last executing test programs: 1m24.450513507s ago: executing program 1 (id=72): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x18, 0x4040854}, 0x8050) 1m24.243815783s ago: executing program 1 (id=75): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000002540)=@vmx={0x103, 0x0, 0x2080, {0x100000, 0xdddd1000, {0x3}, 0x1, 0x5}, {"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", "c236e72f4450e787973c92be804be3e927a0b666741f2332bba70b8b6eb6755bffdee97927262cf3e41c4a2fa2dcc9a25ee2c140af5c59db58cb77483eb388f27eab8ced086bd9c51f04c704400c61627d1c37c02c586462b08b497318a0ac181a59dff48da3f741591444520107e90f9a1b4997e225fedffb958f07b0531bf2f060dfa3bad946318f3c47d1c3e97848db63cdb6886b4600b4a97648adf45d6cb63b3cfb38c311a41e8cd426bb34b8f5fbd0d4e5d40ad84b7b405ef047ba0dc601f4c90b10aab40f2472d1b2a53642aabbba20e99ba5028d94102b7ca257be0450774781fb925433948c61148030794a5e62719a52c79315a3cc402dffe0ba7556fac4c769a3c5483c6fac226db629d0d9bc325addc1f9301fed984175c6498696dd930c3201646fd95cbbaf05ec8dcec16cc87c0e47ba628f2570f258c5f5d47baaef5daec3f6290837174a07354afce189f802941d6c5f44bf14b54ae59c586b124bea6b0bf9331ca3bffb05a7415eeac6af8e55f389f71ac27a34010955ede4d784e27b4733df8604e8b8c2833adc9ffdc148073655f1be1537f557c5e676d6fb6724d7168644f90fef1e3c45d26e7d7f82fe42361fb77b54b099e1086aea66cc646c8be61cbefc48dd0139dde3d18dac3e174508e29fcb38daaded1c9ffe3d22535b0c35c5a18b7fafae3f5573dc0ee94c0be5a18214d8c6262cab707edbc939ec7e3dc203c27fce4dfb02bfc2ddd4aea17d45a5ea5eef1e6595af1316111e639e5be33e2492e242b4f70d614330ce86a2161510b34948aee69a064281c734d4ea0479507eaecff2671f79fbe873ef82604480940fbc418a8db3c5c2770c32c9b83c537ca5049bd67e94012ecfc4f92279bf0a8f3eb5db272f2db27b02413cd33fd6b581e66e1365f21d11cbacb4cfa518333ed4238cabfe4c266b4a76b9882ceac9b3e1fc74f685197802b82863920ebc937d3b7836cf438207bee95decc85d730fa13a7879cbc0a7b2a1ca170405b06346918ac518548b508e5554cfd4316d50f9f08b3972db12099e9765657b620bd8dcc752357a4b01c85da29cc129184be584cff645a1a0acece261636579ab9e1ec088160e7f03debf94b61086c3d19ebab127fab40fd0c0d10bcbf2bed2cb3e4c3a01e5cbb9a30ebe564fcb6694a716079ea96a4348d5a9c366cb808de02aa56f3dcb0c65227a0f1f67ff33713e6db34ac9e745dc4c2bedacfb6aee9350c8652496fe4cacc5f23318f35b4bb466a18d2eacc06ffe171296d6341a4049c4ad05504e1e70e4769483574be2069f285fbf02c6f735fe2bc4c248535bb5465842802f7fe7204040340b3b645e9e119376ddf9289e776f94da8f3e88afff4747b377ebc8022b31933b46f4a9bbf6b7fcdc8993de8dc56a4c1c3c4312128f316ed1f3b55730457df887130860647edc3c76c930b0f24d972e893a1f04a2750a3fa89a4927bbeeaec1f65146cdebcb4dcc460f0aaaa6a5d40ac7e0e0f9719ae1136f10b5ffb909998047ab6ebe276bf0fbf51f9a586fc787563852bcfeabc2a8757df321ec3f2c7e1c0efcd66ed6495b56191623ad00cfcee5f1c80b2227c11145ed0f308f6fd2a3cc6a91825b0e8100b2b367c108d422df8f07a62b25559e7b83ec43a444bc74b947c6f831dc779b077d989809c99e9c1eb368fca3d047cb7a8eabbf03825a06f13fb551760d16d2c27921fbbc82fb8c24db17b2a03d922d620bb6f09d03b8dc2c4abc0abcf103b140841bf24ea14ae99a45f82e63067468ab