866] monterey 0003:0566:3004.0020: unknown main item tag 0x0 [ 1683.005112][ T5866] monterey 0003:0566:3004.0020: unknown main item tag 0x0 [ 1683.005147][ T5866] monterey 0003:0566:3004.0020: unknown main item tag 0x0 [ 1683.005185][ T5866] monterey 0003:0566:3004.0020: unknown main item tag 0x0 [ 1683.005222][ T5866] monterey 0003:0566:3004.0020: unknown main item tag 0x0 [ 1683.005261][ T5866] monterey 0003:0566:3004.0020: unknown main item tag 0x0 [ 1683.009597][ T5866] monterey 0003:0566:3004.0020: hidraw0: USB HID v80.00 Device [HID 0566:3004] on usb-dummy_hcd.4-1/input0 [ 1683.336256][T12796] hkems 0003:2006:0118.0021: not enough values in the field [ 1683.340261][T16577] netlink: 'syz.6.19553': attribute type 1 has an invalid length. [ 1683.340306][T16577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1683.360619][ T983] usb 5-1: USB disconnect, device number 30 [ 1683.381301][T12796] hkems 0003:2006:0118.0021: hidraw1: USB HID v0.00 Joystick [HID 2006:0118] on usb-dummy_hcd.5-1/input0 [ 1683.515807][T16581] netlink: 332 bytes leftover after parsing attributes in process `syz.1.19555'. [ 1683.629296][T12796] usb 6-1: USB disconnect, device number 22 [ 1683.985361][T16598] loop6: detected capacity change from 0 to 128 [ 1684.365093][ T31] audit: type=1326 audit(2000000024.929:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16608 comm="syz.4.19565" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84399e199 code=0x7ffc0000 [ 1684.367420][ T31] audit: type=1326 audit(2000000024.929:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16608 comm="syz.4.19565" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84399e199 code=0x7ffc0000 [ 1684.395255][ T31] audit: type=1326 audit(2000000024.939:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16608 comm="syz.4.19565" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84399e199 code=0x7ffc0000 [ 1684.395344][ T31] audit: type=1326 audit(2000000024.939:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16608 comm="syz.4.19565" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84399e199 code=0x7ffc0000 [ 1684.395420][ T31] audit: type=1326 audit(2000000024.939:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16608 comm="syz.4.19565" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa84399e199 code=0x7ffc0000 [ 1684.395493][ T31] audit: type=1326 audit(2000000024.939:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16608 comm="syz.4.19565" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84399e199 code=0x7ffc0000 [ 1684.395563][ T31] audit: type=1326 audit(2000000024.939:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16608 comm="syz.4.19565" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84399e199 code=0x7ffc0000 [ 1684.395636][ T31] audit: type=1326 audit(2000000024.948:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16608 comm="syz.4.19565" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84399e199 code=0x7ffc0000 [ 1684.460395][T16611] loop5: detected capacity change from 0 to 2048 [ 1684.571922][T16611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1684.905781][ T5883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1684.930992][T16593] loop2: detected capacity change from 0 to 32768 [ 1685.219050][T16631] loop5: detected capacity change from 0 to 16 [ 1685.242575][T16631] erofs (device loop5): mounted with root inode @ nid 36. [ 1685.275637][T16626] jfs_create: dtInsert returned -EIO [ 1685.275672][T16626] ERROR: (device loop2): txAbort: [ 1685.275672][T16626] [ 1685.300279][T16626] ERROR: (device loop2): remounting filesystem as read-only [ 1685.482595][T12796] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1685.644957][T12796] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1685.646497][T12796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1685.646540][T12796] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1685.646585][T12796] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1685.652556][T12796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.652602][T12796] usb 5-1: Product: syz [ 1685.652629][T12796] usb 5-1: Manufacturer: syz [ 1685.652656][T12796] usb 5-1: SerialNumber: syz [ 1685.724232][T12796] hub 5-1:1.0: bad descriptor, ignoring hub [ 1685.724273][T12796] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1685.822746][ T983] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1685.977749][T12796] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1685.984224][ T983] usb 2-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 1685.985699][ T983] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1685.985748][ T983] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1685.985844][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.094004][ T5866] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device []ź QÖ~µ¶{”œ„o»a÷‚ššR„ŗ‹Ā¼±ØŻ«YlÉū¾³C”LęŌ®(Ó] on pA‹ø…mÓótŒÉs®īŅvfŲŁ'Ō_pź'°1­ž [ 1686.293078][T16654] fido_id[16654]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1686.318972][ T5866] usb 5-1: USB disconnect, device number 31 [ 1686.335794][ T5866] usblp0: removed [ 1686.466395][ T983] hid (null): report_id 0 is invalid [ 1686.494580][ T983] hid-sensor-hub 0003:8086:0000.0023: report_id 0 is invalid [ 1686.494625][ T983] hid-sensor-hub 0003:8086:0000.0023: item 0 1 1 8 parsing failed [ 1686.499028][ T983] hid-sensor-hub 0003:8086:0000.0023: parse failed [ 1686.499162][ T983] hid-sensor-hub 0003:8086:0000.0023: probe with driver hid-sensor-hub failed with error -22 [ 1686.619069][T16666] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1686.735540][T16668] loop2: detected capacity change from 0 to 16 [ 1686.744931][ T983] usb 2-1: USB disconnect, device number 19 [ 1686.768432][T16668] erofs (device loop2): mounted with root inode @ nid 36. [ 1688.006378][T16716] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19614'. [ 1688.006414][T16716] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19614'. [ 1688.006436][T16716] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 1688.006465][T16716] iwpm_hello_cb: Unable to parse nlmsg [ 1688.167833][T16722] loop4: detected capacity change from 0 to 512 [ 1688.169100][T16722] EXT4-fs: Ignoring removed orlov option [ 1688.169194][T16722] EXT4-fs: Ignoring removed mblk_io_submit option [ 1688.250632][T16722] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1688.250674][T16722] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1688.268278][T16722] EXT4-fs error (device loop4): ext4_clear_blocks:874: inode #13: comm syz.4.19616: attempt to clear invalid blocks 2 len 1 [ 1688.268333][T16722] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1688.269485][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1688.269518][ C1] EXT4-fs (loop4): initial error at time 2000000028: ext4_clear_blocks:874: inode 13 [ 1688.269567][ C1] EXT4-fs (loop4): last error at time 2000000028: ext4_clear_blocks:874: inode 13 [ 1688.274112][T16722] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1688.274359][T16722] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.19616: invalid indirect mapped block 1819239214 (level 0) [ 1688.274411][T16722] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1688.284937][T16722] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.19616: invalid indirect mapped block 1819239214 (level 1) [ 1688.284991][T16722] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1688.288429][T16722] EXT4-fs (loop4): 1 truncate cleaned up [ 1688.304194][T16722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1688.443665][T16720] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1688.555331][T16730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19620'. [ 1688.583798][ T5863] EXT4-fs error (device loop4): htree_dirblock_to_tree:1077: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 1688.620732][ T5863] EXT4-fs error (device loop4): ext4_iget_extra_inode:5209: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 1688.635272][ T5863] EXT4-fs error (device loop4): ext4_iget_extra_inode:5209: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 1688.693047][T16732] loop2: detected capacity change from 0 to 256 [ 1688.729983][ T983] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 1688.759449][T16732] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1688.875500][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 1688.875530][ T31] audit: type=1800 audit(2000000029.150:454): pid=16732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19622" name="file1" dev="loop2" ino=1048965 res=0 errno=0 [ 1688.896658][ T983] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1688.896754][ T983] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1688.898130][ T983] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 1688.914945][ T983] usb 2-1: string descriptor 0 read error: -22 [ 1688.915116][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.937137][T16728] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1688.966045][ T983] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1688.966114][ T983] usb 2-1: MIDIStreaming interface descriptor not found [ 1689.064156][T16740] loop0: detected capacity change from 0 to 16 [ 1689.094667][T16742] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19626'. [ 1689.305828][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19628'. [ 1689.365754][ T983] usb 2-1: USB disconnect, device number 20 [ 1689.495396][T16748] tipc: Started in network mode [ 1689.495451][T16748] tipc: Node identity ff80000000000000000000000000001, cluster identity 4711 [ 1689.495524][T16748] tipc: Enabling of bearer rejected, failed to enable media [ 1689.512682][T16752] tmpfs: Bad value for 'mpol' [ 1689.585638][ T5863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1689.806905][T16758] loop5: detected capacity change from 0 to 2048 [ 1689.864382][T16758] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1689.943352][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 1690.266308][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 1690.583213][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1690.586959][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1690.595012][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1690.596180][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1690.598395][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1690.646493][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 1690.680514][ T3622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1690.682963][ T3622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1690.683737][ T3622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1690.690649][ T3622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1690.691437][ T3622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1690.738083][ T5866] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1690.932996][ T5866] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1690.934683][ T5866] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1690.934726][ T5866] usb 2-1: config 0 has no interface number 0 [ 1690.934782][ T5866] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.934831][ T5866] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.934874][ T5866] usb 2-1: config 0 interface 128 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1690.934941][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.958829][T16780] loop5: detected capacity change from 0 to 2048 [ 1691.020707][ T5866] usb 2-1: config 0 descriptor?? [ 1691.052378][T16784] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1691.168321][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 1691.494990][ T5866] logitech-hidpp-device 0003:046D:C262.0024: unbalanced collection at end of report description [ 1691.495796][ T5866] logitech-hidpp-device 0003:046D:C262.0024: hidpp_probe:parse failed [ 1691.495934][ T5866] logitech-hidpp-device 0003:046D:C262.0024: probe with driver logitech-hidpp-device failed with error -22 [ 1691.704496][ T5866] usb 2-1: USB disconnect, device number 21 [ 1691.948176][ T12] bridge_slave_1: left allmulticast mode [ 1691.948216][ T12] bridge_slave_1: left promiscuous mode [ 1691.948511][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.044426][ T12] bridge_slave_0: left allmulticast mode [ 1692.044466][ T12] bridge_slave_0: left promiscuous mode [ 1692.047174][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.322832][T16814] loop0: detected capacity change from 0 to 128 [ 1692.365963][T16814] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1692.398666][T16814] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1692.871044][T16825] loop0: detected capacity change from 0 to 4096 [ 1692.892001][T16825] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1692.912004][ T5862] Bluetooth: hci4: command tx timeout [ 1692.940306][T16825] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1692.941596][T16825] ntfs3(loop0): Inode r=b is not in use! [ 1692.941694][T16825] ntfs3(loop0): Failed to load $Extend (-116). [ 1692.941725][T16825] ntfs3(loop0): Failed to initialize $Extend. [ 1693.495685][T12796] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1693.656220][T12796] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1693.657703][T12796] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 1693.657744][T12796] usb 1-1: config 1 has no interface number 0 [ 1693.661452][T12796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.661689][T12796] usb 1-1: Product: syz [ 1693.661712][T12796] usb 1-1: Manufacturer: syz [ 1693.661733][T12796] usb 1-1: SerialNumber: syz [ 1693.676372][T12796] usb 1-1: 3:0 : does not exist [ 1693.676406][T12796] usb 1-1: 3:0 : does not exist [ 1693.913915][T12796] usb 1-1: USB disconnect, device number 6 [ 1693.946735][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1694.022795][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1694.034125][ T12] bond0 (unregistering): Released all slaves [ 1694.043600][ T12] bond1 (unregistering): Released all slaves [ 1694.094777][ T12] bond2 (unregistering): Released all slaves [ 1694.112012][ T12] bond3 (unregistering): Released all slaves [ 1694.126847][ T12] bond4 (unregistering): Released all slaves [ 1694.144638][ T12] bond5 (unregistering): Released all slaves [ 1694.161023][ T12] bond6 (unregistering): Released all slaves [ 1694.178336][ T12] bond7 (unregistering): Released all slaves [ 1694.214352][T16820] tipc: Enabling of bearer rejected, failed to enable media [ 1694.452011][ T12] Uż: left promiscuous mode [ 1694.755027][T16848] loop6: detected capacity change from 0 to 4096 [ 1694.830533][T16848] NILFS (loop6): invalid segment: Checksum error in segment payload [ 1694.830573][T16848] NILFS (loop6): trying rollback from an earlier position [ 1694.836633][T16770] netdevsim0 speed is unknown, defaulting to 1000 [ 1694.846387][T16770] lo speed is unknown, defaulting to 1000 [ 1694.935186][T16848] NILFS (loop6): recovery complete [ 1694.956899][T16852] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1695.118428][T16848] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 1695.139854][ T5862] Bluetooth: hci4: command tx timeout [ 1695.283335][T16862] ip_tables: iptables: counters copy to user failed while replacing table [ 1695.330524][T16863] Bluetooth: hci0: unsupported parameter 5135 [ 1695.330559][T16863] Bluetooth: hci0: unsupported parameter 8192 [ 1695.330582][T16863] Bluetooth: hci0: unsupported parameter 5135 [ 1695.330606][T16863] Bluetooth: hci0: unsupported parameter 8192 [ 1696.078828][T16885] openvswitch: netlink: IP tunnel attribute has 5377 unknown bytes. [ 1696.140589][T16887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19683'. [ 1696.207533][T16889] netlink: 68 bytes leftover after parsing attributes in process `syz.2.19684'. [ 1696.519902][ T983] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1696.574101][ T31] audit: type=1326 audit(2000000036.365:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16903 comm="syz.6.19691" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe70ed9e199 code=0x0 [ 1696.692278][ T983] usb 2-1: Using ep0 maxpacket: 32 [ 1696.693045][ T983] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1696.694449][ T983] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1696.694487][ T983] usb 2-1: config 0 has no interface number 0 [ 