last executing test programs: 11m57.413775422s ago: executing program 3 (id=350): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/175, 0xaf}], 0x1}, 0x40000001}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x2000c8c0) 11m57.109476619s ago: executing program 3 (id=351): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x55, 0x0, &(0x7f0000000340)="b461802305624431ed3373010001040500000002000000d5fe0000000000463652a3eea9b68b0e98857ac21d065bd1e3a998dc21e6d846c36fefc23672eae95d6a4a88b97aeb785be671b8ab8e05858faa964695fb", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 11m56.769156537s ago: executing program 3 (id=353): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x18000, &(0x7f0000005180), 0x81, 0x50d4, &(0x7f00000051c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) truncate(&(0x7f0000000940)='./file1\x00', 0x4001) 11m55.06555967s ago: executing program 3 (id=367): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@oldalloc}, {@jqfmt_vfsv0}, {@i_version}]}, 0xff, 0x523, &(0x7f0000000900)="$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") mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 11m53.904741698s ago: executing program 3 (id=375): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) 11m53.128436827s ago: executing program 3 (id=383): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file2\x00', 0x180c8, &(0x7f0000002780)=ANY=[], 0x1, 0x242, &(0x7f00000028c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x5) 11m52.729881057s ago: executing program 32 (id=383): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file2\x00', 0x180c8, &(0x7f0000002780)=ANY=[], 0x1, 0x242, &(0x7f00000028c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x5) 10m38.368138305s ago: executing program 1 (id=913): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 10m37.283497032s ago: executing program 1 (id=923): socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x6020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xffffffff, 0x80, 0xfffffffe, 0x3, 0x10007e, 0x20000006, 0x50, 0x6, 0x10000, 0x80005, 0x2, 0x8, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0xff0, 0x0, 0x3, 0xe, 0x4, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xff7ffff3, 0x2, 0xc8, 0xf9, 0x9, 0x7, 0x6c7, 0x9, 0x2, 0x1000003, 0x1, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x2, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x8101, 0x1, 0xeaf, 0xffff80f1, 0x1, 0x206, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x10000009], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x0, 0x5, 0xc303, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x8001, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8005, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x1000ac8, 0xc1, 0x2, 0x1000003, 0x7ff, 0x129, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0x5, 0xcef, 0x1ff, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0xff, 0x7, 0xaf, 0x8, 0x6, 0x7, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0xb77, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 10m37.013538988s ago: executing program 1 (id=926): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='tps6598x 0x3', 0xc) 10m36.636435098s ago: executing program 1 (id=928): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000180)=""/42, 0x2a) 10m36.358821654s ago: executing program 1 (id=930): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 10m35.709827741s ago: executing program 1 (id=935): openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 10m35.127289684s ago: executing program 33 (id=935): openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 6m41.518237541s ago: executing program 2 (id=2561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x74}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 6m41.221770428s ago: executing program 2 (id=2562): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c6167730007020000000002000000000200000008040200", 0x3d) 6m40.922685685s ago: executing program 2 (id=2563): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/'], 0x20) 6m40.597796564s ago: executing program 2 (id=2565): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 6m40.372069369s ago: executing program 2 (id=2567): syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x16, &(0x7f0000005440)={[{@noenospc_debug}, {@nossd_spread}, {@nodatasum}, {@notreelog}, {@max_inline={'max_inline', 0x3d, [0x6b, 0x78, 0x67, 0x3d, 0x31]}}, {@skip_balance}]}, 0x9, 0x50f6, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f000000b680)='.\x00', 0x2000, 0x1180, &(0x7f000000b6c0)) 6m38.497649686s ago: executing program 2 (id=2582): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='101:0:1', 0x7) 6m23.039048372s ago: executing program 34 (id=2582): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='101:0:1', 0x7) 6m18.507639315s ago: executing program 4 (id=2642): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) pread64(r1, &(0x7f0000000580)=""/224, 0xe0, 0x200000000000002) 6m18.209714063s ago: executing program 4 (id=2643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='#', 0x1) 6m17.821112202s ago: executing program 4 (id=2645): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 6m17.52589795s ago: executing program 4 (id=2647): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6m17.246883266s ago: executing program 4 (id=2649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x88) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}}, 0x8044) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002180)=ANY=[@ANYBLOB="f02500000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a3100000000b825038058"], 0x25f0}, 0x1, 0x0, 0x0, 0x4044840}, 0x8800) 6m16.6999859s ago: executing program 4 (id=2652): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000180)) 6m16.169899063s ago: executing program 35 (id=2652): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000180)) 3m34.031620379s ago: executing program 6 (id=3600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r0) 3m33.673631448s ago: executing program 6 (id=3602): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000240)) 3m32.996257334s ago: executing program 6 (id=3605): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=winnt,shortname=winnt,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c000000000000009e5fcf6469722c73687865d2068a008e48488cc8642c6e66733d6e6f73"], 0x1, 0x274, &(0x7f00000005c0)="$eJzs3cFrk2ccB/Bf2nRJCyM5DMrGYO/YZafQduyeMjoYC2xs5KAni01RmlpooaCHtrfi/6D/gh69Ch7Eq/+ACFIFL9ZTD0IkvmlNahIbbRqxn8+lP5739+V5nrcveemhTy79uLqytLaxvL+/F/l8JrLlKMdBJooxFuOR2gkA4Gty0GjEq0Zq1GsBAM6G9z8AnD/93v+ZnaOxf89+ZQDAsHzW3/9jQ1kSADBk/1+4+Pd8pbLwX5LkI1Z3N6ub1fRnen1+Oa5GPWoxE4V4E9E4ktZ//lVZmEmanhcjv7o9lua3N6vjnfnZKESxe342SUW1mTvMT8RUK/9kKmoxF4X4rnt+rmv+m/j1l7b5S1GIx5djLeqxFM1sms9FxNZskvzxT+VYPveuDwAAAAAAAAAAAAAAAAAAAAAAhqGUHCl2nn+Tnt9TKvW6nubbzwea7Hc+UGP72Pk62fghO9q9AwAAAAAAAAAAAAAAAAAAwJdi4/qNlcV6vbber7j26M6DvVwa+Ghz/yLTmnew1G7fnsmT7eJY8e3Pz251u5SL3KD359OKiYhoH0laU97/aYiTnlbxcO/K979tTP/eqyey7SM3m1vt6OnxIGWHdcNfFiI6RyZat7ter+UHfiDbi7uHRfn1Bz2Hj1JtfXLUv7jp2+XFe1tPX5w01edDozF+2h9DAAAAAAAAAAAAAAAAAABAx/+3j3olAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA677//f9AiFx0j+Z7NmZ1RbxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHPvbQAAAP//Th2Rtg==") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84004, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) 3m32.080211428s ago: executing program 6 (id=3609): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m31.709858157s ago: executing program 6 (id=3612): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 3m31.157623631s ago: executing program 6 (id=3616): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f0000002a00)=""/15, 0xf}], 0x4}, 0xec}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000006ad873"], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 3m30.514494647s ago: executing program 36 (id=3616): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f0000002a00)=""/15, 0xf}], 0x4}, 0xec}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000006ad873"], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 1m17.460318947s ago: executing program 0 (id=4373): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0xd0f, 0x2, 0x4, 0xadeb, 0x7, "ea710e00000000f91500ff000200", 0x4000000, 0xfffeffff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1m16.505765021s ago: executing program 0 (id=4380): r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m13.853558546s ago: executing program 0 (id=4398): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_emit_ethernet(0x2a, &(0x7f0000001980)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x1c, 0x67, 0x4000, 0x0, 0x2f, 0x0, @private=0xa010100, @broadcast}, {0x0, 0x883e, 0x8}}}}}, 0x0) 1m13.604564343s ago: executing program 8 (id=4399): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.load\x00', 0x2, 0x0) write(r0, 0x0, 0x37) 1m13.479624286s ago: executing program 5 (id=4400): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001180)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[], 0x8b) 1m13.393842328s ago: executing program 8 (id=4401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000580)={0x1, 0x0, [{0x400000ff, 0x0, 0x7fffffffffffffff}]}) 1m13.291158491s ago: executing program 0 (id=4402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x11, 0x0, [{0x10a, 0x0, 0x675}]}) 1m13.189813923s ago: executing program 5 (id=4403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) 1m12.989848498s ago: executing program 8 (id=4404): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b912"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x2c000010) 1m12.92450735s ago: executing program 5 (id=4405): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000c0000000800000040"], 0x50) unshare(0x22020600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000004e80)={r0, &(0x7f0000000480)="73c0", &(0x7f0000003e80)=""/4096}, 0x20) 1m12.809055643s ago: executing program 7 (id=4406): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x74, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0x5}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x4f, 0x1, {0x7, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x17}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x74}}, 0x4008010) 1m12.649848357s ago: executing program 0 (id=4407): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r1, 0xe386}, &(0x7f0000000080)=0x8) 1m12.649674937s ago: executing program 8 (id=4408): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1d0, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f00000003c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @multicast2}}}], 0x20}}], 0x1, 0x0) 1m12.52632028s ago: executing program 5 (id=4409): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x40204706, &(0x7f0000000200)) 1m12.439035452s ago: executing program 7 (id=4410): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x4, {{0xa, 0x4e24, 0xffffffc0, @mcast2, 0x22}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x5, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1, 0xbdf}}}, 0x88) 1m12.381790933s ago: executing program 8 (id=4411): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) 1m12.087545431s ago: executing program 5 (id=4412): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x0, 0x6e6, &(0x7f0000000380)="$eJzs3c9vHGcZB/DvrNcbb6iC0yY0QkVYiVSQIhInVgpBQhiEUA4VqsqhZytxGqubpEpclFaIuoDghMShf0BB8o0DQuIeFC5cyq1XHyshcYk4RL0smtnZ9a69/pU4dgKfTzSZd+Z9551nnnlnZnet1Qb4v3XlbJr3U+TK2dfvlctrq3OdtdW5I3V1J0lZbiTN3izFraR4kMyX9cXQlKH5Jh8vXX7zs4drn/eWmvVUtZ/YbrsxxrRdqafM1P3N9Gtaw80md7uLlTq8vJDkaj0f1dptXyMNy6Sdqedw6LqbrOxl871ct8Azpv90Ksrn5oeb66eTo0mm6tcBqe8OjYOM8WnY010OAAAAnm3fa2/xsfentw8hGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjOVb//X82qqVHPM5Oi//v/rf66uvwMmt91y/tPNQ4AAAAAAAAAOBhff5RHuZdj/eVuUf3N/3S1cCJfdJMv5b3czWLu5FzuZSHLWc6dXEgyPdRR697C8vKdC4MtS+O3vDh2y4sHdcQAAAAAAAAA8D/pl2mv//0fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeBUUy0ZtV04l6nuk0mlmvy0ryzyStw453D4pxK+8ffBwAAADwRKYeY5svP8qj3Mux/nK3qN7zf6V6vzyV93Iry1nKcjpZzLX6PXT5rr+xtjrXWVudu1lO5fJovz/4957CaNU9TFRL4/Z8qmrRzvUsVWvO5WoVzLU0evs+k5zqxzMU15CPypiK79d2GVmzTmu5s99v9SnCvhj9KKKxTcv2enDJICOzdWzllsd7GSiqD2qSjZnY8ew0R5amq14nB3u6kMbgk58TT5LzlfF7P1rPy+P5zVPN+V4NMtFIlYmL/dFXXjPbZyL5xl//9NaNzq13bly/e/bZOaQdTGyxfuOYmBvKxMvPdSaae2w/W2Xi5GD5Sn6cn+ZsZvJG7mQpP8tClrOYbl2/UI/n8v/p7TM1P7L0xk6RtOrz0jtnu4lpJj+qSgs5XW17LEspcjvXspjXqn8XcyHfzqVcyuWhM3xyy7irY6uu+sbGq75/pv82Nvgz36wL5d3tt+t3ufntjnir0blfevf+Mq/Hh/LaG/UPB62OD10Hs0NZerGfncmxnT/O86j51bpQ7uNXOzwnDtZ0nYnyAuo/JfrRvdTLRLN6Fm0e53/oltulc6vbvbHw7hb9b3xYvFrPy2G1+rWdWveNPxX7qxwvL2aqvpOMjo6y7qXBXWaorrs+lnt1o0/ccruTVV1R9K/Un+R2NQA2X6mt+jXc5p4uVnUvj62bq+pODdWNvN7K7XRy7QDyB8Dj+Mdbg+J0jrba/2p/2v6k/ev2jfbrUz888p0jr7Qy+ffJ7zZnJ15tvFL8JZ/kF+vv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMd39/0P3lnodBbvjC80tq4aKbSzcc1OPW8oFPUP+uxtq30t9H9db186nCo7Gl4zuV89jykUza2q2hvD2FTofpgceML7PyI4vs3vykJz04gaV5gfWfPnzR1+tMcIi91dF0+x0MjB7nQi4wfAId2QgANzfvnmu+fvvv/Bt5ZuLry9+PbirclLly7PXr702tz560udxdne/4cdJfA0jLwMAAAAAAAAAAAAAJ4L474YcPqFnb40sqvveAzWHPYxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+3K2fTvJ8iF2bPzZbLa6tznXLql9dbNpM0Gknx86R4kMynN2V6qLsif3yQ7pj9fLx0+c3PHq59vt5Xs9c+adTzrW1fm2SlnjKTZKKeP4GR/q4+cX/Ff/rHUCbsi263O/9k8cH++G8AAAD///a/8b4=") mkdirat(0xffffffffffffff9c, 0x0, 0x181) statfs(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)=""/16) mount$nfs(0x0, 0x0, 0x0, 0x2000, 0x0) 1m9.744837639s ago: executing program 0 (id=4413): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x14}], 0x1}, 0x0) 1m9.447324667s ago: executing program 7 (id=4414): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000002c659855c67eb6120d6700000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a0108000000000000000001ffffffffffffffff797a30000000000900030073797a320000000014000000060a0104000000000000000001"], 0x88}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1m7.126340844s ago: executing program 8 (id=4415): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000440)) 59.352021399s ago: executing program 5 (id=4416): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08002600b409000008002700010000000800a1"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 56.88137188s ago: executing program 7 (id=4417): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys_sec\x00', 0x0) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x8) read(r0, &(0x7f0000000180)=""/12, 0xc) 48.691829014s ago: executing program 37 (id=4413): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x14}], 0x1}, 0x0) 42.87036144s ago: executing program 38 (id=4415): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000440)) 37.332560298s ago: executing program 39 (id=4416): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08002600b409000008002700010000000800a1"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 36.538117588s ago: executing program 7 (id=4421): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x890, &(0x7f00000002c0)=ANY=[], 0x1, 0xda8, &(0x7f0000000e00)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {&(0x7f0000000040)=[0x1000], 0x1, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) 22.288635964s ago: executing program 7 (id=4422): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 40 (id=4422): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) kernel console output (not intermixed with test programs): 0003e syscall=9 compat=0 ip=0x7f1d6d39dec2 code=0x7ffc0000 [ 603.630081][ T28] audit: type=1326 audit(1788569324.547:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.6.3369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1d6d39df57 code=0x7ffc0000 [ 603.864600][ T28] audit: type=1326 audit(1788569324.547:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.6.3369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1d6d35ae51 code=0x7ffc0000 [ 604.063687][ T28] audit: type=1326 