last executing test programs: 3m30.680024606s ago: executing program 2 (id=1429): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x0, 0x10, 0x200, 0x10, 0x3, 0x20, 0xffffffff, 0x20, 0x7, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) r6 = syz_open_procfs(0x0, 0x0) lseek(r6, 0x4, 0x2) getdents64(r6, 0xffffffffffffffff, 0x43) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900), 0x20000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r7, 0x4004510f, 0x0) write(r5, &(0x7f0000000180)='1', 0x1) 3m29.705675429s ago: executing program 2 (id=1432): socket(0x2, 0x80805, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) io_uring_setup(0xbfb, &(0x7f0000000240)={0x0, 0x8ee9, 0x1, 0x80000001, 0x2b2}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3m29.359865608s ago: executing program 2 (id=1436): bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000f00), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000f40)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7d7, 0x3a, 'nq\x00', 0x3a, '!\'', 0x3a, './file0'}, 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) ioctl$VIDIOC_ENUMAUDIO(r5, 0xc0345641, &(0x7f0000000180)={0x8, "ecdf484baf5af4d15cf0d9ac210d34191ae82cc264bb45c20cd00242279288c9", 0x2, 0x1}) socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) 3m24.359712438s ago: executing program 2 (id=1443): r0 = fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 3m24.156910013s ago: executing program 2 (id=1444): creat(&(0x7f0000000000)='./file0\x00', 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) migrate_pages(0x0, 0x4, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, 0x0, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffeffff}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) write(r3, &(0x7f0000000180)='r:s/p ./file0:0', 0xf) 3m22.758477786s ago: executing program 2 (id=1447): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)="31301f312031", 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\x00', 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r5 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x800, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[], 0x38}}, 0x0) 3m6.654394962s ago: executing program 32 (id=1447): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)="31301f312031", 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\x00', 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r5 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x800, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[], 0x38}}, 0x0) 31.301931619s ago: executing program 1 (id=1787): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000f00), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000f40)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7d7, 0x3a, 'nq\x00', 0x3a, '!\'', 0x3a, './file0'}, 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) ioctl$VIDIOC_ENUMAUDIO(r5, 0xc0345641, &(0x7f0000000180)={0x8, "ecdf484baf5af4d15cf0d9ac210d34191ae82cc264bb45c20cd00242279288c9", 0x2, 0x1}) socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) writev(r4, &(0x7f0000001980)=[{&(0x7f0000000240)="f9", 0x1}], 0x1) 25.200080106s ago: executing program 3 (id=1801): epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$comedi(0xffffff9c, &(0x7f00000044c0)='/dev/comedi3\x00', 0x200, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) 22.846780542s ago: executing program 3 (id=1803): socket$inet6(0xa, 0x8080b, 0x6) 22.613658558s ago: executing program 4 (id=1805): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x203, &(0x7f00000000c0), 0x13f}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) writev(r0, &(0x7f0000000040), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r1, 0x6000000) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xc9, 0x0, 0x0) close(r2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000000)='./file1\x00', 0x80000001) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}}, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f00000004c0)=0x4100, 0x9, 0x0) 21.535927733s ago: executing program 3 (id=1808): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x104) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r4, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r2, 0x1, 0xfffffffc, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 21.402863787s ago: executing program 4 (id=1809): mkdir(&(0x7f0000000400)='./file0\x00', 0x3f) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) stat(&(0x7f00000007c0)='./file0/../file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 21.338561368s ago: executing program 1 (id=1810): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_procfs(r0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000f00), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000f40)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7d7, 0x3a, 'nq\x00', 0x3a, '!\'', 0x3a, './file0'}, 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) ioctl$VIDIOC_ENUMAUDIO(r5, 0xc0345641, &(0x7f0000000180)={0x8, "ecdf484baf5af4d15cf0d9ac210d34191ae82cc264bb45c20cd00242279288c9", 0x2, 0x1}) socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) writev(r4, &(0x7f0000001980)=[{&(0x7f0000000240)="f9", 0x1}], 0x1) 21.038197175s ago: executing program 5 (id=1812): socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c0002800500"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) 20.206891066s ago: executing program 1 (id=1813): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9040070900be008300000000a911007a150b5d8c3ddae5156e73f54463a9c2032c3cf877fb1465b17808a997ed7147858cd02ff942e0273b757a698f7bfd02309ba76661dddc00a122ecfc36c3aaae05315b3d374836fb1ac3b5e8bda3960f2ced7d18d6dda1ab06ceea0ed6a97b7aabce604454d71c0d93220650f72248aab0b4ff63f238b981dbd805"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000000)='BBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x4b, 0x0, &(0x7f0000000000)) 20.151819367s ago: executing program 3 (id=1814): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x8010) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) 19.101623222s ago: executing program 5 (id=1815): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r2, 0x80506409, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) r6 = syz_open_procfs(0x0, 0x0) lseek(r6, 0x4, 0x2) getdents64(r6, 0xffffffffffffffff, 0x43) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900), 0x20000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r7, 0x4004510f, 0x0) write(r5, &(0x7f0000000180)='1', 0x1) 18.804447299s ago: executing program 4 (id=1816): timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000300)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000002280)=[{0xa, 0xf0, 0x5d, 0x9}, {0xfffa, 0x7f, 0x6, 0x9}]}) open_tree(0xffffffffffffffff, &(0x7f00000022c0)='./cgroup/../file0\x00', 0x1800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f00000f8000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_procfs(0x0, 0x0) futimesat(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) ioctl$TCSETS(r3, 0x5402, 0x0) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[], 0xff2e) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x81, 0x6, 0x40000005, 0x7ff, 0xd, "d206000094f3ffffd51930f9000100"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x700, 0xfdef) 18.155969445s ago: executing program 0 (id=1817): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) 16.915037625s ago: executing program 4 (id=1818): creat(0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) migrate_pages(0x0, 0x4, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, 0x0, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffeffff}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) write(r4, &(0x7f0000000180)='r:s/p ./file0:0', 0xf) 16.384445817s ago: executing program 0 (id=1819): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) 14.661721688s ago: executing program 3 (id=1820): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000f00), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000f40)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7d7, 0x3a, 'nq\x00', 0x3a, '!\'', 0x3a, './file0'}, 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) ioctl$VIDIOC_ENUMAUDIO(r5, 0xc0345641, &(0x7f0000000180)={0x8, "ecdf484baf5af4d15cf0d9ac210d34191ae82cc264bb45c20cd00242279288c9", 0x2, 0x1}) socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) writev(r4, &(0x7f0000001980)=[{&(0x7f0000000240)="f9", 0x1}], 0x1) 14.559592311s ago: executing program 1 (id=1821): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, 0x0) 14.555512041s ago: executing program 4 (id=1822): write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=ANY=[], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = socket(0x23, 0x3, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x62, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, 0x0, 0x0, 0x2000c001, 0x0, 0x0) 13.972341965s ago: executing program 5 (id=1823): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_procfs(r0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000f00), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000f40)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7d7, 0x3a, 'nq\x00', 0x3a, '!\'', 0x3a, './file0'}, 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) ioctl$VIDIOC_ENUMAUDIO(r5, 0xc0345641, &(0x7f0000000180)={0x8, "ecdf484baf5af4d15cf0d9ac210d34191ae82cc264bb45c20cd00242279288c9", 0x2, 0x1}) socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) writev(r4, &(0x7f0000001980)=[{&(0x7f0000000240)="f9", 0x1}], 0x1) 13.34751012s ago: executing program 0 (id=1824): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x31) r3 = add_key(0x0, &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000f80)='G', 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r1, 0x47) close_range(r0, 0xffffffffffffffff, 0x0) 13.119828945s ago: executing program 0 (id=1825): socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c0002800500"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) 12.985504479s ago: executing program 1 (id=1826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) syz_io_uring_setup(0xefd, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) connect$tipc(r4, 0x0, 0x0) 11.919014434s ago: executing program 5 (id=1827): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x3b3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa4de, 0x2000, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x490) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.713013779s ago: executing program 0 (id=1828): r0 = fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003980)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 11.466037045s ago: executing program 0 (id=1829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 10.814092191s ago: executing program 5 (id=1830): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(\x9b\n\xc2k4\x7f\x12\xa9eISOs\x8c\xb4\xe7FeQ\xc6$`\xec\xb7J z\x8d\xba\x83L\x92j_U\xfa\b\xea\xbfbYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe1G\x16n4\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8\xe5\x97\xd9b\xf5\xe3@\xdb9\xf8\xff\xc0\xc2\xb9L\xcdW\f\xfc\xa0\r?\x95\x00\x84\xa9,&\xa9\x818\xf8\xb2\xf9dQ\xc4\x05B\xa4\n\x1a\n\x13\x1b\xbb+xr\xbb\xfe\x15x\x83\xafw3\xb2H\x97\xac\x15qG\x02{\x15\x8a\xc0\x8c3\x05\x82\xdd4\x17\xf2\xf9\x11%}\xbeZ\x8e\x8d#\xebQ\xe1\xf3\xfe:\x04\x9a\xac\xb3.\x02k\x9f0q\xf7\xee]c\x85\x9a\xb6s\x193w[\xec\x89\x9b\xad', 0x3) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0x78) sendfile(0xffffffffffffffff, r0, &(0x7f0000000880), 0x4) fcntl$addseals(r0, 0x409, 0x8) fallocate(r0, 0x3, 0x40000016, 0x1) 8.867837818s ago: executing program 4 (id=1831): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9040070900be008300000000a911007a150b5d8c3ddae5156e73f54463a9c2032c3cf877fb1465b17808a997ed7147858cd02ff942e0273b757a698f7bfd02309ba76661dddc00a122ecfc36c3aaae05315b3d374836fb1ac3b5e8bda3960f2ced7d18d6dda1ab06ceea0ed6a97b7aabce604454d71c0d93220650f72248aab0b4ff63f238b981dbd805"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000000)='BBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x4b, 0x0, &(0x7f0000000000)) 8.819102079s ago: executing program 5 (id=1832): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x31dd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x484}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0) 513.588468ms ago: executing program 3 (id=1833): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r2, 0x80506409, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) r6 = syz_open_procfs(0x0, 0x0) lseek(r6, 0x4, 0x2) getdents64(r6, 0xffffffffffffffff, 0x43) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900), 0x20000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r7, 0x4004510f, 0x0) write(r5, &(0x7f0000000180)='1', 0x1) 0s ago: executing program 1 (id=1834): socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) tkill(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r4, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x1a7, &(0x7f0000000640)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r5, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) kernel console output (not intermixed with test programs): netlink: 17 bytes leftover after parsing attributes in process `syz.3.63'. [ 118.823331][ T4618] netlink: 36 bytes leftover after parsing attributes in process `syz.0.68'. [ 120.491661][ T4606] loop4: detected capacity change from 0 to 32768 [ 120.507608][ T4606] (syz.4.67,4606,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.582094][ T4606] (syz.4.67,4606,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.910755][ T4606] JBD2: Ignoring recovery information on journal [ 121.733985][ T127] usb 36-1: device descriptor read/8, error -110 [ 122.664973][ T4606] JBD2: recovery failed [ 122.674338][ T4606] (syz.4.67,4606,0):ocfs2_journal_load:1135 ERROR: Failed to load journal! [ 122.707869][ T4606] (syz.4.67,4606,1):ocfs2_check_volume:2431 ERROR: ocfs2 journal load failed! -5 [ 122.765733][ T4606] (syz.4.67,4606,0):ocfs2_check_volume:2487 ERROR: status = -5 [ 122.841795][ T127] usb usb36-port1: attempt power cycle [ 123.644300][ T4606] (syz.4.67,4606,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 123.730131][ T4606] (syz.4.67,4606,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 123.927058][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 124.164119][ T4648] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 124.170875][ T4648] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 124.180273][ T4648] vhci_hcd vhci_hcd.0: Device attached [ 124.367355][ T127] usb usb36-port1: unable to enumerate USB device [ 124.485169][ T4659] netlink: 36 bytes leftover after parsing attributes in process `syz.3.81'. [ 125.303681][ T33] usb 42-1: SetAddress Request (2) to port 0 [ 125.309780][ T33] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 126.411297][ T4664] Zero length message leads to an empty skb [ 126.574938][ T4651] vhci_hcd: connection reset by peer [ 126.581559][ T4323] vhci_hcd: stop threads [ 126.590258][ T4323] vhci_hcd: release socket [ 126.595106][ T4323] vhci_hcd: disconnect device [ 130.831990][ T33] usb 42-1: device descriptor read/8, error -110 [ 130.982221][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 131.274533][ T33] usb usb42-port1: attempt power cycle [ 131.748703][ T4694] netlink: 36 bytes leftover after parsing attributes in process `syz.0.92'. [ 132.257722][ T33] usb usb42-port1: unable to enumerate USB device [ 132.616989][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.623794][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.248706][ T4718] loop4: detected capacity change from 0 to 256 [ 134.258174][ T4718] exfat: Deprecated parameter 'utf8' [ 134.263780][ T4718] exfat: Deprecated parameter 'namecase' [ 134.269740][ T4718] exfat: Deprecated parameter 'namecase' [ 134.275530][ T4718] exfat: Deprecated parameter 'utf8' [ 134.321403][ T4718] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 138.111358][ T4728] loop0: detected capacity change from 0 to 512 [ 138.193472][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 138.361815][ T4748] netlink: 36 bytes leftover after parsing attributes in process `syz.4.106'. [ 138.503569][ T14] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 139.054430][ T4728] EXT4-fs: Ignoring removed oldalloc option [ 139.096679][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.426888][ T14] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 140.174709][ T4728] fscrypt: Error allocating hmac(sha512): -2 [ 141.012319][ T4768] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 141.018898][ T4768] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.104887][ T4768] vhci_hcd vhci_hcd.0: Device attached [ 141.414127][ T4318] usb 34-1: SetAddress Request (2) to port 0 [ 141.419343][ T4762] loop2: detected capacity change from 0 to 32768 [ 141.434760][ T4318] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 141.527359][ T4762] (syz.2.108,4762,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 141.650842][ T4762] (syz.2.108,4762,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 