1696.699067][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.699105][ T983] usb 2-1: Product: syz [ 1696.699132][ T983] usb 2-1: Manufacturer: syz [ 1696.699165][ T983] usb 2-1: SerialNumber: syz [ 1696.764137][ T983] usb 2-1: config 0 descriptor?? [ 1696.938669][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1697.278639][T16922] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 1697.278683][T16922] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xa463 instead [ 1697.278715][T16922] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xff3c instead [ 1697.278746][T16922] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x96a3 instead [ 1697.278779][T16922] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0069 instead [ 1697.336528][T16770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.336741][T16770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.336938][T16770] bridge_slave_0: entered allmulticast mode [ 1697.354173][T16770] bridge_slave_0: entered promiscuous mode [ 1697.357715][ T5862] Bluetooth: hci4: command tx timeout [ 1697.415625][T16770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.415824][T16770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.416047][T16770] bridge_slave_1: entered allmulticast mode [ 1697.423706][T16922] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1697.423731][T16922] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1697.431657][T16770] bridge_slave_1: entered promiscuous mode [ 1697.518144][ T983] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1697.518228][ T983] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1697.519446][ T983] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1697.519736][ T983] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1697.573642][ T983] usb 2-1: USB disconnect, device number 22 [ 1697.763233][T16929] loop6: detected capacity change from 0 to 4096 [ 1697.838220][T16929] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1697.948943][T16770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1697.981537][T16770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1698.410386][T16945] loop1: detected capacity change from 0 to 1024 [ 1698.608539][T16770] team0: Port device team_slave_0 added [ 1698.728071][T16770] team0: Port device team_slave_1 added [ 1698.880577][T16961] loop2: detected capacity change from 0 to 512 [ 1698.917710][T16964] loop1: detected capacity change from 0 to 64 [ 1698.958206][T16961] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0022] [ 1698.958376][T16961] System zones: 1-12 [ 1698.959298][T16961] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.19708: Directory hole found for htree index block 0 [ 1698.959350][T16961] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1698.961570][T16961] EXT4-fs (loop2): Remounting filesystem read-only [ 1698.961627][T16961] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 1698.961724][T16961] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1699.031036][T16961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1699.202050][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1699.225234][T16770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1699.225260][T16770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.225307][T16770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1699.227227][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1699.227614][T16770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1699.227635][T16770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.227688][T16770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1699.578552][ T3622] Bluetooth: hci4: command tx timeout [ 1699.579097][ T12] hsr_slave_0: left promiscuous mode [ 1699.603517][ T12] hsr_slave_1: left promiscuous mode [ 1699.639889][T16977] loop5: detected capacity change from 0 to 1024 [ 1699.664385][T16977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1699.706768][T16982] loop1: detected capacity change from 0 to 2048 [ 1699.796023][T16982] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1699.935066][ T5883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1700.313863][ T5866] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1700.473010][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 1700.473963][ T5866] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1700.475541][ T5866] usb 6-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1700.475595][ T5866] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1700.475649][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.479402][ T5866] usb 6-1: config 0 descriptor?? [ 1700.481251][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1700.544954][T16999] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.19724:16999 [ 1700.569310][ T983] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1700.609732][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1700.660148][T17001] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1700.731131][ T983] usb 2-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 1700.732586][ T983] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1700.732638][ T983] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.732696][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.939977][ T5866] hid_parser_main: 129 callbacks suppressed [ 1700.940012][ T5866] elo 0003:04E7:0009.0025: unknown main item tag 0x0 [ 1700.940054][ T5866] elo 0003:04E7:0009.0025: unknown main item tag 0x0 [ 1700.940090][ T5866] elo 0003:04E7:0009.0025: unknown main item tag 0x0 [ 1700.940125][ T5866] elo 0003:04E7:0009.0025: unknown main item tag 0x0 [ 1700.940161][ T5866] elo 0003:04E7:0009.0025: unknown main item tag 0x0 [ 1700.940197][ T5866] elo 0003:04E7:0009.0025: unknown main item tag 0x0 [ 1700.940234][ T5866] elo 0003:04E7:0009.0025: unknown main item tag 0x0 [ 1700.940269][ T5866] elo 0003:04E7:0009.0025: unknown main item tag 0x0 [ 1700.940303][ T5866] elo 0003:04E7:0009.0025: unknown main item tag 0x0 [ 1700.940338][ T5866] elo 0003:04E7:0009.0025: unknown main item tag 0x0 [ 1701.025163][ T5866] elo 0003:04E7:0009.0025: hidraw0: USB HID v0.01 Device [HID 04e7:0009] on usb-dummy_hcd.5-1/input0 [ 1701.203681][T16770] hsr_slave_0: entered promiscuous mode [ 1701.205335][T16770] hsr_slave_1: entered promiscuous mode [ 1701.206515][T16770] debugfs: 'hsr0' already exists in 'hsr' [ 1701.206544][T16770] Cannot create hsr debugfs directory [ 1701.224552][ T5866] usb 6-1: USB disconnect, device number 23 [ 1701.350117][ T983] hid-sensor-hub 0003:8086:0000.0026: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.1-1/input0 [ 1701.424809][ T983] hid-sensor-hub 0003:8086:0000.0026: No report with id 0xffffffff found [ 1701.424856][ T983] temperature-sensor HID-SENSOR-200033.1.auto: probe with driver temperature-sensor failed with error -22 [ 1701.579368][ T983] usb 2-1: USB disconnect, device number 23 [ 1701.614662][T17010] fido_id[17010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1701.627348][ T5862] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1702.105310][ T12] IPVS: stop unused estimator thread 0... [ 1702.463603][T17029] loop0: detected capacity change from 0 to 4096 [ 1702.534663][T17029] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1702.534707][T17029] NILFS (loop0): trying rollback from an earlier position [ 1702.611265][T17036] Invalid ELF header len 4 [ 1702.624690][T17029] NILFS (loop0): recovery complete [ 1702.640064][T17040] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1702.746649][T17029] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 1703.143552][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1703.224791][T17052] loop6: detected capacity change from 0 to 2048 [ 1703.275136][T17052] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1703.441286][T16770] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1703.506402][T16770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1703.514872][T16770] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1703.618560][T16770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1703.648958][T16770] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1703.677272][T17057] loop1: detected capacity change