audit(1788569324.547:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.6.3369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1d6d39ef49 code=0x7ffc0000 [ 604.182499][T12535] BTRFS info (device loop0): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 604.623303][T14919] loop6: detected capacity change from 0 to 32768 [ 604.837112][T14919] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 605.684503][T12673] ocfs2: Unmounting device (7,6) on (node local) [ 606.473448][T14950] loop5: detected capacity change from 0 to 8192 [ 606.587092][T14950] Dev loop5: RDB in block 1 has bad checksum [ 606.658687][T14955] loop6: detected capacity change from 0 to 1024 [ 608.753707][T12749] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 608.843863][ T8627] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 608.975285][T12749] usb 7-1: unable to get BOS descriptor or descriptor too short [ 609.005955][T12749] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 609.053811][ T8627] usb 1-1: Using ep0 maxpacket: 16 [ 609.063094][T12749] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 609.098834][T12749] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.114611][ T8627] usb 1-1: unable to get BOS descriptor or descriptor too short [ 609.150337][ T8627] usb 1-1: config 127 has an invalid interface number: 124 but max is 0 [ 609.160641][T12749] usb 7-1: Product: syz [ 609.183655][T12749] usb 7-1: Manufacturer: syz [ 609.188918][ T8627] usb 1-1: config 127 has no interface number 0 [ 609.225949][T12749] usb 7-1: SerialNumber: syz [ 609.238646][ T8627] usb 1-1: config 127 interface 124 has no altsetting 0 [ 609.280268][ T8627] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 609.299526][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.354791][ T8627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.399344][ T8627] usb 1-1: Product: syz [ 609.410445][ T8627] usb 1-1: Manufacturer: syz [ 609.431312][ T8627] usb 1-1: SerialNumber: syz [ 609.520568][T12749] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 609.714274][T12749] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 609.754536][T12749] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 610.122998][T12749] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 610.212128][T12749] usb 7-1: USB disconnect, device number 6 [ 610.319844][T12646] udevd[12646]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.464111][ T8627] usb 1-1: reset high-speed USB device number 13 using dummy_hcd [ 610.614337][T15018] pim6reg1: tun_chr_ioctl cmd 1074025678 [ 610.640421][T15018] pim6reg1: group set to 0 [ 610.720429][ T8627] usb 1-1: unable to get BOS descriptor or descriptor too short [ 610.753629][ T8627] usb 1-1: device firmware changed [ 610.835280][ T8627] usb 1-1: USB disconnect, device number 13 [ 611.704185][T15037] loop6: detected capacity change from 0 to 128 [ 611.735623][T15037] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 611.869131][T15037] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 611.999387][T15042] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3432'. [ 612.249164][ T1106] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 612.290038][T15047] loop0: detected capacity change from 0 to 128 [ 612.429406][T15047] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 612.591374][T15047] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 612.795364][T15047] fscrypt (loop0, inode 12): Unsupported encryption flags (0xdc) [ 613.039262][T12535] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 613.230939][T15066] loop6: detected capacity change from 0 to 4096 [ 613.452603][T15069] loop5: detected capacity change from 0 to 256 [ 613.501856][T15066] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 613.546282][T15069] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 613.773620][ T8627] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 613.782162][T15066] ntfs3: loop6: failed to convert "256c" to koi8-ru [ 614.005201][ T8627] usb 8-1: Using ep0 maxpacket: 16 [ 614.037563][T15076] loop5: detected capacity change from 0 to 64 [ 614.064640][ T8627] usb 8-1: unable to get BOS descriptor or descriptor too short [ 614.106254][ T8627] usb 8-1: config 127 has an invalid interface number: 124 but max is 0 [ 614.172580][ T8627] usb 8-1: config 127 has no interface number 0 [ 614.230833][ T8627] usb 8-1: config 127 interface 124 has no altsetting 0 [ 614.291454][ T8627] usb 8-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 614.334384][ T8627] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.342466][ T8627] usb 8-1: Product: syz [ 614.517627][ T8627] usb 8-1: Manufacturer: syz [ 614.522317][ T8627] usb 8-1: SerialNumber: syz [ 614.834163][ T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 615.067830][ T8] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 615.094067][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 615.116470][ T8] usb 7-1: Product: syz [ 615.120742][ T8] usb 7-1: Manufacturer: syz [ 615.132150][ T10] block nbd2: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 30 seconds [ 615.244233][ T8] msi2500 7-1:1.0: Registered as swradio24 [ 615.250123][ T8] msi2500 7-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 615.478673][ T8] usb 7-1: USB disconnect, device number 7 [ 615.484715][ T8627] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 615.496874][ T5085] Bluetooth: hci0: unexpected event for opcode 0x202d [ 615.608268][T15104] loop0: detected capacity change from 0 to 512 [ 615.665604][T15104] EXT4-fs error (device loop0): __ext4_iget:5079: inode #11: block 1: comm syz.0.3457: invalid block [ 615.699450][T15104] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.3457: couldn't read orphan inode 11 (err -117) [ 615.725058][ T8627] usb 8-1: unable to get BOS descriptor or descriptor too short [ 615.749588][T15104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.767878][ T8627] usb 8-1: device firmware changed [ 615.779148][ T8627] usb 8-1: USB disconnect, device number 6 [ 615.921831][T12535] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.656111][T15121] loop5: detected capacity change from 0 to 128 [ 616.663408][T15121] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 616.758293][T15122] gretap0: entered promiscuous mode [ 616.829094][T15121] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 616.878676][T15126] loop7: detected capacity change from 0 to 256 [ 617.096231][T15126] FAT-fs (loop7): Directory bread(block 64) failed [ 617.102866][T15126] FAT-fs (loop7): Directory bread(block 65) failed [ 617.162397][T15079] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 617.192262][T15126] FAT-fs (loop7): Directory bread(block 66) failed [ 617.247714][T15126] FAT-fs (loop7): Directory bread(block 67) failed [ 617.311105][T15126] FAT-fs (loop7): Directory bread(block 68) failed [ 617.351282][T15126] FAT-fs (loop7): Directory bread(block 69) failed [ 617.393704][T15126] FAT-fs (loop7): Directory bread(block 70) failed [ 617.427647][T15126] FAT-fs (loop7): Directory bread(block 71) failed [ 617.459665][T15126] FAT-fs (loop7): Directory bread(block 72) failed [ 617.493747][ T8] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 617.503789][T15126] FAT-fs (loop7): Directory bread(block 73) failed [ 617.553404][T15132] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 617.701414][ T8] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 617.715001][T15126] syz.7.3468: attempt to access beyond end of device [ 617.715001][T15126] loop7: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 617.738303][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.750394][ T8] usb 7-1: Product: syz [ 617.774699][ T8] usb 7-1: Manufacturer: syz [ 617.801112][ T8] usb 7-1: SerialNumber: syz [ 617.834860][ T8] usb 7-1: config 0 descriptor?? [ 617.867831][ T8] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 618.748884][ T9] usb 7-1: USB disconnect, device number 8 [ 619.040461][T15148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 619.949179][T15168] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.958280][T15168] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.967080][T15168] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.976075][T15168] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.265213][T15172] input: syz0 as /devices/virtual/input/input27 [ 621.162085][T15190] nfsd: exp_rootfh path not found ainx\ [ 621.402324][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 621.402336][ T28] audit: type=1326 audit(1788569343.627:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.5.3498" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc779e159 code=0x7ffc0000 [ 621.643589][ T28] audit: type=1326 audit(1788569343.677:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.5.3498" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dc779e159 code=0x7ffc0000 [ 621.863703][ T28] audit: type=1326 audit(1788569343.677:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.5.3498" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc779e159 code=0x7ffc0000 [ 622.053332][ T28] audit: type=1326 audit(1788569343.687:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.5.3498" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc779e159 code=0x7ffc0000 [ 622.077510][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.268012][ T28] audit: type=1326 audit(1788569343.687:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.5.3498" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dc779e159 code=0x7ffc0000 [ 622.292127][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.479880][ T28] audit: type=1326 audit(1788569343.687:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.5.3498" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc779e159 code=0x7ffc0000 [ 622.607258][ T28] audit: type=1326 audit(1788569343.687:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.5.3498" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc779e159 code=0x7ffc0000 [ 622.631819][ T9] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 622.844164][ T9] usb 8-1: config 0 has an invalid interface number: 37 but max is 1 [ 622.867721][ T9] usb 8-1: config 0 has an invalid interface number: 255 but max is 1 [ 622.917571][ T9] usb 8-1: config 0 has no interface number 0 [ 622.938078][ T9] usb 8-1: config 0 has no interface number 1 [ 622.971217][ T9] usb 8-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 623.028524][ T9] usb 8-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 623.113257][ T9] usb 8-1: config 0 interface 255 has no altsetting 0 [ 623.145836][ T9] usb 8-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 623.183624][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.224350][ T9] usb 8-1: Product: syz [ 623.228756][ T9] usb 8-1: Manufacturer: syz [ 623.270380][ T9] usb 8-1: SerialNumber: syz [ 623.311087][ T9] usb 8-1: config 0 descriptor?? [ 623.620646][ T8627] usb 8-1: USB disconnect, device number 7 [ 623.892061][T15218] loop0: detected capacity change from 0 to 32768 [ 623.959577][T15218] JBD2: Ignoring recovery information on journal [ 623.981039][T15227] loop5: detected capacity change from 0 to 32768 [ 624.009784][T15218] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 624.079997][T15227] find_entry called with index >= next_index [ 624.096422][T15218] JBD2: bad block at offset 32 [ 624.106749][T15227] find_entry called with index >= next_index [ 624.140087][T15218] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 624.154819][T15227] find_entry called with index >= next_index [ 624.199498][T15227] find_entry called with index >= next_index [ 624.224191][T15227] find_entry called with index >= next_index [ 624.279886][T15227] add_index: next_index = 0. Resetting! [ 624.316379][T15227] find_entry called with index >= next_index [ 624.376867][T15227] find_entry called with index >= next_index [ 624.420503][T15227] find_entry called with index >= next_index [ 624.515518][T15227] non-latin1 character 0x3ff found in JFS file name [ 624.522944][T15227] mount with iocharset=utf8 to access [ 624.650130][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.901435][T12535] ocfs2: Unmounting device (7,0) on (node local) [ 625.116045][T15246] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 625.166107][T15248] loop9: detected capacity change from 0 to 7 [ 625.196852][T15248] Dev loop9: unable to read RDB block 7 [ 625.218916][T15248] loop9: unable to read partition table [ 625.244447][T15248] loop9: partition table beyond EOD, truncated [ 625.284916][T15248] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 625.614180][T15253] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3526'. [ 625.655828][T15253] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.999260][T15261] loop0: detected capacity change from 0 to 256 [ 626.115532][T15261] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 626.533799][ T11] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 626.931540][T15273] sctp: [Deprecated]: syz.0.3540 (pid 15273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 626.931540][T15273] Use struct sctp_sack_info instead [ 627.153992][T15277] tap0: tun_chr_ioctl cmd 1074025677 [ 627.159796][T15277] tap0: linktype set to 6 [ 628.162824][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3548'. [ 628.386121][T15308] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3550'. [ 628.466917][ T5085] Bluetooth: hci0: Zero size dump init pkt [ 629.374216][T15337] program syz.0.3561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 629.463760][ T28] audit: type=1400 audit(1788569351.687:182): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=15338 comm="syz.5.3563" name="p" offset=58 [ 630.357650][T15331] loop6: detected capacity change from 0 to 32768 [ 630.402272][T15357] loop7: detected capacity change from 0 to 128 [ 630.455236][T15357] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 630.477711][T15331] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 630.531179][T15357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 630.618658][T15331] XFS (loop6): Ending clean mount [ 630.629161][ T28] audit: type=1800 audit(1788569352.857:183): pid=15357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3570" name="file1" dev="loop7" ino=104 res=0 errno=0 [ 630.715936][T15368] program syz.0.3572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 630.948661][T12673] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 631.142124][T15374] loop7: detected capacity change from 0 to 128 [ 631.649842][T15383] loop7: detected capacity change from 0 to 512 [ 632.853255][T15398] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3574'. [ 633.482953][T15393] loop7: detected capacity change from 0 to 32768 [ 633.554999][T15393] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.3588 (15393) [ 633.639703][T15393] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 633.710358][T15393] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 633.791708][T15393] BTRFS info (device loop7): metadata ratio 220 [ 633.850144][T15393] BTRFS info (device loop7): setting nodatasum [ 633.896540][T15393] BTRFS info (device loop7): metadata ratio 4 [ 633.902691][T15393] BTRFS info (device loop7): enabling ssd optimizations [ 633.994929][T15393] BTRFS info (device loop7): allowing degraded mounts [ 634.001762][T15393] BTRFS info (device loop7): using free space tree [ 634.244253][T15393] BTRFS info (device loop7): auto enabling async discard [ 634.922383][T14317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 634.935645][T14317] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 634.944363][T14317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 634.965059][T14317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 634.973357][T14317] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 634.981279][T14317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 