last executing test programs: 1m59.729457304s ago: executing program 3 (id=1090): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000840)={'erspan0\x00', 0x0, 0x40, 0x40, 0x10000, 0x787, {{0x5, 0x4, 0x0, 0x6, 0x11, 0x68, 0x0, 0x8b, 0x29, 0x0, @broadcast, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f00000003c0)={'tunl0\x00', r2, 0x700, 0x8, 0x3e3, 0x6c5d, {{0x7, 0x4, 0x1, 0x1, 0x1c, 0x65, 0x0, 0x51, 0x4, 0x0, @loopback, @multicast2, {[@noop, @noop, @ra={0x94, 0x4}]}}}}}) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x12, 0x60a, 0x138, 0x202, 0x220, 0x2e8, 0x2e8, 0x220, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x6, 0x0, 0x0, 0x4c}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@ecn={{0x28}, {0x10}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "0b0500dd2f808bcbf5a552fd64a72ee561b24c479377004898fbe1cefa63"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000780)=""/176) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000400)={{0x2, @multicast2, 0x0, 0x3, 'wrr\x00', 0x0, 0x20, 0x10023}, {@local, 0x0, 0x10000, 0x0, 0x80000001, 0x6}}, 0x44) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 1m56.368899254s ago: executing program 3 (id=1096): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) setpriority(0x1, 0x0, 0x10000) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @random="589733b902f1", @broadcast, @device_a, {0x2, 0x500}, "", @void, @value=@ver_80211n={0x0, 0x5f, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m53.190578438s ago: executing program 3 (id=1107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x1, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0xe464, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e4, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x2, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x200000, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x6, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x7fffffff, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x9, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003700)=""/4100, 0x1004}], 0x0, 0x1}, 0x20) add_key(0x0, 0x0, &(0x7f0000001080)="1b", 0x1, 0xfffffffffffffffb) 1m53.081377582s ago: executing program 3 (id=1109): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/14, 0xe}, 0x5}], 0x2, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 1m51.726217686s ago: executing program 3 (id=1113): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r0) r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1]) 1m50.604323553s ago: executing program 3 (id=1116): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="200000004800010027bd7000000000000a00806e080100000000000004000180"], 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) open(0x0, 0x400141042, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000080039503230"], 0x15) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="b000"], 0xb0) recvmmsg(r1, &(0x7f0000006240)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x120, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000780)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@nodiscard}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x481, &(0x7f0000003380)="$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") 1m35.20471292s ago: executing program 32 (id=1116): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="200000004800010027bd7000000000000a00806e080100000000000004000180"], 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) open(0x0, 0x400141042, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000080039503230"], 0x15) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="b000"], 0xb0) recvmmsg(r1, &(0x7f0000006240)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x120, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000780)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@nodiscard}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x481, &(0x7f0000003380)="$eJzs3MtvFdUfAPDv3D54/9of4gMEqaKR+GhpecjCjUYTFpqY6ALjqraFVAo1tCZCiFYXuDQk7o3/hXGlG6NuNHGre0NCDDEBdTNm7szApdwpt/S2F3o/n2Tac2ZO7znfOXNuz8xpbwBdayj7kkRsjYjfImIgz95aYCj/dv3qhYm/r16YSCJN3/wzqZe7dvXCRFm0/LkteSZNi/yGJvVefCdifGZm6myRH5k//f7I3Lnzz0+fHj85dXLqzNjRo4cO7uk/Mna4LXFmcV3b9dHs7p3H3r70+sTxS+/+mNQijzsWxdEuQ/nZbeqpdlfWYdsa0klv45G9P99MN7sS6KSeiMi6q68+/geiJzbdODYQr37a0cYBqypN03SJd+WFFFjHkuh0C4DOKH/RZ/e/5bZGU497wpWX8hugLO7rxZYf6Y1antjbt+j+dmsb6x+KiOML/3yZbbFKzyEAABp9m81/nms2/6vFQ3miP/vyv2INZTAi/h8R2yPigYjYEREPRtTLPhwRjyyz/sUrJLfPf2qX7zq4FmTzvxeLta1b53+1sshgT5HbVo+/LzkxPTN1oDgn+6Nvw4npZGp0iTq+e+XXz6uONc7/si2rv5wLFu243LvoAd3k+Pz4SmJudOWTiF29zeJPolzGSSJiZ0Tsuss6pp/prTx25/iXUP2yLUu/ing67/+FWBR/Kalcnxx94cjY4ZGNMTN1YKS8Km730y8X36iqf0Xxt0HW/5ubXv834h9MNkbMnTt/qr5eO7esl8+GTlz8/bPKe5oi/mx4tXL9H9tWXP/9yVv1Hf3FgQ/H5+fPjkb0J6/dvn/s5quV+bJ8Fv/+fc3H//a4eSYejYjdEbEnIh7LbgqLtj8eEU9ExL4lTsIPLz/53h3ib9L/a7NWmsU/Wd3/f6VZ/0dj/y8/0XPq+2/uHP/GiKjq/0P11P5iTyvvf602cKXnDwAAAO4H+d/AJ7XhG+labXg4/xv+HbG5NjM7N//sidkPzkzm696D0Vcrn3QNNDwPHS2eDZf5sUX5g8Vz4y96NtXzwxOzM5OdDh663JaK8Z/5o6fTrQNWXRvW0YD7lPEP3cv4h+6UGP/Q1Yx/6F7Nxv/HlaWHv17VxgBryu9/6F4tjP+F/Fv1rAC4PzUb/wMdaAew9sz/oStV/m98bUX/8r/miX+LzzO8V9qz/hNRuyeasf4TvS1/mMUyEmkxv8/2bGhaptPvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO3xXwAAAP//2Y/lXQ==") 6.754634178s ago: executing program 2 (id=1493): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000002080)={[{@delalloc}, {@debug_want_extra_isize}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000100)="$eJzs3U9rK1UUAPAz+ddUFwniRhEc0IWr8urWTaM8QexKiaBuDL4+kKQUWghYwdpVP4FL8Wu4defabyC4Fdy1i8rIZGaaxCZttP+g/n6b3t57z52TOUOyyskXr+0On+0lcXz6W7TbSdS2YivOkuhGLSrfRSMAgMfjLMvizywimsX/ycqRjdrdZQUA3KXi87/w0LkAAPfj408/+7C3vf30ozRtxyudk3E/iYjdk3G/WO89j69iFDvxJDpxHpFdKMbvf7D9NBpprhtv7h6N++O583t/xPokfjM60V0cv5kWyvh+RP63GS9EGr3nzeqoTry8OP7tBfHRb8Vbb8zkvxGd+PXL2ItRPIs8dhr/7Waavpd9f/rN5/ll8vikFv21yb7SekRWv7eiAAAAAAAAAAAAAAAAAAAAAADw6G2kaVK075n078mnyv479fPJ+kZa6c735yniL/oFF/2Bsihb9Bxl8UPVX+dJmqZZuXEa34hXG35YAAAAAAAAAAAAAAAAAAAAAHIHXx8OB6PRzv6NB/XhYFR1A6i+1v9fD9yamXk9DoeD+vID11a/1my3gTzXKzdHoxG3cFuuH8TP63k+S/b8WOb7709emxb3kzK8KsytvoqX3r3IMC2Xqps8HCTXXatdFe6n2aVWrJxGkszNTGo72tnPJo/EeTZf0/aSm9m6hbuRP6OtFxcu/ZVl2WrnvPN7UaNyJpm02FgtjWY5WPq0tC/X4pflBy59y6jf9D0HAAAAAAAAAAAAAAAAAABYbP6L0/9wfGVo7c6SAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB7Nv39/2rQjoj5mUuDozL4qj3loBX7Bw/8EgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+DsAAP//tERGig==") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000580)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66097d30255cb3f2, '\x00', 0x0, @fallback=0x12}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 6.544850225s ago: executing program 4 (id=1494): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf1}}], 0x18}, 0x80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) listen(0xffffffffffffffff, 0x6) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r6, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x42000800, &(0x7f00000002c0), 0x0, &(0x7f00000003c0), 0x0, 0x0) capset(&(0x7f00000005c0)={0x19980330, r0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.237704916s ago: executing program 2 (id=1496): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 5.527563049s ago: executing program 2 (id=1498): syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) open(0x0, 0x101042, 0x98) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_pidfd_open(0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 5.340908775s ago: executing program 4 (id=1499): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @remote, @val={@void, {0x812d, 0x1, 0x1, 0x4}}, {@llc={0x4, {@snap={0x0, 0x0, "c0", "118190", 0xa00}}}}}, 0x0) 5.229655979s ago: executing program 2 (id=1500): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000009c0)={[{@auto_da_alloc}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 5.17447484s ago: executing program 4 (id=1501): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/14, 0xe}, 0x5}], 0x1, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800), 0x0, 0x0) 5.111664192s ago: executing program 1 (id=1502): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file7\x00', 0x200008, &(0x7f0000000340)=ANY=[], 0x81, 0x1d3, &(0x7f0000000100)="$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") landlock_create_ruleset(0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file7\x00', &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0) 5.075773303s ago: executing program 0 (id=1503): r0 = io_uring_setup(0x3450, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) close_range(r7, 0xffffffffffffffff, 0x0) 4.768944753s ago: executing program 1 (id=1504): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, 0x0, 0x0) listen(r3, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept(r2, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32], 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x100000000, 0x12) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000240)={0x12, {{0x29, 0x0, 0x36000000, @local}}}, 0x88) 4.665063877s ago: executing program 2 (id=1505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x8000, 0x2}, &(0x7f0000000280)=0x8) 4.428922715s ago: executing program 0 (id=1506): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 3.491299315s ago: executing program 0 (id=1507): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf1}}], 0x18}, 0x80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) listen(0xffffffffffffffff, 0x6) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r6, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x42000800, &(0x7f00000002c0), 0x0, &(0x7f00000003c0), 0x0, 0x0) capset(&(0x7f00000005c0)={0x19980330, r0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.437017137s ago: executing program 1 (id=1508): syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) open(0x0, 0x101042, 0x98) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_pidfd_open(0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 3.001587571s ago: executing program 4 (id=1509): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @remote, @val={@void, {0x812d, 0x1, 0x1, 0x4}}, {@llc={0x4, {@snap={0x0, 0x0, "c0", "118190", 0xa00}}}}}, 0x0) 2.716460011s ago: executing program 2 (id=1510): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 2.561012786s ago: executing program 1 (id=1511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xf}, 0x1c) 2.164788399s ago: executing program 0 (id=1512): syz_io_uring_setup(0x356d, &(0x7f0000000400)={0x0, 0x200a5ba, 0x8, 0x1001, 0x1d4}, 0x0, 0x0, 0x0) 2.039769123s ago: executing program 0 (id=1513): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x9) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) setrlimit(0xa, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x3c}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.969292746s ago: executing program 4 (id=1514): r0 = io_uring_setup(0x3450, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) close_range(r7, 0xffffffffffffffff, 0x0) 564.974612ms ago: executing program 1 (id=1515): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 267.374712ms ago: executing program 0 (id=1516): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x3, 0xff, 0x81, 0x57e, 0xfffffffffbfffffd, 0x4002004c4, 0xfffffffffffffffa, 0x3, 0x8, 0x9, 0x1, 0x2, 0x2, 0x8, 0xfffffffffffff001], 0x10000, 0x2100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 76.268598ms ago: executing program 1 (id=1517): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0xd, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x337, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x4008044, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)='}', 0x1) sendto$inet(r0, &(0x7f0000000380)="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", 0x1cf, 0x800, 0x0, 0x0) 0s ago: executing program 4 (id=1518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x8000, 0x2}, &(0x7f0000000280)=0x8) kernel console output (not intermixed with test programs): 843] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 211.591518][ T6621] loop2: detected capacity change from 0 to 4096 [ 211.622820][ T6621] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 211.633282][ T6621] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 211.642120][ T6621] ntfs: (device loop2): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 211.706501][ T6621] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. [ 212.109649][ T6637] loop3: detected capacity change from 0 to 512 [ 212.124749][ T6637] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.206239][ T6637] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.210: corrupted in-inode xattr: e_value size too large [ 212.260467][ T6637] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.210: couldn't read orphan inode 15 (err -117) [ 212.330835][ T6637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.531640][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.404433][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 215.438631][ T6652] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.447766][ T6652] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.531168][ T6656] loop1: detected capacity change from 0 to 512 [ 215.567061][ T6656] EXT4-fs (loop1): 1 truncate cleaned up [ 215.575050][ T6656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.780554][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.245010][ T6663] xt_TPROXY: Can be used only with -p tcp or -p udp [ 220.741223][ T6673] loop1: detected capacity change from 0 to 2048 [ 220.758471][ T5843] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 221.036225][ T6673] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 221.057666][ T5843] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.253525][ T5843] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.320778][ T6673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.217'. [ 221.814810][ T5843] usb 3-1: config 0 has no interface number 0 [ 221.853282][ T5843] usb 3-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 221.926822][ T5843] usb 3-1: config 0 interface 1 has no altsetting 0 [ 221.984952][ T6681] loop3: detected capacity change from 0 to 512 [ 221.992620][ T6681] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.023546][ T5843] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 222.065267][ T6681] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.221: corrupted in-inode xattr: e_value size too large [ 222.091550][ T6680] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 222.113950][ T6681] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.221: couldn't read orphan inode 15 (err -117) [ 222.130464][ T6681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.151931][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.225903][ T5843] usb 3-1: config 0 descriptor?? [ 222.270019][ T5843] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 222.489073][ T5843] usb 3-1: USB disconnect, device number 7 [ 224.218833][ T6694] loop2: detected capacity change from 0 to 512 [ 224.259074][ T6694] EXT4-fs (loop2): 1 truncate cleaned up [ 224.278462][ T6694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.389825][ T6705] loop1: detected capacity change from 0 to 256 [ 226.471727][ T6705] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 226.585230][ T28] audit: type=1800 audit(1779134107.777:11): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.230" name="file1" dev="loop1" ino=1048601 res=0 errno=0 [ 226.710203][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.944500][ T6708] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 228.459424][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.606304][ T6719] xt_TPROXY: Can be used only with -p tcp or -p udp [ 228.894166][ T23] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 