142.103873][ T4762] JBD2: Ignoring recovery information on journal [ 142.275551][ T4762] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 143.665407][ T4794] 9pnet_fd: p9_fd_create_unix (4794): problem connecting socket: ./file0: -111 [ 143.688657][ T4794] input: syz0 as /devices/virtual/input/input7 [ 145.250103][ T4772] vhci_hcd: connection reset by peer [ 145.260263][ T4714] vhci_hcd: stop threads [ 145.429820][ T4714] vhci_hcd: release socket [ 145.483658][ T4714] vhci_hcd: disconnect device [ 145.634851][ T4314] usb 2-1: USB disconnect, device number 2 [ 145.901896][ T4284] ocfs2: Unmounting device (7,2) on (node local) [ 146.436796][ T4813] loop2: detected capacity change from 0 to 2048 [ 146.500268][ T4813] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.535695][ T4318] usb 34-1: device descriptor read/8, error -110 [ 147.274356][ T4318] usb usb34-port1: attempt power cycle [ 147.741431][ T4800] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.749984][ T4800] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.963122][ T4318] usb usb34-port1: unable to enumerate USB device [ 149.059635][ T4831] 9pnet_fd: p9_fd_create_unix (4831): problem connecting socket: ./file0: -111 [ 149.080440][ T4831] input: syz0 as /devices/virtual/input/input8 [ 150.228376][ T4833] loop2: detected capacity change from 0 to 32768 [ 150.270344][ T4833] (syz.2.127,4833,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 150.294350][ T4833] (syz.2.127,4833,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 150.349317][ T4833] JBD2: Ignoring recovery information on journal [ 150.442024][ T4833] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 150.585116][ T4800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.679783][ T4800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.708620][ T4284] ocfs2: Unmounting device (7,2) on (node local) [ 152.033977][ T4800] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.044558][ T4800] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.054125][ T4800] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.063036][ T4800] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.073069][ T4800] netdevsim netdevsim10 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.475201][ T4845] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 152.481865][ T4845] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 152.493680][ T4803] netlink: 'syz.1.119': attribute type 4 has an invalid length. [ 152.501447][ T4803] netlink: 17 bytes leftover after parsing attributes in process `syz.1.119'. [ 152.589457][ T4845] vhci_hcd vhci_hcd.0: Device attached [ 152.681100][ T4852] syz.1.132 uses obsolete (PF_INET,SOCK_PACKET) [ 152.790861][ T4853] input: syz0 as /devices/virtual/input/input9 [ 152.888864][ T4850] loop3: detected capacity change from 0 to 32768 [ 152.903656][ T33] usb 38-1: SetAddress Request (2) to port 0 [ 152.919671][ T33] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 152.937524][ T4850] (syz.3.131,4850,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 152.962446][ T4850] (syz.3.131,4850,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 153.062078][ T4850] JBD2: Ignoring recovery information on journal [ 153.090994][ T4846] vhci_hcd: connection reset by peer [ 153.114211][ T4391] vhci_hcd: stop threads [ 153.118551][ T4391] vhci_hcd: release socket [ 153.170967][ T4391] vhci_hcd: disconnect device [ 153.246662][ T4850] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 153.396654][ T4857] loop0: detected capacity change from 0 to 16 [ 153.447664][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 153.477921][ T4857] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 154.223566][ T4315] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 155.078485][ T4315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 155.100249][ T4315] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 155.157662][ T4315] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 155.197446][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.233716][ T4315] usb 4-1: Product: syz [ 155.284750][ T4315] usb 4-1: Manufacturer: syz [ 155.308406][ T4315] usb 4-1: SerialNumber: syz [ 155.617856][ T4885] netlink: 36 bytes leftover after parsing attributes in process `syz.4.141'. [ 155.679233][ T4869] loop2: detected capacity change from 0 to 32768 [ 155.735784][ T4315] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 155.836634][ T4869] (syz.2.138,4869,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 156.097280][ T4869] (syz.2.138,4869,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 156.223255][ T4869] JBD2: Ignoring recovery information on journal [ 156.357706][ T4888] netlink: 'syz.1.142': attribute type 4 has an invalid length. [ 156.358269][ T4388] usb 4-1: USB disconnect, device number 2 [ 156.365442][ T4888] netlink: 17 bytes leftover after parsing attributes in process `syz.1.142'. [ 156.413223][ T4869] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 156.470233][ T4388] usblp0: removed [ 156.763505][ T4284] ocfs2: Unmounting device (7,2) on (node local) [ 157.097366][ T4892] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.105111][ T4892] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.533456][ T4904] input: syz0 as /devices/virtual/input/input10 [ 158.053643][ T33] usb 38-1: device descriptor read/8, error -110 [ 158.104601][ T4910] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 158.111182][ T4910] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 158.119627][ T4910] vhci_hcd vhci_hcd.0: Device attached [ 158.563533][ T4317] usb 40-1: SetAddress Request (2) to port 0 [ 159.004682][ T33] usb usb38-port1: attempt power cycle [ 159.250316][ T4317] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 159.266184][ T4912] vhci_hcd: connection closed [ 159.267142][ T4391] vhci_hcd: stop threads [ 159.321499][ T4391] vhci_hcd: release socket [ 159.326124][ T4391] vhci_hcd: disconnect device [ 159.896173][ T4892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.944620][ T33] usb usb38-port1: unable to enumerate USB device [ 159.969226][ T4892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.065607][ T4925] loop3: detected capacity change from 0 to 2048 [ 160.097094][ T4925] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 160.127296][ T4925] NILFS (loop3): mounting unchecked fs [ 160.148419][ T4413] udevd[4413]: incorrect nilfs2 checksum on /dev/loop3 [ 160.181110][ T4925] NILFS (loop3): recovery complete [ 160.201959][ T4926] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.424312][ T4928] nvmet: adding nsid 1 to subsystem testsubsys [ 160.601513][ T127] nvmet: connect request for invalid subsystem testsubsys! [ 160.610182][ T4928] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 160.786871][ T4892] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.796071][ T4892] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.805411][ T4892] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.814512][ T4892] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.899484][ T4933] netlink: 'syz.2.154': attribute type 4 has an invalid length. [ 160.907237][ T4933] netlink: 17 bytes leftover after parsing attributes in process `syz.2.154'. [ 164.543504][ T4962] loop4: detected capacity change from 0 to 131072 [ 164.555991][ T4317] usb 40-1: device descriptor read/8, error -110 [ 164.587197][ T4962] F2FS-fs (loop4): invalid crc value [ 164.753864][ T4972] netlink: 'syz.0.166': attribute type 4 has an invalid length. [ 164.761636][ T4972] netlink: 17 bytes leftover after parsing attributes in process `syz.0.166'. [ 164.785262][ T4963] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 164.791831][ T4963] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 164.826703][ T4962] F2FS-fs (loop4): Found nat_bits in checkpoint [ 164.862995][ T4963] vhci_hcd vhci_hcd.0: Device attached [ 164.883211][ T4962] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 164.901519][ T4966] vhci_hcd: connection closed [ 164.901782][ T4905] vhci_hcd: stop threads [ 164.936095][ T4962] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 164.973183][ T4905] vhci_hcd: release socket [ 164.994421][ T4317] usb usb40-port1: attempt power cycle [ 165.031166][ T26] audit: type=1800 audit(1787050238.844:4): pid=4962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.164" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 165.086128][ T4905] vhci_hcd: disconnect device [ 165.620745][ T4986] loop1: detected capacity change from 0 to 2048 [ 165.704845][ T4317] usb usb40-port1: unable to enumerate USB device [ 165.718083][ T4986] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.134846][ T26] audit: type=1800 audit(1787050241.954:5): pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.174" name="cluster_name" dev="configfs" ino=42896 res=0 errno=0 [ 168.916158][ T26] audit: type=1800 audit(1787050242.004:6): pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.174" name="toss_secs" dev="configfs" ino=42899 res=0 errno=0 [ 169.111267][ T26] audit: type=1800 audit(1787050242.004:7): pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.174" name="scan_secs" dev="configfs" ino=42900 res=0 errno=0 [ 169.904073][ T5027] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 169.910658][ T5027] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 170.110829][ T5027] vhci_hcd vhci_hcd.0: Device attached [ 170.260658][ T5037] loop4: detected capacity change from 0 to 512 [ 170.560978][ T5037] EXT4-fs (loop4): Test dummy encryption mode enabled [ 170.928879][ T5037] EXT4-fs (loop4): 1 truncate cleaned up [ 170.934741][ T5037] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 171.133725][ T4317] usb 36-1: SetAddress Request (6) to port 0 [ 171.142529][ T5029] vhci_hcd: connection closed [ 171.142776][ T4528] vhci_hcd: stop threads [ 171.153511][ T4317] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd [ 171.269620][ T4528] vhci_hcd: release socket [ 171.274609][ T4528] vhci_hcd: disconnect device [ 171.478054][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 171.484043][ T4317] usb 36-1: enqueue for inactive port 0 [ 172.268889][ T5018] loop0: detected capacity change from 0 to 32768 [ 172.279802][ T5018] (syz.0.180,5018,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.300907][ T5018] (syz.0.180,5018,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.424199][ T4317] usb usb36-port1: attempt power cycle [ 172.827518][ T5018] (syz.0.180,5018,1):ocfs2_initialize_super:2284 ERROR: status = -12 [ 172.973320][ T5018] (syz.0.180,5018,1):ocfs2_fill_super:1176 ERROR: status = -12 [ 173.884100][ T4317] usb usb36-port1: unable to enumerate USB device [ 174.633019][ T5067] input: syz0 as /devices/virtual/input/input12 [ 176.180478][ T5095] loop1: detected capacity change from 0 to 2048 [ 176.238013][ T5095] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.660465][ T5109] 9pnet_fd: p9_fd_create_unix (5109): problem connecting socket: ./file0: -111 [ 177.671179][ T5109] input: syz0 as /devices/virtual/input/input13 [ 178.837152][ T5124] input: syz0 as /devices/virtual/input/input14 [ 180.009796][ T5116] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 180.016379][ T5116] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 180.078899][ T5117] vhci_hcd: connection closed [ 180.080860][ T5116] vhci_hcd vhci_hcd.0: Device attached [ 180.112035][ T47] vhci_hcd: stop threads [ 180.117399][ T47] vhci_hcd: release socket [ 180.141007][ T47] vhci_hcd: disconnect device [ 189.254333][ T5207] loop3: detected capacity change from 0 to 512 [ 189.507198][ T5207] EXT4-fs (loop3): Test dummy encryption mode enabled [ 189.666245][ T5202] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 189.672822][ T5202] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 190.819362][ T5207] EXT4-fs (loop3): 1 truncate cleaned up [ 190.825156][ T5207] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 192.480720][ T5202] vhci_hcd vhci_hcd.0: Device attached [ 192.872774][ T5203] vhci_hcd: connection closed [ 192.872975][ T4391] vhci_hcd: stop threads [ 192.925394][ T4391] vhci_hcd: release socket [ 192.974124][ T127] usb 34-1: SetAddress Request (6) to port 0 [ 193.026424][ T127] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 193.191557][ T4391] vhci_hcd: disconnect device [ 194.021366][ T5238] device syzkaller0 entered promiscuous mode [ 194.057546][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.064477][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.120340][ T5261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.165710][ T5261] team0: Port device bond1 added [ 197.194328][ T4334] team0: Failed to send port change of device bond1 via netlink (err -105) [ 198.109384][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 198.140569][ T127] usb 34-1: device descriptor read/8, error -110 [ 198.584365][ T127] usb usb34-port1: attempt power cycle [ 199.912110][ T127] usb usb34-port1: unable to enumerate USB device [ 201.256252][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 201.262339][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 201.343474][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 201.343510][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 201.349648][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 203.696215][ T5306] loop3: detected capacity change from 0 to 512 [ 203.711763][ T5306] EXT4-fs (loop3): Test dummy encryption mode enabled [ 205.678659][ T5306] EXT4-fs (loop3): 1 truncate cleaned up [ 205.684447][ T5306] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 206.263580][ T127] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 206.287836][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 206.757044][ T5320] loop0: detected capacity change from 0 to 131072 [ 206.873190][ T5320] F2FS-fs (loop0): invalid crc value [ 206.883990][ T5320] F2FS-fs (loop0): Found nat_bits in checkpoint [ 206.923478][ T5320] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 206.941850][ T5320] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 206.965536][ T5294] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.973064][ T5294] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.007798][ T26] audit: type=1800 audit(1787050280.824:8): pid=5320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.266" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 209.453666][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.541753][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.914432][ T5340] loop3: detected capacity change from 0 to 32768 [ 209.933910][ T5340] (syz.3.270,5340,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 209.980127][ T5340] (syz.3.270,5340,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 210.050368][ T5340] JBD2: Ignoring recovery information on journal [ 210.135228][ T5340] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 210.540787][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 210.629973][ T5294] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.639166][ T5294] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.649445][ T5294] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.658700][ T5294] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.042240][ T5386] loop3: detected capacity change from 0 to 512 [ 216.145100][ T5386] EXT4-fs: Ignoring removed oldalloc option [ 216.173176][ T5386] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.312990][ T5386] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 216.351778][ T5386] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.509516][ T5386] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.281: inode #327680: comm syz.3.281: iget: illegal inode # [ 216.611158][ T5386] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.281: error while reading EA inode 327680 err=-117 [ 216.834997][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 217.091541][ T5388] loop1: detected capacity change from 0 to 131072 [ 217.108401][ T5388] F2FS-fs (loop1): invalid crc value [ 217.148899][ T5388] F2FS-fs (loop1): Found nat_bits in checkpoint [ 217.201857][ T5388] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 217.218573][ T5388] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 217.265042][ T26] audit: type=1800 audit(1787050291.084:9): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.283" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 217.308503][ T5403] loop3: detected capacity change from 0 to 256 [ 217.503249][ T5403] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 217.632867][ T26] audit: type=1800 audit(1787050291.444:10): pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.286" name="file1" dev="loop3" ino=1048600 res=0 errno=0 [ 217.664505][ T5406] device syzkaller0 entered promiscuous mode [ 218.115033][ T5416] loop4: detected capacity change from 0 to 1024 [ 218.380600][ T5418] 9pnet_fd: p9_fd_create_unix (5418): problem connecting socket: ./file0: -111 [ 219.090222][ T5418] input: syz0 as /devices/virtual/input/input15 [ 219.104935][ T5416] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #3: block 1: comm syz.4.290: lblock 1 mapped to illegal pblock 1 (length 1) [ 219.652600][ T5416] Quota error (device loop4): write_blk: dquota write failed [ 219.688772][ T5416] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 219.755611][ T5416] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.290: Failed to acquire dquot type 0 [ 220.305681][ T5416] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.290: Freeing blocks not in datazone - block = 0, count = 4096 [ 220.383308][ T5434] input: syz0 as /devices/virtual/input/input16 [ 220.406167][ T26] audit: type=1800 audit(1787050294.224:11): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.297" name="zoned" dev="configfs" ino=46621 res=0 errno=0 [ 220.436093][ T5416] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.290: Invalid inode bitmap blk 0 in block_group 0 [ 220.454591][ T4393] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 220.520214][ T26] audit: type=1800 audit(1787050294.244:12): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.297" name="zone_nr_conv" dev="configfs" ino=46622 res=0 errno=0 [ 220.543867][ T4393] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 220.583692][ T4393] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:12: Failed to release dquot type 0 [ 220.611948][ T5416] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 220.646069][ T5416] EXT4-fs (loop4): 1 orphan inode deleted [ 220.686810][ T5416] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 220.922507][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 220.938895][ T57] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 221.121013][ T57] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 221.155498][ T57] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 0 [ 222.421946][ T5459] loop4: detected capacity change from 0 to 131072 [ 222.467855][ T5459] F2FS-fs (loop4): invalid crc value [ 222.860295][ T5459] F2FS-fs (loop4): Found nat_bits in checkpoint [ 222.896551][ T5459] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 223.363101][ T5459] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 223.813872][ T26] audit: type=1800 audit(1787050297.614:13): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.301" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 225.055014][ T5481] 9pnet_fd: p9_fd_create_unix (5481): problem connecting socket: ./file0: -111 [ 225.199932][ T5479] input: syz0 as /devices/virtual/input/input17 [ 225.714901][ T5487] input: syz0 as /devices/virtual/input/input18 [ 225.727860][ T5484] loop1: detected capacity change from 0 to 16 [ 225.740200][ T5484] erofs: (device loop1): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 228.288303][ T5515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.320'. [ 232.044371][ T5542] input: syz0 as /devices/virtual/input/input19 [ 232.256636][ T5547] loop4: detected capacity change from 0 to 512 [ 232.271536][ T5547] EXT4-fs (loop4): Test dummy encryption mode enabled [ 232.973736][ T5547] EXT4-fs (loop4): 1 truncate cleaned up [ 232.979449][ T5547] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 233.010042][ T5549] device syzkaller0 entered promiscuous mode [ 233.876716][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 237.953787][ T5591] fuse: Bad value for 'fd' [ 238.167327][ T5594] netlink: 36 bytes leftover after parsing attributes in process `syz.3.341'. [ 241.960183][ T5605] device syzkaller0 entered promiscuous mode [ 245.528274][ T5641] netlink: 36 bytes leftover after parsing attributes in process `syz.1.355'. [ 246.129480][ T5638] loop2: detected capacity change from 0 to 4096 [ 246.562408][ T5646] input: syz0 as /devices/virtual/input/input20 [ 246.579189][ T5648] fuse: Bad value for 'fd' [ 246.600738][ T5638] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 247.009600][ T5655] xt_hashlimit: max too large, truncated to 1048576 [ 247.744048][ T4284] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 248.874634][ T5659] 9pnet_fd: p9_fd_create_unix (5659): problem connecting socket: ./file0: -111 [ 248.974468][ T5658] device syzkaller0 entered promiscuous mode [ 249.172363][ T5656] input: syz0 as /devices/virtual/input/input21 [ 250.338979][ T5683] futex_wake_op: syz.1.367 tries to shift op by 144; fix this program [ 252.691753][ T5708] loop3: detected capacity change from 0 to 40427 [ 252.707265][ T5708] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 252.715040][ T5708] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 253.123563][ T5708] F2FS-fs (loop3): invalid crc value [ 253.370656][ T5708] F2FS-fs (loop3): Found nat_bits in checkpoint [ 253.426791][ T5708] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 253.433909][ T5708] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 253.814783][ T4273] syz-executor: attempt to access beyond end of device [ 253.814783][ T4273] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 255.497691][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.504263][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.660549][ T5738] 9pnet_fd: p9_fd_create_unix (5738): problem connecting socket: ./file0: -111 [ 255.728036][ T5735] input: syz0 as /devices/virtual/input/input23 [ 257.477009][ T5749] device syzkaller0 entered promiscuous mode [ 258.818520][ T5765] UDC core: g1: couldn't find an available UDC or it's busy [ 259.063266][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 262.060854][ T5800] loop1: detected capacity change from 0 to 2048 [ 262.094082][ T5800] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.116534][ T5802] Bluetooth: MGMT ver 1.22 [ 263.354528][ T5807] loop3: detected capacity change from 0 to 131072 [ 263.394726][ T5807] F2FS-fs (loop3): invalid crc value [ 263.410674][ T5807] F2FS-fs (loop3): Found nat_bits in checkpoint [ 263.490909][ T5807] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 263.511988][ T5807] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 263.557973][ T26] audit: type=1800 audit(1787050337.374:14): pid=5807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.404" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 263.931734][ T5804] loop2: detected capacity change from 0 to 32768 [ 263.987697][ T5804] (syz.2.403,5804,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 264.033671][ T5804] (syz.2.403,5804,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 264.080943][ T5804] JBD2: Ignoring recovery information on journal [ 264.173630][ T5804] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 264.437553][ T5831] loop0: detected capacity change from 0 to 40427 [ 264.447069][ T5831] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 264.455135][ T5831] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 264.467331][ T5831] F2FS-fs (loop0): invalid crc value [ 264.496017][ T5831] F2FS-fs (loop0): Found nat_bits in checkpoint [ 265.130806][ T5831] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 265.137963][ T5831] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 265.402433][ T4284] ocfs2: Unmounting device (7,2) on (node local) [ 265.616540][ T4283] syz-executor: attempt to access beyond end of device [ 265.616540][ T4283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 267.926009][ T5863] loop2: detected capacity change from 0 to 131072 [ 267.952690][ T5863] F2FS-fs (loop2): invalid crc value [ 268.037180][ T5863] F2FS-fs (loop2): Found nat_bits in checkpoint [ 268.090803][ T5863] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 268.124892][ T5863] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 268.153990][ T26] audit: type=1800 audit(1787050341.974:15): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.421" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 268.335004][ T5873] futex_wake_op: syz.1.422 tries to shift op by 144; fix this program [ 270.105874][ T26] audit: type=1800 audit(1787050343.924:16): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.410" name="cluster_name" dev="configfs" ino=48265 res=0 errno=0 [ 270.225321][ T26] audit: type=1800 audit(1787050343.944:17): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.410" name="toss_secs" dev="configfs" ino=48267 res=0 errno=0 [ 270.878979][ T5885] loop1: detected capacity change from 0 to 131072 [ 270.904240][ T5885] F2FS-fs (loop1): invalid crc value [ 271.132589][ T5885] F2FS-fs (loop1): Found nat_bits in checkpoint [ 271.165959][ T5885] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 271.185694][ T26] audit: type=1800 audit(1787050343.954:18): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.410" name="scan_secs" dev="configfs" ino=48268 res=0 errno=0 [ 271.247014][ T5885] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 272.236208][ T26] audit: type=1800 audit(1787050345.164:19): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.425" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 273.790686][ T5912] input: syz0 as /devices/virtual/input/input25 [ 279.881876][ T5940] loop2: detected capacity change from 0 to 131072 [ 279.894345][ T5940] F2FS-fs (loop2): invalid crc value [ 279.918110][ T5940] F2FS-fs (loop2): Found nat_bits in checkpoint [ 279.945898][ T5940] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 279.960562][ T5940] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 280.206724][ T5950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.445'. [ 280.937524][ T26] audit: type=1800 audit(1787050354.754:20): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.443" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 284.524007][ T5971] netlink: 36 bytes leftover after parsing attributes in process `syz.2.452'. [ 287.330453][ T26] audit: type=1800 audit(1787050361.144:21): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.458" name="cluster_name" dev="configfs" ino=47640 res=0 errno=0 [ 287.980356][ T6003] device syzkaller0 entered promiscuous mode [ 288.221923][ T6001] loop0: detected capacity change from 0 to 131072 [ 288.239113][ T6001] F2FS-fs (loop0): invalid crc value [ 289.654300][ T6001] F2FS-fs (loop0): Found nat_bits in checkpoint [ 289.692494][ T6001] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 291.719891][ T6025] kvm: emulating exchange as write [ 298.994835][ T6067] loop3: detected capacity change from 0 to 2048 [ 299.066364][ T6067] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.266648][ T26] audit: type=1800 audit(1787050374.084:22): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.480" name="cluster_name" dev="configfs" ino=49802 res=0 errno=0 [ 300.352409][ T26] audit: type=1800 audit(1787050374.124:23): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.480" name="toss_secs" dev="configfs" ino=49804 res=0 errno=0 [ 301.493093][ T6084] loop2: detected capacity change from 0 to 40427 [ 301.500981][ T6084] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 301.508758][ T6084] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 301.518077][ T6084] F2FS-fs (loop2): invalid crc value [ 301.596770][ T6084] F2FS-fs (loop2): Found nat_bits in checkpoint [ 301.651643][ T6084] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 301.658973][ T6084] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 302.564959][ T4284] syz-executor: attempt to access beyond end of device [ 302.564959][ T4284] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 302.785484][ T6090] loop0: detected capacity change from 0 to 131072 [ 302.814740][ T6090] F2FS-fs (loop0): invalid crc value [ 302.855264][ T6090] F2FS-fs (loop0): Found nat_bits in checkpoint [ 302.896280][ T6090] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 302.913409][ T6090] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 302.995578][ T26] audit: type=1800 audit(1787050376.814:24): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.474" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 308.700184][ T26] audit: type=1800 audit(1787050382.514:25): pid=6130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.492" name="cluster_name" dev="configfs" ino=49948 res=0 errno=0 [ 308.910292][ T26] audit: type=1800 audit(1787050382.554:26): pid=6130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.492" name="toss_secs" dev="configfs" ino=49950 res=0 errno=0 [ 310.822118][ T6153] loop1: detected capacity change from 0 to 131072 [ 310.842141][ T6153] F2FS-fs (loop1): invalid crc value [ 310.973562][ T6153] F2FS-fs (loop1): Found nat_bits in checkpoint [ 311.026046][ T6153] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 311.143554][ T6153] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 311.264996][ T26] audit: type=1800 audit(1787050385.084:27): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.497" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 311.294572][ T6162] loop4: detected capacity change from 0 to 2048 [ 311.373812][ T6162] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.432740][ T6183] device syzkaller0 entered promiscuous mode [ 314.944834][ T26] audit: type=1800 audit(1787050388.764:28): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.505" name="cluster_name" dev="configfs" ino=48671 res=0 errno=0 [ 315.891214][ T26] audit: type=1800 audit(1787050388.854:29): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.505" name="toss_secs" dev="configfs" ino=50048 res=0 errno=0 [ 316.037676][ T26] audit: type=1800 audit(1787050389.614:30): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.505" name="scan_secs" dev="configfs" ino=50050 res=0 errno=0 [ 317.035101][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.041480][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.697051][ T6214] loop4: detected capacity change from 0 to 131072 [ 318.722517][ T6214] F2FS-fs (loop4): invalid crc value [ 319.644516][ T6214] F2FS-fs (loop4): Found nat_bits in checkpoint [ 319.683916][ T6214] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 319.695051][ T6214] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 320.546275][ T26] audit: type=1800 audit(1787050394.364:31): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.511" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 320.917570][ T6229] device syzkaller0 entered promiscuous mode [ 327.503483][ T6271] Illegal XDP return value 4291090736 on prog (id 24) dev syz_tun, expect packet loss! [ 335.206728][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 335.215787][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 335.226676][ T6323] netlink: 36 bytes leftover after parsing attributes in process `syz.1.538'. [ 335.862827][ T6322] loop3: detected capacity change from 0 to 2048 [ 335.992746][ T6322] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.586787][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 342.595756][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 342.606053][ T6380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.552'. [ 344.970040][ T6403] loop2: detected capacity change from 0 to 32768 [ 345.040402][ T6403] gfs2: fsid=noacl: Trying to join cluster "lock_nolock", "noacl" [ 345.048766][ T6403] gfs2: fsid=noacl: Now mounting FS (format 1801)... [ 345.062880][ T6403] gfs2: fsid=noacl.0: fatal: filesystem consistency error [ 345.062880][ T6403] inode = 1 19 [ 345.062880][ T6403] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 452 [ 345.081677][ T6403] gfs2: fsid=noacl.0: G: s:SH n:2/13 f:qobnN t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 345.090753][ T6403] gfs2: fsid=noacl.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 345.100129][ T6403] gfs2: fsid=noacl.