87a1f4bdd2b3b051154a6862af5c8849b99bbcbd69382cba747da18c0a198ce26e4a335cadeb6b8466710c42deee0062d29c1caaeb61336879819d03e79802d0537da9559c346cbe2896176f354e416e1381bf0aa68bf37b7593504a06248de65207cdfb61aba441d25701b05f9a6decc1c06378f0e384cd1fc8fadf37d13cc307f438d6acc30f4ed1c4b05cc232ad85e2e3a7c0588a24e1748d3c9c4e4ecc53ccf000a1c2eea0dc829dc6fc7bf1bc332299f3e24dae00bc8ff1895ffd5d047b312308d5d5d604be98c28863a204b80ae842f589ebc837521d2d624ce0fcaa238adf4691bacfa751160f2fa5fb8847940498e59c5e73b6f43fe1923fd7314d75ed8a6b406c112e602ec94f7a460d14900a47a4bab407b2dc16d893bcbe64a3e08b39ca3ba489796dee7fb905eaa92a20584c435cfb245b005ef5b095f1de3647154a88e4ad1692c7a4c07647bfde50feacdc1088e3619eb8da65da2a81c57faf3f0636173aec08eb03899bb1af8401c95d1b377eeeae42d3cb0d770652d4a4ac955c0a8a33df9145c3710fc8ca031f090917ffe27d52981a16b2a5aace5c13c1f5f399a7796224a42920fcfbc4ba3ec749eb8a59108a75f615d55ac4a83d9a31b116bbe021792d1ccb8bc8f73647b85a954847b6d5a5a4eaaf60ceaa8a6415fdf8f77385f8bd6b03bdafafbd5a61fd5cd7f2a14e66ddaf3659bc3b55fb9a03ca80483c2959d22cfeba38126fb67239cb0e869435df082fe1c92a6c20c11287a23bc94a2715bbf9f291674ea1d291271d0287f54d3630ae5485a01ff697180c35d649e94714d751a5bd69b2a298a31ebb6307982a2e96b0d8bfd2247cbb2889d8a0a09ae23c93b3b40343c78a87090e384bfcc3a05066a67c69a415a6ca3b676f139178e46a5a33a945d84f56f453377749b106f5eb67480bc76175f760cdd37286b36c9b17e910c1b02e21daf80fca2742b4fd3f326cdd9937796a021f51a091cf16e6ec05b5cb484e1685b95e152a5bf2148facc4a5464ce5c66b00c9730abf4fcd1ef479e4f476af60bd90dd38e9f8e19fb7cb0f1c9edf90f94bfe0c26b5c94cd793633c06b931d31fb9b647b7cd2563742a89d8598fbbef449710ccbaee6aef175b690be3c7c8a4518e0e24791d6fe5315336ef4c0e171ff3b32f9e7cb5b1fc4919b01cde82c464b4461a7edeac10cebce547bacacc90864fa889d4e6180c45cf48043b5df7dfa10f4c6a89cfb9941f455b4feaef6fc98c960086ef2aea9a711637672ac9d495fb22a9ff4ff55bbfbc57ed7409c55b919ff66d41342b9a4cc1d295b30c7e2eeccc3da835d5b1cc7f4f963b50fdb6a1eb268b58a2a077bf0a2d79cc372b3b58e123d32b1987201afead0695d59b47889756c61cd88e03c2bfb7fc9ec28c56eb0abdf58e3603e87c14d64eb09c4612ff0a28540a8cedf0f9deeb7a47312d33c0c8ff8cf40fb84aeefeb5d731a4eeb2fdce072ee461f4e1e97e3c1f544b0205765b47b73cce57851583b336cd310fb0ce772972fc18723a76156658b64bf35b50ccc6cfb10e919bd98ca39d977f8dcc14db819f0a41b481a82c580ae53e1ae6c886c899bf5efc0db22792d904280d6b3fc0090d2f0e7d1072f55e6a6c700ae3e10131db38d3171648ed2167636e98d81e59351a1940175b2b3209a59e014c5a6a18fb529806e452e6fe5459fcc44abd56edbef0ba645d5f896d20e97978e4b06aa42fee15dfacafb00b06f01a1c9ed2b7c1853879f655ee902e8f26ebff2fcef1ce6fa61c112bc57a0c70bef28a29d462b26c33ecef03d65a02c743e9c88557d4b0394a2f039cb7183c93e9b9799e0bcdf8416a8f146159dcbd159cc33659b9fa4be58de743771e3ddb92cbcb19f149525c21b2b8054161446451d12b471603267dd7e603d9515c3257b51d24c568923ae1c511cebe35466525643701d48647fde8fb3a5651f981a70ca08393be98aaa2b8cb60aa8c18ea78a13eee43100bd533e312971c54879a805726b1a05bbd19fa00f5e50ad650ccc744373a18804c1b9c820e7c35981fc36cf9eeeeed58cc18eaf167a3dc6cecfd5f2bcd9c5e3822419cf7fd0b5b443316f3a8b27b386367547af73b2f74040a974921213e5844e57367b3e42e38c8ebb1ae4c857c9af4c48a6091c4dce7503cc6113cde0672fe0958c02ef01468c1a1d056a9990393e67e2642fa3b91edcf7b5cc245b65f21e5b5f6ecf0cb6d8416357b5889c4aa715e7de2505012016676473adef5d7318e586fdc531051b0e8bbedbe761bb3026e7159150d4fd1e273f0ca4b3a1ed1fc4e51f9295a3a6eba21870824451afc95dbef8683160516e09c4a33e2ffe32cf5ce96c30f05e970072e01112d6e2bd80b1f52c0da4c5d560eb08e8efeafe6b0dcfc94b60ee5c0d0a7f39c7229586be2cebaa64c61f61e2219bee91ac8f0c504d42d083f959fb28b2701d87a9f24f204d1c46ca36101a6052c19d855a60b51121eec43464855abd374028b1a52856b8984acf11c04cc9dcefe6f502417e4b7f2247de64e2fa25be35ce2cca322c46595dbcbbcbc5f467f1fab79c5202a3e7793127b7797e9cb71e951719a7f2b67c836d07cc0b76cb771294463da05c6aae7afafaaa02c6fb0c0f72e12913bc1474eb3cabbb72cd18fc0433da0ec9248c13d5e9dcaf3c92dc5479a00e50fa8e287ce088b76ec5dc6219ca5fdcf82e0e5e15bb6c0cb35a981cffc92fe23146971bd92aff80ec0df156b269c280c70635592bffd04533555e75723435ae802eac1566403d4a26526f1efabd29e6529e3d74ebda3e4a341ed4a49f258786ab76bc1d591489892c5b2e14d6a1335b31ac3f24163e047e2d042d744133d2181a172d5fe3202b37aaa5c40494b90de4a5258e297bca6a105f80cb986db1903968e139111d2a5e07d49fe38210afec0c9cfc9034d9102f413edfe5857438b7aefacdc14d2f0f3cc76e3cc11e107a15d567c31c84d88068f1462331f209ca0610d4f8bb31330634aa36e2b8c00759cde7f4f584dfe265525c9c40fedff7fd5abff41bde9f25a41f284491a0b2800d887d0616b6a283d2e29702be24ab7ed092a1404fe386fa605281e4918fad2e1fdf8746a4f476695c33d507d9d3326bdd784e4fa2ed97045c26b75ac4a63372906b74bb34d25df286052269b8e812c5d66f4256e4d28f14b527fd429c4044f60d2f5c39e9a6ba50186172e56d5b8cbbe714137c448311e1a6f009aa2aa8e349b22eeb00f9f22bbae0eff4731b841011af3847abc7cb14e798b6148525a02d7a9f4d7edb056045615a7d2e8bcdf9debad31ff99446eeef55263c761b64e00fe5d70a5524553e865e50fe00fbc2b22bdb47ba4e970ceb734d60db380316600bcef9a0fb131666f6a0554e130f19ecde7e4d27eaa22711db3940120e28524566d1e2a4e71206bfb60856dbd6a1b32e57d11524a214f8cd3335e0eaae928989abbe0316d0419cba9201f55afc84bb8c9bac910108ab02c96961a607ff57c4f2cf369fb77717642f017cfe28c5e3eda10aad12aecc6f395d5f3e7b3d73e8362b01ed15a357606542f83a80b1db47dab9400e25ff5092c0f58fd55f995d80e6c41de67e67eb29a1adaf11c1ec236f08a02b278f50bf19ad1f586bf82b1646e22a8edd4b859ad5d93ca6ef15e2ea2369ca4f530225e8f58722b959fad3a989b9e2c07ffe3e4195c37b051d69a4597a38e93143c7ef146c51a511a6898898a6cfd756d4d92c5f741536573db7813ac8ceaeddbd5f3309dc5c2774210e6d12b2e2abfd8e6a49b4d7425bfafb688140ee0dd7c99f8991afb4d343eeb5352e3a0362d13ec1f6ea8c65318d95c39ee220d1d47b8375c423ebc90ccded98369f81ef3d8b93e57a88f5fe3fe2abceb3f2944056a4facc914fab92e5f344b58c166d5794a03118359fa4d325ebe122111230221cd1a9d27fc6f3a753fc3d589d02a67cd787d75fedad360587475edc1924913754192feb6ecca78e0748b1fb387"}}) 1m24.081559057s ago: executing program 1 (id=78): gettid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa) 1m23.928402971s ago: executing program 1 (id=82): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') 1m23.822897123s ago: executing program 1 (id=86): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x1, 0x0, 0x0) 1m23.468850792s ago: executing program 1 (id=90): syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1m23.443826943s ago: executing program 32 (id=90): syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1m18.637226015s ago: executing program 0 (id=130): socket(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') socket(0xa, 0x3, 0xff) socket(0xa, 0x3, 0xff) preadv(r0, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, 0xffffffc0, 0x10000) 1m18.44396216s ago: executing program 0 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='non_existent_event:mod:syz_mod_123\n', 0x23) write(r0, &(0x7f0000000400)='!non_existent_event:mod:syz_mod_123\n', 0x24) 1m18.173504886s ago: executing program 0 (id=138): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x54}}, 0x0) 1m17.919292963s ago: executing program 0 (id=141): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x1, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000000)='./file0/file0\x00', 0x4) 1m17.775219536s ago: executing program 0 (id=143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000f00)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970003382c00fe800000000000000000000000f1ffaaff02000000000000000000000000000167"], 0xfdef) 1m17.080714964s ago: executing program 0 (id=146): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000300)={0x0, 0x7f, 0x6, &(0x7f00000002c0)={0x10, "dbe59aa96be76f16b24f7fa82127993690ff06d3586655d666db04ee3f6df95bc9"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m16.734565683s ago: executing program 33 (id=146): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000300)={0x0, 0x7f, 0x6, &(0x7f00000002c0)={0x10, "dbe59aa96be76f16b24f7fa82127993690ff06d3586655d666db04ee3f6df95bc9"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.881675547s ago: executing program 4 (id=730): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES64=0x0], 0x1, 0x374, &(0x7f0000000f80)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00005ec000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180be7dce33e558413724c328fb0d50000000000000000000000000002000000000d0000ed0000000700000000000000000000000d00000000002e305f2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) 2.680496571s ago: executing program 4 (id=737): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0xe24, 0x4) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2.561845235s ago: executing program 3 (id=739): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 2.488599656s ago: executing program 4 (id=740): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180be7dce33e558413724c328fb0d50000000000000000000000000002000000000d0000ed0000000700000000000000000000000d00000000002e305f2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x281c2, 