635.096711][T12748] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 635.709689][T15451] loop6: detected capacity change from 0 to 1024 [ 635.823445][T15435] chnl_net:caif_netlink_parms(): no params data found [ 635.860950][T15451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.113385][T15459] loop7: detected capacity change from 0 to 128 [ 636.278192][T12673] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.431034][T15435] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.535581][T15435] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.542882][T15435] bridge_slave_0: entered allmulticast mode [ 636.621901][T15435] bridge_slave_0: entered promiscuous mode [ 636.660048][T15468] loop6: detected capacity change from 0 to 256 [ 636.735513][T15435] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.742694][T15435] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.763322][T15468] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 636.848877][T15435] bridge_slave_1: entered allmulticast mode [ 636.900910][T15435] bridge_slave_1: entered promiscuous mode [ 636.910089][T15470] scsi_dev_info_list_add_str: bad dev info string 'vendor;model' 'f' '(null)' [ 637.045602][T14317] Bluetooth: hci0: command tx timeout [ 637.137021][T15435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.213282][T15435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.490012][T15435] team0: Port device team_slave_0 added [ 637.541241][T15435] team0: Port device team_slave_1 added [ 637.841942][T15479] ima: policy update failed [ 637.854599][T15435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.861581][T15435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.887551][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.920525][ T28] audit: type=1802 audit(1788569360.127:184): pid=15479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.3613" res=0 errno=0 [ 637.937511][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.068188][T15435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.101689][T15484] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 638.150471][T15484] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 638.223797][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 638.365696][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.397449][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.426756][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 638.445520][ T8] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 638.485076][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 638.536962][T15435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.544972][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 638.593593][T15435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.619723][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 638.653707][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 638.690392][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.709526][T15435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.761985][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 638.833639][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.883314][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.930233][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.139522][T14317] Bluetooth: hci0: command tx timeout [ 639.146954][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 639.168828][ T8] usbtmc 1-1:16.0: can't read capabilities [ 639.256831][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.267679][T15490] ALSA: mixer_oss: invalid OSS volume 'dev/net/tun' [ 639.307901][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.353945][T15435] hsr_slave_0: entered promiscuous mode [ 639.401211][T15435] hsr_slave_1: entered promiscuous mode [ 639.416009][ T8] usb 1-1: USB disconnect, device number 14 [ 639.454821][T15435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 639.479270][T15435] Cannot create hsr debugfs directory [ 639.615665][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.661086][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.720392][T15491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.765242][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 639.782999][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 639.793683][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 639.801821][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 639.812117][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 639.819521][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 640.829296][T15435] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.923665][T15435] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.203894][ T5085] Bluetooth: hci0: command tx timeout [ 641.355939][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 641.405614][T15435] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.448113][T15435] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.573664][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 641.595035][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.656868][ T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 641.740694][ T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 641.783632][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 641.848010][T15499] loop7: detected capacity change from 0 to 32768 [ 641.879632][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 641.901220][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 641.927523][ T5085] Bluetooth: hci2: command tx timeout [ 641.988892][ T8] usb 1-1: SerialNumber: syz [ 642.040250][T15505] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 642.118401][T15505] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 642.190731][ T8] hub 1-1:1.0: bad descriptor, ignoring hub [ 642.228562][ T8] hub: probe of 1-1:1.0 failed with error -5 [ 642.238915][T15435] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.302525][T15435] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.446040][T15505] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 642.530281][T15505] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 642.806108][T15435] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.865700][ T8] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 642.906123][T15435] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.956865][ T8] usb 1-1: USB disconnect, device number 15 [ 643.283938][ T5085] Bluetooth: hci0: command tx timeout [ 643.634762][T15493] chnl_net:caif_netlink_parms(): no params data found [ 644.013801][ T5085] Bluetooth: hci2: command tx timeout [ 644.801091][T15435] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 644.835311][T15435] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 644.889906][T15493] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.916833][T15493] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.948328][T15493] bridge_slave_0: entered allmulticast mode [ 644.970534][T15493] bridge_slave_0: entered promiscuous mode [ 645.008514][T15493] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.049754][T15493] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.079811][T15493] bridge_slave_1: entered allmulticast mode [ 645.111202][T15493] bridge_slave_1: entered promiscuous mode [ 645.182428][T15435] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 645.333357][T15435] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 645.608282][ T11] batman_adv: batadv0: Removing interface: macvtap1 [ 645.695415][T15493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.779041][ T10] block nbd2: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 60 seconds [ 645.827055][T15493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.153800][ T5085] Bluetooth: hci2: command tx timeout [ 646.236847][ T28] audit: type=1800 audit(1788569624.422:185): pid=15560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3632" name="max_speed" dev="configfs" ino=45220 res=0 errno=0 [ 646.261476][T15493] team0: Port device team_slave_0 added [ 646.460302][T15493] team0: Port device team_slave_1 added [ 646.588945][ T11] hsr_slave_0: left promiscuous mode [ 646.655180][ T11] hsr_slave_1: left promiscuous mode [ 646.675530][T15567] loop0: detected capacity change from 0 to 256 [ 646.745595][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.765746][T15567] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 646.803113][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.845727][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.894723][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.005115][ T11] bridge_slave_1: left allmulticast mode [ 647.010892][ T11] bridge_slave_1: left promiscuous mode [ 647.082231][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.124845][ T11] bridge_slave_0: left allmulticast mode [ 647.176627][ T11] bridge_slave_0: left promiscuous mode [ 647.182385][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.199362][ T1330] rpcbind: server 127.0.0.1 not responding, timed out [ 647.524472][ T11] veth1_macvtap: left promiscuous mode [ 647.530065][ T11] veth0_macvtap: left promiscuous mode [ 647.600360][ T11] veth1_vlan: left promiscuous mode [ 647.633678][ T11] veth0_vlan: left promiscuous mode [ 648.164196][ T5085] Bluetooth: hci2: command tx timeout [ 648.462143][T15593] loop0: detected capacity change from 0 to 1024 [ 648.531107][T15580] loop7: detected capacity change from 0 to 32768 [ 648.588407][T15580] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.3640 (15580) [ 648.695096][T15580] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 648.767067][T15580] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 648.810954][T15580] BTRFS info (device loop7): setting nodatacow, compression disabled [ 648.865366][T15580] BTRFS info (device loop7): force clearing of disk cache [ 648.872672][T15580] BTRFS info (device loop7): turning off barriers [ 648.954476][T15580] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 649.003634][T15580] BTRFS info (device loop7): use lzo compression, level 0 [ 649.011009][T15580] BTRFS info (device loop7): disabling free space tree [ 649.037743][T15580] BTRFS info (device loop7): enabling ssd optimizations [ 649.084668][T15580] BTRFS info (device loop7): using spread ssd allocation scheme [ 649.092418][T15580] BTRFS info (device loop7): not using ssd optimizations [ 649.162574][T15580] BTRFS info (device loop7): not using spread ssd allocation scheme [ 649.336050][T15580] BTRFS info (device loop7): rebuilding free space tree [ 649.423674][T15580] BTRFS info (device loop7): disabling free space tree [ 649.464327][T15580] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 649.534690][T15580] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 649.607145][T15580] BTRFS info (device loop7): checking UUID tree [ 649.901129][T12748] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 651.411347][T15630] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3652'. [ 651.773020][T15634] loop7: detected capacity change from 0 to 512 [ 651.822580][T15634] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 33619980: comm syz.7.3654: invalid block [ 651.861221][ T11] team0 (unregistering): Port device team_slave_1 removed [ 651.888847][T15634] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:478: comm syz.7.3654: Invalid block bitmap block 0 in block_group 0 [ 651.953973][T15634] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 651.995519][T15634] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.3654: attempt to clear invalid blocks 983261 len 1 [ 652.040505][T15634] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.3654: invalid indirect mapped block 2683928664 (level 0) [ 652.081869][T15634] EXT4-fs error (device loop7): __ext4_get_inode_loc:4497: comm syz.7.3654: Invalid inode table block 0 in block_group 0 [ 652.105708][ T11] team0 (unregistering): Port device team_slave_0 removed [ 652.113389][T15634] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 652.150484][T15634] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 652.185603][T15634] EXT4-fs error (device loop7): __ext4_get_inode_loc:4497: comm syz.7.3654: Invalid inode table block 0 in block_group 0 [ 652.228375][T15634] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 652.261566][T15634] EXT4-fs error (device loop7): ext4_truncate:4302: inode #13: comm syz.7.3654: mark_inode_dirty error [ 652.283105][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.292108][T15634] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 652.338071][T15634] EXT4-fs error (device loop7): __ext4_get_inode_loc:4497: comm syz.7.3654: Invalid inode table block 0 in block_group 0 [ 652.372913][T15634] EXT4-fs (loop7): 1 truncate cleaned up [ 652.386553][T15634] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.512620][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.593294][T12748] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.785201][T15638] overlayfs: failed to clone lowerpath [ 653.412264][T15646] loop7: detected capacity change from 0 to 1764 [ 653.577180][T12646] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 654.153187][ T11] bond0 (unregistering): Released all slaves [ 654.360597][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3645'. [ 654.449995][T15614] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 654.508442][T15650] geneve1: entered promiscuous mode [ 654.537359][T15650] geneve1: left promiscuous mode [ 654.616345][T15493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.670915][T15493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.752112][T15493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.804721][T15656] program syz.0.3662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 654.835283][T15493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.842771][T15493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.962766][T15493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.258808][T15493] hsr_slave_0: entered promiscuous mode [ 655.373376][T15493] hsr_slave_1: entered promiscuous mode [ 655.406249][T15493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 655.454262][T15493] Cannot create hsr debugfs directory [ 655.508146][T15435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.775125][T15435] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.910537][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.917770][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.021523][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.028738][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.517560][T15435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.881259][T15493] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 656.985710][T15435] veth0_vlan: entered promiscuous mode [ 657.006363][T15493] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 657.130243][T15493] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 657.204423][T15435] veth1_vlan: entered promiscuous mode [ 657.215086][T15493] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 657.296720][T15702] Failed to get privilege flags for destination (handle=0x2:0x0) [ 657.417504][T15435] veth0_macvtap: entered promiscuous mode [ 657.477238][T15435] veth1_macvtap: entered promiscuous mode [ 