last executing test programs: 6.292432625s ago: executing program 2 (id=4126): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e0011"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 6.048612149s ago: executing program 3 (id=4131): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40020020) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2800000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 5.648774466s ago: executing program 2 (id=4135): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f0000000880)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@oldalloc}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000400)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0xe9) getdents(r0, 0xfffffffffffffffd, 0xbb) 5.209073221s ago: executing program 3 (id=4140): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 4.845181667s ago: executing program 3 (id=4144): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet(r1, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="2c6b74cdc2634077a95e8b7f10aa55e8b76b2ed8f0695066819897d9d75ca0f87cea922cee3d754849838cc3815d8dfe04f441d3a407100f77bdc7c462236e0dbcd6581d31330d84e5eed13849de2626aeb19217320bfe02182079edb9f66c4b517a765a26146c890a05d716f69d84d1668e2ac4f594f8a797d783962e26bcc9a40f8d8fc6a0a4183324b3f771ad3d8d6de16af24f8f54a9c11622062ad5a03b8568861d96ae5e3fc60b", 0xaa}, {&(0x7f0000000300)="8ab470c51db211106c321159028277754d376eb0e50e31fce062959b15e6dcae691056683ad748352939406fbc056bbb36e276bf455aa18f73204d32f3edba779d85b71be865d979400a1eb9dcd892ad7f958fda54eca256ede7d348db36261b9b54ba733284a5651fbbc181dc6dfe3e98", 0x71}], 0x2, &(0x7f00000007c0)=ANY=[], 0x1d8}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000a00)="5207a15d0cb7552b43c52b094981a9548e49608253d0ace0abdf07e266454ad817c2e92ede980995a7b4bb1662a57c0a9f3e5019381e98b1f387613b0aa0ff1dce8956903909e8b90427a776c81c1a785f9ef4d376dccc7da9febcee62761de52a0fbe89b9bcc0c9cb74eec02e3c204a1cdb0d0bd3e071c968a7b0710d2fc371d5df66a5b31d1957ec8a9c32ab620bc2527cae56c426448951d48e2f17abaf087172654366a85c8a6dfa1ac552981b849835a20afd645b902b51e7e042712496159cb50c791de41b68d3db340b367af615d0bc6b", 0xd4}, {&(0x7f0000000b00)="62e2162d86744457ac7b04b09217370ff7e957c0534c0592ab61b368168293e338", 0x21}], 0x2}}], 0x2, 0x4048080) 4.65958574s ago: executing program 3 (id=4146): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) syz_fuse_handle_req(r0, &(0x7f0000004100)="a95ee66af223165fb85c7a063307d28ba66dd294927c55081f5012d8223e0c009905bba59fcad5c499ccbc3ecf96e9d6ab31713938d657bc1cdd65b0a8c5fbba04f0e4926fc32fede46dcf41865bc66b2b1b353824177c6ad6f47ead9c18951b761a2bf0f17b779c4ade8a3100cdb3f4925ce68a944881cad07ce81e6d4ffd31847a0453b3ce672102b33f5c46bab37c7fb678ba1908052334b225eea595ea982901991c169eb4e0fc23b2a45018e1544c308724adc81d1d22c012fe67aebc0d3157170f2a5eb586f9af8bd80fae3bc2e9bbd9b51a9c32fbc467e2b0a0a840b765938728ba3f6902046443434e9c8a539dbce61dd8fb0e6813208877ac1fc45e9fa75ea6c5e7dc23acf9bf14523cc47de600ab3807ae8162eda1c66cf41d61386817d1483e63591002fabca6c9c1b5201974ea2b404dd54d80e24beadcc9048059c4cb26225eb2ade9e189a1ff40fa7cbb917aab58dcda7cf32bf8ac69a4faaf3a67e06e8736f92700608e1bc38d092a18d914881fd0a17e65d465f0c3cbeb987ae1fda981203d792fe5708993cdf5648f94cf23024caa3fc99d7fe6a6a434d5dab60192987ec3f55bedb08c40078e2f5e1c9e0b033f48ee56d00336f997c17a2f976d57193ec8b3132e8ee249c3dcba95e737127c7e2cd8cd6eea30688d627637e82c27b26110c0c61631d0fe0eb8c600023e8e4f0fe495a8666baa4e3cf9de28e4d95d7b7edea0d8f1b19fcff477164bf6abb3d28485398e02dc4b003de2046aa16a808c077f59a35c0ee44d5e6958b57b60b5fe2980cb0f870395c904e735f7c726d48de3bc2b558bce111f913cbdc65e9a6fdd51f0cb6079a4e6048c61a4dba2fc6cce6e3b93d86e312bb43c30a01c0cfc72ebdc3e18781238b159d08ea32fd37fb352f5943b4a22133586ada296c9ec1a3580d9dd59569496194e8f87f95474263ee6313a8eac98de06426c0f5ff00fee25a915e899e9d99b4ca4d52204498a0c8f877adb92cce1010403ad8c53d6162202a09a099930fc4dfb3246f46134993aeae1e49f2e8b0ccb30ea1b09e12dafa24530b8844473ec04d666e8a7e1c89a1f552d04efe1b85a0bbcc33091460faf098625999c0061eaef184e8b02a96e6206d512870a7fe819dbebf93c00ccbf4357841dbe0343c0850cae8d8d15cfeb3da41bf5682c842f53ca5131545784f1dee5ffcf9b4ccf4cdd037a31e4efdb6524056057ba749cc4208df722c80948a486da031a50d129349fda2549157499b8ee553bd545ec411334b902720ef0a71819ffbf002742151d950df0fe8b2efb5a94133d943286c73adf359659480c438bcf1f7f1bc1ad2dbaa54548aa3d1b4ac7d17e755ca23de9f978f45edaaeff3ade5d122c6029f8406732d1c5cfef450635d3bfa323dd14397fa085e1c928ab84f604bd3c378b2368cb0bf371d41ff1e4982e413bc3f3aedf32237845def41805fe66a5239475f246b1bc91045384aac0dd7c0723c5ed4cb02ff0cd39db2b469790a57582543e5fd8edd24944795cb237b5ec6b09e62e7ec95af1560bbd455416d22accf42ad9fdd5eb9afe198e2a327f69ca3b617eae3c24c0fd7dd36fa9fb3bd111d8d7e5dcf3039fa06b8e3405cc73e90f07660b9aa9748643832784b36d2a1418a453645610fcc816c983065a44e86f3fed8ca3bd5397a1eba72c813a49f45af504f18e85fde740dfc63922baece7e5873beded5755869bebd1f984dade3856c34369529bbab5fc32294d2f68512f0d5d116521f56443637b67587372850ff34f093f7c00376bcd15b9d470502200f81d42a46e711ad001aa1135dee47ee2f38754ea50ac8c98b9cd6f1c1a00f862900af52d9e7007be27b3c095b2e0d880d6ff7fa8bece867dac7deb0080d08d7b31cb905666f36cebe4b8033460823ddfe658319bc26a72f1b55fc8bcf364271cb1f280f9f81abab630f656c1491f70412f735061fa1aaf9d0eb016cc5e7152699ed8e7ea5ff05cdb1c7b8c65ca35d18cb7409425240ede6afa92f211b59a825968b83499bc91db40509367fad75ede35c6553ebd28ef8c9f75a566d8107116af185f555cab0322c108ced7e8012c03916ebf8b563dbe818a2576111a0ff9749627acfe19ae3fdccdeab6349b5c1f106a490c1d128d640a81d8706b66e3a16ee0a4068d9e7102c7724a03ab121d7c93adcf179c5e661b9fd47546f2bc73f92e45b372fdb08d8e958610ad2c4acb1a3ad7bfa236565796b16ef1f9799084f7e60d5396a3a286d207051d325eb5282b54837fef08c7e28a5c38f7d72ad8535166d60e2893f58f704aa5152ea4a6b00b6a26825715156eea616c72c1fbaa46f3df4ebe3696164e47cade8edce9f1f7a509e30f135b3b29bfc849ad66bf05c17d6c8679234a7a53a3d8385c509eaf5709b1558434ad5f73b966c6db4eacf52509de480002b6bc6b65134d9cf378d5820bade7c0f0373b389e06c162745c0cedcea0eda0762697f0e73307cda99d95cd7d2388afcbff6370bf3ca5e3b3393bf5a00780a93699c0cfe0fbac6d809ceca12d95c8d5a9f71c236eea0851113ccecd0a6479350b0589b5bba13bbf4640779751328509f7db504c474392b83afb5bb31d4a4835d108584bbbd914e95851ec020a07d95d5dd51fa2bd3dd51bd706cf054a2b4ca0c2937639fc5a5ee3090d08bcd2335a5e6213e4a11c080373854bbfa7a96efa317884b38675a9891f3256ad8a1f74b64e3dde55e4d5c4775b7adc6ac284203aaf9f6ac12f95aaac02b09b2088ff5d53dfaabf0ce4c6958e97250c91147e266247042da5792e7097bc3210f514954b0dbb5163b1d71a0322fdb2c0d747d4754bc0a7da972b9579233ceed92741bf5b582e349b4aa5ce522d9abfba532f50d68b41e365bcf54b008c384bae1099d4d6ced5e7f4c1b05c7f7151d459ad5eb7dcad282b05a31f4530f2d628f93efad19bd239c06143483646c7b1d1614f700be8593108108a8f28152d48ecd6577bc387935552e396bc563db28454bf358d71eaabe0ebfb46226a3088d8c7ea244b99f8fa643d20fa92d9d0cfa4d6c58002eb18e6cc5c13a07237a218b09fcf16dae2812e9d68cedb4a37e49a8298c3dba5712cc84cf1df6427ecdbe2a9ba2f05951608a02ab7674c4c8bcea2832c89ee71efd66b7b72a04e7d2e6caabc3bccbd9d7ea5a8b95c1a9b8fdb9be258b8dd57e9f4e409445267b2f8a1f991ffe7a4b77c50b8845f1be30356f3de2789fcf49ba4ad46d47b78aeefee7e06ae7d386f115ce0a55bc0ee42d9765c12dcdbe540d41a781dd6d08ca45f27c4a91c65c9a9dbb90b9f9c9e60663e41260792663235e70d9bbe3c485f57522b7c3d13704f662fcc94949825316b814acccef8e18128ccf8834330caee12b376b802aa32214160622339c055d8071eb50c7281991495b72eaf132d0669c7d6b534149016e54d5cd2347121dea8ac60e7b5ca5a53acfb8233242ab6ffa6c01997244ccef3d485c6e5ac4b8a252210822265c1f6b9af893550c163a962bd2ea149a6e9b1ab913446c1a54934ce8f56426a8531df2f07fa73670b78d6213d10a0113864bb15af6568765dab324722a74c87bd18550bdb51663c9d8b6724c9dd1299019fe1d8241c7c9a0200257f3a8593b6830c9ed38ac983908242ec5fed94bc07e6f3cf0fecda556a6685d828343d7b7a2ae6a7ce25a1f0af2e565f4479f791d3bb4944803f5a76a768f3ec71e4aafd217da9d8d32aa2967fa320d67c8aed60cc4b5806439092c1a0cf511918beb0c30ff62a547f8bcea0183ed162ec5a7b2764e5ff49aa93539089ca814cee68ad100dfbfcc5617735be68bb8ea22aee333c88fde3124729047646bab77f08e33c7c70d4d6d023b3091337d0582c75206933ed52ed99bda3d4d5cf48bcc8e683b7c17a19768e8770123731d98c1691e22fc97a0c9ee27eff1ed455e839163ef0195ad8f6d3e653d88b0adaa325f8232787cf38629fc1103ae1e77d453db51f8c16299d68a3230e61138e6c716d7c981f8803c2222ec9d99f476701352bfb497a892398a3c84c87ec43c3494e70c92b8fe6351d73bbe68f73dd1d4168b3b67a277c4e85b2e2d34075dbfe23ed3d6f6520d4987b282c2710423cff7624fee0c5bf6364bcdf2734eb8465ad3abea522a5bc1dd787b812901e286788abb7db6fc25398bd4d6b78657bdf7a602b4706caac46bad88c4a0f6c15c8a60252fc53b3d496707e0857f5c5946ff5fcfa89eb816e1b96b335727f09f164136b367191ad047c3f1f3f5fd487ae535b0284e276c232ad5a6df68eaa8c74d5cde46ba3fb6abf3d42177e4466f18f7a8251f9809e39bcfe0ab07e24c4c7bbd99f70b7252d4a1a34a9aa34fa595871996f31a8e1eea0734e2e60d0871a4eb443a7d434b5a53c0bee62f388f4025ed1d413ae737a0b4d39591b9a5cfc5edefbed55ba21f480b7ecd2db6df235c9c6c2e0da1abacccfd8805839164f2493baf75df275012413bca9ebb38a1c88c600b1dac6cc82b9115ecd597b6b4ab0ae3720c6d9cf13bf96cd56e33898026e60e1b6bf1917b602171fe8bae56c7896aff9a5d65522c91f3478af5643dc563523e397b85f26a573d2d03ec2f63dc9615d3956273196cb4ca3033f1fdea6a95fc6fe95c0042caa07d37e0880a3a3053ea87f1a02e3e4cc062f642adfbd6769f2540c04a99335a0fa452559f27acb146257ae1b93f1c80cb000a71cf87b7a8555f4e77ac4ecd6411051a26b846796fd229417fc456e3e7a64a9d5232b0fa9794616a2bfc67ad9aec0cc361f3bb7dcff27d6815defa96896ad904a3d53b4f39030e3b2b786f82f5d46eda4de74a214d092f7d900a3c8575ff781ee659681d77ff348a21c0bec5ee66fa1abdc32ee75ad4a51a0a0f942c801aeb55ad9567d140e13fc3524648a231d8389c25d3c18550cbd54ef5493dc5a7f6ab8924765086a1e5b69ef6e80d5790f078e999883efbf04825c3326d3b7d54aa453988fa226b31cf19549bebbd46b54716e48c05df7655fbcefe426fd48b0e4867795d1a03df00e7da4245e95630f2cd3d1dbaae5b74ab2795f6ad5ababe632f4ae1abbc97182220a28eb1d108feb52f8326ec2b3abb0ed045fe64b8e302348d3bd561eaaa3a7f6d1aa426a5848f320f026db837d98063724d38a778cabe67caa2b8b7462523620661965fbdf41a2e835e64d484804321754f79e8b56f7af558a9007d8871fd60e2aeb697270d470394e97f43c93f6515e9941fce5c3e020148cabac9a3f257769afa92374b3a8b5420dfbeeb3f4f1d9106cf1f822791fab189d3a769438aa0b8ad58316d02eae97264e4238ea807c578fb215614d60f6d69d23c438854b0e0b47cb820e0deca03a8f5b0221f10b0e7164ca28b60f978ae82beb3fc52bf8f5f9d4bf9ea5a44014ffb3fba5604fb70db687bd7649fbb4b72d2e604b8031eec10d7fd55cf62234d1515905c4ecdcb2073ae480437e134fa65b37f5fc718ea1595510b302f5a750bada2b1b51c5d6c14da8e69f51c5454d3c15f94f5551ba41e402f98c31d8340bc24ce0c2d0857eee2e6699781434f9eca84e52e9dc0345c4c289880c3c7162772d39bfa62cfb8b401e1cf9a241e7afe1ae4fd5e224bb1f4c3c7098753b01c35f9c8fe1e0c3cbe7521b259e403006121e1c3f62d357394267e78209f31fa87e1aa87cf1054119ea364d7b9e82ae84b998860d8fa73da7cf6c58fb4bd754316c39bfdc453fcea16b73c1bc56996b22074fb4a1e944b6dc786e1f1d8460004c1b9abba76cb5ad9c02444d01b628aef339809a93696b8eedc658222b11f0ade5cad02ec734bdfae30421adc690dc0882cada0a1cf5ad9d538f0366232c7aca013ae8bafacda63dbdcf8507b911009829f2ef019e60a2b1236614b25c258ac4b05aa85d69e8cb2bff36728b967b58f70683e0f1f4408edc8c4fef715170c163324489d8fa4684579fb6f175af8ee8f387ff939b750c7dfd4ba62fe715eea3e5ac3ff7d5cf3ffcbea739b85374956b00b38d6f4519390d6b382d3a883c8bb7a62ce654c005744921a082479affd60092aaff76cafe07820c1aa10a0d5ba589eb21f48e09bf5c279c7a3ac6bdb7958cd439f54d5ad369f0eb68e090eb2a6cffbce0d5af05f7afe5336ad069482f8a765823c63a45d345a72b42d5ad50d8d73a3e7f22e717c1e2aca4786d43b0b1dd2651fa46c0a6cceaf8f57f2f132cf49112ea156f6a159978f8cf8e5e9d74caee5530d999c4d0e6e50d6c69b5c57edb78b0a63d6a06eeb499060300da73ca39199cd4bf6412d58bc9344b5cedf7800b6cd84f193a55314bfa047bb93f562955d1b4407781ebe40fef42f6e5401046866391dd9ad8b96dc6915d43d40df4d7ceb43f682afa7c0cce1f944d79e81eba4c01c64334bf50bb26db0992e9265ba022b49fec9f188ea213ee504d666544d0230b1272f5222db08aa5347e985abf2607fee7719a03a3dedea280e2bcc77737562cd18d979992dc3bb32dbcd3bbfbb5896b9d06cffef2ee68cb071e76d2b7ec5123a91fd73e6fb737d887c016782328ee5a85bff817a8f5a769205373e5c63ffb883158be34059deb0bb99960f3f0cf838efd35f265240cfede2ed447fd7ebaf92befa24c74546c3c9b93aa6ead03c7350327a3e0bd049a582028f3ca59fc9fdc2ac7819f8f92da0a48c4184f7d9abd10e7745a1af4457127f997580bbda67a56cf9bb67b5f3ce6b2b62dffc56b47c95886fcbbcf89da58ce694281a9e8bf50fd5878efc3d357e6f4994a9483ec74b536a5f8ccc714b045fcb5b896e1d998ac11e418d23028f088e99845ef0458dbf45f0bfe9a7188bda3bc07a27f25c741d414aae493b191d8721ddb60281c741bebccc12c841b07dfab15481f65e90d4337414112c9ec23bff763b1eca8a1bd6cb6c252b6531e4e096dbebae5a16120867ece7746a7b487216851ce059a8e3aa37dd4885c6b4e0b8ed807dcf62279f1de1b3b834add0ba26a1bbce31199a5b145ae456f84136887ba27b2e3c6d57f1cfedc9e7042a6c5c8d5c67c04c4a0610d09ae7c037cc1c75f355fc5033e434762aa8f4f23d28ac98409deea20c826b7a9317168ab0075503f3022ccbf2296b58bea2242082d3925d6788ef2d56c435b1db3f96a992d3854d5a9e2af29e5a7817b6c7f210ef511071c46fc3f013171d53703ed7ec6258f531c0d00782c8e2b30149e6157f0e898732bf683341a4a768c199f0f8953120e8d2e9ea791b228da103a2f67ec920560436bc306861fdb098c45ae66ebe12db1e27bc5d2e5b4fe530de58e90c2d5c4ab764cfe9312f2397dfb20468d7db6e9e0aa5765ff0bd2b1c1620671f9a9a516f405e0e8ca8c3498cadd75a76786d88a1adcfd91d2e7c302876b5c9d97d2ee8e5b51d73ff20039a3dd4ea244ec37242f3bbe6ebd7c2f9c583885274c0537ae5b3af6cdfd216a7e9c9f3638322e1d4c58c5f0ee9107bd19f50f2435642a9c584d4de9a4ac6cbe5f699144b9521f2669ab0df72a70d1af1ac9369c58bc8f23311bccc7e7b0b32b744135241c397d6796690f064c8e6df5d7593c2e7bb159bd1a7da0ee9002c0b7a52b549777def7e854acb8224d83c4ec769bf45e4c699c680243d6e2e4149341db46acc685f0650de45fcd75f4b0bfbb3eb5bce224f2c04a03b35edad303af6a2ba403abe9daed9bc170363333efbb9ab4725e453df55b3861499a7283c983db6cfacd367df13dbad52a31fce48bfd13ab9982d821ace9a998a2763d9bf4f484d46ca345d81360ea8841adaa5b45feace5db05fed42113647dcbe3c3dfd70f4b3537e77228a5218d9419a94685a504fe61a1169115536eb2682a63675a0a4debcfb29ac169e4a999206bb6d4a4cc5e508534e9ad4295f08f681071d5cdf0edd674ba2a43a60739929ff3e22cfd4675b669b78998cfac88a0392033930f2b788dbdfe11e560ec1a04be8fcde01fb3cf80d93ce1df819a21ff158dd18e9bdc759a59b9f7111245d336963a97ac8bc7c4bc2682c8273204117402f666e9bbf1f0c0edb08bf3e51270876f92067ae8d37bdbf857d4174a4a32de8459e4612ab723d5e52bfe77e44d7faf4b70d7c8102a5b3503460b0865e5ded0c0366d9dbfeb111deeb425c8878798cad64a84f2036dd9a883277a89d368d636ae34b7f9a8ee57f1e563d72645629ec94d5e763b29dfe2e2fcf699eee4224ec6a3881f892e4f3139962b7f8c397dda473c820761f82df111ee571df65e01b697287cbd8d1496cc98f462828cf22fcc14bfa4cedf934920892fac405290ab3ee7eedae9af2a1eb0f45309eec1cafec9d5f9fe10212417e89182cd22474a8b8972520b79728c8b712ee96a809b31a0c08bab2285fcff6d8b8f638f5550cea169055163017e5c3ff238fd5ba7e460b06ca7dd11fcb37829e6c71a29df07a53ecf8a041081977da88a21074dee4cf64132868a3d7c32e4efa49a71d98a4be181b681f22152bbdca36b377baf0c90f8cbf2c32f8dac624e7fa650d3aa974aba48d29b7d352557f5b2d8054c86d36363c00497a6e467ebe863890c6344a8151ca09a0012e8d0f904acba4edcc92d16e021dd24f0d58504152c62ddd21904a039222673e9b3c0a255ecb2c67d919cf50abeeb3ed8d52618d31242b274f96057ae05944ae0a367aeb6a29455c1171f69f7b138d20197216e552f1c11956a9a031539b032ff5d666b2b7203b8441d8e8c2bf325aadd08e01d3eebdcf663d318c3302130299b1cf852edec4300498ed3fc57073309f83490ffc5d2f65cf087f47790e950a6c810a50cdef1b6a4c62c0f40f3bf438d1ad1f0a04a4c28645de82c6fe6174147145ccc180e5989fd5368ea9c90b5b74cbb8acdde83a05f91b943d73f950940f4ba967767533e4093015f9e7c5c2bcf422e83af0d2b718dd15c219e1dad959f88f18b4592a20c396e3862bc8d629b50e670eab0e12460e1bd94e8d192fbbef19d5b5e7244ef274a5192f8e28b28d1ecfdbe6da5c4102f9535edf71a6f5de0f59a7290cecf062a0328154b1fa5ba4dcee2a856de908d9984914c5a05038b4678dc5b202150be8768b33d15f7d380f080ecb406be5e991d83f10f6113ec8ee18a4d269a96f4b30b84d059e6600af3fd36f0cd6afc8b9c0d7673ac8ae164a796ee21e4e1e4ba1d75c64a65de49bf755abe4aa4d832ca23c7833972e8735acb7d31969993437d2cbb7b12cfde845e0fa7a3ec6a9959cb859ae8ec8da9b9b93dfaba08b0bc092a1e75d95ded612837ef01b11d05b649ef903a065bbde06643bb2bb6d352b01b2db6b693941e4a6d955fe01c29c56dbd298146a6ab48c2ad9d0e191c4307c3a68c858f975d6da078c95eee82212b07c1c0c496771dfc29429cd3fb6d6932e3c49b77e834e1bcc15a7e2f62779c7eda7cb7339037676dbd603b46554de1ca7950e33d48e7615a7971e525696b69b1e024377d20653bcd41b530f6a764699f75a9134b4be30082ab571eab792063234db36907f6bdf8caba3e0e0f884816943418b32e3063378accf4d916e068f0b9055039e93a875cb500e25ef8258cbea70b445d3c2680c75600759e4df1270f9f79b1826909b2dfe6e7a2b58040d03e0963eb46b8c99a327a61a510c07103b23c40bccefc14d2c9e5e2d8b92140a7792eabc328e147dfcc87cd215a03ffb9d1a54351657ade1af17d4bb953ada02830869186cc820a44fa13325e3e53c565d7cdd5a1292de52150a144df0ed39ee23cb7a26f15ff042a797c9aa69ec8a33d9cede2f1f00c04b990025adf0813ceea6827c46c1ec46cfe6fc9294ac3d7963bbdcb7a5a75431e067c492b0c6da41606c6c82425145ec772f733afcdde02e2a422d64439ba43e080d1f79d1ab5ffa01392f4f21cb9940a1ed244ea5ff85bde6af06d72c5a54cb3c1af918fd0801f8ebdc410db560ec151eec471acd4634f781141c46569dd7abf178f286aed037fd73f4daa356e648eeeda0bc546f196b2b6319da806ef87542e3c47bc5cc54da7ae92e79420fbda44c35f38a72ea14d13df8a4c526175e7f0648151b5fa27ecd735965265e9c07e20f5f1e9cf01a9c9fa508d93cae05d0b666bf7d1a4cdec9b380dcd1694d7ffc09f06420fb2c97ccf1084bce8f30192004f055fe859e3de62ca7f77904d080fa7a6a099d8db70ef3ee82ff8b0d6e4eeee656b17463176c759dcf3d943807207df04da7c731dc2f56a5b263831ce89e4eaaad6e56e21764ca1d96f4cd6069bdfb0a278c23c92521b4a17763c926d70aa4f49cb718c90a426a64ea9c03469be5602ee34141c290375f5e98af76ea53512d32f268cbc0527dcca0ab3e2b1b76e79b4285dc09a3a7f89997da03a629b5d9f755b4ce6a4c50455011efacdc5d2c1b91db8b865c614b135db2e0f9e4cede55ae414cb1f14398a8c9a73a09d315796beb10e702bd8522b9875deff4435cc166b2a87d3d4d7d172b6290acb8e97f6b62615d4019d71324adeac0c3bc00a5650a5fcd471cf27f28a829d0fb8fdeb93b62973482fd1e7b57b3de16283501cd39f6d8986c191172394c39cdf11607f415cb171f8a9662b7990b51a1e42caa718229b34c4262b1db8fdd0c8093d62efd43d9ee3eed44f6208c7151544170c39b9f78becb55c08c597715b2f1901df6457da8e6ebc483b3bb5db68fd3c89668cafc4339a21f4b05e483570190cef51bf92ca49709ba11dc06bd305deadaed6b9f6f028bc95a92fb8385534883990332f54b71733807a1f2b8f25fdb1df88eb3b38976706d07a67f756e431546aebd4af2743f31b36038f91c00deddb1285e26297c174397126ff53433f2e184c1d4cef6b3a7bfa1862de9a1ec20869e03b69379de53d7b4311495acdf897855a9f23552a512ae9bf34a9775693d8957d9905504c089d19d7c98187e1dd671516f8d6b605941d8e7f77ab6118cc5ebeec6ca42a5f9f6818dcef7b0af9652bed27ec585f7e18e23a3b0736dee634cce14dc52656f0663eeee84ebca945e62adf94bba85942c89e328c4f35e43586af445f11b1b64945c8f4dad48f6db27c3444f016cce7feb7a438759d67cd203d9fcb3f44211f4977b5f347800f3f37b874df4ef985dc55d6a1cb3457e6c10a539f4bff7623a09ffe0761fff206afcfb5cc4b5a9fbd54f98e9a553ae59790facbda1adf615a79e439172341c3bf95b99dd8f78ff53699d110769c9731c03ad3ccd8abb8877fe84c0ab0d646ff06a49f73c42764ad003bf85703f633a9d85d0b03d3c595f9eb103a85363fb5df48e201e22d4b361bcb5de70bbaab8a02a2d3b27a5246145b2da2cc71bfa561544f7cd3cff6688a7b049ae086b43d197a61ae54d7113829e8f6afaf2414b7ac0b2f286968d2db9a4bb1b90c1ad9861dba35722483c88c63e5d77cf8b05225f31e665878f9238e55bf90f312fab7c19e400008fd67965386bbbee50999ec685fa1bb20cbf106a909a234f65de75ba4c896e218074ccdb8f75a333ed4e0c256283d1d7d326683b84ddfdb7a7b2e6dc4a93b2dbb8b37b208d4c02b6d192d28bb49ea44dfc56be4e70a3021ed442eaab2c45f832b68bf7b86", 