last executing test programs: 22.142069005s ago: executing program 4 (id=1368): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x10) bind$inet(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000400), &(0x7f0000000200), 0x400) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "2c2ac07439eb58e2", "deb7c8f18af3c7cac406b08e0f3610ae", "00800002", "17e153029f1c00dd"}, 0x28) close_range(r3, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) getegid() r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd72504"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008090) 20.559872607s ago: executing program 4 (id=1371): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x7f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x96}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000008c}, 0x10) 17.202273011s ago: executing program 4 (id=1376): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001400010300000000000000002c0000000000"], 0x24}}, 0x0) 17.022768188s ago: executing program 5 (id=1377): socket$packet(0x11, 0x2, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)={0x24, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @pid}]}]}, 0x24}], 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) read(0xffffffffffffffff, &(0x7f00000002c0)=""/11, 0xb) close(0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, 0x0, 0x0) write(r2, &(0x7f0000000400)='40', 0x2) write(r4, &(0x7f0000000440)='4\x00', 0x2) read(0xffffffffffffffff, &(0x7f00000004c0), 0x1000) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) r6 = syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) close(0x3) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r4, 0x8004af80, &(0x7f0000000080)) 15.498532458s ago: executing program 4 (id=1382): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000540000000000000070000006b1138000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa909, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r3, &(0x7f0000000400)='wusb3801 0x4', 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_udp_encap(r4, 0x11, 0x68, &(0x7f0000000100)=0x2, 0x4) 12.72824978s ago: executing program 4 (id=1386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 12.137980588s ago: executing program 1 (id=1388): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c696f636861727365743d69736f383835392d313df1c2c661736b3d30303030303030303030303030303030303037373135372c6e616d65636173653d312c696f636861727365743d6d6163677265656b2c6e616d65636173653d312c666d61736b3d30303030303030303030303030303030303030303030342c6572726f72733d636f6e74696e75652c00"], 0x1, 0x1533, &(0x7f0000006800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/51, 0xfd0b) 12.120323533s ago: executing program 2 (id=1389): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x10) bind$inet(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000400), &(0x7f0000000200), 0x400) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "2c2ac07439eb58e2", "deb7c8f18af3c7cac406b08e0f3610ae", "00800002", "17e153029f1c00dd"}, 0x28) close_range(r3, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) getegid() r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd72504"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008090) 12.066840579s ago: executing program 3 (id=1390): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x99, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x1, 0x8b, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x3, 0x74}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x202b, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 12.027355225s ago: executing program 5 (id=1391): socket$packet(0x11, 0x2, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)={0x24, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @pid}]}]}, 0x24}], 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) read(0xffffffffffffffff, &(0x7f00000002c0)=""/11, 0xb) close(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000400)='40', 0x2) write(r4, &(0x7f0000000440)='4\x00', 0x2) read(0xffffffffffffffff, &(0x7f00000004c0), 0x1000) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) r5 = syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) close(0x3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r4, 0x8004af80, &(0x7f0000000080)) 11.12179634s ago: executing program 4 (id=1392): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x99, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x1, 0x8b, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x3, 0x74}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x202b, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 11.076065915s ago: executing program 3 (id=1393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6, 0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x0, 0x8}, {0x0, 0x0, 0xfc}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x200}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffc}, {}, {}, {}, {0x2}]}}, @common=@unspec=@time={{0x38}, {0x4, 0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@multicast2, @multicast1, 0xffffffff, 0xff000000, 'geneve1\x00', 'veth1_to_bridge\x00', {}, {}, 0x62, 0x0, 0x51}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffe, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) 10.075229565s ago: executing program 0 (id=1394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0x6, 0xd, 0x1, 0x0, 'dZ'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9.986036449s ago: executing program 1 (id=1395): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x28}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 9.937404079s ago: executing program 2 (id=1396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8af}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 9.801778212s ago: executing program 0 (id=1397): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x99, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x1, 0x8b, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x3, 0x74}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x202b, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260600000fff07906706000007000000170300000ee600a8bf050000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 9.669755369s ago: executing program 3 (id=1398): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 8.797316979s ago: executing program 0 (id=1399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) write$tun(r0, &(0x7f0000000380)={@void, @val={0x2, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "1abd6f05f0d7633e548669fdc573161e08ca803ac177590bcfa13882301102b3", "386182376f8aa3a51090c00884b5c9fe", {"cbac46504da2b4e9c89f50c8031d0743", "80c6b042dffad13a3cc5ae365aee8bae"}}}}}, 0x82) 8.640118545s ago: executing program 2 (id=1400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000049000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8.629300369s ago: executing program 1 (id=1401): socket$nl_sock_diag(0x10, 0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000500)="26ef26da06fcc43959ccc53ee926b47804ba3281fcac63bf954c857621deb501478081", 0x23}, {&(0x7f0000001c40)="65e3d6347d4e5a56100bf4c4f9e05214c8f2d4656aea29151d3ca7f936d66855822d51bf7deed302d625ab319825893b4a84e477c08f8f7afbc81b14", 0x3c}], 0x2}}], 0x1, 0xc840) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c9702", 0x5e, 0x5e, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000"], 0x84}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) close_range(r2, r4, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r6, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89", 0x1}], 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) 8.479046846s ago: executing program 5 (id=1402): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x10) bind$inet(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000400), &(0x7f0000000200), 0x400) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "2c2ac07439eb58e2", "deb7c8f18af3c7cac406b08e0f3610ae", "00800002", "17e153029f1c00dd"}, 0x28) close_range(r3, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) getegid() r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd72504"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008090) 6.467539814s ago: executing program 1 (id=1403): socket$packet(0x11, 0x2, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)={0x24, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @pid}]}]}, 0x24}], 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) read(0xffffffffffffffff, &(0x7f00000002c0)=""/11, 0xb) close(0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, 0x0, 0x0) write(r2, &(0x7f0000000400)='40', 0x2) write(r4, &(0x7f0000000440)='4\x00', 0x2) read(0xffffffffffffffff, &(0x7f00000004c0), 0x1000) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) r6 = syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) close(0x3) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r4, 0x8004af80, &(0x7f0000000080)) 6.43040411s ago: executing program 2 (id=1404): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@resuid}, {@barrier}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") rmdir(&(0x7f0000000040)='./file0\x00') 6.361406389s ago: executing program 3 (id=1405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x99, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x1, 0x8b, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x3, 0x74}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x202b, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 6.291153461s ago: executing program 5 (id=1406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) 5.480724496s ago: executing program 0 (id=1407): syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700"/16], &(0x7f0000000440)='syzkaller\x00', 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000080), &(0x7f0000000100)=r3}, 0x20) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000440)=0x8) r6 = io_uring_setup(0x6957, &(0x7f0000000700)={0x0, 0xc54b, 0x1, 0x20001, 0x2de}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000240)=[{0x0}], 0x1) r7 = io_uring_setup(0x110, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, 0x0, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0xb, 0x798, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xc, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x4, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x0, 0x1, 0x8001, 0x1]}) shutdown(0xffffffffffffffff, 0x1) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 5.19702951s ago: executing program 3 (id=1408): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x10) bind$inet(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000400), &(0x7f0000000200), 0x400) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "2c2ac07439eb58e2", "deb7c8f18af3c7cac406b08e0f3610ae", "00800002", "17e153029f1c00dd"}, 0x28) close_range(r3, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) getegid() r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd72504"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008090) 4.974896607s ago: executing program 5 (id=1409): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c696f636861727365743d69736f383835392d313df1c2c661736b3d30303030303030303030303030303030303037373135372c6e616d65636173653d312c696f636861727365743d6d6163677265656b2c6e616d65636173653d312c666d61736b3d30303030303030303030303030303030303030303030342c6572726f72733d636f6e74696e75652c00"], 0x1, 0x1533, &(0x7f0000006800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/51, 0xfd0b) 4.967414078s ago: executing program 2 (id=1410): r0 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, 0x0, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket(0x23, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f00000007c0)={{0xf8, 0x6}, {0x28, 0x6}, 0x6, 0x4, 0x6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0x1ff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 0x9}, 0xa) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) socket$key(0xf, 0x3, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xb6, &(0x7f00000002c0)=""/182, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28}, 0x94) 4.918389288s ago: executing program 0 (id=1411): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x20}, 0x50) 1.258345421s ago: executing program 5 (id=1412): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r0) 1.094922458s ago: executing program 1 (id=1413): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x99, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x1, 0x8b, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x3, 0x74}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x202b, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260600000fff07906706000007000000170300000ee600a8bf050000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.068018043s ago: executing program 3 (id=1414): r0 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, 0x0, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket(0x23, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f00000007c0)={{0xf8, 0x6}, {0x28, 0x6}, 0x6, 0x4, 0x6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0x1ff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 0x9}, 0xa) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000005b1953e7203b3833b487e3c4bd4540e4b6e87b7891e0f159182f542be18de00d9d95e1c4a6b62a3c065fc1a7b4c144cc2508eba2540e3425abc138dbaf9f6da59d9c77cbe2a8a9666a08ed1704c6bb2e422f01d64cae3050d7bd3c10b0e80d9483a2e36568cf0c6a1b78d9ca2f8065a1d7b4b0eeeecaa3c865de68042c9ab36e8a43b97955b04e5351f99c682a939832582c0dfd64028580c33fca4ca652f4c4e116c16e0f76fd9379599b54e06a8662f81fe375751e06007efabbd87b82d35367257d1bc15f92370261aace269013bc00b86daae71e253200000000b1467c86aff0ee8ff6c53939acb3866e8247eff7c10f000200000e6bd59e5b4dbc12ce8f0a5f816382fc66bcf14bb83ce2336b93b90594b78301e696503eea3404fe7dc3a8a5f9fde10f53e458e9efbe57fb52e85ea5346ed9f42418aefc6052afd588f8ae73eaab3af38936bfdadc91cda3983de6513ef3c2e58a54ffb1921aab1df971cdc2b2ab17bc9e421b5991b6036f845313a4a5f9d8a36472d7d758d73e9be967ca3fdae7d7ba03a8d9e5962c67ca30e5b6eb3c524c22632e47f18c879f0564361ef35aba5ed3f2d1b0bc6954e7e2dc49106ce8a49b48812ad3f5f8391c14ecde831be42d15bdc797c2b9ab30a8e90d7d53784e7add8e5bd5b6797a63e48efa0eb4d1df88ea8b388e94c6a15ac4e22447dad331244a38a5a2e294905611bfeadcac35f6ccf6af94191954c6b840a3092ef94d1e0e23019fbbdcd5b47e4a565ce42d0bbd7b14f9df1139c15ee4d687fe0861a8210071ebeb63606d28dcb5404e077400bd04453c49d0e2e0bb2700000046a4e564ba31c3d62f2d0fb6b7630f66f086e36885c3634a522888f1c4049361cfb8914f59073ba6a8a6ea283acfa3d3bc40e7a70f71b27686ac5307918ac06f1a396fe1accc74e9eabfea"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xb6, &(0x7f00000002c0)=""/182, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28}, 0x94) 1.036193662s ago: executing program 0 (id=1415): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtclass={0x38, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x38}}, 0x0) 986.986032ms ago: executing program 2 (id=1416): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f00000002c0)={[{@umask={'umask', 0x3d, 0x4}}, {@barrier}, {@nls={'nls', 0x3d, 'cp862'}}, {@gid}, {@type={'type', 0x3d, "e481e91c"}}, {@gid}, {@nobarrier}, {@umask={'umask', 0x3d, 0x35}}]}, 0xfe, 0x5e5, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 1 (id=1417): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc10, &(0x7f0000000c80)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="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", @ANYRES32, @ANYRES64, @ANYRES8], 0x3, 0x300, &(0x7f0000000980)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000001400)={0x8, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): blktrace: Concurrent blktraces are not allowed on sg0 [ 373.974502][ T7730] loop1: detected capacity change from 0 to 8 [ 373.983958][ T7729] xt_hashlimit: max too large, truncated to 1048576 [ 373.992567][ T7729] xt_hashlimit: overflow, try lower: 2/0 [ 374.153380][ T7732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.583'. [ 374.266998][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 374.927116][ T7745] loop1: detected capacity change from 0 to 512 [ 375.092518][ T7745] EXT4-fs (loop1): Test dummy encryption mode enabled [ 375.421189][ T7745] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 375.442973][ T7745] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 375.471020][ T7745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.511269][ T7747] loop2: detected capacity change from 0 to 2048 [ 375.591471][ T7747] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.724074][ T7745] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 375.745608][ T7745] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 376.015495][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.042884][ T7751] loop3: detected capacity change from 0 to 4096 [ 376.088800][ T7751] ntfs3(loop3): ino=0, mi_enum_attr [ 376.114281][ T7751] ntfs3(loop3): ino=0, mi_enum_attr [ 376.121270][ T7751] ntfs3(loop3): ino=0, mi_enum_attr [ 376.403231][ T7761] loop4: detected capacity change from 0 to 128 [ 376.592715][ T7761] EXT4-fs (loop4): Test dummy encryption mode enabled [ 377.496073][ T7761] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 377.510377][ T7761] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 378.019575][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.019742][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.813567][ T5623] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.976902][ T7768] comedi comedi3: pcl816: I/O base address not correctly aligned [ 379.158255][ T7771] loop5: detected capacity change from 0 to 256 [ 379.252758][ T7771] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 379.350001][ T7778] blktrace: Concurrent blktraces are not allowed on sg0 [ 379.415673][ T5765] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 379.539995][ T7780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.598'. [ 379.576283][ T5765] usb 5-1: Using ep0 maxpacket: 16 [ 379.592873][ T5765] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 379.614899][ T5765] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.624982][ T5765] usb 5-1: Product: syz [ 379.629302][ T5765] usb 5-1: Manufacturer: syz [ 379.634001][ T5765] usb 5-1: SerialNumber: syz [ 379.651653][ T5765] usb 5-1: config 0 descriptor?? [ 379.669646][ T5765] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 379.826957][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 379.901664][ T5765] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 379.910167][ T5765] visor 5-1:0.0: probe with driver visor failed with error -5 [ 379.997975][ T7785] loop1: detected capacity change from 0 to 1024 [ 380.007160][ T7785] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 380.007225][ T7785] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 380.007335][ T7785] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 380.024598][ T7785] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #3: comm syz.1.601: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 380.024674][ T7785] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 380.026253][ T7785] EXT4-fs (loop1): no journal found [ 380.029470][ T7785] EXT4-fs (loop1): can't get journal size [ 380.035643][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 380.035671][ C0] EXT4-fs (loop1): initial error at time 1787874163: ext4_ext_check_inode:521: inode 3 [ 380.035719][ C0] EXT4-fs (loop1): last error at time 1787874163: ext4_ext_check_inode:521: inode 3 [ 380.078413][ T7785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 380.416108][ T5765] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 380.576250][ T5765] usb 3-1: Using ep0 maxpacket: 8 [ 380.590971][ T5765] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 380.669248][ T5765] usb 3-1: config 8 has an invalid interface number: 188 but max is 0 [ 380.678420][ T5765] usb 3-1: config 8 has no interface number 0 [ 380.686298][ T5765] usb 3-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 380.686361][ T5765] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 80, changing to 10 [ 380.712590][ T9] usb 5-1: USB disconnect, device number 4 [ 380.785775][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.795218][ T5765] usb 3-1: Product: syz [ 380.795248][ T5765] usb 3-1: Manufacturer: syz [ 380.800487][ T5765] usb 3-1: SerialNumber: syz [ 381.071905][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.143019][ T7795] netlink: zone id is out of range [ 381.143056][ T7795] netlink: zone id is out of range [ 381.143087][ T7795] netlink: zone id is out of range [ 381.143107][ T7795] netlink: zone id is out of range [ 381.143126][ T7795] netlink: zone id is out of range [ 381.143145][ T7795] netlink: zone id is out of range [ 381.143314][ T7795] netlink: zone id is out of range [ 381.143336][ T7795] netlink: zone id is out of range [ 381.143355][ T7795] netlink: zone id is out of range [ 381.143379][ T7795] netlink: zone id is out of range [ 381.275949][ T7793] loop3: detected capacity change from 0 to 2048 [ 381.310196][ T7793] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.349782][ T7799] loop5: detected capacity change from 0 to 256 [ 381.457018][ T5765] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 381.496771][ T5765] usb 3-1: USB disconnect, device number 3 [ 381.595648][ T5772] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 382.159302][ T5772] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 382.282791][ T5772] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.282854][ T5772] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 382.282935][ T5772] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 382.475748][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.475816][ T5772] usb 2-1: Product: syz [ 382.475865][ T5772] usb 2-1: Manufacturer: syz [ 382.475899][ T5772] usb 2-1: SerialNumber: syz [ 383.438551][ T5772] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 383.487704][ T7812] loop5: detected capacity change from 0 to 256 [ 383.657424][ T5772] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 383.892016][ T5765] usb 2-1: USB disconnect, device number 4 [ 383.922723][ T7822] loop3: detected capacity change from 0 to 256 [ 384.199481][ T7822] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x9c8165b0, utbl_chksum : 0xe619d30d) [ 384.682855][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.616'. [ 384.954117][ T7822] exFAT-fs (loop3): error, data size is invalid(16781312) [ 384.954159][ T7822] exFAT-fs (loop3): Filesystem has been set read-only [ 385.484310][ T7834] loop2: detected capacity change from 0 to 512 [ 385.629779][ T7834] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 385.781785][ T7834] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 385.793800][ T7834] System zones: 1-12 [ 385.848793][ T7834] EXT4-fs (loop2): orphan cleanup on readonly fs [ 385.998285][ T7834] EXT4-fs error (device loop2): ext4_clear_blocks:874: inode #11: comm syz.2.618: attempt to clear invalid blocks 1024 len 1 [ 385.998351][ T7834] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 386.016779][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 386.016831][ C0] EXT4-fs (loop2): initial error at time 1787874169: ext4_clear_blocks:874: inode 11 [ 386.017528][ C0] EXT4-fs (loop2): last error at time 1787874169: ext4_clear_blocks:874: inode 11 [ 386.063068][ T7834] EXT4-fs error (device loop2): ext4_validate_block_bitmap:444: comm syz.2.618: bg 0: block 361: padding at end of block bitmap is not set [ 386.063462][ T7834] loop2: lost filesystem error report for type 5 error -117 [ 386.070372][ T7834] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 386.073222][ T7834] loop2: lost filesystem error report for type 5 error -117 [ 386.091421][ T7834] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.618: invalid indirect mapped block 1811939328 (level 0) [ 386.091481][ T7834] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 386.100007][ T7834] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.618: invalid indirect mapped block 2 (level 2) [ 386.100062][ T7834] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 386.109140][ T7834] EXT4-fs (loop2): 1 truncate cleaned up [ 386.130805][ T7834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 386.530283][ T7847] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 386.531208][ T7847] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 387.018960][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 387.482749][ T7851] loop2: detected capacity change from 0 to 4096 [ 387.491609][ T7851] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 387.621865][ T7851] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 389.008793][ T7866] loop0: detected capacity change from 0 to 256 [ 389.097715][ T7866] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 389.202624][ T7869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.631'. [ 389.231357][ T7869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.631'. [ 389.603929][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 389.872204][ T7875] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 389.874497][ T7875] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 390.665794][ T7878] loop5: detected capacity change from 0 to 512 [ 391.867763][ T7883] loop2: detected capacity change from 0 to 512 [ 391.999092][ T7883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.999248][ T7883] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.406726][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.842919][ T7903] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 395.845380][ T7903] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 396.193903][ T7904] ªªªªªª: renamed from virt_wifi0 [ 396.706231][ T7906] loop3: detected capacity change from 0 to 256 [ 396.714906][ T7905] loop5: detected capacity change from 0 to 512 [ 396.740686][ T7905] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 396.747898][ T7905] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 396.748044][ T7905] System zones: 1-12 [ 396.748346][ T7905] EXT4-fs (loop5): orphan cleanup on readonly fs [ 396.792890][ T7905] EXT4-fs error (device loop5): ext4_clear_blocks:874: inode #11: comm syz.5.643: attempt to clear invalid blocks 1024 len 1 [ 396.847859][ T7905] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 396.855570][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 396.855618][ C1] EXT4-fs (loop5): initial error at time 1787874180: ext4_clear_blocks:874: inode 11 [ 396.855694][ C1] EXT4-fs (loop5): last error at time 1787874180: ext4_clear_blocks:874: inode 11 [ 396.862752][ T7905] EXT4-fs error (device loop5): ext4_validate_block_bitmap:444: comm syz.5.643: bg 0: block 361: padding at end of block bitmap is not set [ 396.862806][ T7905] loop5: lost filesystem error report for type 5 error -117 [ 396.866510][ T7905] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 396.866544][ T7905] loop5: lost filesystem error report for type 5 error -117 [ 396.867550][ T7905] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.643: invalid indirect mapped block 1811939328 (level 0) [ 396.867601][ T7905] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 396.868180][ T7905] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.643: invalid indirect mapped block 2 (level 2) [ 396.868229][ T7905] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 396.871647][ T7905] EXT4-fs (loop5): 1 truncate cleaned up [ 397.110715][ T7905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 398.229825][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 398.386444][ T7919] loop1: detected capacity change from 0 to 256 [ 398.389815][ T7919] exfat: Deprecated parameter 'utf8' [ 398.412634][ T7919] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 398.477861][ T7922] blktrace: Concurrent blktraces are not allowed on sg0 [ 398.616701][ T7925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.652'. [ 398.756831][ T7933] loop2: detected capacity change from 0 to 256 [ 398.835728][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 398.868763][ T7934] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 398.869986][ T7934] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 399.185704][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 399.289926][ T7933] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 399.400669][ T30] usb 6-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 399.504718][ T30] usb 6-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 399.504852][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.627707][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.627780][ T30] usb 6-1: Product: syz [ 399.627829][ T30] usb 6-1: Manufacturer: syz [ 399.627867][ T30] usb 6-1: SerialNumber: syz [ 399.727668][ T30] usb 6-1: config 0 descriptor?? [ 399.737723][ T30] qmi_wwan 6-1:0.0: bogus CDC Union: master=0, slave=118 [ 399.738254][ T30] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22 [ 399.885010][ T7942] loop3: detected capacity change from 0 to 128 [ 402.839657][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 403.141474][ T1221] usb 6-1: USB disconnect, device number 5 [ 403.630740][ T7948] loop2: detected capacity change from 0 to 1024 [ 404.605345][ T7952] loop0: detected capacity change from 0 to 1024 [ 405.713470][ T7963] loop1: detected capacity change from 0 to 256 [ 406.889920][ T7948] hfsplus: size 38, res 36, name_len 5 [ 406.967033][ T7970] loop5: detected capacity change from 0 to 16 [ 407.026159][ T7970] erofs (device loop5): mounted with root inode @ nid 36. [ 407.032843][ T7967] loop3: detected capacity change from 0 to 2048 [ 407.142048][ T52] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 407.234949][ T7973] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 407.282984][ T7970] erofs (device loop5): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 407.306745][ T7970] erofs (device loop5): read error -117 @ 1 of nid 89 [ 407.315355][ T31] audit: type=1800 audit(1787874190.943:15): pid=7970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.667" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 407.432641][ T7967] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 407.439357][ T7975] loop1: detected capacity change from 0 to 1024 [ 407.472520][ T7967] Remounting filesystem read-only [ 407.529055][ T7975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.701709][ T7985] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 407.703231][ T7985] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 407.804129][ T7983] loop2: detected capacity change from 0 to 1024 [ 407.870836][ T7983] EXT4-fs: Ignoring removed i_version option [ 407.870917][ T7983] EXT4-fs: Ignoring removed orlov option [ 407.974349][ T7983] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 408.437534][ T7983] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 408.437944][ T7983] EXT4-fs (loop2): orphan cleanup on readonly fs [ 408.474766][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.623189][ T7990] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 408.623989][ T7990] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 409.616061][ T7983] EXT4-fs error (device loop2): __ext4_get_inode_loc:4915: comm syz.2.672: Invalid inode table block 0 in block_group 0 [ 409.701350][ T7983] loop2: lost filesystem error report for type 5 error -117 [ 409.715570][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 409.715619][ C0] EXT4-fs (loop2): initial error at time 1787874193: __ext4_get_inode_loc:4915 [ 409.715702][ C0] EXT4-fs (loop2): last error at time 1787874193: __ext4_get_inode_loc:4915 [ 409.719425][ T7983] EXT4-fs (loop2): Remounting filesystem read-only [ 409.719457][ T7983] Quota error (device loop2): write_blk: dquota write failed [ 409.719594][ T7983] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 409.719774][ T7983] EXT4-fs (loop2): 1 truncate cleaned up [ 409.784627][ T7994] loop1: detected capacity change from 0 to 256 [ 409.839531][ T7983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 409.889766][ T7994] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 410.023815][ T7998] loop0: detected capacity change from 0 to 256 [ 410.203244][ T8000] loop3: detected capacity change from 0 to 1024 [ 410.208123][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.233312][ T1221] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 410.379549][ T8005] loop0: detected capacity change from 0 to 512 [ 410.387467][ T1221] usb 5-1: Using ep0 maxpacket: 16 [ 410.395661][ T1221] usb 5-1: unable to get BOS descriptor or descriptor too short [ 410.395741][ T1221] usb 5-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 410.414600][ T1221] usb 5-1: config 1 has an invalid interface number: 151 but max is 0 [ 410.414662][ T1221] usb 5-1: config 1 has no interface number 0 [ 410.414730][ T1221] usb 5-1: config 1 interface 151 has no altsetting 0 [ 410.438525][ T8005] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 410.469158][ T1221] usb 5-1: string descriptor 0 read error: -22 [ 410.469344][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.498916][ T8005] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 410.499221][ T8005] Quota error (device loop0): write_blk: dquota write failed [ 410.499248][ T8005] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 410.499361][ T8005] Quota error (device loop0): write_blk: dquota write failed [ 410.499489][ T8005] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 410.499547][ T8005] EXT4-fs error (device loop0): ext4_acquire_dquot:7067: comm syz.0.683: Failed to acquire dquot type 1 [ 410.499584][ T8005] loop0: lost filesystem error report for type 5 error -28 [ 410.508547][ T8005] EXT4-fs (loop0): 1 truncate cleaned up [ 410.518128][ T8005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.591470][ T1221] gspca_main: pac7311-2.14.0 probing 093a:260e [ 410.604789][ T8005] Quota error (device loop0): write_blk: dquota write failed [ 410.604942][ T8005] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 410.605027][ T8005] EXT4-fs error (device loop0): ext4_acquire_dquot:7067: comm syz.0.683: Failed to acquire dquot type 1 [ 410.670274][ T8011] loop2: detected capacity change from 0 to 1024 [ 410.764393][ T8015] loop5: detected capacity change from 0 to 256 [ 410.967634][ T1221] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 410.967757][ T1221] pac7311 5-1:1.151: probe with driver pac7311 failed with error -71 [ 410.983688][ T1221] usb 5-1: USB disconnect, device number 6 [ 411.010014][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.710347][ T8027] loop0: detected capacity change from 0 to 64 [ 412.847207][ T8027] syz.0.687: attempt to access beyond end of device [ 412.847207][ T8027] loop0: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 412.847504][ T8027] Buffer I/O error on dev loop0, logical block 512, async page read [ 412.847804][ T8027] syz.0.687: attempt to access beyond end of device [ 412.847804][ T8027] loop0: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 412.847848][ T8027] Buffer I/O error on dev loop0, logical block 56576, async page read [ 412.857032][ T8031] usb usb8: usbfs: process 8031 (syz.5.689) did not claim interface 0 before use [ 412.969762][ T8032] loop4: detected capacity change from 0 to 1024 [ 413.016767][ T8032] hfsplus: extend alloc file! (16384,256,150995124) [ 414.118967][ T8039] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 414.130573][ T8039] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 415.045099][ T8044] loop5: detected capacity change from 0 to 1024 [ 415.078934][ T8044] EXT4-fs: Ignoring removed i_version option [ 415.078995][ T8044] EXT4-fs: Ignoring removed orlov option [ 415.104054][ T8044] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 415.126431][ T8044] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 415.126881][ T8044] EXT4-fs (loop5): orphan cleanup on readonly fs [ 415.389721][ T8044] EXT4-fs error (device loop5): __ext4_get_inode_loc:4915: comm syz.5.694: Invalid inode table block 0 in block_group 0 [ 415.404360][ T8044] loop5: lost filesystem error report for type 5 error -117 [ 415.415496][ T8044] EXT4-fs (loop5): Remounting filesystem read-only [ 415.415575][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 415.415625][ C1] EXT4-fs (loop5): initial error at time 1787874199: __ext4_get_inode_loc:4915 [ 415.415694][ C1] EXT4-fs (loop5): last error at time 1787874199: __ext4_get_inode_loc:4915 [ 415.459786][ T8044] Quota error (device loop5): write_blk: dquota write failed [ 415.473427][ T8044] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 415.490403][ T8044] EXT4-fs (loop5): 1 truncate cleaned up [ 415.652318][ T8050] loop3: detected capacity change from 0 to 256 [ 415.918005][ T8044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 415.979559][ T8050] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 416.796283][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.892911][ T8056] loop0: detected capacity change from 0 to 64 [ 417.074006][ T8059] No such timeout policy "syz1" [ 417.127272][ T8060] loop3: detected capacity change from 0 to 256 [ 417.146917][ T8060] exfat: Deprecated parameter 'namecase' [ 417.244559][ T8060] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 420.534127][ T8073] loop0: detected capacity change from 0 to 512 [ 420.619803][ T8073] EXT4-fs: Ignoring removed mblk_io_submit option [ 420.633673][ T8073] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 420.633712][ T8073] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 420.704021][ T8073] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.706: Allocating blocks 41-42 which overlap fs metadata [ 420.704123][ T8073] loop0: lost filesystem error report for type 5 error -117 [ 420.705576][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 420.705615][ C1] EXT4-fs (loop0): initial error at time 1787874204: ext4_mb_mark_diskspace_used:4222 [ 420.705679][ C1] EXT4-fs (loop0): last error at time 1787874204: ext4_mb_mark_diskspace_used:4222 [ 420.722059][ T8073] Quota error (device loop0): write_blk: dquota write failed [ 420.722093][ T8073] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 420.722271][ T8073] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.706: Allocating blocks 41-42 which overlap fs metadata [ 420.722359][ T8073] loop0: lost filesystem error report for type 5 error -117 [ 420.759793][ T8077] loop5: detected capacity change from 0 to 1024 [ 420.794030][ T8077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.807453][ T8073] Quota error (device loop0): write_blk: dquota write failed [ 420.807583][ T8073] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 420.807642][ T8073] EXT4-fs error (device loop0): ext4_acquire_dquot:7067: comm syz.0.706: Failed to acquire dquot type 1 [ 420.807680][ T8073] loop0: lost filesystem error report for type 5 error -117 [ 420.811357][ T8073] EXT4-fs error (device loop0): mb_free_blocks:2046: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 420.814386][ T8073] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.706: corrupted inode contents [ 420.814428][ T8073] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 420.814888][ T8073] EXT4-fs error (device loop0): ext4_dirty_inode:6731: inode #12: comm syz.0.706: mark_inode_dirty error [ 420.814937][ T8073] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 420.816401][ T8073] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.706: corrupted inode contents [ 420.816444][ T8073] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 420.818402][ T8073] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.706: mark_inode_dirty error [ 420.818444][ T8073] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 420.822306][ T8073] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.706: corrupted inode contents [ 420.822349][ T8073] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 420.824734][ T8073] EXT4-fs error (device loop0) in ext4_orphan_del:304: Corrupt filesystem [ 420.824768][ T8073] loop0: lost filesystem error report for type 5 error -117 [ 420.825189][ T8073] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.706: corrupted inode contents [ 420.825232][ T8073] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 420.826819][ T8073] EXT4-fs error (device loop0): ext4_truncate:4721: inode #12: comm syz.0.706: mark_inode_dirty error [ 420.826861][ T8073] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 420.827959][ T8073] EXT4-fs error (device loop0) in ext4_process_orphan:346: Corrupt filesystem [ 420.827993][ T8073] loop0: lost filesystem error report for type 5 error -117 [ 420.833293][ T8073] EXT4-fs (loop0): 1 truncate cleaned up [ 420.851126][ T8073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.118374][ T8086] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 421.130564][ T8086] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 421.354068][ T8073] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.706: Allocating blocks 41-42 which overlap fs metadata [ 421.907218][ T8073] Quota error (device loop0): write_blk: dquota write failed [ 421.907364][ T8073] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 421.907433][ T8073] EXT4-fs error (device loop0): ext4_acquire_dquot:7067: comm syz.0.706: Failed to acquire dquot type 1 [ 422.851732][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.913254][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.463266][ T8103] loop4: detected capacity change from 0 to 256 [ 424.484399][ T8104] loop1: detected capacity change from 0 to 512 [ 424.506994][ T8104] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 424.507051][ T8104] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 424.542968][ T8103] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 424.549878][ T8106] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 424.549878][ T8106] Please contact the netfilter-devel mailing list or update your nftables rules. [ 424.575513][ T8104] EXT4-fs (loop1): orphan cleanup on readonly fs [ 424.588702][ T8104] Quota error (device loop1): v2_read_file_info: Block with free entry 5 out of range (1, 5). [ 424.588952][ T8104] EXT4-fs warning (device loop1): ext4_enable_quotas:7300: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 424.602918][ T8104] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 424.605674][ T8104] EXT4-fs error (device loop1): mb_free_blocks:2046: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 424.608226][ T8104] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #12: comm syz.1.715: corrupted inode contents [ 424.608269][ T8104] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 424.610149][ T8104] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #12: comm syz.1.715: mark_inode_dirty error [ 424.610192][ T8104] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 424.610483][ T8104] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #12: comm syz.1.715: corrupted inode contents [ 424.610526][ T8104] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 424.612429][ T8104] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.715: mark_inode_dirty error [ 424.615579][ C1] EXT4-fs (loop1): error count since last fsck: 5 [ 424.615605][ C1] EXT4-fs (loop1): initial error at time 1787874208: mb_free_blocks:2046: inode 12: block 14 [ 424.615664][ C1] EXT4-fs (loop1): last error at time 1787874208: __ext4_ext_dirty:207: inode 12 [ 424.622988][ T8104] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #12: comm syz.1.715: corrupted inode contents [ 424.632168][ T8104] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 424.632204][ T8104] loop1: lost filesystem error report for type 5 error -117 [ 424.634257][ T8104] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #12: comm syz.1.715: corrupted inode contents [ 424.637498][ T8104] EXT4-fs error (device loop1): ext4_truncate:4721: inode #12: comm syz.1.715: mark_inode_dirty error [ 424.640134][ T8104] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 424.640167][ T8104] loop1: lost filesystem error report for type 5 error -117 [ 424.648640][ T8104] EXT4-fs (loop1): 1 truncate cleaned up [ 424.665223][ T8104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 424.762305][ T8104] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 424.764449][ T8104] EXT4-fs warning (device loop1): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 425.122545][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.294665][ T8118] loop4: detected capacity change from 0 to 64 [ 425.532840][ T8122] loop5: detected capacity change from 0 to 512 [ 425.572465][ T8122] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 425.602871][ T8122] EXT4-fs (loop5): 1 truncate cleaned up [ 425.625328][ T8129] loop0: detected capacity change from 0 to 16 [ 425.628583][ T8129] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 425.631809][ T4926] Bluetooth: hci5: command 0x0405 tx timeout [ 425.639513][ T8126] loop4: detected capacity change from 0 to 2048 [ 425.658774][ T8122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.692651][ T8131] loop2: detected capacity change from 0 to 1024 [ 425.734301][ T8131] hfsplus: (loop2): Catalog File (cnid 0x4) map record invalid or bitmap corruption detected, forcing read-only. [ 425.734366][ T8131] hfsplus: Run fsck.hfsplus to repair. [ 425.744134][ T8132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.722'. [ 425.756020][ T8134] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 425.820586][ T8122] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.723: invalid indirect mapped block 4294901760 (level 0) [ 425.820756][ T8122] fserror_report: 4 callbacks suppressed [ 425.820775][ T8122] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 425.830512][ T8122] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.723: invalid indirect mapped block 2185560079 (level 0) [ 425.830617][ T8122] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 425.863493][ T8122] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #13: comm syz.5.723: corrupted inode contents [ 425.863591][ T8122] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 425.878228][ T8122] EXT4-fs error (device loop5): ext4_dirty_inode:6731: inode #13: comm syz.5.723: mark_inode_dirty error [ 425.878323][ T8122] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 425.890138][ T8122] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.723: invalid indirect mapped block 65535 (level 2) [ 425.890238][ T8122] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 425.890756][ T8122] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #13: comm syz.5.723: corrupted inode contents [ 425.890870][ T8122] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 425.891570][ T8122] EXT4-fs error (device loop5): ext4_truncate:4721: inode #13: comm syz.5.723: mark_inode_dirty error [ 425.891645][ T8122] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 425.895676][ T8122] EXT4-fs error (device loop5): ext4_evict_inode:278: comm syz.5.723: couldn't truncate inode 13 (err -117) [ 426.194857][ T8134] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 426.194929][ T8134] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 426.200765][ T8134] Remounting filesystem read-only [ 426.209463][ T5623] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 426.252230][ T8137] loop0: detected capacity change from 0 to 164 [ 426.279727][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.387367][ T8137] isofs: Unable to find the ".." directory for NFS. [ 426.613529][ T8145] blktrace: Concurrent blktraces are not allowed on sg0 [ 426.825036][ T8150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.731'. [ 427.125735][ T30] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 427.210173][ T8154] loop1: detected capacity change from 0 to 256 [ 427.346614][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 427.383925][ T30] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=37.b8 [ 427.384299][ T8155] loop4: detected capacity change from 0 to 256 [ 427.399016][ T30] usb 3-1: config 7 has an invalid interface number: 234 but max is 0 [ 427.399054][ T30] usb 3-1: config 7 has no interface number 0 [ 427.399113][ T30] usb 3-1: config 7 interface 234 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 427.399160][ T30] usb 3-1: config 7 interface 234 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 427.399208][ T30] usb 3-1: config 7 interface 234 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 427.403412][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.403455][ T30] usb 3-1: Product: syz [ 427.403481][ T30] usb 3-1: Manufacturer: syz [ 427.403506][ T30] usb 3-1: SerialNumber: syz [ 428.114781][ T30] usb 3-1: USB disconnect, device number 4 [ 428.224440][ T8160] loop4: detected capacity change from 0 to 64 [ 428.311579][ T8160] syz.4.736: attempt to access beyond end of device [ 428.311579][ T8160] loop4: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 428.470829][ T8168] loop0: detected capacity change from 0 to 256 [ 428.538198][ T8168] exfat: Deprecated parameter 'utf8' [ 429.386900][ T8168] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 429.707034][ T8171] loop5: detected capacity change from 0 to 2048 [ 429.780563][ T8175] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 429.817930][ T8177] comedi comedi0: Minor 47 could not be opened [ 430.114350][ T8184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.744'. [ 430.220275][ T8175] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 430.220343][ T8175] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 430.249361][ T8175] Remounting filesystem read-only [ 430.258811][ T5632] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 435.503607][ T8209] blktrace: Concurrent blktraces are not allowed on sg0 [ 435.668226][ T8211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.753'. [ 435.791131][ T8215] loop0: detected capacity change from 0 to 512 [ 435.820863][ T8215] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 435.820926][ T8215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 435.826769][ T8215] EXT4-fs (loop0): orphan cleanup on readonly fs [ 435.833021][ T8215] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #13: comm syz.0.755: iget: bad i_size value: 12154761577498 [ 435.833071][ T8215] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 435.835591][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 435.835622][ C1] EXT4-fs (loop0): initial error at time 1787874219: ext4_orphan_get:1403: inode 13 [ 435.835671][ C1] EXT4-fs (loop0): last error at time 1787874219: ext4_orphan_get:1403: inode 13 [ 435.903843][ T8215] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.755: couldn't read orphan inode 13 (err -117) [ 435.903929][ T8215] loop0: lost filesystem error report for type 5 error -117 [ 435.937878][ T8215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 436.033460][ T8215] EXT4-fs warning (device loop0): dx_probe:859: inode #2: comm syz.0.755: dx entry: limit 65535 != root limit 120 [ 436.033524][ T8215] EXT4-fs warning (device loop0): dx_probe:933: inode #2: comm syz.0.755: Corrupt directory, running e2fsck is recommended [ 436.063403][ T8221] loop4: detected capacity change from 0 to 764 [ 436.261893][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.866202][ T8227] loop4: detected capacity change from 0 to 1024 [ 438.252752][ T8232] loop5: detected capacity change from 0 to 4096 [ 438.270242][ T8232] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 438.286854][ T8238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.762'. [ 438.433444][ T8232] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 439.486802][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.486944][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.374346][ T8253] loop0: detected capacity change from 0 to 16 [ 442.387706][ T8253] erofs (device loop0): mounted with root inode @ nid 36. [ 442.439123][ T8256] loop5: detected capacity change from 0 to 64 [ 442.459647][ T8252] loop4: detected capacity change from 0 to 1024 [ 442.562185][ T8259] blktrace: Concurrent blktraces are not allowed on sg0 [ 442.731074][ T8264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.771'. [ 442.854566][ T8268] loop4: detected capacity change from 0 to 256 [ 442.864350][ T8268] exfat: Deprecated parameter 'namecase' [ 442.951085][ T8268] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 444.305335][ T8285] loop2: detected capacity change from 0 to 512 [ 444.332905][ T8284] loop1: detected capacity change from 0 to 1024 [ 445.208691][ T8285] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01d, mo2=0002] [ 445.220093][ T8285] System zones: 1-12 [ 445.383542][ T8285] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.779: inode has both inline data and extents flags [ 445.383616][ T8285] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 445.396968][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 445.396995][ C0] EXT4-fs (loop2): initial error at time 1787874229: ext4_orphan_get:1403: inode 15 [ 445.397033][ C0] EXT4-fs (loop2): last error at time 1787874229: ext4_orphan_get:1403: inode 15 [ 445.399788][ T8285] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.779: couldn't read orphan inode 15 (err -117) [ 445.399826][ T8285] loop2: lost filesystem error report for type 5 error -117 [ 445.469709][ T8285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.677761][ T8296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.781'. [ 446.465469][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.314661][ T8310] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 447.315915][ T8310] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 448.793369][ T8315] loop5: detected capacity change from 0 to 1024 [ 448.793382][ T8313] loop2: detected capacity change from 0 to 512 [ 448.810303][ T8315] hfsplus: (loop5): Catalog File (cnid 0x4) map record invalid or bitmap corruption detected, forcing read-only. [ 448.810360][ T8315] hfsplus: Run fsck.hfsplus to repair. [ 450.084242][ T8327] loop3: detected capacity change from 0 to 1024 [ 450.108661][ T8329] loop0: detected capacity change from 0 to 512 [ 450.446907][ T8329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.447051][ T8329] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.500056][ T8335] loop5: detected capacity change from 0 to 64 [ 450.822046][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.930962][ T8341] loop1: detected capacity change from 0 to 512 [ 450.944145][ T8341] EXT4-fs: Ignoring removed oldalloc option [ 451.007868][ T8341] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 451.008188][ T8341] EXT4-fs (loop1): orphan cleanup on readonly fs [ 451.030928][ T8341] EXT4-fs warning (device loop1): ext4_enable_quotas:7300: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 451.046354][ T8341] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 451.058218][ T8341] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.795: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 451.058389][ T8341] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 451.076658][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 451.076694][ C0] EXT4-fs (loop1): last error at time 1787874234: ext4_ext_check_inode:521: inode 13 [ 451.098610][ T8341] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.795: couldn't read orphan inode 13 (err -117) [ 451.098661][ T8341] loop1: lost filesystem error report for type 5 error -117 [ 451.120752][ T8341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 451.158175][ T52] Bluetooth: hci2: unexpected event for opcode 0x080c [ 451.237148][ T8341] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.795: deleted inode referenced: 12 [ 451.317390][ T8352] blktrace: Concurrent blktraces are not allowed on sg0 [ 451.464051][ T8354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.799'. [ 451.618562][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.778386][ T8359] loop3: detected capacity change from 0 to 2048 [ 451.842125][ T8359] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.908266][ T31] audit: type=1800 audit(1787874235.543:16): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.803" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=1367 res=0 errno=0 [ 453.116793][ T8371] loop5: detected capacity change from 0 to 1024 [ 453.698025][ T8381] loop3: detected capacity change from 0 to 1024 [ 454.014325][ T8390] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 454.195376][ T8395] blktrace: Concurrent blktraces are not allowed on sg0 [ 454.359117][ T8399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.818'. [ 454.623726][ T8392] loop2: detected capacity change from 0 to 4096 [ 454.632196][ T8392] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 456.119714][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 456.802782][ T8392] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 456.839294][ T8392] ntfs3(loop2): ino=5, mi_enum_attr [ 457.219720][ T8413] loop0: detected capacity change from 0 to 256 [ 459.131659][ T8425] loop5: detected capacity change from 0 to 8 [ 460.471847][ T8430] loop0: detected capacity change from 0 to 1024 [ 460.504711][ T8429] loop3: detected capacity change from 0 to 2048 [ 460.885664][ T8435] loop2: detected capacity change from 0 to 4096 [ 460.988342][ T8435] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 461.154284][ T8444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.834'. [ 461.303455][ T8449] Cannot find add_set index 0 as target [ 462.402847][ T8459] loop1: detected capacity change from 0 to 8 [ 462.422633][ T8462] loop5: detected capacity change from 0 to 512 [ 462.435438][ T8462] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 462.435498][ T8462] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 462.478920][ T8459] process 'syz.1.842' launched './file2' with NULL argv: empty string added [ 462.484337][ T8462] EXT4-fs (loop5): orphan cleanup on readonly fs [ 462.493326][ T8462] Quota error (device loop5): v2_read_file_info: Block with free entry 5 out of range (1, 5). [ 462.493468][ T8462] EXT4-fs warning (device loop5): ext4_enable_quotas:7300: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 462.493858][ T8462] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 462.495997][ T8462] EXT4-fs error (device loop5): mb_free_blocks:2046: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 462.502679][ T8462] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #12: comm syz.5.840: corrupted inode contents [ 462.502731][ T8462] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 462.505560][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 462.505591][ C0] EXT4-fs (loop5): initial error at time 1787874246: mb_free_blocks:2046: inode 12: block 14 [ 462.505650][ C0] EXT4-fs (loop5): last error at time 1787874246: mb_free_blocks:2046: inode 12: block 14 [ 462.536574][ T8462] EXT4-fs error (device loop5): ext4_dirty_inode:6731: inode #12: comm syz.5.840: mark_inode_dirty error [ 462.536624][ T8462] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 462.537184][ T8462] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #12: comm syz.5.840: corrupted inode contents [ 462.537229][ T8462] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 462.539359][ T8462] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.840: mark_inode_dirty error [ 462.539403][ T8462] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 462.541084][ T8462] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #12: comm syz.5.840: corrupted inode contents [ 462.541129][ T8462] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 462.547340][ T8462] EXT4-fs error (device loop5) in ext4_orphan_del:304: Corrupt filesystem [ 462.547377][ T8462] loop5: lost filesystem error report for type 5 error -117 [ 462.557634][ T8462] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #12: comm syz.5.840: corrupted inode contents [ 462.557683][ T8462] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 462.572471][ T8462] EXT4-fs error (device loop5): ext4_truncate:4721: inode #12: comm syz.5.840: mark_inode_dirty error [ 462.572519][ T8462] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 462.582201][ T8459] SQUASHFS error: lzo decompression failed, data probably corrupt [ 462.582262][ T8459] SQUASHFS error: Failed to read block 0x0: -5 [ 462.585779][ T8462] EXT4-fs error (device loop5) in ext4_process_orphan:346: Corrupt filesystem [ 462.585814][ T8462] loop5: lost filesystem error report for type 5 error -117 [ 462.594689][ T8462] EXT4-fs (loop5): 1 truncate cleaned up [ 462.614480][ T8462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 462.651386][ T8459] SQUASHFS error: lzo decompression failed, data probably corrupt [ 462.651432][ T8459] SQUASHFS error: Failed to read block 0x0: -5 [ 462.750792][ T8462] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 462.751643][ T8462] EXT4-fs warning (device loop5): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 463.747113][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.925844][ T5847] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 464.095095][ T5847] usb 3-1: unable to get BOS descriptor or descriptor too short [ 464.110731][ T5847] usb 3-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 464.123739][ T5847] usb 3-1: config 160 has an invalid interface number: 168 but max is 0 [ 464.123804][ T5847] usb 3-1: config 160 has no interface number 0 [ 464.123885][ T5847] usb 3-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 464.123942][ T5847] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 464.124004][ T5847] usb 3-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 464.124059][ T5847] usb 3-1: config 160 interface 168 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 464.124106][ T5847] usb 3-1: config 160 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 464.124155][ T5847] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 464.124211][ T5847] usb 3-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 464.124264][ T5847] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 206, changing to 11 [ 464.124319][ T5847] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 1024 [ 464.124376][ T5847] usb 3-1: config 160 interface 168 altsetting 8 bulk endpoint 0xC has invalid maxpacket 64 [ 464.124427][ T5847] usb 3-1: config 160 interface 168 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 464.124484][ T5847] usb 3-1: config 160 interface 168 has no altsetting 0 [ 464.190575][ T8480] loop5: detected capacity change from 0 to 736 [ 464.287569][ T5847] usb 3-1: string descriptor 0 read error: -22 [ 464.287746][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.322311][ T8468] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 464.322642][ T8468] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 464.323004][ T8468] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 464.323190][ T8468] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 464.353970][ T5847] io_edgeport 3-1:160.168: EPiC device converter detected [ 464.361802][ T5847] usb 3-1: detected [ 464.833915][ T5847] usb 3-1: EPiC device converter now attached to ttyUSB0 [ 465.102723][ T9] usb 3-1: USB disconnect, device number 5 [ 465.102823][ C0] usb 3-1: edge_interrupt_callback - Error -19 submitting control urb [ 465.277837][ T8494] loop5: detected capacity change from 0 to 16 [ 465.290439][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 465.383104][ T9] epic ttyUSB0: EPiC device converter now disconnected from ttyUSB0 [ 465.392610][ T8494] erofs (device loop5): mounted with root inode @ nid 36. [ 465.418930][ T9] io_edgeport 3-1:160.168: device disconnected [ 465.443758][ T8497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.855'. [ 465.931417][ T8503] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 465.932942][ T8503] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 467.054785][ T8514] loop0: detected capacity change from 0 to 1024 [ 467.437758][ T8518] loop2: detected capacity change from 0 to 512 [ 467.449626][ T8516] loop1: detected capacity change from 0 to 4096 [ 467.469014][ T8516] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 467.476733][ T8518] EXT4-fs (loop2): Test dummy encryption mode enabled [ 467.606461][ T8518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.651262][ T8516] ntfs3(loop1): ino=19, mi_enum_attr [ 467.651329][ T8516] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 467.668220][ T8516] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 467.904860][ T8518] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 467.923863][ T8525] blktrace: Concurrent blktraces are not allowed on sg0 [ 468.966190][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.144989][ T8529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.868'. [ 469.443380][ T8507] loop5: detected capacity change from 0 to 32768 [ 470.177490][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 470.412204][ T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 470.467546][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.467647][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 470.467701][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 470.467751][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 470.467853][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.547496][ T8547] loop0: detected capacity change from 0 to 16 [ 470.562449][ T8547] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 470.639024][ T8547] cramfs: Error -3 while decompressing! [ 470.646978][ T8547] cramfs: ffffffff9ba667e8(27)->ffff888049fa4000(4096) [ 470.657748][ T8547] cramfs: Error -3 while decompressing! [ 470.663545][ T8547] cramfs: ffffffff9ba667e8(27)->ffff888049fa4000(4096) [ 470.671972][ T31] audit: type=1800 audit(1787874254.303:17): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.874" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 470.935940][ T8552] loop1: detected capacity change from 0 to 256 [ 470.971867][ T8553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.875'. [ 471.015032][ T8552] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 471.110674][ T9] usb 4-1: USB disconnect, device number 4 [ 471.555753][ T4926] Bluetooth: hci5: command 0x0405 tx timeout [ 472.527836][ T8571] loop4: detected capacity change from 0 to 8 [ 472.547512][ T8569] loop3: detected capacity change from 0 to 1024 [ 472.569763][ T8571] SQUASHFS error: lzo decompression failed, data probably corrupt [ 472.569824][ T8571] SQUASHFS error: Failed to read block 0x0: -5 [ 472.572338][ T8571] SQUASHFS error: lzo decompression failed, data probably corrupt [ 472.572376][ T8571] SQUASHFS error: Failed to read block 0x0: -5 [ 473.041141][ T8581] blktrace: Concurrent blktraces are not allowed on sg0 [ 476.491292][ T8593] loop4: detected capacity change from 0 to 4096 [ 476.514562][ T8593] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 476.899268][ T8605] loop0: detected capacity change from 0 to 64 [ 477.156503][ T1221] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 477.304837][ T8604] netlink: 24 bytes leftover after parsing attributes in process `syz.5.893'. [ 477.330753][ T1221] usb 4-1: unable to get BOS descriptor or descriptor too short [ 477.330835][ T1221] usb 4-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 477.335152][ T1221] usb 4-1: config 160 has an invalid interface number: 168 but max is 0 [ 477.335192][ T1221] usb 4-1: config 160 has no interface number 0 [ 477.335278][ T1221] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 477.335323][ T1221] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 477.335370][ T1221] usb 4-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 477.335442][ T1221] usb 4-1: config 160 interface 168 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 477.335486][ T1221] usb 4-1: config 160 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 477.337579][ T1221] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 477.337628][ T1221] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 477.337673][ T1221] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 206, changing to 11 [ 477.337747][ T1221] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 1024 [ 477.340091][ T1221] usb 4-1: config 160 interface 168 altsetting 8 bulk endpoint 0xC has invalid maxpacket 64 [ 477.340164][ T1221] usb 4-1: config 160 interface 168 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 477.340213][ T1221] usb 4-1: config 160 interface 168 has no altsetting 0 [ 477.375805][ T1221] usb 4-1: string descriptor 0 read error: -22 [ 477.376026][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.440483][ T8606] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 477.440819][ T8606] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 477.441305][ T8606] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 477.441493][ T8606] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 477.474009][ T1221] io_edgeport 4-1:160.168: EPiC device converter detected [ 477.474616][ T1221] usb 4-1: detected [ 477.818451][ T1221] usb 4-1: EPiC device converter now attached to ttyUSB0 [ 478.138965][ T10] usb 4-1: USB disconnect, device number 5 [ 478.139005][ C1] usb 4-1: edge_interrupt_callback - Error -19 submitting control urb [ 478.198503][ T8624] loop5: detected capacity change from 0 to 8 [ 478.244429][ T8624] SQUASHFS error: lzo decompression failed, data probably corrupt [ 478.244505][ T8624] SQUASHFS error: Failed to read block 0x0: -5 [ 478.271730][ T10] epic ttyUSB0: EPiC device converter now disconnected from ttyUSB0 [ 478.287207][ T10] io_edgeport 4-1:160.168: device disconnected [ 478.318824][ T8624] SQUASHFS error: lzo decompression failed, data probably corrupt [ 478.325258][ T8624] SQUASHFS error: Failed to read block 0x0: -5 [ 478.333429][ T8628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.910'. [ 479.544270][ T8642] blktrace: Concurrent blktraces are not allowed on sg0 [ 479.713159][ T8645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.904'. [ 479.894484][ T8629] loop0: detected capacity change from 0 to 32768 [ 479.970937][ T8629] jfs_strtoUCS: char2uni returned -22. [ 479.983922][ T8629] charset = cp857, char = 0xd5 [ 480.245671][ T8633] loop5: detected capacity change from 0 to 32768 [ 480.306340][ T8633] ERROR: (device loop5): diNewExt: no free extents [ 480.306340][ T8633] [ 480.455898][ T8633] ERROR: (device loop5): remounting filesystem as read-only [ 480.570498][ T8633] ialloc: diAlloc returned -5! [ 483.388134][ T8665] loop4: detected capacity change from 0 to 1764 [ 483.671937][ T8673] loop4: detected capacity change from 0 to 512 [ 483.699982][ T8673] FAT-fs (loop4): Directory bread(block 2080) failed [ 483.797576][ T8673] FAT-fs (loop4): Directory bread(block 2081) failed [ 483.797807][ T8673] FAT-fs (loop4): Directory bread(block 2082) failed [ 483.821477][ T8673] FAT-fs (loop4): Directory bread(block 2083) failed [ 483.828484][ T8673] FAT-fs (loop4): Directory bread(block 2084) failed [ 483.828637][ T8673] FAT-fs (loop4): Directory bread(block 2085) failed [ 483.828678][ T8673] FAT-fs (loop4): Directory bread(block 2086) failed [ 483.828737][ T8673] FAT-fs (loop4): Directory bread(block 2087) failed [ 484.242473][ T8676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.917'. [ 484.650194][ T8680] loop5: detected capacity change from 0 to 256 [ 484.743543][ T8683] loop3: detected capacity change from 0 to 1024 [ 484.770895][ T8680] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 484.901811][ T8678] loop0: detected capacity change from 0 to 4096 [ 484.917576][ T8678] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 485.035962][ T8678] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 485.116529][ T8690] xfrm0: entered allmulticast mode [ 485.216811][ T8691] loop4: detected capacity change from 0 to 2048 [ 485.273573][ T8694] x_tables: (null)_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 16 [ 485.665171][ T8702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.691596][ T8702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.158539][ T8722] blktrace: Concurrent blktraces are not allowed on sg0 [ 489.291153][ T8726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.935'. [ 489.499398][ T8731] netlink: 'syz.5.937': attribute type 3 has an invalid length. [ 489.783678][ T8735] netlink: 14 bytes leftover after parsing attributes in process `syz.4.938'. [ 489.828004][ T8736] comedi comedi3: aio_iiro_16: I/O base address or length out of range [ 489.888899][ T8735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.961880][ T8724] loop0: detected capacity change from 0 to 32768 [ 489.983242][ T8735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.037873][ T8739] loop5: detected capacity change from 0 to 128 [ 490.055504][ T8724] jfs_strtoUCS: char2uni returned -22. [ 490.055642][ T8724] charset = cp932, char = 0xfc [ 490.064131][ T8735] bond0 (unregistering): Released all slaves [ 490.567545][ T8748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.945'. [ 493.970301][ T8763] loop3: detected capacity change from 0 to 16 [ 494.094830][ T8763] erofs (device loop3): mounted with root inode @ nid 36. [ 494.294334][ T8767] loop5: detected capacity change from 0 to 256 [ 494.429706][ T8770] loop0: detected capacity change from 0 to 256 [ 494.443872][ T8771] blktrace: Concurrent blktraces are not allowed on sg0 [ 494.624732][ T8775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.955'. [ 494.760453][ T8782] loop2: detected capacity change from 0 to 256 [ 494.776587][ T8779] loop3: detected capacity change from 0 to 1024 [ 494.790238][ T8781] loop5: detected capacity change from 0 to 1024 [ 494.881925][ T8779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 494.882081][ T8779] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.895028][ T8782] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 494.911949][ T8781] hfsplus: failed to load attributes file [ 494.945980][ T8782] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 494.946663][ T8782] UBIFS error (pid: 8782): cannot open "ubi:0", error -19 [ 494.968641][ T8779] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.957: corrupted xattr block 128: overlapping e_value [ 494.995505][ T8786] loop1: detected capacity change from 0 to 4096 [ 495.209913][ T8786] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 495.304629][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 496.434403][ T8795] loop4: detected capacity change from 0 to 512 [ 496.542473][ T8795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.542638][ T8795] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.669574][ T8804] loop3: detected capacity change from 0 to 512 [ 496.732741][ T8804] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 496.732855][ T8804] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 496.744584][ T8808] loop1: detected capacity change from 0 to 512 [ 497.012685][ T8808] EXT4-fs error (device loop1): ext4_validate_block_bitmap:435: comm syz.1.966: bg 0: block 5: invalid block bitmap [ 497.151730][ T8808] loop1: lost filesystem error report for type 5 error -117 [ 497.245566][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 497.245620][ C1] EXT4-fs (loop1): initial error at time 1787874280: ext4_validate_block_bitmap:435 [ 497.246932][ C1] EXT4-fs (loop1): last error at time 1787874280: ext4_validate_block_bitmap:435 [ 497.373704][ T8804] EXT4-fs (loop3): 1 truncate cleaned up [ 497.465366][ T8804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.515113][ T8808] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 497.515195][ T8808] loop1: lost filesystem error report for type 5 error -117 [ 497.549381][ T8808] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.966: invalid indirect mapped block 3 (level 2) [ 497.549594][ T8808] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 497.601108][ T8808] EXT4-fs (loop1): 1 orphan inode deleted [ 497.610570][ T8808] EXT4-fs (loop1): 1 truncate cleaned up [ 497.758014][ T8808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.937150][ T8804] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.965: Logical block already allocated [ 498.090333][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.128590][ T8814] netlink: 'syz.5.969': attribute type 10 has an invalid length. [ 498.128637][ T8814] netlink: 152 bytes leftover after parsing attributes in process `syz.5.969'. [ 498.206129][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.233375][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.443252][ T8820] loop4: detected capacity change from 0 to 64 [ 498.608110][ T8824] blktrace: Concurrent blktraces are not allowed on sg0 [ 498.789735][ T8826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.973'. [ 498.911558][ T8818] loop5: detected capacity change from 0 to 32768 [ 498.953646][ T8818] ERROR: (device loop5): diAllocAG: nfreeinos = 0, but iag on freelist [ 498.953646][ T8818] [ 498.984550][ T8818] ialloc: diAlloc returned -5! [ 499.172334][ T8831] loop3: detected capacity change from 0 to 64 [ 499.195862][ T5343] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 499.300443][ T8836] netlink: 24 bytes leftover after parsing attributes in process `syz.5.976'. [ 499.351765][ T5343] usb 5-1: unable to get BOS descriptor or descriptor too short [ 499.351851][ T5343] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 499.353175][ T5343] usb 5-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 499.353236][ T5343] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 499.353278][ T5343] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 499.353321][ T5343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24395, setting to 1024 [ 499.353368][ T5343] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 499.367540][ T5343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.367580][ T5343] usb 5-1: Product: syz [ 499.367606][ T5343] usb 5-1: Manufacturer: syz [ 499.367632][ T5343] usb 5-1: SerialNumber: syz [ 499.398028][ T5343] usb 5-1: config 0 descriptor?? [ 499.400261][ T8829] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 499.400435][ T8829] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 499.495237][ C1] usb 5-1: NFC: Urb failure (status -71) [ 499.523351][ C1] usb 5-1: NFC: Urb failure (status -71) [ 499.536128][ T5343] usb 5-1: NFC: Unable to get FW version [ 499.583675][ T52] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 499.587409][ T5343] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -71 [ 499.727373][ T5343] usb 5-1: USB disconnect, device number 7 [ 499.865799][ T8842] loop3: detected capacity change from 0 to 4096 [ 500.837423][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.837527][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.468082][ T8859] loop4: detected capacity change from 0 to 64 [ 501.539983][ T8859] syz.4.984: attempt to access beyond end of device [ 501.539983][ T8859] loop4: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 501.755446][ T8858] loop3: detected capacity change from 0 to 4096 [ 501.775805][ T8858] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 501.937906][ T8858] ntfs3(loop3): Inode r=19 is not in use! [ 501.938048][ T8858] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 502.073945][ T8858] ntfs3(loop3): ino=1b, mi_enum_attr [ 502.103632][ T8858] ntfs3(loop3): ino=1b, mi_enum_attr [ 502.137909][ T8858] overlayfs: option "workdir=./file0/../file0:subj_role=" is useless in a non-upper mount, ignore [ 502.149362][ T8858] overlayfs: missing 'lowerdir' [ 502.189055][ T8864] loop2: detected capacity change from 0 to 512 [ 502.253418][ T8864] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 502.253533][ T8864] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 502.272045][ T8863] loop4: detected capacity change from 0 to 4096 [ 502.284819][ T8863] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 502.292747][ T8864] EXT4-fs (loop2): 1 truncate cleaned up [ 502.334121][ T8864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.369823][ T8864] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.986: Logical block already allocated [ 502.562389][ T8863] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 502.642106][ T8863] ntfs3(loop4): ino=1e, mi_enum_attr [ 502.642198][ T8863] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 502.677301][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.827568][ T8871] loop3: detected capacity change from 0 to 164 [ 502.859807][ T8871] Unable to read rock-ridge attributes [ 502.923823][ T8871] Unable to read rock-ridge attributes [ 503.022655][ T8875] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 503.023244][ T8875] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 503.384158][ T8871] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 505.441459][ T8879] loop4: detected capacity change from 0 to 256 [ 505.942204][ T8887] capability: warning: `syz.4.995' uses deprecated v2 capabilities in a way that may be insecure [ 506.271355][ T8892] loop3: detected capacity change from 0 to 2048 [ 506.545768][ T8892] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 507.836025][ T8905] loop3: detected capacity change from 0 to 256 [ 507.895048][ T8902] loop5: detected capacity change from 0 to 4096 [ 507.912553][ T8902] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 507.926549][ T8905] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 507.989221][ T8907] loop1: detected capacity change from 0 to 2048 [ 508.071150][ T8907] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 508.091006][ T8902] ntfs3(loop5): Inode r=19 is not in use! [ 508.091137][ T8902] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 508.132269][ T8902] ntfs3(loop5): ino=1b, mi_enum_attr [ 508.132336][ T8902] ntfs3(loop5): ino=1b, mi_enum_attr [ 508.144134][ T8902] overlayfs: option "workdir=./file0/../file0:subj_role=" is useless in a non-upper mount, ignore [ 508.144176][ T8902] overlayfs: missing 'lowerdir' [ 508.269399][ T8912] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 508.278777][ T8912] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 509.298675][ T8920] loop2: detected capacity change from 0 to 16 [ 509.305304][ T8920] erofs (device loop2): mounted with root inode @ nid 36. [ 509.459522][ T8922] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 509.459776][ T8922] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 510.126631][ T8931] loop2: detected capacity change from 0 to 512 [ 510.234178][ T8931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.234333][ T8931] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.503156][ T8934] loop1: detected capacity change from 0 to 4096 [ 510.819869][ T8934] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 511.789786][ T8934] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 511.818526][ T8934] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 512.026738][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 512.182240][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.416270][ T8951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1016'. [ 512.528796][ T8957] loop1: detected capacity change from 0 to 128 [ 512.593865][ T8958] loop2: detected capacity change from 0 to 2048 [ 512.631726][ T8954] loop4: detected capacity change from 0 to 2048 [ 512.661775][ T8958] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 512.675593][ T52] Bluetooth: hci5: command 0x0405 tx timeout [ 512.714151][ T8954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.732483][ T31] audit: type=1800 audit(1787874296.363:18): pid=8958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1018" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 513.191249][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.576008][ T8970] loop4: detected capacity change from 0 to 16 [ 513.605278][ T8970] erofs (device loop4): mounted with root inode @ nid 36. [ 513.741251][ T8971] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 513.761347][ T8971] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 514.025272][ T8970] syz.4.1023: attempt to access beyond end of device [ 514.025272][ T8970] loop4: rw=8912896, sector=68719476744, nr_sectors = 32 limit=16 [ 514.065233][ T8970] syz.4.1023: attempt to access beyond end of device [ 514.065233][ T8970] loop4: rw=8388608, sector=68719476744, nr_sectors = 8 limit=16 [ 514.115503][ T31] audit: type=1800 audit(1787874297.743:19): pid=8970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1023" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 514.798894][ T8976] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 514.799818][ T8976] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 515.526471][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 515.705935][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 515.714059][ T10] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 515.734893][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.734960][ T10] usb 2-1: Product: syz [ 515.735012][ T10] usb 2-1: Manufacturer: syz [ 515.735046][ T10] usb 2-1: SerialNumber: syz [ 515.794977][ T10] usb 2-1: config 0 descriptor?? [ 515.813110][ T8963] loop0: detected capacity change from 0 to 32768 [ 515.826992][ T8963] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1020 (8963) [ 515.831042][ T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 516.984266][ T10] gspca_topro: reg_w err -110 [ 517.005619][ T10] gspca_topro: Sensor soi763a [ 518.337432][ T8963] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 518.337505][ T8963] BTRFS info (device loop0): using sha256 checksum algorithm [ 518.347157][ T8963] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 518.361058][ T8963] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 518.471395][ T8963] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 518.471792][ T8963] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 518.472091][ T8963] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 518.472394][ T8963] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 518.472712][ T8963] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 518.491107][ T8963] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 518.491564][ T8963] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 518.492035][ T8963] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 518.499631][ T8963] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 518.500134][ T8963] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 518.511828][ T8963] BTRFS error (device loop0): open_ctree failed: -ENOMEM [ 518.593456][ T10] usb 2-1: USB disconnect, device number 5 [ 518.789237][ T9015] loop2: detected capacity change from 0 to 16 [ 518.853190][ T9015] erofs (device loop2): mounted with root inode @ nid 36. [ 519.045821][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 519.070900][ T9021] blktrace: Concurrent blktraces are not allowed on sg0 [ 519.125216][ T9024] net_ratelimit: 10 callbacks suppressed [ 519.125294][ T9024] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 519.197345][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 519.205375][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 519.205464][ T9] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 519.235300][ T9] usb 6-1: config 4 interface 0 has no altsetting 0 [ 519.254052][ T9] usb 6-1: string descriptor 0 read error: -22 [ 519.254192][ T9] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 519.357051][ T9] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 519.358183][ T9026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1036'. [ 519.442631][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 519.454036][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 519.464940][ T9] usb 6-1: media controller created [ 519.504132][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 519.592245][ T9034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.601742][ T9034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.672861][ T9] usb 6-1: USB disconnect, device number 6 [ 521.369790][ T9048] loop4: detected capacity change from 0 to 512 [ 521.370960][ T9048] EXT4-fs: Ignoring removed mblk_io_submit option [ 522.040254][ T9048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.040767][ T9048] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.794858][ T9048] EXT4-fs error (device loop4): ext4_get_inode_usage:899: inode #12: comm syz.4.1043: corrupted xattr block 6: invalid header [ 522.795046][ T9065] loop0: detected capacity change from 0 to 16 [ 522.811535][ T9065] erofs (device loop0): mounted with root inode @ nid 36. [ 522.837229][ T9065] syz.0.1048: attempt to access beyond end of device [ 522.837229][ T9065] loop0: rw=8912896, sector=68719476744, nr_sectors = 32 limit=16 [ 522.841855][ T9065] syz.0.1048: attempt to access beyond end of device [ 522.841855][ T9065] loop0: rw=8388608, sector=68719476744, nr_sectors = 8 limit=16 [ 522.855863][ T31] audit: type=1800 audit(1787874306.473:20): pid=9065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1048" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 522.952383][ T9067] loop3: detected capacity change from 0 to 512 [ 522.969879][ T9059] loop1: detected capacity change from 0 to 4096 [ 523.051519][ T9067] EXT4-fs (loop3): 1 truncate cleaned up [ 523.060469][ T9067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.144756][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.173408][ T9067] EXT4-fs error (device loop3): ext4_validate_block_bitmap:444: comm syz.3.1050: bg 0: block 465: padding at end of block bitmap is not set [ 523.274340][ T9067] EXT4-fs (loop3): Remounting filesystem read-only [ 523.274902][ T9067] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 523.545258][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.861131][ T9081] blktrace: Concurrent blktraces are not allowed on sg0 [ 525.161555][ T9081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1057'. [ 525.511584][ T9096] loop4: detected capacity change from 0 to 64 [ 525.603943][ T9100] netlink: 'syz.1.1062': attribute type 2 has an invalid length. [ 525.722537][ T9103] loop1: detected capacity change from 0 to 64 [ 526.932717][ T9110] loop2: detected capacity change from 0 to 16 [ 526.941295][ T9110] erofs (device loop2): mounted with root inode @ nid 36. [ 526.952795][ T9110] syz.2.1066: attempt to access beyond end of device [ 526.952795][ T9110] loop2: rw=8912896, sector=68719476744, nr_sectors = 32 limit=16 [ 526.968380][ T9110] syz.2.1066: attempt to access beyond end of device [ 526.968380][ T9110] loop2: rw=8388608, sector=68719476744, nr_sectors = 8 limit=16 [ 527.038633][ T31] audit: type=1800 audit(1787874310.643:21): pid=9110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1066" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 527.910174][ T9119] loop1: detected capacity change from 0 to 164 [ 527.942294][ T9118] loop0: detected capacity change from 0 to 2048 [ 527.960427][ T9117] loop5: detected capacity change from 0 to 2048 [ 528.010710][ T9118] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 528.011481][ T9117] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 528.018471][ T9119] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 528.088373][ T9122] loop4: detected capacity change from 0 to 256 [ 528.178733][ T9122] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 528.348468][ T9129] blktrace: Concurrent blktraces are not allowed on sg0 [ 528.532652][ T9132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1075'. [ 529.471271][ T30] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 529.521837][ T9136] loop5: detected capacity change from 0 to 1024 [ 529.601772][ T9136] EXT4-fs: Ignoring removed orlov option [ 529.643751][ T30] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 529.658961][ T30] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 529.659030][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.659086][ T30] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 529.659131][ T30] usb 4-1: config 1 has no interface number 0 [ 529.659191][ T30] usb 4-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 529.802721][ T9136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.825307][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.825384][ T30] usb 4-1: Product: syz [ 529.825430][ T30] usb 4-1: Manufacturer: syz [ 529.825465][ T30] usb 4-1: SerialNumber: syz [ 529.893935][ T30] cdc_wdm 4-1:1.128: skipping garbage [ 529.894010][ T30] cdc_wdm 4-1:1.128: probe with driver cdc_wdm failed with error -22 [ 529.904554][ T9145] netlink: 'syz.4.1078': attribute type 2 has an invalid length. [ 529.938730][ T9147] netlink: 'syz.0.1079': attribute type 21 has an invalid length. [ 529.948997][ T9147] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1079'. [ 529.996958][ T9136] EXT4-fs error (device loop5): ext4_free_inode:356: comm syz.5.1077: bit already cleared for inode 15 [ 530.044570][ T9149] loop2: detected capacity change from 0 to 8 [ 530.946469][ T5772] usb 4-1: USB disconnect, device number 6 [ 531.122513][ T9149] SQUASHFS error: Unable to read directory block [629:0] [ 531.578002][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.253290][ T9164] loop5: detected capacity change from 0 to 16 [ 535.062064][ T9164] erofs (device loop5): mounted with root inode @ nid 36. [ 535.087079][ T9172] loop3: detected capacity change from 0 to 2048 [ 535.179102][ T9172] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 535.207278][ T9172] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 535.649409][ T9175] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 535.772968][ T9179] blktrace: Concurrent blktraces are not allowed on sg0 [ 535.839244][ T9183] loop5: detected capacity change from 0 to 256 [ 535.934452][ T9188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1091'. [ 537.513393][ T9202] loop0: detected capacity change from 0 to 2048 [ 537.714863][ T9202] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 537.911730][ T9206] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 537.911972][ T9206] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 538.061132][ T9209] blktrace: Concurrent blktraces are not allowed on sg0 [ 538.208628][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 538.695987][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 538.797996][ T10] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 538.806860][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.806991][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 538.807043][ T10] usb 5-1: config 1 has no interface number 0 [ 538.807351][ T10] usb 5-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.950747][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.950813][ T10] usb 5-1: Product: syz [ 538.950861][ T10] usb 5-1: Manufacturer: syz [ 538.950895][ T10] usb 5-1: SerialNumber: syz [ 539.020536][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1112'. [ 539.072363][ T10] cdc_wdm 5-1:1.128: skipping garbage [ 539.080837][ T10] cdc_wdm 5-1:1.128: probe with driver cdc_wdm failed with error -22 [ 539.188253][ T9218] loop1: detected capacity change from 0 to 512 [ 539.197342][ T30] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 539.282747][ T9218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.282932][ T9218] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.363302][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 539.398994][ T9224] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 539.399287][ T9224] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 539.401249][ T30] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 539.409093][ T30] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 539.409142][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 539.409187][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 539.409226][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 539.409272][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 539.530480][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.539627][ T30] usb 3-1: Product: syz [ 539.541593][ T30] usb 3-1: Manufacturer: syz [ 539.551544][ T30] usb 3-1: SerialNumber: syz [ 539.608647][ T30] usb 3-1: config 0 descriptor?? [ 540.254412][ T5765] usb 5-1: USB disconnect, device number 8 [ 540.378288][ T9230] loop3: detected capacity change from 0 to 64 [ 540.415018][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.424453][ T9232] loop0: detected capacity change from 0 to 1024 [ 540.436858][ T30] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 540.436948][ T30] input input7: Device does not respond to id packet M [ 540.437358][ T30] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 540.437414][ T30] input input7: Device does not respond to id packet P [ 540.440229][ T30] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 540.440285][ T30] input input7: Device does not respond to id packet B [ 540.441139][ T30] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 540.441916][ T30] input input7: Device does not respond to id packet N [ 540.443514][ T30] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 540.444708][ T30] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 540.445236][ T30] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 540.447329][ T30] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 540.519467][ T30] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 540.689926][ T30] usb 3-1: USB disconnect, device number 6 [ 542.123044][ T9247] blktrace: Concurrent blktraces are not allowed on sg0 [ 542.334699][ T9251] loop4: detected capacity change from 0 to 2048 [ 542.419954][ T9251] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 542.429267][ T9248] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1114'. [ 542.905959][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 543.330119][ T10] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 543.444007][ T10] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 543.478236][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.478279][ T10] usb 2-1: config 0 has no interface number 0 [ 543.478374][ T10] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 543.478423][ T10] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 543.478496][ T10] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.503714][ T9260] blktrace: Concurrent blktraces are not allowed on sg0 [ 543.772719][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.772788][ T10] usb 2-1: Product: syz [ 543.772839][ T10] usb 2-1: Manufacturer: syz [ 543.772877][ T10] usb 2-1: SerialNumber: syz [ 543.866543][ T10] usb 2-1: config 0 descriptor?? [ 543.914756][ T9262] loop0: detected capacity change from 0 to 512 [ 543.937518][ T9262] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 544.019338][ T9262] EXT4-fs (loop0): 1 truncate cleaned up [ 544.032932][ T9263] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1118'. [ 544.089422][ T9262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.208165][ T9271] loop3: detected capacity change from 0 to 64 [ 544.221336][ T9270] loop4: detected capacity change from 0 to 512 [ 544.246921][ T9270] EXT4-fs (loop4): orphan cleanup on readonly fs [ 544.246979][ T9270] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 544.271939][ T9270] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 544.305582][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 544.305634][ C1] EXT4-fs (loop4): initial error at time 1787874327: ext4_mb_generate_buddy:1314 [ 544.305705][ C1] EXT4-fs (loop4): last error at time 1787874327: ext4_mb_generate_buddy:1314 [ 544.334793][ T9270] EXT4-fs error (device loop4): ext4_clear_blocks:874: inode #13: comm syz.4.1121: attempt to clear invalid blocks 2 len 1 [ 544.354437][ T9270] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 544.365734][ T9270] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.1121: invalid indirect mapped block 1819239214 (level 0) [ 544.365817][ T9270] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 544.366790][ T9274] loop5: detected capacity change from 0 to 24 [ 544.370019][ T9270] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.1121: invalid indirect mapped