229.784933][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.794834][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.810976][ T23] usb 1-1: config 0 has no interface number 0 [ 229.818234][ T23] usb 1-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 229.837514][ T23] usb 1-1: config 0 interface 1 has no altsetting 0 [ 229.844330][ T23] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 229.853469][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.871481][ T23] usb 1-1: config 0 descriptor?? [ 229.893203][ T23] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 230.096045][ T788] usb 1-1: USB disconnect, device number 7 [ 231.099676][ T6738] loop3: detected capacity change from 0 to 512 [ 231.177780][ T6738] EXT4-fs (loop3): 1 truncate cleaned up [ 231.208076][ T6738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.728403][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 233.739399][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.747394][ T6717] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.916082][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.200390][ T6749] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 234.370421][ T6753] loop1: detected capacity change from 0 to 4096 [ 234.381184][ T6753] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 234.399679][ T6753] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 234.409959][ T6753] ntfs: (device loop1): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 234.425495][ T6753] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume. [ 234.492422][ T5966] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.379724][ T6757] tipc: Enabling of bearer rejected, failed to enable media [ 236.255078][ T6764] xt_TPROXY: Can be used only with -p tcp or -p udp [ 236.561305][ T5780] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 237.208348][ T5780] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.242827][ T5780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.282764][ T5780] usb 2-1: config 0 has no interface number 0 [ 237.288986][ T5780] usb 2-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 240.285129][ T5780] usb 2-1: config 0 interface 1 has no altsetting 0 [ 240.291856][ T5780] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 240.306581][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.333700][ T5780] usb 2-1: config 0 descriptor?? [ 240.382951][ T5780] usb 2-1: can't set config #0, error -71 [ 240.443371][ T5780] usb 2-1: USB disconnect, device number 7 [ 241.191784][ T6808] loop3: detected capacity change from 0 to 4096 [ 241.256647][ T6808] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 241.303432][ T6808] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 241.340813][ T6808] ntfs: (device loop3): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 241.411753][ T6808] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 242.287821][ T6813] loop3: detected capacity change from 0 to 256 [ 242.355645][ T6813] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 242.676186][ T28] audit: type=1800 audit(1779134123.787:12): pid=6813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.256" name="file1" dev="loop3" ino=1048602 res=0 errno=0 [ 243.592007][ T27] IPVS: starting estimator thread 0... [ 243.706724][ T6819] IPVS: using max 19 ests per chain, 45600 per kthread [ 244.108838][ T6825] xt_TPROXY: Can be used only with -p tcp or -p udp [ 244.397590][ T5889] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 244.610163][ T5889] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.618505][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.629786][ T5889] usb 1-1: config 0 has no interface number 0 [ 244.999858][ T5889] usb 1-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.013314][ T5889] usb 1-1: config 0 interface 1 has no altsetting 0 [ 245.020004][ T5889] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 245.029144][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.042530][ T5889] usb 1-1: config 0 descriptor?? [ 245.052907][ T5889] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 245.272545][ T5889] usb 1-1: USB disconnect, device number 8 [ 245.494113][ T6832] loop2: detected capacity change from 0 to 512 [ 245.568674][ T6832] EXT4-fs (loop2): 1 truncate cleaned up [ 245.625033][ T6832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.439898][ T6846] loop1: detected capacity change from 0 to 512 [ 246.447491][ T6846] EXT4-fs: Ignoring removed mblk_io_submit option [ 249.343940][ T6846] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 249.344301][ T6846] EXT4-fs: failed to create workqueue [ 249.359396][ T6846] EXT4-fs (loop1): mount failed [ 249.569964][ T6855] loop3: detected capacity change from 0 to 256 [ 249.680245][ T6855] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 249.934682][ T28] audit: type=1800 audit(1779134131.127:13): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.267" name="file1" dev="loop3" ino=1048603 res=0 errno=0 [ 250.298818][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.142257][ T6868] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 252.490375][ T6880] xt_TPROXY: Can be used only with -p tcp or -p udp [ 252.772792][ T5889] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 252.966581][ T5889] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 252.984421][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.002050][ T5889] usb 4-1: config 0 has no interface number 0 [ 253.008757][ T5889] usb 4-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 253.022511][ T5889] usb 4-1: config 0 interface 1 has no altsetting 0 [ 253.029215][ T5889] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 253.038946][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.057620][ T5889] usb 4-1: config 0 descriptor?? [ 253.075419][ T5889] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 253.297974][ T5843] usb 4-1: USB disconnect, device number 6 [ 253.417331][ T6883] loop2: detected capacity change from 0 to 512 [ 253.475360][ T6883] EXT4-fs (loop2): 1 truncate cleaned up [ 253.530308][ T6883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.069621][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.093927][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.454063][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.357726][ T6914] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 264.396546][ T6927] loop1: detected capacity change from 0 to 512 [ 264.440121][ T6927] EXT4-fs (loop1): 1 truncate cleaned up [ 264.478240][ T6927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.350823][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.377421][ T6940] loop3: detected capacity change from 0 to 256 [ 268.633651][ T6940] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 268.708205][ T28] audit: type=1800 audit(1779134149.897:14): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.294" name="file1" dev="loop3" ino=1048604 res=0 errno=0 [ 268.902830][ T6953] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 271.021981][ T6964] tipc: Enabling of bearer rejected, failed to enable media [ 271.177655][ T6970] loop3: detected capacity change from 0 to 1024 [ 271.537138][ T6981] xt_TPROXY: Can be used only with -p tcp or -p udp [ 271.554801][ T5966] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.671913][ T6990] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 272.697282][ T6992] loop3: detected capacity change from 0 to 256 [ 272.748968][ T6992] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 272.902550][ T28] audit: type=1800 audit(1779134154.027:15): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.309" name="file1" dev="loop3" ino=1048605 res=0 errno=0 [ 273.792819][ T5843] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 273.984913][ T5843] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.994246][ T5779] Bluetooth: hci1: unexpected event for opcode 0x007f [ 274.006281][ T5843] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.017258][ T5843] usb 3-1: config 0 has no interface number 0 [ 274.024793][ T5843] usb 3-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 274.038371][ T5843] usb 3-1: config 0 interface 1 has no altsetting 0 [ 274.045390][ T5843] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 274.055247][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.077854][ T5843] usb 3-1: config 0 descriptor?? [ 274.101885][ T5843] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 274.314451][ T5843] usb 3-1: USB disconnect, device number 8 [ 275.102087][ T7020] loop1: detected capacity change from 0 to 512 [ 275.116280][ T7020] EXT4-fs: Ignoring removed mblk_io_submit option [ 275.307820][ T7020] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.316: corrupted in-inode xattr: e_value size too large [ 275.328654][ T7020] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.316: couldn't read orphan inode 15 (err -117) [ 275.356525][ T7020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.690970][ T7022] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 276.401525][ T7029] loop2: detected capacity change from 0 to 256 [ 276.466934][ T7029] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 276.632810][ T28] audit: type=1800 audit(1779134157.757:16): pid=7029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.321" name="file1" dev="loop2" ino=1048606 res=0 errno=0 [ 277.084504][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.149891][ T7044] loop2: detected capacity change from 0 to 8192 [ 279.210809][ T7044] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 279.283548][ T7044] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 279.346463][ T7044] REISERFS (device loop2): using ordered data mode [ 279.380783][ T7044] reiserfs: using flush barriers [ 279.406325][ T7044] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 279.483286][ T7044] REISERFS (device loop2): checking transaction log (loop2) [ 279.529427][ T7044] REISERFS (device loop2): Using rupasov hash to sort names [ 279.570988][ T7044] REISERFS (device loop2): using 3.5.x disk format [ 279.602714][ T7044] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 279.660302][ T7044] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 279.714301][ T7044] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 279.778291][ T7044] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 279.962429][ T7044] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "/dev/kvm" [ 280.017579][ T7051] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 280.027679][ T7052] loop3: detected capacity change from 0 to 256 [ 280.043570][ T7052] exfat: Deprecated parameter 'utf8' [ 280.072585][ T7052] exfat: Deprecated parameter 'namecase' [ 280.090173][ T7052] exfat: Deprecated parameter 'namecase' [ 280.104271][ T7052] exfat: Deprecated parameter 'utf8' [ 280.255172][ T7052] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 280.907787][ T7060] loop3: detected capacity change from 0 to 512 [ 280.921088][ T7060] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.074466][ T7060] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.331: corrupted in-inode xattr: e_value size too large [ 281.102728][ T7060] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.331: couldn't read orphan inode 15 (err -117) [ 281.124821][ T7060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.991480][ T7065] loop1: detected capacity change from 0 to 256 [ 282.071387][ T7065] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 282.196343][ T28] audit: type=1800 audit(1779134163.387:17): pid=7065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.333" name="file1" dev="loop1" ino=1048607 res=0 errno=0 [ 282.570024][ T7054] loop2: detected capacity change from 0 to 40427 [ 282.654755][ T7054] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 282.726589][ T7054] F2FS-fs (loop2): Image doesn't support compression [ 282.775021][ T7054] F2FS-fs (loop2): Image doesn't support compression [ 282.781813][ T7054] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 282.863260][ T7054] F2FS-fs (loop2): invalid crc value [ 282.899293][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.921260][ T7054] F2FS-fs (loop2): Found nat_bits in checkpoint [ 283.156447][ T7054] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 283.258135][ T28] audit: type=1800 audit(1779134164.447:18): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.329" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 283.362713][ T5823] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 283.394824][ T5771] syz-executor: attempt to access beyond end of device [ 283.394824][ T5771] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 283.416166][ T7075] loop1: detected capacity change from 0 to 4096 [ 283.424368][ T7075] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 283.461603][ T5771] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 283.473951][ T5771] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 283.552442][ T5823] usb 4-1: Using ep0 maxpacket: 32 [ 283.562583][ T5823] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 283.582440][ T5823] usb 4-1: config 4 has no interface number 0 [ 283.611742][ T5823] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.643063][ T5823] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.654505][ T5823] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 283.664054][ T7075] ntfs: volume version 3.1. [ 283.671115][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.697304][ T5823] hub 4-1:4.128: USB hub found [ 283.724174][ T7075] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set ascii. You might want to try to use the mount option nls=utf8. [ 283.769196][ T7075] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 283.955804][ T5823] hub 4-1:4.128: 19 ports detected [ 283.961147][ T5823] hub 4-1:4.128: Using single TT (err -22) [ 283.993007][ T5823] hub 4-1:4.128: insufficient power available to use all downstream ports [ 284.161200][ T5823] hub 4-1:4.128: hub_hub_status failed (err = -71) [ 284.177924][ T5823] hub 4-1:4.128: config failed, can't get hub status (err -71) [ 284.226942][ T7079] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 284.238329][ T5823] usb 4-1: USB disconnect, device number 7 [ 284.782547][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 284.972415][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 284.984478][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.011897][ T27] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 285.041146][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.059538][ T27] usb 2-1: Product: syz [ 285.069658][ T27] usb 2-1: Manufacturer: syz [ 285.082584][ T27] usb 2-1: SerialNumber: syz [ 285.102124][ T27] usb 2-1: config 0 descriptor?? [ 285.121071][ T27] smsc75xx v1.0.0 [ 285.136752][ T27] smsc75xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 285.167831][ T27] smsc75xx: probe of 2-1:0.0 failed with error -22 [ 286.077181][ T7101] loop2: detected capacity change from 0 to 512 [ 286.091207][ T7101] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.217093][ T7101] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.342: corrupted in-inode xattr: e_value size too large [ 286.235982][ T7101] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.342: couldn't read orphan inode 15 (err -117) [ 286.261885][ T7101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.961946][ T7106] input: syz1 as /devices/virtual/input/input8 [ 287.348522][ T7110] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 287.580029][ T5843] usb 2-1: USB disconnect, device number 8 [ 288.107174][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.507427][ T7125] loop1: detected capacity change from 0 to 256 [ 289.678840][ T7125] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 289.779184][ T28] audit: type=1800 