0x2000, &(0x7f0000006d80)={&(0x7f0000006100)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa75, 0x19030640, 0xe0b, 0x7ff, 0x3, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7ffffffe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 4.585093375s ago: executing program 2 (id=4147): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xcac) fchown(r0, r2, r3) 3.998512153s ago: executing program 4 (id=4153): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c050}, 0x40) 3.939875591s ago: executing program 3 (id=4154): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000007d80)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@background_gc_on}, {@fault_injection={'fault_injection', 0x3d, 0x10}}, {@discard}, {@noacl}, {@noinline_dentry}, {@alloc_mode_def}, {@segment_mode}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xd74}}], [{@smackfsdef={'smackfsdef', 0x3d, 'fault_injection'}}, {@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x33, 0x36, 0x32, 0x64, 0x32, 0x34, 0x37], 0x2d, [0x37, 0x63, 0x65, 0x63], 0x2d, [0x65, 0x61, 0x61, 0x61], 0x2d, [0x64, 0x61, 0x65, 0x36], 0x2d, [0x32, 0x31, 0x0, 0x63, 0x35, 0x61, 0x33, 0x33]}}}, {@uid_lt}, {@subj_role={'subj_role', 0x3d, 'batadv0\x00'}}, {@obj_type={'obj_type', 0x3d, 'noinline_dentry'}}, {@pcr={'pcr', 0x3d, 0x1d}}]}, 0x1, 0x5505, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x348) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 3.774451323s ago: executing program 4 (id=4156): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r0, 0x0, 0x0) 3.019346735s ago: executing program 4 (id=4162): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e092000000000000109022400010000000009040009010300010009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x6, {[@main=@item_012={0x1, 0x0, 0x1e, "c5"}, @global=@item_012={0x1, 0x1, 0x4, "d4"}, @global=@item_012={0x1, 0x1, 0x3, "8f"}]}}, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0xc) 2.871619705s ago: executing program 2 (id=4165): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x0) pivot_root(0x0, 0x0) 2.553740907s ago: executing program 0 (id=4168): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r1, 0x8001}}, 0xff7a) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.449495707s ago: executing program 0 (id=4170): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r1, 0x0, 0x379}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r1, 0x2}, &(0x7f0000000340)=0x8) 1.739238183s ago: executing program 0 (id=4174): r0 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB, @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.739040399s ago: executing program 1 (id=4175): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="f797ee76", @ANYRES16, @ANYBLOB="01002abd7000fbdbdf250800000018"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c084}, 0x44080) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 1.723647348s ago: executing program 2 (id=4176): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x8001}}, 0x50) 1.422423808s ago: executing program 1 (id=4177): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000400)={0x5, 0x1, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f00000003c0)=' ', 0x1, 0x10, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) 1.378108849s ago: executing program 0 (id=4178): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1.1270368s ago: executing program 2 (id=4179): socket$kcm(0x21, 0x7, 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002140)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3275078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bffe8d178708c523c921b1b5b31300d3b5d0736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ff33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0x1000}}, 0x1006) 1.012825622s ago: executing program 1 (id=4180): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_connect(0x6, 0x2c3, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2a, 0xb7, 0xfb, 0x40, 0x413c, 0x81a9, 0xeb17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b1, 0x2, 0x0, 0xa6, 0x50, 0x1}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 845.275337ms ago: executing program 0 (id=4181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x1, &(0x7f0000000140)={0x77359400}, 0x0) 819.810474ms ago: executing program 1 (id=4182): bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 585.212778ms ago: executing program 3 (id=4183): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) writev(r0, &(0x7f0000003440)=[{&(0x7f0000001180)="41962e65aa37bc5e49a08470d2374c228c513b15d69fe64e792524efdcfe25c3", 0x20}, {&(0x7f00000011c0)="91eaaf12500fc2b2ddb09c62b72a80b5658ca63d5f78386f7052027c6eb64f2a0bdb2cdeb475eedcc5a3cb6427c22f80eef0b261df76ccf8ef972d0a05956da88a99585c135dbb56cae4ddc2f7b7d6ac0c816b92930eb2ef4ac4801f8f45aae06e165a99c5f46af6f620c87603357fbda783ac5f62947dd1307288e79a3c0f54891718da2eb6dcdd34a07f0d95bba4e7e909d36835cb6a702094b32b9f6d497a830ea5f8e081f3e9e9f45a46d48de8d8bb84fff5e6a01918380f60bef3179fbdaec90e4e0eee1f0aa1a3bc75ad1c085d4b6786aadc93e653c1c102c8d18af5e14513d204e81541bfe40498647c96a8af44a2a31a", 0xf4}, {&(0x7f00000012c0)="9c6d75b7cbc52888193f206f04835a584c25bb00cda80061f46bf95ce22b4c440de2cb640780f120d3a34b532794458384845bfacab3efdc745e0a0b31e687d9a469770dbfee3a5d68c54773478329328520a1e9e83b778efa6ae22baee3d537fe9b4db953e3905b181bec140e9995277eba43e46274f3bb73be879342364714e1404e6e4b3898424f9da6bf3459064c3fe373c8925a85df0de6639bf6ea51ed0fd69a1f90db088545f7a9fb6554e9e96ca07636d240d210cea15fcd6a8a3968fc", 0xc1}, {&(0x7f0000001440)="740b044625b4d0c00696d64cd554a34746f8219ff82f171060a70cca54030b914b9bc2aff14ef68fa9d623d913ab37219324f4b4147d267362ce98aef6ff0106aa5fda9d01d993540b162a23aea84f8091e5e3438340a92cbabfaa48114dc1f7e5687cab14b78fab5a5bf771b0793ea33f123950acbc97ad4012a584f9dc19c61b0b491e411e95c76a7a860c4977a0c3304b3f76723e652ec1c1a94d21", 0x9d}, {&(0x7f00000022c0)="ad3eeb6c20e51af47bbea68714af37b0717d6346c0a4c12a7487d20598d1bdc05319c41ec64eea6548b72423d9840bb2950e6718314050089faa25ff3cd6117ece27c82e69a73fc0ae54a6a7b7f4b35c1747b2b592c6633b8f7406d933302096c518ebb27fe5fbf8925ff42f5e1d1e20a0a98ac2eea8602f229b14a87d48dc8ae1830876281048f13f1684e9fff583", 0x8f}], 0x5) 519.282486ms ago: executing program 4 (id=4184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x30, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040c0}, 0x40004) 518.463698ms ago: executing program 1 (id=4185): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61123400000000006113500000000000bf200000000000001500000008ffffffbd03010000000000dd000000000000006916630000000000bf67000000000000a406000007ff07006706000002000000070600000ee60000bf050000000000002e650000000000006507000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@float={0xb, 0x0, 0x0, 0x10, 0x4}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x25, 0x0, 0x6c, 0x4}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x51, 0x0, 0x6d, 0x4}, @typedef={0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x6a}, 0x28) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r2, 0x400, 0x80000001, 0xfffffffd}, 0x10) 0s ago: executing program 4 (id=4189): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x4, 0x4000000, 0x0, 0x0) kernel console output (not intermixed with test programs): 874] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 325.965912][ T32] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 326.031787][T10874] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.149189][ T32] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 326.149222][ T32] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 326.152152][ T32] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 326.152186][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.152208][ T32] usb 5-1: Product: syz [ 326.152225][ T32] usb 5-1: Manufacturer: syz [ 326.152240][ T32] usb 5-1: SerialNumber: syz [ 326.303786][ T32] usb 5-1: config 0 descriptor?? [ 326.388480][ T32] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 326.764197][T10893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2238'. [ 326.880652][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2240'. [ 326.998119][T10900] netlink: 'syz.3.2241': attribute type 1 has an invalid length. [ 327.121174][ T32] gspca_sunplus: reg_r err -71 [ 327.124187][ T32] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 327.156635][ T32] usb 5-1: USB disconnect, device number 18 [ 327.195703][T10904] loop0: detected capacity change from 0 to 256 [ 327.291198][T10904] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 328.112837][ T32] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 328.261386][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 328.265894][ T32] usb 5-1: unable to get BOS descriptor or descriptor too short [ 328.268619][ T32] usb 5-1: config 4 interface 0 has no altsetting 0 [ 328.315575][ T32] usb 5-1: string descriptor 0 read error: -22 [ 328.315665][ T32] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 328.315684][ T32] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 328.491532][T10942] loop0: detected capacity change from 0 to 1764 [ 328.491532][T10937] loop2: detected capacity change from 0 to 2048 [ 328.493890][T10937] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 328.493921][T10937] NILFS (loop2): mounting unchecked fs [ 328.560196][T10945] netlink: 'syz.3.2264': attribute type 1 has an invalid length. [ 328.632875][T10937] NILFS (loop2): recovery complete [ 328.641648][T10947] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.787082][ T32] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 329.079499][ T32] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 329.079930][ T32] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 329.079982][ T32] usb 5-1: media controller created [ 329.285350][T10958] loop0: detected capacity change from 0 to 1024 [ 329.464707][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 329.590235][T10958] hfsplus: unable to load nls mapping "pe=’¬Þ¦Îµ#ôWÚr [ 329.590235][T10958] ¤" [ 329.652284][T10969] loop4: detected capacity change from 0 to 8 [ 329.716735][ T32] zl10353_read_register: readreg error (reg=127, ret==0) [ 330.096242][ T32] usb 5-1: USB disconnect, device number 19 [ 330.331572][T10986] loop4: detected capacity change from 0 to 256 [ 330.428033][T10990] loop3: detected capacity change from 0 to 256 [ 330.499748][T10986] FAT-fs (loop4): Directory bread(block 64) failed [ 330.499784][T10986] FAT-fs (loop4): Directory bread(block 65) failed [ 330.499889][T10986] FAT-fs (loop4): Directory bread(block 66) failed [ 330.499916][T10986] FAT-fs (loop4): Directory bread(block 67) failed [ 330.500031][T10986] FAT-fs (loop4): Directory bread(block 68) failed [ 330.500076][T10986] FAT-fs (loop4): Directory bread(block 69) failed [ 330.500204][T10986] FAT-fs (loop4): Directory bread(block 70) failed [ 330.500230][T10986] FAT-fs (loop4): Directory bread(block 71) failed [ 330.500341][T10986] FAT-fs (loop4): Directory bread(block 72) failed [ 330.500366][T10986] FAT-fs (loop4): Directory bread(block 73) failed [ 331.102704][T11018] netlink: 'syz.0.2285': attribute type 1 has an invalid length. [ 331.379888][T11032] loop3: detected capacity change from 0 to 512 [ 331.627835][T11032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.627980][T11032] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 332.567367][T11032] EXT4-fs error (device loop3): ext4_get_first_dir_block:3548: inode #12: comm syz.3.2286: directory missing '.' [ 332.978648][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.417752][T11076] loop4: detected capacity change from 0 to 1024 [ 333.421647][ T5620] Bluetooth: hci4: link tx timeout [ 333.421888][ T5620] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 333.468373][T11082] netlink: 'syz.3.2303': attribute type 1 has an invalid length. [ 333.845087][T11080] loop0: detected capacity change from 0 to 8192 [ 334.285306][T11097] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 335.117790][T11112] loop4: detected capacity change from 0 to 512 [ 335.131780][T11112] EXT4-fs: Ignoring removed mblk_io_submit option [ 335.170491][T11112] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006] [ 335.188506][T11112] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2323: Invalid inode bitmap blk 4 in block_group 0 [ 335.188540][T11112] loop4: lost filesystem error report for type 5 error -117 [ 335.189034][T11112] EXT4-fs (loop4): Remounting filesystem read-only [ 335.240282][T11112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.396364][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.521134][ T5620] Bluetooth: hci4: command 0x0405 tx timeout [ 335.933348][T11125] netlink: 'syz.4.2327': attribute type 1 has an invalid length. [ 337.108817][T11165] loop2: detected capacity change from 0 to 512 [ 337.133088][T11165] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 337.251700][T11165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.251860][T11165] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.555081][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.008002][T11203] netlink: 'syz.2.2350': attribute type 1 has an invalid length. [ 338.156642][T11207] program syz.0.2358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.234002][T11212] loop3: detected capacity change from 0 to 512 [ 338.263642][T11212] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2361: corrupted in-inode xattr: e_value out of bounds [ 338.263682][T11212] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 338.268167][T11212] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2361: couldn't read orphan inode 15 (err -117) [ 338.268217][T11212] loop3: lost filesystem error report for type 5 error -117 [ 338.268819][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 338.268840][ C1] EXT4-fs (loop3): initial error at time 1780308864: ext4_iget_extra_inode:5128: inode 15 [ 338.268871][ C1] EXT4-fs (loop3): last error at time 1780308864: ext4_orphan_get:1402 [ 338.369906][T11212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.621947][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.706363][T11219] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2363'. [ 338.843826][T11224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2369'. [ 340.771053][T11281] netlink: 'syz.4.2391': attribute type 1 has an invalid length. [ 341.374090][T11271] loop3: detected capacity change from 0 to 40427 [ 341.413480][T11271] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 341.413506][T11271] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 341.414779][T11271] F2FS-fs (loop3): invalid crc value [ 342.050632][T11271] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 342.182797][T11271] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 342.182826][T11271] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 343.276784][ T38] audit: type=1800 audit(1780308869.703:37): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2389" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 343.933536][T11343] loop2: detected capacity change from 0 to 512 [ 343.973383][T11343] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 344.104647][T11343] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 344.113340][T11343] System zones: 1-12 [ 344.210785][T11343] EXT4-fs (loop2): 1 truncate cleaned up [ 344.224589][T11343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.536875][T11355] loop4: detected capacity change from 0 to 2048 [ 344.607490][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.773101][T11360] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 345.190559][T11360] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 345.190594][T11360] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 345.249411][T11360] Remounting filesystem read-only [ 345.251149][ T5614] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 345.849898][T11385] loop3: detected capacity change from 0 to 256 [ 346.146968][T11392] loop2: detected capacity change from 0 to 128 [ 347.290436][ T32] IPVS: starting estimator thread 0... [ 347.413655][T11426] IPVS: using max 7 ests per chain, 16800 per kthread [ 347.510006][T11417] loop4: detected capacity change from 0 to 32768 [ 347.567465][T11417] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 347.567502][T11417] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 347.856341][T11417] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 347.890860][ T2187] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 347.890884][ T2187] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 348.403894][T11448] vxcan0: tx address claim with dest, not broadcast [ 348.745047][T11459] loop0: detected capacity change from 0 to 512 [ 348.746743][T11459] EXT4-fs: Ignoring removed orlov option [ 348.748710][T11459] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 348.842787][ T5714] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 348.861492][ T2187] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 971ms [ 348.919042][T11465] loop3: detected capacity change from 0 to 256 [ 348.939526][T11459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 348.951760][T11459] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.2467: corrupted in-inode xattr: e_value size too large [ 348.951864][T11459] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 348.994098][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 348.994119][ C0] EXT4-fs (loop0): initial error at time 1780308875: ext4_iget_extra_inode:5128: inode 15 [ 348.994142][ C0] EXT4-fs (loop0): last error at time 1780308875: ext4_iget_extra_inode:5128: inode 15 [ 348.996543][T11459] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2467: couldn't read orphan inode 15 (err -117) [ 348.996568][T11459] loop0: lost filesystem error report for type 5 error -117 [ 349.002486][T11459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.038477][T11465] exfat: Deprecated parameter 'namecase' [ 349.038623][T11465] exfat: Deprecated parameter 'namecase' [ 349.038936][ T5714] usb 3-1: Using ep0 maxpacket: 16 [ 349.049925][ T2187] gfs2: fsid=syz:syz.0: jid=0: Done [ 349.070606][T11417] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 349.112403][ T5714] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.112440][ T5714] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.133281][ T5714] usb 3-1: config 0 interface 0 has no altsetting 0 [ 349.133331][ T5714] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 349.133359][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.171872][ T5714] usb 3-1: config 0 descriptor?? [ 349.273152][T11465] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d) [ 349.597169][ T5714] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 349.657457][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.942632][ T5714] usb 3-1: USB disconnect, device number 10 [ 350.644449][T11483] fido_id[11483]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 350.755509][T11490] netlink: 'syz.3.2479': attribute type 1 has an invalid length. [ 351.319176][T11492] overlayfs: workdir and upperdir must be separate subtrees [ 351.609215][T11504] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2488'. [ 351.609275][T11504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2488'. [ 351.820339][T11510] program syz.2.2491 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.040142][T11516] netlink: 'syz.2.2493': attribute type 1 has an invalid length. [ 353.694793][T11557] netlink: 'syz.4.2509': attribute type 1 has an invalid length. [ 353.806831][T11564] netlink: 'syz.2.2512': attribute type 1 has an invalid length. [ 353.864476][T11561] loop0: detected capacity change from 0 to 1024 [ 354.168674][T11561] hfsplus: bad catalog entry type [ 354.601395][T11586] loop3: detected capacity change from 0 to 512 [ 354.617244][T11586] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 354.628414][T11586] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2525: iget: bad i_size value: 38620345925642 [ 354.628525][T11586] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 354.630725][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 354.630745][ C1] EXT4-fs (loop3): initial error at time 1780308881: ext4_orphan_get:1397: inode 15 [ 354.630776][ C1] EXT4-fs (loop3): last error at time 1780308881: ext4_orphan_get:1397: inode 15 [ 354.631215][T11586] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2525: couldn't read orphan inode 15 (err -117) [ 354.631302][T11586] loop3: lost filesystem error report for type 5 error -117 [ 354.667089][T11586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.966630][T11595] loop0: detected capacity change from 0 to 256 [ 354.987683][T11595] exfat: Deprecated parameter 'utf8' [ 354.987707][T11595] exfat: Deprecated parameter 'utf8' [ 355.257613][T11595] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 355.309266][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.517705][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 355.567899][T11607] netlink: 758 bytes leftover after parsing attributes in process `syz.0.2533'. [ 355.672873][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2531'. [ 355.690672][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 355.693320][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.693378][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.693425][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 355.693493][ T10] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 355.693520][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.773590][ T10] usb 5-1: config 0 descriptor?? [ 355.858292][T11615] netlink: 'syz.0.2536': attribute type 1 has an invalid length. [ 355.997931][T11597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.016440][T11609] gretap1: entered allmulticast mode [ 356.050984][T11597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.284260][ T10] elecom 0003:056E:00FE.0012: unknown main item tag 0x4 [ 356.284302][ T10] elecom 0003:056E:00FE.0012: unknown main item tag 0x6 [ 356.284331][ T10] elecom 0003:056E:00FE.0012: unknown main item tag 0x5 [ 356.284359][ T10] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 356.284387][ T10] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 356.284414][ T10] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 356.284442][ T10] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 356.284469][ T10] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 356.284496][ T10] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 356.284523][ T10] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 356.289365][ T10] elecom 0003:056E:00FE.0012: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 356.469360][ T10] usb 5-1: USB disconnect, device number 20 [ 356.759005][T11627] netlink: 'syz.3.2539': attribute type 1 has an invalid length. [ 356.786749][T11620] fido_id[11620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 357.756390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.803420][T11648] netlink: 'syz.3.2551': attribute type 1 has an invalid length. [ 360.018224][T11709] loop3: detected capacity change from 0 to 16 [ 360.084170][T11703] loop2: detected capacity change from 0 to 4096 [ 360.101802][T11703] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 360.136144][T11709] erofs (device loop3): mounted with root inode @ nid 36. [ 360.364296][T11703] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 360.575642][T11716] loop4: detected capacity change from 0 to 8192 [ 360.858533][T11731] loop3: detected capacity change from 0 to 256 [ 361.331702][T11739] binder: 11737:11739 ioctl 541b 200000000180 returned -22 [ 361.603767][T11746] program syz.3.2594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.835213][T11752] loop3: detected capacity change from 0 to 512 [ 361.925716][T11752] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 362.131681][T11761] netlink: 'syz.0.2601': attribute type 1 has an invalid length. [ 362.604031][T11752] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 362.632559][ C1] EXT4-fs (loop3): initial error at time 1780308889: mb_free_blocks:2049: inode 11: block 64 [ 362.632607][ C1] EXT4-fs (loop3): last error at time 1780308889: mb_free_blocks:2049: inode 11: block 64 [ 362.719378][T11752] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.2600: corrupted inode contents [ 362.719417][T11752] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 362.783146][T11752] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #11: comm syz.3.2600: mark_inode_dirty error [ 362.783185][T11752] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 362.786927][T11752] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2600: invalid indirect mapped block 1 (level 1) [ 362.787011][T11752] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 362.837362][T11752] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.2600: corrupted inode contents [ 362.837401][T11752] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 363.134700][T11780] loop2: detected capacity change from 0 to 64 [ 363.179370][T11782] loop0: detected capacity change from 0 to 512 [ 363.217972][T11782] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 363.260463][T11752] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 363.260492][T11752] loop3: lost filesystem error report for type 5 error -117 [ 363.299410][T11752] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.2600: corrupted inode contents [ 363.299449][T11752] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 363.332884][T11752] EXT4-fs error (device loop3): ext4_truncate:4690: inode #11: comm syz.3.2600: mark_inode_dirty error [ 363.332921][T11752] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 363.354999][T11752] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 363.355086][T11752] loop3: lost filesystem error report for type 5 error -117 [ 363.356043][T11782] EXT4-fs (loop0): 1 truncate cleaned up [ 363.417292][T11782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.481232][T11752] EXT4-fs (loop3): 1 truncate cleaned up [ 363.486575][T11752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.538386][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.713915][T11752] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.2600: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 364.404437][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.531385][T11800] loop0: detected capacity change from 0 to 512 [ 364.629837][T11800] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.2620: corrupted in-inode xattr: invalid ea_ino [ 364.629878][T11800] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 364.642834][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 364.642859][ C0] EXT4-fs (loop0): initial error at time 1780308891: ext4_iget_extra_inode:5128: inode 15 [ 364.642885][ C0] EXT4-fs (loop0): last error at time 1780308891: ext4_iget_extra_inode:5128: inode 15 [ 364.653189][ T5728] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 364.758301][T11800] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2620: couldn't read orphan inode 15 (err -117) [ 364.758341][T11800] loop0: lost filesystem error report for type 5 error -117 [ 364.811501][T11800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.932182][ T5728] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 364.932215][ T5728] usb 3-1: config 0 has no interface number 1 [ 364.932294][ T5728] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 364.932320][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.078094][ T5728] usb 3-1: config 0 descriptor?? [ 365.117969][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.322734][ T5728] usb 3-1: Could not set interface, error -71 [ 365.409000][ T5728] usb 3-1: USB disconnect, device number 11 [ 365.541222][T11814] netlink: 'syz.0.2624': attribute type 1 has an invalid length. [ 366.058322][T11822] loop2: detected capacity change from 0 to 128 [ 366.087067][T11822] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 366.151565][T11822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.749251][T11830] loop0: detected capacity change from 0 to 512 [ 366.793067][T11830] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 367.025293][T11830] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2633: bg 0: block 104: invalid block bitmap [ 367.025327][T11830] loop0: lost filesystem error report for type 5 error -117 [ 367.037111][ C1] EXT4-fs (loop0): initial error at time 1780308893: ext4_validate_block_bitmap:432 [ 367.037218][ C1] EXT4-fs (loop0): last error at time 1780308893: ext4_validate_block_bitmap:432 [ 367.134700][T11830] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 367.134728][T11830] loop0: lost filesystem error report for type 5 error -117 [ 367.136180][T11830] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2633: invalid indirect mapped block 1 (level 1) [ 367.136285][T11830] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 367.235460][T11830] EXT4-fs (loop0): 1 truncate cleaned up [ 367.397458][ T5728] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 367.415438][T11837] loop2: detected capacity change from 0 to 4096 [ 367.425164][T11837] EXT4-fs: Ignoring removed orlov option [ 367.537470][T11837] EXT4-fs (loop2): Test dummy encryption mode enabled [ 367.602502][ T5728] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 367.636288][ T5728] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 367.636323][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.636345][ T5728] usb 4-1: Product: syz [ 367.636361][ T5728] usb 4-1: Manufacturer: syz [ 367.636378][ T5728] usb 4-1: SerialNumber: syz [ 367.819397][T11830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.856836][T11837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.961183][T11837] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2636: bg 0: block 328: padding at end of block bitmap is not set [ 368.204094][ T5728] usb 4-1: USB disconnect, device number 9 [ 368.252298][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.378744][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.803354][T11859] netlink: 'syz.2.2643': attribute type 1 has an invalid length. [ 369.007973][T11867] loop0: detected capacity change from 0 to 128 [ 369.209041][ T5800] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 369.373533][ T5800] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 369.373566][ T5800] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.373588][ T5800] usb 4-1: config 0 has no interface number 0 [ 369.401392][ T5800] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 369.401427][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.401449][ T5800] usb 4-1: Product: syz [ 369.401466][ T5800] usb 4-1: Manufacturer: syz [ 369.401482][ T5800] usb 4-1: SerialNumber: syz [ 369.444891][ T5800] usb 4-1: config 0 descriptor?? [ 369.743906][ T5800] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 369.765787][ T5800] usb 4-1: USB disconnect, device number 10 [ 370.593484][T11909] netlink: 'syz.4.2668': attribute type 1 has an invalid length. [ 370.609764][ T5800] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 370.771476][ T5800] usb 3-1: unable to get BOS descriptor or descriptor too short [ 370.773542][ T5800] usb 3-1: not running at top speed; connect to a high speed hub [ 370.783809][ T5800] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 370.783850][ T5800] usb 3-1: config 1 interface 0 has no altsetting 0 [ 370.809013][T11914] loop0: detected capacity change from 0 to 128 [ 370.837801][ T5800] usb 3-1: string descriptor 0 read error: -22 [ 370.847442][ T5800] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.847477][ T5800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.876407][T11899] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 370.897720][T11914] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 370.897779][T11914] hpfs: filesystem error: improperly stopped [ 370.897793][T11914] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 370.897807][T11914] hpfs: You really don't want any checks? You are crazy... [ 370.958658][ T5800] usb 3-1: No union descriptors [ 371.003428][T11914] hpfs: hpfs_map_sector(): read error [ 371.003445][T11914] hpfs: code page support is disabled [ 371.003744][T11914] hpfs: hpfs_map_4sectors(): unaligned read [ 371.003847][T11914] hpfs: hpfs_map_4sectors(): unaligned read [ 371.003877][T11914] hpfs: filesystem error: unable to find root dir [ 371.100522][ T5753] usb 3-1: USB disconnect, device number 12 [ 371.243572][T11914] hpfs: hpfs_map_4sectors(): unaligned read [ 371.246083][T11914] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 371.318111][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 371.468079][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 371.488045][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.488081][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.488124][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 371.488150][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.549539][ T10] usb 4-1: config 0 descriptor?? [ 371.566100][ T10] hub 4-1:0.0: USB hub found [ 371.798443][ T10] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 371.859083][ T10] usb 4-1: USB disconnect, device number 11 [ 372.326284][T11944] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2686'. [ 372.640289][T11951] netlink: 'syz.3.2688': attribute type 1 has an invalid length. [ 372.735510][T11957] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2690'. [ 372.735544][T11957] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2690'. [ 374.591839][T12006] pimreg3: entered allmulticast mode [ 374.764716][T12001] pimreg3: left allmulticast mode [ 375.249454][T12024] loop4: detected capacity change from 0 to 8192 [ 375.274835][ T38] audit: type=1326 audit(1780308901.710:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.4.2720" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f3f1cce59 code=0x0 [ 375.706409][T12033] netlink: 'syz.3.2725': attribute type 1 has an invalid length. [ 376.529783][T12029] loop2: detected capacity change from 0 to 32768 [ 376.569473][T12058] netlink: 'syz.0.2735': attribute type 1 has an invalid length. [ 376.919821][T12029] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 376.919848][T12029] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 377.039576][T12067] loop4: detected capacity change from 0 to 512 [ 377.082076][T12067] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2740: invalid indirect mapped block 256 (level 2) [ 377.082119][T12067] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 377.084382][T12067] EXT4-fs (loop4): 2 truncates cleaned up [ 377.117088][T12067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.584775][T12067] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2740: bg 0: block 5: invalid block bitmap [ 377.614459][T12029] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 377.731604][T12078] netlink: 'syz.0.2743': attribute type 1 has an invalid length. [ 377.761519][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 377.761539][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 377.798086][T12067] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 