last executing test programs: 29.38289206s ago: executing program 5 (id=578): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000002140)=0x20) ppoll(&(0x7f00000003c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x4000) 28.141502695s ago: executing program 5 (id=594): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000140), 0x0, 0x246, &(0x7f00000002c0)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000180)={@id, 0x21, 0x0, '\x00', @c}) stat(&(0x7f0000000100)='./mnt\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) 27.395229229s ago: executing program 5 (id=598): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000031c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 26.676403583s ago: executing program 5 (id=607): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf1b, &(0x7f0000001e80)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 25.443200101s ago: executing program 5 (id=617): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, 0x1b6) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x441, 0x800003a, r0, 0x0) 24.380427426s ago: executing program 5 (id=627): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000001e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r1, r1) ioctl$FS_IOC_GETFSLABEL(r0, 0x40106e80, 0x0) 23.818941725s ago: executing program 32 (id=627): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000001e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r1, r1) ioctl$FS_IOC_GETFSLABEL(r0, 0x40106e80, 0x0) 9.059640268s ago: executing program 2 (id=722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="501a0000210a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000003"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) 8.625872565s ago: executing program 2 (id=726): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x2000) 7.812083027s ago: executing program 2 (id=733): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x104d, &(0x7f0000001080)="$eJzsz7EJAkEUBNDZU0RZLMOSLMIuzmoUAzswsSAzMVRWhdMCRA7eiz4zw8KGP1t+3NdFckvZJ6nHZ1J2m3fXnZPajnmLU1719OutviZdTtkmq6EaNn2Sy302SVskWR9++DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGI1HAAAA//9Y7AtD") 5.214666172s ago: executing program 6 (id=749): r0 = fanotify_init(0x0, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) fanotify_mark(r0, 0x401, 0x1018, r1, 0x0) 4.92881952s ago: executing program 6 (id=752): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800440, &(0x7f0000000100)={[{@gid}, {@creator={'creator', 0x3d, "fc487a23"}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@codepage={'codepage', 0x3d, 'cp1250'}}]}, 0x46, 0x327, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x660042, 0x0, 0x1, 0x0, &(0x7f0000000d40)) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)='./file0\x00') 4.311675146s ago: executing program 6 (id=754): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000780)={[{@i_version}, {@nolazytime}, {@errors_remount}, {@grpjquota}, {@acl}]}, 0xfe, 0x28f, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sendfile(r0, r0, 0x0, 0xe3aa6ea) 4.245665685s ago: executing program 0 (id=755): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x840x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0x613, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x58}}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) 3.830412135s ago: executing program 2 (id=760): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2acd005, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 3.488664479s ago: executing program 6 (id=762): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x12df00, 0x0) 3.257567657s ago: executing program 2 (id=764): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, 0x0, 0x2d, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r1, 0x0}]) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x4081}, 0x0) close(0x3) 3.195724339s ago: executing program 0 (id=765): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xbc}}}]}, 0x3c}}, 0x4040010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2.936219752s ago: executing program 4 (id=767): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000b80)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$eJzs3LFrE2EYx/HHpDZpSpsIIiioD7roEto4OGqQFsSAUpuiDsLVXjTkTMpdqETEZhFX/47i6Cao/0AXcXF3K4Lg0kE86d2lvbRpm7ZJk9rvB8r75p73x71NruVJILfy4N3zUsFJF4yqROIqEZG6rIqk1maBE8EY8eaDElaXq8O/v5+///DRnWwuNzGlOpmdvpZR1dGLn168en/pS3V45sPox5gspx6v/Mr8WB5cPrvyd/pZ0dGio+VKVQ2drVSqxqxl6lzRKaVV71mm4ZhaLDum3VQvWJX5+Zoa5bmRxLxtOo4a5ZqWzJpWK1q1a2o8NYplTafTOpKQYywiMtDGsvzS1JSR3bbsRju6KXTdUKuDtp2tty7mlw5hTwAAoM/s3P/7vf72/X9uxh/30v+f2b3/F6H/75J606Nd+n8cVdfDV79tZ41E8PfbjP4fAAAAAAAAAAAAAAAAAAAAAICjYNV1k67rJtfG4JD3OCYicRFxg3qPt4kuCb/+buhnl9f/Ro+2iw4LfXEvLmK9Xcgv5P3Rr2cLUhRLTBmTpPzxroeAP5+8nZsYU09KPluLQX5xIR+VWCPfkGqVv3Bq3M9rc/6kJMLnz0hSTrc+f6ZlflCuXA7l05KUr0+kIpbMedf1Rv71uOqtu7lN+SFvHQAAAAAA/4O0rtvy/t2rewvisrXu50OfD7iuu7jT5wOb3l8PyLl2blEJAAAAAAAOzKm9LBmWZdr7mMRE5ADxzk9cV6T324hKfzwbzZObItIH2zisSVxE/CO6n/jP9XhbKbeNNQMi0vOnZQ+TXv9nAgAAANBpG03/HkLf3nRxRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD/t3g+ssX5LqVHYIR46XfTQf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wLAAD//7KDHOI=") syz_mount_image$fuse(0x0, &(0x7f0000000ac0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100040, 0x0, 0x1, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2.80861092s ago: executing program 3 (id=768): r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 2.716673074s ago: executing program 0 (id=769): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 2.479259044s ago: executing program 2 (id=770): r0 = syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000004c0)={0x0, 0x15, 0x1, "d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x0, 0x19}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.259820434s ago: executing program 0 (id=771): syz_read_part_table(0x5a8, &(0x7f0000000000)="$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") renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000000000085e043a0700000000000109022400010000a024090400050203000300092100003e0122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1"], 0x0}, 0x0) 2.253972635s ago: executing program 1 (id=772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 2.230108018s ago: executing program 4 (id=773): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000003200)=[{&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f00000031c0)=""/63, 0x3f}, {&(0x7f0000000140)=""/187, 0xbb}], 0x3, 0x3, 0x0) 2.120684263s ago: executing program 3 (id=774): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a400000000009"], 0xe4}, 0x1, 0x0, 0x0, 0x8801}, 0x20050840) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 1.678275462s ago: executing program 4 (id=775): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 1.677186763s ago: executing program 3 (id=776): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x4a46, 0x1, 0xffffffff, 0x1dc}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/4095, 0x440000}], 0x2000000000000021) 1.60725099s ago: executing program 1 (id=777): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x1, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x71, 0x2, 0x57, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a5, 0x4, 0x1, 0x20000000, 0x7e, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x3fe, 0x3fe, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xb, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x40009, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x100, 0x10005, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x100009, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x400007, 0x5, 0x1003, 0x40000101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2c, 0xc, 0x7, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.035505018s ago: executing program 3 (id=778): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r2, @ANYBLOB="30005e8004000100080002"], 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 1.023165021s ago: executing program 1 (id=779): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) 968.495289ms ago: executing program 4 (id=780): sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r0, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) 803.438538ms ago: executing program 1 (id=781): setns(0xc9, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vlan1\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0xb2}}) 739.816352ms ago: executing program 4 (id=782): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9", 0x2}], 0x1}, 0x55) 669.923211ms ago: executing program 6 (id=783): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) write(r0, &(0x7f0000000400)='b', 0x1) 600.425143ms ago: executing program 1 (id=784): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703a", 0xf}, {&(0x7f0000000000)="be9c7260ef52f2011246dbbceadb43c6c6d2495464eaf7e1365f2a6e1a280179ff772fc051be70989241bcfb050058b0adce3de123232d910112646b895cd4c092c47043c840f85d11adbbd13c8b4d2e147f62833c22cce8ab02e51c01ae22eba65c2e42788f78b54f6aa024e1a0e45d9c468906e585f13b1a9bfd6345e51aea9167b599a5df3e4b632d5a9dbe5d814c898a4cca39", 0x95}, {&(0x7f0000000180)="90614f03321131", 0x7}], 0x3) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 548.528136ms ago: executing program 3 (id=785): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x24, 0x4c}}], 0x18}}], 0x2, 0x40500f0) 379.64901ms ago: executing program 4 (id=786): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 209.497428ms ago: executing program 6 (id=787): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newtfilter={0x8bc, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x888, 0x2, [@TCA_U32_POLICE={0x860, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0xfffffffd, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x5, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x6, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74db, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb32, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0x3, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x0, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xfd3, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0x4, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}]}, @TCA_U32_SEL={0x24, 0x5, {0x10, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8bc}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 208.102727ms ago: executing program 3 (id=788): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) close_range(r0, 0xffffffffffffffff, 0x0) 516.857µs ago: executing program 1 (id=789): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 0s ago: executing program 0 (id=790): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1210080, &(0x7f0000000900)={[{@uid={'uid', 0x3d, 0xee01}}, {@codepage={'codepage', 0x3d, 'cp864'}}, {@gid}, {@part={'part', 0x3d, 0x66}}, {@gid}, {@umask}, {@gid}]}, 0x41, 0x333, &(0x7f0000000500)="$eJzs3U1rE0EcBvBnNps2aUNd20rBY7XgqbT1oHixlCCIX8CDFGsboXStoBVUEKNnKXoSBI+96VX0K+hF/AL11IN40kvx4MrM7GR3053NS2O3Ic8PmmZ35+U/O/syk9IsiGhgLVV3d7xosQDgEuAAKAEugFOYKj3Y3Frf8mtrWQUVVA75I6BzigNpVjdraVllPpUj5MklFxW421cP0zZqRxB8b5nm15FEQvkR+tw/wAGGw7NTbS8deWT/R123a7DEeljsYx8PMZZnOERElL/w/u+Ed4lKOH53HGAmHJv3+/0/Mb7Zzy+OY6Fx/3f0ciDk/jmhNkXzPTWFk73v7O6c35M/aWXpY6KSXBlEu3sI+shKdIBoNatUsTjl2+t+bbauCniOy6FYskn1ugbTEMUW7ZD+NZ0yN82Q1fZso6oNRdmGBUv8Ex3X+OkHXqdXt/yljZjEZ/FVLAsPb7DWGP+5gZA7R+0fr6mndPxz9hJVKz2dKtHKaE5/UlVy2vTAx3dRK8u2/VpCAV76JlmKaB6/eybOl0P2XBhPfNRgWjdvb53KNZGaa6Gx/Cc112RzrrJb9Guzq3f9zI9SeiZ1Rie2xXUxjZ/4gGps/O/I1DOwn5mJK79QKcMjI7M9rkpp6ccEdQLfSTkznTYyD7QrqR2d7QVu4SLG7j96vLHi+7V7PXrz6r0uvovs5lTpaTzdv9EHooiaI3/H0qAk3xQB9KzSv0EQ+L6pM7bJxVE0uaiqvfA20YOirhcPVwXqBw6JRXtiAIsAwjXmitBN7U8buYajAtvK/lv2gFqTfkCaqHSEPemCimWTqSqxqYDhts6UchfxXHuyseJ3fkmh/hN1OqZu5B0M5UEOr4Se/8XmK3PqqiNfvIzZSNCq8FiJ85YZ0Lh6HWlvBtco1jqDGzVvWsy5zpwDzjbV6MDU+Ky5WC+Ms2lIfzx0/qcMUcU33OTn/0RERERERERERERERERERERERERE/abTf1To5t8JkjXuDeAXbxARERERERERERERERERERERERERERERHc5S1XzTtnoCWEE/uibn5/8WzPN/wxUjKZnMcymIqGv/AgAA///SHFSB") write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x104) kernel console output (not intermixed with test programs): ct_data cause=failed(directio) comm="syz.2.43" name="file1" dev="loop2" ino=1048610 res=0 errno=0 [ 106.291286][ T5969] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 106.291484][ T5968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.336799][ T5962] EXT4-fs (loop5): shut down requested (0) [ 106.490102][ T5977] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 106.951639][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.440467][ T5998] loop1: detected capacity change from 0 to 512 [ 107.472220][ T5998] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.485660][ T5998] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 107.486052][ T5998] EXT4-fs (loop1): external journal has bad superblock [ 107.530185][ T6002] loop4: detected capacity change from 0 to 1024 [ 107.542512][ T5995] tap0: tun_chr_ioctl cmd 1074025678 [ 107.542542][ T5995] tap0: group set to 0 [ 107.604150][ T6002] hfsplus: catalog record size mismatch (type 1, got 46, expected 88) [ 107.769343][ T6007] Bluetooth: MGMT ver 1.23 [ 108.397807][ T6022] netlink: 56 bytes leftover after parsing attributes in process `syz.1.64'. [ 108.921730][ T6028] capability: warning: `syz.4.67' uses deprecated v2 capabilities in a way that may be insecure [ 109.509730][ T983] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 109.686129][ T983] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 109.687708][ T983] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 109.687750][ T983] usb 1-1: config 0 has no interface number 0 [ 109.687809][ T983] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 109.687858][ T983] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 109.687908][ T983] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 109.690722][ T983] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 109.690758][ T983] usb 1-1: Product: syz [ 109.690782][ T983] usb 1-1: SerialNumber: syz [ 109.698959][ T983] usb 1-1: config 0 descriptor?? [ 109.721209][ T983] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 109.734936][ T983] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input6 [ 109.849608][ T6051] tipc: Started in network mode [ 109.849681][ T6051] tipc: Node identity 1a1ce2567c89, cluster identity 4711 [ 109.850655][ T6051] tipc: Enabled bearer , priority 20 [ 110.124167][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 110.125798][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 110.126461][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 110.126702][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 110.126939][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 110.127172][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 110.127467][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 110.127861][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 110.127971][ T25] usb 1-1: USB disconnect, device number 3 [ 110.128094][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 110.128126][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 110.187315][ T25] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 110.263157][ T6057] bonding: bond0 is being created... [ 110.297677][ T6057] bonding: bond0 already exists [ 110.334011][ T6063] mmap: syz.1.83 (6063) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.639860][ T6070] loop5: detected capacity change from 0 to 256 [ 110.653532][ T6070] exfat: Deprecated parameter 'utf8' [ 110.653564][ T6070] exfat: Deprecated parameter 'utf8' [ 110.653669][ T6070] exfat: Deprecated parameter 'utf8' [ 110.746424][ T6070] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 110.977040][ T983] tipc: Node number set to 1721098838 [ 111.167675][ T6081] loop0: detected capacity change from 0 to 512 [ 111.187183][ T6081] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 111.187329][ T6081] System zones: 1-12 [ 111.189880][ T6081] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.89: missing EA_INODE flag [ 111.190063][ T6081] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 111.194425][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 111.194455][ C1] EXT4-fs (loop0): initial error at time 1788994468: ext4_xattr_inode_iget:437: inode 12 [ 111.194503][ C1] EXT4-fs (loop0): last error at time 1788994468: ext4_xattr_inode_iget:437: inode 12 [ 111.262895][ T6081] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: comm syz.0.89: error while reading EA inode 12 err=-117 [ 111.262944][ T6081] loop0: lost filesystem error report for type 5 error -117 [ 111.278661][ T6081] EXT4-fs (loop0): 1 orphan inode deleted [ 111.320816][ T6081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.429647][ T3211] input: syz0 as /devices/virtual/misc/uhid/0005:057B:030A.0001/input/input7 [ 111.441325][ T6090] synth uevent: /bus/acpi: unknown uevent action string [ 111.500579][ T3211] hid-generic 0005:057B:030A.0001: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 111.503443][ T6091] EXT4-fs (loop0): shut down requested (1) [ 111.656718][ T5849] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.769491][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.814468][ T5849] usb 5-1: Using ep0 maxpacket: 8 [ 111.815184][ T5849] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 111.819065][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.819104][ T5849] usb 5-1: Product: syz [ 111.819130][ T5849] usb 5-1: Manufacturer: syz [ 111.819157][ T5849] usb 5-1: SerialNumber: syz [ 111.841096][ T6097] bonding: mM% is being created... [ 111.842418][ T6097] bonding: mM% creation failed [ 112.148776][ T5849] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.148842][ T5849] usb 5-1: MIDIStreaming interface descriptor not found [ 112.424313][ T6100] fido_id[6100]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 112.517375][ T983] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.567189][ T5849] usb 5-1: USB disconnect, device number 2 [ 112.676151][ T983] usb 3-1: Using ep0 maxpacket: 32 [ 112.679972][ T983] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 112.684315][ T983] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 112.684353][ T983] usb 3-1: config 0 has no interface number 0 [ 112.695243][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.695280][ T983] usb 3-1: Product: syz [ 112.695306][ T983] usb 3-1: Manufacturer: syz [ 112.695332][ T983] usb 3-1: SerialNumber: syz [ 112.757851][ T983] usb 3-1: config 0 descriptor?? [ 112.856823][ T983] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 112.958057][ T5638] udevd[5638]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.033338][ T6106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.039114][ T6106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.465275][ T6135] netlink: 'syz.1.113': attribute type 10 has an invalid length. [ 113.570136][ T983] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 113.647717][ T983] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 113.711791][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 113.728392][ T983] usb 3-1: USB disconnect, device number 2 [ 113.753020][ T6135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.820698][ T983] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 113.845598][ T6135] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 113.888247][ T983] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 113.892278][ T983] quatech2 3-1:0.51: device disconnected [ 113.961532][ T6138] loop3: detected capacity change from 0 to 1024 [ 113.962840][ T6138] EXT4-fs: Ignoring removed bh option [ 114.044969][ T6138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.156343][ T6138] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 114.390592][ T6130] loop4: detected capacity change from 0 to 131072 [ 114.417094][ T6130] F2FS-fs (loop4): invalid crc value [ 114.483338][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.579525][ T6130] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 114.599146][ T6130] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 114.694323][ T6148] loop2: detected capacity change from 0 to 4096 [ 114.716994][ T6148] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 114.800156][ T6151] vhci_hcd: not connected 4 [ 114.897523][ T6155] ovs-system: entered promiscuous mode [ 114.910144][ T6148] ntfs3(loop2): ino=19, mi_enum_attr [ 114.910197][ T6148] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 115.333947][ T6165] syz_tun: entered promiscuous mode [ 115.333980][ T6165] syz_tun: entered allmulticast mode [ 115.957667][ T6179] loop3: detected capacity change from 0 to 2048 [ 115.990667][ T6179] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 116.339291][ T31] audit: type=1800 audit(1788994473.747:3): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.128" name=BB5B5806ECFA3070306E8FF7D93CCEE24F79DE0293A018DC37F7692597925CACDF07A4BE3A344E777427EF585739 dev="loop3" ino=1367 res=0 errno=0 [ 116.883349][ T6188] loop0: detected capacity change from 0 to 4096 [ 117.013503][ T6188] ntfs3(loop0): Failed to load $Extend (-22). [ 117.013541][ T6188] ntfs3(loop0): Failed to initialize $Extend. [ 117.080326][ T6195] loop2: detected capacity change from 0 to 4096 [ 117.252744][ T6200] loop3: detected capacity change from 0 to 512 [ 117.368035][ T6200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.368160][ T6200] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.449993][ T6206] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.484615][ T6204] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 117.619152][ T6195] NILFS error (device loop2): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 117.656070][ T6195] Remounting filesystem read-only [ 117.968236][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.971489][ T5616] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 118.129646][ T6222] loop2: detected capacity change from 0 to 512 [ 118.255172][ T6222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.255294][ T6222] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.273569][ T6229] loop3: detected capacity change from 0 to 64 [ 118.322043][ T6228] loop1: detected capacity change from 0 to 128 [ 118.358111][ T6222] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:337: inode #15: comm syz.2.142: verity file corrupted; can't find descriptor [ 118.360637][ T6222] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 118.377068][ T6229] syz.3.143: attempt to access beyond end of device [ 118.377068][ T6229] loop3: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 118.377197][ T6229] Buffer I/O error on dev loop3, logical block 512, async page read [ 118.377385][ T6229] syz.3.143: attempt to access beyond end of device [ 118.377385][ T6229] loop3: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 118.377429][ T6229] Buffer I/O error on dev loop3, logical block 56576, async page read [ 118.386682][ T6229] syz.3.143: attempt to access beyond end of device [ 118.386682][ T6229] loop3: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 118.386725][ T6229] Buffer I/O error on dev loop3, logical block 512, async page read [ 118.386771][ T6229] syz.3.143: attempt to access beyond end of device [ 118.386771][ T6229] loop3: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 118.386811][ T6229] Buffer I/O error on dev loop3, logical block 56576, async page read [ 118.458854][ T6228] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.483032][ T6228] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.579855][ T6233] loop5: detected capacity change from 0 to 512 [ 118.637584][ T6233] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 118.828219][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.941321][ T31] audit: type=1807 audit(1788994476.357:4): action=measure uid>1 res=1 [ 118.946697][ T5615] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.969355][ T6237] ima: policy update completed [ 118.970138][ T31] audit: type=1802 audit(1788994476.387:5): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.0.146" res=1 errno=0 [ 119.391822][ T6250] jffs2: notice: (6250) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.458010][ T30] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.608197][ T6259] warning: `syz.4.154' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.622256][ T30] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 119.626110][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 119.626162][ T30] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.626226][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.669252][ T30] usb 3-1: config 0 descriptor?? [ 120.198380][ T30] wacom 0003:056A:0331.0002: hidraw0: USB HID v0.00 Joystick [HID 056a:0331] on usb-dummy_hcd.2-1/input0 [ 120.236988][ T3211] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.385947][ T3211] usb 2-1: Using ep0 maxpacket: 8 [ 120.386828][ T3211] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 120.394225][ T3211] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 120.394276][ T3211] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 120.394335][ T3211] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 120.394591][ T3211] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.394639][ T3211] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.394687][ T3211] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.394737][ T3211] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 120.394789][ T3211] usb 2-1: config 168 interface 0 has no altsetting 0 [ 120.478850][ T3211] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 120.478903][ T3211] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 120.478963][ T3211] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 120.479015][ T3211] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.479061][ T3211] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.479108][ T3211] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.479157][ T3211] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 120.479207][ T3211] usb 2-1: config 168 interface 0 has no altsetting 0 [ 120.555823][ T3211] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 120.555876][ T3211] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 120.555935][ T3211] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 120.555985][ T3211] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.556031][ T3211] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.556078][ T3211] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.556127][ T3211] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 120.556177][ T3211] usb 2-1: config 168 interface 0 has no altsetting 0 [ 120.632664][ T6245] loop2: detected capacity change from 0 to 512 [ 120.672102][ T6245] EXT4-fs (loop2): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 120.703295][ T3211] usb 2-1: string descriptor 0 read error: -22 [ 120.703451][ T3211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.753220][ T3211] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 120.770413][ T6286] netlink: 'syz.3.165': attribute type 10 has an invalid length. [ 120.840014][ T983] usb 3-1: USB disconnect, device number 3 [ 120.942046][ T6286] team0: Port device dummy0 added [ 121.016707][ T5849] usb 2-1: USB disconnect, device number 2 [ 121.046511][ T3211] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 121.061449][ T6287] fido_id[6287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 121.195226][ T3211] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 121.196545][ T3211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 121.196610][ T3211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.203821][ T3211] usb 6-1: config 0 descriptor?? [ 121.242009][ T6293] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 121.758644][ T3211] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 121.758684][ T3211] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 121.758715][ T3211] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 121.758745][ T3211] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 121.758775][ T3211] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 121.758806][ T3211] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 121.758836][ T3211] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 121.758865][ T3211] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 121.758895][ T3211] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 121.758923][ T3211] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 121.852760][ T3211] asus 0003:0B05:1ABE.0003: unexpected long global item [ 121.853594][ T3211] asus 0003:0B05:1ABE.0003: Asus hid parse failed: -22 [ 121.853725][ T3211] asus 0003:0B05:1ABE.0003: probe with driver asus failed with error -22 [ 121.922145][ T6319] UHID_CREATE from different security context by process 64 (syz.0.176), this is not allowed. [ 121.991200][ T3211] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.03 Device [syz1] on syz1 [ 122.031953][ T3211] usb 6-1: USB disconnect, device number 2 [ 122.886097][ T6344] fido_id[6344]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 122.970586][ T6353] loop5: detected capacity change from 0 to 512 [ 122.972747][ T6353] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.023398][ T6353] EXT4-fs error (device loop5): mb_free_blocks:2046: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 123.044413][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 123.044442][ C0] EXT4-fs (loop5): initial error at time 1788994480: mb_free_blocks:2046: inode 11: block 64 [ 123.044502][ C0] EXT4-fs (loop5): last error at time 1788994480: mb_free_blocks:2046: inode 11: block 64 [ 123.088815][ T6353] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #11: comm syz.5.187: corrupted inode contents [ 123.088862][ T6353] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.093526][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 123.144355][ T6353] EXT4-fs error (device loop5): ext4_dirty_inode:6736: inode #11: comm syz.5.187: mark_inode_dirty error [ 123.149525][ T6353] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.164015][ T6353] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.187: invalid indirect mapped block 1 (level 1) [ 123.164066][ T6353] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.167011][ T6353] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #11: comm syz.5.187: corrupted inode contents [ 123.167055][ T6353] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.188421][ T6353] EXT4-fs error (device loop5) in ext4_orphan_del:304: Corrupt filesystem [ 123.188456][ T6353] loop5: lost filesystem error report for type 5 error -117 [ 123.188885][ T6353] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #11: comm syz.5.187: corrupted inode contents [ 123.188929][ T6353] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.189328][ T6353] EXT4-fs error (device loop5): ext4_truncate:4721: inode #11: comm syz.5.187: mark_inode_dirty error [ 123.189370][ T6353] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.191373][ T6353] EXT4-fs error (device loop5) in ext4_process_orphan:346: Corrupt filesystem [ 123.191407][ T6353] loop5: lost filesystem error report for type 5 error -117 [ 123.198755][ T6353] EXT4-fs (loop5): 1 truncate cleaned up [ 