audit(1779134170.967:19): pid=7125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.353" name="file1" dev="loop1" ino=1048608 res=0 errno=0 [ 289.895288][ T7128] loop2: detected capacity change from 0 to 4096 [ 289.945147][ T7133] tipc: Enabling of bearer rejected, failed to enable media [ 289.967757][ T7128] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 290.020500][ T7128] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 290.066997][ T7128] ntfs: (device loop2): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 290.122497][ T7128] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. [ 290.205276][ T7131] trusted_key: encrypted_key: insufficient parameters specified [ 290.717656][ T7151] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 290.851649][ T7153] loop1: detected capacity change from 0 to 512 [ 290.940397][ T7153] EXT4-fs (loop1): 1 truncate cleaned up [ 290.998383][ T7153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.013239][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 294.550444][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.705906][ T7176] tipc: Started in network mode [ 294.726159][ T7176] tipc: Node identity 7ee7db2591fc, cluster identity 4711 [ 294.734136][ T7176] tipc: Enabled bearer , priority 0 [ 294.754970][ T7174] loop2: detected capacity change from 0 to 4096 [ 294.768807][ T7176] tipc: Resetting bearer [ 294.776596][ T7174] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 294.796977][ T7180] loop3: detected capacity change from 0 to 256 [ 294.807213][ T7174] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 294.829344][ T7174] ntfs: (device loop2): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 294.845523][ T7174] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. [ 294.865911][ T7175] tipc: Disabling bearer [ 294.902000][ T7180] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 294.917470][ T7178] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 294.954727][ T28] audit: type=1800 audit(1779134176.147:20): pid=7180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.366" name="file1" dev="loop3" ino=1048609 res=0 errno=0 [ 295.317564][ T7182] trusted_key: encrypted_key: insufficient parameters specified [ 296.205980][ T7195] netlink: 'syz.1.372': attribute type 37 has an invalid length. [ 296.400280][ T7199] loop1: detected capacity change from 0 to 512 [ 296.482711][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 296.498224][ T7199] EXT4-fs (loop1): 1 truncate cleaned up [ 296.544157][ T7199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.880786][ T7209] loop3: detected capacity change from 0 to 512 [ 296.889139][ T7209] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.014548][ T7209] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 301.014943][ T7209] EXT4-fs: failed to create workqueue [ 301.030063][ T7209] EXT4-fs (loop3): mount failed [ 301.139696][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.102635][ T7227] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 303.460173][ T7235] loop3: detected capacity change from 0 to 2048 [ 303.588190][ T7235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.614338][ T5889] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 303.649738][ T7235] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.482109][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.500319][ T5889] usb 1-1: device descriptor read/64, error -71 [ 304.674364][ T7243] loop1: detected capacity change from 0 to 4096 [ 304.692834][ T7243] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 304.711482][ T7245] loop3: detected capacity change from 0 to 512 [ 304.729713][ T7243] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 304.759297][ T7243] ntfs: (device loop1): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 304.780082][ T7245] EXT4-fs (loop3): 1 truncate cleaned up [ 304.794280][ T5889] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 304.822575][ T7243] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume. [ 304.832217][ T7245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.192959][ T5889] usb 1-1: device descriptor read/64, error -71 [ 305.478008][ T5889] usb usb1-port1: attempt power cycle [ 306.481283][ T5889] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 306.797202][ T5889] usb 1-1: device descriptor read/8, error -71 [ 307.128621][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 307.190376][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.291553][ T7257] kvm: kvm [7256]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xc880 [ 307.319120][ T7257] kvm: kvm [7256]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 307.330102][ T7265] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 307.468507][ T7268] loop3: detected capacity change from 0 to 256 [ 307.482525][ T7268] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 307.523068][ T7268] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 307.607999][ T7269] loop2: detected capacity change from 0 to 512 [ 307.621855][ T7269] EXT4-fs: Ignoring removed mblk_io_submit option [ 307.724624][ T7269] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.393: corrupted in-inode xattr: e_value size too large [ 307.741277][ T7269] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.393: couldn't read orphan inode 15 (err -117) [ 307.774540][ T7269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.093915][ T7268] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 308.571632][ T7273] xt_ecn: cannot match TCP bits for non-tcp packets [ 309.253317][ T7274] xt_hashlimit: max too large, truncated to 1048576 [ 309.308745][ T7274] xt_limit: Overflow, try lower: 0/0 [ 309.582846][ T7276] loop1: detected capacity change from 0 to 4096 [ 309.632803][ T7276] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 309.684413][ T7276] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 309.716612][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.745095][ T7276] ntfs: (device loop1): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 309.775494][ T7276] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume. [ 312.140489][ T7298] loop1: detected capacity change from 0 to 512 [ 312.217389][ T7298] EXT4-fs (loop1): 1 truncate cleaned up [ 312.244055][ T7298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.265032][ T7301] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 312.334710][ T7307] loop3: detected capacity change from 0 to 256 [ 312.391265][ T7307] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 312.409516][ T7307] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 312.429624][ T7307] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 316.532420][ T7312] xt_ecn: cannot match TCP bits for non-tcp packets [ 317.366689][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.448194][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.454781][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.716686][ T7329] syzkaller0: entered promiscuous mode [ 317.723829][ T7329] syzkaller0: entered allmulticast mode [ 317.987315][ T7335] netlink: 'syz.0.415': attribute type 3 has an invalid length. [ 318.007353][ T7335] warning: `syz.0.415' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 318.195712][ T7337] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 321.682859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 322.137008][ T7360] loop3: detected capacity change from 0 to 4096 [ 322.172575][ T7360] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 322.215446][ T7360] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 322.243867][ T7360] ntfs: (device loop3): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 322.283178][ T7360] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 322.330687][ T7370] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 323.677035][ T7382] loop3: detected capacity change from 0 to 512 [ 323.808211][ T7382] EXT4-fs (loop3): 1 truncate cleaned up [ 323.890055][ T7382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.827907][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.470552][ T7404] loop2: detected capacity change from 0 to 4096 [ 326.492915][ T7404] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 326.513708][ T7404] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 326.538416][ T7404] ntfs: (device loop2): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 326.632706][ T7404] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. [ 327.675425][ T7419] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 327.756599][ T7422] loop1: detected capacity change from 0 to 512 [ 327.781876][ T7413] loop3: detected capacity change from 0 to 32768 [ 327.820263][ T7422] EXT4-fs (loop1): 1 truncate cleaned up [ 327.845683][ T7422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.963254][ T7413] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 329.772592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 331.444239][ T7438] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 331.588564][ T7413] XFS (loop3): Ending clean mount [ 331.639161][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.779802][ T5773] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 331.813095][ T7450] tc_dump_action: action bad kind [ 332.163635][ T7456] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 332.256486][ T7458] loop1: detected capacity change from 0 to 512 [ 332.303837][ T7458] EXT4-fs (loop1): 1 truncate cleaned up [ 332.310983][ T7458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.890014][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.919212][ T7472] loop3: detected capacity change from 0 to 512 [ 336.971375][ T7472] EXT4-fs: Ignoring removed i_version option [ 337.029845][ T7472] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 337.125677][ T7472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.146818][ T7472] ext4 filesystem being mounted at /108/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.195567][ T7483] loop1: detected capacity change from 0 to 128 [ 337.293006][ T7483] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 337.410639][ T7472] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.451: Unrecognised inode hash code 20 [ 337.445334][ T7483] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.497300][ T7472] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.451: Corrupt directory, running e2fsck is recommended [ 337.526013][ T7480] loop2: detected capacity change from 0 to 32768 [ 337.536658][ T7480] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.462 (7480) [ 337.549702][ T7483] ext2 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.565514][ T7472] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.451: Unrecognised inode hash code 20 [ 337.577092][ T7480] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 337.580691][ T5966] udevd[5966]: incorrect ext4 checksum on /dev/loop3 [ 337.587323][ T7480] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 337.602902][ T7480] BTRFS info (device loop2): turning on async discard [ 337.609741][ T7480] BTRFS info (device loop2): metadata ratio 0 [ 337.615960][ T7480] BTRFS info (device loop2): setting nodatasum [ 337.622169][ T7480] BTRFS info (device loop2): using free space tree [ 337.653246][ T7472] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.451: Corrupt directory, running e2fsck is recommended [ 337.713658][ T7472] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:106: comm syz.3.451: Corrupt inode bitmap - block_group = 0, inode_bitmap = 18 [ 337.780583][ T7480] BTRFS info (device loop2): enabling ssd optimizations [ 337.818787][ T7472] EXT4-fs (loop3): Remounting filesystem read-only [ 337.893994][ T5771] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 337.919757][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.006399][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 338.274310][ T7508] loop1: detected capacity change from 0 to 512 [ 338.508540][ T7508] EXT4-fs (loop1): 1 truncate cleaned up [ 338.542417][ T7508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.341412][ T7522] loop3: detected capacity change from 0 to 256 [ 342.455849][ T7522] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 342.591565][ T28] audit: type=1800 audit(1779134223.777:21): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.469" name="file1" dev="loop3" ino=1048610 res=0 errno=0 [ 342.873929][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.336383][ T7533] loop2: detected capacity change from 0 to 1024 [ 343.399936][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 343.484864][ T11] hfsplus: b-tree write err: -5, ino 25 [ 343.511077][ T11] hfsplus: b-tree write err: -5, ino 4 [ 343.545254][ T11] hfsplus: b-tree write err: -5, ino 2 [ 343.597493][ T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 343.628759][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 343.653529][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.682036][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 344.802371][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 344.870440][ T9] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 344.929260][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 344.978261][ T7553] loop2: detected capacity change from 0 to 512 [ 345.072723][ T7553] EXT4-fs (loop2): 1 truncate cleaned up [ 345.083954][ T7553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.423145][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 345.431836][ T7556] usb usb8: usbfs: process 7556 (syz.3.481) did not claim interface 0 before use [ 345.442129][ T9] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 346.855385][ T7570] IPVS: sed: FWM 3 0x00000003 - no destination available [ 347.048557][ T9] usb 2-1: USB disconnect, device number 9 [ 347.049762][ T7556] loop3: detected capacity change from 0 to 21 [ 347.081175][ T7556] jffs2: rp_size unrepresentable [ 347.187608][ T5984] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 347.288039][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.508580][ T7573] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 347.759589][ T7580] loop2: detected capacity change from 0 to 1024 [ 347.881824][ T7582] loop3: detected capacity change from 0 to 256 [ 347.907991][ T7580] hfsplus: request for non-existent node 16777216 in B*Tree [ 347.920388][ T7580] hfsplus: request for non-existent node 16777216 in B*Tree [ 347.930203][ T7580] hfsplus: request for non-existent node 16777216 in B*Tree [ 347.938290][ T7580] hfsplus: request for non-existent node 16777216 in B*Tree [ 347.984178][ T7582] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 348.020798][ T7580] hfsplus: request for non-existent node 16777216 in B*Tree [ 348.050972][ T28] audit: type=1800 audit(1779134229.237:22): pid=7582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.491" name="file1" dev="loop3" ino=1048611 res=0 errno=0 [ 348.062456][ T7580] hfsplus: request for non-existent node 16777216 in B*Tree [ 348.278858][ T7578] loop1: detected capacity change from 0 to 32768 [ 348.294560][ T7578] XFS: attr2 mount option is deprecated. [ 348.368738][ T7578] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 348.465491][ T7595] loop2: detected capacity change from 0 to 1024 [ 348.541015][ T7595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.572999][ T7578] XFS (loop1): Ending clean mount [ 348.611969][ T7578] XFS (loop1): Quotacheck needed: Please wait. [ 348.825225][ T7578] XFS (loop1): Quotacheck: Done. [ 349.249678][ T28] audit: type=1326 audit(1779134230.437:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7593 comm="syz.2.493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59cfb9ce59 code=0x0 [ 349.987620][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.008678][ T5774] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 352.284051][ T7620] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 352.332208][ T7624] loop1: detected capacity change from 0 to 512 [ 352.377536][ T7624] EXT4-fs (loop1): 1 truncate cleaned up [ 352.411672][ T7624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.600931][ T7633] loop3: detected capacity change from 0 to 4096 [ 353.657229][ T7633] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 353.712336][ T7633] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 353.763298][ T7633] ntfs: (device loop3): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 353.780967][ T7635] xt_ecn: cannot match TCP bits for non-tcp packets [ 353.798694][ T7633] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 354.962816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 356.594620][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.006436][ T7651] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 357.342605][ T7656] loop1: detected capacity change from 0 to 1024 [ 357.481456][ T3488] hfsplus: b-tree write err: -5, ino 25 [ 357.493409][ T3488] hfsplus: b-tree write err: -5, ino 4 [ 357.499065][ T3488] hfsplus: b-tree write err: -5, ino 2 [ 357.879469][ T7661] loop1: detected capacity change from 0 to 4096 [ 357.901237][ T7661] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 357.923249][ T7665] loop2: detected capacity change from 0 to 256 [ 357.942984][ T7661] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 357.973105][ T7661] ntfs: (device loop1): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 357.993667][ T7665] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 358.013014][ T7661] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume. [ 358.048107][ T28] audit: type=1800 audit(1779134239.237:24): pid=7665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.515" name="file1" dev="loop2" ino=1048612 res=0 errno=0 [ 358.388248][ T7670] loop3: detected capacity change from 0 to 64 [ 358.578382][ T5984] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 358.748444][ T7670] loop3: detected capacity change from 0 to 4096 [ 358.761155][ T7670] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 359.031779][ T7677] input: syz1 as /devices/virtual/input/input9 [ 359.112429][ T5843] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 359.243289][ T7681] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 359.317350][ T5843] usb 4-1: config index 0 descriptor too short (expected 6220, got 45) [ 359.326665][ T5843] usb 4-1: config 74 has too many interfaces: 156, using maximum allowed: 32 [ 359.336188][ T5843] usb 4-1: config 74 has an invalid descriptor of length 204, skipping remainder of the config [ 359.362363][ T5843] usb 4-1: config 74 has 0 interfaces, different from the descriptor's value: 156 [ 359.375254][ T7683] loop1: detected capacity change from 0 to 1024 [ 359.388494][ T5843] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 359.414601][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.442546][ T5780] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 359.502552][ T1116] hfsplus: b-tree write err: -5, ino 25 [ 359.521487][ T1116] hfsplus: b-tree write err: -5, ino 4 [ 359.531477][ T1116] hfsplus: b-tree write err: -5, ino 2 [ 359.632369][ T5780] usb 3-1: Using ep0 maxpacket: 8 [ 359.644621][ T5780] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 359.673665][ T5780] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 359.714080][ T5780] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 359.730107][ T5843] usb 4-1: string descriptor 0 read error: -71 [ 359.742394][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.764274][ T5843] usb 4-1: USB disconnect, device number 8 [ 359.772786][ T5780] usb 3-1: Product: syz [ 359.784430][ T5780] usb 3-1: Manufacturer: syz [ 359.799366][ T5780] usb 3-1: SerialNumber: syz [ 360.269212][ T7694] loop1: detected capacity change from 0 to 512 [ 360.282850][ T7694] EXT4-fs: Ignoring removed mblk_io_submit option [ 360.461214][ T7694] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.524: corrupted in-inode xattr: e_value size too large [ 360.482881][ T7694] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.524: couldn't read orphan inode 15 (err -117) [ 360.518541][ T7694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.953768][ T7699] loop3: detected capacity change from 0 to 32768 [ 362.042370][ T7699] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 362.199574][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.209458][ T5843] usb 3-1: USB disconnect, device number 9 [ 362.356350][ T7699] XFS (loop3): Ending clean mount [ 362.392801][ T7699] XFS (loop3): Quotacheck needed: Please wait. [ 362.498828][ T7699] XFS (loop3): Quotacheck: Done. [ 365.248567][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 365.489049][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 365.864306][ T7751] loop1: detected capacity change from 0 to 512 [ 365.871890][ T7751] EXT4-fs: Ignoring removed mblk_io_submit option [ 366.077037][ T7751] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.534: corrupted in-inode xattr: e_value size too large [ 366.097925][ T7751] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.534: couldn't read orphan inode 15 (err -117) [ 366.124810][ T7751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.198350][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.259917][ T7785] xt_ecn: cannot match TCP bits for non-tcp packets [ 369.527386][ T7780] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 369.901612][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 369.974805][ T7794] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.982216][ T7794] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.664962][ T7819] xt_hashlimit: max too large, truncated to 1048576 [ 372.704354][ T7823] loop3: detected capacity change from 0 to 512 [ 372.717102][ T7823] EXT4-fs: Ignoring removed mblk_io_submit option [ 372.952515][ T7823] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.549: corrupted in-inode xattr: e_value size too large [ 372.971834][ T7823] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.549: couldn't read orphan inode 15 (err -117) [ 373.015181][ T7823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.574630][ T7836] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 374.656464][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.733551][ T7836] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 375.524932][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 375.586473][ T7849] loop1: detected capacity change from 0 to 64 [ 375.595246][ T7847] syzkaller0: entered promiscuous mode [ 375.611074][ T7847] syzkaller0: entered allmulticast mode [ 375.864701][ T7849] syz.1.557: attempt to access beyond end of device [ 375.864701][ T7849] loop1: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 375.914623][ T7849] Buffer I/O error on dev loop1, logical block 1295, async page read [ 376.050122][ T7849] syz.1.557: attempt to access beyond end of device [ 376.050122][ T7849] loop1: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 376.065362][ T7849] Buffer I/O error on dev loop1, logical block 1295, async page read [ 376.771858][ T28] audit: type=1800 audit(1779134257.957:25): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.557" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 377.342854][ T27] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 377.537668][ T7868] loop1: detected capacity change from 0 to 512 [ 377.550944][ T7868] EXT4-fs: Ignoring removed mblk_io_submit option [ 377.662729][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 377.767297][ T27] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 377.825667][ T7868] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.562: corrupted in-inode xattr: e_value size too large [ 377.842201][ T7868] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.562: couldn't read orphan inode 15 (err -117) [ 377.872239][ T7868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.145209][ T27] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 378.196213][ T27] usb 1-1: config 2 has no interface number 0 [ 378.230856][ T27] usb 1-1: config 2 interface 31 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 378.279456][ T27] usb 1-1: config 2 interface 31 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.346992][ T27] usb 1-1: config 2 interface 31 has no altsetting 0 [ 378.384710][ T27] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 378.403696][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.428384][ T27] usb 1-1: Product: syz [ 378.442512][ T27] usb 1-1: Manufacturer: syz [ 378.455893][ T27] usb 1-1: SerialNumber: syz [ 378.577312][ T27] ch9200: probe of 1-1:2.31 failed with error -22 [ 378.963049][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.969659][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.592526][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.381608][ T9] usb 1-1: USB disconnect, device number 13 [ 380.663482][ T7880] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 380.728662][ T7880] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 381.106800][ T7888] syzkaller0: entered promiscuous mode [ 381.124972][ T7888] syzkaller0: entered allmulticast mode [ 381.360362][ T7892] xt_TPROXY: Can be used only with -p tcp or -p udp [ 381.672532][ T27] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 381.850281][ T7896] xt_ecn: cannot match TCP bits for non-tcp packets [ 382.054882][ T27] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.074429][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.092377][ T27] usb 3-1: config 0 has no interface number 0 [ 382.099580][ T27] usb 3-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 382.132508][ T27] usb 3-1: config 0 interface 1 has no altsetting 0 [ 382.139220][ T27] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 382.168934][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.210156][ T27] usb 3-1: config 0 descriptor?? [ 382.234872][ T27] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 382.294462][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'. [ 384.473772][ T27] usb 3-1: USB disconnect, device number 10 [ 384.793453][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.574'. [ 385.328280][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 385.409052][ T7927] syzkaller0: entered promiscuous mode [ 385.427905][ T7927] syzkaller0: entered allmulticast mode [ 387.166926][ T7946] xt_TPROXY: Can be used only with -p tcp or -p udp [ 387.697032][ T7951] loop2: detected capacity change from 0 to 512 [ 387.704656][ T7951] EXT4-fs: Ignoring removed mblk_io_submit option [ 389.070973][ T7951] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.584: corrupted in-inode xattr: e_value size too large [ 389.076416][ T7951] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.584: couldn't read orphan inode 15 (err -117) [ 389.088915][ T7951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.184487][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.855215][ T7976] loop2: detected capacity change from 0 to 2048 [ 391.972513][ T7976] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 395.922790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 397.717697][ T7976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.591'. [ 399.610947][ T7998] xt_TPROXY: Can be used only with -p tcp or -p udp [ 400.215648][ T8002] loop1: detected capacity change from 0 to 512 [ 400.229036][ T8002] EXT4-fs: Ignoring removed mblk_io_submit option [ 400.340805][ T8002] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.596: corrupted in-inode xattr: e_value size too large [ 400.365738][ T8002] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.596: couldn't read orphan inode 15 (err -117) [ 400.406709][ T8002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.450069][ T8016] syzkaller0: entered promiscuous mode [ 402.963864][ T8016] syzkaller0: entered allmulticast mode [ 403.117462][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.360038][ T8016] TC_ACT_REPEAT abuse ? [ 403.841339][ T8027] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 404.166509][ T8040] loop3: detected capacity change from 0 to 2048 [ 404.295655][ T8040] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 405.327208][ T8040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.603'. [ 406.157375][ T5779] Bluetooth: hci3: unexpected event for opcode 0x007f [ 407.032020][ T8069] xt_TPROXY: Can be used only with -p tcp or -p udp [ 408.588900][ T8075] loop1: detected capacity change from 0 to 16 [ 408.649947][ T8075] erofs: (device loop1): mounted with root inode @ nid 36. [ 408.796307][ T5779] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 408.856174][ T8075] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 408.950728][ T28] audit: type=1800 audit(1779134290.057:26): pid=8075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.611" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 409.485270][ T8075] syz.1.611 (8075) used greatest stack depth: 20232 bytes left [ 409.552429][ T5819] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 413.696041][ T8115] loop2: detected capacity change from 0 to 32768 [ 413.709697][ T8115] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.621 (8115) [ 413.738440][ T8115] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 413.749615][ T8115] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 413.758823][ T8115] BTRFS info (device loop2): setting nodatasum [ 413.765433][ T8115] BTRFS info (device loop2): force zlib compression, level 3 [ 413.773659][ T8115] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 413.789260][ T8115] BTRFS info (device loop2): use lzo compression, level 0 [ 413.959191][ T8115] BTRFS info (device loop2): turning on flush-on-commit [ 414.013022][ T8115] BTRFS info (device loop2): enabling auto defrag [ 414.029916][ T8115] BTRFS info (device loop2): max_inline at 4096 [ 414.392677][ T8115] BTRFS info (device loop2): using free space tree [ 415.371531][ T8115] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 415.692717][ T8115] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 415.702166][ T8115] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 415.770739][ T8115] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 415.823439][ T8115] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 416.154087][ T8115] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 416.842794][ T8115] BTRFS error (device loop2): open_ctree failed: -12 [ 417.458696][ T8159] loop3: detected capacity change from 0 to 2048 [ 417.518666][ T8159] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 417.533541][ T8156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.628'. [ 419.525496][ T8184] loop3: detected capacity change from 0 to 512 [ 419.533255][ T8184] EXT4-fs: Ignoring removed mblk_io_submit option [ 422.374024][ T8184] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.634: corrupted in-inode xattr: e_value size too large [ 422.774886][ T8184] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.634: couldn't read orphan inode 15 (err -117) [ 422.788196][ T8184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.944643][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.684052][ T8201] loop1: detected capacity change from 0 to 2048 [ 423.743456][ T8201] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 425.369049][ T8201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.640'. [ 429.312109][ T8234] loop2: detected capacity change from 0 to 512 [ 429.355523][ T8234] EXT4-fs: Ignoring removed mblk_io_submit option [ 429.442608][ T5780] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 429.597534][ T8234] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.646: corrupted in-inode xattr: e_value size