377.798126][T12067] EXT4-fs (loop4): This should not happen!! Data will be lost [ 377.798126][T12067] [ 377.798144][T12067] EXT4-fs (loop4): Total free blocks count 0 [ 377.798160][T12067] EXT4-fs (loop4): Free/Dirty block details [ 377.798208][T12067] EXT4-fs (loop4): free_blocks=0 [ 377.798409][T12067] EXT4-fs (loop4): dirty_blocks=66 [ 377.798432][T12067] EXT4-fs (loop4): Block reservation details [ 377.798447][T12067] EXT4-fs (loop4): i_reserved_data_blocks=66 [ 378.085658][ T1401] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 378.134556][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 373ms [ 378.193630][ T5614] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 378.249525][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.249645][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.364378][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 378.448129][T12029] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 378.477573][T12029] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 379.157075][ T5728] kernel read not supported for file /vcs (pid: 5728 comm: kworker/1:4) [ 379.218351][T12107] netlink: 'syz.3.2753': attribute type 1 has an invalid length. [ 379.793337][T12125] loop4: detected capacity change from 0 to 256 [ 379.846354][T12125] exFAT-fs (loop4): error, The cluster chain has a loop [ 379.846377][T12125] exFAT-fs (loop4): failed to count the number of clusters in root [ 379.846390][T12125] exFAT-fs (loop4): failed to recognize exfat type [ 380.939124][T12160] netlink: 'syz.3.2779': attribute type 1 has an invalid length. [ 381.605325][T12175] team0: No ports can be present during mode change [ 382.300193][T12191] loop4: detected capacity change from 0 to 64 [ 382.373453][T12191] MINIX-fs: mounting file system with errors, running fsck is recommended [ 382.428626][T12189] Trying to free block not in datazone [ 382.796758][T12201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.796777][T12201] IPv6: NLM_F_CREATE should be set when creating new route [ 382.796833][T12201] IPv6: NLM_F_CREATE should be set when creating new route [ 382.796865][T12201] IPv6: NLM_F_CREATE should be set when creating new route [ 382.842400][T12202] sctp: [Deprecated]: syz.0.2798 (pid 12202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.842400][T12202] Use struct sctp_sack_info instead [ 383.304925][T12219] loop4: detected capacity change from 0 to 256 [ 383.315206][T12219] exfat: Deprecated parameter 'namecase' [ 383.456185][T12219] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 383.548330][T12206] loop3: detected capacity change from 0 to 8192 [ 383.616086][T12206] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 383.959240][T12226] loop0: detected capacity change from 0 to 1024 [ 383.963453][T12226] EXT4-fs: Ignoring removed nomblk_io_submit option [ 384.004841][T12226] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 384.004976][T12226] System zones: 0-1, 3-36 [ 384.039382][T12226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.509227][T12248] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2817'. [ 384.621687][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.045946][T12260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2823'. [ 385.202099][T12270] loop3: detected capacity change from 0 to 256 [ 385.364324][T12270] FAT-fs (loop3): Directory bread(block 64) failed [ 385.364362][T12270] FAT-fs (loop3): Directory bread(block 65) failed [ 385.365001][T12270] FAT-fs (loop3): Directory bread(block 66) failed [ 385.365039][T12270] FAT-fs (loop3): Directory bread(block 67) failed [ 385.365405][T12270] FAT-fs (loop3): Directory bread(block 68) failed [ 385.365431][T12270] FAT-fs (loop3): Directory bread(block 69) failed [ 385.365613][T12270] FAT-fs (loop3): Directory bread(block 70) failed [ 385.365637][T12270] FAT-fs (loop3): Directory bread(block 71) failed [ 385.365721][T12270] FAT-fs (loop3): Directory bread(block 72) failed [ 385.365740][T12270] FAT-fs (loop3): Directory bread(block 73) failed [ 386.609948][T12301] loop3: detected capacity change from 0 to 2048 [ 386.720409][T12301] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.579893][T12323] mmap: syz.3.2849 (12323) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 387.776292][T12321] loop0: detected capacity change from 0 to 32768 [ 387.795389][T12321] (syz.0.2850,12321,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 387.796009][T12321] (syz.0.2850,12321,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 387.872660][T12321] JBD2: Ignoring recovery information on journal [ 388.074387][T12321] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 389.382535][ T5616] ocfs2: Unmounting device (7,0) on (node local) [ 390.262843][T12367] loop3: detected capacity change from 0 to 2048 [ 390.875801][T12375] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2870'. [ 390.900840][T12367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.233092][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.622079][T12393] netlink: 'syz.4.2876': attribute type 1 has an invalid length. [ 391.970320][T12406] loop0: detected capacity change from 0 to 128 [ 391.980395][T12406] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 392.009589][T12406] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 392.050664][T12409] loop2: detected capacity change from 0 to 256 [ 392.152989][T12409] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 393.111067][T12433] loop0: detected capacity change from 0 to 512 [ 393.157000][T12433] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 393.386558][T12433] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 393.460696][T12433] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2894: bg 0: block 248: padding at end of block bitmap is not set [ 393.460748][T12433] loop0: lost filesystem error report for type 5 error -117 [ 393.472610][ C0] EXT4-fs (loop0): last error at time 1780308919: ext4_validate_block_bitmap:441 [ 393.535069][T12433] Quota error (device loop0): write_blk: dquota write failed [ 393.535147][T12433] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 393.535197][T12433] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2894: Failed to acquire dquot type 1 [ 393.535215][T12433] loop0: lost filesystem error report for type 5 error -28 [ 393.982945][T12433] EXT4-fs (loop0): 1 truncate cleaned up [ 394.019092][T12433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 394.368657][T12433] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 394.368725][T12433] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 131074 [ 394.368749][T12433] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2894: Failed to acquire dquot type 1 [ 394.469010][T12451] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2901'. [ 394.591669][T12455] loop2: detected capacity change from 0 to 256 [ 394.615021][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 394.691986][T12455] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 394.920172][T12463] netlink: 'syz.2.2909': attribute type 2 has an invalid length. [ 395.312160][T12473] loop2: detected capacity change from 0 to 2048 [ 395.345461][T12476] netlink: 'syz.0.2905': attribute type 1 has an invalid length. [ 395.400951][T12473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.401018][T12478] netlink: 604 bytes leftover after parsing attributes in process `syz.3.2914'. [ 395.401125][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2914'. [ 395.796342][T12481] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 395.906446][ T38] audit: type=1800 audit(1780308922.231:39): pid=12473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2911" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 396.139043][T12492] Attempt to restore checkpoint with obsolete wellknown handles [ 396.306659][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.385408][T12496] loop4: detected capacity change from 0 to 512 [ 396.474860][T12496] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 396.474981][T12496] System zones: 0-2, 18-18, 34-35 [ 396.521783][T12496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.523659][T12504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2924'. [ 396.526589][T12496] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.699383][T12509] loop3: detected capacity change from 0 to 512 [ 396.725923][T12509] EXT4-fs (loop3): Test dummy encryption mode enabled [ 396.771564][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.797204][T12509] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2926: inode has both inline data and extents flags [ 396.797240][T12509] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 396.797633][T12509] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2926: couldn't read orphan inode 15 (err -117) [ 396.797661][T12509] loop3: lost filesystem error report for type 5 error -117 [ 396.802043][T12509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.966665][T12509] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 397.413553][T12527] netlink: 'syz.2.2930': attribute type 1 has an invalid length. [ 397.804602][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.901392][ T32] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 398.938143][ T821] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 399.048178][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 399.050475][ T32] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 399.050506][ T32] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 399.050529][ T32] usb 3-1: config 0 has no interface number 0 [ 399.050576][ T32] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 399.050604][ T32] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 399.081178][ T32] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 399.081254][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.081303][ T32] usb 3-1: Product: syz [ 399.081346][ T32] usb 3-1: Manufacturer: syz [ 399.081395][ T32] usb 3-1: SerialNumber: syz [ 399.166317][ T821] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.166365][ T821] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.166383][ T821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 399.166408][ T821] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 399.166426][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.230204][ T821] usb 4-1: config 0 descriptor?? [ 399.277963][ T32] usb 3-1: config 0 descriptor?? [ 399.279061][T12556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 399.279242][T12556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 399.512500][T12556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 399.512638][T12556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 399.540617][T12574] netlink: 'syz.0.2955': attribute type 1 has an invalid length. [ 399.682816][T12578] loop0: detected capacity change from 0 to 4096 [ 399.720287][T12578] NILFS (loop0): invalid segment: Checksum error in segment payload [ 399.720318][T12578] NILFS (loop0): trying rollback from an earlier position [ 399.795721][ T821] hid_parser_main: 47 callbacks suppressed [ 399.795759][ T821] aureal 0003:0755:2626.0013: unknown main item tag 0x0 [ 399.804229][ T821] aureal 0003:0755:2626.0013: unknown main item tag 0x0 [ 399.804264][ T821] aureal 0003:0755:2626.0013: unknown main item tag 0x0 [ 399.804295][ T821] aureal 0003:0755:2626.0013: unknown main item tag 0x0 [ 399.804544][ T821] aureal 0003:0755:2626.0013: unknown main item tag 0x0 [ 399.804573][ T821] aureal 0003:0755:2626.0013: unknown main item tag 0x0 [ 399.804599][ T821] aureal 0003:0755:2626.0013: unknown main item tag 0x0 [ 399.804625][ T821] aureal 0003:0755:2626.0013: unknown main item tag 0x0 [ 399.804888][ T821] aureal 0003:0755:2626.0013: unknown main item tag 0x0 [ 399.804927][ T821] aureal 0003:0755:2626.0013: unknown main item tag 0x0 [ 399.931660][ T32] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 399.931898][ T32] asix 3-1:0.251: probe with driver asix failed with error -524 [ 400.019982][T12578] NILFS (loop0): recovery complete [ 400.045069][ T821] aureal 0003:0755:2626.0013: hidraw0: USB HID v0.0c Device [HID 0755:2626] on usb-dummy_hcd.3-1/input0 [ 400.169956][ T32] usb 3-1: USB disconnect, device number 13 [ 400.200557][T12582] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 400.235486][ T821] usb 4-1: USB disconnect, device number 12 [ 400.911590][T12594] netlink: 'syz.3.2963': attribute type 1 has an invalid length. [ 400.930029][T12566] loop4: detected capacity change from 0 to 32768 [ 400.936162][T12566] btrfs: Deprecated parameter 'usebackuproot' [ 400.936188][T12566] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 400.966220][T12595] loop2: detected capacity change from 0 to 256 [ 400.975756][T12595] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 401.021403][T12595] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 401.261489][T12566] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2951 (12566) [ 401.289247][T12600] netlink: 'syz.0.2961': attribute type 1 has an invalid length. [ 401.386547][T12566] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 401.388104][T12566] BTRFS info (device loop4): using crc32c checksum algorithm [ 401.946849][T12627] binder: 12623:12627 ioctl 4018620d 0 returned -22 [ 402.038353][ T44] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 402.063384][T12566] BTRFS error (device loop4): failed to load root extent [ 402.063493][T12566] BTRFS warning (device loop4): try to load backup roots slot 1 [ 402.064436][ T12] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 402.065598][T12566] BTRFS warning (device loop4): couldn't read tree root [ 402.065621][T12566] BTRFS warning (device loop4): try to load backup roots slot 2 [ 402.087539][ T12] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 402.127739][T12566] BTRFS warning (device loop4): couldn't read tree root [ 402.127824][T12566] BTRFS warning (device loop4): try to load backup roots slot 3 [ 402.137687][ T32] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 402.326893][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 402.329440][ T32] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92 [ 402.329475][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.653769][ T32] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 403.092652][T12566] BTRFS error (device loop4): open_ctree failed: -4 [ 403.253379][ T38] audit: type=1326 audit(1780308929.661:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534b8dce59 code=0x7ffc0000 [ 403.253444][ T38] audit: type=1326 audit(1780308929.691:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534b8dce59 code=0x7ffc0000 [ 403.408730][ T32] gspca_nw80x: reg_r err -71 [ 403.408953][ T32] nw80x 4-1:16.0: probe with driver nw80x failed with error -71 [ 403.433368][ T32] usb 4-1: USB disconnect, device number 13 [ 403.502288][T12653] netlink: 'syz.0.2984': attribute type 1 has an invalid length. [ 403.583235][ T38] audit: type=1326 audit(1780308929.841:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f534b8dcaeb code=0x7ffc0000 [ 403.583911][ T38] audit: type=1326 audit(1780308930.021:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f534b8dcaeb code=0x7ffc0000 [ 403.583957][ T38] audit: type=1326 audit(1780308930.021:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f534b8dcaeb code=0x7ffc0000 [ 403.762082][ T38] audit: type=1326 audit(1780308930.201:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f534b8dcaeb code=0x7ffc0000 [ 403.830929][ T5714] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 403.831755][ T38] audit: type=1326 audit(1780308930.271:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f534b8dcaeb code=0x7ffc0000 [ 403.833079][ T38] audit: type=1326 audit(1780308930.271:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f534b8dcaeb code=0x7ffc0000 [ 403.833120][ T38] audit: type=1326 audit(1780308930.271:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f534b8dcaeb code=0x7ffc0000 [ 403.899008][ T38] audit: type=1326 audit(1780308930.341:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.2981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f534b8dcaeb code=0x7ffc0000 [ 404.200929][ T5714] usb 3-1: unable to get BOS descriptor or descriptor too short [ 404.219094][ T5714] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.219385][ T5714] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 404.335958][ T5714] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 404.335993][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.336015][ T5714] usb 3-1: Product: syz [ 404.336032][ T5714] usb 3-1: Manufacturer: syz [ 404.336048][ T5714] usb 3-1: SerialNumber: syz [ 404.785678][ T5714] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 404.934586][ T5714] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 404.934759][ T5714] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 404.935082][ T5714] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 404.935105][ T5714] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 405.455927][T12682] loop0: detected capacity change from 0 to 128 [ 405.636494][T12688] loop2: detected capacity change from 0 to 512 [ 405.827828][T12688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.217834][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.422135][T12665] loop4: detected capacity change from 0 to 32768 [ 406.611036][T12665] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 406.851268][T12707] loop3: detected capacity change from 0 to 4096 [ 406.909402][T12665] XFS (loop4): Ending clean mount [ 407.241299][T12722] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 408.067886][T12740] loop2: detected capacity change from 0 to 1024 [ 408.182426][ T5714] usb 3-1: USB disconnect, device number 14 [ 408.830673][T12757] netlink: 'syz.0.3025': attribute type 1 has an invalid length. [ 408.968579][ T5614] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 409.816496][T12773] loop2: detected capacity change