block 1819239214 (level 1) [ 544.370082][ T9270] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 544.372499][ T9274] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 544.386974][ T9270] EXT4-fs (loop4): 1 truncate cleaned up [ 544.403737][ T9270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 544.421774][ T9274] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 544.445707][ T10] usb 2-1: USB disconnect, device number 6 [ 544.503450][ T9274] VFS: Lookup of 'file0' in romfs loop5 would have caused loop [ 544.568537][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.635236][ T9276] loop2: detected capacity change from 0 to 512 [ 544.663025][ T9276] EXT4-fs (loop2): 1 truncate cleaned up [ 544.672774][ T9276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.703938][ T9276] EXT4-fs error (device loop2): ext4_validate_block_bitmap:444: comm syz.2.1124: bg 0: block 465: padding at end of block bitmap is not set [ 544.724998][ T9276] EXT4-fs (loop2): Remounting filesystem read-only [ 544.732537][ T9276] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 544.832594][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.835268][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.986753][ T9283] loop0: detected capacity change from 0 to 512 [ 545.000133][ T9281] blktrace: Concurrent blktraces are not allowed on sg0 [ 545.073953][ T9283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.089134][ T9283] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.212805][ T9291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1126'. [ 546.512767][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.606866][ T5772] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 547.977694][ T5772] usb 2-1: unable to get BOS descriptor or descriptor too short [ 548.004208][ T5772] usb 2-1: not running at top speed; connect to a high speed hub [ 548.004251][ T5772] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 548.167351][ T5772] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 548.167413][ T5772] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.167451][ T9311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.168047][ T9311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.260830][ T9310] loop2: detected capacity change from 0 to 512 [ 548.300106][ T9310] EXT4-fs: Ignoring removed mblk_io_submit option [ 548.374309][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 548.374359][ T5772] usb 2-1: Product: syz [ 548.374385][ T5772] usb 2-1: Manufacturer: syz [ 548.427847][ T9312] blktrace: Concurrent blktraces are not allowed on sg0 [ 548.790118][ T9310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.792154][ T9310] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.914429][ T9315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1134'. [ 549.174346][ T5772] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 549.278394][ T9310] EXT4-fs error (device loop2): ext4_get_inode_usage:899: inode #12: comm syz.2.1133: corrupted xattr block 6: invalid header [ 549.487913][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.564136][ T5772] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 549.566857][ T5772] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 549.566927][ T5772] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 549.567491][ T5772] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -71 [ 549.588585][ T5772] usb 2-1: USB disconnect, device number 7 [ 549.600500][ T9322] blktrace: Concurrent blktraces are not allowed on sg0 [ 549.652308][ T9325] loop0: detected capacity change from 0 to 64 [ 549.722998][ T9331] loop4: detected capacity change from 0 to 16 [ 549.774579][ T9331] erofs (device loop4): mounted with root inode @ nid 36. [ 549.802193][ T9331] erofs (device loop4): invalid h_shared_count 83 @ nid 46 [ 549.848105][ T9334] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1136'. [ 551.291886][ T9341] loop1: detected capacity change from 0 to 1024 [ 551.482371][ T9350] loop2: detected capacity change from 0 to 1024 [ 551.497072][ T9350] EXT4-fs: Ignoring removed orlov option [ 551.633398][ T9341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.650153][ T9350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.046073][ T9350] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.1147: bit already cleared for inode 15 [ 555.059575][ T9341] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 555.165402][ T9341] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.1143: missing EA_INODE flag [ 555.244573][ T9341] EXT4-fs (loop1): Remounting filesystem read-only [ 555.269604][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.368736][ T9371] loop5: detected capacity change from 0 to 64 [ 555.380945][ T9372] blktrace: Concurrent blktraces are not allowed on sg0 [ 555.455340][ T9373] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1150'. [ 555.570378][ T9374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1151'. [ 556.456964][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.563582][ T9379] loop0: detected capacity change from 0 to 512 [ 556.578921][ T9379] EXT4-fs: Ignoring removed mblk_io_submit option [ 556.651001][ T9379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.651134][ T9379] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.812372][ T5765] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 556.918902][ T9379] EXT4-fs error (device loop0): ext4_get_inode_usage:899: inode #12: comm syz.0.1152: corrupted xattr block 6: invalid header [ 556.978196][ T5765] usb 5-1: unable to get BOS descriptor or descriptor too short [ 556.984045][ T5765] usb 5-1: not running at top speed; connect to a high speed hub [ 556.984101][ T5765] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 556.986765][ T5765] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 556.986802][ T5765] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.001263][ T5765] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 557.001304][ T5765] usb 5-1: Product: syz [ 557.001330][ T5765] usb 5-1: Manufacturer: syz [ 557.063931][ T5765] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 557.074319][ T4926] Bluetooth: hci5: unexpected event for opcode 0x2002 [ 557.103117][ T9387] loop2: detected capacity change from 0 to 4096 [ 557.119886][ T9387] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 557.132783][ T9391] blktrace: Concurrent blktraces are not allowed on sg0 [ 557.143918][ T9385] loop1: detected capacity change from 0 to 4096 [ 557.158718][ T9387] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 557.175013][ T9387] NILFS (loop2): invalid segment: Checksum error in segment payload [ 557.175114][ T9387] NILFS (loop2): unable to fall back to spare super block [ 557.179866][ T9387] NILFS (loop2): error -22 while searching super root [ 557.190698][ T9385] ntfs3(loop1): ino=0, mi_enum_attr [ 557.256762][ T9385] ntfs3(loop1): ino=0, mi_enum_attr [ 557.256860][ T9385] ntfs3(loop1): ino=0, mi_enum_attr [ 557.278144][ T5765] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 557.281220][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.282874][ T5765] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 557.282942][ T5765] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 557.283642][ T5765] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 557.420948][ T5765] usb 5-1: USB disconnect, device number 9 [ 557.497051][ T9393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1157'. [ 557.539513][ T4926] Bluetooth: hci5: unexpected event for opcode 0x2005 [ 557.570973][ T9046] udevd[9046]: incorrect nilfs2 checksum on /dev/loop2 [ 557.642843][ T9385] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 557.642843][ T9385] [ 558.137461][ T9387] loop2: detected capacity change from 0 to 4096 [ 558.650411][ T9387] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 560.948140][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.967822][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.059947][ T9422] netlink: 'syz.5.1168': attribute type 10 has an invalid length. [ 561.071042][ T9422] ipvlan0: entered allmulticast mode [ 561.080485][ T9422] veth0_vlan: entered allmulticast mode [ 561.097856][ T9422] team0: Device ipvlan0 failed to register rx_handler [ 561.204959][ T9426] loop4: detected capacity change from 0 to 256 [ 561.420620][ T9430] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 561.421354][ T9430] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 562.225886][ T9431] loop1: detected capacity change from 0 to 64 [ 562.271232][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.271333][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.799376][ T9439] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 562.799612][ T9439] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 562.893291][ T9441] loop1: detected capacity change from 0 to 2048 [ 562.924298][ T9443] blktrace: Concurrent blktraces are not allowed on sg0 [ 562.964244][ T9441] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 563.029039][ T9448] loop5: detected capacity change from 0 to 64 [ 563.083497][ T9446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1179'. [ 563.111498][ T9450] loop3: detected capacity change from 0 to 764 [ 563.143127][ T9450] rock: directory entry would overflow storage [ 563.143173][ T9450] rock: sig=0x5245, size=8, remaining=5 [ 564.722270][ T4926] Bluetooth: hci5: unexpected event for opcode 0x204e [ 564.737596][ T9468] netlink: 'syz.3.1186': attribute type 8 has an invalid length. [ 564.771100][ T9470] loop4: detected capacity change from 0 to 256 [ 565.540434][ T5765] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 565.559290][ T9477] blktrace: Concurrent blktraces are not allowed on sg0 [ 565.692801][ T9480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1191'. [ 565.719331][ T5765] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 565.733047][ T5765] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 565.742737][ T5765] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 565.754423][ T5765] usb 6-1: config 220 has no interface number 2 [ 565.754515][ T5765] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 565.754575][ T5765] usb 6-1: config 220 interface 0 has no altsetting 0 [ 565.754609][ T5765] usb 6-1: config 220 interface 76 has no altsetting 0 [ 565.754644][ T5765] usb 6-1: config 220 interface 1 has no altsetting 0 [ 565.820877][ T5765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.829527][ T5765] usb 6-1: Product: syz [ 565.834031][ T5765] usb 6-1: Manufacturer: syz [ 565.834080][ T5765] usb 6-1: SerialNumber: syz [ 567.380198][ T9482] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 567.395854][ T9482] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 567.411072][ T5765] usb 6-1: selecting invalid altsetting 0 [ 567.443493][ T5765] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 567.443575][ T5765] uvcvideo 6-1:220.0: No valid video chain found. [ 567.655904][ T5765] usb 6-1: selecting invalid altsetting 0 [ 567.665458][ T5765] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 567.700119][ T5765] usb 6-1: USB disconnect, device number 7 [ 567.854634][ T9486] xt_policy: output policy not valid in PREROUTING and INPUT [ 567.975672][ T9489] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 567.984711][ T9489] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 568.086781][ T9492] blktrace: Concurrent blktraces are not allowed on sg0 [ 568.170603][ T9494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1198'. [ 571.328257][ T4926] Bluetooth: hci3: unexpected event for opcode 0x204e [ 571.730230][ T9520] loop1: detected capacity change from 0 to 64 [ 571.840785][ T9518] loop4: detected capacity change from 0 to 2048 [ 571.895184][ T9521] loop3: detected capacity change from 0 to 4096 [ 571.895847][ T9518] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 571.917139][ T9523] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 571.924166][ T9523] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 571.934546][ T9521] ntfs3(loop3): ino=3, mi_enum_attr [ 574.714576][ T9542] loop5: detected capacity change from 0 to 256 [ 574.744026][ T9542] exfat: Deprecated parameter 'utf8' [ 574.744334][ T9542] exfat: Deprecated parameter 'namecase' [ 574.744441][ T9542] exfat: Deprecated parameter 'namecase' [ 574.904165][ T9542] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 575.065679][ T52] Bluetooth: hci5: command 0x0405 tx timeout [ 578.734410][ T9560] blktrace: Concurrent blktraces are not allowed on sg0 [ 578.741734][ T9562] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 578.741909][ T9562] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 579.004376][ T9565] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1217'. [ 580.724323][ T9582] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1221'. [ 580.943905][ T9576] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 580.944134][ T9576] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 581.003742][ T9578] orangefs_mount: mount request failed with -4 [ 581.500544][ T9590] xt_HMARK: proto mask must be zero with L3 mode [ 582.882799][ T9606] loop3: detected capacity change from 0 to 256 [ 582.986753][ T9606] exfat: Deprecated parameter 'utf8' [ 582.986818][ T9606] exfat: Deprecated parameter 'utf8' [ 583.020799][ T9606] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 583.116893][ T9606] exFAT-fs (loop3): error, in sector 160, dentry 12 should be unused, but 0x85 [ 583.930364][ T9610] loop4: detected capacity change from 0 to 32768 [ 583.956202][ T9610] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1236 (9610) [ 584.070360][ T9610] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 584.070423][ T9610] BTRFS info (device loop4): using sha256 checksum algorithm [ 584.167916][ T9608] loop0: detected capacity change from 0 to 32768 [ 584.260970][ T9608] JBD2: Ignoring recovery information on journal [ 584.718038][ T9610] BTRFS info (device loop4): enabling ssd optimizations [ 584.718104][ T9610] BTRFS info (device loop4): turning on async discard [ 584.718157][ T9610] BTRFS info (device loop4): enabling free space tree [ 585.161184][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1248'. [ 585.395744][ T9608] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 585.599298][ T9658] loop1: detected capacity change from 0 to 8 [ 585.710400][ T9658] SQUASHFS error: lzo decompression failed, data probably corrupt [ 585.710477][ T9658] SQUASHFS error: Failed to read block 0x1dd: -5 [ 585.710523][ T9658] SQUASHFS error: Unable to read metadata cache entry [1db] [ 585.710553][ T9658] SQUASHFS error: Unable to read inode 0xa7 [ 585.932929][ T5623] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 586.256825][ T9608] (syz.0.1234,9608,0):ocfs2_check_dir_entry:335 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 586.256931][ T9608] (syz.0.1234,9608,0):ocfs2_prepare_dir_for_insert:4398 ERROR: status = -2 [ 586.256999][ T9608] (syz.0.1234,9608,0):ocfs2_mknod:303 ERROR: status = -2 [ 586.257040][ T9608] (syz.0.1234,9608,0):ocfs2_mknod:513 ERROR: status = -2 [ 586.333233][ T9665] loop1: detected capacity change from 0 to 16 [ 586.395860][ T8626] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 586.576480][ T8626] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 586.582688][ T8626] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.589864][ T8626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.589904][ T8626] usb 6-1: Product: syz [ 586.589930][ T8626] usb 6-1: Manufacturer: syz [ 586.589955][ T8626] usb 6-1: SerialNumber: syz [ 586.619465][ T8626] usb 6-1: config 0 descriptor?? [ 586.673718][ T8626] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 586.776112][ T5618] ocfs2: Unmounting device (7,0) on (node local) [ 588.452380][ T8626] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 588.461530][ T8626] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 589.930334][ T8626] usb 6-1: USB disconnect, device number 8 [ 589.974484][ T9683] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 590.292729][ T9690] blktrace: Concurrent blktraces are not allowed on sg0 [ 590.302921][ T9691] loop1: detected capacity change from 0 to 64 [ 590.522390][ T9697] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1261'. [ 591.384430][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'. [ 593.068251][ T9716] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1266'. [ 593.112321][ T9718] loop2: detected capacity change from 0 to 16 [ 594.861872][ T9743] loop5: detected capacity change from 0 to 256 [ 595.082100][ T9745] loop0: detected capacity change from 0 to 1024 [ 595.089397][ T9745] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 