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 345.108443][ T6403] gfs2: fsid=noacl.0: about to withdraw this file system [ 345.115581][ T6403] gfs2: fsid=noacl.0: Journal recovery skipped for jid 0 until next mount. [ 345.124231][ T6403] gfs2: fsid=noacl.0: Glock dequeues delayed: 0 [ 345.130678][ T6403] gfs2: fsid=noacl.0: File system withdrawn [ 345.136668][ T6403] CPU: 0 PID: 6403 Comm: syz.2.556 Not tainted syzkaller #0 [ 345.144002][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.154103][ T6403] Call Trace: [ 345.157417][ T6403] [ 345.160388][ T6403] dump_stack_lvl+0x188/0x24e [ 345.165137][ T6403] ? show_regs_print_info+0x12/0x12 [ 345.170386][ T6403] ? load_image+0x410/0x410 [ 345.174949][ T6403] ? kobject_uevent_env+0x364/0x890 [ 345.180199][ T6403] gfs2_withdraw+0xc69/0x1450 [ 345.184938][ T6403] ? gfs2_lm+0x240/0x240 [ 345.189222][ T6403] ? make_kgid+0x1c4/0x650 [ 345.193684][ T6403] ? from_kuid_munged+0x6e0/0x6e0 [ 345.198760][ T6403] ? gfs2_consist_inode_i+0xf1/0x110 [ 345.204102][ T6403] gfs2_inode_refresh+0xc80/0x1190 [ 345.209265][ T6403] ? gfs2_inode_metasync+0xf0/0xf0 [ 345.214430][ T6403] ? gfs2_glock_nq+0xcee/0x14d0 [ 345.219334][ T6403] gfs2_instantiate+0x15e/0x210 [ 345.224242][ T6403] gfs2_glock_wait+0x1d0/0x2a0 [ 345.229084][ T6403] init_journal+0xcf8/0x23a0 [ 345.233737][ T6403] ? init_inodes+0xdb/0x320 [ 345.238293][ T6403] ? _compound_head+0x120/0x120 [ 345.243192][ T6403] ? vsnprintf+0x1b22/0x1c20 [ 345.247826][ T6403] ? snprintf+0xe5/0x140 [ 345.252105][ T6403] ? init_inodes+0xdb/0x320 [ 345.256664][ T6403] ? vscnprintf+0x80/0x80 [ 345.261035][ T6403] ? gfs2_glock_nq_num+0x175/0x1b0 [ 345.266200][ T6403] init_inodes+0xdb/0x320 [ 345.270593][ T6403] gfs2_fill_super+0x17bf/0x2020 [ 345.275603][ T6403] ? gfs2_reconfigure+0xd80/0xd80 [ 345.280685][ T6403] ? init_locking+0xb8/0x200 [ 345.285328][ T6403] ? sb_set_blocksize+0xa5/0xe0 [ 345.290232][ T6403] get_tree_bdev+0x3e6/0x610 [ 345.294870][ T6403] ? gfs2_reconfigure+0xd80/0xd80 [ 345.299950][ T6403] gfs2_get_tree+0x4d/0x1e0 [ 345.304508][ T6403] vfs_get_tree+0x88/0x270 [ 345.308973][ T6403] do_new_mount+0x247/0xa40 [ 345.313529][ T6403] __se_sys_mount+0x2e3/0x3d0 [ 345.318296][ T6403] ? __x64_sys_mount+0xc0/0xc0 [ 345.323103][ T6403] ? lockdep_hardirqs_on+0x94/0x140 [ 345.328335][ T6403] ? __x64_sys_mount+0x1c/0xc0 [ 345.333150][ T6403] do_syscall_64+0x4c/0xa0 [ 345.337609][ T6403] ? clear_bhb_loop+0x60/0xb0 [ 345.342335][ T6403] ? clear_bhb_loop+0x60/0xb0 [ 345.347074][ T6403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.353026][ T6403] RIP: 0033:0x7fbad939f34a [ 345.357488][ T6403] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.377146][ T6403] RSP: 002b:00007fbada1e9e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 345.385616][ T6403] RAX: ffffffffffffffda RBX: 00007fbada1e9ee0 RCX: 00007fbad939f34a [ 345.393635][ T6403] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007fbada1e9ea0 [ 345.401658][ T6403] RBP: 0000200000000400 R08: 00007fbada1e9ee0 R09: 0000000000210401 [ 345.409677][ T6403] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000012500 [ 345.417692][ T6403] R13: 00007fbada1e9ea0 R14: 0000000000012613 R15: 00002000000000c0 [ 345.425722][ T6403] [ 345.429361][ T6403] gfs2: fsid=noacl.0: can't acquire journal inode glock: -5 [ 349.172166][ T26] audit: type=1800 audit(1787050422.984:32): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.567" name="cluster_name" dev="configfs" ino=51011 res=0 errno=0 [ 349.222804][ T26] audit: type=1800 audit(1787050422.984:33): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.567" name="scan_secs" dev="configfs" ino=51012 res=0 errno=0 [ 351.465475][ T6459] loop1: detected capacity change from 0 to 2048 [ 351.702366][ T6459] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 354.285206][ T6476] futex_wake_op: syz.0.576 tries to shift op by 144; fix this program [ 356.155172][ T6487] 9pnet_fd: p9_fd_create_unix (6487): problem connecting socket: ./file0: -111 [ 356.172192][ T6487] input: syz0 as /devices/virtual/input/input29 [ 362.024778][ T6521] futex_wake_op: syz.0.589 tries to shift op by 144; fix this program [ 362.818238][ T6524] tipc: Started in network mode [ 362.823810][ T6524] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 362.831871][ T6524] tipc: Enabled bearer , priority 0 [ 363.184752][ T6527] loop2: detected capacity change from 0 to 512 [ 363.200069][ T6527] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 363.213841][ T6527] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 363.260133][ T6527] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.582: invalid indirect mapped block 9 (level 0) [ 363.337823][ T6527] EXT4-fs (loop2): 1 truncate cleaned up [ 363.359832][ T6527] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 363.435569][ T6532] 9pnet_fd: p9_fd_create_unix (6532): problem connecting socket: ./file0: -111 [ 363.453893][ T6532] input: syz0 as /devices/virtual/input/input30 [ 364.069365][ T4376] tipc: Node number set to 43690 [ 364.397790][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 364.460341][ T6524] loop0: detected capacity change from 0 to 32768 [ 364.531056][ T6524] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.591 (6524) [ 364.813890][ T6547] loop3: detected capacity change from 0 to 2048 [ 365.516218][ T6524] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 365.678206][ T6524] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 365.709420][ T6524] BTRFS info (device loop0): turning off barriers [ 365.716051][ T6524] BTRFS info (device loop0): max_inline at 0 [ 365.722201][ T6524] BTRFS info (device loop0): enabling all of the rescue options [ 365.729961][ T6524] BTRFS info (device loop0): ignoring data csums [ 365.737170][ T6524] BTRFS info (device loop0): ignoring bad roots [ 365.743558][ T6524] BTRFS info (device loop0): disabling log replay at mount time [ 365.751670][ T6524] BTRFS info (device loop0): force zlib compression, level 3 [ 365.759203][ T6524] BTRFS info (device loop0): allowing degraded mounts [ 365.766379][ T6524] BTRFS info (device loop0): enabling ssd optimizations [ 365.773423][ T6524] BTRFS info (device loop0): using spread ssd allocation scheme [ 365.781215][ T6524] BTRFS info (device loop0): using free space tree [ 365.788218][ T6524] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 365.794369][ T6547] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.819812][ T6524] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 365.841606][ T6524] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 365.872090][ T6524] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 365.909543][ T6524] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 365.929753][ T6524] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 366.183540][ T6524] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 366.369747][ T6524] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 366.954026][ T6524] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 367.070768][ T6573] loop1: detected capacity change from 0 to 2048 [ 367.125294][ T6573] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 367.226878][ T6524] BTRFS error (device loop0): open_ctree failed: -12 [ 367.263424][ T4413] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by udevd (4413) [ 368.006010][ T6585] futex_wake_op: syz.2.601 tries to shift op by 144; fix this program [ 370.471509][ T6589] loop1: detected capacity change from 0 to 2048 [ 370.585986][ T6589] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.373362][ T4318] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 371.565282][ T4318] usb 4-1: config index 0 descriptor too short (expected 65059, got 72) [ 371.596213][ T4318] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 371.631035][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.648936][ T4318] usb 4-1: Product: syz [ 371.669253][ T4318] usb 4-1: Manufacturer: syz [ 371.674264][ T4318] usb 4-1: SerialNumber: syz [ 371.718768][ T4318] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 372.707405][ T4318] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 372.934213][ T6607] loop1: detected capacity change from 0 to 256 [ 372.967524][ T6607] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 373.553986][ T127] usb 4-1: USB disconnect, device number 3 [ 373.813671][ T4318] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 373.821713][ T4318] ath9k_htc: Failed to initialize the device [ 373.851565][ T127] usb 4-1: ath9k_htc: USB layer deinitialized [ 375.708676][ T6615] loop0: detected capacity change from 0 to 512 [ 375.745871][ T6615] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 375.788199][ T6615] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.604: invalid indirect mapped block 9 (level 0) [ 375.828307][ T6615] EXT4-fs (loop0): 1 truncate cleaned up [ 375.953632][ T6615] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 376.038926][ T6625] loop1: detected capacity change from 0 to 4096 [ 377.331442][ T6625] NILFS (loop1): invalid segment: Checksum error in segment payload [ 377.398113][ T6625] NILFS (loop1): trying rollback from an earlier position [ 377.475020][ T6625] NILFS (loop1): recovery complete [ 378.132704][ T6638] loop2: detected capacity change from 0 to 131072 [ 378.166064][ T6638] F2FS-fs (loop2): invalid crc value [ 378.262783][ T6640] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.654301][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.660660][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.688389][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 379.782632][ T6638] F2FS-fs (loop2): Found nat_bits in checkpoint [ 379.831917][ T6638] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 379.843763][ T6638] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 379.865133][ T26] audit: type=1800 audit(1787050453.684:34): pid=6638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.613" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 381.734901][ T6658] netlink: 36 bytes leftover after parsing attributes in process `syz.0.618'. [ 385.658684][ T6669] loop1: detected capacity change from 0 to 2048 [ 387.090330][ T6669] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.062783][ T6683] 9pnet_fd: p9_fd_create_unix (6683): problem connecting socket: ./file0: -111 [ 388.195402][ T6682] input: syz0 as /devices/virtual/input/input31 [ 388.830921][ T6690] loop1: detected capacity change from 0 to 2048 [ 389.124827][ T6690] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 389.423051][ T6690] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 389.918696][ T6703] netlink: 36 bytes leftover after parsing attributes in process `syz.3.630'. [ 393.302384][ T6723] loop2: detected capacity change from 0 to 512 [ 393.552903][ T6723] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 393.603976][ T6723] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.624: invalid indirect mapped block 9 (level 0) [ 393.632278][ T6723] EXT4-fs (loop2): 1 truncate cleaned up [ 393.674309][ T6723] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 394.649864][ T6734] loop0: detected capacity change from 0 to 2048 [ 394.804611][ T6737] 9pnet_fd: p9_fd_create_unix (6737): problem connecting socket: ./file0: -111 [ 394.823048][ T6734] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.840424][ T6733] input: syz0 as /devices/virtual/input/input32 [ 395.438789][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 396.933631][ T6752] netlink: 36 bytes leftover after parsing attributes in process `syz.4.644'. [ 402.600717][ T6786] loop1: detected capacity change from 0 to 2048 [ 402.609089][ T26] audit: type=1800 audit(1787050476.424:35): pid=6790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.656" name="scan_secs" dev="configfs" ino=52079 res=0 errno=0 [ 402.793527][ T6786] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.432951][ T6810] 9pnet_fd: p9_fd_create_unix (6810): problem connecting socket: ./file0: -111 [ 405.790809][ T6805] input: syz0 as /devices/virtual/input/input33 [ 405.975160][ T6821] futex_wake_op: syz.1.663 tries to shift op by 144; fix this program [ 406.955009][ T6825] loop2: detected capacity change from 0 to 8 [ 406.986679][ T6825] SQUASHFS error: zlib decompression failed, data probably corrupt [ 407.001991][ T6825] SQUASHFS error: Failed to read block 0x9b: -5 [ 407.009645][ T6825] SQUASHFS error: Unable to read metadata cache entry [99] [ 407.023525][ T6825] SQUASHFS error: Unable to read inode 0x104 [ 407.099215][ T4415] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 408.132743][ T26] audit: type=1800 audit(1787050481.944:36): pid=6833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.669" name="scan_secs" dev="configfs" ino=52453 res=0 errno=0 [ 408.577299][ T6839] loop3: detected capacity change from 0 to 2048 [ 408.972247][ T6839] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.865131][ T6847] loop2: detected capacity change from 0 to 2048 [ 411.115574][ T6847] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 411.769922][ T6861] futex_wake_op: syz.3.676 tries to shift op by 144; fix this program [ 413.169802][ T6864] 9pnet_fd: p9_fd_create_unix (6864): problem connecting socket: ./file0: -111 [ 414.824479][ T6863] input: syz0 as /devices/virtual/input/input34 [ 414.844549][ T26] audit: type=1800 audit(1787050488.664:37): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.681" name="scan_secs" dev="configfs" ino=52485 res=0 errno=0 [ 415.546909][ T6884] loop4: detected capacity change from 0 to 1764 [ 416.291736][ T4413] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 418.066174][ T6904] futex_wake_op: syz.3.689 tries to shift op by 144; fix this program [ 422.771843][ T6927] loop3: detected capacity change from 0 to 131072 [ 422.814313][ T6927] F2FS-fs (loop3): invalid crc value [ 422.842256][ T6927] F2FS-fs (loop3): Found nat_bits in checkpoint [ 422.889059][ T6927] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 423.348852][ T6927] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 424.326548][ T26] audit: type=1800 audit(1787050498.144:38): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.690" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 425.698752][ T6950] futex_wake_op: syz.4.700 tries to shift op by 144; fix this program [ 429.021538][ T6953] loop4: detected capacity change from 0 to 4096 [ 429.167287][ T6953] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 429.532796][ T6966] xt_hashlimit: max too large, truncated to 1048576 [ 429.540501][ T6966] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 430.455296][ T4280] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 435.035008][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.712'. [ 436.391212][ T7014] loop1: detected capacity change from 0 to 2048 [ 436.434910][ T26] audit: type=1326 audit(1787050510.254:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.2.717" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad939e0d9 code=0x7ffc0000 [ 436.562022][ T7014] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 437.620670][ T26] audit: type=1326 audit(1787050510.254:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.2.717" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad939e0d9 code=0x7ffc0000 [ 437.666794][ T26] audit: type=1326 audit(1787050510.284:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.2.717" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fbad939e0d9 code=0x7ffc0000 [ 438.910528][ T7030] futex_wake_op: syz.2.720 tries to shift op by 144; fix this program [ 438.990942][ T7021] loop0: detected capacity change from 0 to 4096 [ 439.133430][ T26] audit: type=1326 audit(1787050510.284:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.2.717" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad939e0d9 code=0x7ffc0000 [ 439.471270][ T26] audit: type=1326 audit(1787050510.284:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.2.717" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad939e0d9 code=0x7ffc0000 [ 439.490702][ T7021] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 439.510228][ T26] audit: type=1326 audit(1787050510.284:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.2.717" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbad939e0d9 code=0x7ffc0000 [ 439.544370][ T7042] loop4: detected capacity change from 0 to 1024 [ 439.609623][ T7042] EXT4-fs: Ignoring removed oldalloc option [ 439.729824][ T26] audit: type=1326 audit(1787050510.284:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.2.717" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad939e0d9 code=0x7ffc0000 [ 439.754159][ T26] audit: type=1326 audit(1787050510.284:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.2.717" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad939e0d9 code=0x7ffc0000 [ 439.846927][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.854232][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.878384][ T26] audit: type=1326 audit(1787050510.284:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.2.717" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fbad939e0d9 code=0x7ffc0000 [ 440.833994][ T7042] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 441.123719][ T26] audit: type=1326 audit(1787050510.284:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.2.717" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad939e0d9 code=0x7ffc0000 [ 441.237403][ T7065] EXT4-fs (loop4): shut down requested (0) [ 441.315533][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 441.969942][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 444.418313][ T7075] loop0: detected capacity change from 0 to 2048 [ 446.355710][ T7093] futex_wake_op: syz.1.734 tries to shift op by 144; fix this program [ 449.145716][ T7108] loop1: detected capacity change from 0 to 4096 [ 449.221037][ T7104] loop4: detected capacity change from 0 to 131072 [ 449.252029][ T7104] F2FS-fs (loop4): invalid crc value [ 449.330042][ T7108] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 449.764580][ T7116] xt_hashlimit: max too large, truncated to 1048576 [ 449.778924][ T7116] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 450.092989][ T7104] F2FS-fs (loop4): Found nat_bits in checkpoint [ 450.280620][ T7104] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 450.286157][ T4272] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 450.334812][ T7104] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 450.369779][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 450.369795][ T26] audit: type=1800 audit(1787050524.184:61): pid=7104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.739" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 452.178789][ T7131] loop2: detected capacity change from 0 to 2048 [ 452.270147][ T7131] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.825062][ T7146] loop0: detected capacity change from 0 to 8 [ 454.057720][ T7146] SQUASHFS error: lzo decompression failed, data probably corrupt [ 454.065863][ T7146] SQUASHFS error: Failed to read block 0x91: -5 [ 454.072117][ T7146] SQUASHFS error: Unable to read metadata cache entry [8f] [ 454.079379][ T7146] SQUASHFS error: Unable to read inode 0x11f [ 455.117052][ T7143] loop3: detected capacity change from 0 to 131072 [ 455.144072][ T7143] F2FS-fs (loop3): invalid crc value [ 455.182897][ T7143] F2FS-fs (loop3): Found nat_bits in checkpoint [ 455.221641][ T7143] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 455.233878][ T7143] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 455.308212][ T26] audit: type=1800 audit(1787050529.124:62): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.749" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 460.433126][ T7176] loop1: detected capacity change from 0 to 131072 [ 460.602573][ T7176] F2FS-fs (loop1): invalid crc value [ 460.974480][ T7176] F2FS-fs (loop1): Found nat_bits in checkpoint [ 461.019317][ T7176] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 461.034625][ T7176] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 461.130496][ T26] audit: type=1800 audit(1787050534.944:63): pid=7176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.757" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 461.419195][ T7190] loop2: detected capacity change from 0 to 2048 [ 461.514762][ T7190] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 462.611821][ T4356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 463.841577][ T4356] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 463.951287][ T7212] loop0: detected capacity change from 0 to 2048 [ 464.049149][ T7212] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 468.498195][ T7234] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 469.320856][ T7234] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 471.251242][ T7270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.779'. [ 476.660279][ T7309] 9pnet_fd: p9_fd_create_unix (7309): problem connecting socket: ./file0: -111 [ 476.701177][ T7309] input: syz0 as /devices/virtual/input/input35 [ 479.360260][ T7328] loop3: detected capacity change from 0 to 512 [ 479.443008][ T7328] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 479.546102][ T7332] futex_wake_op: syz.4.797 tries to shift op by 144; fix this program [ 480.296574][ T7328] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.796: invalid indirect mapped block 9 (level 0) [ 480.367773][ T7328] EXT4-fs (loop3): 1 truncate cleaned up [ 480.395417][ T7328] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 481.066108][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 482.716878][ T4312] libceph: connect (1)[c::]:6789 error -101 [ 482.830906][ T4312] libceph: mon0 (1)[c::]:6789 connect error [ 483.202905][ T7352] ceph: No mds server is up or the cluster is laggy [ 483.226604][ T4312] libceph: connect (1)[c::]:6789 error -101 [ 483.232674][ T4312] libceph: mon0 (1)[c::]:6789 connect error [ 483.898140][ T7363] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 483.904798][ T7363] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 483.913377][ T7363] vhci_hcd vhci_hcd.0: Device attached [ 484.201880][ T7364] vhci_hcd: connection closed [ 484.204287][ T57] vhci_hcd: stop threads [ 484.647056][ T7357] 9pnet_fd: p9_fd_create_unix (7357): problem connecting socket: ./file0: -111 [ 484.695107][ T7357] input: syz0 as /devices/virtual/input/input36 [ 484.776471][ T57] vhci_hcd: release socket [ 484.782238][ T57] vhci_hcd: disconnect device [ 485.189073][ T7373] loop2: detected capacity change from 0 to 2048 [ 485.980360][ T7373] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 486.148478][ T7379] loop4: detected capacity change from 0 to 512 [ 486.241871][ T7379] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 486.610331][ T7379] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.811: invalid indirect mapped block 9 (level 0) [ 486.834889][ T7379] EXT4-fs (loop4): 1 truncate cleaned up [ 486.912697][ T7379] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 487.317291][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 491.146211][ T7412] 9pnet_fd: p9_fd_create_unix (7412): problem connecting socket: ./file0: -111 [ 491.158131][ T7412] input: syz0 as /devices/virtual/input/input37 [ 492.365789][ T7417] loop1: detected capacity change from 0 to 4096 [ 492.384891][ T7426] loop0: detected capacity change from 0 to 512 [ 492.396811][ T7417] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 492.965347][ T7426] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 493.226312][ T7426] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.823: invalid indirect mapped block 9 (level 0) [ 493.279137][ T7426] EXT4-fs (loop0): 1 truncate cleaned up [ 493.285222][ T7426] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 493.368214][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 494.751720][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 495.553011][ T7455] loop0: detected capacity change from 0 to 2048 [ 495.858425][ T7455] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 500.243933][ T7488] loop0: detected capacity change from 0 to 512 [ 500.363818][ T7488] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 500.468742][ T7492] 9pnet_fd: p9_fd_create_unix (7492): problem connecting socket: ./file0: -111 [ 501.195662][ T7488] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.839: invalid indirect mapped block 9 (level 0) [ 501.202054][ T7492] input: syz0 as /devices/virtual/input/input38 [ 501.266205][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.272564][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.301247][ T7488] EXT4-fs (loop0): 1 truncate cleaned up [ 501.339205][ T7488] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 501.835921][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 502.245623][ T7510] can0: slcan on ttyS3. [ 502.768352][ T7512] can0 (unregistered): slcan off ttyS3. [ 503.465010][ T7514] can0: slcan on ttyS3. [ 503.469807][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.846'. [ 504.707707][ T7536] futex_wake_op: syz.0.849 tries to shift op by 144; fix this program [ 506.571171][ T7516] can0 (unregistered): slcan off ttyS3. [ 506.938987][ T7548] 9pnet_fd: p9_fd_create_unix (7548): problem connecting socket: ./file0: -111 [ 506.950333][ T7548] input: syz0 as /devices/virtual/input/input39 [ 507.743101][ T26] audit: type=1800 audit(1787050581.554:64): pid=7554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.854" name="toss_secs" dev="configfs" ino=54351 res=0 errno=0 [ 507.882238][ T7560] loop3: detected capacity change from 0 to 512 [ 508.829881][ T7558] loop0: detected capacity change from 0 to 131072 [ 508.906059][ T7558] F2FS-fs (loop0): invalid crc value [ 508.913012][ T7560] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 509.003769][ T7558] F2FS-fs (loop0): Found nat_bits in checkpoint [ 509.038028][ T7558] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 509.049139][ T7560] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.856: invalid indirect mapped block 9 (level 0) [ 509.121402][ T7560] EXT4-fs (loop3): 1 truncate cleaned up [ 509.136997][ T7558] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 509.197230][ T7560] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 509.683409][ T26] audit: type=1800 audit(1787050583.494:65): pid=7558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.855" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 510.355953][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 510.666565][ T7584] loop4: detected capacity change from 0 to 2048 [ 510.733747][ T7584] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 511.704225][ T7597] futex_wake_op: syz.0.861 tries to shift op by 144; fix this program [ 513.307116][ T7604] 9pnet_fd: p9_fd_create_unix (7604): problem connecting socket: ./file0: -111 [ 513.328508][ T7604] input: syz0 as /devices/virtual/input/input40 [ 514.572364][ T7614] device syzkaller0 entered promiscuous mode [ 516.947810][ T7626] loop1: detected capacity change from 0 to 131072 [ 516.966014][ T7626] F2FS-fs (loop1): invalid crc value [ 517.091777][ T7626] F2FS-fs (loop1): Found nat_bits in checkpoint [ 517.130678][ T7626] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 517.169556][ T7626] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 517.195126][ T26] audit: type=1800 audit(1787050591.014:66): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.872" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 520.377995][ T7656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.877'. [ 523.726535][ T7681] loop3: detected capacity change from 0 to 512 [ 523.847496][ T7675] loop1: detected capacity change from 0 to 131072 [ 523.945698][ T7675] F2FS-fs (loop1): invalid crc value [ 524.036849][ T7681] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 524.115002][ T7675] F2FS-fs (loop1): Found nat_bits in checkpoint [ 524.160012][ T7675] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 524.215426][ T7675] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 524.350085][ T26] audit: type=1800 audit(1787050598.164:67): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.882" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 524.457136][ T7681] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.873: invalid indirect mapped block 9 (level 0) [ 524.479152][ T7681] EXT4-fs (loop3): 1 truncate cleaned up [ 524.494062][ T7681] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 524.601317][ T7693] device syzkaller0 entered promiscuous mode [ 524.992686][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 525.536620][ T7705] netlink: 36 bytes leftover after parsing attributes in process `syz.2.888'. [ 526.597930][ T7712] loop0: detected capacity change from 0 to 2048 [ 527.193279][ T7712] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 527.793970][ T7723] 9pnet_fd: p9_fd_create_unix (7723): problem connecting socket: ./file0: -111 [ 527.805209][ T7723] input: syz0 as /devices/virtual/input/input41 [ 529.149344][ T7737] loop2: detected capacity change from 0 to 512 [ 529.166842][ T7737] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 529.212339][ T7738] device syzkaller0 entered promiscuous mode [ 529.252557][ T7737] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.897: invalid indirect mapped block 9 (level 0) [ 529.273393][ T7737] EXT4-fs (loop2): 1 truncate cleaned up [ 529.279207][ T7737] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 529.690654][ T7747] netlink: 36 bytes leftover after parsing attributes in process `syz.3.899'. [ 530.375940][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 530.605176][ T7751] loop3: detected capacity change from 0 to 2048 [ 530.750653][ T7751] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 532.088273][ T7757] netlink: 36 bytes leftover after parsing attributes in process `syz.0.900'. [ 532.699159][ T7769] loop4: detected capacity change from 0 to 2048 [ 532.735988][ T7769] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 534.099414][ T7779] 9pnet_fd: p9_fd_create_unix (7779): problem connecting socket: ./file0: -111 [ 534.110340][ T7779] input: syz0 as /devices/virtual/input/input42 [ 535.318500][ T7792] loop3: detected capacity change from 0 to 512 [ 535.387870][ T7794] loop2: detected capacity change from 0 to 2048 [ 535.400312][ T7792] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 535.449851][ T7794] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 536.494976][ T7792] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.912: invalid indirect mapped block 9 (level 0) [ 537.729186][ T7792] EXT4-fs (loop3): 1 truncate cleaned up [ 537.735384][ T7792] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 537.921152][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 540.071199][ T7845] netlink: 36 bytes leftover after parsing attributes in process `syz.1.924'. [ 540.847824][ T7846] loop3: detected capacity change from 0 to 2048 [ 541.110507][ T7846] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.917618][ T7855] loop2: detected capacity change from 0 to 512 [ 541.982787][ T7855] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 542.130859][ T7855] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.929: invalid indirect mapped block 9 (level 0) [ 542.181533][ T7855] EXT4-fs (loop2): 1 truncate cleaned up [ 542.206514][ T7855] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 542.603652][ T7860] loop0: detected capacity change from 0 to 32768 [ 542.704223][ T7860] XFS (loop0): Mounting V5 Filesystem [ 542.770611][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 542.853390][ T7860] XFS (loop0): Ending clean mount [ 542.903053][ T7860] XFS (loop0): Quotacheck needed: Please wait. [ 542.990320][ T7860] XFS (loop0): Quotacheck: Done. [ 543.488601][ T4283] XFS (loop0): Unmounting Filesystem [ 546.025427][ T7901] loop0: detected capacity change from 0 to 8 [ 546.440394][ T7901] SQUASHFS error: lzo decompression failed, data probably corrupt [ 546.448828][ T7901] SQUASHFS error: Failed to read block 0x91: -5 [ 546.455146][ T7901] SQUASHFS error: Unable to read metadata cache entry [8f] [ 546.462409][ T7901] SQUASHFS error: Unable to read inode 0x11f [ 547.619186][ T7912] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 547.965088][ T7920] netlink: 36 bytes leftover after parsing attributes in process `syz.1.948'. [ 548.291985][ T7923] loop0: detected capacity change from 0 to 512 [ 549.071523][ T7923] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 549.202755][ T7923] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.943: invalid indirect mapped block 9 (level 0) [ 549.230252][ T7923] EXT4-fs (loop0): 1 truncate cleaned up [ 549.240727][ T7923] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 549.709098][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 550.342644][ T7956] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 550.385658][ T7955] 9pnet_fd: p9_fd_create_unix (7955): problem connecting socket: ./file0: -111 [ 550.401912][ T7955] input: syz0 as /devices/virtual/input/input43 [ 550.848083][ T7966] netlink: 36 bytes leftover after parsing attributes in process `syz.4.960'. [ 551.788897][ T7974] loop1: detected capacity change from 0 to 512 [ 551.823464][ T7974] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 551.874374][ T7974] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.965: invalid indirect mapped block 9 (level 0) [ 551.902345][ T7974] EXT4-fs (loop1): 1 truncate cleaned up [ 551.969900][ T7974] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 552.168900][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 557.037318][ T8014] netlink: 36 bytes leftover after parsing attributes in process `syz.0.975'. [ 560.212950][ T8034] netlink: 36 bytes leftover after parsing attributes in process `syz.4.981'. [ 560.222072][ T8034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'. [ 562.696095][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.702482][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.183582][ T8063] netlink: 36 bytes leftover after parsing attributes in process `syz.0.988'. [ 565.498542][ T8066] loop4: detected capacity change from 0 to 2048 [ 565.607823][ T8066] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 566.803560][ T8068] loop2: detected capacity change from 0 to 131072 [ 566.815950][ T8068] F2FS-fs (loop2): invalid crc value [ 566.835186][ T8068] F2FS-fs (loop2): Found nat_bits in checkpoint [ 566.899988][ T8068] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 566.953382][ T8068] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 567.016379][ T26] audit: type=1800 audit(1787050640.834:68): pid=8068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.990" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 568.709479][ T8103] netlink: 36 bytes leftover after parsing attributes in process `syz.2.994'. [ 568.718608][ T8103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.994'. [ 571.985772][ T8112] loop2: detected capacity change from 0 to 131072 [ 571.995291][ T8118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1001'. [ 572.034054][ T8112] F2FS-fs (loop2): invalid crc value [ 572.118587][ T8112] F2FS-fs (loop2): Found nat_bits in checkpoint [ 572.157313][ T8112] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 572.180987][ T8112] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 572.334947][ T26] audit: type=1800 audit(1787050646.144:69): pid=8112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.998" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 573.836290][ T8131] loop0: detected capacity change from 0 to 2048 [ 573.896004][ T8131] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 575.383898][ T8143] 9pnet_fd: p9_fd_create_unix (8143): problem connecting socket: ./file0: -111 [ 575.407885][ T8143] input: syz0 as /devices/virtual/input/input44 [ 578.252860][ T8154] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1008'. [ 