from 0 to 2048 [ 410.171005][T12778] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 410.654522][T12778] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 410.654563][T12778] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 410.685589][T12778] Remounting filesystem read-only [ 410.960700][ T5617] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 411.402985][T12806] sctp: [Deprecated]: syz.2.3044 (pid 12806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.402985][T12806] Use struct sctp_sack_info instead [ 411.470597][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.864683][T12816] loop4: detected capacity change from 0 to 512 [ 411.901033][T12816] EXT4-fs (loop4): Test dummy encryption mode enabled [ 411.905533][T12816] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3050: inode has both inline data and extents flags [ 411.905572][T12816] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 411.905911][T12816] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3050: couldn't read orphan inode 15 (err -117) [ 411.905948][T12816] loop4: lost filesystem error report for type 5 error -117 [ 412.033086][T12816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.219177][T12826] loop2: detected capacity change from 0 to 64 [ 412.430243][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.684621][T12835] loop4: detected capacity change from 0 to 2048 [ 412.725005][T12835] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 413.089007][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 413.154125][T12847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3064'. [ 413.154160][T12847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3064'. [ 413.154177][T12847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3064'. [ 413.244383][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.244416][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.306496][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 413.307208][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 413.307235][ T10] usb 5-1: SerialNumber: syz [ 413.669519][ T10] usb 5-1: 0:2 : does not exist [ 413.750880][T12862] netlink: 24598 bytes leftover after parsing attributes in process `syz.2.3070'. [ 414.464776][ T10] usb 5-1: USB disconnect, device number 21 [ 414.887492][T12655] udevd[12655]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.670030][T12913] loop4: detected capacity change from 0 to 32768 [ 415.688211][T12913] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3094 (12913) [ 415.688667][T12913] BTRFS error: failed to open device for path /dev/loop4 with flags 0x23: -16 [ 416.638009][ T5620] block nbd0: Receive control failed (result -32) [ 416.963743][ T2187] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 417.124058][ T2187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 417.124100][ T2187] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.124146][ T2187] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 417.124173][ T2187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.191000][ T2187] usb 3-1: config 0 descriptor?? [ 417.790805][ T2187] hid_parser_main: 64 callbacks suppressed [ 417.790832][ T2187] razer 0003:1532:010D.0014: unknown main item tag 0x0 [ 417.790865][ T2187] razer 0003:1532:010D.0014: unknown main item tag 0x0 [ 417.790893][ T2187] razer 0003:1532:010D.0014: unknown main item tag 0x0 [ 417.790930][ T2187] razer 0003:1532:010D.0014: unknown main item tag 0x0 [ 417.790959][ T2187] razer 0003:1532:010D.0014: unknown main item tag 0x0 [ 417.790985][ T2187] razer 0003:1532:010D.0014: unknown main item tag 0x0 [ 417.791012][ T2187] razer 0003:1532:010D.0014: unknown main item tag 0x0 [ 417.791040][ T2187] razer 0003:1532:010D.0014: unknown main item tag 0x0 [ 417.791069][ T2187] razer 0003:1532:010D.0014: unknown main item tag 0x0 [ 417.791097][ T2187] razer 0003:1532:010D.0014: unknown main item tag 0x0 [ 418.106015][ T2187] razer 0003:1532:010D.0014: hidraw0: USB HID v0.06 Device [HID 1532:010d] on usb-dummy_hcd.2-1/input0 [ 418.127518][ T2187] usb 3-1: USB disconnect, device number 15 [ 418.235399][T12926] block device autoloading is deprecated and will be removed. [ 418.364191][T12961] fido_id[12961]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 418.732731][T12971] loop0: detected capacity change from 0 to 256 [ 418.733667][ T10] kernel write not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 418.828460][T12971] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 418.960555][T12979] loop3: detected capacity change from 0 to 256 [ 419.189220][T12975] loop2: detected capacity change from 0 to 4096 [ 419.205203][T12975] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 419.345880][T12975] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 419.348333][T12975] ntfs3(loop2): ino=1a, mi_enum_attr [ 419.348946][T12975] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 419.463571][T12993] netlink: 'syz.0.3125': attribute type 1 has an invalid length. [ 419.588911][T12995] loop3: detected capacity change from 0 to 512 [ 419.683999][T12995] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 419.802369][T12995] EXT4-fs error (device loop3): ext4_quota_enable:7221: comm syz.3.3129: Bad quota inum: 2, type: 1 [ 419.804488][T12995] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 420.007034][T13009] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 420.033308][T13009] EXT4-fs error (device loop3): ext4_quota_enable:7221: comm syz.3.3129: Bad quota inum: 2, type: 1 [ 420.062749][T13009] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 420.646716][ T5714] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 420.693177][ T5618] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 420.856774][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 420.858743][ T5714] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 420.858786][ T5714] usb 3-1: config 0 interface 0 has no altsetting 0 [ 420.858812][ T5714] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 420.858830][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.864297][ T5714] usb 3-1: config 0 descriptor?? [ 420.879801][ T2187] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 421.076925][ T2187] usb 5-1: Using ep0 maxpacket: 16 [ 421.094867][ T2187] usb 5-1: unable to get BOS descriptor or descriptor too short [ 421.112742][ T2187] usb 5-1: config 5 has an invalid interface number: 68 but max is 0 [ 421.112777][ T2187] usb 5-1: config 5 has no interface number 0 [ 421.112814][ T2187] usb 5-1: config 5 interface 68 has no altsetting 0 [ 421.120303][ T2187] usb 5-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice=53.c0 [ 421.120338][ T2187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.120360][ T2187] usb 5-1: Product: syz [ 421.120376][ T2187] usb 5-1: Manufacturer: syz [ 421.120392][ T2187] usb 5-1: SerialNumber: syz [ 421.555583][ T2187] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.68/input/input8 [ 421.743951][ T5714] usbhid 3-1:0.0: can't add hid device: -71 [ 421.744074][ T5714] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 421.750549][ T5714] usb 3-1: USB disconnect, device number 16 [ 421.985070][ T4959] bcm5974 5-1:5.68: could not read from device [ 422.104239][ T2187] usb 5-1: USB disconnect, device number 22 [ 422.181103][ T4959] bcm5974 5-1:5.68: could not read from device [ 423.023345][T13063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3159'. [ 423.057459][T13068] tap0: tun_chr_ioctl cmd 1074025677 [ 423.057753][T13068] tap0: linktype set to 805 [ 423.235653][T13074] loop3: detected capacity change from 0 to 256 [ 423.244955][T13074] exfat: Deprecated parameter 'utf8' [ 423.245007][T13074] exfat: Deprecated parameter 'utf8' [ 423.245048][T13074] exfat: Deprecated parameter 'utf8' [ 423.363444][T13074] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 424.527169][T13117] netlink: 'syz.2.3182': attribute type 1 has an invalid length. [ 425.660764][T13159] loop2: detected capacity change from 0 to 8 [ 425.886777][ T32] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 425.991725][T13171] netlink: 'syz.0.3207': attribute type 1 has an invalid length. [ 426.061191][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 426.063471][ T32] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.063508][ T32] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.063533][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 426.063570][ T32] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 426.063612][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.231574][ T32] usb 4-1: config 0 descriptor?? [ 426.788037][ T32] hid (null): invalid report_size 37131 [ 427.064466][ T32] usb 4-1: USB disconnect, device number 14 [ 427.545398][T13196] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.904705][T13206] netlink: 'syz.0.3223': attribute type 1 has an invalid length. [ 427.997895][ T38] kauditd_printk_skb: 38 callbacks suppressed [ 427.997917][ T38] audit: type=1326 audit(1780308954.441:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.3226" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3f1cce59 code=0x7ffc0000 [ 427.998315][ T38] audit: type=1326 audit(1780308954.441:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.3226" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3f1cce59 code=0x7ffc0000 [ 428.073991][ T38] audit: type=1326 audit(1780308954.511:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.3226" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f3f1cce59 code=0x7ffc0000 [ 428.089649][ T38] audit: type=1326 audit(1780308954.531:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.3226" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3f1cce59 code=0x7ffc0000 [ 428.103749][ T38] audit: type=1326 audit(1780308954.531:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.3226" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3f1cce59 code=0x7ffc0000 [ 428.109489][ T38] audit: type=1326 audit(1780308954.541:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.3226" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f6f3f1cce59 code=0x7ffc0000 [ 428.119515][ T38] audit: type=1326 audit(1780308954.551:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.3226" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3f1cce59 code=0x7ffc0000 [ 428.129270][ T38] audit: type=1326 audit(1780308954.561:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.3226" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3f1cce59 code=0x7ffc0000 [ 428.173660][ T38] audit: type=1326 audit(1780308954.591:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.3226" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6f3f1cce59 code=0x7ffc0000 [ 428.180538][ T38] audit: type=1326 audit(1780308954.621:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.3226" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3f1cce59 code=0x7ffc0000 [ 428.508552][T13216] netlink: 'syz.3.3227': attribute type 1 has an invalid length. [ 428.697001][ T5800] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 428.846719][ T5800] usb 3-1: Using ep0 maxpacket: 32 [ 428.853074][ T5800] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.853105][ T5800] usb 3-1: config 0 has no interface number 0 [ 428.887841][ T5800] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 428.887893][ T5800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.887916][ T5800] usb 3-1: Product: syz [ 428.887933][ T5800] usb 3-1: Manufacturer: syz [ 428.887949][ T5800] usb 3-1: SerialNumber: syz [ 428.946758][T13228] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3234'. [ 428.946848][ T5800] usb 3-1: config 0 descriptor?? [ 428.983327][ T5800] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 428.983431][ T5800] usb 3-1: selecting invalid altsetting 1 [ 428.983446][ T5800] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 429.061189][ T5800] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 429.061706][ T5800] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 429.061781][ T5800] usb 3-1: media controller created [ 429.102733][ T5800] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.287603][ T5800] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 430.287678][ T5800] zl10353_read_register: readreg error (reg=127, ret==-110) [ 430.519368][T13215] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 430.591684][ T5800] usb 3-1: USB disconnect, device number 17 [ 430.736399][T13243] loop4: detected capacity change from 0 to 32768 [ 430.805741][T13253] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 430.976091][T13243] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 430.976147][T13243] BTRFS info (device loop4): using crc32c checksum algorithm [ 431.172148][T13243] BTRFS info (device loop4): enabling ssd optimizations [ 431.172201][T13243] BTRFS info (device loop4): turning on flush-on-commit [ 431.172222][T13243] BTRFS info (device loop4): enabling free space tree [ 431.172395][T13243] BTRFS info (device loop4): force zlib compression, level 3 [ 431.172419][T13243] BTRFS info (device loop4): max_inline set to 4096 [ 431.894208][T13294] loop3: detected capacity change from 0 to 64 [ 432.210379][ T5614] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 434.718185][T13345] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3280'. [ 434.718209][T13345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3280'. [ 434.718224][T13345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3280'. [ 435.465138][T13363] loop2: detected capacity change from 0 to 256 [ 436.269609][T13386] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3298'. [ 437.568966][T13435] loop0: detected capacity change from 0 to 16 [ 437.609456][T13435] erofs (device loop0): invalid ishare xattr prefix id 0 [ 439.687051][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.687194][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.228647][T13476] loop2: detected capacity change from 0 to 40427 [ 440.333035][T13476] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 440.333066][T13476] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 440.424022][T13476] F2FS-fs (loop2): invalid crc value [ 440.470817][T13512] netlink: 'syz.3.3353': attribute type 11 has an invalid length. [ 440.470842][T13512] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3353'. [ 440.954214][T13476] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 441.285237][T13476] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 441.285276][T13476] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 442.005928][T13547] loop3: detected capacity change from 0 to 4096 [ 442.173012][T13547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.415612][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.277945][T13574] loop3: detected capacity change from 0 to 64 [ 444.025521][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3389'. [ 445.729451][T13621] loop4: detected capacity change from 0 to 256 [ 445.977887][T13621] FAT-fs (loop4): Directory bread(block 64) failed [ 445.977930][T13621] FAT-fs (loop4): Directory bread(block 65) failed [ 445.978043][T13621] FAT-fs (loop4): Directory bread(block 66) failed [ 445.978068][T13621] FAT-fs (loop4): Directory bread(block 67) failed [ 445.978171][T13621] FAT-fs (loop4): Directory bread(block 68) failed [ 445.978195][T13621] FAT-fs (loop4): Directory bread(block 69) failed [ 445.978300][T13621] FAT-fs (loop4): Directory bread(block 70) failed [ 445.978325][T13621] FAT-fs (loop4): Directory bread(block 71) failed [ 445.978446][T13621] FAT-fs (loop4): Directory bread(block 72) failed [ 445.978472][T13621] FAT-fs (loop4): Directory bread(block 73) failed [ 446.547640][T13619] loop3: detected capacity change from 0 to 32768 [ 446.737778][T13619] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 446.891188][T13639] loop4: detected capacity change from 0 to 256 [ 447.037476][T13639] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 449.393349][T13690] netlink: 'syz.0.3428': attribute type 1 has an invalid length. [ 449.593290][T13700] netlink: 'syz.4.3433': attribute type 1 has an invalid length. [ 449.860904][ T5618] ocfs2: Unmounting device (7,3) on (node local) [ 451.060668][T13741] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3452'. [ 452.437875][T13775] loop0: detected capacity change from 0 to 512 [ 452.783193][T13781] netlink: 'syz.3.3471': attribute type 3 has an invalid length. [ 452.783222][T13781] netlink: 'syz.3.3471': attribute type 1 has an invalid length. [ 452.783238][T13781] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3471'. [ 452.961881][T13783] loop0: detected capacity change from 0 to 256 [ 453.203115][T13791] loop2: detected capacity change from 0 to 64 [ 453.473969][T13783] FAT-fs (loop0): Directory bread(block 64) failed [ 453.474006][T13783] FAT-fs (loop0): Directory bread(block 65) failed [ 453.474108][T13783] FAT-fs (loop0): Directory bread(block 66) failed [ 453.474133][T13783] FAT-fs (loop0): Directory bread(block 67) failed [ 453.474233][T13783] FAT-fs (loop0): Directory bread(block 68) failed [ 453.474257][T13783] FAT-fs (loop0): Directory bread(block 69) failed [ 453.474359][T13783] FAT-fs (loop0): Directory bread(block 70) failed [ 453.474385][T13783] FAT-fs (loop0): Directory bread(block 71) failed [ 453.474516][T13783] FAT-fs (loop0): Directory bread(block 72) failed [ 453.474541][T13783] FAT-fs (loop0): Directory bread(block 73) failed [ 453.816412][T13803] loop4: detected capacity change from 0 to 2048 [ 453.981435][T13803] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.679534][T13813] loop0: detected capacity change from 0 to 512 [ 455.076940][T13813] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.3482: invalid block [ 455.076980][T13813] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 455.117810][ C0] EXT4-fs (loop0): initial error at time 1780308981: ext4_get_branch:178: inode 11: block 4294967295 [ 455.117847][ C0] EXT4-fs (loop0): last error at time 1780308981: ext4_get_branch:178: inode 11: block 4294967295 [ 455.275960][T13813] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3482: invalid indirect mapped block 4294967295 (level 1) [ 455.275993][T13813] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 455.416604][T13813] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3482: invalid indirect mapped block 4294967295 (level 1) [ 455.416655][T13813] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 455.429592][T13813] EXT4-fs (loop0): 2 truncates cleaned up [ 455.488230][T13813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.526080][T13813] EXT4-fs (loop0): shut down requested (0) [ 455.621561][T13826] netlink: 'syz.2.3487': attribute type 1 has an invalid length. [ 455.785916][T13831] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 456.083285][T13840] loop3: detected capacity change from 0 to 2048 [ 456.113408][T13840] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 456.126592][ T821] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 456.303045][T13843] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 456.336641][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 456.340279][ T821] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.340317][ T821] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.340342][ T821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 456.340378][ T821] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 456.340404][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.424546][ T821] usb 5-1: config 0 descriptor?? [ 456.894210][ T821] hid (null): global environment stack underflow [ 456.894257][ T821] hid (null): unknown global tag 0xde [ 456.894308][ T821] hid (null): unknown global tag 0xe [ 456.894325][ T821] hid (null): report_id 0 is invalid [ 456.894341][ T821] hid (null): unknown global tag 0xc [ 456.926989][ T821] hid (null): report_id 0 is invalid [ 457.092584][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.115089][ T5800] usb 5-1: USB disconnect, device number 23 [ 457.180151][ T5930] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 457.355645][ T5930] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 457.355679][ T5930] usb 3-1: config 0 has no interface number 0 [ 457.355730][ T5930] usb 3-1: config 0 interface 41 has no altsetting 0 [ 457.477552][ T5930] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 457.477590][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.477604][ T5930] usb 3-1: Product: syz [ 457.477615][ T5930] usb 3-1: Manufacturer: syz [ 457.477626][ T5930] usb 3-1: SerialNumber: syz [ 457.481494][ T5930] usb 3-1: config 0 descriptor?? [ 457.561031][T13855] ip6tnl2: entered allmulticast mode [ 457.695547][T13859] loop3: detected capacity change from 0 to 128 [ 457.879641][T13859] syz.3.3500: attempt to access beyond end of device [ 457.879641][T13859] loop3: rw=2051, sector=104, nr_sectors = 25 limit=128 [ 458.194896][T13868] netlink: 'syz.0.3509': attribute type 1 has an invalid length. [ 458.377617][ T5930] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 458.378491][ T5930] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 458.439332][ T5930] usb 3-1: USB disconnect, device number 18 [ 458.473299][T13877] netlink: 'syz.3.3510': attribute type 4 has an invalid length. [ 459.233701][T13893] loop4: detected capacity change from 0 to 1024 [ 459.470723][ T5620] Bluetooth: unknown link type 61 [ 459.470793][ T5620] Bluetooth: hci3: connection err: -111 [ 459.844033][T13898] hfsplus: cannot replace xattr [ 460.042104][T13916] loop3: detected capacity change from 0 to 256 [ 460.043486][T13916] exfat: Deprecated parameter 'namecase' [ 460.150775][T13916] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 460.262336][T13920] loop2: detected capacity change from 0 to 512 [ 460.309073][T13920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 460.453107][T13920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.453257][T13920] ext4 filesystem being mounted at /477/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 460.938989][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.046981][ T821] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 461.208321][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 461.228856][ T821] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 461.228893][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.228931][ T821] usb 5-1: Product: syz [ 461.228947][ T821] usb 5-1: Manufacturer: syz [ 461.228963][ T821] usb 5-1: SerialNumber: syz [ 461.236082][ T821] usb 5-1: config 0 descriptor?? [ 461.288064][ T821] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 461.582226][T13952] loop2: detected capacity change from 0 to 8 [ 461.583356][T13952] squashfs: Unknown parameter '4' [ 461.876844][ T821] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 461.933416][ T821] usb 5-1: USB disconnect, device number 24 [ 462.421652][T13967] loop3: detected capacity change from 0 to 16 [ 462.476565][T13967] erofs (device loop3): mounted with root inode @ nid 36. [ 462.822217][ T32] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 462.990357][ T32] usb 3-1: config 0 has an invalid interface number: 37 but max is 1 [ 462.990417][ T32] usb 3-1: config 0 has an invalid interface number: 255 but max is 1 [ 462.990441][ T32] usb 3-1: config 0 has no interface number 0 [ 462.990459][ T32] usb 3-1: config 0 has no interface number 1 [ 462.990506][ T32] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 462.990550][ T32] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 462.990581][ T32] usb 3-1: config 0 interface 255 has no altsetting 0 [ 463.059283][ T32] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 463.059313][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.059338][ T32] usb 3-1: Product: syz [ 463.059350][ T32] usb 3-1: Manufacturer: syz [ 463.059363][ T32] usb 3-1: SerialNumber: syz [ 463.064181][ T32] usb 3-1: config 0 descriptor?? [ 463.200030][T13983] loop3: detected capacity change from 0 to 128 [ 463.208502][T13983] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 463.208676][T13983] hpfs: filesystem error: improperly stopped [ 463.208693][T13983] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 463.208750][T13983] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 463.208788][T13983] hpfs: You really don't want any checks? You are crazy... [ 463.228298][T13983] hpfs: hpfs_map_sector(): read error [ 463.228345][T13983] hpfs: code page support is disabled [ 463.384459][ T5800] usb 3-1: USB disconnect, device number 19 [ 463.522935][T13983] hpfs: hpfs_map_4sectors(): unaligned read [ 463.523050][T13983] hpfs: hpfs_map_4sectors(): unaligned read [ 463.523063][T13983] hpfs: filesystem error: unable to find root dir [ 463.613057][T13951] loop0: detected capacity change from 0 to 32768 [ 464.443735][T13951] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong [ 464.443735][T13951] [ 464.746870][ T2187] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 464.752436][T13951] ERROR: (device loop0): remounting filesystem as read-only [ 464.787043][T13996] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong [ 464.787043][T13996] [ 464.787174][T13996] ialloc: diAlloc returned -5! [ 464.856688][T13951] ialloc: diAlloc returned -5! [ 464.896971][ T2187] usb 3-1: Using ep0 maxpacket: 32 [ 464.899054][ T2187] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 464.899081][ T2187] usb 3-1: config 0 has no interface number 0 [ 464.899118][ T2187] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.899150][ T2187] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.899186][ T2187] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 464.899225][ T2187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.982161][ T2187] usb 3-1: config 0 descriptor?? [ 465.648151][ T2187] uclogic 0003:28BD:0094.0017: pen parameters not found [ 465.648222][ T2187] uclogic 0003:28BD:0094.0017: interface is invalid, ignoring [ 465.741023][ T2187] usb 3-1: USB disconnect, device number 20 [ 466.411359][T14040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3587'. [ 466.694402][T14040] ipvlan2: entered allmulticast mode [ 466.694427][T14040] syz_tun: entered allmulticast mode [ 467.400886][T14066] netlink: 'syz.2.3596': attribute type 1 has an invalid length. [ 467.564905][T14072] loop4: detected capacity change from 0 to 1024 [ 467.566311][T14072] EXT4-fs: Ignoring removed mblk_io_submit option [ 467.566379][T14072] EXT4-fs: Ignoring removed oldalloc option [ 467.590306][T14072] EXT4-fs: Ignoring removed nomblk_io_submit option [ 467.881662][T14072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.003382][T14077] loop3: detected capacity change from 0 to 4096 [ 468.108264][T14077] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 468.325758][T14077] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 468.603691][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.478017][T14104] netlink: 'syz.4.3615': attribute type 1 has an invalid length. [ 470.245976][T14077] overlayfs: upper fs does not support tmpfile. [ 470.562200][ T32] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 470.598361][T14077] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 470.661824][T14131] loop4: detected capacity change from 0 to 128 [ 470.709055][ T32] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 470.709093][ T32] usb 3-1: config 0 interface 0 has no altsetting 0 [ 470.709139][ T32] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 470.709165][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.716932][T14131] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 470.717071][T14131] hpfs: filesystem error: improperly stopped [ 470.717115][T14131] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 470.717158][T14131] hpfs: You really don't want any checks? You are crazy... [ 470.800518][ T32] usb 3-1: config 0 descriptor?? [ 470.909525][T14131] hpfs: hpfs_map_sector(): read error [ 470.909544][T14131] hpfs: code page support is disabled [ 470.909658][T14131] hpfs: hpfs_map_4sectors(): unaligned read [ 470.909739][T14131] hpfs: hpfs_map_4sectors(): unaligned read [ 470.909748][T14131] hpfs: filesystem error: unable to find root dir [ 471.325410][ T32] hid_parser_main: 222 callbacks suppressed [ 471.325437][ T32] hid-generic 0003:0EEF:0001.0018: unknown main item tag 0x7 [ 471.325474][ T32] hid-generic 0003:0EEF:0001.0018: unknown main item tag 0x0 [ 471.325634][ T32] hid-generic 0003:0EEF:0001.0018: unknown main item tag 0x1 [ 471.325664][ T32] hid-generic 0003:0EEF:0001.0018: reserved main item tag 0xd [ 471.325692][ T32] hid-generic 0003:0EEF:0001.0018: item fetching failed at offset 38/39 [ 471.374902][ T32] hid-generic 0003:0EEF:0001.0018: probe with driver hid-generic failed with error -22 [ 471.520145][ T5753] usb 3-1: USB disconnect, device number 21 [ 473.513181][T14186] netlink: 'syz.2.3654': attribute type 1 has an invalid length. [ 474.465531][T14213] loop4: detected capacity change from 0 to 2048 [ 474.477227][T14213] udf: Bad value for 'volume' [ 475.693656][ T5753] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 475.840003][ T5753] usb 5-1: Using ep0 maxpacket: 32 [ 475.844846][ T5753] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 475.844880][ T5753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.879815][ T5753] usb 5-1: config 0 descriptor?? [ 475.908507][ T5753] gspca_main: sq930x-2.14.0 probing 041e:403c [ 476.756566][ T5753] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 476.756732][ T32] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 476.818834][ T5753] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 476.869879][ T5753] usb 5-1: USB disconnect, device number 25 [ 476.966975][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 476.971377][ T32] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 476.971452][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.971508][ T32] usb 3-1: config 0 has no interface number 0 [ 477.006790][ T32] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 477.006827][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.006842][ T32] usb 3-1: Product: syz [ 477.006853][ T32] usb 3-1: Manufacturer: syz [ 477.006864][ T32] usb 3-1: SerialNumber: syz [ 477.056015][ T32] usb 3-1: config 0 descriptor?? [ 477.083159][T14277] loop0: detected capacity change from 0 to 256 [ 477.084500][T14277] exfat: Deprecated parameter 'namecase' [ 477.131563][T14255] loop3: detected capacity change from 0 to 32768 [ 477.132848][T14277] exFAT-fs (loop0): error, invalid access to FAT bad cluster (entry 0x00000005) [ 477.132873][T14277] exFAT-fs (loop0): failed to count the number of clusters in root [ 477.132887][T14277] exFAT-fs (loop0): failed to recognize exfat type [ 477.170243][T14255] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3689 (14255) [ 477.215938][ T32] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 477.215998][ T32] uvcvideo 3-1:0.31: No valid video chain found. [ 477.306333][ T32] usb 3-1: USB disconnect, device number 22 [ 477.362941][T14255] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 477.362981][T14255] BTRFS info (device loop3): using sha256 checksum algorithm [ 477.429266][T14277] loop0: detected capacity change from 0 to 1024 [ 477.542861][T14277] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 0 [ 477.662998][T14255] BTRFS info (device loop3): enabling ssd optimizations [ 477.663035][T14255] BTRFS info (device loop3): turning on async discard [ 477.663054][T14255] BTRFS info (device loop3): enabling free space tree [ 477.663076][T14255] BTRFS info (device loop3): enabling auto defrag [ 477.663103][T14255] BTRFS info (device loop3): max_inline set to 4096 [ 477.919260][T14255] BTRFS info (device loop3 state M): max_inline set to 4096 [ 478.159400][ T5618] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 478.455354][T14318] program syz.4.3710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.623339][T14348] loop2: detected capacity change from 0 to 512 [ 479.748011][T14348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.151016][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.324176][T14394] netlink: 'syz.0.3741': attribute type 1 has an invalid length. [ 482.012133][T14412] Context (ID=0x4d8) not attached to queue pair (handle=0x4d8:0x6) [ 482.843305][T14420] loop3: detected capacity change from 0 to 32768 [ 482.844676][T14420] btrfs: Deprecated parameter 'usebackuproot' [ 482.844699][T14420] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 482.879814][T14420] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3755 (14420) [ 482.966956][T14420] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 482.966994][T14420] BTRFS info (device loop3): using crc32c checksum algorithm [ 483.227928][T14434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.235223][ T2269] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 483.235476][T14420] BTRFS error (device loop3): failed to load root extent [ 483.410280][T14420] BTRFS warning (device loop3): try to load backup roots slot 1 [ 483.410696][ T2269] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 483.410855][T14420] BTRFS warning (device loop3): couldn't read tree root [ 483.410878][T14420] BTRFS warning (device loop3): try to load backup roots slot 2 [ 483.411195][ T2269] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 483.411332][T14420] BTRFS warning (device loop3): couldn't read tree root [ 483.411354][T14420] BTRFS warning (device loop3): try to load backup roots slot 3 [ 483.584789][T14420] BTRFS info (device loop3): rebuilding free space tree [ 484.162984][T14465] loop4: detected capacity change from 0 to 256 [ 484.619195][T14420] BTRFS info (device loop3): checking UUID tree [ 484.628893][T14420] BTRFS info (device loop3): enabling ssd optimizations [ 484.628976][T14420] BTRFS info (device loop3): turning on async discard [ 484.629023][T14420] BTRFS info (device loop3): enabling free space tree [ 484.629070][T14420] BTRFS info (device loop3): force clearing of disk cache [ 484.629089][T14420] BTRFS info (device loop3): enabling auto defrag [ 484.629134][T14420] BTRFS info (device loop3): trying to use backup root at mount time [ 484.629194][T14420] BTRFS info (device loop3): use zstd compression, level 3 [ 484.917559][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 484.917580][ T38] audit: type=1800 audit(1780309011.361:99): pid=14420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3755" name="bus" dev="loop3" ino=257 res=0 errno=0 [ 485.109800][T14483] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3774'. [ 485.390925][T14491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3780'. [ 486.650358][T14488] loop4: detected capacity change from 0 to 32768 [ 486.832552][T14488] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 488.709927][T14488] XFS (loop4): Ending clean mount [ 488.974515][ T5614] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 489.661155][T14556] sctp: [Deprecated]: syz.2.3810 (pid 14556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.661155][T14556] Use struct sctp_sack_info instead [ 490.083802][T14567] loop0: detected capacity change from 0 to 512 [ 490.096176][T14567] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 490.231982][ T5753] kernel read not supported for file /vcs (pid: 5753 comm: kworker/0:5) [ 490.240494][T14567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 490.240658][T14567] System zones: 1-12 [ 490.310754][T14567] EXT4-fs (loop0): 1 truncate cleaned up [ 490.323760][T14567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.805040][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.473910][T14600] loop2: detected capacity change from 0 to 256 [ 491.587457][ T5618] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 494.495188][T14637] loop2: detected capacity change from 0 to 32768 [ 494.633109][T14637] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 494.776219][T14637] XFS (loop2): Ending clean mount [ 494.839236][T14682] loop3: detected capacity change from 0 to 2048 [ 494.863738][T14682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 495.317213][ T5617] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 495.510800][T14694] loop0: detected capacity change from 0 to 512 [ 495.634515][T14694] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.3870: Invalid inode bitmap blk 4 in block_group 0 [ 495.634555][T14694] loop0: lost filesystem error report for type 5 error -117 [ 495.659115][T14694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.849435][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.212835][T14708] loop3: detected capacity change from 0 to 64 [ 496.380246][T14686] loop4: detected capacity change from 0 to 40427 [ 496.562874][T14686] F2FS-fs (loop4): Invalid log blocks per segment (1) [ 496.562901][T14686] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 496.564574][T14686] F2FS-fs (loop4): Image doesn't support compression [ 496.564596][T14686] F2FS-fs (loop4): build fault injection rate: 690 [ 496.564613][T14686] F2FS-fs (loop4): build fault injection type: 0x35f7 [ 496.786726][T14686] F2FS-fs (loop4): invalid crc value [ 497.249291][T14731] loop0: detected capacity change from 0 to 256 [ 497.250696][T14731] exfat: Deprecated parameter 'utf8' [ 497.254982][T14731] exfat: Deprecated parameter 'utf8' [ 497.255041][T14731] exfat: Deprecated parameter 'utf8' [ 497.391627][T14731] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 497.565673][T14686] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 497.928889][T14744] loop3: detected capacity change from 0 to 256 [ 497.982818][T14686] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 497.982872][T14686] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 497.982911][T14686] F2FS-fs (loop4): Start checkpoint disabled! [ 498.161024][T14751] netlink: 'syz.0.3889': attribute type 9 has an invalid length. [ 498.230283][T14749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3893'. [ 498.963417][T14686] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 500.766101][T14818] netlink: 'syz.4.3922': attribute type 1 has an invalid length. [ 501.114424][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.114550][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.576664][ T5613] Bluetooth: hci5: command 0x1003 tx timeout [ 501.637562][ T5620] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 502.238439][T14828] loop0: detected capacity change from 0 to 32768 [ 502.434466][T14828] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 502.614844][T14828] XFS (loop0): Ending clean mount [ 502.868412][T14840] loop4: detected capacity change from 0 to 40427 [ 502.910717][T14840] F2FS-fs (loop4): Invalid log blocks per segment (1) [ 502.910748][T14840] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 502.912177][T14840] F2FS-fs (loop4): invalid crc value [ 503.298771][ T5714] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 503.332901][T14828] XFS (loop0): Quotacheck needed: Please wait. [ 503.432880][T14866] loop3: detected capacity change from 0 to 1024 [ 503.434062][T14866] EXT4-fs: Ignoring removed mblk_io_submit option [ 503.434109][T14866] EXT4-fs: Ignoring removed oldalloc option [ 503.434178][T14866] EXT4-fs: Ignoring removed nomblk_io_submit option [ 503.467709][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 503.470015][ T5714] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 503.470046][ T5714] usb 3-1: config 0 has no interface number 0 [ 503.470098][ T5714] usb 3-1: config 0 interface 184 has no altsetting 0 [ 503.504402][ T5714] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 503.504438][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.504461][ T5714] usb 3-1: Product: syz [ 503.504478][ T5714] usb 3-1: Manufacturer: syz [ 503.504494][ T5714] usb 3-1: SerialNumber: syz [ 503.556900][ T5714] usb 3-1: config 0 descriptor?? [ 503.705954][T14866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.290406][T14840] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 504.400554][ T5714] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 504.400587][ T5714] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 504.468254][ T5714] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 504.468288][ T5714] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 504.468310][ T5714] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 504.468330][ T5714] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 504.468646][ T5714] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 504.531451][ T5714] usb 3-1: USB disconnect, device number 23 [ 504.772145][T14840] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 504.772181][T14840] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 504.957830][T14858] f2fs_ckpt-7:4: attempt to access beyond end of device [ 504.957830][T14858] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 504.986286][T14858] CPU: 1 UID: 0 PID: 14858 Comm: f2fs_ckpt-7:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 504.986320][T14858] Tainted: [L]=SOFTLOCKUP [ 504.986327][T14858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 504.986347][T14858] Call Trace: [ 504.986360][T14858] [ 504.986369][T14858] dump_stack_lvl+0xe8/0x150 [ 504.986407][T14858] f2fs_stop_checkpoint+0x3ef/0x5d0 [ 504.986444][T14858] f2fs_write_end_io+0x1274/0x1740 [ 504.986486][T14858] __submit_merged_bio+0x256/0x6a0 [ 504.986505][T14858] ? rcu_is_watching+0x15/0xb0 [ 504.986538][T14858] __submit_merged_write_cond+0x3c9/0x4e0 [ 504.986584][T14858] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 504.986634][T14858] f2fs_write_data_pages+0x287e/0x34f0 [ 504.986656][T14858] ? unwind_next_frame+0xa6/0x2550 [ 504.986683][T14858] ? lock_release+0x4b/0x3c0 [ 504.986735][T14858] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 504.986800][T14858] ? do_raw_spin_lock+0x12b/0x2f0 [ 504.986838][T14858] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 504.986875][T14858] ? lockdep_hardirqs_on+0x7a/0x110 [ 504.986893][T14858] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 504.986923][T14858] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 504.986947][T14858] ? reacquire_held_locks+0x104/0x190 [ 504.986974][T14858] ? rt_spin_lock+0x1e0/0x400 [ 504.987003][T14858] ? rt_spin_unlock+0x14f/0x200 [ 504.987031][T14858] ? rt_spin_unlock+0x160/0x200 [ 504.987088][T14858] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 504.987112][T14858] do_writepages+0x32e/0x550 [ 504.987135][T14858] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 504.987161][T14858] ? rt_spin_unlock+0x14f/0x200 [ 504.987194][T14858] filemap_fdatawrite+0x1ec/0x2f0 [ 504.987220][T14858] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 504.987241][T14858] ? __lock_acquire+0x6b5/0x2d10 [ 504.987293][T14858] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 504.987325][T14858] ? rt_spin_unlock+0x160/0x200 [ 504.987350][T14858] f2fs_sync_dirty_inodes+0x30e/0x830 [ 504.987387][T14858] f2fs_write_checkpoint+0x9ce/0x25a0 [ 504.987438][T14858] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 504.987499][T14858] ? rcu_is_watching+0x15/0xb0 [ 504.987534][T14858] __checkpoint_and_complete_reqs+0x135/0x480 [ 504.987581][T14858] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 504.987618][T14858] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 504.987643][T14858] ? rt_spin_unlock+0x14f/0x200 [ 504.987674][T14858] issue_checkpoint_thread+0xd6/0x280 [ 504.987702][T14858] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 504.987726][T14858] ? __pfx_autoremove_wake_function+0x10/0x10 [ 504.987749][T14858] ? __kthread_parkme+0x7a/0x1f0 [ 504.987776][T14858] kthread+0x388/0x470 [ 504.987798][T14858] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 504.987821][T14858] ? __pfx_kthread+0x10/0x10 [ 504.987843][T14858] ret_from_fork+0x514/0xb70 [ 504.987870][T14858] ? __pfx_ret_from_fork+0x10/0x10 [ 504.987893][T14858] ? __switch_to+0xc79/0x1410 [ 504.987915][T14858] ? __pfx_kthread+0x10/0x10 [ 504.987938][T14858] ret_from_fork_asm+0x1a/0x30 [ 504.987978][T14858] [ 505.331484][T14858] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 506.026366][T14840] syz.4.3934: attempt to access beyond end of device [ 506.026366][T14840] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 506.026850][T14840] syz.4.3934: attempt to access beyond end of device [ 506.026850][T14840] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 506.031969][T14828] XFS (loop0): Quotacheck: Done. [ 506.194734][ T5616] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 506.524216][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.108702][T14905] loop2: detected capacity change from 0 to 512 [ 507.116011][T14905] EXT4-fs: Ignoring removed nobh option [ 507.128693][T14905] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 507.205308][T14905] EXT4-fs (loop2): 1 truncate cleaned up [ 507.218862][T14905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.562971][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.722064][T14917] loop3: detected capacity change from 0 to 1024 [ 507.731541][T14917] EXT4-fs: Ignoring removed mblk_io_submit option [ 507.731673][T14917] EXT4-fs: Ignoring removed oldalloc option [ 507.731822][T14917] EXT4-fs: Ignoring removed nomblk_io_submit option [ 507.856833][T14922] loop2: detected capacity change from 0 to 512 [ 507.859675][T14922] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 507.884311][T14917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.962538][T14922] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 507.962691][T14922] System zones: 1-12 [ 508.235261][T14922] EXT4-fs (loop2): 1 truncate cleaned up [ 508.267881][T14922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.756725][ T5863] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 508.928922][ T5863] usb 5-1: config 0 has no interfaces? [ 508.932003][ T5863] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 508.932039][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.932061][ T5863] usb 5-1: Product: syz [ 508.932078][ T5863] usb 5-1: Manufacturer: syz [ 508.932094][ T5863] usb 5-1: SerialNumber: syz [ 508.976040][ T5863] usb 5-1: config 0 descriptor?? [ 509.033498][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.225932][ T5753] usb 5-1: USB disconnect, device number 26 [ 509.854474][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.022802][T14961] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 510.133948][T14957] loop2: detected capacity change from 0 to 2048 [ 510.135261][T14957] udf: Unknown parameter '0xffffffffffffffff' [ 510.193925][T14964] netlink: 'syz.0.3979': attribute type 1 has an invalid length. [ 510.224494][T14961] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 510.225528][T14961] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 510.226138][T14961] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 510.250079][T14961] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 510.250728][T14961] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 510.255366][T14961] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 510.256236][T14961] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 510.286257][T14961] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 510.293746][T14961] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 511.495687][T14985] loop4: detected capacity change from 0 to 128 [ 511.659284][T14992] loop3: detected capacity change from 0 to 256 [ 511.663285][T14985] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 511.691637][T14985] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.879991][T14997] tap0: tun_chr_ioctl cmd 2147767520 [ 511.951175][T14992] FAT-fs (loop3): Directory bread(block 64) failed [ 511.951213][T14992] FAT-fs (loop3): Directory bread(block 65) failed [ 511.951336][T14992] FAT-fs (loop3): Directory bread(block 66) failed [ 511.951362][T14992] FAT-fs (loop3): Directory bread(block 67) failed [ 511.951470][T14992] FAT-fs (loop3): Directory bread(block 68) failed [ 511.951497][T14992] FAT-fs (loop3): Directory bread(block 69) failed [ 511.951602][T14992] FAT-fs (loop3): Directory bread(block 70) failed [ 511.951627][T14992] FAT-fs (loop3): Directory bread(block 71) failed [ 511.951880][T14992] FAT-fs (loop3): Directory bread(block 72) failed [ 511.951908][T14992] FAT-fs (loop3): Directory bread(block 73) failed [ 512.052048][ T5614] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 512.835765][T15021] kernel read not supported for file /Æ6]ÒT (pid: 15021 comm: syz.3.4000) [ 512.859866][ T38] audit: type=1800 audit(1780309039.271:100): pid=15021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4000" name=C6361C5DD254 dev="mqueue" ino=38671 res=0 errno=0 [ 513.243555][T15036] loop4: detected capacity change from 0 to 1024 [ 513.248212][T15036] EXT4-fs: Ignoring removed mblk_io_submit option [ 513.248274][T15036] EXT4-fs: Ignoring removed oldalloc option [ 513.248336][T15036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 513.312808][T15039] loop0: detected capacity change from 0 to 64 [ 513.386048][T15039] hfs: request for non-existent node 131072 in B*Tree [ 513.386072][T15039] hfs: request for non-existent node 131072 in B*Tree [ 513.433657][T15036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.406048][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.417933][ T5753] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 514.598925][ T5753] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 514.598962][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.605289][ T5753] usb 3-1: config 0 descriptor?? [ 514.634271][ T5753] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 515.508741][ T5753] usb 3-1: USB disconnect, device number 24 [ 515.884569][T15080] sctp: [Deprecated]: syz.3.4027 (pid 15080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 515.884569][T15080] Use struct sctp_sack_info instead [ 516.155833][T15084] loop3: detected capacity change from 0 to 1024 [ 516.169920][T15084] EXT4-fs: Ignoring removed mblk_io_submit option [ 516.169988][T15084] EXT4-fs: Ignoring removed oldalloc option [ 516.170051][T15084] EXT4-fs: Ignoring removed nomblk_io_submit option [ 516.328660][T15084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.450882][ T38] audit: type=1326 audit(1780309042.891:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz.0.4034" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f187f57ce59 code=0x0 [ 516.943463][T15105] loop2: detected capacity change from 0 to 512 [ 516.950579][T15105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 516.950653][T15105] EXT4-fs: Ignoring removed mblk_io_submit option [ 517.156939][T15105] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 517.156977][T15105] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 517.166181][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.354036][T15105] EXT4-fs (loop2): 1 truncate cleaned up [ 517.374404][T15105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.619371][T15119] loop3: detected capacity change from 0 to 128 [ 517.712381][T15123] loop0: detected capacity change from 0 to 512 [ 517.763853][T15123] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e846e01c, mo2=0022] [ 517.764006][T15123] System zones: 1-12 [ 517.800685][T15123] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.4043: Directory hole found for htree index block 0 [ 517.836593][T15123] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 517.852282][ C0] EXT4-fs (loop0): initial error at time 1780309044: dx_probe:791: inode 2 [ 517.852321][ C0] EXT4-fs (loop0): last error at time 1780309044: dx_probe:791: inode 2 [ 517.978205][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.403433][T15123] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 518.403530][T15123] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.4043: Directory hole found for htree index block 0 [ 518.403561][T15123] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 518.465795][T15133] loop4: detected capacity change from 0 to 1024 [ 518.483180][T15133] EXT4-fs: Ignoring removed mblk_io_submit option [ 518.483230][T15133] EXT4-fs: Ignoring removed oldalloc option [ 518.483413][T15133] EXT4-fs: Ignoring removed nomblk_io_submit option [ 518.514477][T15123] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 518.531226][T15123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.569875][T15133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.481801][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.662884][T15142] loop2: detected capacity change from 0 to 4096 [ 519.688357][T15142] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 520.382888][T15155] netlink: 'syz.4.4056': attribute type 1 has an invalid length. [ 520.670592][T15123] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 521.176243][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.674801][T15152] loop3: detected capacity change from 0 to 32768 [ 521.690643][T15174] loop0: detected capacity change from 0 to 1024 [ 521.718530][T15174] EXT4-fs: Ignoring removed mblk_io_submit option [ 521.718605][T15174] EXT4-fs: Ignoring removed oldalloc option [ 521.718666][T15174] EXT4-fs: Ignoring removed nomblk_io_submit option [ 521.871173][T15174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.717293][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.292042][T15152] dmapctl: leaf value 127 too large at index 344 [ 523.292067][T15152] ERROR: (device loop3): dbFindCtl: Corrupt dmapctl page [ 523.292067][T15152] [ 523.367920][T15201] netlink: 'syz.0.4077': attribute type 1 has an invalid length. [ 524.152011][T15194] loop2: detected capacity change from 0 to 32768 [ 524.165151][T15194] btrfs: Deprecated parameter 'usebackuproot' [ 524.165176][T15194] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 524.239093][T15194] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4067 (15194) [ 524.583727][T15194] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 524.583770][T15194] BTRFS