657.586155][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.607219][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.624319][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.639658][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.651909][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.669877][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.680894][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.697679][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.709961][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.730882][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.748080][T15435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.806468][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.824371][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.842821][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.862693][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.880817][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.892955][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.908997][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.922349][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.939537][T15435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.959118][T15435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.971033][T15435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.047581][T15493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.078381][T15435] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.100596][T15435] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.113286][T15435] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.128136][T15435] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.151220][T15493] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.222492][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.229697][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.281826][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.289057][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.585814][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.624142][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.698552][T15493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.767152][T15079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.822658][T15079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.926423][T15493] veth0_vlan: entered promiscuous mode [ 658.983120][T15493] veth1_vlan: entered promiscuous mode [ 659.116199][T15722] loop5: detected capacity change from 0 to 8 [ 659.141444][T15493] veth0_macvtap: entered promiscuous mode [ 659.199203][T15493] veth1_macvtap: entered promiscuous mode [ 659.221371][T15722] SQUASHFS error: Failed to read block 0x285: -5 [ 659.263096][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.274967][T15722] SQUASHFS error: Unable to read metadata cache entry [283] [ 659.287476][T15722] SQUASHFS error: Unable to read directory block [283:0] [ 659.319708][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.373553][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.430589][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.472216][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.520527][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.574887][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.667183][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.733691][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.788673][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.833609][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.904257][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.974856][T15493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.182897][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.210621][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.239296][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.263230][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.293431][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.321442][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.347252][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.369614][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.398840][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.427950][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.450796][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.476866][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.519671][T15493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.587705][T15493] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.633558][T15493] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.642323][T15493] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.733596][T15493] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.941560][T15731] loop0: detected capacity change from 0 to 32768 [ 661.082949][T15731] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.3680 (15731) [ 661.113040][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.178753][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.267712][T15731] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 661.303026][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.339941][T15731] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 661.355650][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.424546][T15731] BTRFS info (device loop0): setting nodatacow, compression disabled [ 661.432802][T15731] BTRFS info (device loop0): force clearing of disk cache [ 661.545302][T15731] BTRFS info (device loop0): turning off barriers [ 661.604245][T15731] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 661.698804][T15731] BTRFS info (device loop0): use lzo compression, level 0 [ 661.721738][T15751] loop8: detected capacity change from 0 to 512 [ 661.764742][T15731] BTRFS info (device loop0): disabling free space tree [ 661.771699][T15731] BTRFS info (device loop0): enabling ssd optimizations [ 661.909259][T15751] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 661.938512][T15731] BTRFS info (device loop0): using spread ssd allocation scheme [ 661.969365][T15751] System zones: 1-12 [ 661.995178][T15751] EXT4-fs error (device loop8): dx_probe:823: inode #2: comm syz.8.3617: Directory hole found for htree index block 0 [ 662.023724][T15731] BTRFS info (device loop0): not using ssd optimizations [ 662.030800][T15731] BTRFS info (device loop0): not using spread ssd allocation scheme [ 662.109517][T15751] EXT4-fs (loop8): Remounting filesystem read-only [ 662.142338][T15751] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -117 [ 662.183407][T15751] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 662.198144][T15751] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.326638][T15731] BTRFS info (device loop0): rebuilding free space tree [ 662.422068][T15731] BTRFS info (device loop0): disabling free space tree [ 662.435002][T15493] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.464471][T15731] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 662.584394][T15731] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 662.717210][T15779] ALSA: mixer_oss: invalid OSS volume 'dev/net/tun' [ 662.730561][T15731] BTRFS info (device loop0): checking UUID tree [ 662.773597][T15731] BTRFS warning (device loop0): failed to start uuid_rescan task [ 662.823888][T15731] BTRFS warning (device loop0): failed to check the UUID tree: -4 [ 663.281463][T15731] BTRFS error (device loop0): open_ctree failed: -4 [ 663.583584][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 663.819196][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 663.831755][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.892746][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 663.933339][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 663.980954][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 664.047372][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 664.101489][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 664.135415][ T9] usb 6-1: SerialNumber: syz [ 664.205561][T15792] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 664.212858][T15792] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 664.293199][ T9] hub 6-1:1.0: bad descriptor, ignoring hub [ 664.308758][ T9] hub: probe of 6-1:1.0 failed with error -5 [ 664.509092][T15792] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 664.564392][T15792] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 664.727453][T15803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.813114][ T9] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 664.895335][ T9] usb 6-1: USB disconnect, device number 19 [ 665.708256][T15822] loop7: detected capacity change from 0 to 256 [ 666.065902][ T28] audit: type=1326 audit(1788569900.300:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.5.3694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f81b9e159 code=0x7ffc0000 [ 666.090004][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.246480][ T28] audit: type=1326 audit(1788569900.340:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.5.3694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f81b9e159 code=0x7ffc0000 [ 666.270587][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.393919][ T28] audit: type=1326 audit(1788569900.370:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.5.3694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8f81b9cfc7 code=0x7ffc0000 [ 666.488781][ T28] audit: type=1326 audit(1788569900.370:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.5.3694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f81b9e159 code=0x7ffc0000 [ 666.525806][T15813] loop8: detected capacity change from 0 to 32768 [ 666.637138][ T28] audit: type=1326 audit(1788569900.370:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.5.3694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f81b9e159 code=0x7ffc0000 [ 666.796201][ T28] audit: type=1326 audit(1788569900.380:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.5.3694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f8f81b9e159 code=0x7ffc0000 [ 666.820437][ C0] vkms_vblank_simulate: vblank timer overrun [ 667.087350][ T28] audit: type=1326 audit(1788569900.380:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.5.3694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f81b9e159 code=0x7ffc0000 [ 667.297318][ T28] audit: type=1326 audit(1788569900.380:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.5.3694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f8f81b9e159 code=0x7ffc0000 [ 667.321683][ C0] vkms_vblank_simulate: vblank timer overrun [ 667.518515][ T28] audit: type=1326 audit(1788569900.380:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.5.3694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f81b9e159 code=0x7ffc0000 [ 667.542618][ C0] vkms_vblank_simulate: vblank timer overrun [ 667.662500][ T28] audit: type=1326 audit(1788569900.380:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.5.3694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f81b9e159 code=0x7ffc0000 [ 667.686640][ C0] vkms_vblank_simulate: vblank timer overrun [ 667.970753][T15841] loop8: detected capacity change from 0 to 32768 [ 668.010670][T15841] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.3695 (15841) [ 668.109643][T15841] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 668.176761][T15841] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 668.229340][T15841] BTRFS info (device loop8): setting nodatacow, compression disabled [ 668.252594][T15841] BTRFS info (device loop8): force clearing of disk cache [ 668.294212][T15841] BTRFS info (device loop8): turning off barriers [ 668.300708][T15841] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 668.349639][T15841] BTRFS info (device loop8): use lzo compression, level 0 [ 668.393574][T15841] BTRFS info (device loop8): disabling free space tree [ 668.400496][T15841] BTRFS info (device loop8): enabling ssd optimizations [ 668.450560][T15841] BTRFS info (device loop8): using spread ssd allocation scheme [ 668.503823][T15841] BTRFS info (device loop8): not using ssd optimizations [ 668.510918][T15841] BTRFS info (device loop8): not using spread ssd allocation scheme [ 668.651186][T15841] BTRFS info (device loop8): rebuilding free space tree [ 668.721941][T15841] BTRFS info (device loop8): disabling free space tree [ 668.730521][T15841] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 668.766160][T15841] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 668.814033][T15841] BTRFS info (device loop8): checking UUID tree [ 669.150252][T15493] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 669.689627][T15891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.097335][T15900] batman_adv: batadv0: Adding interface: macvtap1 [ 670.154590][T15900] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.326037][T15900] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 671.171729][T15916] program syz.8.3713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 673.037478][T15936] loop7: detected capacity change from 0 to 32768 [ 673.091830][T15936] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.3721 (15936) [ 673.183237][T15936] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 673.263769][T15936] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 673.347974][T15936] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 673.423677][T15936] BTRFS info (device loop7): force zstd compression, level 15 [ 673.473687][T15936] BTRFS info (device loop7): using free space tree [ 673.753642][T15936] BTRFS info (device loop7): enabling ssd optimizations [ 673.833658][T15936] BTRFS info (device loop7): auto enabling async discard [ 674.419751][T12748] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 674.761620][T12646] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop7 scanned by udevd (12646) [ 675.817426][T16009] loop7: detected capacity change from 0 to 256 [ 675.855634][ T10] block nbd2: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 90 seconds [ 676.014406][T16009] FAT-fs (loop7): Directory bread(block 64) failed [ 676.063999][T16009] FAT-fs (loop7): Directory bread(block 65) failed [ 676.082464][T16009] FAT-fs (loop7): Directory bread(block 66) failed [ 676.122093][T16009] FAT-fs (loop7): Directory bread(block 67) failed [ 676.166992][T16009] FAT-fs (loop7): Directory bread(block 68) failed [ 676.206093][T16009] FAT-fs (loop7): Directory bread(block 69) failed [ 676.236172][T16009] FAT-fs (loop7): Directory bread(block 70) failed [ 676.288053][T16009] FAT-fs (loop7): Directory bread(block 71) failed [ 676.316949][T16009] FAT-fs (loop7): Directory bread(block 72) failed [ 676.349195][T16009] FAT-fs (loop7): Directory bread(block 73) failed [ 676.940029][T15990] loop8: detected capacity change from 0 to 32768 [ 677.009977][T16017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 677.219569][T16019] loop5: detected capacity change from 0 to 4096 [ 677.255756][T15990] read_mapping_page failed! [ 677.305973][T15990] jfs_mount: Failed to read FILESYSTEM_I [ 677.390953][T16019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.407391][T15990] Mount JFS Failure: -5 [ 677.457836][T15990] jfs_mount failed w/return code = -5 [ 677.538314][T16026] loop0: detected capacity change from 0 to 128 [ 677.600305][ T28] audit: type=1800 audit(1788569911.830:196): pid=16019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3739" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 677.620857][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.771202][T16026] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 678.022020][T16026] ext4 filesystem being mounted at /210/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 678.044739][T15435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.292095][T16026] fscrypt (loop0, inode 12): Unsupported encryption flags (0x08) [ 678.664751][T12535] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 678.830027][T16042] loop7: detected capacity change from 0 to 2048 [ 678.929315][T16042] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.257861][T16049] loop0: detected capacity change from 0 to 512 [ 679.813576][ T8627] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 680.034011][ T8627] usb 8-1: Using ep0 maxpacket: 8 [ 680.062364][ T8627] usb 8-1: config 0 interface 0 has no altsetting 0 [ 680.103628][ T8627] usb 8-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 680.154782][ T8627] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.236410][ T8627] usb 8-1: config 0 