too large [ 429.619362][ T8234] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.646: couldn't read orphan inode 15 (err -117) [ 429.656064][ T8234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.995779][ T5780] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.043784][ T5780] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 430.079241][ T5780] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 430.119559][ T5780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.167779][ T5780] usb 4-1: config 0 descriptor?? [ 430.203314][ T5780] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 430.233765][ T5780] dvb-usb: bulk message failed: -22 (3/0) [ 430.299662][ T5780] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 430.346334][ T5780] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 430.588790][ T5780] usb 4-1: media controller created [ 430.596241][ T8233] dvb-usb: bulk message failed: -22 (2/0) [ 430.607030][ T5780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.832474][ T8242] loop1: detected capacity change from 0 to 2048 [ 433.354604][ T8242] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 433.537721][ T5780] dvb-usb: bulk message failed: -22 (6/0) [ 433.544405][ T5780] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 433.559254][ T5780] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 433.648543][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.715512][ T5780] dvb-usb: schedule remote query interval to 150 msecs. [ 433.874546][ T5780] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 433.890864][ T5780] usb 4-1: USB disconnect, device number 9 [ 434.261781][ T5780] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 437.070246][ T8281] loop2: detected capacity change from 0 to 512 [ 437.084047][ T8281] EXT4-fs: Ignoring removed mblk_io_submit option [ 437.160824][ T8281] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.661: corrupted in-inode xattr: e_value size too large [ 437.181647][ T8281] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.661: couldn't read orphan inode 15 (err -117) [ 437.212066][ T8281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.955831][ T8285] loop3: detected capacity change from 0 to 32768 [ 438.097722][ T8285] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 438.439075][ T8285] XFS (loop3): Ending clean mount [ 438.454550][ T8285] XFS (loop3): Quotacheck needed: Please wait. [ 439.291331][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.345670][ T8285] XFS (loop3): Quotacheck: Done. [ 441.421614][ T28] audit: type=1800 audit(1779134322.597:27): pid=8306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.662" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 441.508301][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.722888][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.729284][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.801902][ T5773] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 445.042801][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 445.562395][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 445.813156][ T8344] loop3: detected capacity change from 0 to 512 [ 445.828414][ T8344] EXT4-fs: Ignoring removed mblk_io_submit option [ 445.944375][ T8344] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.674: corrupted in-inode xattr: e_value size too large [ 445.969229][ T8344] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.674: couldn't read orphan inode 15 (err -117) [ 446.015032][ T8344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.150961][ T23] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 446.332329][ T23] usb 2-1: config 2 has no interface number 0 [ 446.338542][ T23] usb 2-1: config 2 interface 31 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 446.447243][ T23] usb 2-1: config 2 interface 31 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 446.503536][ T23] usb 2-1: config 2 interface 31 has no altsetting 0 [ 446.550220][ T23] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 446.572828][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.611864][ T23] usb 2-1: Product: syz [ 446.636261][ T23] usb 2-1: Manufacturer: syz [ 446.646240][ T23] usb 2-1: SerialNumber: syz [ 446.684503][ T23] ch9200: probe of 2-1:2.31 failed with error -22 [ 447.631302][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.613487][ T23] usb 2-1: USB disconnect, device number 10 [ 448.645122][ T8366] loop3: detected capacity change from 0 to 64 [ 448.827391][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 448.862429][ T8366] netlink: 6 bytes leftover after parsing attributes in process `syz.3.681'. [ 450.972031][ T8375] loop1: detected capacity change from 0 to 128 [ 450.988086][ T8374] xt_TPROXY: Can be used only with -p tcp or -p udp [ 451.099285][ T8375] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 451.165228][ T8375] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 452.652284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 453.165511][ T788] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 453.654607][ T8394] loop1: detected capacity change from 0 to 512 [ 453.662152][ T8394] EXT4-fs: Ignoring removed mblk_io_submit option [ 454.099653][ T8394] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.686: corrupted in-inode xattr: e_value size too large [ 454.122804][ T8394] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.686: couldn't read orphan inode 15 (err -117) [ 454.149102][ T8394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.792549][ T23] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 455.002365][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 455.026184][ T23] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 455.051657][ T23] usb 1-1: config 2 has no interface number 0 [ 455.078559][ T23] usb 1-1: config 2 interface 31 has no altsetting 0 [ 455.110707][ T23] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 455.147008][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.172392][ T23] usb 1-1: Product: syz [ 455.187112][ T23] usb 1-1: Manufacturer: syz [ 455.191786][ T23] usb 1-1: SerialNumber: syz [ 455.399153][ T8393] loop2: detected capacity change from 0 to 32768 [ 455.485886][ T8393] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.690 (8393) [ 455.707697][ T23] ch9200: probe of 1-1:2.31 failed with error -22 [ 455.745780][ T23] usb 1-1: USB disconnect, device number 14 [ 455.807015][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.848948][ T8393] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 455.884139][ T8393] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 455.912655][ T8393] BTRFS info (device loop2): using free space tree [ 456.836497][ T8393] BTRFS error (device loop2): open_ctree failed: -4 [ 457.105638][ T8011] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (8011) [ 459.922655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 460.709850][ T8450] loop1: detected capacity change from 0 to 2048 [ 460.771217][ T8450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.802656][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 461.020356][ T8444] loop2: detected capacity change from 0 to 32768 [ 461.032833][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 461.052515][ T8444] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.699 (8444) [ 461.072535][ T9] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 461.080709][ T9] usb 4-1: config 2 has no interface number 0 [ 461.104568][ T8444] BTRFS info (device loop2): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 461.116139][ T9] usb 4-1: config 2 interface 31 has no altsetting 0 [ 461.135926][ T9] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 461.138935][ T8444] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 461.162577][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.178808][ T8444] BTRFS info (device loop2): using free space tree [ 461.181393][ T9] usb 4-1: Product: syz [ 461.200262][ T9] usb 4-1: Manufacturer: syz [ 461.210732][ T9] usb 4-1: SerialNumber: syz [ 461.266562][ T8458] input: syz1 as /devices/virtual/input/input11 [ 461.437716][ T8444] BTRFS info (device loop2): enabling ssd optimizations [ 461.469710][ T8444] BTRFS info (device loop2): auto enabling async discard [ 461.658379][ T9] ch9200: probe of 4-1:2.31 failed with error -22 [ 461.695135][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.704860][ T9] usb 4-1: USB disconnect, device number 10 [ 461.870764][ T5771] BTRFS info (device loop2): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 461.883146][ T8472] syz.1.704 uses obsolete (PF_INET,SOCK_PACKET) [ 462.362944][ T8477] loop2: detected capacity change from 0 to 512 [ 462.811364][ T8477] EXT4-fs (loop2): 1 truncate cleaned up [ 463.047056][ T8477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.045854][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.712517][ T8513] overlayfs: failed to resolve './file0': -2 [ 469.358017][ T8522] loop3: detected capacity change from 0 to 512 [ 469.365562][ T8522] EXT4-fs: Ignoring removed mblk_io_submit option [ 470.661581][ T8522] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.718: corrupted in-inode xattr: e_value size too large [ 470.746600][ T8522] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.718: couldn't read orphan inode 15 (err -117) [ 470.781855][ T8522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.725540][ T8532] loop1: detected capacity change from 0 to 512 [ 471.836604][ T8532] EXT4-fs (loop1): 1 truncate cleaned up [ 471.874736][ T8532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.187561][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.256364][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.653648][ T8575] loop1: detected capacity change from 0 to 8 [ 475.755534][ T8575] SQUASHFS error: xz decompression failed, data probably corrupt [ 475.764303][ T8575] SQUASHFS error: Failed to read block 0x108: -5 [ 475.770794][ T8575] SQUASHFS error: Unable to read metadata cache entry [106] [ 475.778416][ T8575] SQUASHFS error: Unable to read inode 0x11f [ 477.842535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 478.252280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 479.564063][ T8593] ubi0: attaching mtd0 [ 481.480452][ T5779] Bluetooth: hci3: command 0x0c1a tx timeout [ 482.100655][ T8613] loop1: detected capacity change from 0 to 512 [ 482.145206][ T8613] EXT4-fs (loop1): 1 truncate cleaned up [ 482.159173][ T8613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.874656][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.356073][ T8657] loop3: detected capacity change from 0 to 512 [ 490.462195][ T8657] EXT4-fs (loop3): 1 truncate cleaned up [ 490.497452][ T8657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.391671][ T8652] loop2: detected capacity change from 0 to 131072 [ 491.419378][ T8652] F2FS-fs (loop2): invalid crc value [ 491.437402][ T8652] F2FS-fs (loop2): Found nat_bits in checkpoint [ 491.514255][ T8652] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 491.742250][ T28] audit: type=1804 audit(1779134372.907:28): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.763" name="/newroot/183/file0/bus" dev="loop2" ino=10 res=1 errno=0 [ 491.864243][ T28] audit: type=1804 audit(1779134372.917:29): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.763" name="/newroot/183/file0/bus" dev="loop2" ino=10 res=1 errno=0 [ 492.062520][ T28] audit: type=1804 audit(1779134372.917:30): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.763" name="/newroot/183/file0/bus" dev="loop2" ino=10 res=1 errno=0 [ 492.891520][ T8673] loop1: detected capacity change from 0 to 8192 [ 492.920113][ T8673] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 492.935237][ T8673] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 492.945151][ T8673] REISERFS (device loop1): using ordered data mode [ 492.951724][ T8673] reiserfs: using flush barriers [ 492.959905][ T8673] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 492.977410][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.995876][ T8673] REISERFS (device loop1): checking transaction log (loop1) [ 493.022081][ T8673] REISERFS (device loop1): Using r5 hash to sort names [ 493.072112][ T8673] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 493.969894][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 494.992729][ T8700] xt_TPROXY: Can be used only with -p tcp or -p udp [ 495.562704][ T23] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 495.825996][ T8707] loop1: detected capacity change from 0 to 512 [ 495.854129][ T8707] EXT4-fs (loop1): 1 truncate cleaned up [ 495.861239][ T8707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.902595][ T23] usb 1-1: device descriptor read/64, error -71 [ 496.244769][ T23] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 497.946974][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.777344][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.783945][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.094279][ T5779] Bluetooth: hci3: command 0x0c1a tx timeout [ 502.453188][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 502.690456][ T8750] loop2: detected capacity change from 0 to 512 [ 502.754820][ T8750] EXT4-fs (loop2): 1 truncate cleaned up [ 502.778874][ T8750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.132862][ T8759] xt_TPROXY: Can be used only with -p tcp or -p udp [ 505.182377][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 506.233853][ T8585] Bluetooth: hci3: command 0x0c1a tx timeout [ 506.524212][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.692425][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 506.719900][ T23] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 506.739574][ T23] usb 2-1: config 2 has no interface number 0 [ 506.757777][ T23] usb 2-1: config 2 interface 31 has no altsetting 0 [ 506.775263][ T23] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 506.788836][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.797413][ T23] usb 2-1: Product: syz [ 506.801627][ T23] usb 2-1: Manufacturer: syz [ 506.811706][ T23] usb 2-1: SerialNumber: syz [ 507.349471][ T23] ch9200: probe of 2-1:2.31 failed with error -22 [ 507.526346][ T23] usb 2-1: USB disconnect, device number 11 [ 510.403919][ T8805] loop3: detected capacity change from 0 to 512 [ 510.444135][ T8805] EXT4-fs (loop3): 1 truncate cleaned up [ 510.462614][ T8805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.810202][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.290699][ T8842] loop3: detected capacity change from 0 to 512 [ 516.428663][ T8842] EXT4-fs (loop3): 1 truncate cleaned up [ 516.440317][ T8842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.718498][ T5823] IPVS: starting estimator thread 0... [ 517.532931][ T8829] IPVS: using max 16 ests per chain, 38400 per kthread [ 517.552070][ T8847] xt_ecn: cannot match TCP bits for non-tcp packets [ 518.516807][ T1304] IPVS: stop unused estimator thread 0... [ 518.874229][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.319208][ T8874] input: syz1 as /devices/virtual/input/input12 [ 523.849285][ T8892] xt_ecn: cannot match TCP bits for non-tcp packets [ 526.796956][ T8917] loop3: detected capacity change from 0 to 512 [ 526.860275][ T8917] EXT4-fs (loop3): 1 truncate cleaned up [ 526.875353][ T8917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.093960][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.812298][ T5779] Bluetooth: hci3: command 0x0c1a tx timeout [ 533.059043][ T8949] loop2: detected capacity change from 0 to 512 [ 533.125343][ T8949] EXT4-fs (loop2): 1 truncate cleaned up [ 533.142984][ T8949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.456892][ T8958] xt_ecn: cannot match TCP bits for non-tcp packets [ 536.722710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 