info (device loop2): using crc32c checksum algorithm [ 524.674213][T15223] pim6reg: entered allmulticast mode [ 525.117272][T15241] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 525.117461][T15194] BTRFS error (device loop2): failed to load root extent [ 525.117506][T15194] BTRFS warning (device loop2): try to load backup roots slot 1 [ 525.117812][T15241] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 525.117950][T15194] BTRFS warning (device loop2): couldn't read tree root [ 525.117972][T15194] BTRFS warning (device loop2): try to load backup roots slot 2 [ 525.118302][T15241] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 525.204706][T15194] BTRFS warning (device loop2): couldn't read tree root [ 525.204742][T15194] BTRFS warning (device loop2): try to load backup roots slot 3 [ 525.274494][T15194] BTRFS info (device loop2): rebuilding free space tree [ 525.504856][T15250] loop0: detected capacity change from 0 to 256 [ 525.517184][T15250] exfat: Invalid uid '0x00000000ffffffff' [ 525.614588][T15252] loop3: detected capacity change from 0 to 1024 [ 525.615806][T15252] EXT4-fs: Ignoring removed mblk_io_submit option [ 525.615861][T15252] EXT4-fs: Ignoring removed oldalloc option [ 525.615918][T15252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 525.872555][T15252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.127882][T15194] BTRFS info (device loop2): checking UUID tree [ 526.127972][T15194] BTRFS error (device loop2): failed to check the UUID tree: -4 [ 526.602824][T15269] netlink: 'syz.0.4095': attribute type 1 has an invalid length. [ 526.813069][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.209105][T15194] BTRFS error (device loop2): open_ctree failed: -4 [ 527.559736][T15288] loop3: detected capacity change from 0 to 512 [ 527.562547][T15288] ext3: Unknown parameter 'nouser_xattr' [ 530.274407][T15357] loop2: detected capacity change from 0 to 512 [ 530.279300][T15357] EXT4-fs: Ignoring removed oldalloc option [ 530.384234][T15357] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.4135: corrupted in-inode xattr: invalid ea_ino [ 530.384275][T15357] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 530.387103][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 530.387129][ C0] EXT4-fs (loop2): initial error at time 1780309056: ext4_iget_extra_inode:5128: inode 15 [ 530.387169][ C0] EXT4-fs (loop2): last error at time 1780309056: ext4_iget_extra_inode:5128: inode 15 [ 530.424723][T15357] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4135: couldn't read orphan inode 15 (err -117) [ 530.424827][T15357] loop2: lost filesystem error report for type 5 error -117 [ 530.493198][T15357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.838679][T15372] kernel read not supported for file /fb0 (pid: 15372 comm: syz.3.4140) [ 531.490282][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.966737][T15399] loop2: detected capacity change from 0 to 512 [ 532.024589][T15399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.024738][T15399] ext4 filesystem being mounted at /556/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 532.943242][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4163'. [ 532.990241][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.415311][ T821] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 533.512671][ T38] audit: type=1326 audit(1780309059.951:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15438 comm="syz.2.4165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534b8dce59 code=0x7ffc0000 [ 533.543781][ T38] audit: type=1326 audit(1780309059.951:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15438 comm="syz.2.4165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534b8dce59 code=0x7ffc0000 [ 533.577949][ T38] audit: type=1326 audit(1780309060.021:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15438 comm="syz.2.4165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534b8dce59 code=0x7ffc0000 [ 533.581370][ T38] audit: type=1326 audit(1780309060.021:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15438 comm="syz.2.4165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f534b8dce59 code=0x7ffc0000 [ 533.583022][ T38] audit: type=1326 audit(1780309060.021:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15438 comm="syz.2.4165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534b8dce59 code=0x7ffc0000 [ 533.585087][ T38] audit: type=1326 audit(1780309060.021:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15438 comm="syz.2.4165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534b8dce59 code=0x7ffc0000 [ 533.585142][ T38] audit: type=1326 audit(1780309060.021:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15438 comm="syz.2.4165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534b8dce59 code=0x7ffc0000 [ 533.591007][ T38] audit: type=1326 audit(1780309060.021:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15438 comm="syz.2.4165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534b8dce59 code=0x7ffc0000 [ 533.591194][ T38] audit: type=1326 audit(1780309060.031:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15438 comm="syz.2.4165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534b8dce59 code=0x7ffc0000 [ 533.591309][ T38] audit: type=1326 audit(1780309060.031:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15438 comm="syz.2.4165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f534b8dce59 code=0x7ffc0000 [ 533.713843][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 533.799264][ T821] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.799371][ T821] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.799444][ T821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 533.799542][ T821] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 533.799607][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.888579][ T821] usb 5-1: config 0 descriptor?? [ 534.196070][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4174'. [ 534.250988][T15407] loop3: detected capacity change from 0 to 40427 [ 534.323174][T15407] F2FS-fs (loop3): build fault injection rate: 14 [ 534.323195][T15407] F2FS-fs (loop3): build fault injection type: 0x0 [ 534.480555][ T821] nzxt-smart2 0003:1E71:2009.0019: reserved main item tag 0xe [ 534.480646][ T821] nzxt-smart2 0003:1E71:2009.0019: item fetching failed at offset 4/5 [ 534.481373][ T821] nzxt-smart2 0003:1E71:2009.0019: probe with driver nzxt-smart2 failed with error -22 [ 534.495317][T15407] F2FS-fs (loop3): invalid crc value [ 534.735784][ T821] usb 5-1: USB disconnect, device number 27 [ 534.989246][T15407] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 535.121005][T15407] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 535.226651][ T5714] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 535.427131][ T5714] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 535.427162][ T5714] usb 3-1: config 0 has no interface number 0 [ 535.427217][ T5714] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 535.427248][ T5714] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 535.427276][ T5714] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 535.450470][ T5714] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 535.450556][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 535.450610][ T5714] usb 3-1: Product: syz [ 535.450652][ T5714] usb 3-1: SerialNumber: syz [ 535.727327][ T5714] usb 3-1: config 0 descriptor?? [ 535.746979][ T5714] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 535.797348][ T5714] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input10 [ 535.956109][ T5714] ------------[ cut here ]------------ [ 535.956124][ T5714] URB ffff8880266dbc00 submitted while active [ 535.956143][ T5714] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18c0, CPU#1: kworker/1:3/5714 [ 535.956195][ T5714] Modules linked in: [ 535.956218][ T5714] CPU: 1 UID: 0 PID: 5714 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 535.956249][ T5714] Tainted: [L]=SOFTLOCKUP [ 535.956257][ T5714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 535.956272][ T5714] Workqueue: usb_hub_wq hub_event [ 535.956297][ T5714] RIP: 0010:usb_submit_urb+0x7e/0x18c0 [ 535.956329][ T5714] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 c7 41 6b fb 49 83 3e 00 74 40 e8 5c 96 00 fb 48 8d 3d c5 f2 d4 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 41 96 00 fb eb 05 e8 3a 96 [ 535.956347][ T5714] RSP: 0018:ffffc90005006b90 EFLAGS: 00010283 [ 535.956365][ T5714] RAX: ffffffff86c4b444 RBX: ffff8880266dbc00 RCX: 0000000000100000 [ 535.956438][ T5714] RDX: ffffc9001aeef000 RSI: ffff8880266dbc00 RDI: ffffffff8f99a710 [ 535.956457][ T5714] RBP: 000000000000000f R08: ffffffff8f8d03f7 R09: 1ffffffff1f1a07e [ 535.956472][ T5714] R10: dffffc0000000000 R11: fffffbfff1f1a07f R12: 0000000000000cc0 [ 535.956488][ T5714] R13: ffff8880361d0048 R14: ffff8880266dbc08 R15: dffffc0000000000 [ 535.956505][ T5714] FS: 0000000000000000(0000) GS:ffff888125fcd000(0000) knlGS:0000000000000000 [ 535.956524][ T5714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 535.956540][ T5714] CR2: 00007f6f3f15c080 CR3: 000000005ceee000 CR4: 00000000003526f0 [ 535.956561][ T5714] Call Trace: [ 535.956570][ T5714] [ 535.956585][ T5714] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 535.956631][ T5714] ? mutex_lock_nested+0x152/0x1d0 [ 535.956656][ T5714] ? cm109_input_open+0x97/0x480 [ 535.956691][ T5714] cm109_input_open+0x1fb/0x480 [ 535.956729][ T5714] input_open_device+0x1f8/0x3b0 [ 535.956764][ T5714] kbd_connect+0xf6/0x150 [ 535.956789][ T5714] input_register_device+0xce0/0x1140 [ 535.956831][ T5714] cm109_usb_probe+0x11a2/0x16a0 [ 535.956889][ T5714] usb_probe_interface+0x659/0xc70 [ 535.956933][ T5714] ? __pfx_usb_probe_interface+0x10/0x10 [ 535.956959][ T5714] really_probe+0x267/0xaf0 [ 535.957010][ T5714] __driver_probe_device+0x1e2/0x350 [ 535.957039][ T5714] driver_probe_device+0x4f/0x240 [ 535.957067][ T5714] __device_attach_driver+0x270/0x410 [ 535.957097][ T5714] bus_for_each_drv+0x25b/0x2f0 [ 535.957130][ T5714] ? __pfx___device_attach_driver+0x10/0x10 [ 535.957156][ T5714] ? __pfx_bus_for_each_drv+0x10/0x10 [ 535.957188][ T5714] ? rt_spin_unlock+0x160/0x200 [ 535.957227][ T5714] __device_attach+0x2c8/0x450 [ 535.957252][ T5714] ? __pfx___device_attach+0x10/0x10 [ 535.957276][ T5714] ? rt_spin_unlock+0x160/0x200 [ 535.957312][ T5714] device_initial_probe+0xa1/0xd0 [ 535.957336][ T5714] bus_probe_device+0x12d/0x220 [ 535.957370][ T5714] device_add+0x7ec/0xb90 [ 535.957412][ T5714] usb_set_configuration+0x1a87/0x2110 [ 535.957464][ T5714] usb_generic_driver_probe+0x8d/0x150 [ 535.957490][ T5714] usb_probe_device+0x1c4/0x3b0 [ 535.957522][ T5714] ? __pfx_usb_probe_device+0x10/0x10 [ 535.957548][ T5714] really_probe+0x267/0xaf0 [ 535.957578][ T5714] __driver_probe_device+0x1e2/0x350 [ 535.957613][ T5714] driver_probe_device+0x4f/0x240 [ 535.957641][ T5714] __device_attach_driver+0x270/0x410 [ 535.957668][ T5714] bus_for_each_drv+0x25b/0x2f0 [ 535.957698][ T5714] ? __pfx___device_attach_driver+0x10/0x10 [ 535.957722][ T5714] ? __pfx_bus_for_each_drv+0x10/0x10 [ 535.957753][ T5714] ? rt_spin_unlock+0x160/0x200 [ 535.957790][ T5714] __device_attach+0x2c8/0x450 [ 535.957814][ T5714] ? __pfx___device_attach+0x10/0x10 [ 535.957837][ T5714] ? rt_spin_unlock+0x160/0x200 [ 535.957874][ T5714] device_initial_probe+0xa1/0xd0 [ 535.957898][ T5714] bus_probe_device+0x12d/0x220 [ 535.957928][ T5714] device_add+0x7ec/0xb90 [ 535.957964][ T5714] usb_new_device+0x9f8/0x16e0 [ 535.957997][ T5714] ? __pfx_usb_new_device+0x10/0x10 [ 535.958042][ T5714] hub_event+0x2a49/0x4f60 [ 535.958125][ T5714] ? __pfx_hub_event+0x10/0x10 [ 535.958151][ T5714] ? process_one_work+0x8be/0x1630 [ 535.958200][ T5714] ? process_one_work+0x8be/0x1630 [ 535.958232][ T5714] process_one_work+0x98b/0x1630 [ 535.958290][ T5714] ? __pfx_process_one_work+0x10/0x10 [ 535.958323][ T5714] ? do_raw_spin_lock+0x12b/0x2f0 [ 535.958366][ T5714] worker_thread+0xb49/0x1140 [ 535.958402][ T5714] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 535.958457][ T5714] kthread+0x388/0x470 [ 535.958484][ T5714] ? __pfx_worker_thread+0x10/0x10 [ 535.958505][ T5714] ? __pfx_kthread+0x10/0x10 [ 535.958533][ T5714] ret_from_fork+0x514/0xb70 [ 535.958567][ T5714] ? __pfx_ret_from_fork+0x10/0x10 [ 535.958610][ T5714] ? __switch_to+0xc79/0x1410 [ 535.958642][ T5714] ? __pfx_kthread+0x10/0x10 [ 535.958670][ T5714] ret_from_fork_asm+0x1a/0x30 [ 535.958715][ T5714] [ 535.958743][ T5714] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 535.958764][ T5714] CPU: 1 UID: 0 PID: 5714 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 535.958795][ T5714] Tainted: [L]=SOFTLOCKUP [ 535.958848][ T5714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 535.958864][ T5714] Workqueue: usb_hub_wq hub_event [ 535.958890][ T5714] Call Trace: [ 535.958899][ T5714] [ 535.958911][ T5714] vpanic+0x56c/0xa60 [ 535.958943][ T5714] ? __pfx__printk+0x10/0x10 [ 535.958964][ T5714] ? __pfx_vpanic+0x10/0x10 [ 535.958992][ T5714] ? is_bpf_text_address+0x292/0x2b0 [ 535.959024][ T5714] ? is_bpf_text_address+0x26/0x2b0 [ 535.959100][ T5714] panic+0xc5/0xd0 [ 535.959131][ T5714] ? __pfx_panic+0x10/0x10 [ 535.959171][ T5714] ? ret_from_fork_asm+0x1a/0x30 [ 535.959208][ T5714] __warn+0x315/0x4c0 [ 535.959235][ T5714] ? usb_submit_urb+0x7b/0x18c0 [ 535.959267][ T5714] ? usb_submit_urb+0x7b/0x18c0 [ 535.959302][ T5714] __report_bug+0x339/0x540 [ 535.959332][ T5714] ? usb_submit_urb+0x7b/0x18c0 [ 535.959366][ T5714] ? __pfx___report_bug+0x10/0x10 [ 535.959411][ T5714] report_bug_entry+0x19a/0x290 [ 535.959435][ T5714] ? usb_submit_urb+0x7e/0x18c0 [ 535.959468][ T5714] ? usb_submit_urb+0x83/0x18c0 [ 535.959501][ T5714] handle_bug+0xce/0x200 [ 535.959530][ T5714] exc_invalid_op+0x1a/0x50 [ 535.959557][ T5714] asm_exc_invalid_op+0x1a/0x20 [ 535.959580][ T5714] RIP: 0010:usb_submit_urb+0x7e/0x18c0 [ 535.959628][ T5714] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 c7 41 6b fb 49 83 3e 00 74 40 e8 5c 96 00 fb 48 8d 3d c5 f2 d4 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 41 96 00 fb eb 05 e8 3a 96 [ 535.959648][ T5714] RSP: 0018:ffffc90005006b90 EFLAGS: 00010283 [ 535.959668][ T5714] RAX: ffffffff86c4b444 RBX: ffff8880266dbc00 RCX: 0000000000100000 [ 535.959686][ T5714] RDX: ffffc9001aeef000 RSI: ffff8880266dbc00 RDI: ffffffff8f99a710 [ 535.959705][ T5714] RBP: 000000000000000f R08: ffffffff8f8d03f7 R09: 1ffffffff1f1a07e [ 535.959722][ T5714] R10: dffffc0000000000 R11: fffffbfff1f1a07f R12: 0000000000000cc0 [ 535.959740][ T5714] R13: ffff8880361d0048 R14: ffff8880266dbc08 R15: dffffc0000000000 [ 535.959767][ T5714] ? usb_submit_urb+0x74/0x18c0 [ 535.959814][ T5714] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 535.959850][ T5714] ? mutex_lock_nested+0x152/0x1d0 [ 535.959876][ T5714] ? cm109_input_open+0x97/0x480 [ 535.959916][ T5714] cm109_input_open+0x1fb/0x480 [ 535.959957][ T5714] input_open_device+0x1f8/0x3b0 [ 535.959988][ T5714] kbd_connect+0xf6/0x150 [ 535.960010][ T5714] input_register_device+0xce0/0x1140 [ 535.960046][ T5714] cm109_usb_probe+0x11a2/0x16a0 [ 535.960095][ T5714] usb_probe_interface+0x659/0xc70 [ 535.960137][ T5714] ? __pfx_usb_probe_interface+0x10/0x10 [ 535.960163][ T5714] really_probe+0x267/0xaf0 [ 535.960193][ T5714] __driver_probe_device+0x1e2/0x350 [ 535.960218][ T5714] driver_probe_device+0x4f/0x240 [ 535.960244][ T5714] __device_attach_driver+0x270/0x410 [ 535.960272][ T5714] bus_for_each_drv+0x25b/0x2f0 [ 535.960301][ T5714] ? __pfx___device_attach_driver+0x10/0x10 [ 535.960324][ T5714] ? __pfx_bus_for_each_drv+0x10/0x10 [ 535.960354][ T5714] ? rt_spin_unlock+0x160/0x200 [ 535.960390][ T5714] __device_attach+0x2c8/0x450 [ 535.960414][ T5714] ? __pfx___device_attach+0x10/0x10 [ 535.960437][ T5714] ? rt_spin_unlock+0x160/0x200 [ 535.960473][ T5714] device_initial_probe+0xa1/0xd0 [ 535.960498][ T5714] bus_probe_device+0x12d/0x220 [ 535.960532][ T5714] device_add+0x7ec/0xb90 [ 535.960569][ T5714] usb_set_configuration+0x1a87/0x2110 [ 535.960636][ T5714] usb_generic_driver_probe+0x8d/0x150 [ 535.960666][ T5714] usb_probe_device+0x1c4/0x3b0 [ 535.960699][ T5714] ? __pfx_usb_probe_device+0x10/0x10 [ 535.960726][ T5714] really_probe+0x267/0xaf0 [ 535.960758][ T5714] __driver_probe_device+0x1e2/0x350 [ 535.960785][ T5714] driver_probe_device+0x4f/0x240 [ 535.960813][ T5714] __device_attach_driver+0x270/0x410 [ 535.960841][ T5714] bus_for_each_drv+0x25b/0x2f0 [ 535.960874][ T5714] ? __pfx___device_attach_driver+0x10/0x10 [ 535.960899][ T5714] ? __pfx_bus_for_each_drv+0x10/0x10 [ 535.960931][ T5714] ? rt_spin_unlock+0x160/0x200 [ 535.960970][ T5714] __device_attach+0x2c8/0x450 [ 535.960997][ T5714] ? __pfx___device_attach+0x10/0x10 [ 535.961020][ T5714] ? rt_spin_unlock+0x160/0x200 [ 535.961053][ T5714] device_initial_probe+0xa1/0xd0 [ 535.961076][ T5714] bus_probe_device+0x12d/0x220 [ 535.961110][ T5714] device_add+0x7ec/0xb90 [ 535.961150][ T5714] usb_new_device+0x9f8/0x16e0 [ 535.961183][ T5714] ? __pfx_usb_new_device+0x10/0x10 [ 535.961231][ T5714] hub_event+0x2a49/0x4f60 [ 535.961310][ T5714] ? __pfx_hub_event+0x10/0x10 [ 535.961336][ T5714] ? process_one_work+0x8be/0x1630 [ 535.961385][ T5714] ? process_one_work+0x8be/0x1630 [ 535.961418][ T5714] process_one_work+0x98b/0x1630 [ 535.961479][ T5714] ? __pfx_process_one_work+0x10/0x10 [ 535.961511][ T5714] ? do_raw_spin_lock+0x12b/0x2f0 [ 535.961548][ T5714] worker_thread+0xb49/0x1140 [ 535.961579][ T5714] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 535.961640][ T5714] kthread+0x388/0x470 [ 535.961668][ T5714] ? __pfx_worker_thread+0x10/0x10 [ 535.961688][ T5714] ? __pfx_kthread+0x10/0x10 [ 535.961715][ T5714] ret_from_fork+0x514/0xb70 [ 535.961748][ T5714] ? __pfx_ret_from_fork+0x10/0x10 [ 535.961777][ T5714] ? __switch_to+0xc79/0x1410 [ 535.961805][ T5714] ? __pfx_kthread+0x10/0x10 [ 535.961832][ T5714] ret_from_fork_asm+0x1a/0x30 [ 535.961882][ T5714] [ 535.963524][ T5714] Kernel Offset: disabled