578.262169][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1008'. [ 582.607917][ T8195] 9pnet_fd: p9_fd_create_unix (8195): problem connecting socket: ./file0: -111 [ 582.656651][ T8195] input: syz0 as /devices/virtual/input/input45 [ 585.426528][ T8214] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1023'. [ 590.611342][ T8253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1037'. [ 591.355321][ T8261] vivid-000: disconnect [ 591.480564][ T8260] vivid-000: reconnect [ 591.501085][ T8263] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1041'. [ 597.400611][ T8307] loop0: detected capacity change from 0 to 131072 [ 597.422056][ T8307] F2FS-fs (loop0): invalid crc value [ 597.570838][ T8307] F2FS-fs (loop0): Found nat_bits in checkpoint [ 597.639397][ T8307] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 597.683474][ T8307] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 598.068926][ T26] audit: type=1800 audit(1787050671.884:70): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1051" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 598.383346][ T4314] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 598.595497][ T4314] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 598.623590][ T4314] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 598.675395][ T4314] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 598.703297][ T4314] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 598.732374][ T4314] usb 5-1: Manufacturer: syz [ 598.742540][ T4314] usb 5-1: SerialNumber: syz [ 598.996514][ T4314] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 599.046808][ T4314] usb 5-1: USB disconnect, device number 3 [ 601.341584][ T8346] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1061'. [ 601.351035][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 602.941777][ T8349] loop0: detected capacity change from 0 to 2048 [ 602.975846][ T8349] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 605.286354][ T8364] loop1: detected capacity change from 0 to 131072 [ 605.309983][ T8364] F2FS-fs (loop1): invalid crc value [ 605.336870][ T8364] F2FS-fs (loop1): Found nat_bits in checkpoint [ 605.375423][ T8364] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 605.397937][ T8364] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 605.474407][ T26] audit: type=1800 audit(1787050679.294:71): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1066" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 607.728133][ T8392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1073'. [ 607.737483][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1073'. [ 608.006588][ T8398] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 616.882037][ T8477] loop2: detected capacity change from 0 to 2048 [ 617.031094][ T8477] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 624.153427][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.180182][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.709166][ T8552] loop2: detected capacity change from 0 to 131072 [ 627.733887][ T8552] F2FS-fs (loop2): invalid crc value [ 627.884536][ T8552] F2FS-fs (loop2): Found nat_bits in checkpoint [ 627.922803][ T8552] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 627.967099][ T8552] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 628.009030][ T26] audit: type=1800 audit(1787050701.824:72): pid=8552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1118" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 630.527323][ T8580] loop1: detected capacity change from 0 to 2048 [ 630.573492][ T4356] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 630.591165][ T8580] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 630.909598][ T4356] usb 3-1: Using ep0 maxpacket: 32 [ 630.917415][ T4356] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 630.943966][ T4356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.969347][ T4356] usb 3-1: config 0 descriptor?? [ 630.991750][ T4356] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 631.258477][ T4356] gspca_vc032x: reg_r err -32 [ 631.267442][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.272786][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.279514][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.285353][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.290680][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.296353][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.301683][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.307382][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.312712][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.332328][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.344622][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.362069][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.377256][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.395509][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.410575][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.427693][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.442635][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.458759][ T4356] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.477010][ T4356] gspca_vc032x: Unknown sensor... [ 631.492151][ T4356] vc032x: probe of 3-1:0.0 failed with error -22 [ 631.776839][ T4314] usb 3-1: USB disconnect, device number 2 [ 632.321026][ T8595] input: syz0 as /devices/virtual/input/input47 [ 635.793587][ T8593] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 640.721047][ T8642] input: syz0 as /devices/virtual/input/input48 [ 641.461066][ T8646] loop1: detected capacity change from 0 to 2048 [ 641.574058][ T8646] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 645.986484][ T8676] loop2: detected capacity change from 0 to 131072 [ 646.110934][ T8676] F2FS-fs (loop2): invalid crc value [ 646.312027][ T8676] F2FS-fs (loop2): Found nat_bits in checkpoint [ 646.400976][ T8676] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 646.430784][ T8676] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 646.647091][ T26] audit: type=1800 audit(1787050720.464:73): pid=8676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1148" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 650.872476][ T8709] input: syz0 as /devices/virtual/input/input49 [ 652.431084][ T8722] loop1: detected capacity change from 0 to 2048 [ 653.716717][ T8722] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.278143][ T8738] loop3: detected capacity change from 0 to 2048 [ 657.398052][ T8738] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.500927][ T8749] input: syz0 as /devices/virtual/input/input50 [ 661.951391][ T8774] loop2: detected capacity change from 0 to 2048 [ 662.012828][ T8774] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 665.911706][ T8798] loop3: detected capacity change from 0 to 2048 [ 666.162205][ T8798] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 668.253970][ T8815] loop4: detected capacity change from 0 to 2048 [ 668.276778][ T8815] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 670.850663][ T8843] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 675.878343][ T8862] loop4: detected capacity change from 0 to 2048 [ 675.987212][ T8862] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.054001][ T8887] loop2: detected capacity change from 0 to 2048 [ 679.101821][ T8887] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 681.903807][ T8922] futex_wake_op: syz.2.1222 tries to shift op by 144; fix this program [ 683.201971][ T8928] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 685.576142][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.582550][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.813369][ T4314] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 688.104904][ T8948] loop3: detected capacity change from 0 to 8 [ 688.425393][ T4314] usb 5-1: Using ep0 maxpacket: 32 [ 688.632240][ T8948] SQUASHFS error: lzo decompression failed, data probably corrupt [ 688.640191][ T8948] SQUASHFS error: Failed to read block 0x91: -5 [ 688.646543][ T8948] SQUASHFS error: Unable to read metadata cache entry [8f] [ 688.653789][ T8948] SQUASHFS error: Unable to read inode 0x11f [ 688.770633][ T4314] usb 5-1: device descriptor read/all, error -71 [ 688.832011][ T8952] loop4: detected capacity change from 0 to 2048 [ 688.860124][ T8952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 692.112538][ T8981] futex_wake_op: syz.1.1240 tries to shift op by 144; fix this program [ 694.251911][ T8994] loop0: detected capacity change from 0 to 8 [ 694.280410][ T8994] SQUASHFS error: lzo decompression failed, data probably corrupt [ 694.288326][ T8994] SQUASHFS error: Failed to read block 0x91: -5 [ 694.294619][ T8994] SQUASHFS error: Unable to read metadata cache entry [8f] [ 694.301820][ T8994] SQUASHFS error: Unable to read inode 0x11f [ 694.659589][ T9008] loop2: detected capacity change from 0 to 2048 [ 694.779161][ T9008] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 697.332775][ T9038] futex_wake_op: syz.4.1255 tries to shift op by 144; fix this program [ 700.574424][ T9058] loop0: detected capacity change from 0 to 8 [ 700.929787][ T9058] SQUASHFS error: lzo decompression failed, data probably corrupt [ 700.937746][ T9058] SQUASHFS error: Failed to read block 0x91: -5 [ 700.944062][ T9058] SQUASHFS error: Unable to read metadata cache entry [8f] [ 700.951264][ T9058] SQUASHFS error: Unable to read inode 0x11f [ 701.401586][ T9065] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 702.356781][ T9067] loop4: detected capacity change from 0 to 2048 [ 702.471445][ T9067] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 704.614332][ T9080] futex_wake_op: syz.3.1267 tries to shift op by 144; fix this program [ 707.566734][ T9099] loop0: detected capacity change from 0 to 8 [ 707.614555][ T9099] SQUASHFS error: lzo decompression failed, data probably corrupt [ 707.622426][ T9099] SQUASHFS error: Failed to read block 0x91: -5 [ 707.629027][ T9099] SQUASHFS error: Unable to read metadata cache entry [8f] [ 707.636280][ T9099] SQUASHFS error: Unable to read inode 0x11f [ 710.754428][ T9130] loop4: detected capacity change from 0 to 2048 [ 710.801387][ T9130] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 717.075259][ T9189] smc: net device vlan1 applied user defined pnetid SYZ2 [ 724.130637][ T9231] loop0: detected capacity change from 0 to 8 [ 724.151760][ T9231] SQUASHFS error: lzo decompression failed, data probably corrupt [ 724.159699][ T9231] SQUASHFS error: Failed to read block 0x91: -5 [ 724.165992][ T9231] SQUASHFS error: Unable to read metadata cache entry [8f] [ 724.173262][ T9231] SQUASHFS error: Unable to read inode 0x11f [ 724.226596][ T4413] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 726.113468][ T9243] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 726.120040][ T9243] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 726.127771][ T9243] vhci_hcd vhci_hcd.0: Device attached [ 726.485472][ T4317] usb 36-1: SetAddress Request (10) to port 0 [ 726.493717][ T9248] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 726.500428][ T4317] usb 36-1: new SuperSpeed USB device number 10 using vhci_hcd [ 726.797871][ T9244] vhci_hcd: connection reset by peer [ 726.814686][ T4394] vhci_hcd: stop threads [ 726.818992][ T4394] vhci_hcd: release socket [ 726.838413][ T4394] vhci_hcd: disconnect device [ 732.030924][ T4317] usb 36-1: device descriptor read/8, error -110 [ 732.454219][ T4317] usb usb36-port1: attempt power cycle [ 732.745220][ T9295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 732.767573][ T9295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 732.776246][ T9295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 734.354191][ T4317] usb usb36-port1: unable to enumerate USB device [ 735.303560][ T9309] 9pnet_fd: p9_fd_create_unix (9309): problem connecting socket: ./file0: -111 [ 735.583812][ T9309] input: syz0 as /devices/virtual/input/input52 [ 738.182933][ T9327] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 740.749282][ T9343] loop3: detected capacity change from 0 to 8 [ 740.782862][ T9343] SQUASHFS error: lzo decompression failed, data probably corrupt [ 740.791084][ T9343] SQUASHFS error: Failed to read block 0x91: -5 [ 740.797390][ T9343] SQUASHFS error: Unable to read metadata cache entry [8f] [ 740.804636][ T9343] SQUASHFS error: Unable to read inode 0x11f [ 740.961381][ T4413] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 747.016052][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.022504][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.268272][ T9413] 9pnet_fd: p9_fd_create_unix (9413): problem connecting socket: ./file0: -111 [ 749.291606][ T9413] input: syz0 as /devices/virtual/input/input53 [ 751.684726][ T9422] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 751.691316][ T9422] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 751.699570][ T9422] vhci_hcd vhci_hcd.0: Device attached [ 752.033616][ T4312] usb 38-1: SetAddress Request (7) to port 0 [ 752.398228][ T9423] vhci_hcd: connection closed [ 752.399484][ T4330] vhci_hcd: stop threads [ 752.419880][ T4330] vhci_hcd: release socket [ 752.428835][ T4312] usb 38-1: new SuperSpeed USB device number 7 using vhci_hcd [ 752.436786][ T4330] vhci_hcd: disconnect device [ 752.464716][ T4312] usb 38-1: enqueue for inactive port 0 [ 752.895874][ T4312] usb usb38-port1: attempt power cycle [ 753.223028][ T9439] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 754.316963][ T9443] process 'syz.3.1366' launched './file0' with NULL argv: empty string added [ 754.568074][ T4312] usb usb38-port1: unable to enumerate USB device [ 754.683185][ T9148] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 754.883593][ T9148] usb 5-1: Using ep0 maxpacket: 16 [ 755.189647][ T9148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.508433][ T9148] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 755.541880][ T9148] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 755.578928][ T9148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.599433][ T9148] usb 5-1: config 0 descriptor?? [ 756.267567][ T9148] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 756.793393][ T9467] 9pnet_fd: p9_fd_create_unix (9467): problem connecting socket: ./file0: -111 [ 756.822707][ T9467] input: syz0 as /devices/virtual/input/input54 [ 759.440834][ T9148] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 759.451721][ T9148] HID 045e:07da: Invalid code 65791 type 1 [ 759.458112][ T9148] HID 045e:07da: Invalid code 768 type 1 [ 759.463955][ T9148] HID 045e:07da: Invalid code 769 type 1 [ 759.469752][ T9148] HID 045e:07da: Invalid code 770 type 1 [ 759.493215][ T9148] HID 045e:07da: Invalid code 771 type 1 [ 759.499040][ T9148] HID 045e:07da: Invalid code 772 type 1 [ 759.590295][ T9148] HID 045e:07da: Invalid code 773 type 1 [ 759.633513][ T9148] HID 045e:07da: Invalid code 774 type 1 [ 759.639370][ T9148] HID 045e:07da: Invalid code 775 type 1 [ 759.709482][ T9148] HID 045e:07da: Invalid code 776 type 1 [ 761.027256][ T9148] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input55 [ 763.369784][ T9148] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 764.035031][ T9148] usb 5-1: USB disconnect, device number 6 [ 764.913909][ T9492] loop0: detected capacity change from 0 to 4096 [ 765.029631][ T9492] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 765.053252][ T9492] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 765.060528][ T9492] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 765.117019][ T9491] fido_id[9491]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 765.139185][ T9492] loop0: [ 766.827764][ T9499] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 766.834361][ T9499] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 766.842334][ T9499] vhci_hcd vhci_hcd.0: Device attached [ 767.183910][ T4314] usb 40-1: SetAddress Request (6) to port 0 [ 767.197556][ T4314] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 768.735855][ T9501] vhci_hcd: connection reset by peer [ 768.743433][ T4905] vhci_hcd: stop threads [ 768.747697][ T4905] vhci_hcd: release socket [ 768.900589][ T4905] vhci_hcd: disconnect device [ 770.033683][ T9530] 9pnet_fd: p9_fd_create_unix (9530): problem connecting socket: ./file0: -111 [ 770.066503][ T9530] input: syz0 as /devices/virtual/input/input56 [ 772.293281][ T4314] usb 40-1: device descriptor read/8, error -110 [ 772.714237][ T4314] usb usb40-port1: attempt power cycle [ 773.957841][ T4314] usb usb40-port1: unable to enumerate USB device [ 777.681104][ T9568] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 777.687639][ T9568] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 777.695512][ T9568] vhci_hcd vhci_hcd.0: Device attached [ 777.847550][ T9576] vhci_hcd: connection closed [ 777.851232][ T4528] vhci_hcd: stop threads [ 777.861906][ T4528] vhci_hcd: release socket [ 777.899262][ T4528] vhci_hcd: disconnect device [ 783.534563][ T9631] 9pnet_fd: p9_fd_create_unix (9631): problem connecting socket: ./file0: -111 [ 783.564687][ T9631] input: syz0 