541.283307][ T5779] Bluetooth: hci3: command 0x0c1a tx timeout [ 541.912136][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.192314][ T5823] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 550.392721][ T5823] usb 2-1: Using ep0 maxpacket: 8 [ 550.421183][ T5823] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 550.435208][ T5823] usb 2-1: config 2 has no interface number 0 [ 550.441456][ T5823] usb 2-1: config 2 interface 31 has no altsetting 0 [ 550.480202][ T5823] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 550.497778][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.510610][ T5823] usb 2-1: Product: syz [ 550.515310][ T5823] usb 2-1: Manufacturer: syz [ 550.520058][ T5823] usb 2-1: SerialNumber: syz [ 551.339277][ T5823] ch9200: probe of 2-1:2.31 failed with error -22 [ 551.995295][ T5823] usb 2-1: USB disconnect, device number 12 [ 553.480670][ T9075] xt_ecn: cannot match TCP bits for non-tcp packets [ 554.367551][ T9038] syzkaller0: entered promiscuous mode [ 554.373291][ T9038] syzkaller0: entered allmulticast mode [ 558.182445][ T5823] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 558.642810][ T5823] usb 4-1: Using ep0 maxpacket: 8 [ 558.687501][ T5823] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 558.760434][ T5823] usb 4-1: config 2 has no interface number 0 [ 558.830442][ T5823] usb 4-1: config 2 interface 31 has no altsetting 0 [ 558.925950][ T5823] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 559.145999][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.155204][ T5823] usb 4-1: Product: syz [ 559.159425][ T5823] usb 4-1: Manufacturer: syz [ 559.166162][ T5823] usb 4-1: SerialNumber: syz [ 560.044300][ T9110] syzkaller0: entered promiscuous mode [ 560.049867][ T9110] syzkaller0: entered allmulticast mode [ 560.073404][ T5823] ch9200: probe of 4-1:2.31 failed with error -22 [ 560.112787][ T5823] usb 4-1: USB disconnect, device number 11 [ 560.706471][ T9120] xt_ecn: cannot match TCP bits for non-tcp packets [ 560.820706][ T5782] IPVS: starting estimator thread 0... [ 560.828537][ T9117] IPVS: lc: FWM 3 0x00000003 - no destination available [ 560.837108][ T9123] loop3: detected capacity change from 0 to 512 [ 560.914842][ T9123] EXT4-fs (loop3): 1 truncate cleaned up [ 560.921971][ T9123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.942775][ T9124] IPVS: using max 18 ests per chain, 43200 per kthread [ 564.276828][ T8585] Bluetooth: hci3: command 0x0c1a tx timeout [ 564.287217][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.302704][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.048564][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.638650][ T9148] loop2: detected capacity change from 0 to 128 [ 567.385747][ T9164] loop1: detected capacity change from 0 to 512 [ 567.394555][ T1304] IPVS: stop unused estimator thread 0... [ 567.499507][ T9164] EXT4-fs (loop1): 1 truncate cleaned up [ 567.518186][ T9164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.392637][ T5819] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 569.632879][ T5819] usb 1-1: Using ep0 maxpacket: 32 [ 569.666526][ T5819] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 569.732376][ T5819] usb 1-1: config 4 has no interface number 0 [ 569.762662][ T5819] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.819820][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.831968][ T5819] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.880317][ T5819] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 569.945798][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.022661][ T5819] hub 1-1:4.128: USB hub found [ 570.134010][ T9197] xt_ecn: cannot match TCP bits for non-tcp packets [ 570.221694][ T5819] hub 1-1:4.128: 21 ports detected [ 570.233704][ T5819] hub 1-1:4.128: Using single TT (err -22) [ 570.240791][ T5819] hub 1-1:4.128: insufficient power available to use all downstream ports [ 570.428361][ T5819] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 570.450927][ T5819] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 570.505075][ T5819] usb 1-1: USB disconnect, device number 17 [ 571.216991][ T9214] loop3: detected capacity change from 0 to 512 [ 571.308538][ T9214] EXT4-fs (loop3): 1 truncate cleaned up [ 571.343215][ T9214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.930559][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.550414][ T27] IPVS: starting estimator thread 0... [ 578.652467][ T9254] IPVS: using max 18 ests per chain, 43200 per kthread [ 579.775004][ T9266] xt_ecn: cannot match TCP bits for non-tcp packets [ 581.531197][ T9276] loop2: detected capacity change from 0 to 7 [ 581.558887][ T8011] Dev loop2: unable to read RDB block 7 [ 581.574766][ T8011] loop2: unable to read partition table [ 581.591506][ T8011] loop2: partition table beyond EOD, truncated [ 583.238303][ T9294] loop1: detected capacity change from 0 to 2048 [ 584.225279][ T9294] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 588.061544][ T9299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.945'. [ 589.271044][ T2989] IPVS: stop unused estimator thread 0... [ 590.311695][ T9327] xt_ecn: cannot match TCP bits for non-tcp packets [ 591.945705][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 592.264046][ T9342] loop1: detected capacity change from 0 to 2048 [ 592.454007][ T9342] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 593.374949][ T9342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.960'. [ 593.394591][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 594.372901][ T8] usb 4-1: device descriptor read/all, error -71 [ 595.288460][ T9355] loop3: detected capacity change from 0 to 8192 [ 595.327723][ T9355] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 595.351280][ T9355] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 595.365976][ T9355] REISERFS (device loop3): using ordered data mode [ 595.372980][ T9355] reiserfs: using flush barriers [ 595.398878][ T9355] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 595.433406][ T9362] loop2: detected capacity change from 0 to 512 [ 595.441980][ T9355] REISERFS (device loop3): checking transaction log (loop3) [ 595.470290][ T9355] REISERFS (device loop3): Using r5 hash to sort names [ 595.478862][ T9362] EXT4-fs (loop2): 1 truncate cleaned up [ 595.503405][ T9355] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 595.522361][ T9362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.571854][ T9355] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 596.675416][ T9371] xt_ecn: cannot match TCP bits for non-tcp packets [ 597.031607][ T9375] syzkaller0: entered promiscuous mode [ 597.048263][ T9375] syzkaller0: entered allmulticast mode [ 597.929548][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.243141][ T9400] xt_ecn: cannot match TCP bits for non-tcp packets [ 599.273274][ T9406] loop3: detected capacity change from 0 to 512 [ 599.295891][ T9406] EXT4-fs (loop3): 1 truncate cleaned up [ 599.307338][ T9406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.103999][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.823667][ T9447] xt_ecn: cannot match TCP bits for non-tcp packets [ 606.138813][ T9464] loop1: detected capacity change from 0 to 4096 [ 606.260048][ T9464] ntfs: (device loop1): parse_options(): NLS character set is not found. Using previous one default. [ 606.271456][ T9464] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 606.306874][ T9464] ntfs: (device loop1): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 606.318468][ T9464] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 606.368431][ T9464] ntfs: volume version 3.1. [ 606.388352][ T9464] ntfs: (device loop1): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 606.398323][ T9464] ntfs: (device loop1): map_mft_record(): Failed with error code 5. [ 606.422425][ T9464] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 606.442584][ T9464] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 606.594695][ T9473] tipc: Started in network mode [ 606.606300][ T9473] tipc: Node identity b60e677148f1, cluster identity 4711 [ 606.630041][ T9473] tipc: Enabled bearer , priority 0 [ 606.675356][ T9473] tipc: Resetting bearer [ 606.743471][ T9472] tipc: Disabling bearer [ 607.560193][ T9496] xt_ecn: cannot match TCP bits for non-tcp packets [ 609.044889][ T5843] IPVS: starting estimator thread 0... [ 609.053905][ T9505] IPVS: lc: FWM 3 0x00000003 - no destination available [ 609.065074][ T9509] tipc: Started in network mode [ 609.070634][ T9509] tipc: Node identity 56bc6bd67984, cluster identity 4711 [ 609.080481][ T9509] tipc: Enabled bearer , priority 0 [ 609.096659][ T9509] tipc: Resetting bearer [ 609.120133][ T9508] tipc: Disabling bearer [ 609.162589][ T9510] IPVS: using max 19 ests per chain, 45600 per kthread [ 610.314021][ T49] IPVS: stop unused estimator thread 0... [ 610.934811][ T9537] tipc: Started in network mode [ 610.939782][ T9537] tipc: Node identity 2277911e78e, cluster identity 4711 [ 610.982693][ T9537] tipc: Enabled bearer , priority 0 [ 611.027454][ T9537] syzkaller0: entered promiscuous mode [ 611.035146][ T9538] xt_ecn: cannot match TCP bits for non-tcp packets [ 611.082271][ T9537] syzkaller0: entered allmulticast mode [ 611.232072][ T9535] tipc: Resetting bearer [ 611.715301][ T9544] IPVS: sed: FWM 3 0x00000003 - no destination available [ 612.018908][ T9535] tipc: Disabling bearer [ 614.797460][ T9582] xt_ecn: cannot match TCP bits for non-tcp packets [ 616.715255][ T9592] IPVS: lc: FWM 3 0x00000003 - no destination available [ 616.742897][ T5780] IPVS: starting estimator thread 0... [ 616.842695][ T9601] IPVS: using max 19 ests per chain, 45600 per kthread [ 616.913601][ T9603] loop1: detected capacity change from 0 to 512 [ 616.925830][ T9603] EXT4-fs: Ignoring removed mblk_io_submit option [ 617.154205][ T9603] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.1050: corrupted in-inode xattr: e_value size too large [ 617.172550][ T9603] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1050: couldn't read orphan inode 15 (err -117) [ 617.199166][ T9603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.062457][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 618.272389][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 618.286014][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.331044][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 618.358581][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 618.382008][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.415853][ T8] usb 4-1: Product: syz [ 618.420116][ T8] usb 4-1: Manufacturer: syz [ 618.471385][ T8] usb 4-1: SerialNumber: syz [ 618.535757][ T2989] IPVS: stop unused estimator thread 0... [ 618.726406][ T8] usb 4-1: 0:2 : does not exist [ 618.787474][ T8] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 618.914880][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.931990][ T8] usb 4-1: USB disconnect, device number 14 [ 621.712958][ T9638] xt_ecn: cannot match TCP bits for non-tcp packets [ 623.493909][ T9649] loop3: detected capacity change from 0 to 512 [ 623.501565][ T9649] EXT4-fs: Ignoring removed mblk_io_submit option [ 623.685352][ T9649] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.1066: corrupted in-inode xattr: e_value size too large [ 623.712458][ T9649] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1066: couldn't read orphan inode 15 (err -117) [ 623.735478][ T9649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.363945][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.370962][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.705818][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.721530][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1069'. [ 628.906409][ T9687] loop1: detected capacity change from 0 to 512 [ 629.002592][ T9687] EXT4-fs: Ignoring removed mblk_io_submit option [ 630.390736][ T9672] xt_ecn: cannot match TCP bits for non-tcp packets [ 630.510850][ T9687] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.1077: corrupted in-inode xattr: e_value size too large [ 631.396642][ T9687] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1077: couldn't read orphan inode 15 (err -117) [ 631.410664][ T9687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.781219][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.955264][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1083'. [ 635.993127][ T9709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1083'. [ 636.785024][ T9719] loop1: detected capacity change from 0 to 512 [ 636.813370][ T9719] EXT4-fs: Ignoring removed mblk_io_submit option [ 636.944248][ T9719] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.1087: corrupted in-inode xattr: e_value size too large [ 637.040802][ T9719] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1087: couldn't read orphan inode 15 (err -117) [ 637.164512][ T9719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.805286][ T9728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1089'. [ 637.814603][ T9728] openvswitch: netlink: Flow key attr not present in new flow. [ 642.817712][ T9745] xt_ecn: cannot match TCP bits for non-tcp packets [ 646.444687][ T9779] 9pnet_fd: Insufficient options for proto=fd [ 647.459784][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.058103][ T9804] 9pnet_fd: Insufficient options for proto=fd [ 651.116915][ T9818] loop3: detected capacity change from 0 to 512 [ 651.174909][ T9818] EXT4-fs: Ignoring removed mblk_io_submit option [ 651.296494][ T9818] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.1116: corrupted in-inode xattr: e_value size too large [ 651.429172][ T9818] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1116: couldn't read orphan inode 15 (err -117) [ 651.563561][ T9818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.546285][ T9843] 9pnet_fd: Insufficient options for proto=fd [ 654.971179][ T9849] loop1: detected capacity change from 0 to 512 [ 655.036801][ T9850] loop2: detected capacity change from 0 to 512 [ 655.112814][ T9849] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.1126: bad orphan inode 13 [ 655.188166][ T9849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.201741][ T9850] EXT4-fs (loop2): 1 truncate cleaned up [ 655.300726][ T9849] EXT4-fs error (device loop1): __ext4_new_inode:1081: comm syz.1.1126: reserved inode found cleared - inode=18 [ 655.725392][ T9850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 656.439241][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.983955][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.963913][ T9881] 9pnet_fd: Insufficient options for proto=fd [ 661.314105][ T9885] loop1: detected capacity change from 0 to 64 [ 661.437974][ T9885] syz.1.1137: attempt to access beyond end of device [ 661.437974][ T9885] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 661.516083][ T9885] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 661.592563][ T9885] syz.1.1137: attempt to access beyond end of device [ 661.592563][ T9885] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 661.791551][ T9885] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 663.182310][ T5843] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 663.446416][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 663.528697][ T5843] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.582416][ T5843] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 663.673162][ T5843] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 663.712360][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.720687][ T5843] usb 2-1: Product: syz [ 663.812309][ T5843] usb 2-1: Manufacturer: syz [ 663.862428][ T5843] usb 2-1: SerialNumber: syz [ 664.117917][ T5843] usb 2-1: 0:2 : does not exist [ 664.173628][ T5843] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 664.292071][ T5843] usb 2-1: USB disconnect, device number 13 [ 664.480326][ T9898] udevd[9898]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.964838][ T6881] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.961612][ T6034] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.466731][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 669.478935][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 669.490548][ T6034] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.542892][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 669.562311][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 669.574318][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 669.586832][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 669.594662][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 669.822898][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 669.864083][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 669.893332][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 669.925736][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 669.929538][ T6034] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.936297][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.977881][ T9] usb 1-1: Product: syz [ 669.988007][ T9] usb 1-1: Manufacturer: syz [ 670.003998][ T9] usb 1-1: SerialNumber: syz [ 670.200639][ T6034] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.263356][ T9] usb 1-1: 0:2 : does not exist [ 670.282724][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 670.424264][ T9] usb 1-1: USB disconnect, device number 18 [ 670.500066][ T9938] loop2: detected capacity change from 0 to 2048 [ 670.591256][ T9938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.652044][ T9937] udevd[9937]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 670.956621][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.360797][ T6034] tipc: Left network mode [ 671.682863][ T5779] Bluetooth: hci2: command tx timeout [ 671.765831][ T9931] chnl_net:caif_netlink_parms(): no params data found [ 673.771537][ T5779] Bluetooth: hci2: command tx timeout [ 675.603136][ T9931] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.645022][ T9931] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.687538][ T9931] bridge_slave_0: entered allmulticast mode [ 675.724319][ T9931] bridge_slave_0: entered promiscuous mode [ 675.847089][ T5779] Bluetooth: hci2: command tx timeout [ 676.856707][ T9931] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.884210][ T9931] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.891535][ T9931] bridge_slave_1: entered allmulticast mode [ 677.004602][ T9931] bridge_slave_1: entered promiscuous mode [ 677.922419][ T5779] Bluetooth: hci2: command tx timeout [ 678.031997][ T9931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.165139][ T9931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.391117][ T9931] team0: Port device team_slave_0 added [ 678.425850][ T9931] team0: Port device team_slave_1 added [ 678.642282][ T788] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 678.827641][ T9931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.867155][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 678.877320][ T9931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.974311][ T788] usb 3-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=58.70 [ 678.992200][ T788] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 679.000526][ T9931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.021385][ T788] usb 3-1: Product: syz [ 679.031525][ T788] usb 3-1: Manufacturer: syz [ 679.045555][ T9931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.052759][ T788] usb 3-1: SerialNumber: syz [ 679.074437][ T9931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.136453][ T9931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.367948][ T788] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 679.441492][ T788] pwc: Failed to set LED on/off time (-71) [ 679.479198][ T788] pwc: send_video_command error -71 [ 679.488115][ T788] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 679.543152][ T788] Philips webcam: probe of 3-1:7.0 failed with error -71 [ 679.559715][ T788] usb 3-1: USB disconnect, device number 13 [ 679.593268][ T6034] hsr_slave_0: left promiscuous mode [ 679.629785][ T6034] hsr_slave_1: left promiscuous mode [ 679.657418][ T6034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.678079][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.736479][ T6034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.753858][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.785265][ T6034] bridge_slave_1: left allmulticast mode [ 679.790999][ T6034] bridge_slave_1: left promiscuous mode [ 679.814880][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.843108][ T6034] bridge_slave_0: left allmulticast mode [ 679.859262][ T6034] bridge_slave_0: left promiscuous mode [ 679.882439][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.236501][ T6034] veth1_macvtap: left promiscuous mode [ 680.298477][ T6034] veth0_macvtap: left promiscuous mode [ 680.433824][ T6034] veth1_vlan: left promiscuous mode [ 680.563786][ T6034] veth0_vlan: left promiscuous mode [ 680.910960][T10043] loop2: detected capacity change from 0 to 4096 [ 682.022223][T10043] ntfs: (device loop2): parse_options(): NLS character set is not found. Using previous one default. [ 682.069822][T10043] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 682.291371][T10043] ntfs: volume version 3.1. [ 682.363357][T10043] ntfs: (device loop2): ntfs_read_locked_attr_inode(): Resident attribute is corrupt (size exceeds allocation). [ 683.348730][T10043] ntfs: (device loop2): ntfs_read_locked_attr_inode(): Failed with error code -5 while reading attribute inode (mft_no 0x5, type 0xb0, name_len 4). Marking corrupt inode and base inode 0x5 as bad. Run chkdsk. [ 683.402363][T10043] ntfs: (device loop2): ntfs_read_locked_inode(): Failed to get bitmap attribute. [ 683.422057][T10043] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 683.457873][T10043] ntfs: (device loop2): load_system_files(): Failed to load root directory. [ 683.483285][T10043] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files. [ 685.864633][T10077] loop1: detected capacity change from 0 to 128 [ 686.092898][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.099416][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.075188][ T6034] team0 (unregistering): Port device team_slave_1 removed [ 687.268644][ T6034] team0 (unregistering): Port device team_slave_0 removed [ 687.385705][ T6034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.505459][ T6034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.541967][T10078] loop2: detected capacity change from 0 to 32768 [ 687.617052][T10078] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 687.719987][T10095] loop1: detected capacity change from 0 to 16 [ 687.742894][T10095] erofs: (device loop1): mounted with root inode @ nid 36. [ 687.775610][T10095] erofs: (device loop1): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 687.881993][T10078] XFS (loop2): Ending clean mount [ 687.916959][T10078] XFS (loop2): Quotacheck needed: Please wait. [ 688.041358][T10078] XFS (loop2): Quotacheck: Done. [ 688.278996][ T5771] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 689.480472][ T6034] bond0 (unregistering): Released all slaves [ 689.516398][T10108] 9pnet: Could not find request transport: fd0x0000000000000003 [ 689.701548][T10062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1183'. [ 689.821308][ T9931] hsr_slave_0: entered promiscuous mode [ 689.838465][ T9931] hsr_slave_1: entered promiscuous mode [ 689.859868][ T9931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 689.882269][ T9931] Cannot create hsr debugfs directory [ 689.892436][ T5819] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 690.067974][T10126] fuse: Bad value for 'fd' [ 690.085111][T10124] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13 [ 690.119873][ T5819] usb 3-1: Using ep0 maxpacket: 16 [ 690.153031][ T5819] usb 3-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 690.180734][ T5819] usb 3-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 690.280877][ T5819] usb 3-1: string descriptor 0 read error: -71 [ 690.305313][ T5819] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 690.346407][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.388003][ T5819] r8152-cfgselector 3-1: rejected 1 configuration due to insufficient available bus power [ 690.446186][ T5819] r8152-cfgselector 3-1: no configuration chosen from 1 choice [ 690.486774][ T5819] r8152-cfgselector 3-1: Unknown version 0x0000 [ 690.513685][T10134] 9pnet: Could not find request transport: fd0x0000000000000003 [ 690.536587][ T5819] r8152-cfgselector 3-1: USB disconnect, device number 14 [ 690.559330][ T6034] IPVS: stop unused estimator thread 0... [ 690.815181][ T9931] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 690.849109][ T9931] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 690.893753][ T9931] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 690.905241][ T9931] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 691.122079][T10154] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1210'. [ 691.181643][T10157] fuse: Bad value for 'fd' [ 691.199381][ T9931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.301433][ T9931] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.339171][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.347798][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.413294][T10166] 9pnet_fd: Insufficient options for proto=fd [ 691.429593][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.436906][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.569416][T10163] loop2: detected capacity change from 0 to 4096 [ 692.661080][ T9931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.863295][T10198] fuse: Bad value for 'fd' [ 693.196642][T10210] 9pnet_fd: Insufficient options for proto=fd [ 695.401130][ T9931] veth0_vlan: entered promiscuous mode [ 695.498605][ T9931] veth1_vlan: entered promiscuous mode [ 695.554961][T10237] fuse: Invalid rootmode [ 695.567327][T10240] 9pnet_fd: Insufficient options for proto=fd [ 695.680470][ T9931] veth0_macvtap: entered promiscuous mode [ 695.711813][ T9931] veth1_macvtap: entered promiscuous mode [ 696.966872][ T9931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.169051][ T9931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.185884][ T9931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.261105][ T9931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.660172][ T9931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.864393][ T9931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.911098][ T9931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.987960][ T9931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.059187][ T9931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.103708][ T9931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.156507][ T9931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.222485][ T9931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.289316][ T9931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.343960][ T9931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.446158][ T9931] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.486263][ T9931] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.551546][ T9931] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.605306][ T9931] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.233272][T10278] Can't find a SQUASHFS superblock on nullb0 [ 699.656723][T10282] fuse: Bad value for 'fd' [ 700.682445][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.690362][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.010860][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.031045][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.054808][T10327] fuse: Invalid rootmode [ 704.724043][T10364] loop2: detected capacity change from 0 to 4096 [ 704.740035][T10364] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 704.886355][T10364] ntfs: volume version 3.1. [ 704.942377][T10279] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 704.967524][T10371] fuse: Bad value for 'fd' [ 705.002463][T10364] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 705.063963][T10364] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 705.128182][T10364] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to map page. [ 705.139712][T10364] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 705.179360][T10364] ntfs: (device loop2): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 705.199802][T10279] usb 1-1: Using ep0 maxpacket: 16 [ 705.230149][T10279] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.247119][T10279] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 705.275379][T10279] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 705.312280][T10279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.320381][T10279] usb 1-1: Product: syz [ 705.339961][T10279] usb 1-1: Manufacturer: syz [ 705.345194][T10279] usb 1-1: SerialNumber: syz [ 705.398295][ T5771] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 705.597518][T10279] usb 1-1: 0:2 : does not exist [ 705.644153][T10279] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 705.723761][T10279] usb 1-1: USB disconnect, device number 19 [ 705.865477][ T9937] udevd[9937]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 705.981615][T10399] fuse: Bad value for 'fd' [ 706.408050][T10419] fuse: Bad value for 'group_id' [ 706.675834][T10428] fuse: Bad value for 'rootmode' [ 708.210109][T10447] fuse: Bad value for 'group_id' [ 710.500469][T10465] loop4: detected capacity change from 0 to 4096 [ 710.582301][T10465] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 710.943913][T10465] loop4: detected capacity change from 0 to 64 [ 711.052324][ T9937] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 711.357025][T10489] fuse: Bad value for 'group_id' [ 715.275733][T10540] loop2: detected capacity change from 0 to 1024 [ 716.900709][ T5779] Bluetooth: hci2: link tx timeout [ 716.908549][ T5779] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 718.962651][ T8585] Bluetooth: hci2: command 0x0406 tx timeout [ 720.474281][T10616] loop2: detected capacity change from 0 to 4096 [ 722.270555][T10654] loop4: detected capacity change from 0 to 16 [ 723.892000][T10654] erofs: (device loop4): mounted with root inode @ nid 36. [ 723.948386][T10654] erofs: (device loop4): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 725.906396][ T5779] Bluetooth: hci3: unexpected event for opcode 0x007f [ 726.186278][T10705] loop4: detected capacity change from 0 to 4096 [ 727.254430][ T5779] Bluetooth: hci0: unexpected event for opcode 0x007f [ 727.642250][T10731] loop4: detected capacity change from 0 to 16 [ 727.656206][T10731] erofs: (device loop4): mounted with root inode @ nid 36. [ 727.695638][T10731] erofs: (device loop4): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 727.790512][T10733] tipc: Enabled bearer , priority 0 [ 727.798994][T10733] syzkaller0: entered promiscuous mode [ 727.805453][T10733] syzkaller0: entered allmulticast mode [ 727.882858][T10735] tipc: Resetting bearer [ 727.900212][T10732] tipc: Resetting bearer [ 727.934666][T10732] tipc: Disabling bearer [ 728.294539][T10745] mmap: syz.2.1379 (10745) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 728.472594][T10279] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 728.942322][T10279] usb 1-1: Using ep0 maxpacket: 16 [ 728.972791][T10279] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.045405][T10279] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 