from 0 to 32768 [ 1703.686308][T17057] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.19744 (17057) [ 1703.728146][T16770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1703.741303][T17057] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1703.741354][T17057] BTRFS info (device loop1): using crc32c checksum algorithm [ 1703.764803][T16770] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1703.826177][T16770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1704.009752][ T31] audit: type=1326 audit(2000000043.308:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17088 comm="syz.6.19748" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70ed9e199 code=0x7ffc0000 [ 1704.013953][ T31] audit: type=1326 audit(2000000043.318:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17088 comm="syz.6.19748" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70ed9e199 code=0x7ffc0000 [ 1704.065962][T17057] BTRFS info (device loop1): enabling ssd optimizations [ 1704.066008][T17057] BTRFS info (device loop1): turning on flush-on-commit [ 1704.066043][T17057] BTRFS info (device loop1): enabling free space tree [ 1704.066073][T17057] BTRFS info (device loop1): enabling auto defrag [ 1704.066103][T17057] BTRFS info (device loop1): use lzo compression, level 1 [ 1704.066140][T17057] BTRFS info (device loop1): max_inline set to 4096 [ 1704.081855][ T31] audit: type=1326 audit(2000000043.383:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17088 comm="syz.6.19748" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe70ed9e199 code=0x7ffc0000 [ 1704.113353][ T31] audit: type=1326 audit(2000000043.411:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17088 comm="syz.6.19748" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70ed9e199 code=0x7ffc0000 [ 1704.113439][ T31] audit: type=1326 audit(2000000043.411:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17088 comm="syz.6.19748" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70ed9e199 code=0x7ffc0000 [ 1704.155511][ T31] audit: type=1326 audit(2000000043.449:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17088 comm="syz.6.19748" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fe70ed9e199 code=0x7ffc0000 [ 1704.155597][ T31] audit: type=1326 audit(2000000043.449:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17088 comm="syz.6.19748" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70ed9e199 code=0x7ffc0000 [ 1704.155669][ T31] audit: type=1326 audit(2000000043.449:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17088 comm="syz.6.19748" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70ed9e199 code=0x7ffc0000 [ 1704.383837][T17099] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1704.558715][ T5859] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1704.650739][T16770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1704.853175][T16770] 8021q: adding VLAN 0 to HW filter on device team0 [ 1704.879497][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.879635][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1704.913924][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.914054][ T7642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1705.104965][T17114] loop5: detected capacity change from 0 to 2048 [ 1705.169793][T17119] loop2: detected capacity change from 0 to 2048 [ 1705.197953][T16770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1705.272417][T17119] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 1705.276613][T17125] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1705.318762][T17119] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1706.276328][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1706.686711][T17159] loop2: detected capacity change from 0 to 512 [ 1706.790799][T17159] EXT4-fs error (device loop2): ext4_validate_block_bitmap:435: comm syz.2.19771: bg 0: block 5: invalid block bitmap [ 1706.790857][T17159] loop2: lost filesystem error report for type 5 error -117 [ 1706.791693][T17159] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1706.791729][T17159] loop2: lost filesystem error report for type 5 error -117 [ 1706.793363][T17159] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.19771: invalid indirect mapped block 3 (level 2) [ 1706.793418][T17159] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1706.794368][T17159] EXT4-fs (loop2): 2 truncates cleaned up [ 1706.798045][T17159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1707.002729][T12796] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1707.073936][T17170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19774'. [ 1707.074005][T17170] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 1707.164916][T12796] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1707.172224][T12796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.172265][T12796] usb 1-1: Product: syz [ 1707.172294][T12796] usb 1-1: Manufacturer: syz [ 1707.172321][T12796] usb 1-1: SerialNumber: syz [ 1707.187929][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1707.240857][T12796] ums-karma 1-1:1.0: USB Mass Storage device detected [ 1707.278871][T12796] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 1707.278871][T12796] Please send a copy of this message to and [ 1707.420964][T17179] loop1: detected capacity change from 0 to 1024 [ 1707.964987][T17178] loop5: detected capacity change from 0 to 32768 [ 1707.976266][T17178] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1707.976295][T17178] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1708.012892][T16770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1708.037240][T17178] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 1708.046201][ T983] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1708.046262][ T983] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1708.056999][T12796] scsi host1: usb-storage 1-1:1.0 [ 1708.289426][ T5866] usb 1-1: USB disconnect, device number 7 [ 1708.344404][ T983] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 278ms [ 1708.344826][ T983] gfs2: fsid=syz:syz.0: jid=0: Done [ 1708.344898][T17178] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1708.355041][T17178] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 0 2340, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 398 [ 1708.355211][T17178] gfs2: fsid=syz:syz.0: G: s:SH n:2/924 f:aqonN t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 1708.355268][T17178] gfs2: fsid=syz:syz.0: H: s:SH f:AH e:0 p:17178 [syz.5.19777] inode_permission+0x3f1/0x620 [ 1708.355350][T17178] gfs2: fsid=syz:syz.0: I: n:0/2340 t:4 f:0x00 d:0x00000000 s:0 p:0 [ 1708.355402][T17178] CPU: 1 UID: 0 PID: 17178 Comm: syz.5.19777 Tainted: G L syzkaller #0 PREEMPT(full) [ 1708.355455][T17178] Tainted: [L]=SOFTLOCKUP [ 1708.355470][T17178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1708.355493][T17178] Call Trace: [ 1708.355507][T17178] [ 1708.355522][T17178] dump_stack_lvl+0x100/0x190 [ 1708.355579][T17178] gfs2_withdraw.cold+0xa/0xed [ 1708.355630][T17178] inode_go_instantiate+0xd63/0x1540 [ 1708.355688][T17178] ? __pfx_bit_wait+0x10/0x10 [ 1708.355742][T17178] ? __pfx_inode_go_instantiate+0x10/0x10 [ 1708.355796][T17178] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1708.355859][T17178] gfs2_instantiate+0x16c/0x250 [ 1708.355901][T17178] gfs2_glock_wait+0x214/0x330 [ 1708.355945][T17178] ? __pfx_gfs2_glock_wait+0x10/0x10 [ 1708.355989][T17178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1708.356043][T17178] gfs2_glock_nq+0xa03/0x14f0 [ 1708.356096][T17178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1708.356150][T17178] gfs2_permission+0x289/0x500 [ 1708.356216][T17178] ? __pfx_gfs2_permission+0x10/0x10 [ 1708.356273][T17178] ? lockref_get_not_dead+0x6a/0x80 [ 1708.356333][T17178] ? inode_permission+0x3f1/0x620 [ 1708.356390][T17178] ? try_to_unlazy+0x296/0x910 [ 1708.356447][T17178] ? try_to_unlazy+0x296/0x910 [ 1708.356503][T17178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1708.356558][T17178] ? __pfx_gfs2_permission+0x10/0x10 [ 1708.356618][T17178] inode_permission+0x3f1/0x620 [ 1708.356677][T17178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1708.356729][T17178] may_open+0x2b8/0x480 [ 1708.356787][T17178] path_openat+0x51f/0x2440 [ 1708.356838][T17178] ? __pfx_path_openat+0x10/0x10 [ 1708.356896][T17178] do_file_open+0x20e/0x430 [ 1708.356944][T17178] ? __pfx_do_file_open+0x10/0x10 [ 1708.357022][T17178] ? _raw_spin_unlock+0x28/0x50 [ 1708.357063][T17178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1708.357109][T17178] ? alloc_fd+0x471/0x7a0 [ 1708.357167][T17178] do_sys_openat2+0x10f/0x1e0 [ 1708.357218][T17178] ? __pfx_do_sys_openat2+0x10/0x10 [ 1708.357270][T17178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1708.357319][T17178] ? __x64_sys_mount+0x230/0x310 [ 1708.357372][T17178] ? __x64_sys_mount+0x239/0x310 [ 1708.357422][T17178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1708.357477][T17178] __x64_sys_openat+0x12d/0x210 [ 1708.357528][T17178] ? __pfx___x64_sys_openat+0x10/0x10 [ 1708.357587][T17178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1708.357647][T17178] do_syscall_64+0x123/0x790 [ 1708.357702][T17178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.357742][T17178] RIP: 0033:0x7f64f955e9ce [ 1708.357773][T17178] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1708.357811][T17178] RSP: 002b:00007f64fa54dda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1708.357848][T17178] RAX: ffffffffffffffda RBX: 00007f64fa54e6c0 RCX: 00007f64f955e9ce [ 1708.357874][T17178] RDX: 0000000000010000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1708.357901][T17178] RBP: 0000200000000040 R08: 0000000000000000 R09: 0000000000000000 [ 1708.357926][T17178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000240 [ 1708.357952][T17178] R13: 00007f64fa54dea0 R14: 00000000000125b6 R15: 0000200000000000 [ 1708.358003][T17178] [ 1708.358038][T17178] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1708.364027][ T9394] gfs2: fsid=syz:syz.0: file system withdrawn [ 1708.435294][T12796] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1708.543397][ T9411] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1708.608279][T12796] usb 3-1: not running at top speed; connect to a high speed hub [ 1708.608327][T12796] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1708.611155][T12796] usb 3-1: config 1 has an invalid descriptor of length 125, skipping remainder of the config [ 1708.611236][T12796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.681240][T12796] uvcvideo 3-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1708.689386][T12796] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 1708.689471][T12796] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 1708.790356][ T9411] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1708.804168][ T9411] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.804239][ T9411] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1708.804303][ T9411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.067801][T12796] usb 3-1: USB disconnect, device number 21 [ 1709.195487][ T9411] ttusb-dec 2-1:1.0: probe with driver ttusb-dec failed with error -2 [ 1709.413999][T12796] usb 2-1: USB disconnect, device number 24 [ 1709.839567][T16770] veth0_vlan: entered promiscuous mode [ 1709.868116][T16770] veth1_vlan: entered promiscuous mode [ 1709.998242][T16770] veth0_macvtap: entered promiscuous mode [ 1710.020330][T16770] veth1_macvtap: entered promiscuous mode [ 1710.068081][T16770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1710.117198][T16770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1710.327666][ T40] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.327743][ T40] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.414321][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.485909][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.740285][T17249] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 1710.815233][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1710.815268][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1711.179894][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1711.179930][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1711.199756][T17260] loop0: detected capacity change from 0 to 256 [ 1711.371335][T17268] loop1: detected capacity change from 0 to 256 [ 1711.384325][T17268] exfat: Deprecated parameter 'utf8' [ 1711.384357][T17268] exfat: Deprecated parameter 'utf8' [ 1711.384483][T17268] exfat: Deprecated parameter 'utf8' [ 1711.384520][T17268] exfat: Deprecated parameter 'namecase' [ 1711.472831][T17268] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1711.576156][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1711.715841][ T9] usb 3-1: device descriptor read/64, error -71 [ 1711.982805][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1712.047887][T17282] ubi24: attaching mtd0 [ 1712.047921][T17282] ubi24 error: ubi_attach_mtd_dev: bad VID header (41) or data offsets (105) [ 1712.132193][ T9] usb 3-1: device descriptor read/64, error -71 [ 1712.201870][T17285] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.19805'. [ 1712.249511][ T9] usb usb3-port1: attempt power cycle [ 1712.445256][T17292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 1712.445299][T17292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xa463 instead [ 1712.445331][T17292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xff3c instead [ 1712.445364][T17292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x96a3 instead [ 1712.445395][T17292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0069 instead [ 1712.460427][T17294] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1712.462191][T17294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1712.535072][T17292] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1712.535098][T17292] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1712.613104][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1712.646403][ T9] usb 3-1: device descriptor read/8, error -71 [ 1712.912012][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1712.934957][ T9] usb 3-1: device descriptor read/8, error -71 [ 1713.051146][ T9] usb usb3-port1: unable to enumerate USB device [ 1713.682045][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1713.854548][ T9] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1713.855997][ T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1713.856048][ T9] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1713.856097][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1713.856152][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.859510][ T9] usb 2-1: config 0 descriptor?? [ 1713.943422][T17343] loop5: detected capacity change from 0 to 64 [ 1714.006900][T17343] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 1714.030487][T17346] loop6: detected capacity change from 0 to 256 [ 1714.033271][T17346] exfat: Deprecated parameter 'namecase' [ 1714.033346][T17346] exfat: Deprecated parameter 'namecase' [ 1714.179376][T17346] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1714.380277][ T9] hid_parser_main: 36 callbacks suppressed [ 1714.380314][ T9] dragonrise 0003:0079:0011.0027: unknown main item tag 0x0 [ 1714.380352][ T9] dragonrise 0003:0079:0011.0027: unknown main item tag 0x0 [ 1714.380388][ T9] dragonrise 0003:0079:0011.0027: unknown main item tag 0x0 [ 1714.380424][ T9] dragonrise 0003:0079:0011.0027: unknown main item tag 0x0 [ 1714.380460][ T9] dragonrise 0003:0079:0011.0027: unknown main item tag 0x0 [ 1714.380494][ T9] dragonrise 0003:0079:0011.0027: unknown main item tag 0x0 [ 1714.380526][ T9] dragonrise 0003:0079:0011.0027: unknown main item tag 0x0 [ 1714.380583][ T9] dragonrise 0003:0079:0011.0027: unknown main item tag 0x0 [ 1714.380618][ T9] dragonrise 0003:0079:0011.0027: unknown main item tag 0x0 [ 1714.380653][ T9] dragonrise 0003:0079:0011.0027: unknown main item tag 0x0 [ 1714.384551][ T9] dragonrise 0003:0079:0011.0027: unbalanced collection at end of report description [ 1714.385450][ T9] dragonrise 0003:0079:0011.0027: probe with driver dragonrise failed with error -22 [ 1714.536724][T12796] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1714.702652][T12796] usb 8-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 1714.703774][ T983] usb 2-1: USB disconnect, device number 25 [ 1714.707867][T12796] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1714.707929][T12796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1714.707976][T12796] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1714.708040][T12796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.784788][T12796] usb 8-1: config 0 descriptor?? [ 1714.790219][T17350] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1715.039703][T17358] loop0: detected capacity change from 0 to 1024 [ 1715.067298][T17358] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1715.287549][T12796] apple 0003:05AC:029C.0028: hidraw0: USB HID v0.05 Device [HID 05ac:029c] on usb-dummy_hcd.7-1/input0 [ 1715.325887][T17364] loop5: detected capacity change from 0 to 2048 [ 1715.460469][T17372] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1715.492443][T29248] usb 8-1: USB disconnect, device number 2 [ 1715.543783][T17369] fido_id[17369]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1716.192951][T17388] loop6: detected capacity change from 0 to 64 [ 1716.650562][T17402] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19847'. [ 1716.814446][T17410] loop7: detected capacity change from 0 to 16 [ 1716.868524][T17410] erofs (device loop7): mounted with root inode @ nid 36. [ 1716.927427][T17410] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 2904 size 16 => 808 [ 1716.928341][T17410] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 2904 size 16 => 808 [ 1716.989027][T17410] erofs (device loop7): read error -117 @ 0 of nid 89 [ 1716.992100][ T31] audit: type=1800 audit(2000000055.464:464): pid=17410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.19852" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 1717.231260][T29248] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1717.340331][T17424] loop1: detected capacity change from 0 to 256 [ 1717.400771][T29248] usb 3-1: Using ep0 maxpacket: 32 [ 1717.401580][T29248] usb 3-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 1717.402949][T29248] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10 [ 1717.403002][T29248] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1717.403052][T29248] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1717.403100][T29248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.407963][T29248] usb 3-1: config 0 descriptor?? [ 1717.536334][T17423] loop5: detected capacity change from 0 to 2048 [ 1717.646713][T17423] NILFS (loop5): invalid segment: Magic number mismatch [ 1717.650389][T17423] NILFS (loop5): trying rollback from an earlier position [ 1717.677131][T17427] loop7: detected capacity change from 0 to 2048 [ 1717.751128][T17423] NILFS (loop5): recovery complete [ 1717.763771][T17434] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1717.820230][T17427] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1717.914537][T17423] NILFS (loop5): Segment number 65 to be freed is out of range [ 1718.034487][T29248] logitech 0003:046D:C287.0029: hidraw0: USB HID v0.81 Device [HID 046d:c287] on usb-dummy_hcd.2-1/input0 [ 1718.034547][T29248] logitech 0003:046D:C287.0029: no inputs found [ 1718.334947][T12796] usb 3-1: USB disconnect, device number 26 [ 1718.618208][T17445] fido_id[17445]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1718.643734][T17415] loop6: detected capacity change from 0 to 32768 [ 1718.696979][T17415] XFS (loop6): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 1719.016356][ T7699] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1719.048386][T29248] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1719.230080][T29248] usb 8-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.00 [ 1719.248497][T29248] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1719.248552][T29248] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1719.248593][T29248] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1719.248659][T29248] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.294335][T29248] usb 8-1: config 0 descriptor?? [ 1719.667005][T17490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19875'. [ 1719.827456][T29248] input: HID 046d:c704 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:046D:C704.002A/input/input179 [ 1719.940515][T29248] logitech 0003:046D:C704.002A: input,hidraw0: USB HID v0.00 Joystick [HID 046d:c704] on usb-dummy_hcd.7-1/input0 [ 1720.163911][T29248] usb 8-1: USB disconnect, device number 3 [ 1720.220158][T17509] loop5: detected capacity change from 0 to 64 [ 1720.247943][T17503] fido_id[17503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1720.431172][T17511] loop0: detected capacity change from 0 to 256 [ 1720.532894][T17518] netlink: 'syz.5.19885': attribute type 8 has an invalid length. [ 1720.750330][T17521] loop5: detected capacity change from 0 to 4096 [ 1720.857408][T17521] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1720.873469][T17525] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1720.920368][T17521] NILFS (loop5): mounting fs with errors [ 1721.149275][T17534] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 1721.149320][T17534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1721.189659][T17532] loop6: detected capacity change from 0 to 2048 [ 1721.358582][T17532] Alternate GPT is invalid, using primary GPT. [ 1721.358804][T17532] loop6: p2 p3 p7 [ 1722.035953][T17559] loop1: detected capacity change from 0 to 16 [ 1722.056186][T17559] erofs (device loop1): mounted with root inode @ nid 36. [ 1722.168255][ T5862] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 1722.199426][T17563] loop0: detected capacity change from 0 to 2048 [ 1722.204782][T17563] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1722.205326][T17563] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1722.205354][T17563] UDF-fs: Scanning with blocksize 512 failed [ 1722.214077][T17563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1722.313720][T17566] loop6: detected capacity change from 0 to 2048 [ 1722.357143][T17559] erofs (device loop1): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 1722.357297][T17559] erofs (device loop1): read error -117 @ 1 of nid 89 [ 1722.360982][ T31] audit: type=1800 audit(2000000060.480:465): pid=17559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.19900" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1722.423900][T17566] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1723.022039][T17588] netlink: 'syz.7.19910': attribute type 1 has an invalid length. [ 1723.022075][T17588] netlink: 232 bytes leftover after parsing attributes in process `syz.7.19910'. [ 1723.022102][T17588] netlink: 'syz.7.19910': attribute type 1 has an invalid length. [ 1723.340384][T17600] loop7: detected capacity change from 0 to 64 [ 1724.482017][T17635] loop0: detected capacity change from 0 to 2048 [ 1724.586973][T17642] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1724.763176][T17635] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=80, inode=15, rec_len=1498, name_len=5 [ 1724.937247][T17635] Remounting filesystem read-only [ 1724.937272][T17635] NILFS error (device loop0): nilfs_readdir: bad page in #2 [ 1725.217261][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19937'. [ 1725.787739][T17679] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19948'. [ 1725.977697][T17689] loop6: detected capacity change from 0 to 256 [ 1726.041068][T17691] netlink: 256 bytes leftover after parsing attributes in process `syz.5.19955'. [ 1726.041107][T17691] netlink: 32 bytes leftover after parsing attributes in process `syz.5.19955'. [ 1726.050236][T17689] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1726.421967][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1726.579780][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1726.580684][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1726.582105][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1726.582156][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1726.582197][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1726.582262][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.586642][ T9] usb 6-1: config 0 descriptor?? [ 1726.728931][ T983] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1726.814804][ T5992] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1726.890953][ T983] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1726.892764][ T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1726.892818][ T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1726.892861][ T983] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1726.892929][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.903316][ T983] usb 1-1: config 0 descriptor?? [ 1727.006572][ T5992] usb 3-1: Using ep0 maxpacket: 16 [ 1727.007772][ T5992] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1727.009456][ T5992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1727.009540][ T5992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1727.009585][ T5992] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1727.009688][ T5992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.014166][ T5992] usb 3-1: config 0 descriptor?? [ 1727.191878][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.002B/input/input180 [ 1727.224837][ T9] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1727.383231][ T9] usb 6-1: USB disconnect, device number 24 [ 1727.432611][ T983] hid_parser_main: 5 callbacks suppressed [ 1727.432646][ T983] steelseries 0003:1038:1410.002C: unknown main item tag 0x0 [ 1727.432689][ T983] steelseries 0003:1038:1410.002C: unknown main item tag 0x3 [ 1727.438441][ T983] steelseries 0003:1038:1410.002C: missing HID_OUTPUT_REPORT 0 [ 1727.543785][ T5992] waterforce 0003:1044:7A4D.002D: unknown main item tag 0x0 [ 1727.543836][ T5992] waterforce 0003:1044:7A4D.002D: unknown main item tag 0x0 [ 1727.543872][ T5992] waterforce 0003:1044:7A4D.002D: unknown main item tag 0x0 [ 1727.543907][ T5992] waterforce 0003:1044:7A4D.002D: unknown main item tag 0x0 [ 1727.543997][ T5992] waterforce 0003:1044:7A4D.002D: unknown main item tag 0x0 [ 1727.544037][ T5992] waterforce 0003:1044:7A4D.002D: unknown main item tag 0x0 [ 1727.544075][ T5992] waterforce 0003:1044:7A4D.002D: unknown main item tag 0x0 [ 1727.544112][ T5992] waterforce 0003:1044:7A4D.002D: unknown main item tag 0x0 [ 1727.556027][T17722] loop6: detected capacity change from 0 to 16 [ 1727.633746][ T5992] waterforce 0003:1044:7A4D.002D: hidraw0: USB HID v1.00 Device [HID 1044:7a4d] on usb-dummy_hcd.2-1/input0 [ 1727.716423][ T5992] waterforce 0003:1044:7A4D.002D: fw version request failed with -38 [ 1727.725043][ T983] usb 1-1: USB disconnect, device number 8 [ 1727.785557][ T5992] usb 3-1: USB disconnect, device number 27 [ 1727.796994][T17717] fido_id[17717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1728.160630][T29248] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1728.190629][T17727] fido_id[17727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1728.322141][T29248] usb 8-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1728.323616][T29248] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1728.323668][T29248] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1728.323715][T29248] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1728.323763][T29248] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.383281][T29248] usb 8-1: config 0 descriptor?? [ 1728.868703][T29248] elecom 0003:056E:00E6.002E: collection stack underflow [ 1728.868744][T29248] elecom 0003:056E:00E6.002E: item 0 4 0 12 parsing failed [ 1728.869609][T29248] elecom 0003:056E:00E6.002E: probe with driver elecom failed with error -22 [ 1729.108841][T29248] usb 8-1: USB disconnect, device number 4 [ 1729.243831][T17764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19985'. [ 1729.663369][T17776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.664222][T17776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.664379][T17776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1729.787293][T17785] loop2: detected capacity change from 0 to 2048 [ 1729.813472][T17785] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1729.854980][T17785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1729.991647][T17793] loop6: detected capacity change from 0 to 1024 [ 1730.074450][T17799] loop7: detected capacity change from 0 to 8 [ 1730.182796][T29248] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1730.352947][T29248] usb 6-1: Using ep0 maxpacket: 32 [ 1730.355154][T29248] usb 6-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 1730.356684][T29248] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10 [ 1730.356734][T29248] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1730.356782][T29248] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1730.356831][T29248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.360391][T29248] usb 6-1: config 0 descriptor?? [ 1730.912904][T29248] logitech 0003:046D:C287.002F: hidraw0: USB HID v0.81 Device [HID 046d:c287] on usb-dummy_hcd.5-1/input0 [ 1730.912965][T29248] logitech 0003:046D:C287.002F: no inputs found [ 1731.021280][T17822] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.025137][T17822] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.025300][T17822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1731.139320][T29248] usb 6-1: USB disconnect, device number 25 [ 1731.254785][T17824] fido_id[17824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1731.279536][T17811] loop1: detected capacity change from 0 to 32768 [ 1731.338491][T17811] XFS (loop1): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 1731.495207][ T5859] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1731.649186][T17847] loop2: detected capacity change from 0 to 2048 [ 1731.721613][T17849] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1731.774699][T17847] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=80, inode=15, rec_len=1498, name_len=5 [ 1731.779248][T17847] Remounting filesystem read-only [ 1731.779265][T17847] NILFS error (device loop2): nilfs_readdir: bad page in #2 [ 1731.859662][T17853] loop5: detected capacity change from 0 to 8 [ 1731.934497][T17853] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1731.934536][T17853] SQUASHFS error: Failed to read block 0x9b: -5 [ 1731.934558][T17853] SQUASHFS error: Unable to read metadata cache entry [99] [ 1731.934578][T17853] SQUASHFS error: Unable to read inode 0x127 [ 1732.049602][T17851] [ 1732.051982][T17851] ====================================================== [ 1732.059000][T17851] WARNING: possible circular locking dependency detected [ 1732.066024][T17851] syzkaller #0 Tainted: G L [ 1732.072008][T17851] ------------------------------------------------------ [ 1732.079030][T17851] syz.1.20018/17851 is trying to acquire lock: [ 1732.085190][T17851] ffff8880800d00b8 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0xac/0x2110 [ 1732.094410][T17851] [ 1732.094410][T17851] but task is already holding lock: [ 1732.101774][T17851] ffffffff90f871a0 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 1732.110716][T17851] [ 1732.110716][T17851] which lock already depends on the new lock. [ 1732.110716][T17851] [ 1732.121122][T17851] [ 1732.121122][T17851] the existing dependency chain (in reverse order) is: [ 1732.130153][T17851] [ 1732.130153][T17851] -> #2 (rfcomm_mutex){+.+.}-{4:4}: [ 1732.137605][T17851] lock_acquire+0x1d1/0x380 [ 1732.142657][T17851] __mutex_lock+0x1a4/0x1bd0 [ 1732.147798][T17851] rfcomm_security_cfm+0x3f/0x4b0 [ 1732.153362][T17851] hci_auth_complete_evt+0x811/0x1180 [ 1732.159282][T17851] hci_event_packet+0x8e9/0xcd0 [ 1732.164675][T17851] hci_rx_work+0x451/0xfc0 [ 1732.169642][T17851] process_one_work+0xac7/0x1b10 [ 1732.175215][T17851] worker_thread+0x5ef/0xe50 [ 1732.180371][T17851] kthread+0x373/0x450 [ 1732.184984][T17851] ret_from_fork+0x730/0xd60 [ 1732.190102][T17851] ret_from_fork_asm+0x1a/0x30 [ 1732.195395][T17851] [ 1732.195395][T17851] -> #1 (hci_cb_list_lock){+.+.}-{4:4}: [ 1732.203146][T17851] lock_acquire+0x1d1/0x380 [ 1732.208178][T17851] __mutex_lock+0x1a4/0x1bd0 [ 1732.213307][T17851] hci_remote_features_evt+0x485/0x9b0 [ 1732.219407][T17851] hci_event_packet+0x8e9/0xcd0 [ 1732.224786][T17851] hci_rx_work+0x451/0xfc0 [ 1732.229755][T17851] process_one_work+0xac7/0x1b10 [ 1732.235239][T17851] worker_thread+0x5ef/0xe50 [ 1732.240375][T17851] kthread+0x373/0x450 [ 1732.244980][T17851] ret_from_fork+0x730/0xd60 [ 1732.250100][T17851] ret_from_fork_asm+0x1a/0x30 [ 1732.255391][T17851] [ 1732.255391][T17851] -> #0 (&hdev->lock){+.