descriptor?? [ 680.878141][ T8627] usb 8-1: string descriptor 0 read error: -71 [ 680.904944][T16079] [ 680.913160][ T8627] uclogic 0003:5543:3031.0011: failed retrieving string descriptor #200: -71 [ 680.981557][ T8627] uclogic 0003:5543:3031.0011: failed retrieving pen parameters: -71 [ 681.040549][ T8627] uclogic 0003:5543:3031.0011: failed probing pen v2 parameters: -71 [ 681.103632][ T8627] uclogic 0003:5543:3031.0011: failed probing parameters: -71 [ 681.111247][ T8627] uclogic: probe of 0003:5543:3031.0011 failed with error -71 [ 681.225722][ T8627] usb 8-1: USB disconnect, device number 8 [ 681.936515][T16100] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 682.096153][T16104] loop8: detected capacity change from 0 to 1024 [ 682.238330][T16109] loop7: detected capacity change from 0 to 512 [ 682.421341][T16109] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.544848][T16109] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.047268][T12748] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.088233][ T48] hfsplus: b-tree write err: -5, ino 8 [ 683.933578][ T5085] Bluetooth: hci0: command 0x080f tx timeout [ 684.268464][T16149] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3778'. [ 685.471803][T16179] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 685.533826][T16179] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 685.577759][T16179] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 685.610243][T16179] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 685.866855][T16185] (syz.0.3799,16185,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 686.093598][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.345959][T16220] loop5: detected capacity change from 0 to 512 [ 687.404460][T16220] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 688.828726][T16248] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3819'. [ 689.374594][T16257] loop7: detected capacity change from 0 to 4096 [ 689.439008][T16264] loop8: detected capacity change from 0 to 512 [ 689.465203][T16257] EXT4-fs: Ignoring removed mblk_io_submit option [ 689.564993][T16257] EXT4-fs (loop7): Test dummy encryption mode enabled [ 689.680771][T16257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.949926][T16257] fs-verity: sha256 using implementation "sha256-avx2" [ 690.112981][T16257] fs-verity (loop7, inode 15): fs-verity keyring is empty, rejecting signed file! [ 690.441586][T12748] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.611567][T16287] ubi31: attaching mtd0 [ 690.682853][T16287] ubi31 error: ubi_attach_mtd_dev: bad VID header (12293) or data offsets (12357) [ 693.189861][ T5832] kernel write not supported for file /snd/seq (pid: 5832 comm: kworker/0:3) [ 693.565741][T16364] loop8: detected capacity change from 0 to 1024 [ 693.727583][T16370] program syz.0.3854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 693.991365][ T1330] hfsplus: b-tree write err: -5, ino 4 [ 694.065589][ T1330] hfsplus: b-tree write err: -5, ino 2 [ 694.071224][ T1330] hfsplus: b-tree write err: -5, ino 20 [ 694.845662][T16395] loop5: detected capacity change from 0 to 512 [ 695.012256][T16395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.133729][T16395] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 695.245402][T16395] EXT4-fs (loop5): shut down requested (2) [ 695.696254][T15435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.059969][T16411] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 696.367892][T16421] kAFS: bad VL server IP address [ 697.533842][T16432] loop0: detected capacity change from 0 to 131072 [ 697.561535][T16432] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24) [ 697.569510][T16432] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 697.577932][T16432] F2FS-fs (loop0): Test dummy encryption mode enabled [ 697.586344][T16432] F2FS-fs (loop0): invalid crc value [ 697.630625][T16432] F2FS-fs (loop0): Found nat_bits in checkpoint [ 697.669301][T16432] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 697.692460][T16432] F2FS-fs (loop0): Start checkpoint disabled! [ 697.727144][T16432] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 697.734534][T16432] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 698.084015][ T8] IPVS: starting estimator thread 0... [ 698.218376][T16445] IPVS: using max 26 ests per chain, 62400 per kthread [ 698.520079][T16453] program syz.7.3881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 698.659988][ T48] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 698.858764][ T28] audit: type=1400 audit(1788569933.090:197): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=16458 comm="syz.8.3883" name="p" offset=58 [ 699.547636][T16473] netlink: 27 bytes leftover after parsing attributes in process `syz.7.3891'. [ 700.331585][T16490] loop5: detected capacity change from 0 to 1024 [ 700.395672][T16490] EXT4-fs: Ignoring removed orlov option [ 700.442791][T16490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.708464][T15435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.635458][T16518] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3908'. [ 701.665140][ T8] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 701.883725][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 701.898835][ T8] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 701.919270][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.965730][ T8] usb 6-1: Product: syz [ 701.986321][ T8] usb 6-1: Manufacturer: syz [ 702.012333][ T8] usb 6-1: SerialNumber: syz [ 702.874845][ T8] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 702.938342][ T8] usb 6-1: USB disconnect, device number 20 [ 702.968814][T16523] loop7: detected capacity change from 0 to 32768 [ 703.098182][T16523] JBD2: Ignoring recovery information on journal [ 703.314346][T16523] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 703.613766][ T5832] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 703.753278][T12748] ocfs2: Unmounting device (7,7) on (node local) [ 703.824097][ T5832] usb 9-1: Using ep0 maxpacket: 8 [ 703.843394][ T5832] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 703.873908][ T5832] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 703.919635][ T5832] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 703.950709][ T5832] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 703.982558][ T5832] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 704.015582][ T5832] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 704.050539][ T5832] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 704.092409][ T5832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.354202][ T5832] usb 9-1: GET_CAPABILITIES returned 0 [ 704.391834][ T5832] usbtmc 9-1:16.0: can't read capabilities [ 704.469912][T16539] loop5: detected capacity change from 0 to 4096 [ 704.636973][ C0] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 704.664224][T16530] usbtmc 9-1:16.0: Unable to send data, error -71 [ 704.710211][ T175] usb 9-1: USB disconnect, device number 2 [ 704.776418][T16539] ntfs: volume version 3.1. [ 705.485724][T16550] loop0: detected capacity change from 0 to 512 [ 705.602422][T16550] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 705.618015][T16540] loop7: detected capacity change from 0 to 40427 [ 705.699471][ T175] hid-generic 0005:0B57:05DF.0012: item fetching failed at offset 0/1 [ 705.720766][T16540] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 705.795978][T16550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.811971][T16540] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 705.825663][ T175] hid-generic: probe of 0005:0B57:05DF.0012 failed with error -22 [ 705.900392][T16540] F2FS-fs (loop7): invalid crc value [ 705.938217][ T10] block nbd2: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 120 seconds [ 705.997801][T16550] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 706.012140][T16540] F2FS-fs (loop7): Found nat_bits in checkpoint [ 706.214290][T16550] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.3929: iget: bad i_size value: 2533274857506816 [ 706.357520][T16540] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 706.411181][T16540] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 706.586571][T12535] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.073622][ T8] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 707.302308][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.350558][ T8] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 707.414525][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.469588][ T8] usb 9-1: config 0 descriptor?? [ 707.971707][ T8] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 708.076580][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0013/input/input28 [ 708.376569][ T8] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 708.535169][ T8] usb 9-1: USB disconnect, device number 3 [ 708.809335][T16595] fido_id[16595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 709.398474][T16610] loop5: detected capacity change from 0 to 512 [ 709.479713][T16610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.816753][T15435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.155600][ T8] Process accounting resumed [ 713.203945][ T175] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 713.442863][ T175] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.469614][ T175] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 713.541268][ T175] usb 8-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 713.596335][ T175] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.677975][ T175] idmouse 8-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 714.121104][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3991'. [ 714.398473][T16722] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3993'. [ 714.472556][T16723] loop5: detected capacity change from 0 to 128 [ 714.497773][T16722] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3993'. [ 714.539499][T16723] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 714.584470][T16726] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3993'. [ 714.617811][T16723] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 714.649929][T16726] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3993'. [ 714.705999][T16722] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3993'. [ 714.773084][T16726] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3993'. [ 715.367024][ T175] usb 8-1: USB disconnect, device number 9 [ 715.406610][ T175] idmouse 8-1:1.0: disconnected [ 715.454851][ T5832] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 715.605158][T16747] loop8: detected capacity change from 0 to 256 [ 715.648514][T16747] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 715.694393][ T5832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.743054][ T5832] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 715.805396][ T5832] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 715.824295][T16749] tipc: Started in network mode [ 715.850092][T16749] tipc: Node identity ac14140f, cluster identity 4711 [ 715.859686][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 715.912884][ T5832] usb 1-1: SerialNumber: syz [ 715.921242][T16749] tipc: New replicast peer: 255.255.255.255 [ 715.961339][T16749] tipc: Enabled bearer , priority 10 [ 716.155991][ T5832] usb 1-1: 0:2 : does not exist [ 716.271136][ T5832] usb 1-1: USB disconnect, device number 16 [ 716.338315][ T5085] Bluetooth: hci0: Zero size dump init pkt [ 716.435661][T16603] udevd[16603]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 716.514410][T16760] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4008'. [ 716.783624][ T5832] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 717.005027][ T5832] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.055075][ T5832] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 717.075858][ T175] tipc: Node number set to 2886997007 [ 717.122135][ T5832] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 717.163945][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.229669][T16770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 717.253523][ T5832] usb 8-1: Product: syz [ 717.273018][ T5832] usb 8-1: Manufacturer: syz [ 717.305056][ T5832] usb 8-1: SerialNumber: syz [ 717.342651][ T5832] usb 8-1: selecting invalid altsetting 1 [ 717.362620][T16772] loop5: detected capacity change from 0 to 512 [ 717.847590][T16780] loop0: detected capacity change from 0 to 512 [ 717.922709][T16780] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 717.944847][T16780] System zones: 1-12 [ 717.949685][T16780] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.4015: Directory hole found for htree index block 0 [ 717.970003][T16780] EXT4-fs (loop0): Remounting filesystem read-only [ 717.988297][T16780] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 717.998596][T16780] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 718.034823][T16780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.165942][T12535] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.206040][ T5832] cdc_ncm 8-1:1.0: SET_NTB_FORMAT failed [ 718.233367][ T5832] usb 8-1: selecting invalid altsetting 1 [ 718.280271][ T5832] cdc_ncm 8-1:1.0: bind() failure [ 718.285633][ T8] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 718.360506][ T5832] usb 8-1: USB disconnect, device number 10 [ 718.515254][ T8] usb 9-1: unable to get BOS descriptor or descriptor too short [ 718.538833][ T8] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 718.553796][ T8] usb 9-1: can't read configurations, error -71 [ 719.645136][T16806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4023'. [ 720.281287][T16817] loop5: detected capacity change from 0 to 1024 [ 720.520231][T16817] hfsplus: xattr searching failed [ 721.588564][T16845] sd 0:0:1:0: PR command failed: 1026 [ 721.626303][T16845] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 721.661010][T16845] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 722.554715][T16866] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 722.563362][ T175] IPVS: starting estimator thread 0... [ 722.611241][T16861] loop5: detected capacity change from 0 to 8192 [ 722.676016][T16861] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 722.694768][T16869] IPVS: using max 26 ests per chain, 62400 per kthread [ 722.752708][T16861] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 722.794571][T16861] REISERFS (device loop5): using ordered data mode [ 722.827118][T16861] reiserfs: using flush barriers [ 722.872081][T16861] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 722.985343][T16861] REISERFS (device loop5): checking transaction log (loop5) [ 723.275914][T16877] loop7: detected capacity change from 0 to 128 [ 723.378357][T16877] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 723.437677][T16861] REISERFS (device loop5): Using tea hash to sort names [ 723.493780][T16861] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 723.535102][T16877] ext4 filesystem being mounted at /367/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 723.669463][T16877] fscrypt (loop7, inode 12): Direct key flag not allowed with different contents and filenames modes [ 723.783215][ T28] audit: type=1804 audit(1788569958.010:198): pid=16861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4052" name="/newroot/112/file6/file0" dev="loop5" ino=4 res=1 errno=0 [ 723.959114][T12748] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 724.407779][T16893] comedi: valid board names for 8255 driver are: [ 724.465639][T16893] 8255 [ 724.468468][T16893] comedi: valid board names for vmk80xx driver are: [ 724.554100][T16893] vmk80xx [ 724.575522][T16893] comedi: valid board names for usbduxsigma driver are: [ 724.637441][T16893] usbduxsigma [ 724.681820][T16893] comedi: valid board names for usbduxfast driver