123.207201][ T6353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.375358][ T6353] EXT4-fs error (device loop5): ext4_readdir:267: inode #2: block 13: comm syz.5.187: path /25/file0: bad entry in directory: directory entry too close to block end - offset=1016, size=1024 [ 123.619186][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.656430][ T3211] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.815933][ T3211] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 123.820744][ T3211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.820783][ T3211] usb 4-1: Product: syz [ 123.820810][ T3211] usb 4-1: Manufacturer: syz [ 123.820836][ T3211] usb 4-1: SerialNumber: syz [ 123.959513][ T6374] netlink: 16 bytes leftover after parsing attributes in process `syz.5.194'. [ 124.011835][ T6375] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 124.367365][ T3211] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 124.367447][ T3211] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 124.576200][ T6385] input: syz0 as /devices/virtual/input/input11 [ 124.576504][ T3211] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 124.576585][ T3211] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 124.578095][ T3211] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 124.635923][ T3211] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 124.643978][ T3211] usb 4-1: USB disconnect, device number 2 [ 125.315628][ T5849] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.358141][ T6411] netlink: 40 bytes leftover after parsing attributes in process `syz.5.211'. [ 125.464504][ T5849] usb 1-1: Using ep0 maxpacket: 16 [ 125.465263][ T5849] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 125.466655][ T5849] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.466704][ T5849] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.466745][ T5849] usb 1-1: config 0 interface 0 has no altsetting 0 [ 125.466792][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.538241][ T6416] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 125.544826][ T5849] usb 1-1: config 0 descriptor?? [ 125.995643][ T5752] input: syz0 as /devices/virtual/misc/uhid/0005:057B:030A.0005/input/input12 [ 126.022948][ T5849] hid (null): unknown global tag 0xd [ 126.038282][ T5752] hid-generic 0005:057B:030A.0005: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 126.123348][ T5849] cougar 0003:060B:500A.0006: unknown global tag 0xd [ 126.123386][ T5849] cougar 0003:060B:500A.0006: item 0 0 1 13 parsing failed [ 126.131993][ T5849] cougar 0003:060B:500A.0006: parse failed [ 126.132117][ T5849] cougar 0003:060B:500A.0006: probe with driver cougar failed with error -22 [ 126.206036][ T983] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.344046][ T5752] usb 1-1: USB disconnect, device number 4 [ 126.394732][ T983] usb 4-1: Using ep0 maxpacket: 8 [ 126.398551][ T983] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 126.412400][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.412440][ T983] usb 4-1: Product: syz [ 126.412467][ T983] usb 4-1: Manufacturer: syz [ 126.412493][ T983] usb 4-1: SerialNumber: syz [ 126.700699][ T983] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.700764][ T983] usb 4-1: MIDIStreaming interface descriptor not found [ 126.970783][ T983] usb 4-1: USB disconnect, device number 3 [ 127.226680][ T5633] udevd[5633]: setting owner of /dev/bus/usb/004/003 to uid=0, gid=0 failed: No such file or directory [ 127.327339][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.589995][ T6463] loop2: detected capacity change from 0 to 512 [ 127.655130][ T6463] EXT4-fs error (device loop2): mb_free_blocks:2046: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 127.655260][ T6463] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.230: corrupted inode contents [ 127.656214][ T6463] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 127.664448][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 127.664479][ C1] EXT4-fs (loop2): initial error at time 1788994485: mb_free_blocks:2046: inode 11: block 64 [ 127.664538][ C1] EXT4-fs (loop2): last error at time 1788994485: ext4_do_update_inode:5801: inode 11 [ 127.672240][ T6463] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #11: comm syz.2.230: mark_inode_dirty error [ 127.672293][ T6463] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 127.675241][ T6463] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.230: invalid indirect mapped block 1 (level 1) [ 127.675293][ T6463] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 127.681523][ T6463] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.230: corrupted inode contents [ 127.681568][ T6463] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 127.682176][ T6463] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 127.682208][ T6463] loop2: lost filesystem error report for type 5 error -117 [ 127.685859][ T6463] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.230: corrupted inode contents [ 127.687028][ T6463] EXT4-fs error (device loop2): ext4_truncate:4721: inode #11: comm syz.2.230: mark_inode_dirty error [ 127.687469][ T6463] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 127.687500][ T6463] loop2: lost filesystem error report for type 5 error -117 [ 127.687975][ T6463] EXT4-fs (loop2): 1 truncate cleaned up [ 127.715138][ T6463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.839825][ T6463] EXT4-fs error (device loop2): ext4_readdir:267: inode #2: block 13: comm syz.2.230: path /41/file0: bad entry in directory: directory entry too close to block end - offset=1016, size=1024 [ 128.124240][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.233916][ T6476] xt_hashlimit: size too large, truncated to 1048576 [ 128.296018][ T6478] xt_hashlimit: size too large, truncated to 1048576 [ 128.675021][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.849784][ T25] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 128.854919][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 128.854970][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.855939][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.874658][ T25] usb 1-1: config 0 descriptor?? [ 129.001852][ T6494] loop2: detected capacity change from 0 to 4096 [ 129.040793][ T6494] EXT4-fs (loop2): Test dummy encryption mode enabled [ 129.112447][ T6494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.159607][ T6494] EXT4-fs (loop2): shut down requested (0) [ 129.379944][ T25] wacom 0003:056A:0331.0007: hidraw0: USB HID v0.00 Joystick [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 129.471221][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.494557][ T3211] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.534088][ T6514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.248'. [ 129.664557][ T3211] usb 5-1: Using ep0 maxpacket: 8 [ 129.667594][ T3211] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 129.671466][ T3211] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 129.671517][ T3211] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 129.671578][ T3211] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 129.671629][ T3211] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.671675][ T3211] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 129.671723][ T3211] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 129.671773][ T3211] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 129.671824][ T3211] usb 5-1: config 168 interface 0 has no altsetting 0 [ 129.676614][ T3211] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 129.676663][ T3211] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 129.676721][ T3211] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 129.676769][ T3211] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.676815][ T3211] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 129.676863][ T3211] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 129.676912][ T3211] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 129.676961][ T3211] usb 5-1: config 168 interface 0 has no altsetting 0 [ 129.680334][ T3211] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 129.680398][ T3211] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 129.680456][ T3211] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 129.680504][ T3211] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.680548][ T3211] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 129.680594][ T3211] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 129.680641][ T3211] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 129.680689][ T3211] usb 5-1: config 168 interface 0 has no altsetting 0 [ 129.700351][ T3211] usb 5-1: string descriptor 0 read error: -22 [ 129.700505][ T3211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.750204][ T6484] loop0: detected capacity change from 0 to 512 [ 129.787245][ T6484] EXT4-fs (loop0): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 129.845789][ T3211] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 129.983268][ T3211] usb 1-1: USB disconnect, device number 5 [ 130.016884][ T6520] loop1: detected capacity change from 0 to 128 [ 130.040450][ T6520] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 130.043195][ T2073] usb 5-1: USB disconnect, device number 3 [ 130.210004][ T6520] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.218681][ T6520] ext2 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.679177][ T5615] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.603303][ T6530] loop5: detected capacity change from 0 to 131072 [ 131.612640][ T6530] F2FS-fs (loop5): invalid crc value [ 131.711416][ T6530] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 131.717339][ T6530] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 131.813358][ T6548] loop2: detected capacity change from 0 to 512 [ 131.855027][ T6548] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.259: iget: bad i_size value: 38620345925642 [ 131.855139][ T6548] fserror_report: 2 callbacks suppressed [ 131.855160][ T6548] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.864732][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 131.864860][ C0] EXT4-fs (loop2): initial error at time 1788994489: ext4_orphan_get:1403: inode 15 [ 131.865692][ C0] EXT4-fs (loop2): last error at time 1788994489: ext4_orphan_get:1403: inode 15 [ 131.983318][ T6548] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.259: couldn't read orphan inode 15 (err -117) [ 131.983369][ T6548] loop2: lost filesystem error report for type 5 error -117 [ 132.050053][ T6548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.205552][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.205648][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.673307][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.017872][ T6562] tap0: tun_chr_ioctl cmd 1074025675 [ 133.017904][ T6562] tap0: persist disabled [ 133.272980][ T6567] loop3: detected capacity change from 0 to 4096 [ 133.348497][ T3211] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.508464][ T3211] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 133.509808][ T3211] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.509870][ T3211] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 133.509909][ T3211] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 133.509947][ T3211] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.510007][ T3211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.511118][ T6576] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 134.403616][ T6590] loop1: detected capacity change from 0 to 1024 [ 134.522659][ T3211] gud 3-1:1.0: Failed to get connectors (error=-71) [ 134.522706][ T3211] gud 3-1:1.0: probe with driver gud failed with error -71 [ 134.573498][ T3211] usb 3-1: USB disconnect, device number 4 [ 134.989905][ T6600] loop0: detected capacity change from 0 to 512 [ 135.061282][ T6600] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.274: iget: bad extended attribute block 134217728 [ 135.061337][ T6600] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.063347][ T6600] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.274: couldn't read orphan inode 15 (err -117) [ 135.063398][ T6600] loop0: lost filesystem error report for type 5 error -117 [ 135.064439][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 135.064469][ C0] EXT4-fs (loop0): initial error at time 1788994492: ext4_orphan_get:1403: inode 15 [ 135.064517][ C0] EXT4-fs (loop0): last error at time 1788994492: ext4_orphan_get:1406 [ 135.103716][ T6600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.225934][ T6600] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz.0.274: invalid indirect mapped block 234881024 (level 0) [ 135.317869][ T6600] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz.0.274: invalid indirect mapped block 768 (level 1) [ 135.585209][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.761912][ T6609] loop5: detected capacity change from 0 to 4096 [ 135.931235][ T6609] ntfs3(loop5): Failed to load $Extend (-22). [ 135.931273][ T6609] ntfs3(loop5): Failed to initialize $Extend. [ 135.969910][ T6615] loop0: detected capacity change from 0 to 1024 [ 136.065140][ T6615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.065293][ T6615] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.223629][ T6615] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.276: lblock 0 mapped to illegal pblock 0 (length 1) [ 136.254070][ T6615] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 136.254121][ T6615] EXT4-fs (loop0): This should not happen!! Data will be lost [ 136.254121][ T6615] [ 136.554273][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 136.855642][ T6632] loop4: detected capacity change from 0 to 256 [ 136.860855][ T6632] exfat: Deprecated parameter 'utf8' [ 136.860884][ T6632] exfat: Deprecated parameter 'utf8' [ 136.860979][ T6632] exfat: Deprecated parameter 'utf8' [ 136.986711][ T6632] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 137.761330][ T6626] loop1: detected capacity change from 0 to 131072 [ 137.780167][ T6626] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 137.780204][ T6626] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 137.780241][ T6626] F2FS-fs (loop1): Test dummy encryption mode enabled [ 137.782893][ T6626] F2FS-fs (loop1): invalid crc value [ 137.896334][ T6626] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 137.897028][ T6626] loop1: lost filesystem error report for type 5 error -117 [ 137.952863][ T6626] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 137.959236][ T6626] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 137.959272][ T6626] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 137.959333][ T6626] F2FS-fs (loop1): Start checkpoint disabled! [ 137.966016][ T6626] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 137.990260][ T6626] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 137.990295][ T6626] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 138.191868][ T6626] F2FS-fs (loop1): truncate node fail, ino:8, nid:512, offset[0]:928, offset[1]:0, nofs:2041 [ 138.778518][ T6667] loop5: detected capacity change from 0 to 1024 [ 138.881604][ T6663] loop4: detected capacity change from 0 to 4096 [ 138.885212][ T6667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.885333][ T6667] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.001578][ T6667] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: comm syz.5.298: lblock 0 mapped to illegal pblock 0 (length 1) [ 139.010857][ T6667] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 139.010901][ T6667] EXT4-fs (loop5): This should not happen!! Data will be lost [ 139.010901][ T6667] [ 139.120997][ T6677] loop3: detected capacity change from 0 to 128 [ 139.147664][ T6677] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 139.151005][ T6663] ntfs3(loop4): Failed to load $Extend (-22). [ 139.151035][ T6663] ntfs3(loop4): Failed to initialize $Extend. [ 139.203638][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.242991][ T6677] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.256946][ T6677] ext2 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.535746][ T6684] netlink: 'syz.0.302': attribute type 6 has an invalid length. [ 139.539067][ T5614] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.082147][ T1093] IPVS: starting estimator thread 0... [ 140.093456][ T6702] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 140.178402][ T6704] IPVS: using max 24 ests per chain, 57600 per kthread [ 140.304540][ T983] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.454800][ T983] usb 5-1: Using ep0 maxpacket: 8 [ 140.455926][ T983] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 140.460748][ T983] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 140.460786][ T983] usb 5-1: Product: syz [ 140.460813][ T983] usb 5-1: Manufacturer: syz [ 140.460839][ T983] usb 5-1: SerialNumber: syz [ 140.557165][ T983] usb 5-1: config 0 descriptor?? [ 140.562181][ T983] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 140.655522][ T5752] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 140.815709][ T5752] usb 4-1: Using ep0 maxpacket: 8 [ 140.816828][ T5752] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.818705][ T5752] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 140.818798][ T5752] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.818840][ T5752] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.818884][ T5752] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.818956][ T5752] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.819021][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.100153][ T6722] netlink: 88 bytes leftover after parsing attributes in process `syz.1.315'. [ 141.155570][ T5752] usb 4-1: GET_CAPABILITIES returned 0 [ 141.155735][ T5752] usbtmc 4-1:16.0: can't read capabilities [ 141.227951][ T983] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 141.403526][ T2073] usb 4-1: USB disconnect, device number 4 [ 141.483809][ T983] usb 5-1: USB disconnect, device number 4 [ 141.810196][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 141.977378][ T6731] loop5: detected capacity change from 0 to 128 [ 142.020633][ T6731] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 142.151847][ T6731] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.173855][ T6731] ext2 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.459375][ T5623] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.143628][ T6749] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 143.267285][ T5752] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 143.455539][ T5752] usb 6-1: Using ep0 maxpacket: 32 [ 143.459337][ T5752] usb 6-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 143.465475][ T5752] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 143.465530][ T5752] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.465623][ T5752] usb 6-1: config 0 interface 0 has no altsetting 0 [ 143.465681][ T5752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.483317][ T5752] usb 6-1: config 0 descriptor?? [ 144.366471][ T5752] hid-alps 0003:044E:120B.0008: failed read register (-71) [ 144.366581][ T5752] hid-alps 0003:044E:120B.0008: failed U1_DEV_CTRL_1 (-71) [ 144.412923][ T5752] hid-alps 0003:044E:120B.0008: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.5-1/input0 [ 144.444818][ T5752] usb 6-1: USB disconnect, device number 3 [ 144.661671][ T6768] overlayfs: upper fs does not support file handles, falling back to index=off. [ 144.780300][ T6774] netlink: 56 bytes leftover after parsing attributes in process `syz.2.335'. [ 145.023211][ T6773] fido_id[6773]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 145.149750][ T6777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.288080][ T6779] loop2: detected capacity change from 0 to 1024 [ 145.367393][ T6779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.735414][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.800989][ T6796] loop3: detected capacity change from 0 to 2048 [ 145.817430][ T6796] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 145.901726][ T6796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.234118][ T6810] loop4: detected capacity change from 0 to 512 [ 146.281032][ T6810] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.349: inode has both inline data and extents flags [ 146.281082][ T6810] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.281826][ T6810] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.349: couldn't read orphan inode 15 (err -117) [ 146.281874][ T6810] loop4: lost filesystem error report for type 5 error -117 [ 146.337898][ T6810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 146.405493][ T6816] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.405638][ T6816] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 146.773500][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 146.974303][ T6827] loop3: detected capacity change from 0 to 512 [ 146.985003][ T6825] rnbd_client L607: Mapping device /dev/ram0 on session s., (access_mode: rw, nr_poll_queues: 0) [ 147.001657][ T6829] netlink: 56 bytes leftover after parsing attributes in process `syz.0.352'. [ 147.008025][ T6825] rtrs_client L2826: pathname cannot contain / and . [ 147.051728][ T6827] EXT4-fs error (device loop3): ext4_iget_extra_inode:5209: inode #15: comm syz.3.356: corrupted in-inode xattr: invalid ea_ino [ 147.051780][ T6827] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 147.053845][ T6827] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.356: couldn't read orphan inode 15 (err -117) [ 147.053893][ T6827] loop3: lost filesystem error report for type 5 error -117 [ 147.054419][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 147.054450][ C1] EXT4-fs (loop3): initial error at time 2000000000: ext4_iget_extra_inode:5209: inode 15 [ 147.054500][ C1] EXT4-fs (loop3): last error at time 2000000000: ext4_orphan_get:1406 [ 147.150619][ T6827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.557044][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.886484][ T6842] loop4: detected capacity change from 0 to 16 [ 147.946444][ T6842] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 147.989998][ T6842] erofs (device loop4): mounted with root inode @ nid 36. [ 148.038049][ T6842] syz.4.362: attempt to access beyond end of device [ 148.038049][ T6842] loop4: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 148.038786][ T6842] erofs (device loop4): read error -5 @ 0 of nid 36 [ 148.125458][ T6844] syz.4.362: attempt to access beyond end of device [ 148.125458][ T6844] loop4: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 148.125793][ T6844] erofs (device loop4): read error -5 @ 0 of nid 36 [ 148.452289][ T6854] loop5: detected capacity change from 0 to 64 [ 148.567150][ T6858] jffs2: notice: (6858) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 148.568593][ T6854] hfs: request for non-existent node 131072 in B*Tree [ 148.568614][ T6854] hfs: request for non-existent node 131072 in B*Tree [ 148.622840][ T6859] loop2: detected capacity change from 0 to 128 [ 148.654083][ T6859] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 148.675547][ T6859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.376034][ T6871] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 149.376158][ T6871] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 149.446874][ T6871] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 149.550790][ T6871] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.560548][ T6871] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 149.622964][ T6871] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 149.672869][ T6871] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.672972][ T6871] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 149.718379][ T6871] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 149.771723][ T6871] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 149.771834][ T6871] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 149.803439][ T6871] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 149.829548][ T6871] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 149.853088][ T6871] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 149.899204][ T6871] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 149.952974][ T6871] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 149.953972][ T6871] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 149.972640][ T6871] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 150.304540][ T5871] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 150.455842][ T5871] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 150.457201][ T5871] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 150.457241][ T5871] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 150.457274][ T5871] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 150.457309][ T5871] usb 6-1: config 220 has no interface number 2 [ 150.457384][ T5871] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 150.457434][ T5871] usb 6-1: config 220 interface 0 has no altsetting 0 [ 150.457467][ T5871] usb 6-1: config 220 interface 76 has no altsetting 0 [ 150.457501][ T5871] usb 6-1: config 220 interface 1 has no altsetting 0 [ 150.463770][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.463808][ T5871] usb 6-1: Product: syz [ 150.463835][ T5871] usb 6-1: Manufacturer: syz [ 150.463862][ T5871] usb 6-1: SerialNumber: syz [ 150.813563][ T5871] usb 6-1: selecting invalid altsetting 0 [ 150.835372][ T5347] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 150.835779][ T5871] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 150.835830][ T5871] uvcvideo 6-1:220.0: No valid video chain found. [ 150.881756][ T5871] usb 6-1: selecting invalid altsetting 0 [ 150.881798][ T5871] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 150.906398][ T5871] usb 6-1: USB disconnect, device number 4 [ 150.989905][ T5347] usb 4-1: not running at top speed; connect to a high speed hub [ 150.989956][ T5347] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 150.992834][ T5347] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.992914][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.055169][ T5347] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 151.138749][ T6919] rnbd_client L607: Mapping device /dev/ram0 on session s., (access_mode: rw, nr_poll_queues: 0) [ 151.138825][ T6919] rtrs_client L2826: pathname cannot contain / and . [ 151.395559][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.555002][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.581428][ T6931] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 151.581699][ T6931] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 151.581990][ T6931] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 151.582203][ T6931] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 151.582438][ T6931] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 151.582648][ T6931] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 151.728228][ T5347] uvcvideo 4-1:1.1: Failed to set UVC probe control : -71 (exp. 26). [ 151.729633][ T5347] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 151.729718][ T5347] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 151.733243][ T5347] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 151.810812][ T6939] loop5: detected capacity change from 0 to 512 [ 151.813364][ T5347] usb 4-1: USB disconnect, device number 5 [ 151.840848][ T6939] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.405: inode has both inline data and extents flags [ 151.840894][ T6939] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 151.841235][ T6939] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.405: couldn't read orphan inode 15 (err -117) [ 151.841282][ T6939] loop5: lost filesystem error report for type 5 error -117 [ 151.885376][ T6939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 152.006828][ T6946] loop4: detected capacity change from 0 to 2048 [ 152.031305][ T6946] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 152.069616][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 152.090748][ T6946] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.140286][ T6948] bond_slave_1: entered promiscuous mode [ 152.148768][ T6948] bond_slave_1: left promiscuous mode [ 152.833865][ T6962] loop2: detected capacity change from 0 to 1024 [ 152.884041][ T6962] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.884137][ T6962] EXT4-fs: Ignoring removed orlov option [ 152.961334][ T6962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.301180][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.469478][ T6978] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.469744][ T6978] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.470476][ T6978] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.470686][ T6978] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.470883][ T6978] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.472041][ T6978] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 153.963788][ T6976] loop3: detected capacity change from 0 to 32768 [ 153.977175][ T6976] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.417 (6976) [ 154.028511][ T6976] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 154.028562][ T6976] BTRFS info (device loop3): using blake2b checksum algorithm [ 154.086882][ T6976] BTRFS info (device loop3): enabling ssd optimizations [ 154.086920][ T6976] BTRFS info (device loop3): turning on async discard [ 154.086949][ T6976] BTRFS info (device loop3): enabling free space tree [ 154.087380][ T6976] BTRFS info (device loop3): use zstd compression, level 3 [ 154.169952][ T5614] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 154.401733][ T7007] loop2: detected capacity change from 0 to 256 [ 154.422863][ T7007] FAT-fs (loop2): Directory bread(block 1285) failed [ 154.422908][ T7007] FAT-fs (loop2): Directory bread(block 1286) failed [ 154.422945][ T7007] FAT-fs (loop2): Directory bread(block 1287) failed [ 154.423141][ T7007] FAT-fs (loop2): Directory bread(block 1288) failed [ 154.456858][ T7007] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 154.546678][ T5347] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 154.717379][ T5347] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 154.718752][ T5347] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 154.718823][ T5347] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 154.722303][ T5347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.722342][ T5347] usb 1-1: Product: syz [ 154.722368][ T5347] usb 1-1: Manufacturer: syz [ 154.722395][ T5347] usb 1-1: SerialNumber: syz [ 155.065173][ T5347] usb 1-1: Limiting number of CPorts to U8_MAX [ 155.291108][ T7013] loop4: detected capacity change from 0 to 32768 [ 155.328238][ T7013] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 155.328265][ T7013] gfs2: fsid=.: Now mounting FS (format 0)... [ 155.337922][ T7013] gfs2: not a GFS2 filesystem [ 155.337936][ T7013] gfs2: fsid=.: can't read superblock [ 155.337951][ T7013] gfs2: fsid=.: can't read superblock: -22 [ 155.474599][ T4930] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.474692][ T4930] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.474737][ T4930] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.474775][ T4930] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.475068][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout [ 155.475196][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout [ 155.536794][ T7023] loop5: detected capacity change from 0 to 2048 [ 155.645552][ T7023] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 155.704271][ T7023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.730650][ T5347] usb 1-1: failed to send ARPC request 1: -71 [ 155.731316][ T5347] usb 1-1: failed to execute ARPC: -71 [ 155.731521][ T5347] usb 1-1: failed to set connected state for cport 0: -71 [ 155.731555][ T5347] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 155.761868][ T5347] usb 1-1: failed to send ARPC request 3: -71 [ 155.762745][ T5347] usb 1-1: failed to execute ARPC: -71 [ 155.762773][ T5347] usb 1-1: failed to clear cport 0: -71 [ 155.762981][ T5347] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 155.826162][ T5347] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 155.844225][ T5347] usb 1-1: USB disconnect, device number 6 [ 156.536964][ T7036] loop1: detected capacity change from 0 to 1024 [ 156.795674][ T7040] loop0: detected capacity change from 0 to 512 [ 156.796823][ T7040] EXT4-fs: Ignoring removed bh option [ 156.853083][ T7036] hfsplus: bad catalog file entry [ 156.880599][ T7040] EXT4-fs (loop0): 1 truncate cleaned up [ 156.917807][ T7040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.238264][ T12] hfsplus: bad catalog file entry [ 157.260029][ T7051] loop5: detected capacity change from 0 to 128 [ 157.317197][ T7051] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.320723][ T7051] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.555146][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.555193][ T5620] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.555230][ T5620] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.555268][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.555423][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout [ 157.557274][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout [ 157.621581][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.621962][ T5623] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.171305][ T7064] loop0: detected capacity change from 0 to 4096 [ 158.289197][ T7073] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 158.312595][ T7064] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 158.596243][ T7080] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 158.990805][ T7080] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 158.990975][ T7080] overlayfs: failed to look up (tracing) for ino (-66) [ 159.059572][ T7057] loop3: detected capacity change from 0 to 32768 [ 159.189060][ T7057] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 159.208203][ T7057] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 159.414567][ T7057] XFS (loop3): Ending clean mount [ 159.418089][ T7101] loop1: detected capacity change from 0 to 4096 [ 159.635300][ T4930] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.635348][ T4930] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.635420][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout [ 159.635608][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout [ 159.675513][ T7057] XFS (loop3): Quotacheck needed: Please wait. [ 160.099651][ T7057] XFS (loop3): Quotacheck: Done. [ 160.219810][ T7057] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 160.284292][ T7107] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 160.691089][ T5614] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.740862][ T31] audit: type=1326 audit(2000000014.639:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.2.463" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9a679e159 code=0x0 [ 160.805948][ T7121] syz.5.466 uses obsolete (PF_INET,SOCK_PACKET) [ 162.392292][ T7138] loop1: detected capacity change from 0 to 32768 [ 162.796491][ T7138] Dev loop1 SGI disklabel: csum bad, label corrupted [ 162.796952][ T7138] loop1: unable to read partition table [ 162.797191][ T7138] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 162.942427][ T7141] loop4: detected capacity change from 0 to 131072 [ 162.968032][ T7141] F2FS-fs (loop4): invalid crc value [ 163.052616][ T7141] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 163.074846][ T7141] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 163.255193][ T7149] loop0: detected capacity change from 0 to 4096 [ 163.359634][ T7141] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 164.593335][ T7159] loop5: detected capacity change from 0 to 131072 [ 164.636394][ T7159] XFS (loop5): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 164.639555][ T7168] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 164.956737][ T7159] XFS (loop5): Starting recovery (logdev: internal) [ 165.000248][ T7159] XFS (loop5): Ending recovery (logdev: internal) [ 165.183569][ T5623] XFS (loop5): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 165.203774][ T7181] capability: warning: `syz.4.484' uses 32-bit capabilities (legacy support in use) [ 166.646310][ T7188] loop3: detected capacity change from 0 to 131072 [ 166.650188][ T7188] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 166.650231][ T7188] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 166.680659][ T7188] F2FS-fs (loop3): invalid crc value [ 166.780915][ T7188] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 166.797110][ T7188] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 166.797146][ T7188] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 167.192919][ T7201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.493'. [ 167.192953][ T7201] netlink: 468 bytes leftover after parsing attributes in process `syz.4.493'. [ 167.192982][ T7201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.493'. [ 167.647353][ T7208] loop5: detected capacity change from 0 to 4096 [ 167.711338][ T7213] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.727803][ T7208] syz.5.494: attempt to access beyond end of device [ 167.727803][ T7208] loop5: rw=8388608, sector=8589934594, nr_sectors = 2 limit=4096 [ 167.729022][ T7208] NILFS (loop5): I/O error reading data block for GC (ino=3, vblocknr=9) [ 167.729059][ T7208] NILFS (loop5): error -5 preparing GC: cannot read source blocks [ 167.912748][ T7214] Zero length message leads to an empty skb [ 168.492503][ T7230] tun0: tun_chr_ioctl cmd 1074025675 [ 168.492536][ T7230] tun0: persist enabled [ 168.508511][ T7230] tun0: tun_chr_ioctl cmd 1074025675 [ 168.508541][ T7230] tun0: persist disabled [ 168.604586][ T2073] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 168.763487][ T2073] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.774738][ T2073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.774789][ T2073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.774830][ T2073] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.774895][ T2073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.827237][ T2073] usb 2-1: config 0 descriptor?? [ 169.259515][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.5.514'. [ 169.292280][ T2073] hid_parser_main: 303 callbacks suppressed [ 169.292311][ T2073] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 169.292351][ T2073] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 169.292387][ T2073] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 169.292421][ T2073] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 169.292455][ T2073] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 169.292489][ T2073] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 169.293711][ T2073] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 169.293747][ T2073] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 169.293781][ T2073] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 169.293815][ T2073] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 169.414759][ T2073] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 169.530204][ T7250] bridge: RTM_NEWNEIGH with invalid ether address [ 169.549965][ T7250] bridge: RTM_NEWNEIGH with invalid ether address [ 169.744718][ T5849] usb 2-1: USB disconnect, device number 3 [ 169.858103][ T7241] syz.4.512 (7241): drop_caches: 2 [ 169.923396][ T7258] ima: policy update failed [ 169.923591][ T31] audit: type=1802 audit(2000000023.819:7): pid=7258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.520" res=0 errno=0 [ 170.001646][ T7252] fido_id[7252]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 170.491986][ T31] audit: type=1326 audit(2000000024.389:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.5.524" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6964b9e159 code=0x0 [ 170.782749][ T7286] loop0: detected capacity change from 0 to 512 [ 170.816335][ T7286] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.530: inode has both inline data and extents flags [ 170.816386][ T7286] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 170.831451][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 170.831481][ C0] EXT4-fs (loop0): initial error at time 2000000024: ext4_orphan_get:1403: inode 15 [ 170.831530][ C0] EXT4-fs (loop0): last error at time 2000000024: ext4_orphan_get:1403: inode 15 [ 170.871158][ T7286] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.530: couldn't read orphan inode 15 (err -117) [ 170.871202][ T7286] loop0: lost filesystem error report for type 5 error -117 [ 170.889229][ T7286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.933467][ T7286] EXT4-fs (loop0): shut down requested (0) [ 171.175541][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.294855][ T5849] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 171.330968][ T7307] ip6erspan0: entered allmulticast mode [ 171.445287][ T5849] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 171.446778][ T5849] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.446841][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.494922][ T5849] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 171.495179][ T5849] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 171.495263][ T5849] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 171.497418][ T5849] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 171.497517][ T5849] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 171.567701][ T5849] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 171.571282][ T5849] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 171.571380][ T5849] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 171.599915][ T5849] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 171.773031][ T7320] loop0: detected capacity change from 0 to 8 [ 171.861345][ T7320] SQUASHFS error: Unable to read inode 0xa7 [ 172.058928][ T983] usb 4-1: USB disconnect, device number 6 [ 172.129147][ T983] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 172.182380][ T983] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 172.204616][ T983] keyspan 4-1:1.0: device disconnected [ 172.565152][ T5849] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 172.719952][ T5849] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 172.738303][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.738343][ T5849] usb 2-1: Product: syz [ 172.738369][ T5849] usb 2-1: Manufacturer: syz [ 172.738396][ T5849] usb 2-1: SerialNumber: syz [ 172.744779][ T5849] usb 2-1: NFC: intf ffff8880786c8000 id ffffffff8fe92e00 [ 172.834740][ T5849] nfcmrvl 2-1:1.0: NFC: registered with nci successfully [ 173.307156][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 173.428247][ T36] nfcmrvl 2-1:1.0: NFC: send entry, len 4 [ 173.428971][ C0] nfcmrvl 2-1:1.0: NFC: urb ffff88807d238300 status 0 count 0 [ 175.248324][ T7359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.323911][ T983] usb 2-1: USB disconnect, device number 4 [ 175.357919][ T983] usb 2-1: NFC: intf ffff8880786c8000 [ 175.700698][ T7411] loop4: detected capacity change from 0 to 2048 [ 175.735740][ T7411] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.171012][ T7424] loop3: detected capacity change from 0 to 512 [ 176.213373][ T7424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.450535][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.493839][ T7434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.806549][ T7441] loop5: detected capacity change from 0 to 128 [ 176.902953][ T7441] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.903463][ T7441] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.306540][ T5623] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.355621][ T7449] bridge0: port 3(veth0) entered blocking state [ 177.355749][ T7449] bridge0: port 3(veth0) entered disabled state [ 177.355941][ T7449] veth0: entered allmulticast mode [ 177.382640][ T7449] veth0: entered promiscuous mode [ 177.384938][ T7449] bridge0: port 3(veth0) entered blocking state [ 177.385074][ T7449] bridge0: port 3(veth0) entered forwarding state [ 177.547020][ T7451] loop4: detected capacity change from 0 to 512 [ 177.584749][ T7451] EXT4-fs error (device loop4): ext4_iget_extra_inode:5209: inode #15: comm syz.4.600: corrupted in-inode xattr: invalid ea_ino [ 177.584799][ T7451] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 177.586279][ T7451] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.600: couldn't read orphan inode 15 (err -117) [ 177.586327][ T7451] loop4: lost filesystem error report for type 5 error -117 [ 177.637411][ T7451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.793091][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.062356][ T7466] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.062755][ T7466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.062774][ T7466] IPv6: NLM_F_CREATE should be set when creating new route [ 178.110416][ T7466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.110441][ T7466] IPv6: NLM_F_CREATE should be set when creating new route [ 178.268633][ T7472] loop5: detected capacity change from 0 to 4096 [ 178.372124][ T7474] FAULT_INJECTION: forcing a failure. [ 178.372124][ T7474] name failslab, interval 1, probability 1, space 0, times 1 [ 178.372174][ T7474] CPU: 1 UID: 0 PID: 7474 Comm: syz.0.608 Not tainted syzkaller #0 PREEMPT(full) [ 178.372221][ T7474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 178.372244][ T7474] Call Trace: [ 178.372256][ T7474] [ 178.372271][ T7474] dump_stack_lvl+0x100/0x190 [ 178.372330][ T7474] should_fail_ex.cold+0x5/0xa [ 178.372374][ T7474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.372431][ T7474] should_failslab+0xc2/0x120 [ 178.372471][ T7474] kmem_cache_alloc_noprof+0x92/0x6a0 [ 178.372531][ T7474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.372581][ T7474] ? security_file_alloc+0x34/0x2c0 [ 178.372656][ T7474] security_file_alloc+0x34/0x2c0 [ 178.372721][ T7474] init_file+0x95/0x480 [ 178.372763][ T7474] alloc_empty_file+0x79/0x1c0 [ 178.372811][ T7474] alloc_file_pseudo+0x183/0x290 [ 178.372859][ T7474] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 178.372902][ T7474] ? alloc_fd+0x471/0x7a0 [ 178.372943][ T7474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.372993][ T7474] ? do_raw_spin_unlock+0x145/0x1e0 [ 178.373054][ T7474] __anon_inode_getfile+0xe8/0x280 [ 178.373124][ T7474] anon_inode_getfile_fmode+0x37/0xa0 [ 178.373185][ T7474] do_signalfd4+0x1ed/0x480 [ 178.373248][ T7474] __x64_sys_signalfd4+0x14b/0x1d0 [ 178.373307][ T7474] ? ksys_write+0x1ac/0x250 [ 178.373363][ T7474] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 178.373429][ T7474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.373488][ T7474] do_syscall_64+0x123/0x790 [ 178.373559][ T7474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.373600][ T7474] RIP: 0033:0x7fcdeb79e159 [ 178.373631][ T7474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.373669][ T7474] RSP: 002b:00007fcdec5de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 178.373707][ T7474] RAX: ffffffffffffffda RBX: 00007fcdeba25fa0 RCX: 00007fcdeb79e159 [ 178.373734][ T7474] RDX: 0000000000000008 RSI: 0000200000000140 RDI: ffffffffffffffff [ 178.373760][ T7474] RBP: 00007fcdeb83503b R08: 0000000000000000 R09: 0000000000000000 [ 178.373785][ T7474] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 178.373810][ T7474] R13: 00007fcdeba26038 R14: 00007fcdeba25fa0 R15: 00007ffc063fc408 [ 178.373863][ T7474] [ 178.528103][ T7475] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.013272][ T7472] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only [ 179.013465][ T7472] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 179.045388][ T7489] netlink: 'syz.0.612': attribute type 10 has an invalid length. [ 179.405183][ T7497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 179.413421][ T5623] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 13 already freed [ 179.433745][ T5623] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 179.481135][ T5623] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 12 already freed [ 179.521285][ T5623] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 179.574279][ T5623] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 16 already freed [ 179.601956][ T5623] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 17 already freed [ 179.618756][ T5623] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 11 [ 179.636919][ T5623] Remounting filesystem read-only [ 179.640939][ T5623] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 11 [ 179.661497][ T2073] hid_parser_main: 5 callbacks suppressed [ 179.661527][ T2073] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 179.693232][ T2073] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 179.983723][ T7506] netlink: 36 bytes leftover after parsing attributes in process `syz.1.622'. [ 180.143352][ T50] IPVS: starting estimator thread 0... [ 180.180072][ T7506] loop1: detected capacity change from 0 to 1024 [ 180.197555][ T7506] hfsplus: invalid btree flag [ 180.197910][ T7506] hfsplus: failed to load extents file [ 180.224509][ T7511] IPVS: using max 22 ests per chain, 52800 per kthread [ 180.495698][ T7517] loop0: detected capacity change from 0 to 512 [ 180.501382][ T7517] EXT4-fs: Ignoring removed nobh option [ 180.538185][ T7517] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 180.572633][ T3296] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.597675][ T7517] EXT4-fs error (device loop0): ext4_clear_blocks:874: inode #13: comm syz.0.625: attempt to clear invalid blocks 1 len 1 [ 180.597727][ T7517] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 180.605714][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 180.605745][ C1] EXT4-fs (loop0): initial error at time 2000000034: ext4_clear_blocks:874: inode 13 [ 180.605793][ C1] EXT4-fs (loop0): last error at time 2000000034: ext4_clear_blocks:874: inode 13 [ 180.660773][ T7517] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 180.663545][ T7517] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz.0.625: invalid indirect mapped block 1819239214 (level 0) [ 180.663600][ T7517] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 180.695947][ T7517] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz.0.625: invalid indirect mapped block 1819239214 (level 1) [ 180.696006][ T7517] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 180.716870][ T7517] EXT4-fs (loop0): 1 truncate cleaned up [ 180.759661][ T7517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.022988][ T3296] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.049972][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.154005][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.168850][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.172464][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.193603][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.201963][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 181.359211][ T3296] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.437046][ T7535] loop0: detected capacity change from 0 to 128 [ 181.466771][ T7535] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 181.496369][ T7535] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.642230][ T3296] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.796846][ T30] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 181.855243][ T2073] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 181.946487][ T30] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.947849][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.947899][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.947939][ T30] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.948003][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.018544][ T2073] usb 4-1: not running at top speed; connect to a high speed hub [ 182.018595][ T2073] usb 4-1: New USB device found, idVendor=046d, idProduct=152d, bcdDevice=ef.8f [ 182.018648][ T2073] usb 4-1: too many configurations: 241, using maximum allowed: 8 [ 182.019325][ T2073] usb 4-1: config 0 has no interfaces? [ 182.019961][ T2073] usb 4-1: config 0 has no interfaces? [ 182.020914][ T2073] usb 4-1: config 0 has no interfaces? [ 182.021780][ T2073] usb 4-1: config 0 has no interfaces? [ 182.024266][ T2073] usb 4-1: config 0 has no interfaces? [ 182.032945][ T2073] usb 4-1: config 0 has no interfaces? [ 182.035186][ T2073] usb 4-1: config 0 has no interfaces? [ 182.035869][ T2073] usb 4-1: config 0 has no interfaces? [ 182.046784][ T2073] usb 4-1: New USB device strings: Mfr=179, Product=45, SerialNumber=160 [ 182.046823][ T2073] usb 4-1: Product: syz [ 182.046849][ T2073] usb 4-1: Manufacturer: syz [ 182.046876][ T2073] usb 4-1: SerialNumber: syz [ 182.136103][ T30] usb 3-1: config 0 descriptor?? [ 182.148852][ T2073] usb 4-1: config 0 descriptor?? [ 182.402545][ T3296] bridge_slave_1: left allmulticast mode [ 182.402601][ T3296] bridge_slave_1: left promiscuous mode [ 182.404232][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.478684][ T3296] bridge_slave_0: left allmulticast mode [ 182.478720][ T3296] bridge_slave_0: left promiscuous mode [ 182.478961][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.540321][ T7562] process 'syz.0.644' launched './file0' with NULL argv: empty string added [ 182.587525][ T30] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 182.636725][ T30] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 182.711260][ T7565] loop0: detected capacity change from 0 to 128 [ 182.777619][ T3211] usb 4-1: USB disconnect, device number 7 [ 182.876521][ T30] usb 3-1: USB disconnect, device number 5 [ 183.012009][ T7566] fido_id[7566]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 183.234598][ T5635] Bluetooth: hci5: command tx timeout [ 183.304470][ T983] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.343773][ T3296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.358486][ T7572] netlink: 104 bytes leftover after parsing attributes in process `syz.1.648'. [ 183.373011][ T3296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.393753][ T3296] bond0 (unregistering): Released all slaves [ 183.418422][ T7563] netlink: 13 bytes leftover after parsing attributes in process `syz.4.643'. [ 183.468031][ T983] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 183.469410][ T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.469459][ T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.469514][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.517329][ T983] usb 1-1: config 0 descriptor?? [ 183.960857][ T983] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 183.960903][ T983] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 183.960938][ T983] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 183.960971][ T983] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 183.961005][ T983] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 183.961039][ T983] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 183.961074][ T983] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 184.036367][ T983] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 184.154568][ T983] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x00 [ 184.155853][ T7590] loop3: detected capacity change from 0 to 2048 [ 184.291665][ T7590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.373253][ T983] cp2112 0003:10C4:EA90.000C: error requesting SMBus config [ 184.385960][ T983] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -71 [ 184.406267][ T983] usb 1-1: USB disconnect, device number 7 [ 184.523498][ T7592] fido_id[7592]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 185.113535][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.316551][ T5635] Bluetooth: hci5: command tx timeout [ 185.350671][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 185.589330][ T7632] loop3: detected capacity change from 0 to 512 [ 185.646073][ T3296] hsr_slave_0: left promiscuous mode [ 185.668202][ T3296] hsr_slave_1: left promiscuous mode [ 185.669264][ T3296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.669306][ T3296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.684472][ T3296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.684498][ T3296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.743886][ T7632] FAT-fs (loop3): error, corrupted file size (i_pos 51, 512) [ 185.758866][ T7632] FAT-fs (loop3): error, invalid FAT chain (i_pos 51, last_block 64) [ 185.781242][ T3296] veth1_macvtap: left promiscuous mode [ 185.781316][ T3296] veth0_macvtap: left promiscuous mode [ 185.781450][ T3296] veth1_vlan: left promiscuous mode [ 185.781562][ T3296] veth0_vlan: left promiscuous mode [ 185.958499][ T7638] netlink: 'syz.4.667': attribute type 16 has an invalid length. [ 185.958531][ T7638] netlink: 'syz.4.667': attribute type 17 has an invalid length. [ 186.547419][ T3296] team0 (unregistering): Port device team_slave_1 removed [ 186.563237][ T3296] team0 (unregistering): Port device team_slave_0 removed [ 186.694486][ T983] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 186.845211][ T983] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 186.846556][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.878666][ T983] usb 4-1: config 0 descriptor?? [ 187.111366][ T983] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 187.111904][ T7653] FAULT_INJECTION: forcing a failure. [ 187.111904][ T7653] name fail_futex, interval 1, probability 0, space 0, times 1 [ 187.111951][ T7653] CPU: 1 UID: 0 PID: 7653 Comm: syz.2.675 Not tainted syzkaller #0 PREEMPT(full) [ 187.112000][ T7653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 187.112023][ T7653] Call Trace: [ 187.112035][ T7653] [ 187.112051][ T7653] dump_stack_lvl+0x100/0x190 [ 187.112109][ T7653] should_fail_ex.cold+0x5/0xa [ 187.112161][ T7653] get_futex_key+0x1d0/0x14f0 [ 187.112214][ T7653] ? __pfx_get_futex_key+0x10/0x10 [ 187.112259][ T7653] ? refill_pi_state_cache+0x91/0x260 [ 187.112331][ T7653] futex_lock_pi+0x1eb/0x7e0 [ 187.112384][ T7653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.112445][ T7653] ? __pfx_futex_lock_pi+0x10/0x10 [ 187.112500][ T7653] ? try_to_wake_up+0x70a/0x1c90 [ 187.112548][ T7653] ? __pfx_try_to_wake_up+0x10/0x10 [ 187.112611][ T7653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.112659][ T7653] ? plist_check_list+0x1b8/0x280 [ 187.112722][ T7653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.112769][ T7653] ? futex_private_hash_put.part.0+0xdc/0x180 [ 187.112824][ T7653] ? __pfx_futex_wake_mark+0x10/0x10 [ 187.112896][ T7653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.112943][ T7653] ? rcu_read_lock_any_held+0x6a/0x90 [ 187.112998][ T7653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.113045][ T7653] ? find_held_lock+0x2b/0x80 [ 187.113096][ T7653] ? ksys_write+0x190/0x250 [ 187.113160][ T7653] do_futex+0x371/0x440 [ 187.113212][ T7653] ? __pfx_do_futex+0x10/0x10 [ 187.113265][ T7653] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 187.113339][ T7653] __x64_sys_futex+0x34f/0x4d0 [ 187.113393][ T7653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.113446][ T7653] ? __pfx___x64_sys_futex+0x10/0x10 [ 187.113508][ T7653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.113566][ T7653] do_syscall_64+0x123/0x790 [ 187.113680][ T7653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.113722][ T7653] RIP: 0033:0x7fa9a679e159 [ 187.113753][ T7653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.113792][ T7653] RSP: 002b:00007fa9a76db028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 187.113831][ T7653] RAX: ffffffffffffffda RBX: 00007fa9a6a25fa0 RCX: 00007fa9a679e159 [ 187.113858][ T7653] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000000000000000 [ 187.113883][ T7653] RBP: 00007fa9a683503b R08: 0000000000000000 R09: 0000000000000001 [ 187.113909][ T7653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.113934][ T7653] R13: 00007fa9a6a26038 R14: 00007fa9a6a25fa0 R15: 00007ffd1a54a8c8 [ 187.113988][ T7653] [ 187.396153][ T5635] Bluetooth: hci5: command tx timeout [ 187.447640][ T983] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 187.447677][ T983] [drm] Initialized udl on minor 1 [ 187.795933][ T7664] loop2: detected capacity change from 0 to 256 [ 187.812868][ T7664] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.812892][ T7664] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 187.859762][ T7664] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 187.862720][ T7664] exFAT-fs (loop2): failed to load alloc-bitmap [ 187.862740][ T7664] exFAT-fs (loop2): failed to recognize exfat type [ 188.265606][ T7669] loop4: detected capacity change from 0 to 4096 [ 188.341431][ T7679] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.357633][ T5347] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 188.380956][ T7680] loop2: detected capacity change from 0 to 164 [ 188.504507][ T5347] usb 2-1: Using ep0 maxpacket: 16 [ 188.505313][ T5347] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 188.529872][ T5347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.529942][ T5347] usb 2-1: Product: syz [ 188.529969][ T5347] usb 2-1: Manufacturer: syz [ 188.529996][ T5347] usb 2-1: SerialNumber: syz [ 188.567503][ T5347] usb 2-1: config 0 descriptor?? [ 189.017284][ T5347] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 189.076793][ T7528] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.076921][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.077105][ T7528] bridge_slave_0: entered allmulticast mode [ 189.077819][ T5347] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.084208][ T5347] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 189.084300][ T5347] usb 2-1: media controller created [ 189.090112][ T7528] bridge_slave_0: entered promiscuous mode [ 189.101589][ T7528] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.101727][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.101900][ T7528] bridge_slave_1: entered allmulticast mode [ 189.134866][ T7528] bridge_slave_1: entered promiscuous mode [ 189.197812][ T5347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.218759][ T7671] dtv5100: wlen = 0, aborting. [ 189.282723][ T5347] zl10353_read_register: readreg error (reg=127, ret==0) [ 189.282787][ T5347] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 189.282805][ T5347] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 189.324711][ T5347] usb 2-1: USB disconnect, device number 5 [ 189.473968][ T5347] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 189.476148][ T5635] Bluetooth: hci5: command tx timeout [ 189.479901][ T7528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.546510][ T7528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.758559][ T7528] team0: Port device team_slave_0 added [ 189.789105][ T7528] team0: Port device team_slave_1 added [ 189.857845][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 189.973703][ T7528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.973731][ T7528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.973778][ T7528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.013072][ T7528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.013103][ T7528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.013149][ T7528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.203949][ T7717] loop1: detected capacity change from 0 to 16 [ 190.230918][ T7717] erofs (device loop1): mounted with root inode @ nid 36. [ 190.348098][ T7718] syz.1.688: attempt to access beyond end of device [ 190.348098][ T7718] loop1: rw=524288, sector=1342177272, nr_sectors = 2064 limit=16 [ 190.352647][ T7718] syz.1.688: attempt to access beyond end of device [ 190.352647][ T7718] loop1: rw=524288, sector=1342179336, nr_sectors = 496 limit=16 [ 190.361070][ T7528] hsr_slave_0: entered promiscuous mode [ 190.369753][ T7528] hsr_slave_1: entered promiscuous mode [ 190.378579][ T7528] debugfs: 'hsr0' already exists in 'hsr' [ 190.378607][ T7528] Cannot create hsr debugfs directory [ 190.530358][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 190.719597][ T7727] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input19 [ 190.788127][ T7734] netlink: 'syz.0.694': attribute type 8 has an invalid length. [ 191.085081][ T2073] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 191.175398][ T7742] FAULT_INJECTION: forcing a failure. [ 191.175398][ T7742] name failslab, interval 1, probability 1, space 0, times 0 [ 191.175449][ T7742] CPU: 1 UID: 0 PID: 7742 Comm: syz.0.696 Not tainted syzkaller #0 PREEMPT(full) [ 191.175497][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 191.175520][ T7742] Call Trace: [ 191.175533][ T7742] [ 191.175548][ T7742] dump_stack_lvl+0x100/0x190 [ 191.175614][ T7742] should_fail_ex.cold+0x5/0xa [ 191.175659][ T7742] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.175715][ T7742] should_failslab+0xc2/0x120 [ 191.175754][ T7742] __kmalloc_cache_noprof+0x91/0x6d0 [ 191.175802][ T7742] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.175849][ T7742] ? kasan_save_track+0x14/0x30 [ 191.175908][ T7742] ? nfs_init_fs_context+0x4f/0x1510 [ 191.175966][ T7742] nfs_init_fs_context+0x4f/0x1510 [ 191.176014][ T7742] ? srso_alias_return_thunk+0x5/0xfbef5 [ 191.176069][ T7742] alloc_fs_context+0x60c/0xf40 [ 191.176130][ T7742] __x64_sys_fsopen+0xed/0x220 [ 191.176188][ T7742] do_syscall_64+0x123/0x790 [ 191.176255][ T7742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.176296][ T7742] RIP: 0033:0x7fcdeb79e159 [ 191.176326][ T7742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.176365][ T7742] RSP: 002b:00007fcdec5de028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 191.176403][ T7742] RAX: ffffffffffffffda RBX: 00007fcdeba25fa0 RCX: 00007fcdeb79e159 [ 191.176430][ T7742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 191.176455][ T7742] RBP: 00007fcdeb83503b R08: 0000000000000000 R09: 0000000000000000 [ 191.176480][ T7742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.176505][ T7742] R13: 00007fcdeba26038 R14: 00007fcdeba25fa0 R15: 00007ffc063fc408 [ 191.176555][ T7742] [ 191.258859][ T2073] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 191.261614][ T2073] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 191.261659][ T2073] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 191.261703][ T2073] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 191.264785][ T2073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.264822][ T2073] usb 2-1: Product: syz [ 191.264848][ T2073] usb 2-1: Manufacturer: syz [ 191.264874][ T2073] usb 2-1: SerialNumber: syz [ 191.292685][ T2073] usb 2-1: config 0 descriptor?? [ 191.328277][ T7731] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.328456][ T7731] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.338657][ T2073] usb 2-1: ucan: probing device on interface #0 [ 191.899403][ T7528] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 191.923563][ T7528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 191.938537][ T7528] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 191.959690][ T7528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.963460][ T7528] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 191.987365][ T7528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 191.988707][ T7528] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 192.013001][ T7528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.277378][ T2073] ucan 2-1:0.0 can0: registered device [ 192.281904][ T2073] ucan 2-1:0.0 can0: firmware string: Q [ 192.359077][ T7766] loop2: detected capacity change from 0 to 4096 [ 192.402358][ T7528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.467422][ T7528] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.500124][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.500268][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.529350][ T983] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 192.551402][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.551530][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.572325][ T2073] usb 2-1: USB disconnect, device number 6 [ 192.581254][ T983] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 192.598385][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 192.598518][ T5752] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 192.601700][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 192.601831][ T5752] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 192.603395][ T5752] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 192.645228][ T983] usb 4-1: USB disconnect, device number 8 [ 193.181041][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 193.311173][ T7783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.706'. [ 193.565124][ T7753] loop0: detected capacity change from 0 to 32768 [ 193.641824][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.641905][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.884305][ T7788] loop3: detected capacity change from 0 to 4096 [ 193.906087][ T7788] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 193.967876][ T7796] loop4: detected capacity change from 0 to 2048 [ 194.109096][ T7796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.109252][ T7796] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.270295][ T7788] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 194.322996][ T3296] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 194.323453][ T7788] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 194.323496][ T7788] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 194.323524][ T7788] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 194.325154][ T12] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 194.392328][ T7788] ntfs3(loop3): ino=5, "/" mi_enum_attr [ 194.392504][ T7788] ntfs3(loop3): ino=5, "/" ntfs_readdir [ 194.618599][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.981635][ T7824] loop4: detected capacity change from 0 to 512 [ 194.997100][ T7528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.069030][ T7824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.069156][ T7824] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.539334][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.010952][ T5276] 8021q: adding VLAN 0 to HW filter on device eth4 [ 196.277852][ T7865] loop3: detected capacity change from 0 to 128 [ 196.279024][ T7865] msdos: Bad value for 'gid' [ 196.279049][ T7865] msdos: Bad value for 'gid' [ 196.327765][ T7865] type: 2229836882 invalid [ 196.725849][ T7528] veth0_vlan: entered promiscuous mode [ 196.787524][ T7528] veth1_vlan: entered promiscuous mode [ 196.813966][ T7879] loop3: detected capacity change from 0 to 512 [ 196.916225][ T7879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.916359][ T7879] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.973925][ T7528] veth0_macvtap: entered promiscuous mode [ 197.016277][ T7528] veth1_macvtap: entered promiscuous mode [ 197.102474][ T7528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.143172][ T7528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.276115][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.292198][ T7893] FAULT_INJECTION: forcing a failure. [ 197.292198][ T7893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 197.292245][ T7893] CPU: 1 UID: 0 PID: 7893 Comm: syz.0.735 Not tainted syzkaller #0 PREEMPT(full) [ 197.292289][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 197.292312][ T7893] Call Trace: [ 197.292324][ T7893] [ 197.292338][ T7893] dump_stack_lvl+0x100/0x190 [ 197.292395][ T7893] should_fail_ex.cold+0x5/0xa [ 197.292438][ T7893] ? prepare_alloc_pages+0x16d/0x5b0 [ 197.292510][ T7893] should_fail_alloc_page+0xeb/0x140 [ 197.292550][ T7893] prepare_alloc_pages+0x1f0/0x5b0 [ 197.292619][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.292664][ T7893] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 197.292729][ T7893] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 197.292787][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.292832][ T7893] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 197.292896][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.292941][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.292985][ T7893] ? find_held_lock+0x2b/0x80 [ 197.293036][ T7893] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 197.293077][ T7893] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 197.293116][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.293166][ T7893] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 197.293219][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.293266][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.293311][ T7893] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 197.293352][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.293399][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.293444][ T7893] ? rcu_is_watching+0x13/0xc0 [ 197.293491][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.293536][ T7893] ? trace_sched_exit_tp+0x120/0x160 [ 197.293588][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.293639][ T7893] ? __lock_acquire+0x5c0/0x1f40 [ 197.293694][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.293740][ T7893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 197.293808][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.293854][ T7893] ? policy_nodemask+0xed/0x4f0 [ 197.293897][ T7893] alloc_pages_mpol+0x201/0x550 [ 197.293938][ T7893] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 197.293974][ T7893] ? futex_unqueue+0x13d/0x2c0 [ 197.294019][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.294064][ T7893] ? __futex_wait+0x256/0x300 [ 197.294129][ T7893] ___kmalloc_large_node+0xe8/0x130 [ 197.294174][ T7893] __kmalloc_large_node_noprof+0x1c/0x70 [ 197.294220][ T7893] __kmalloc_noprof+0x5a8/0x840 [ 197.294276][ T7893] ? iovec_from_user+0x8d/0x140 [ 197.294333][ T7893] iovec_from_user+0x8d/0x140 [ 197.294388][ T7893] process_vm_rw+0x2cc/0x370 [ 197.294448][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.294502][ T7893] ? __pfx_process_vm_rw+0x10/0x10 [ 197.294568][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.294619][ T7893] ? find_held_lock+0x2b/0x80 [ 197.294669][ T7893] ? ksys_write+0x190/0x250 [ 197.294764][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.294810][ T7893] ? xfd_validate_state+0x129/0x190 [ 197.294885][ T7893] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 197.294941][ T7893] ? do_syscall_64+0xae/0x790 [ 197.294998][ T7893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.295042][ T7893] ? lockdep_hardirqs_on+0x7d/0x110 [ 197.295100][ T7893] do_syscall_64+0x123/0x790 [ 197.295162][ T7893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.295201][ T7893] RIP: 0033:0x7fcdeb79e159 [ 197.295230][ T7893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.295267][ T7893] RSP: 002b:00007fcdec5de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 197.295304][ T7893] RAX: ffffffffffffffda RBX: 00007fcdeba25fa0 RCX: 00007fcdeb79e159 [ 197.295329][ T7893] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000000 [ 197.295353][ T7893] RBP: 00007fcdeb83503b R08: 0000000000000286 R09: 0000000000000000 [ 197.295377][ T7893] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000000 [ 197.295401][ T7893] R13: 00007fcdeba26038 R14: 00007fcdeba25fa0 R15: 00007ffc063fc408 [ 197.295452][ T7893] [ 197.328142][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.415837][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.531755][ T3321] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.575630][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.912178][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.912214][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.181745][ T250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.181779][ T250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.343620][ T7910] loop4: detected capacity change from 0 to 1024 [ 198.395525][ T7910] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 198.509474][ T7910] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.741: lblock 2 mapped to illegal pblock 2 (length 1) [ 198.509542][ T7910] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 198.514443][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 198.514475][ C0] EXT4-fs (loop4): initial error at time 2000000052: ext4_map_blocks:790: inode 3: block 2 [ 198.514535][ C0] EXT4-fs (loop4): last error at time 2000000052: ext4_map_blocks:790: inode 3: block 2 [ 198.525032][ T7910] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 198.525090][ T7910] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.741: lblock 0 mapped to illegal pblock 48 (length 1) [ 198.525146][ T7910] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 198.528637][ T7910] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 198.528670][ T7910] EXT4-fs error (device loop4): ext4_acquire_dquot:7067: comm syz.4.741: Failed to acquire dquot type 0 [ 198.528709][ T7910] loop4: lost filesystem error report for type 5 error -117 [ 198.534928][ T7910] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 198.534965][ T7910] loop4: lost filesystem error report for type 5 error -117 [ 198.536852][ T7910] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #11: comm syz.4.741: mark_inode_dirty error [ 198.536897][ T7910] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 198.537165][ T7910] EXT4-fs warning (device loop4): ext4_evict_inode:271: couldn't mark inode dirty (err -117) [ 198.537275][ T7910] EXT4-fs (loop4): 1 orphan inode deleted [ 198.548866][ T7910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.556768][ T3321] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 198.556824][ T3321] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 198.605332][ T3321] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 198.605459][ T3321] EXT4-fs error (device loop4): ext4_release_dquot:7103: comm kworker/u8:13: Failed to release dquot type 0 [ 198.833322][ T7921] loop1: detected capacity change from 0 to 2048 [ 198.850981][ T7923] loop3: detected capacity change from 0 to 128 [ 198.883718][ T7921] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 198.918691][ T7921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.990229][ T7923] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 198.990427][ T7923] hpfs: filesystem error: improperly stopped [ 198.990448][ T7923] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 198.990468][ T7923] hpfs: You really don't want any checks? You are crazy... [ 198.991065][ T7923] hpfs: hpfs_map_sector(): read error [ 198.991078][ T7923] hpfs: code page support is disabled [ 199.017264][ T7923] hpfs: hpfs_map_4sectors(): unaligned read [ 199.017518][ T7923] hpfs: hpfs_map_4sectors(): unaligned read [ 199.017536][ T7923] hpfs: filesystem error: unable to find root dir [ 199.070651][ T3321] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 199.070714][ T3321] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 199.071131][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.073694][ T3321] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 199.073744][ T3321] EXT4-fs error (device loop4): ext4_release_dquot:7103: comm kworker/u8:13: Failed to release dquot type 0 [ 199.073784][ T3321] loop4: lost filesystem error report for type 5 error -117 [ 199.107619][ T7923] hpfs: hpfs_map_4sectors(): unaligned read [ 199.133047][ T5622] EXT4-fs error (device loop4): __ext4_get_inode_loc:4915: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 199.133094][ T5622] loop4: lost filesystem error report for type 5 error -117 [ 199.161175][ T5622] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 199.161212][ T5622] loop4: lost filesystem error report for type 5 error -117 [ 199.180386][ T5622] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 199.180432][ T5622] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 199.196810][ T5622] EXT4-fs error (device loop4): __ext4_get_inode_loc:4915: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 199.196857][ T5622] loop4: lost filesystem error report for type 5 error -117 [ 199.869205][ T7943] loop6: detected capacity change from 0 to 64 [ 200.051483][ T7945] FAULT_INJECTION: forcing a failure. [ 200.051483][ T7945] name failslab, interval 1, probability 1, space 0, times 0 [ 200.051538][ T7945] CPU: 1 UID: 0 PID: 7945 Comm: syz.0.753 Not tainted syzkaller #0 PREEMPT(full) [ 200.051585][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 200.051617][ T7945] Call Trace: [ 200.051629][ T7945] [ 200.051644][ T7945] dump_stack_lvl+0x100/0x190 [ 200.051705][ T7945] should_fail_ex.cold+0x5/0xa [ 200.051750][ T7945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.051807][ T7945] should_failslab+0xc2/0x120 [ 200.051848][ T7945] __kmalloc_node_noprof+0xff/0x880 [ 200.051912][ T7945] ? get_callchain_buffers+0x1e5/0x380 [ 200.051981][ T7945] get_callchain_buffers+0x1e5/0x380 [ 200.052036][ T7945] ? security_capable+0x80/0x260 [ 200.052088][ T7945] stack_map_alloc+0x316/0x610 [ 200.052143][ T7945] map_create+0x874/0x30d0 [ 200.052196][ T7945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.052244][ T7945] ? __lock_acquire+0x5c0/0x1f40 [ 200.052297][ T7945] ? __pfx_map_create+0x10/0x10 [ 200.052347][ T7945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.052396][ T7945] ? lock_acquire+0x1d1/0x380 [ 200.052434][ T7945] ? __might_fault+0xc5/0x140 [ 200.052485][ T7945] ? __might_fault+0xc5/0x140 [ 200.052554][ T7945] __sys_bpf+0x12a0/0x4a30 [ 200.052631][ T7945] ? __pfx___sys_bpf+0x10/0x10 [ 200.052683][ T7945] ? find_held_lock+0x2b/0x80 [ 200.052735][ T7945] ? futex_wake+0x4ea/0x5e0 [ 200.052796][ T7945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.052848][ T7945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.052925][ T7945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.052973][ T7945] ? rcu_read_lock_any_held+0x6a/0x90 [ 200.053028][ T7945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.053076][ T7945] ? find_held_lock+0x2b/0x80 [ 200.053128][ T7945] ? ksys_write+0x190/0x250 [ 200.053185][ T7945] ? ksys_write+0x190/0x250 [ 200.053241][ T7945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.053313][ T7945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.053359][ T7945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.053405][ T7945] ? __x64_sys_futex+0x358/0x4d0 [ 200.053456][ T7945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.053506][ T7945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.053555][ T7945] ? xfd_validate_state+0x129/0x190 [ 200.053633][ T7945] ? __x64_sys_bpf+0xce/0x140 [ 200.053687][ T7945] __x64_sys_bpf+0xce/0x140 [ 200.053745][ T7945] ? do_syscall_64+0xae/0x790 [ 200.053810][ T7945] do_syscall_64+0x123/0x790 [ 200.053878][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.053920][ T7945] RIP: 0033:0x7fcdeb79e159 [ 200.053952][ T7945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.053991][ T7945] RSP: 002b:00007fcdec5de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 200.054030][ T7945] RAX: ffffffffffffffda RBX: 00007fcdeba25fa0 RCX: 00007fcdeb79e159 [ 200.054058][ T7945] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0200000000000000 [ 200.054084][ T7945] RBP: 00007fcdeb83503b R08: 0000000000000000 R09: 0000000000000000 [ 200.054109][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.054133][ T7945] R13: 00007fcdeba26038 R14: 00007fcdeba25fa0 R15: 00007ffc063fc408 [ 200.054188][ T7945] [ 200.107828][ T7895] loop2: detected capacity change from 0 to 8192 [ 200.418813][ T7895] Dev loop2: unable to read RDB block 8 [ 200.418970][ T7895] loop2: unable to read partition table [ 200.419225][ T7895] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 200.683558][ T7949] loop6: detected capacity change from 0 to 128 [ 200.703938][ T7949] EXT4-fs: Ignoring removed i_version option [ 200.733969][ T7949] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.767047][ T7949] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.975174][ T30] kernel read not supported for file /video9 (pid: 30 comm: kworker/1:1) [ 201.101014][ T7961] input: syz0 as /devices/virtual/input/input20 [ 201.188351][ T7528] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.766780][ T2073] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 201.850988][ T7986] loop4: detected capacity change from 0 to 128 [ 201.872544][ T7986] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 201.918532][ T7986] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 201.973749][ T2073] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 201.978116][ T2073] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 201.978163][ T2073] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 201.978206][ T2073] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 201.978269][ T2073] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.037869][ T7973] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 202.038053][ T7973] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 202.058876][ T2073] pl2303 7-1:1.0: pl2303 converter detected [ 202.085556][ T50] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 202.160148][ T2073] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 202.700830][ T7997] loop0: detected capacity change from 0 to 2048 [ 202.714481][ T30] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 202.814690][ T8001] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 202.815056][ T8001] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 202.815903][ T8001] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 202.816946][ T8001] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 202.887182][ T30] usb 3-1: unable to get BOS descriptor or descriptor too short [ 202.887505][ T30] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 202.921586][ T30] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 202.946930][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.947106][ T30] usb 3-1: Product: syz [ 202.947136][ T30] usb 3-1: Manufacturer: syz [ 202.947165][ T30] usb 3-1: SerialNumber: syz [ 203.075170][ T2073] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 203.113594][ T8001] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 203.129259][ T8001] pl2303 ttyUSB0: error sending break = -32 [ 203.181269][ T3211] usb 7-1: USB disconnect, device number 2 [ 203.222511][ T3211] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 203.223377][ T3211] pl2303 7-1:1.0: device disconnected [ 203.240845][ T2073] usb 1-1: Using ep0 maxpacket: 8 [ 203.243164][ T2073] usb 1-1: New USB device found, idVendor=045e, idProduct=073a, bcdDevice= 0.00 [ 203.244542][ T2073] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.244599][ T2073] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.244642][ T2073] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.244691][ T2073] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.244739][ T2073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.326264][ T2073] usb 1-1: config 0 descriptor?? [ 203.370568][ T30] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 203.565497][ T30] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 203.565540][ T30] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 203.747611][ T2073] hid-generic 0003:045E:073A.000D: unknown main item tag 0x2 [ 203.747656][ T2073] hid-generic 0003:045E:073A.000D: unbalanced collection at end of report description [ 203.748454][ T2073] hid-generic 0003:045E:073A.000D: probe with driver hid-generic failed with error -22 [ 203.857488][ T8021] netlink: 32 bytes leftover after parsing attributes in process `syz.3.778'. [ 203.979057][ T5752] usb 1-1: USB disconnect, device number 8 [ 203.995908][ T30] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 203.995950][ T30] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 204.200554][ T30] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 204.358410][ T8036] loop8: detected capacity change from 0 to 8 [ 204.382814][ T8036] Dev loop8: unable to read RDB block 8 [ 204.382858][ T8036] loop8: unable to read partition table [ 204.383110][ T8036] loop8: partition table beyond EOD, truncated [ 204.383155][ T8036] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 204.535307][ T30] usb 3-1: USB disconnect, device number 6 [ 204.791789][ T30] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 204.803908][ T30] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 204.812334][ T30] CPU: 1 UID: 0 PID: 30 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 204.821553][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 204.831617][ T30] Workqueue: usb_hub_wq hub_event [ 204.836678][ T30] RIP: 0010:klist_put+0x4d/0x1d0 [ 204.841629][ T30] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 0c ef 0c [ 204.861248][ T30] RSP: 0018:ffffc90000a57600 EFLAGS: 00010212 [ 204.867321][ T30] RAX: dffffc0000000000 RBX: ffff888026b90c80 RCX: ffffc9001c420000 [ 204.875298][ T30] RDX: 000000000000000b RSI: ffffffff8bc5b645 RDI: 0000000000000058 [ 204.883271][ T30] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff224ec60 [ 204.891247][ T30] R10: ffffffff91276303 R11: 0000000000000000 R12: 0000000000000000 [ 204.899221][ T30] R13: 0000000000000001 R14: ffffffff912762c0 R15: dffffc0000000000 [ 204.907201][ T30] FS: 0000000000000000(0000) GS:ffff888123c59000(0000) knlGS:0000000000000000 [ 204.916138][ T30] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.922725][ T30] CR2: 00007f4a00a0d000 CR3: 00000000359ee000 CR4: 0000000000350ef0 [ 204.930701][ T30] Call Trace: [ 204.933975][ T30] [ 204.936906][ T30] klist_remove+0x14c/0x2e0 [ 204.941430][ T30] ? __mutex_unlock_slowpath+0x271/0x930 [ 204.947095][ T30] ? __pfx_klist_remove+0x10/0x10 [ 204.952133][ T30] ? devres_release_all+0x117/0x180 [ 204.957429][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.963085][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.968738][ T30] ? device_links_driver_cleanup+0x2f7/0x3e0 [ 204.974750][ T30] device_release_driver_internal+0x4fb/0x620 [ 204.980841][ T30] ? __entry_text_end+0x102035/0x102039 [ 204.986405][ T30] bus_remove_device+0x2bc/0x560 [ 204.991366][ T30] ? __pfx_bus_remove_device+0x10/0x10 [ 204.996839][ T30] ? __pfx_device_remove_attrs+0x10/0x10 [ 205.002496][ T30] device_del+0x376/0x9b0 [ 205.006845][ T30] ? __pfx_device_del+0x10/0x10 [ 205.011711][ T30] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 205.017451][ T30] ? lock_acquire+0x1d1/0x380 [ 205.022134][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.027873][ T30] usb_disable_device+0x367/0x810 [ 205.032927][ T30] ? mark_held_locks+0x40/0x70 [ 205.037698][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.043353][ T30] usb_disconnect+0x2e2/0x9a0 [ 205.048068][ T30] hub_event+0x1bb1/0x4420 [ 205.052532][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.058181][ T30] ? __lock_acquire+0x5c0/0x1f40 [ 205.063163][ T30] ? __pfx_hub_event+0x10/0x10 [ 205.067952][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.073601][ T30] ? mark_lock+0x960/0x1020 [ 205.078142][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.083792][ T30] ? lock_acquire+0x1d1/0x380 [ 205.088472][ T30] ? process_one_work+0xa2c/0x1b10 [ 205.093611][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.099261][ T30] ? process_one_work+0x906/0x1b10 [ 205.104415][ T30] ? process_one_work+0x906/0x1b10 [ 205.109552][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.115210][ T30] process_one_work+0xac7/0x1b10 [ 205.120192][ T30] ? __pfx_process_one_work+0x10/0x10 [ 205.125590][ T30] ? lock_acquire+0x1d1/0x380 [ 205.130283][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.135936][ T30] worker_thread+0x5ef/0xe50 [ 205.140562][ T30] ? kthread+0x13a/0x450 [ 205.144825][ T30] ? __pfx_worker_thread+0x10/0x10 [ 205.149963][ T30] kthread+0x373/0x450 [ 205.154054][ T30] ? __pfx_kthread+0x10/0x10 [ 205.158674][ T30] ret_from_fork+0x730/0xd60 [ 205.163277][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 205.168399][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.174049][ T30] ? __switch_to+0x800/0x10f0 [ 205.178751][ T30] ? __switch_to_asm+0x39/0x70 [ 205.183525][ T30] ? __pfx_kthread+0x10/0x10 [ 205.188141][ T30] ret_from_fork_asm+0x1a/0x30 [ 205.192929][ T30] [ 205.195943][ T30] Modules linked in: [ 205.201861][ T30] ---[ end trace 0000000000000000 ]--- [ 205.353477][ T30] RIP: 0010:klist_put+0x4d/0x1d0 [ 205.353529][ T30] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 0c ef 0c [ 205.353589][ T30] RSP: 0018:ffffc90000a57600 EFLAGS: 00010212 [ 205.353621][ T30] RAX: dffffc0000000000 RBX: ffff888026b90c80 RCX: ffffc9001c420000 [ 205.353649][ T30] RDX: 000000000000000b RSI: ffffffff8bc5b645 RDI: 0000000000000058 [ 205.353675][ T30] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff224ec60 [ 205.353712][ T30] R10: ffffffff91276303 R11: 0000000000000000 R12: 0000000000000000 [ 205.353739][ T30] R13: 0000000000000001 R14: ffffffff912762c0 R15: dffffc0000000000 [ 205.353768][ T30] FS: 0000000000000000(0000) GS:ffff888123c59000(0000) knlGS:0000000000000000 [ 205.353804][ T30] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.353832][ T30] CR2: 00007f4a009dae9c CR3: 000000000eb96000 CR4: 0000000000350ef0 [ 205.353862][ T30] Kernel panic - not syncing: Fatal exception [ 205.454026][ T30] Kernel Offset: disabled [ 205.458344][ T30] Rebooting in 86400 seconds..