+.}-{4:4}: [ 1732.262712][T17851] check_prev_add+0xeb/0xe60 [ 1732.267831][T17851] __lock_acquire+0x1528/0x1f40 [ 1732.273209][T17851] lock_acquire+0x1d1/0x380 [ 1732.278326][T17851] __mutex_lock+0x1a4/0x1bd0 [ 1732.283456][T17851] l2cap_chan_connect+0xac/0x2110 [ 1732.289007][T17851] l2cap_sock_connect+0x37a/0x770 [ 1732.294565][T17851] kernel_connect+0x107/0x160 [ 1732.299774][T17851] rfcomm_dlc_open+0x838/0xac0 [ 1732.305071][T17851] rfcomm_dev_activate+0x83/0x110 [ 1732.310639][T17851] tty_port_open+0x161/0x220 [ 1732.315763][T17851] rfcomm_tty_open+0xad/0x490 [ 1732.320985][T17851] tty_open+0x2cc/0xe20 [ 1732.325671][T17851] chrdev_open+0x234/0x6a0 [ 1732.330626][T17851] do_dentry_open+0x6ab/0x14d0 [ 1732.335945][T17851] vfs_open+0x82/0x3f0 [ 1732.340545][T17851] path_openat+0x19fa/0x2440 [ 1732.345669][T17851] do_file_open+0x20e/0x430 [ 1732.350709][T17851] do_sys_openat2+0x10f/0x1e0 [ 1732.355920][T17851] __x64_sys_openat+0x12d/0x210 [ 1732.361306][T17851] do_syscall_64+0x123/0x790 [ 1732.366436][T17851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.372860][T17851] [ 1732.372860][T17851] other info that might help us debug this: [ 1732.372860][T17851] [ 1732.383078][T17851] Chain exists of: [ 1732.383078][T17851] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 1732.383078][T17851] [ 1732.395624][T17851] Possible unsafe locking scenario: [ 1732.395624][T17851] [ 1732.403068][T17851] CPU0 CPU1 [ 1732.408435][T17851] ---- ---- [ 1732.413791][T17851] lock(rfcomm_mutex); [ 1732.417954][T17851] lock(hci_cb_list_lock); [ 1732.424986][T17851] lock(rfcomm_mutex); [ 1732.431667][T17851] lock(&hdev->lock); [ 1732.435748][T17851] [ 1732.435748][T17851] *** DEADLOCK *** [ 1732.435748][T17851] [ 1732.443883][T17851] locks held by syz.1.20018/17851: 3, last CPU#0: [ 1732.450299][T17851] #0: ffff88802b51e1b0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev.part.0+0x39/0x470 [ 1732.460541][T17851] #1: ffff888053c382a0 (&port->mutex){+.+.}-{4:4}, at: tty_port_open+0x92/0x220 [ 1732.469814][T17851] #2: ffffffff90f871a0 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 1732.479191][T17851] [ 1732.479191][T17851] stack backtrace: [ 1732.485083][T17851] CPU: 0 UID: 0 PID: 17851 Comm: syz.1.20018 Tainted: G L syzkaller #0 PREEMPT(full) [ 1732.496127][T17851] Tainted: [L]=SOFTLOCKUP [ 1732.500446][T17851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1732.510506][T17851] Call Trace: [ 1732.513785][T17851] [ 1732.516716][T17851] dump_stack_lvl+0x100/0x190 [ 1732.521425][T17851] print_circular_bug.cold+0x178/0x1be [ 1732.526928][T17851] check_noncircular+0x146/0x160 [ 1732.531890][T17851] check_prev_add+0xeb/0xe60 [ 1732.536499][T17851] __lock_acquire+0x1528/0x1f40 [ 1732.541386][T17851] lock_acquire+0x1d1/0x380 [ 1732.545908][T17851] ? l2cap_chan_connect+0xac/0x2110 [ 1732.551128][T17851] ? __pfx___might_resched+0x10/0x10 [ 1732.556472][T17851] __mutex_lock+0x1a4/0x1bd0 [ 1732.561092][T17851] ? l2cap_chan_connect+0xac/0x2110 [ 1732.566388][T17851] ? l2cap_chan_connect+0xac/0x2110 [ 1732.571605][T17851] ? hci_get_route+0x368/0x520 [ 1732.576375][T17851] ? hci_get_route+0x368/0x520 [ 1732.581146][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.586805][T17851] ? __pfx___mutex_lock+0x10/0x10 [ 1732.591854][T17851] ? do_raw_read_unlock+0x3f/0x70 [ 1732.596910][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.602589][T17851] ? _raw_read_unlock+0x28/0x50 [ 1732.607457][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.613106][T17851] ? hci_get_route+0x368/0x520 [ 1732.617884][T17851] ? __pfx_hci_get_route+0x10/0x10 [ 1732.623007][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.628657][T17851] ? reacquire_held_locks+0xdd/0x1f0 [ 1732.633962][T17851] ? l2cap_chan_connect+0xac/0x2110 [ 1732.639169][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.644825][T17851] l2cap_chan_connect+0xac/0x2110 [ 1732.649868][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.655522][T17851] ? __local_bh_enable_ip+0xa5/0x120 [ 1732.660823][T17851] l2cap_sock_connect+0x37a/0x770 [ 1732.665872][T17851] ? __pfx_l2cap_sock_connect+0x10/0x10 [ 1732.671435][T17851] ? mark_held_locks+0x40/0x70 [ 1732.676213][T17851] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1732.682034][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.687700][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.693346][T17851] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1732.699168][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.704838][T17851] ? __debug_object_init+0x2de/0x3d0 [ 1732.710161][T17851] kernel_connect+0x107/0x160 [ 1732.714949][T17851] ? __pfx_kernel_connect+0x10/0x10 [ 1732.720190][T17851] ? timer_init_key+0x150/0x310 [ 1732.725067][T17851] rfcomm_dlc_open+0x838/0xac0 [ 1732.729853][T17851] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 1732.735156][T17851] ? lock_acquire+0x1d1/0x380 [ 1732.739868][T17851] ? __pfx_rfcomm_dev_activate+0x10/0x10 [ 1732.745560][T17851] rfcomm_dev_activate+0x83/0x110 [ 1732.750618][T17851] tty_port_open+0x161/0x220 [ 1732.755221][T17851] rfcomm_tty_open+0xad/0x490 [ 1732.759925][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.765577][T17851] ? __pfx_rfcomm_tty_open+0x10/0x10 [ 1732.770891][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.776550][T17851] ? do_raw_spin_unlock+0x145/0x1e0 [ 1732.781772][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.787422][T17851] ? check_tty_count+0x1aa/0x2b0 [ 1732.792393][T17851] ? __pfx_rfcomm_tty_open+0x10/0x10 [ 1732.797710][T17851] tty_open+0x2cc/0xe20 [ 1732.801886][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.807537][T17851] ? __pfx_tty_open+0x10/0x10 [ 1732.812231][T17851] ? chrdev_open+0x589/0x6a0 [ 1732.816833][T17851] ? chrdev_open+0x589/0x6a0 [ 1732.821431][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.827088][T17851] ? __pfx_tty_open+0x10/0x10 [ 1732.831775][T17851] chrdev_open+0x234/0x6a0 [ 1732.836213][T17851] ? __pfx_chrdev_open+0x10/0x10 [ 1732.841162][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.846909][T17851] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1732.853353][T17851] do_dentry_open+0x6ab/0x14d0 [ 1732.858146][T17851] ? __pfx_chrdev_open+0x10/0x10 [ 1732.863102][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.868756][T17851] vfs_open+0x82/0x3f0 [ 1732.872840][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.878585][T17851] path_openat+0x19fa/0x2440 [ 1732.883199][T17851] ? __pfx_path_openat+0x10/0x10 [ 1732.888178][T17851] do_file_open+0x20e/0x430 [ 1732.892740][T17851] ? __pfx_do_file_open+0x10/0x10 [ 1732.897816][T17851] ? _raw_spin_unlock+0x28/0x50 [ 1732.902682][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.908614][T17851] ? alloc_fd+0x471/0x7a0 [ 1732.912970][T17851] do_sys_openat2+0x10f/0x1e0 [ 1732.917667][T17851] ? __pfx_do_sys_openat2+0x10/0x10 [ 1732.922893][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.928560][T17851] __x64_sys_openat+0x12d/0x210 [ 1732.933451][T17851] ? __pfx___x64_sys_openat+0x10/0x10 [ 1732.938847][T17851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1732.944500][T17851] do_syscall_64+0x123/0x790 [ 1732.949116][T17851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.955020][T17851] RIP: 0033:0x7f6532f9e199 [ 1732.959464][T17851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1732.979087][T17851] RSP: 002b:00007f6533f33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1732.987537][T17851] RAX: ffffffffffffffda RBX: 00007f6533225fa0 RCX: 00007f6532f9e199 [ 1732.995520][T17851] RDX: 0000000000000802 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 1733.003501][T17851] RBP: 00007f65330350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1733.011499][T17851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1733.019474][T17851] R13: 00007f6533226038 R14: 00007f6533225fa0 R15: 00007ffe5746b488 [ 1733.027471][T17851] [ 1735.320208][ T3622] Bluetooth: hci4: command 0x0405 tx timeout