are: [ 724.720200][T16893] usbduxfast [ 724.773852][T16893] comedi: valid board names for usbdux driver are: [ 724.812750][T16893] usbdux [ 724.834387][T16893] comedi: valid board names for ni6501 driver are: [ 724.873189][T16904] input: syz1 as /devices/virtual/input/input30 [ 724.903771][T16893] ni6501 [ 724.916812][T16893] comedi: valid board names for dt9812 driver are: [ 724.974141][T16893] dt9812 [ 725.043933][T16893] comedi: valid board names for ni_labpc_cs driver are: [ 725.092177][T16893] ni_labpc_cs [ 725.146681][T16893] comedi: valid board names for ni_daq_700 driver are: [ 725.213528][T16893] ni_daq_700 [ 725.216982][T16893] comedi: valid board names for labpc_pci driver are: [ 725.293794][T16893] labpc_pci [ 725.297203][T16893] comedi: valid board names for adl_pci9118 driver are: [ 725.389212][T16893] pci9118dg [ 725.441534][T16893] pci9118hg [ 725.473608][T16893] pci9118hr [ 725.476859][T16893] comedi: valid board names for 8255_pci driver are: [ 725.578141][T16893] 8255_pci [ 725.581310][T16893] comedi: valid board names for s526 driver are: [ 725.667217][T16893] s526 [ 725.670039][T16893] comedi: valid board names for multiq3 driver are: [ 725.754613][T16893] multiq3 [ 725.757722][T16893] comedi: valid board names for pcmuio driver are: [ 725.850307][T16893] pcmuio48 [ 725.897220][T16893] pcmuio96 [ 725.900416][T16893] comedi: valid board names for pcmmio driver are: [ 726.009741][T16928] netlink: 'syz.8.4081': attribute type 8 has an invalid length. [ 726.018234][T16893] pcmmio [ 726.021202][T16893] comedi: valid board names for pcmda12 driver are: [ 726.063879][T16928] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4081'. [ 726.123550][T16893] pcmda12 [ 726.126635][T16893] comedi: valid board names for pcmad driver are: [ 726.133079][T16893] pcmad12 [ 726.154108][T16928] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4081'. [ 726.217288][T16931] program syz.5.4083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 726.240736][T16893] pcmad16 [ 726.258949][T16893] comedi: valid board names for ni_labpc driver are: [ 726.348567][T16893] lab-pc-1200 [ 726.352003][T16893] lab-pc-1200ai [ 726.422067][T16893] lab-pc+ [ 726.453720][T16893] comedi: valid board names for atmio16 driver are: [ 726.460364][T16893] atmio16 [ 726.542777][T16893] atmio16d [ 726.566893][T16893] comedi: valid board names for ni_at_ao driver are: [ 726.652776][T16893] at-ao-6 [ 726.675813][T16893] at-ao-10 [ 726.678987][T16893] comedi: valid board names for ni_at_a2150 driver are: [ 726.743237][T16941] loop8: detected capacity change from 0 to 128 [ 726.795250][T16893] ni_at_a2150 [ 726.798737][T16893] comedi: valid board names for adq12b driver are: [ 726.854677][T16941] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 726.904668][T16893] adq12b [ 726.907707][T16893] comedi: valid board names for mpc624 driver are: [ 726.934249][T16941] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 727.012309][T16893] mpc624 [ 727.069039][T16893] comedi: valid board names for c6xdigio driver are: [ 727.098196][T16941] fscrypt (loop8, inode 12): Unsupported encryption flags (0xdc) [ 727.130610][T16893] c6xdigio [ 727.182418][T16893] comedi: valid board names for aio_iiro_16 driver are: [ 727.211605][T16951] gretap0: entered promiscuous mode [ 727.223849][T16893] aio_iiro_16 [ 727.227266][T16893] comedi: valid board names for aio_aio12_8 driver are: [ 727.266347][T15493] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 727.330361][T16893] aio_aio12_8 [ 727.383722][T16893] aio_ai12_8 [ 727.414952][T16893] aio_ao12_4 [ 727.445746][T16893] comedi: valid board names for fl512 driver are: [ 727.503751][T16893] fl512 [ 727.555090][T16893] comedi: valid board names for dmm32at driver are: [ 727.630304][T16893] dmm32at [ 727.647003][T16893] comedi: valid board names for dt282x driver are: [ 727.703701][T16893] dt2821 [ 727.726038][T16893] dt2821-f [ 727.749512][T16893] dt2821-g [ 727.779860][T16893] dt2823 [ 727.811335][T16893] dt2824-pgh [ 727.853081][T16893] dt2824-pgl [ 727.878365][T16893] dt2825 [ 727.891679][T16893] dt2827 [ 727.903086][T16893] dt2828 [ 727.922544][T16893] dt2829 [ 727.948712][T16893] dt21-ez [ 727.967511][T16893] dt23-ez [ 727.999770][T16893] dt24-ez [ 728.002933][T16893] dt24-ez-pgl [ 728.016431][T16893] comedi: valid board names for dt2817 driver are: [ 728.083001][T16893] dt2817 [ 728.106752][T16893] comedi: valid board names for dt2815 driver are: [ 728.155378][T16893] dt2815 [ 728.203891][T16893] comedi: valid board names for dt2814 driver are: [ 728.252358][T16893] dt2814 [ 728.262387][T16893] comedi: valid board names for dt2811 driver are: [ 728.349253][T16893] dt2811-pgh [ 728.373559][T16893] dt2811-pgl [ 728.391368][T16893] comedi: valid board names for dt2801 driver are: [ 728.449830][T16893] dt2801 [ 728.484076][T16893] comedi: valid board names for das6402 driver are: [ 728.563553][T16893] das6402-12 [ 728.607805][T16893] das6402-16 [ 728.644300][T16893] comedi: valid board names for das1800 driver are: [ 728.699436][T16893] das-1701st [ 728.734054][T16893] das-1701st-da [ 728.756242][T16893] das-1702st [ 728.788107][T16893] das-1702st-da [ 728.833701][T16893] das-1702hr [ 728.867278][T16893] das-1702hr-da [ 728.893111][T16893] das-1701ao [ 728.913794][T16893] das-1702ao [ 728.920865][T16975] loop8: detected capacity change from 0 to 1024 [ 728.938191][T16893] das-1801st [ 728.962074][T16893] das-1801st-da [ 728.987938][T16975] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 729.010742][T16893] das-1802st [ 729.042967][T16893] das-1802st-da [ 729.047482][T16975] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 729.086786][T16893] das-1802hr [ 729.126760][T16893] das-1802hr-da [ 729.132991][T16975] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 729.182078][T16893] das-1801hc [ 729.219971][T16893] das-1802hc [ 729.224326][T16975] EXT4-fs error (device loop8): ext4_get_journal_inode:5820: comm syz.8.4100: inode #1: comm syz.8.4100: iget: illegal inode # [ 729.252719][T16893] das-1801ao [ 729.273121][T16893] das-1802ao [ 729.293594][T16893] comedi: valid board names for das800 driver are: [ 729.308878][T16975] EXT4-fs (loop8): no journal found [ 729.331796][T16975] EXT4-fs (loop8): can't get journal size [ 729.339483][T16977] loop7: detected capacity change from 0 to 1024 [ 729.357797][T16893] das-800 [ 729.361836][T16975] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e118, mo2=0002] [ 729.393509][T16893] cio-das800 [ 729.406545][T16893] das-801 [ 729.421680][T16975] EXT4-fs (loop8): failed to initialize system zone (-22) [ 729.453627][T16893] cio-das801 [ 729.472361][T16975] EXT4-fs (loop8): mount failed [ 729.483729][T16893] das-802 [ 729.492472][ T28] audit: type=1800 audit(1788569963.720:199): pid=16977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4101" name="file1" dev="loop7" ino=3 res=0 errno=0 [ 729.551231][T16893] cio-das802 [ 729.582531][T16893] cio-das802/16 [ 729.653176][T16893] comedi: valid board names for isa-das08 driver are: [ 729.753587][T16893] isa-das08 [ 729.773749][T16893] das08-pgm [ 729.822324][T16893] das08-pgh [ 729.858332][T16893] das08-pgl [ 729.892298][T16893] das08-aoh [ 729.897706][ T48] hfsplus: bad catalog file entry [ 729.915249][T16893] das08-aol [ 729.924246][ T48] hfsplus: b-tree write err: -5, ino 3 [ 729.943681][T16893] das08-aom [ 729.973649][T16893] das08/jr-ao [ 730.023758][T16893] das08jr-16-ao [ 730.054541][T16893] pc104-das08 [ 730.080104][T16893] das08jr/16 [ 730.131931][T16893] comedi: valid board names for das16m1 driver are: [ 730.183578][T16893] das16m1 [ 730.199885][T16893] comedi: valid board names for dac02 driver are: [ 730.263676][T16893] dac02 [ 730.270470][T16973] loop5: detected capacity change from 0 to 40427 [ 730.293527][T16893] comedi: valid board names for rti802 driver are: [ 730.367587][T16893] rti802 [ 730.376999][T16973] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 730.393605][T16893] comedi: valid board names for rti800 driver are: [ 730.416738][T16973] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 730.464868][T16893] rti800 [ 730.482690][T16973] F2FS-fs (loop5): invalid crc value [ 730.502743][T16893] rti815 [ 730.524869][T16893] comedi: valid board names for pcm3724 driver are: [ 730.569615][T16973] F2FS-fs (loop5): Found nat_bits in checkpoint [ 730.576307][T16893] pcm3724 [ 730.602283][T16893] comedi: valid board names for pcl818 driver are: [ 730.693130][T16893] pcl818l [ 730.713664][T16893] pcl818h [ 730.763612][T16893] pcl818hd [ 730.794261][T16893] pcl818hg [ 730.817553][T16893] pcl818 [ 730.856074][T16893] pcl718 [ 730.859591][T16973] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 730.895841][T16893] pcm3718 [ 730.923805][T16893] comedi: valid board names for pcl816 driver are: [ 730.930546][T16973] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 731.001013][T16893] pcl816 [ 731.030295][T16893] pcl814b [ 731.055808][T16893] comedi: valid board names for pcl812 driver are: [ 731.143614][T16893] pcl812 [ 731.183703][T16893] pcl812pg [ 731.210348][T16893] acl8112pg [ 731.235537][T17000] loop7: detected capacity change from 0 to 8 [ 731.278443][T16893] acl8112dg [ 731.281778][T16893] acl8112hg [ 731.385776][T16893] a821pgl [ 731.388869][T16893] a821pglnda [ 731.392158][T16893] a821pgh [ 731.421526][T15435] syz-executor: attempt to access beyond end of device [ 731.421526][T15435] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 731.519921][T16893] a822pgl [ 731.546300][T17002] loop8: detected capacity change from 0 to 2048 [ 731.561082][T15435] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 731.568968][T16893] a822pgh [ 731.572113][T16893] a823pgl [ 731.665174][T16893] a823pgh [ 731.668261][T16893] pcl813 [ 731.671215][T16893] pcl813b [ 731.730411][T17005] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 731.765819][T16893] acl8113 [ 731.768906][T16893] iso813 [ 731.771855][T16893] acl8216 [ 731.895140][T16893] a826pg [ 731.898283][T16893] comedi: valid board names for pcl730 driver are: [ 732.044860][T16893] pcl730 [ 732.105150][T16893] iso730 [ 732.115063][ T28] audit: type=1800 audit(1788569966.350:200): pid=17002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4111" name="bus" dev="loop8" ino=2097152 res=0 errno=0 [ 732.152673][T16893] acl7130 [ 732.193677][T16893] pcm3730 [ 732.229269][T17007] NILFS (loop8): nilfs_sufile_do_free: segment 9 is already clean [ 732.239492][T16893] pcl725 [ 732.242507][T16893] p8r8dio [ 732.288574][T16893] acl7225b [ 732.291771][T16893] p16r16dio [ 732.383597][T16893] pcl733 [ 732.386611][T16893] pcl734 [ 732.389556][T16893] opmm-1616-xt [ 732.481950][T16893] pearl-mm-p [ 732.508883][T16893] ir104-pbf [ 732.512477][T16893] comedi: valid board names for pcl726 driver are: [ 732.629438][T16893] pcl726 [ 732.632472][T16893] pcl727 [ 732.714234][T16893] pcl728 [ 732.717277][T16893] acl6126 [ 732.720315][T16893] acl6128 [ 732.723345][T16893] comedi: valid board names for pcl724 driver are: [ 732.878267][T16893] pcl724 [ 732.881287][T16893] pcl722 [ 732.941013][T16893] pcl731 [ 732.955810][T16893] acl7122 [ 732.958893][T16893] acl7124 [ 732.961924][T16893] pet48dio [ 733.024343][T16893] pcmio48 [ 733.027427][T16893] onyx-mm-dio [ 733.045263][ T5832] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 733.087421][T16893] comedi: valid board names for pcl711 driver are: [ 733.133577][T16893] pcl711 [ 733.146806][T16893] pcl711b [ 733.150016][T16893] acl8112hg [ 733.153230][T16893] acl8112dg [ 733.213537][T16893] comedi: valid board names for amplc_pc263 driver are: [ 733.271639][T16893] pc263 [ 733.279673][ T5832] usb 9-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 733.303582][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.311809][T16893] comedi: valid board names for amplc_pc236 driver are: [ 733.341707][T17009] loop7: detected capacity change from 0 to 40427 [ 733.348502][ T5832] usb 9-1: Product: syz [ 733.352717][ T5832] usb 9-1: Manufacturer: syz [ 733.379685][T16893] pc36at [ 733.382733][T16893] comedi: valid board names for amplc_dio200 driver are: [ 733.403608][ T5832] usb 9-1: SerialNumber: syz [ 733.409559][T17009] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 733.436762][ T5832] usb 9-1: config 0 descriptor?? [ 733.448433][T17009] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 733.476814][ T5832] gspca_main: spca508-2.14.0 probing 041e:4018 [ 733.507604][T17009] F2FS-fs (loop7): invalid crc value [ 733.514788][T16893] pc212e [ 733.570167][T16893] pc214e [ 733.573173][T16893] pc215e [ 733.649799][T16893] pc218e [ 733.652826][T16893] pc272e [ 733.680251][ T5832] gspca_spca508: reg_read err -32 [ 733.733670][T16893] comedi: valid board names for comedi_parport driver are: [ 733.744179][ T5832] gspca_spca508: reg_read err -32 [ 733.805427][T16893] comedi_parport [ 733.809163][T16893] comedi: valid board names for comedi_test driver are: [ 733.891993][T17009] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 733.924813][T17009] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 733.934305][T16893] comedi_test [ 733.951641][ T5832] gspca_spca508: reg_read err -71 [ 733.976337][ T5832] gspca_spca508: reg_read err -71 [ 733.984069][T16893] comedi: valid board names for comedi_bond driver are: [ 733.991071][T16893] comedi_bond [ 734.019482][ T5832] gspca_spca508: reg write: error -71 [ 734.045748][ T5832] spca508: probe of 9-1:0.0 failed with error -71 [ 734.060139][T17013] loop5: detected capacity change from 0 to 32768 [ 734.083293][ T5832] usb 9-1: USB disconnect, device number 6 [ 734.206057][ T28] audit: type=1800 audit(1788569968.440:201): pid=17013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4112" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 734.516273][ T28] audit: type=1800 audit(1788569968.740:202): pid=17018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4112" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 735.271976][T17026] loop0: detected capacity change from 0 to 4096 [ 735.564092][T17031] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 735.747401][T17035] loop5: detected capacity change from 0 to 128 [ 736.030910][ T10] block nbd2: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 150 seconds [ 736.360087][ T5832] kernel write not supported for file /snd/seq (pid: 5832 comm: kworker/0:3) [ 737.504307][T17062] nbd3: detected capacity change from 0 to 63 [ 737.565372][ T5085] block nbd3: Receive control failed (result -104) [ 737.762861][T17067] loop5: detected capacity change from 0 to 1024 [ 738.901438][T17077] loop7: detected capacity change from 0 to 2048 [ 739.039647][T17078] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 739.686443][ T28] audit: type=1326 audit(1788569973.920:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17087 comm="syz.5.4147" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f81b9e159 code=0x7ffc0000 [ 739.730486][T17090] loop8: detected capacity change from 0 to 256 [ 739.741142][T17089] loop5: detected capacity change from 0 to 256 [ 739.780379][T17089] exfat: Deprecated parameter 'utf8' [ 739.832025][T17089] exfat: Deprecated parameter 'utf8' [ 739.843360][ T28] audit: type=1326 audit(1788569973.940:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17087 comm="syz.5.4147" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f81b9e159 code=0x7ffc0000 [ 739.868530][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.899592][T17089] exfat: Deprecated parameter 'utf8' [ 739.940710][T17089] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x117c3960, utbl_chksum : 0xe619d30d) [ 740.119745][ T28] audit: type=1326 audit(1788569973.960:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17087 comm="syz.5.4147" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f81b9e159 code=0x7ffc0000 [ 740.343588][ T28] audit: type=1326 audit(1788569973.960:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17087 