0x0) 2.115186776s ago: executing program 3 (id=744): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x8, 0x8, 0xffff, 0xfffffffd}, 0x14) 1.93729575s ago: executing program 3 (id=745): openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x28000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x1a}) 1.887400912s ago: executing program 4 (id=748): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000700), 0x1, 0x51a, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[]) 1.779083344s ago: executing program 3 (id=749): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 1.644650778s ago: executing program 3 (id=751): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x2, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x3, 0x8, 0x0, 0x100, 0x9, 0xffffffff, 0x3, 0x0, 0x7fff, 0x8000, 0x3a, 0x7, 0x3, 0x8, 0x1, 0x6, 0x2, 0x5, 0xfffffff9, 0x9, 0x3c96, 0x5, 0x8, 0x404, 0x7fff, 0x3, 0x3, 0x6, 0x1ff, 0x6, 0x0, 0x2, 0x74ba, 0x40, 0x35e, 0x6, 0x8000c, 0x6, 0x6, 0x5, 0x3, 0x3, 0x0, 0xc66, 0x7fff, 0xc9, 0xb, 0x1, 0x0, 0x80000000, 0x1, 0x4d, 0x29da, 0x2, 0xfc, 0x3, 0x3, 0x800, 0xc, 0x8, 0x2, 0xd, 0x5, 0x400, 0xc, 0x0, 0xfff, 0x1, 0x7, 0x7, 0x2, 0xbce6, 0x1, 0x4, 0x9, 0x79, 0xfffff801, 0x6, 0x4, 0x10001, 0x9, 0xffff, 0x94, 0x80, 0xc8, 0x5f72, 0x80000000, 0x5, 0x3, 0x4b1, 0xc, 0x1, 0xeac, 0xf85, 0x373, 0x0, 0x3, 0x7fff, 0x9, 0x5, 0x20009, 0x3, 0x6, 0x1ff, 0x1ff, 0xc, 0x0, 0x8, 0x80000000, 0x6, 0x8, 0x39, 0xa, 0x0, 0x401, 0x14e, 0x9, 0x40, 0x80, 0x3, 0xd4, 0x800, 0x23, 0x6, 0x9, 0x3a9, 0xfc7, 0xd, 0x0, 0x80000001, 0x9, 0x6, 0x2, 0xffffb6d4, 0x8, 0x100, 0x7, 0x3e0000, 0x0, 0x401, 0x7, 0x100, 0x80000000, 0x4, 0x7, 0x3, 0xcf800, 0x2b9c, 0x21000, 0xfffffff8, 0x3, 0xffffd848, 0x4, 0x10, 0x0, 0x0, 0x4, 0x402, 0xaf2, 0x3, 0x6ea, 0x4004, 0x1, 0xc81, 0x9, 0x7, 0x5653, 0xffffffff, 0x6, 0x5, 0x7, 0x10000, 0x7, 0x95, 0x10001, 0x7, 0x5248, 0x6, 0xe08b, 0x5, 0x7ff, 0xce, 0x5, 0x0, 0x9, 0x1000, 0x4, 0x0, 0x3, 0x4, 0xc, 0x3fed, 0x5, 0x50ce, 0x3, 0x9, 0x6, 0x8, 0x5, 0xfffffff7, 0x2, 0x1ff, 0x200, 0x3, 0x8, 0x10, 0x6, 0xa4, 0x5, 0xffffffff, 0xd65e, 0x7, 0x84, 0x2, 0x200, 0x8, 0xb56, 0x10000005, 0x7, 0xe, 0x800d523, 0x80, 0x1, 0x7, 0x9, 0xfffffff5, 0x0, 0x2, 0x7fff, 0x9a, 0x2, 0x800, 0x0, 0x1, 0x5, 0xfffffffe, 0x5, 0xffffffc0, 0x5ea, 0x800, 0x6d6ae3f8, 0x80000000, 0xc, 0x1, 0x1000, 0x8, 0x3, 0x8020000, 0x5, 0x6, 0xfffffffe, 0x71, 0x8001, 0x0, 0x1, 0xd2f3]}, @TCA_TBF_PTAB={0x404, 0x3, [0x9, 0x80000001, 0x0, 0x5, 0x4, 0xe458, 0x1, 0x7fff, 0x3, 0x2, 0x1, 0x8, 0xe6, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x69, 0x3, 0x94, 0x3, 0x2, 0x200, 0x4, 0x3, 0x3d78, 0xd, 0xffffffff, 0x3, 0x3, 0x3, 0x6, 0x5, 0x6, 0x2, 0x8, 0x9c, 0xfffff84f, 0x7, 0xfffffffe, 0xfffffff8, 0x0, 0x6, 0x9, 0x9527, 0x58d6, 0x8, 0x101, 0x302, 0x9, 0xd, 0x1007, 0x5, 0x296, 0x4, 0x7, 0x0, 0x592b3cb6, 0x2531, 0x4, 0xc, 0x201c, 0x2, 0x3, 0x5, 0x4, 0x7, 0xffffffff, 0x0, 0x8, 0xd4, 0x9, 0x3, 0x7, 0xfffffffe, 0x2, 0x8242, 