595.187892][ T9745] hfsplus: filesystem is marked journaled, leaving read-only. [ 596.720461][ T9756] blktrace: Concurrent blktraces are not allowed on sg0 [ 596.854814][ T9760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1282'. [ 599.530878][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 600.260197][ T9784] loop3: detected capacity change from 0 to 128 [ 600.971149][ T9784] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 600.990160][ T9784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 602.253387][ T9793] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 602.295428][ T9795] loop3: detected capacity change from 0 to 1024 [ 602.850232][ T9808] netlink: 802 bytes leftover after parsing attributes in process `syz.3.1298'. [ 603.085418][ T9811] Bluetooth: MGMT ver 1.23 [ 604.728701][ T9821] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 604.742626][ T9821] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 607.357822][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'. [ 608.222579][ T9838] netlink: 774 bytes leftover after parsing attributes in process `syz.5.1310'. [ 609.760901][ T9854] capability: warning: `syz.1.1317' uses 32-bit capabilities (legacy support in use) [ 610.781184][ T9843] loop2: detected capacity change from 0 to 32768 [ 610.803285][ T9843] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1311 (9843) [ 611.039045][ T9843] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 611.039116][ T9843] BTRFS info (device loop2): using crc32c checksum algorithm [ 611.262424][ T9843] BTRFS info (device loop2): enabling ssd optimizations [ 611.262492][ T9843] BTRFS info (device loop2): turning on flush-on-commit [ 611.262522][ T9843] BTRFS info (device loop2): enabling free space tree [ 611.262581][ T9843] BTRFS info (device loop2): enabling auto defrag [ 611.262610][ T9843] BTRFS info (device loop2): use lzo compression, level 1 [ 611.262654][ T9843] BTRFS info (device loop2): max_inline set to 4096 [ 611.611818][ T5630] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 611.760617][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1322'. [ 614.714225][ T9901] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 614.730266][ T9901] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 618.858392][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'. [ 620.074134][ T9949] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 620.075038][ T9949] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 621.790087][ T52] Bluetooth: hci5: command 0x0405 tx timeout [ 623.009727][ T9954] warning: `syz.0.1347' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 623.324595][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1348'. [ 623.399074][ T9960] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 623.406903][ T9960] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 623.480188][ T9960] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 623.714110][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.714258][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.822597][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1355'. [ 628.307673][ T9991] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 628.327373][ T9991] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 628.657804][ T9997] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 628.662118][ T9997] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 632.739538][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1368'. [ 633.109376][T10012] blktrace: Concurrent blktraces are not allowed on sg0 [ 633.408179][T10017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1369'. [ 633.814132][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1372'. [ 638.535164][T10056] loop2: detected capacity change from 0 to 16 [ 638.911880][T10056] erofs (device loop2): mounted with root inode @ nid 36. [ 638.983504][ T52] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 639.041801][T10056] erofs (device loop2): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 639.041954][T10056] erofs (device loop2): read error -117 @ 1 of nid 89 [ 639.042225][ T31] audit: type=1800 audit(1787874422.673:22): pid=10056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1381" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 639.428843][T10066] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 639.430115][T10066] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 640.137654][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'. [ 642.159145][T10082] loop1: detected capacity change from 0 to 256 [ 642.164974][T10082] exfat: Deprecated parameter 'utf8' [ 642.288994][T10082] exfat: Deprecated parameter 'utf8' [ 642.295137][T10082] exfat: Deprecated parameter 'namecase' [ 642.295249][T10082] exfat: Deprecated parameter 'namecase' [ 642.354034][T10082] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 642.773221][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'. [ 644.171373][T10097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 646.035496][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1402'. [ 647.899472][T10132] loop2: detected capacity change from 0 to 512 [ 648.090259][T10132] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 648.090322][T10132] loop2: lost filesystem error report for type 5 error -12 [ 648.099808][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 648.099841][ C0] EXT4-fs (loop2): initial error at time 1787874431: ext4_process_orphan:346 [ 648.099878][ C0] EXT4-fs (loop2): last error at time 1787874431: ext4_process_orphan:346 [ 648.152502][T10132] EXT4-fs (loop2): 2 truncates cleaned up [ 648.251925][T10132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.802623][T10132] EXT4-fs error (device loop2): empty_inline_dir:1794: inode #12: block 7: comm syz.2.1404: bad entry in directory: directory entry overrun - offset=4, inode=4278190093, rec_len=196860, size=60 fake=0 [ 648.858386][T10132] EXT4-fs warning (device loop2): empty_inline_dir:1797: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 649.107317][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.293719][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 649.702213][T10150] loop5: detected capacity change from 0 to 256 [ 649.751821][T10150] exfat: Deprecated parameter 'utf8' [ 649.760906][T10150] exfat: Deprecated parameter 'utf8' [ 649.780523][T10150] exfat: Deprecated parameter 'namecase' [ 649.791423][T10150] exfat: Deprecated parameter 'namecase' [ 649.949575][T10150] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 653.932658][ T8626] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 654.244534][ T8626] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 654.329716][ T8626] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 654.329805][ T8626] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 654.329904][ T8626] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 654.329953][ T8626] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 654.330053][ T8626] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.428389][T10171] loop1: detected capacity change from 0 to 64 [ 654.473549][T10168] loop2: detected capacity change from 0 to 1024 [ 654.489343][ T8626] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 654.499534][T10168] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 654.511341][ T8626] usb 6-1: invalid MIDI out EP 0 [ 655.053685][T10171] [ 655.056068][T10171] ====================================================== [ 655.063089][T10171] WARNING: possible circular locking dependency detected [ 655.070113][T10171] syzkaller #0 Not tainted [ 655.074543][T10171] ------------------------------------------------------ [ 655.081565][T10171] syz.1.1417/10171 is trying to acquire lock: [ 655.087642][T10171] ffff88805335a8e0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xd30 [ 655.098416][T10171] [ 655.098416][T10171] but task is already holding lock: [ 655.105793][T10171] ffff88804da120a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 655.115196][T10171] [ 655.115196][T10171] which lock already depends on the new lock. [ 655.115196][T10171] [ 655.125607][T10171] [ 655.125607][T10171] the existing dependency chain (in reverse order) is: [ 655.134633][T10171] [ 655.134633][T10171] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 655.142596][T10171] lock_acquire+0x1d1/0x380 [ 655.147645][T10171] __mutex_lock+0x1a4/0x1bc0 [ 655.152788][T10171] hfs_find_init+0x273/0x330 [ 655.157937][T10171] hfs_ext_read_extent+0x1a3/0x9e0 [ 655.163593][T10171] hfs_get_block+0x57c/0x840 [ 655.168747][T10171] block_read_full_folio+0x2ff/0x8c0 [ 655.174598][T10171] filemap_read_folio+0xfc/0x3b0 [ 655.180106][T10171] do_read_cache_folio+0x2d7/0x6b0 [ 655.185773][T10171] read_cache_page+0x5b/0x1b0 [ 655.191086][T10171] __hfs_bnode_create+0x716/0x990 [ 655.196682][T10171] hfs_bnode_find+0x2d5/0xd50 [ 655.201926][T10171] hfs_btree_open+0x180f/0x2110 [ 655.207352][T10171] hfs_mdb_get+0x17d9/0x2110 [ 655.212498][T10171] hfs_fill_super+0x4ab/0x860 [ 655.217736][T10171] get_tree_bdev_flags+0x38c/0x620 [ 655.223410][T10171] vfs_get_tree+0x92/0x320 [ 655.228377][T10171] path_mount+0x7d0/0x24c0 [ 655.233342][T10171] __x64_sys_mount+0x293/0x310 [ 655.238655][T10171] do_syscall_64+0x123/0x790 [ 655.243794][T10171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.250322][T10171] [ 655.250322][T10171] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 655.259581][T10171] check_prev_add+0xeb/0xe60 [ 655.264745][T10171] __lock_acquire+0x1492/0x1ec0 [ 655.270139][T10171] lock_acquire+0x1d1/0x380 [ 655.275189][T10171] __mutex_lock+0x1a4/0x1bc0 [ 655.280333][T10171] hfs_extend_file+0xa6/0xd30 [ 655.285555][T10171] hfs_bmap_reserve+0x2a9/0x3a0 [ 655.290975][T10171] __hfs_ext_write_extent+0x3c4/0x510 [ 655.296899][T10171] hfs_ext_read_extent+0x80b/0x9e0 [ 655.302565][T10171] hfs_extend_file+0x4ff/0xd30 [ 655.307875][T10171] hfs_get_block+0x17f/0x840 [ 655.313113][T10171] __block_write_begin_int+0x57a/0x19c0 [ 655.319237][T10171] block_write_begin+0x9d/0x1d0 [ 655.324654][T10171] cont_write_begin+0x573/0xa10 [ 655.330074][T10171] hfs_write_begin+0x143/0x260 [ 655.335392][T10171] generic_perform_write+0x292/0xa40 [ 655.341242][T10171] __generic_file_write_iter+0x1f7/0x240 [ 655.347514][T10171] generic_file_write_iter+0xe1/0x390 [ 655.353437][T10171] vfs_write+0x6af/0x1050 [ 655.358321][T10171] ksys_write+0x12a/0x250 [ 655.363207][T10171] do_syscall_64+0x123/0x790 [ 655.368358][T10171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.374799][T10171] [ 655.374799][T10171] other info that might help us debug this: [ 655.374799][T10171] [ 655.385036][T10171] Possible unsafe locking scenario: [ 655.385036][T10171] [ 655.392495][T10171] CPU0 CPU1 [ 655.397867][T10171] ---- ---- [ 655.403239][T10171] lock(&tree->tree_lock/1); [ 655.407952][T10171] lock(&HFS_I(tree->inode)->extents_lock); [ 655.416477][T10171] lock(&tree->tree_lock/1); [ 655.423715][T10171] lock(&HFS_I(tree->inode)->extents_lock); [ 655.429727][T10171] [ 655.429727][T10171] *** DEADLOCK *** [ 655.429727][T10171] [ 655.437876][T10171] locks held by syz.1.1417/10171: 5, last CPU#0: [ 655.444222][T10171] #0: ffff88807f95db30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 655.453352][T10171] #1: ffff88804c8b4460 (sb_writers#30){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 655.462511][T10171] #2: ffff888053359940 (&sb->s_type->i_mutex_key#44){+.+.}-{4:4}, at: generic_file_write_iter+0x8c/0x390 [ 655.473920][T10171] #3: ffff8880533597a0 (&HFS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xd30 [ 655.484797][T10171] #4: ffff88804da120a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 655.494655][T10171] [ 655.494655][T10171] stack backtrace: [ 655.500554][T10171] CPU: 0 UID: 0 PID: 10171 Comm: syz.1.1417 Not tainted syzkaller #0 PREEMPT(full) [ 655.509953][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 655.520031][T10171] Call Trace: [ 655.523374][T10171] [ 655.526320][T10171] dump_stack_lvl+0x100/0x190 [ 655.531042][T10171] print_circular_bug.cold+0x178/0x1be [ 655.536559][T10171] check_noncircular+0x146/0x160 [ 655.541555][T10171] check_prev_add+0xeb/0xe60 [ 655.546199][T10171] __lock_acquire+0x1492/0x1ec0 [ 655.551083][T10171] lock_acquire+0x1d1/0x380 [ 655.555610][T10171] ? hfs_extend_file+0xa6/0xd30 [ 655.560491][T10171] ? __pfx___might_resched+0x10/0x10 [ 655.565830][T10171] __mutex_lock+0x1a4/0x1bc0 [ 655.570453][T10171] ? hfs_extend_file+0xa6/0xd30 [ 655.575329][T10171] ? hfs_extend_file+0xa6/0xd30 [ 655.580206][T10171] ? __pfx___schedule+0x10/0x10 [ 655.585083][T10171] ? __pfx___mutex_lock+0x10/0x10 [ 655.590161][T10171] ? preempt_schedule_thunk+0x16/0x40 [ 655.595570][T10171] ? preempt_schedule_common+0x3c/0xb0 [ 655.601067][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.606747][T10171] ? hfs_extend_file+0xa6/0xd30 [ 655.611625][T10171] hfs_extend_file+0xa6/0xd30 [ 655.616334][T10171] ? __pfx_hfs_extend_file+0x10/0x10 [ 655.621642][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.627320][T10171] hfs_bmap_reserve+0x2a9/0x3a0 [ 655.632221][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.637898][T10171] __hfs_ext_write_extent+0x3c4/0x510 [ 655.643298][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.648971][T10171] hfs_ext_read_extent+0x80b/0x9e0 [ 655.654114][T10171] ? __pfx_hfs_ext_read_extent+0x10/0x10 [ 655.659784][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.665456][T10171] ? lock_acquire+0x1d1/0x380 [ 655.670161][T10171] ? folio_alloc_buffers+0x55a/0x8e0 [ 655.675504][T10171] hfs_extend_file+0x4ff/0xd30 [ 655.680303][T10171] ? find_held_lock+0x2b/0x80 [ 655.685018][T10171] ? __pfx_hfs_extend_file+0x10/0x10 [ 655.690331][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.696092][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.701777][T10171] ? do_raw_spin_unlock+0x145/0x1e0 [ 655.707014][T10171] hfs_get_block+0x17f/0x840 [ 655.711642][T10171] ? __pfx_hfs_get_block+0x10/0x10 [ 655.716788][T10171] __block_write_begin_int+0x57a/0x19c0 [ 655.722390][T10171] ? __pfx_hfs_get_block+0x10/0x10 [ 655.727533][T10171] ? __pfx___block_write_begin_int+0x10/0x10 [ 655.733562][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.739241][T10171] ? __pfx_hfs_get_block+0x10/0x10 [ 655.744381][T10171] block_write_begin+0x9d/0x1d0 [ 655.749286][T10171] cont_write_begin+0x573/0xa10 [ 655.754188][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.759862][T10171] ? __mark_inode_dirty+0x55c/0x16e0 [ 655.765192][T10171] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 655.771030][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.776703][T10171] ? __pfx_hfs_get_block+0x10/0x10 [ 655.781844][T10171] ? __pfx_cont_write_begin+0x10/0x10 [ 655.787273][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.792945][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.798620][T10171] hfs_write_begin+0x143/0x260 [ 655.803415][T10171] ? __pfx_hfs_get_block+0x10/0x10 [ 655.808559][T10171] generic_perform_write+0x292/0xa40 [ 655.813922][T10171] ? __pfx_generic_perform_write+0x10/0x10 [ 655.819779][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.825444][T10171] ? file_update_time_flags+0x38c/0x520 [ 655.831029][T10171] __generic_file_write_iter+0x1f7/0x240 [ 655.836704][T10171] generic_file_write_iter+0xe1/0x390 [ 655.842111][T10171] vfs_write+0x6af/0x1050 [ 655.846537][T10171] ? __pfx_generic_file_write_iter+0x10/0x10 [ 655.852553][T10171] ? __pfx_vfs_write+0x10/0x10 [ 655.857352][T10171] ? find_held_lock+0x2b/0x80 [ 655.862086][T10171] ksys_write+0x12a/0x250 [ 655.866470][T10171] ? __pfx_ksys_write+0x10/0x10 [ 655.871397][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 655.877068][T10171] do_syscall_64+0x123/0x790 [ 655.881698][T10171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.887620][T10171] RIP: 0033:0x7ff33a99e159 [ 655.892055][T10171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.911695][T10171] RSP: 002b:00007ff33b835028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 655.920167][T10171] RAX: ffffffffffffffda RBX: 00007ff33ac25fa0 RCX: 00007ff33a99e159 [ 655.928166][T10171] RDX: 0000000000001006 RSI: 0000200000001400 RDI: 0000000000000004 [ 655.936166][T10171] RBP: 00007ff33aa35024 R08: 0000000000000000 R09: 0000000000000000 [ 655.944161][T10171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.952149][T10171] R13: 00007ff33ac26038 R14: 00007ff33ac25fa0 R15: 00007ffc63de0808 [ 655.960176][T10171] [ 656.556172][ T8609] udevd[8609]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 656.635103][ T8626] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 656.638944][ T5620] hfs: node 4:3 still has 1 user(s)! [ 656.647296][ T8626] usb 6-1: USB disconnect, device number 9