comm="syz.5.4147" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f81b9e159 code=0x7ffc0000 [ 740.367703][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.522866][T17098] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4150'. [ 740.594455][T17098] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4150'. [ 740.610133][T17099] loop5: detected capacity change from 0 to 2048 [ 740.617660][ T28] audit: type=1326 audit(1788569973.970:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17087 comm="syz.5.4147" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8f81b9e159 code=0x7ffc0000 [ 740.716458][T17103] geneve1: entered promiscuous mode [ 740.754765][T17099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 740.778665][ T28] audit: type=1326 audit(1788569973.970:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17087 comm="syz.5.4147" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8f81b9dec2 code=0x7ffc0000 [ 740.802693][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.845192][T17103] geneve1: left promiscuous mode [ 740.889056][T17099] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 741.015673][T17099] fs-verity (loop5, inode 13): Unsupported log_blocksize: 13 [ 741.028563][ T28] audit: type=1326 audit(1788569973.970:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17087 comm="syz.5.4147" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8f81b5e98e code=0x7ffc0000 [ 741.052484][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.162470][T17110] loop8: detected capacity change from 0 to 4096 [ 741.176025][T15435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.241789][ T28] audit: type=1326 audit(1788569973.970:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17087 comm="syz.5.4147" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8f81b9df87 code=0x7ffc0000 [ 741.265845][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.283126][T17110] ntfs: (device loop8): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 741.427039][ T28] audit: type=1326 audit(1788569973.970:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17087 comm="syz.5.4147" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f81b5e98e code=0x7ffc0000 [ 741.451163][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.535170][T17110] ntfs: volume version 3.1. [ 741.731364][T17114] tipc: Started in network mode [ 741.766483][T17114] tipc: Node identity ac14140f, cluster identity 4711 [ 741.832597][T17114] tipc: New replicast peer: 255.255.255.255 [ 741.894462][T17114] tipc: Enabled bearer , priority 10 [ 742.702993][T17134] loop8: detected capacity change from 0 to 16 [ 742.758728][T17134] erofs: (device loop8): mounted with root inode @ nid 36. [ 742.893715][ T9] tipc: Node number set to 2886997007 [ 743.117327][T17141] geneve1: entered promiscuous mode [ 743.145648][T17141] geneve1: left promiscuous mode [ 743.902549][T17151] loop0: detected capacity change from 0 to 4096 [ 744.028757][T17151] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 744.388044][T17162] loop5: detected capacity change from 0 to 2048 [ 744.495869][T17162] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 744.569626][T17162] UDF-fs: Scanning with blocksize 512 failed [ 744.665219][T17162] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 745.285276][T17157] loop8: detected capacity change from 0 to 32768 [ 745.372938][T17157] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 745.554360][T17174] loop5: detected capacity change from 0 to 16 [ 745.582898][T17157] (syz.8.4173,17157,0):ocfs2_double_lock:1190 ERROR: status = -2 [ 745.634149][T17174] erofs: (device loop5): mounted with root inode @ nid 36. [ 745.646184][T17157] (syz.8.4173,17157,0):ocfs2_rename:1299 ERROR: status = -2 [ 745.713657][T17157] (syz.8.4173,17157,0):ocfs2_rename:1690 ERROR: status = -2 [ 745.879193][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4183'. [ 746.068828][T15493] ocfs2: Unmounting device (7,8) on (node local) [ 746.091191][T17181] sock: sock_set_timeout: `syz.5.4184' (pid 17181) tries to set negative timeout [ 746.733764][T17194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4190'. [ 746.891481][T17201] loop7: detected capacity change from 0 to 2048 [ 747.008438][T17201] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.180073][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 747.180084][ T28] audit: type=1800 audit(1788569981.410:236): pid=17201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4192" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 747.428716][T12748] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.600392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.623989][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.951868][T17218] loop8: detected capacity change from 0 to 2048 [ 748.041544][T17223] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 748.233159][T17227] loop7: detected capacity change from 0 to 256 [ 748.349341][T17227] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 748.426035][T17229] loop0: detected capacity change from 0 to 64 [ 748.693167][T17229] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 749.486883][T17245] loop8: detected capacity change from 0 to 256 [ 749.608688][T17245] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 749.635834][T17225] loop5: detected capacity change from 0 to 32768 [ 749.806496][T17225] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 749.806496][T17225] [ 749.896323][T17225] xtLookup: xtSearch returned -5 [ 749.934749][T17225] free_index: error reading directory table [ 750.673086][T17259] loop8: detected capacity change from 0 to 128 [ 750.754616][T17259] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 750.861270][T17259] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 751.812310][T17278] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4224'. [ 752.010060][T17282] Attempt to restore checkpoint with obsolete wellknown handles [ 752.404790][T17289] loop5: detected capacity change from 0 to 2048 [ 752.513226][T17289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.828158][T15435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.022175][T17302] bcache: register_bcache() error : failed to open device [ 753.395887][T17310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 754.282008][T17325] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input31 [ 754.404012][ T8] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 754.625208][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.675621][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.731188][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 754.741762][ T8] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 754.773358][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.831433][ T8] usb 9-1: config 0 descriptor?? [ 755.299275][ T8] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 755.371085][ T8] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 755.409229][ T8] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 755.457897][ T8] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 755.517841][ T8] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 755.575626][ T8] playstation 0003:054C:0DF2.0014: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.8-1/input0 [ 755.965264][ T8] playstation 0003:054C:0DF2.0014: Failed to retrieve feature with reportID 32: -71 [ 756.013943][ T8] playstation 0003:054C:0DF2.0014: Failed to retrieve DualSense firmware info: -71 [ 756.080704][ T8] playstation 0003:054C:0DF2.0014: Failed to get firmware info from DualSense [ 756.151791][ T8] playstation 0003:054C:0DF2.0014: Failed to create dualsense. [ 756.234629][ T8] playstation: probe of 0003:054C:0DF2.0014 failed with error -71 [ 756.332203][ T8] usb 9-1: USB disconnect, device number 7 [ 757.047986][T17368] loop5: detected capacity change from 0 to 256 [ 757.169041][T17370] program syz.7.4267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 757.809281][T17380] Bluetooth: MGMT ver 1.22 [ 757.828564][T17383] loop5: detected capacity change from 0 to 64 [ 758.269019][T17392] ima: Unable to open file: / (-22) [ 758.279841][T17391] ima: policy update failed [ 758.353551][ T28] audit: type=1802 audit(1788569992.580:237): pid=17391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.4279" res=0 errno=0 [ 758.993992][ T8627] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 759.195668][ T8627] usb 6-1: Using ep0 maxpacket: 16 [ 759.214012][ T8627] usb 6-1: unable to get BOS descriptor or descriptor too short [ 759.248640][ T8627] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 759.300560][ T8627] usb 6-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 759.356780][ T8627] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 759.402806][ T8627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.435616][T17415] loop0: detected capacity change from 0 to 256 [ 759.446605][ T8627] usb 6-1: Product: syz [ 759.463912][ T8627] usb 6-1: Manufacturer: syz [ 759.488741][ T8627] usb 6-1: SerialNumber: syz [ 759.557594][T17415] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 759.722704][T17419] loop8: detected capacity change from 0 to 128 [ 759.792111][ T8627] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 759.853645][T14317] Bluetooth: hci0: command 0x080f tx timeout [ 759.865034][T17419] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 759.914187][ T8627] snd-usb-audio: probe of 6-1:5.0 failed with error -22 [ 759.943986][T17422] tun0: tun_chr_ioctl cmd 1074025677 [ 759.985530][T17419] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.003849][T17422] tun0: linktype set to 769 [ 760.255970][ T8627] usb 6-1: USB disconnect, device number 21 [ 760.301646][T15493] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 760.382171][T12646] udevd[12646]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:5.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 760.474420][T17426] input: syz0 as /devices/virtual/input/input32 [ 761.958405][T17452] bond0: option arp_interval: invalid value (#! ./sys) [ 762.019946][T17452] bond0: option arp_interval: allowed values 0 - 2147483647 [ 762.298288][T17432] loop8: detected capacity change from 0 to 40427 [ 762.343562][T17432] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 762.406976][T17432] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 762.490333][T17432] F2FS-fs (loop8): invalid crc value [ 762.528233][T17432] F2FS-fs (loop8): Found nat_bits in checkpoint [ 762.654694][ T8627] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 762.833657][T17432] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 762.859236][T17432] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 762.924570][ T8627] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.010327][ T8627] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 763.091024][ T8627] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.160512][ T8627] usb 1-1: config 0 descriptor?? [ 763.781126][T17480] loop5: detected capacity change from 0 to 256 [ 763.844702][T17480] exfat: Deprecated parameter 'namecase' [ 763.866103][ T8627] ath6kl: mismatched byte count 0 vs. expected 12 [ 763.903296][T17480] exFAT-fs (loop5): failed to read boot sector [ 763.945583][ T8627] ath6kl: Failed to init ath6kl core: -22 [ 763.951838][ T8627] ath6kl_usb: probe of 1-1:0.0 failed with error -22 [ 763.983635][T17480] exFAT-fs (loop5): failed to recognize exfat type [ 764.158632][T17480] loop5: detected capacity change from 0 to 1024 [ 764.195529][ T8627] usb 1-1: USB disconnect, device number 17 [ 764.245603][T17480] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (40992!=35945) [ 764.333867][T17480] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 764.441206][T17480] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 764.490808][T17480] EXT4-fs (loop5): orphan cleanup on readonly fs [ 764.554956][T17480] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (134223872 > 6144). [ 764.641673][T17480] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 764.676749][T17486] bond0: no command found in slaves file - use +ifname or -ifname [ 764.745494][T17480] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 764.812401][T17480] EXT4-fs error (device loop5): ext4_free_blocks:6694: comm syz.5.4315: Freeing blocks not in datazone - block = 0, count = 4096 [ 764.923665][T17480] EXT4-fs (loop5): 1 truncate cleaned up [ 764.984749][T17480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 765.294857][T15435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.395092][T17492] size and base must be multiples of 4 kiB [ 765.434037][T17492] CPU: 0 PID: 17492 Comm: syz.7.4320 Not tainted syzkaller #0 [ 765.441652][T17492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 765.451720][T17492] Call Trace: [ 765.455012][T17492] [ 765.457951][T17492] dump_stack_lvl+0x18c/0x250 [ 765.462782][T17492] ? show_regs_print_info+0x20/0x20 [ 765.467993][T17492] ? load_image+0x420/0x420 [ 765.472532][T17492] ? __might_fault+0xaa/0x120 [ 765.477230][T17492] ? __might_fault+0xc6/0x120 [ 765.481915][T17492] ? __might_fault+0xaa/0x120 [ 765.486604][T17492] mtrr_del+0xc3/0xf0 [ 765.490637][T17492] mtrr_ioctl+0xcb6/0x13a0 [ 765.495070][T17492] ? mtrr_close+0x200/0x200 [ 765.499595][T17492] ? __fget_files+0x28/0x460 [ 765.504241][T17492] ? mtrr_close+0x200/0x200 [ 765.508758][T17492] proc_reg_unlocked_ioctl+0x1d2/0x2c0 [ 765.514249][T17492] ? proc_reg_poll+0x290/0x290 [ 765.519041][T17492] __se_sys_ioctl+0xfd/0x170 [ 765.523651][T17492] do_syscall_64+0x55/0xb0 [ 765.528085][T17492] ? clear_bhb_loop+0x40/0x90 [ 765.533290][T17492] ? clear_bhb_loop+0x40/0x90 [ 765.537983][T17492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 765.543890][T17492] RIP: 0033:0x7f9f6759e159 [ 765.548313][T17492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.567963][T17492] RSP: 002b:00007f9f657f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 765.576412][T17492] RAX: ffffffffffffffda RBX: 00007f9f67825fa0 RCX: 00007f9f6759e159 [ 765.584487][T17492] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003 [ 765.592469][T17492] RBP: 00007f9f67635024 R08: 0000000000000000 R09: 0000000000000000 [ 765.600450][T17492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.608428][T17492] R13: 00007f9f67826038 R14: 00007f9f67825fa0 R15: 00007ffd9f7bbc38 [ 765.616418][T17492] [ 765.619552][ C0] vkms_vblank_simulate: vblank timer overrun [ 765.652077][T17494] loop8: detected capacity change from 0 to 1024 [ 766.185078][ T10] block nbd2: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 180 seconds [ 766.376614][T17504] loop5: detected capacity change from 0 to 4096 [ 766.680052][ T28] audit: type=1800 audit(1788570000.900:238): pid=17504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4325" name="file1" dev="loop5" ino=0 res=0 errno=0 [ 766.770241][T17509] loop8: detected capacity change from 0 to 1024 [ 766.825782][T17509] EXT4-fs: Ignoring removed oldalloc option [ 766.941801][T17509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.969469][T17511] syz.7.4328[17511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 766.969681][T17511] syz.7.4328[17511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 767.306671][T15493] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.401061][T17520] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 768.005976][T11616] block nbd3: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 30 seconds [ 768.016931][T11616] block nbd3: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 30 seconds [ 768.028199][T11616] block nbd3: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 30 seconds [ 768.039612][T11616] block nbd3: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 30 seconds [ 768.688754][T17548] loop5: detected capacity change from 0 to 256 [ 768.727988][T17548] exfat: Deprecated parameter 'namecase' [ 768.778074][T17548] exfat: Deprecated parameter 'namecase' [ 