as /devices/virtual/input/input57 [ 785.561022][ T9639] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 785.567613][ T9639] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 785.575474][ T9639] vhci_hcd vhci_hcd.0: Device attached [ 785.973300][ T4356] usb 42-1: SetAddress Request (6) to port 0 [ 785.993776][ T4356] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 787.908539][ T9643] vhci_hcd: connection reset by peer [ 787.914732][ T4394] vhci_hcd: stop threads [ 787.919026][ T4394] vhci_hcd: release socket [ 787.982827][ T4394] vhci_hcd: disconnect device [ 792.475689][ T9699] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 794.116129][ T4356] usb 42-1: device descriptor read/8, error -110 [ 794.898151][ T4356] usb usb42-port1: attempt power cycle [ 796.629168][ T4356] usb usb42-port1: unable to enumerate USB device [ 804.944706][ T9772] loop4: detected capacity change from 0 to 131072 [ 804.968699][ T9772] F2FS-fs (loop4): invalid crc value [ 804.977824][ T9772] F2FS-fs (loop4): Found nat_bits in checkpoint [ 805.017168][ T9772] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 805.088637][ T9772] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 805.933981][ T26] audit: type=1800 audit(1787050879.754:74): pid=9772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1461" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 808.465667][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.001128][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.013208][ T4274] Bluetooth: hci4: command 0x0405 tx timeout [ 810.815689][ T9816] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 810.833563][ T9816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 810.841985][ T9816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 811.968790][ T9826] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 811.987218][ T9826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 811.996717][ T9826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 817.319670][ T9873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 817.331647][ T9873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 817.344945][ T9873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 817.361113][ T9873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 817.388831][ T9873] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 817.414280][ T9873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 819.494525][ T9873] Bluetooth: hci3: command 0x0409 tx timeout [ 821.623242][ T9873] Bluetooth: hci3: command 0x041b tx timeout [ 821.736567][ T9872] chnl_net:caif_netlink_parms(): no params data found [ 824.623312][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 825.075869][ T9872] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.083020][ T9872] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.196775][ T9872] device bridge_slave_0 entered promiscuous mode [ 825.234144][ T9872] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.241304][ T9872] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.324898][ T9872] device bridge_slave_1 entered promiscuous mode [ 825.722898][ T9872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.776176][ T9872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.758131][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 826.883616][ T9872] team0: Port device team_slave_0 added [ 827.010066][ T9872] team0: Port device team_slave_1 added [ 827.148097][ T9872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.176666][ T9872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.435689][ T9872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.309596][ T9872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.320524][ T9872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.346614][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.363696][ T9872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.563630][ T9148] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 833.475402][ T9148] usb 4-1: config 0 interface 0 has no altsetting 0 [ 833.549344][ T9148] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 833.559178][ T9148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.575936][ T9148] usb 4-1: config 0 descriptor?? [ 833.742763][ T9872] device hsr_slave_0 entered promiscuous mode [ 833.758528][ T9872] device hsr_slave_1 entered promiscuous mode [ 833.784598][ T9872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 833.804966][ T9872] Cannot create hsr debugfs directory [ 834.713801][ T9148] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x1 [ 834.725001][ T9148] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x5 [ 834.763272][ T9148] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x6 [ 834.770400][ T9148] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 835.433605][T10029] loop1: detected capacity change from 0 to 131072 [ 835.488532][T10029] F2FS-fs (loop1): invalid crc value [ 835.524674][ T9148] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 835.544632][ T4394] device hsr_slave_0 left promiscuous mode [ 835.545672][ T9148] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 835.565562][T10029] F2FS-fs (loop1): Found nat_bits in checkpoint [ 835.605282][T10029] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 835.621293][T10029] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 835.643459][ T4394] device hsr_slave_1 left promiscuous mode [ 835.654291][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.667338][ T9148] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 835.677218][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.686050][ T26] audit: type=1800 audit(1787050909.504:75): pid=10029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1525" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 835.721318][ T4394] device bridge_slave_1 left promiscuous mode [ 835.735576][ T9148] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 835.782411][ T9148] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 835.840863][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.852029][ T9148] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 835.906749][ T9148] hid-led: probe of 0003:0FC5:B080.0003 failed with error -71 [ 835.959218][ T9148] usb 4-1: USB disconnect, device number 4 [ 836.071116][ T4394] device bridge_slave_0 left promiscuous mode [ 836.093320][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.870492][T10055] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 838.969649][T10058] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 838.976234][T10058] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 838.984435][T10058] vhci_hcd vhci_hcd.0: Device attached [ 839.303553][ T14] usb 34-1: SetAddress Request (10) to port 0 [ 839.315573][ T14] usb 34-1: new SuperSpeed USB device number 10 using vhci_hcd [ 839.785424][T10065] vhci_hcd: connection reset by peer [ 839.832353][ T57] vhci_hcd: stop threads [ 839.836920][ T57] vhci_hcd: release socket [ 839.864154][ T57] vhci_hcd: disconnect device [ 843.628270][ T4394] team0 (unregistering): Port device team_slave_1 removed [ 843.830470][ T4394] team0 (unregistering): Port device team_slave_0 removed [ 843.879523][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.968946][ T4394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.533725][ T14] usb 34-1: device descriptor read/8, error -110 [ 844.724746][ T4394] bond0 (unregistering): Released all slaves [ 844.972282][ T14] usb usb34-port1: attempt power cycle [ 845.415859][ T9872] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 845.512301][ T9872] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 845.934857][T10100] loop1: detected capacity change from 0 to 8 [ 846.232465][ T9872] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 846.373566][ T9872] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 846.557812][T10100] SQUASHFS error: lzo decompression failed, data probably corrupt [ 846.565720][T10100] SQUASHFS error: Failed to read block 0x91: -5 [ 846.571987][T10100] SQUASHFS error: Unable to read metadata cache entry [8f] [ 846.579268][T10100] SQUASHFS error: Unable to read inode 0x11f [ 846.808454][ T14] usb usb34-port1: unable to enumerate USB device [ 850.785211][ T9872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.047287][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 851.101909][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 851.321832][ T9872] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.636995][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 851.704547][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 851.743652][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.750816][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.878936][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 851.921318][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 851.957832][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 852.011069][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.019797][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.094281][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 852.116582][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 852.239591][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 852.267768][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 852.283230][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 852.300997][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 852.376472][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 852.920934][ T9872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 853.009958][ T9872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 853.092664][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 853.113658][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 853.159254][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 853.194641][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 853.215538][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 854.833293][ T9148] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 855.040697][ T9326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 855.056523][T10156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.113635][ T9326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 855.123709][T10156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.157716][ T9872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.926759][ T9148] usb 4-1: unable to get BOS descriptor or descriptor too short [ 857.978638][ T9148] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 858.017387][ T9148] usb 4-1: can't read configurations, error -71 [ 861.282820][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 861.749489][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 861.773259][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 861.781949][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 862.250711][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 862.318716][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 862.327099][ T9872] device veth0_vlan entered promiscuous mode [ 862.389873][ T9872] device veth1_vlan entered promiscuous mode [ 862.562597][ T9872] device veth0_macvtap entered promiscuous mode [ 862.596698][ T9872] device veth1_macvtap entered promiscuous mode [ 862.642353][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 862.659595][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 862.866309][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 862.997755][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 863.676621][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.777458][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.819535][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.842659][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.864928][ T9872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.880292][ T9326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 863.927758][ T9326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 863.944825][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.973757][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.994359][T10241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.004173][T10241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.032102][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.073154][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.100160][ T9872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.141300][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 864.160987][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 865.119493][ T9872] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.143264][ T9872] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.172505][ T9872] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.189260][ T9872] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.399481][T10252] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 867.463382][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.471375][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.741139][ T9326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 868.427474][ T9326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.440628][ T9326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.471279][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 869.897025][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.903435][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.424425][T10296] loop5: detected capacity change from 0 to 8 [ 873.159492][T10296] SQUASHFS error: lzo decompression failed, data probably corrupt [ 873.167553][T10296] SQUASHFS error: Failed to read block 0x91: -5 [ 873.173873][T10296] SQUASHFS error: Unable to read metadata cache entry [8f] [ 873.181078][T10296] SQUASHFS error: Unable to read inode 0x11f [ 878.712864][T10336] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 878.731610][T10336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 878.740700][T10336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 883.108262][T10362] loop4: detected capacity change from 0 to 8 [ 883.121228][T10362] SQUASHFS error: lzo decompression failed, data probably corrupt [ 883.129153][T10362] SQUASHFS error: Failed to read block 0x91: -5 [ 883.135455][T10362] SQUASHFS error: Unable to read metadata cache entry [8f] [ 883.142652][T10362] SQUASHFS error: Unable to read inode 0x11f [ 883.299050][T10116] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 884.807604][T10384] gadgetfs: bound to dummy_udc driver [ 886.193431][ T4314] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 886.787549][ C1] gadgetfs: connected [ 886.800424][ T4314] gadgetfs: disconnected [ 887.366704][T10377] gadgetfs: suspended from state 2 [ 887.683160][ T4314] usb 2-1: device not accepting address 4, error -71 [ 892.505636][ T4314] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 893.536882][ T4314] usb 2-1: Using ep0 maxpacket: 16 [ 893.709422][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.860669][ T4314] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 893.897178][ T4314] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 894.011803][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.028418][ T4314] usb 2-1: config 0 descriptor?? [ 894.543715][T10475] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1621'. [ 895.231930][ T4314] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 895.246987][ T4314] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 895.255218][ T4314] hid_map_usage: 11766 callbacks suppressed [ 895.255233][ T4314] HID 045e:07da: Invalid code 65791 type 1 [ 895.267425][ T4314] HID 045e:07da: Invalid code 768 type 1 [ 895.273205][ T4314] HID 045e:07da: Invalid code 769 type 1 [ 895.281247][ T4314] HID 045e:07da: Invalid code 770 type 1 [ 895.292456][ T4314] HID 045e:07da: Invalid code 771 type 1 [ 895.305221][ T4314] HID 045e:07da: Invalid code 772 type 1 [ 895.316967][ T4314] HID 045e:07da: Invalid code 773 type 1 [ 895.333383][ T4314] HID 045e:07da: Invalid code 774 type 1 [ 895.355397][ T4314] HID 045e:07da: Invalid code 775 type 1 [ 895.388975][ T4314] HID 045e:07da: Invalid code 776 type 1 [ 895.560399][ T4314] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input58 [ 895.573351][T10487] 9pnet_fd: Insufficient options for proto=fd [ 895.701422][ T4314] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 895.750550][ T4314] usb 2-1: USB disconnect, device number 6 [ 897.485150][T10505] fido_id[10505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 898.921656][T10536] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1633'. [ 904.044385][T10581] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1648'. [ 906.591832][T10589] loop4: detected capacity change from 0 to 131072 [ 906.615269][T10589] F2FS-fs (loop4): invalid crc value [ 906.701086][T10589] F2FS-fs (loop4): Found nat_bits in checkpoint [ 906.747179][T10589] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 907.329999][T10589] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 907.396360][ T26] audit: type=1800 