729.132416][T10279] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 729.181479][T10279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.228074][T10279] usb 1-1: Product: syz [ 729.248474][T10279] usb 1-1: Manufacturer: syz [ 729.268294][T10756] loop2: detected capacity change from 0 to 1024 [ 729.285835][T10279] usb 1-1: SerialNumber: syz [ 729.685670][T10279] usb 1-1: 0:2 : does not exist [ 729.913177][T10279] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 729.961358][T10756] hfsplus: request for non-existent node 33423360 in B*Tree [ 730.032648][T10756] hfsplus: request for non-existent node 33423360 in B*Tree [ 730.116599][T10279] usb 1-1: USB disconnect, device number 20 [ 730.276012][ T9937] udevd[9937]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 730.444956][T10771] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 730.461677][T10775] tipc: Enabling of bearer rejected, failed to enable media [ 730.972480][T10794] fuse: Unknown parameter 'grou00000000000000000000' [ 732.032960][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1396'. [ 732.253405][T10814] tipc: Failed to remove unknown binding: 66,1,1/0:437773172/437773174 [ 732.466514][T10822] tipc: Enabled bearer , priority 0 [ 732.481038][T10822] syzkaller0: entered promiscuous mode [ 732.490728][T10822] syzkaller0: entered allmulticast mode [ 732.498892][T10824] fuse: Unknown parameter 'grou00000000000000000000' [ 732.834533][T10828] tipc: Resetting bearer [ 733.085323][T10819] tipc: Resetting bearer [ 734.239698][T10819] tipc: Disabling bearer [ 734.330612][ T5780] tipc: Node number set to 1519882526 [ 736.118527][T10850] loop2: detected capacity change from 0 to 16 [ 736.178841][T10850] erofs: (device loop2): mounted with root inode @ nid 36. [ 736.278528][T10850] erofs: (device loop2): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 736.574587][T10862] loop4: detected capacity change from 0 to 1024 [ 736.619043][T10865] fuse: Unknown parameter 'grou00000000000000000000' [ 741.678623][T10898] fuse: Unknown parameter 'group_i00000000000000000000' [ 743.879479][T10939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1438'. [ 743.901811][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 743.925542][T10939] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.932939][T10939] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.052282][T10279] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 744.283992][T10279] usb 1-1: Using ep0 maxpacket: 32 [ 745.242976][T10279] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.277510][T10279] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.344996][T10279] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 745.368761][T10279] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 745.388409][T10279] usb 1-1: Product: syz [ 745.397729][T10279] usb 1-1: Manufacturer: syz [ 745.420266][T10279] hub 1-1:4.0: USB hub found [ 745.829917][T10279] hub 1-1:4.0: 2 ports detected [ 745.920739][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'. [ 746.652632][T10279] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 746.659075][T10279] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 746.783283][T10279] usb 1-1: USB disconnect, device number 21 [ 746.926801][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 746.963780][T10992] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1450'. [ 747.005113][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 747.822765][T11003] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1452'. [ 747.835306][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.841793][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.898203][T11016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1456'. [ 749.418501][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1461'. [ 749.488598][T11030] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1462'. [ 749.507545][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'. [ 749.535683][T11030] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.543455][T11030] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.694571][T11036] overlayfs: failed to resolve './bus': -2 [ 749.849596][T11043] loop4: detected capacity change from 0 to 16 [ 749.878663][T11043] erofs: (device loop4): mounted with root inode @ nid 36. [ 749.925843][T11043] erofs: (device loop4): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 750.479994][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1472'. [ 751.177072][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'. [ 751.472873][T11103] kAFS: unable to lookup cell '' [ 754.019020][T11133] loop2: detected capacity change from 0 to 512 [ 754.026680][T11133] EXT4-fs: Invalid want_extra_isize 0 [ 755.170689][T11145] loop2: detected capacity change from 0 to 16 [ 755.222181][T11145] erofs: (device loop2): mounted with root inode @ nid 36. [ 755.284766][T11145] erofs: (device loop2): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 755.493151][T11149] loop2: detected capacity change from 0 to 512 [ 755.579181][T11154] overlayfs: failed to clone upperpath [ 755.597213][T11149] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1500: invalid indirect mapped block 256 (level 2) [ 755.677200][T11149] EXT4-fs (loop2): 2 truncates cleaned up [ 755.714267][T11149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.931502][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.582910][ T5819] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 759.990296][ T5819] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 760.449126][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.462021][ T5819] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 760.481040][ T5819] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 760.502276][ T5819] usb 3-1: Manufacturer: syz [ 760.516195][ T5819] usb 3-1: config 0 descriptor?? [ 760.638458][ T5819] rc_core: IR keymap rc-hauppauge not found [ 760.645298][ T5819] Registered IR keymap rc-empty [ 760.651955][ T5819] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 760.672931][ T5819] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 760.691079][ T5819] ------------[ cut here ]------------ [ 760.696804][ T5819] usb 3-1: BOGUS control dir, pipe 80000f80 doesn't match bRequestType 70 [ 760.738377][ T5819] WARNING: CPU: 0 PID: 5819 at drivers/usb/core/urb.c:413 usb_submit_urb+0x10ac/0x17d0 [ 760.748680][ T5819] Modules linked in: [ 760.752773][ T5819] CPU: 0 PID: 5819 Comm: kworker/0:4 Not tainted syzkaller #0 [ 760.760401][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 760.770578][ T5819] Workqueue: usb_hub_wq hub_event [ 760.776625][ T5819] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 760.782949][ T5819] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 40 62 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 24 95 ee fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 760.802963][ T5819] RSP: 0018:ffffc900047bee00 EFLAGS: 00010246 [ 760.809135][ T5819] RAX: 4117db1a6c41a600 RBX: ffff88803053dd00 RCX: 0000000000100000 [ 760.817307][ T5819] RDX: ffffc90017af9000 RSI: 0000000000056dc5 RDI: 0000000000056dc6 [ 760.825432][ T5819] RBP: 1ffff1100f06f388 R08: ffffc900047bea07 R09: 1ffff920008f7d40 [ 760.833498][ T5819] R10: dffffc0000000000 R11: fffff520008f7d41 R12: dffffc0000000000 [ 760.841559][ T5819] R13: ffff888078379c40 R14: 0000000080000f80 R15: ffff888025f7cb90 [ 760.849728][ T5819] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 760.858789][ T5819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 760.865535][ T5819] CR2: 000000110c442214 CR3: 00000000627c7000 CR4: 00000000003526f0 [ 760.873639][ T5819] Call Trace: [ 760.877864][ T5819] [ 760.880942][ T5819] igorplugusb_probe+0x812/0xc60 [ 760.886168][ T5819] usb_probe_interface+0x5c9/0xb20 [ 760.891399][ T5819] ? usb_register_driver+0x3d0/0x3d0 [ 760.896882][ T5819] really_probe+0x25b/0xb20 [ 760.901485][ T5819] ? pm_runtime_barrier+0x14b/0x1c0 [ 760.906871][ T5819] __driver_probe_device+0x1ef/0x390 [ 760.912267][ T5819] driver_probe_device+0x4f/0x420 [ 760.917360][ T5819] __device_attach_driver+0x2ca/0x510 [ 760.922888][ T5819] bus_for_each_drv+0x252/0x2e0 [ 760.927806][ T5819] ? coredump_store+0x90/0x90 [ 760.932602][ T5819] ? bus_find_device+0x300/0x300 [ 760.937655][ T5819] __device_attach+0x2c2/0x420 [ 760.942545][ T5819] ? device_attach+0x20/0x20 [ 760.947189][ T5819] ? __kmem_cache_free+0xba/0x1e0 [ 760.952394][ T5819] ? do_raw_spin_unlock+0x121/0x230 [ 760.957730][ T5819] bus_probe_device+0x180/0x260 [ 760.963780][ T5819] device_add+0x88e/0xc50 [ 760.968189][ T5819] usb_set_configuration+0x1a79/0x20c0 [ 760.974213][ T5819] usb_generic_driver_probe+0x8d/0x150 [ 760.980591][ T5819] usb_probe_device+0x13d/0x270 [ 760.985700][ T5819] ? usb_register_device_driver+0x230/0x230 [ 760.991698][ T5819] really_probe+0x25b/0xb20 [ 760.996335][ T5819] ? pm_runtime_barrier+0x14b/0x1c0 [ 761.001597][ T5819] __driver_probe_device+0x1ef/0x390 [ 761.007045][ T5819] driver_probe_device+0x4f/0x420 [ 761.012172][ T5819] __device_attach_driver+0x2ca/0x510 [ 761.017604][ T5819] bus_for_each_drv+0x252/0x2e0 [ 761.022584][ T5819] ? coredump_store+0x90/0x90 [ 761.027322][ T5819] ? bus_find_device+0x300/0x300 [ 761.032392][ T5819] __device_attach+0x2c2/0x420 [ 761.037233][ T5819] ? device_attach+0x20/0x20 [ 761.041936][ T5819] ? __kmem_cache_free+0xba/0x1e0 [ 761.047454][ T5819] ? do_raw_spin_unlock+0x121/0x230 [ 761.052809][ T5819] bus_probe_device+0x180/0x260 [ 761.057771][ T5819] device_add+0x88e/0xc50 [ 761.062211][ T5819] usb_new_device+0xa3c/0x1660 [ 761.067059][ T5819] ? usb_disconnect+0x8a0/0x8a0 [ 761.072026][ T5819] ? _raw_spin_unlock_irq+0x23/0x50 [ 761.077489][ T5819] ? lockdep_hardirqs_on+0x98/0x150 [ 761.083684][ T5819] hub_event+0x29bf/0x49f0 [ 761.088380][ T5819] ? hub_post_resume+0x120/0x120 [ 761.093471][ T5819] ? read_lock_is_recursive+0x20/0x20 [ 761.098916][ T5819] ? _raw_spin_unlock_irq+0x23/0x50 [ 761.104243][ T5819] ? process_scheduled_works+0x96f/0x15d0 [ 761.110077][ T5819] ? process_scheduled_works+0x96f/0x15d0 [ 761.115947][ T5819] process_scheduled_works+0xa5d/0x15d0 [ 761.121629][ T5819] ? worker_attach_to_pool+0x380/0x380 [ 761.127230][ T5819] ? assign_work+0x3d2/0x5d0 [ 761.131892][ T5819] worker_thread+0xa55/0xfc0 [ 761.136596][ T5819] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 761.142612][ T5819] ? _raw_spin_unlock+0x40/0x40 [ 761.147520][ T5819] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 761.153546][ T5819] kthread+0x2fa/0x390 [ 761.157697][ T5819] ? pr_cont_work+0x560/0x560 [ 761.162494][ T5819] ? kthread_blkcg+0xd0/0xd0 [ 761.167142][ T5819] ret_from_fork+0x48/0x80 [ 761.171697][ T5819] ? kthread_blkcg+0xd0/0xd0 [ 761.176507][ T5819] ret_from_fork_asm+0x11/0x20 [ 761.181403][ T5819] [ 761.185345][ T5819] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 761.192689][ T5819] CPU: 0 PID: 5819 Comm: kworker/0:4 Not tainted syzkaller #0 [ 761.200193][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 761.210381][ T5819] Workqueue: usb_hub_wq hub_event [ 761.215466][ T5819] Call Trace: [ 761.218780][ T5819] [ 761.221743][ T5819] dump_stack_lvl+0x18c/0x250 [ 761.226473][ T5819] ? show_regs_print_info+0x20/0x20 [ 761.231733][ T5819] ? load_image+0x420/0x420 [ 761.236370][ T5819] panic+0x2dc/0x730 [ 761.240333][ T5819] ? bpf_jit_dump+0xd0/0xd0 [ 761.244916][ T5819] ? ret_from_fork_asm+0x11/0x20 [ 761.249919][ T5819] __warn+0x2e0/0x470 [ 761.254044][ T5819] ? usb_submit_urb+0x10ac/0x17d0 [ 761.259121][ T5819] ? usb_submit_urb+0x10ac/0x17d0 [ 761.264201][ T5819] report_bug+0x2be/0x4f0 [ 761.268681][ T5819] ? usb_submit_urb+0x10ac/0x17d0 [ 761.273744][ T5819] ? usb_submit_urb+0x10ac/0x17d0 [ 761.278804][ T5819] ? usb_submit_urb+0x10ae/0x17d0 [ 761.283858][ T5819] handle_bug+0xcf/0x120 [ 761.288131][ T5819] exc_invalid_op+0x1a/0x50 [ 761.292674][ T5819] asm_exc_invalid_op+0x1a/0x20 [ 761.297658][ T5819] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 761.303334][ T5819] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 40 62 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 24 95 ee fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 761.322976][ T5819] RSP: 0018:ffffc900047bee00 EFLAGS: 00010246 [ 761.329075][ T5819] RAX: 4117db1a6c41a600 RBX: ffff88803053dd00 RCX: 0000000000100000 [ 761.337071][ T5819] RDX: ffffc90017af9000 RSI: 0000000000056dc5 RDI: 0000000000056dc6 [ 761.345063][ T5819] RBP: 1ffff1100f06f388 R08: ffffc900047bea07 R09: 1ffff920008f7d40 [ 761.353060][ T5819] R10: dffffc0000000000 R11: fffff520008f7d41 R12: dffffc0000000000 [ 761.361059][ T5819] R13: ffff888078379c40 R14: 0000000080000f80 R15: ffff888025f7cb90 [ 761.369085][ T5819] igorplugusb_probe+0x812/0xc60 [ 761.374068][ T5819] usb_probe_interface+0x5c9/0xb20 [ 761.379310][ T5819] ? usb_register_driver+0x3d0/0x3d0 [ 761.384629][ T5819] really_probe+0x25b/0xb20 [ 761.389175][ T5819] ? pm_runtime_barrier+0x14b/0x1c0 [ 761.394408][ T5819] __driver_probe_device+0x1ef/0x390 [ 761.399724][ T5819] driver_probe_device+0x4f/0x420 [ 761.404781][ T5819] __device_attach_driver+0x2ca/0x510 [ 761.410195][ T5819] bus_for_each_drv+0x252/0x2e0 [ 761.415085][ T5819] ? coredump_store+0x90/0x90 [ 761.419793][ T5819] ? bus_find_device+0x300/0x300 [ 761.424773][ T5819] __device_attach+0x2c2/0x420 [ 761.429571][ T5819] ? device_attach+0x20/0x20 [ 761.434183][ T5819] ? __kmem_cache_free+0xba/0x1e0 [ 761.439245][ T5819] ? do_raw_spin_unlock+0x121/0x230 [ 761.444484][ T5819] bus_probe_device+0x180/0x260 [ 761.449367][ T5819] device_add+0x88e/0xc50 [ 761.453732][ T5819] usb_set_configuration+0x1a79/0x20c0 [ 761.459255][ T5819] usb_generic_driver_probe+0x8d/0x150 [ 761.464752][ T5819] usb_probe_device+0x13d/0x270 [ 761.469644][ T5819] ? usb_register_device_driver+0x230/0x230 [ 761.475574][ T5819] really_probe+0x25b/0xb20 [ 761.480106][ T5819] ? pm_runtime_barrier+0x14b/0x1c0 [ 761.485335][ T5819] __driver_probe_device+0x1ef/0x390 [ 761.490662][ T5819] driver_probe_device+0x4f/0x420 [ 761.495731][ T5819] __device_attach_driver+0x2ca/0x510 [ 761.501140][ T5819] bus_for_each_drv+0x252/0x2e0 [ 761.506029][ T5819] ? coredump_store+0x90/0x90 [ 761.510739][ T5819] ? bus_find_device+0x300/0x300 [ 761.515719][ T5819] __device_attach+0x2c2/0x420 [ 761.520510][ T5819] ? device_attach+0x20/0x20 [ 761.525124][ T5819] ? __kmem_cache_free+0xba/0x1e0 [ 761.530183][ T5819] ? do_raw_spin_unlock+0x121/0x230 [ 761.535421][ T5819] bus_probe_device+0x180/0x260 [ 761.540297][ T5819] device_add+0x88e/0xc50 [ 761.544673][ T5819] usb_new_device+0xa3c/0x1660 [ 761.549479][ T5819] ? usb_disconnect+0x8a0/0x8a0 [ 761.554367][ T5819] ? _raw_spin_unlock_irq+0x23/0x50 [ 761.559594][ T5819] ? lockdep_hardirqs_on+0x98/0x150 [ 761.564831][ T5819] hub_event+0x29bf/0x49f0 [ 761.569323][ T5819] ? hub_post_resume+0x120/0x120 [ 761.574288][ T5819] ? read_lock_is_recursive+0x20/0x20 [ 761.579696][ T5819] ? _raw_spin_unlock_irq+0x23/0x50 [ 761.584929][ T5819] ? process_scheduled_works+0x96f/0x15d0 [ 761.590681][ T5819] ? process_scheduled_works+0x96f/0x15d0 [ 761.596435][ T5819] process_scheduled_works+0xa5d/0x15d0 [ 761.602043][ T5819] ? worker_attach_to_pool+0x380/0x380 [ 761.607540][ T5819] ? assign_work+0x3d2/0x5d0 [ 761.612174][ T5819] worker_thread+0xa55/0xfc0 [ 761.616803][ T5819] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 761.622729][ T5819] ? _raw_spin_unlock+0x40/0x40 [ 761.627605][ T5819] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 761.633550][ T5819] kthread+0x2fa/0x390 [ 761.637648][ T5819] ? pr_cont_work+0x560/0x560 [ 761.642365][ T5819] ? kthread_blkcg+0xd0/0xd0 [ 761.646981][ T5819] ret_from_fork+0x48/0x80 [ 761.651424][ T5819] ? kthread_blkcg+0xd0/0xd0 [ 761.656044][ T5819] ret_from_fork_asm+0x11/0x20 [ 761.660855][ T5819] [ 761.664499][ T5819] Kernel Offset: disabled [ 761.668961][ T5819] Rebooting in 86400 seconds..