768.816180][T17550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4344'. [ 768.849016][T17548] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 768.903824][T17550] netlink: 'syz.0.4344': attribute type 20 has an invalid length. [ 768.971655][T17550] netlink: 'syz.0.4344': attribute type 21 has an invalid length. [ 769.993069][T17578] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 770.073870][T17578] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 770.303896][T17584] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 770.329600][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 771.012005][T17600] loop8: detected capacity change from 0 to 4096 [ 771.091625][T17600] ntfs3: loop8: ino=b, Correct links count -> 1. [ 771.160101][T17600] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 771.282827][T17600] ntfs3: loop8: failed to convert "0080" to koi8-r [ 772.325355][T14317] Bluetooth: hci4: command 0x1003 tx timeout [ 772.336609][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 773.263513][ T8627] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 773.444349][ T5832] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 773.489568][ T8627] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 773.562660][ T8627] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 773.611717][ T8627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.667216][ T8627] usb 1-1: Product: syz [ 773.683843][ T5832] usb 6-1: Using ep0 maxpacket: 16 [ 773.693065][ T8627] usb 1-1: Manufacturer: syz [ 773.705303][ T5832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.733596][ T8627] usb 1-1: SerialNumber: syz [ 773.768764][ T5832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.844683][ T5832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 773.893980][ T5832] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 773.956272][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.017988][ T5832] usb 6-1: config 0 descriptor?? [ 774.409643][ T8627] speedtch 1-1:1.0: usbatm_usb_probe: invalid endpoint 07! [ 774.433085][ T5832] hid (null): unknown global tag 0xd [ 774.452316][ T5832] hid (null): bogus close delimiter [ 774.467094][ T5832] hid (null): report_id 0 is invalid [ 774.620619][ T8627] speedtch: probe of 1-1:1.0 failed with error -22 [ 774.642917][ T5832] usb 6-1: USB disconnect, device number 22 [ 774.692308][ T8627] usbtest: probe of 1-1:1.1 failed with error -71 [ 774.731067][ T8627] speedtch: probe of 1-1:1.1 failed with error -71 [ 774.768262][ T8627] usb 1-1: USB disconnect, device number 18 [ 775.500837][T17666] rt1711h 0-0004: check vid/pid fail [ 775.523865][T17666] rt1711h: probe of 0-0004 failed with error -5 [ 775.558930][T17666] i2c i2c-0: new_device: Instantiated device rt1715 at 0x04 [ 775.571408][T17668] ip_tables: iptables: counters copy to user failed while replacing table [ 776.323295][T17683] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4404'. [ 776.502839][T17687] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4406'. [ 785.281660][T17702] loop5: detected capacity change from 0 to 1024 [ 789.723896][ T5140] udevd[5140]: worker [13551] /devices/virtual/block/nbd2 timeout; kill it [ 789.879056][ T5140] udevd[5140]: seq 18830 '/devices/virtual/block/nbd2' killed [ 793.527114][T17714] ip_tables: iptables: counters copy to user failed while replacing table [ 796.875262][T11616] block nbd2: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 210 seconds [ 797.016125][T17718] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4416'. [ 798.184856][T11616] block nbd3: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 60 seconds [ 798.203126][T11616] block nbd3: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 60 seconds [ 798.235744][T11616] block nbd3: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 60 seconds [ 798.249880][T11616] block nbd3: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 60 seconds [ 799.004063][ T5140] udevd[5140]: worker [16603] /devices/virtual/block/nbd3 is taking a long time [ 809.063276][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.534696][ C0] vkms_vblank_simulate: vblank timer overrun [ 827.864424][T11616] block nbd2: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 240 seconds [ 829.396408][T11616] block nbd3: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 90 seconds [ 829.409168][T11616] block nbd3: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 90 seconds [ 829.426547][T11616] block nbd3: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 90 seconds [ 829.451665][T11616] block nbd3: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 90 seconds [ 841.805261][T14317] Bluetooth: hci2: command 0x0406 tx timeout [ 855.773131][T14317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 855.916076][T14317] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 855.961844][T14317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 856.032181][T14317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 856.150442][T14317] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 856.194626][T14317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 858.092471][ T1330] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.434663][T14317] Bluetooth: hci0: command tx timeout [ 858.674501][T11616] block nbd2: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 270 seconds [ 859.773713][T11616] block nbd3: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 120 seconds [ 859.787929][T11616] block nbd3: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 120 seconds [ 859.804578][T11616] block nbd3: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 120 seconds [ 859.818565][T11616] block nbd3: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 120 seconds [ 860.515496][T14317] Bluetooth: hci0: command tx timeout [ 861.618499][ T1330] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.227084][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 862.349467][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 862.390629][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 862.556472][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 862.566841][ T5085] Bluetooth: hci0: command tx timeout [ 862.581403][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 862.614240][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 864.688171][ T5783] Bluetooth: hci0: command tx timeout [ 864.896214][T14317] Bluetooth: hci2: command tx timeout [ 865.447589][ T1330] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.044726][T14317] Bluetooth: hci2: command tx timeout [ 869.175687][ T5783] Bluetooth: hci2: command tx timeout [ 869.447297][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 869.514629][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 869.591415][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 869.754522][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 869.871539][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 869.931530][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 870.446912][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.946324][ T1330] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.262610][ T5085] Bluetooth: hci2: command tx timeout [ 872.278436][ T5085] Bluetooth: hci4: command tx timeout [ 874.367652][ T5085] Bluetooth: hci4: command tx timeout [ 876.460730][ T5085] Bluetooth: hci4: command tx timeout [ 878.515473][ T5085] Bluetooth: hci4: command tx timeout [ 889.218426][T11616] block nbd2: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 300 seconds [ 890.586124][T11616] block nbd3: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 150 seconds [ 890.604672][T11616] block nbd3: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 150 seconds [ 890.619164][T11616] block nbd3: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 150 seconds [ 890.633166][T11616] block nbd3: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 150 seconds [ 903.121150][T14317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 903.186773][T14317] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 903.243183][T14317] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 903.438716][T14317] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 903.564602][T14317] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 903.629275][T14317] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 906.596281][T14317] Bluetooth: hci1: command tx timeout [ 908.691782][T14317] Bluetooth: hci1: command tx timeout [ 909.081819][ T1330] tipc: Disabling bearer [ 909.207151][ T1330] tipc: Left network mode [ 910.774193][T14317] Bluetooth: hci1: command tx timeout [ 912.805569][ T5085] Bluetooth: hci1: command tx timeout [ 918.335622][T14317] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 918.444488][T14317] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 918.497730][T14317] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 918.599448][T14317] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 918.654683][T14317] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 918.712949][T14317] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 919.894230][T11616] block nbd2: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 330 seconds [ 921.068867][T14317] Bluetooth: hci3: command tx timeout [ 921.124408][T11616] block nbd3: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 180 seconds [ 921.145343][T11616] block nbd3: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 180 seconds [ 921.165317][T11616] block nbd3: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 180 seconds [ 921.177647][T11616] block nbd3: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 180 seconds [ 923.174587][T14317] Bluetooth: hci3: command tx timeout [ 924.407642][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 924.429252][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 924.515024][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 924.612329][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 924.665630][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 924.703016][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 925.225173][ T5085] Bluetooth: hci3: command tx timeout [ 926.982680][ T5085] Bluetooth: hci4: command tx timeout [ 927.300833][ T5085] Bluetooth: hci3: command tx timeout [ 929.094629][T14317] Bluetooth: hci4: command tx timeout [ 929.479578][T14317] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 929.521799][T14317] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 929.615509][T14317] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 929.733760][T14317] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 929.836744][T14317] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 929.882029][T14317] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 931.142299][ T5783] Bluetooth: hci4: command tx timeout [ 931.908582][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.374119][ T5783] Bluetooth: hci5: command tx timeout [ 933.244065][ T5783] Bluetooth: hci4: command tx timeout [ 933.771195][ T5140] udevd[5140]: worker [16603] /devices/virtual/block/nbd3 timeout; kill it [ 933.970010][ T5140] udevd[5140]: seq 21316 '/devices/virtual/block/nbd3' killed [ 934.434164][ T5783] Bluetooth: hci5: command tx timeout [ 936.514259][ T5783] Bluetooth: hci5: command tx timeout [ 938.633167][ T5783] Bluetooth: hci5: command tx timeout [ 938.887224][ T29] INFO: task udevd:13551 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 939.084046][ T29] Not tainted syzkaller #0 [ 939.089555][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 939.366769][ T29] task:udevd state:D stack:25032 pid:13551 ppid:5140 flags:0x00004006 [ 939.549194][ T29] Call Trace: [ 939.553018][ T29] [ 939.686275][ T29] __schedule+0x15ae/0x4660 [ 939.691558][ T29] ? perf_trace_lock_acquire+0x400/0x400 [ 939.899978][ T29] ? asan.module_dtor+0x20/0x20 [ 940.024040][ T29] ? mark_lock+0x94/0x320 [ 940.029603][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 940.247363][ T29] ? lock_chain_count+0x20/0x20 [ 940.324688][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 940.444429][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 940.450392][ T29] schedule+0xbd/0x170 [ 940.664567][ T29] io_schedule+0x80/0xd0 [ 940.669449][ T29] folio_wait_bit_common+0x881/0xfa0 [ 940.849861][ T29] ? folio_wait_bit+0x30/0x30 [ 940.954270][ T29] ? _compound_head+0x120/0x120 [ 940.959477][ T29] ? filemap_add_folio+0x190/0x3d0 [ 941.134453][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 941.140046][ T29] ? blkdev_writepage+0x30/0x30 [ 941.359613][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 941.484126][ T29] ? blkdev_writepage+0x30/0x30 [ 941.489756][ T29] read_part_sector+0xd2/0x350 [ 941.695130][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 941.700863][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 941.907309][ T29] ? put_partition+0x360/0x360 [ 941.912454][ T29] ? alloc_pages+0x4e1/0x740 [ 942.135284][ T29] bdev_disk_changed+0x755/0x1450 [ 942.141103][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 942.418270][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 942.494009][ T29] ? iput+0x33f/0x900 [ 942.498511][ T29] blkdev_get_whole+0x30d/0x390 [ 942.763822][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 942.769516][ T29] blkdev_open+0x14e/0x360 [ 942.954710][ T29] do_dentry_open+0x880/0x14b0 [ 942.959962][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 943.186167][ T29] path_openat+0x284f/0x3270 [ 943.191619][ T29] ? do_sys_openat2+0xda/0x1d0 [ 943.455729][ T29] ? __x64_sys_openat+0x139/0x160 [ 943.461277][ T29] ? verify_lock_unused+0x140/0x140 [ 943.670995][ T29] ? do_filp_open+0x430/0x430 [ 943.754530][ T29] do_filp_open+0x1f2/0x430 [ 943.759681][ T29] ? vfs_tmpfile+0x620/0x620 [ 943.985547][ T29] ? _raw_spin_unlock+0x28/0x40 [ 943.990568][ T29] ? alloc_fd+0x590/0x640 [ 944.173706][ T29] do_sys_openat2+0x134/0x1d0 [ 944.178817][ T29] ? do_sys_open+0xe0/0xe0 [ 944.355333][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 944.361793][ T29] ? lock_chain_count+0x20/0x20 [ 944.561544][ T29] __x64_sys_openat+0x139/0x160 [ 944.698684][ T29] do_syscall_64+0x55/0xb0 [ 944.793740][ T29] ? clear_bhb_loop+0x40/0x90 [ 944.798763][ T29] ? clear_bhb_loop+0x40/0x90 [ 945.054203][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.060346][ T29] RIP: 0033:0x7f83cd0a7407 [ 945.294970][ T29] RSP: 002b:00007ffe9753bf10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 945.494059][ T29] RAX: ffffffffffffffda RBX: 00007f83cd867880 RCX: 00007f83cd0a7407 [ 945.502685][ T29] RDX: 00000000000a0800 RSI: 000055e523514150 RDI: ffffffffffffff9c [ 945.825659][ T29] RBP: 000055e523502910 R08: 0000000000000000 R09: 0000000000000000 [ 946.014584][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e5235176a0 [ 946.023087][ T29] R13: 000055e52351a410 R14: 0000000000000000 R15: 000055e5235176a0 [ 946.405643][ T29] [ 946.447969][ T29] [ 946.447969][ T29] Showing all locks held in the system: [ 946.734489][ T29] 2 locks held by kworker/0:1/9: [ 946.739658][ T29] 1 lock held by khungtaskd/29: [ 946.967800][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 947.186083][ T29] 2 locks held by kworker/u4:3/48: [ 947.355726][ T29] 3 locks held by kworker/0:2/175: [ 947.361253][ T29] 3 locks held by kworker/u4:7/1106: [ 947.615314][ C0] vkms_vblank_simulate: vblank timer overrun [ 947.744031][ T29] #0: ffff88802c5f9d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 948.033911][ T29] #1: ffffc9000498fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 948.245694][ T29] #2: ffffffff8e3d7548 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 948.443227][ T29] 4 locks held by kworker/u4:9/1330: [ 948.449875][ T29] #0: ffff88801a25d138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 948.733487][ T29] #1: ffffc9000508fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600