audit(1787050980.345:76): pid=10589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1640" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 908.193617][T10611] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 908.217754][T10611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 908.227037][T10611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 909.541151][T10615] trusted_key: encrypted_key: insufficient parameters specified [ 911.331540][T10628] 9pnet_fd: Insufficient options for proto=fd [ 915.770451][T10691] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 920.977067][T10732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.999374][T10732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.594265][T10745] capability: warning: `syz.3.1687' uses 32-bit capabilities (legacy support in use) [ 921.640063][T10740] loop1: detected capacity change from 0 to 8 [ 921.702878][T10745] program syz.3.1687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 921.826848][T10740] SQUASHFS error: lzo decompression failed, data probably corrupt [ 921.859364][T10740] SQUASHFS error: Failed to read block 0x91: -5 [ 921.910220][T10740] SQUASHFS error: Unable to read metadata cache entry [8f] [ 921.956933][T10740] SQUASHFS error: Unable to read inode 0x11f [ 923.164158][T10766] batman_adv: batadv0: Adding interface: dummy0 [ 923.185399][T10766] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.223551][T10766] batman_adv: batadv0: Interface activated: dummy0 [ 934.239314][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.245797][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.704452][T10901] loop0: detected capacity change from 0 to 131072 [ 938.737856][T10901] F2FS-fs (loop0): invalid crc value [ 939.337274][T10901] F2FS-fs (loop0): Found nat_bits in checkpoint [ 939.380984][T10901] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 939.417266][T10901] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 939.562888][ T26] audit: type=1800 audit(1787051010.061:77): pid=10901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1733" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 940.202758][T10923] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1736'. [ 940.211953][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1736'. [ 945.190522][ T4317] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 945.506160][ T4317] usb 4-1: unable to get BOS descriptor or descriptor too short [ 945.683590][ T4317] usb 4-1: config 100 has an invalid interface number: 173 but max is 0 [ 945.753129][ T4317] usb 4-1: config 100 has no interface number 0 [ 945.793555][ T4317] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 945.870769][ T4317] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 945.924845][ T4317] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 945.992391][ T4317] usb 4-1: config 100 interface 173 has no altsetting 0 [ 946.043913][ T4317] usb 4-1: string descriptor 0 read error: -22 [ 946.074842][ T4317] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 946.127041][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.485777][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 948.716250][ T4317] usb 4-1: can't set config #100, error -71 [ 948.744761][ T4317] usb 4-1: USB disconnect, device number 7 [ 953.679879][T11009] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 953.737372][T11009] gadgetfs: bound to dummy_udc driver [ 958.864480][T11042] loop3: detected capacity change from 0 to 8 [ 959.251930][T11042] SQUASHFS error: lzo decompression failed, data probably corrupt [ 959.259858][T11042] SQUASHFS error: Failed to read block 0x91: -5 [ 959.266242][T11042] SQUASHFS error: Unable to read metadata cache entry [8f] [ 959.273500][T11042] SQUASHFS error: Unable to read inode 0x11f [ 961.549878][T11067] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 961.929079][T10393] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 962.681489][T11075] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 962.725376][T11075] gadgetfs: bound to dummy_udc driver [ 964.202394][ T4314] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 966.187141][ C1] gadgetfs: connected [ 966.194311][ T4314] gadgetfs: disconnected [ 966.250171][T10393] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 966.285114][T10393] usb 2-1: can't read configurations, error -71 [ 966.478984][T11070] gadgetfs: suspended from state 2 [ 966.500760][ T4314] usb 3-1: device descriptor read/all, error -71 [ 969.783110][T11122] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 974.248913][T10138] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 974.455181][T10138] usb 5-1: Using ep0 maxpacket: 16 [ 974.467846][T10138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.528797][T10138] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 976.571468][T10138] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 976.606764][T10138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.676341][T10138] usb 5-1: config 0 descriptor?? [ 977.824444][T10138] usbhid 5-1:0.0: can't add hid device: -71 [ 977.834604][T10138] usbhid: probe of 5-1:0.0 failed with error -71 [ 977.886744][T10138] usb 5-1: USB disconnect, device number 7 [ 980.884719][T11224] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1812'. [ 981.824641][T10138] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 982.096060][T10138] usb 2-1: Using ep0 maxpacket: 16 [ 982.105867][T10138] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.268364][T10138] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 982.433808][T10138] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 982.552901][T10138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.757258][T10138] usb 2-1: config 0 descriptor?? [ 982.875438][T11236] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 984.361072][T10138] usbhid 2-1:0.0: can't add hid device: -71 [ 984.367184][T10138] usbhid: probe of 2-1:0.0 failed with error -71 [ 986.136098][T10138] usb 2-1: USB disconnect, device number 10 [ 988.389625][T11274] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1825'. [ 990.596239][T11298] trusted_key: encrypted_key: insufficient parameters specified [ 992.150689][ C0] hrtimer: interrupt took 140388238 ns [ 1113.947466][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1113.954492][ C1] rcu: 0-...!: (1 GPs behind) idle=47ac/1/0x4000000000000000 softirq=48198/48199 fqs=7 [ 1113.965963][ C1] (detected by 1, t=10502 jiffies, g=63921, q=1208 ncpus=2) [ 1113.973902][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1113.979142][ C0] NMI backtrace for cpu 0 [ 1113.979152][ C0] CPU: 0 PID: 11288 Comm: syz.0.1829 Not tainted syzkaller #0 [ 1113.979169][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1113.979180][ C0] RIP: 0010:__lock_acquire+0x1151/0x7c40 [ 1113.979211][ C0] Code: 03 89 c3 81 e3 ff 1f 00 00 c1 e8 03 25 f8 03 00 00 48 8d b8 40 02 b1 90 be 08 00 00 00 e8 b7 4c 6f 00 48 0f a3 1d 7f f2 4c 0f <0f> 83 9a 01 00 00 48 8d 04 5b c1 e0 06 48 8d 98 00 81 49 90 49 b8 [ 1113.979225][ C0] RSP: 0018:ffffc900000078a0 EFLAGS: 00000057 [ 1113.979240][ C0] RAX: 0000000000000001 RBX: 0000000000000060 RCX: ffffffff81640fb9 [ 1113.979251][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90b10248 [ 1113.979262][ C0] RBP: ffffc90000007ad0 R08: ffffffff90b1024f R09: 1ffffffff2162049 [ 1113.979274][ C0] R10: dffffc0000000000 R11: fffffbfff216204a R12: ffff88801b74a8d8 [ 1113.979287][ C0] R13: ffff88801b749e00 R14: 000000002ee63bb2 R15: 000000006d47acd1 [ 1113.979298][ C0] FS: 00007f13d77d56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1113.979313][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1113.979324][ C0] CR2: 0000558e3f588a38 CR3: 0000000072d3b000 CR4: 00000000003506f0 [ 1113.979339][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1113.979349][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1113.979359][ C0] Call Trace: [ 1113.979366][ C0] [ 1113.979377][ C0] ? verify_lock_unused+0x140/0x140 [ 1113.979406][ C0] ? verify_lock_unused+0x140/0x140 [ 1113.979428][ C0] ? verify_lock_unused+0x140/0x140 [ 1113.979457][ C0] ? debug_objects_fill_pool+0x87/0x780 [ 1113.979477][ C0] lock_acquire+0x1bb/0x4a0 [ 1113.979499][ C0] ? debug_object_activate+0x68/0x4f0 [ 1113.979518][ C0] ? debug_objects_fill_pool+0xc8/0x780 [ 1113.979533][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1113.979558][ C0] ? debug_object_activate+0x4f0/0x4f0 [ 1113.979576][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 1113.979596][ C0] ? debug_object_activate+0x68/0x4f0 [ 1113.979611][ C0] ? _raw_spin_lock+0x40/0x40 [ 1113.979632][ C0] debug_object_activate+0x68/0x4f0 [ 1113.979648][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1113.979668][ C0] enqueue_hrtimer+0x37/0x410 [ 1113.979689][ C0] __hrtimer_run_queues+0x63e/0xc90 [ 1113.979707][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 1113.979731][ C0] ? taprio_free_sched_cb+0x190/0x190 [ 1113.979758][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1113.979776][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1113.979807][ C0] hrtimer_interrupt+0x399/0x980 [ 1113.979833][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 1113.979859][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1113.979877][ C0] [ 1113.979882][ C0] [ 1113.979887][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1113.979909][ C0] RIP: 0010:import_iovec+0x74/0xa0 [ 1113.979933][ C0] Code: e3 02 31 ff 89 de e8 4b a9 6d fd d1 eb 44 89 ef 4c 89 e6 44 89 fa 89 e9 4d 89 f0 4c 8b 0c 24 53 e8 81 fa ff ff 48 83 c4 10 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 89 d9 80 e1 07 80 c1 03 38 c1 7c bd [ 1113.979947][ C0] RSP: 0018:ffffc9000c2b7a50 EFLAGS: 00000286 [ 1113.979960][ C0] RAX: 0000000000000000 RBX: ffffc9000c2b7be0 RCX: 0000000000000002 [ 1113.979971][ C0] RDX: ffffc9000c2b7d50 RSI: 0000000000000000 RDI: ffffc9000c2b7d48 [ 1113.979982][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffc9000c2b7d30 [ 1113.979992][ C0] R10: dffffc0000000000 R11: fffff52001856fb0 R12: 0000000000000000 [ 1113.980003][ C0] R13: 0000000000000000 R14: ffffc9000c2b7be0 R15: 0000000000000000 [ 1113.980021][ C0] ___sys_recvmsg+0x4b2/0x590 [ 1113.980049][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 1113.980081][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 1113.980107][ C0] ? __might_fault+0xc2/0x120 [ 1113.980122][ C0] ? __might_fault+0xa6/0x120 [ 1113.980139][ C0] do_recvmmsg+0x370/0x810 [ 1113.980167][ C0] ? __sys_recvmmsg+0x290/0x290 [ 1113.980196][ C0] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1113.980212][ C0] ? rcu_read_lock_sched_held+0x86/0x110 [ 1113.980238][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 1113.980265][ C0] ? do_recvmmsg+0x810/0x810 [ 1113.980291][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1113.980309][ C0] do_syscall_64+0x4c/0xa0 [ 1113.980331][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1113.980352][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1113.980374][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1113.980395][ C0] RIP: 0033:0x7f13d959e0d9 [ 1113.980410][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.980424][ C0] RSP: 002b:00007f13d77d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1113.980439][ C0] RAX: ffffffffffffffda RBX: 00007f13d9826090 RCX: 00007f13d959e0d9 [ 1113.980451][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1113.980461][ C0] RBP: 00007f13d9635024 R08: 0000000000000000 R09: 0000000000000000 [ 1113.980471][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1113.980480][ C0] R13: 00007f13d9826128 R14: 00007f13d9826090 R15: 00007ffec549fc08 [ 1113.980498][ C0] [ 1113.981136][ C1] rcu: rcu_preempt kthread starved for 10426 jiffies! g63921 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1114.491842][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1114.501849][ C1] rcu: RCU grace-period kthread stack dump: [ 1114.507763][ C1] task:rcu_preempt state:R running task stack:27888 pid:16 ppid:2 flags:0x00004000 [ 1114.518583][ C1] Call Trace: [ 1114.521894][ C1] [ 1114.524863][ C1] __schedule+0x107f/0x4030 [ 1114.529427][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1114.534664][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1114.540602][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1114.545502][ C1] ? __sched_text_start+0x8/0x8 [ 1114.550407][ C1] schedule+0xb9/0x180 [ 1114.554564][ C1] schedule_timeout+0x184/0x2d0 [ 1114.559502][ C1] ? console_conditional_schedule+0x40/0x40 [ 1114.565444][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1114.571381][ C1] ? update_process_times+0x1b0/0x1b0 [ 1114.576807][ C1] ? prepare_to_swait_event+0x340/0x360 [ 1114.582408][ C1] rcu_gp_fqs_loop+0x303/0x1350 [ 1114.587312][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1114.593612][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 1114.598685][ C1] ? rcu_gp_init+0x14f0/0x14f0 [ 1114.603482][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 1114.608372][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1114.613700][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1114.618954][ C1] rcu_gp_kthread+0x99/0x3b0 [ 1114.623596][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1114.628755][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1114.634692][ C1] ? __kthread_parkme+0x71/0x1c0 [ 1114.639683][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 1114.644760][ C1] kthread+0x29d/0x330 [ 1114.648860][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1114.654014][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1114.658639][ C1] ret_from_fork+0x1f/0x30 [ 1114.663119][ C1] [ 1114.666167][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1114.672628][ C1] CPU: 1 PID: 57 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 1114.680033][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1114.690117][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1114.696669][ C1] RIP: 0010:smp_call_function_many_cond+0x1148/0x1250 [ 1114.703473][ C1] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 73 ff 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 ff fb 0a 00 e9 34 ff ff ff f3 90 <41> 0f b6 04 1c 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 17 ff ff ff [ 1114.723123][ C1] RSP: 0018:ffffc90001587800 EFLAGS: 00000293 [ 1114.729237][ C1] RAX: ffffffff81773243 RBX: dffffc0000000000 RCX: ffff88801ea89e00 [ 1114.737250][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1114.745257][ C1] RBP: ffffc90001587960 R08: ffffffff90b10247 R09: 1ffffffff2162048 [ 1114.753259][ C1] R10: dffffc0000000000 R11: fffffbfff2162049 R12: 1ffff110171c8641 [ 1114.761287][ C1] R13: ffff8880b8f3bdc0 R14: 0000000000000000 R15: ffff8880b8e43208 [ 1114.769294][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1114.778260][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1114.784876][ C1] CR2: 0000558e3f5af1b8 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 1114.792973][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1114.801003][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1114.809093][ C1] Call Trace: [ 1114.812412][ C1] [ 1114.815373][ C1] ? kmem_cache_alloc_bulk+0x11b/0x4e0 [ 1114.820880][ C1] ? text_poke_sync+0x20/0x20 [ 1114.825604][ C1] ? smp_call_function_many+0x30/0x30 [ 1114.831014][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 1114.836527][ C1] ? perf_event_bpf_output+0x330/0x330 [ 1114.842030][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1114.848231][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 1114.853653][ C1] ? text_poke_sync+0x20/0x20 [ 1114.858365][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 1114.863528][ C1] text_poke_bp_batch+0x5ae/0x850 [ 1114.868610][ C1] ? text_poke_loc_init+0x560/0x560 [ 1114.873862][ C1] ? arch_jump_label_transform_queue+0x76/0xd0 [ 1114.880048][ C1] ? __jump_label_update+0x39a/0x3c0 [ 1114.885389][ C1] ? process_one_work+0x7b4/0x1160 [ 1114.890669][ C1] text_poke_finish+0x16/0x30 [ 1114.895410][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 1114.901438][ C1] static_key_enable_cpuslocked+0x11f/0x240 [ 1114.907383][ C1] static_key_enable+0x16/0x20 [ 1114.912209][ C1] toggle_allocation_gate+0xba/0x470 [ 1114.917556][ C1] ? show_object+0xa0/0xa0 [ 1114.922025][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1114.928164][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 1114.933248][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1114.938685][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1114.944644][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1114.949890][ C1] ? process_one_work+0x7b4/0x1160 [ 1114.955039][ C1] process_one_work+0x8ab/0x1160 [ 1114.960037][ C1] ? worker_detach_from_pool+0x240/0x240 [ 1114.965742][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1114.970810][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1114.976393][ C1] ? wq_worker_running+0x97/0x190 [ 1114.981467][ C1] worker_thread+0xaf5/0x12a0 [ 1114.986213][ C1] kthread+0x29d/0x330 [ 1114.990402][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 1114.995465][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1115.000095][ C1] ret_from_fork+0x1f/0x30 [ 1115.004565][ C1]