0x75ebf8d8, 0x1ff8e0, 0xd, 0x0, 0xc, 0x47efe37, 0x7, 0x4, 0x2, 0x5, 0xac25, 0x7, 0x9, 0x7, 0x5, 0x800000, 0xe73, 0xc4, 0x3, 0x6, 0x6, 0x9, 0x9, 0xffffffff, 0x3, 0x2, 0xa, 0xf1b5, 0x418, 0x2, 0x7ff, 0x9, 0x7fff, 0x5, 0x1, 0x7f, 0x1, 0x8, 0x0, 0x401, 0x8, 0x6, 0x401, 0x3, 0x8, 0xfffffff9, 0x1000000, 0xc323aa4f, 0x81, 0x4, 0x8, 0x4, 0x7f0, 0x400, 0x1, 0x80, 0xffffffff, 0x0, 0x5, 0x200, 0x800, 0x2, 0xc, 0x2, 0xfffffff5, 0xffffff01, 0x5, 0xfffffffd, 0x5d99, 0xffffff81, 0x2, 0x3, 0x4, 0x6, 0x2, 0xf, 0x9b7, 0x100, 0x80000001, 0x5, 0x5, 0x7, 0x4, 0x7, 0x7fffffff, 0x2, 0x2, 0x8, 0x2, 0x5dbe, 0x9, 0x1, 0x42, 0xfffffeff, 0x7, 0xfff, 0x8, 0x0, 0x6, 0xdaf, 0x80000001, 0x8000, 0x9, 0x101, 0x2, 0xe0f, 0x1, 0x40, 0x2, 0xbaef, 0x4, 0x2, 0x7, 0xc, 0x800, 0xffff, 0x3, 0x13c, 0x5, 0x8, 0x4, 0x1, 0x461, 0x7fffffff, 0x3, 0x7ff, 0xda5fbaf3, 0xd, 0x10, 0x6, 0x1, 0x81, 0xffffff49, 0x5c, 0x1, 0x9000000, 0x797, 0x40, 0x1ff, 0x2, 0x290, 0x2, 0xfff, 0x7, 0x0, 0x100, 0x4, 0x2, 0x200, 0x4, 0x5, 0x5, 0xfff, 0x1, 0x7, 0x401, 0x8, 0x6edf, 0x0, 0x1, 0x7fffffff, 0x2, 0x763, 0xfffffffd, 0xff, 0x949, 0x0, 0x4, 0xe7, 0x80, 0x5, 0x180000, 0x8, 0x9, 0x7f, 0xfffffffc, 0x0, 0xfffffff7]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 1.624551248s ago: executing program 5 (id=753): r0 = memfd_create(&(0x7f00000013c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000001840)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400cc00}, 0x0) 744.68333ms ago: executing program 5 (id=762): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x0, 0x198, 0x198, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16]}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 744.477081ms ago: executing program 2 (id=763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4004743b, &(0x7f0000000180)) 715.288781ms ago: executing program 6 (id=764): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 634.715093ms ago: executing program 5 (id=765): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x43, 0x495, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 500.860496ms ago: executing program 4 (id=766): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0xe2601, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 384.17997ms ago: executing program 2 (id=767): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000f59ffc)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x22}, 0x1c) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast2, 0x3}, 0x1c) 371.50528ms ago: executing program 5 (id=768): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000f800000000000000fb1506"], 0x200000) 250.954773ms ago: executing program 6 (id=769): openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x191000, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000640), 0x2008000, 0x0) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2e3, &(0x7f0000000800)="$eJzs3UFPE00cx/Hf7Ja2PPDw7CMYE+PBoERPRvBivDQxxNfgRSPSmhAaiIiJcrHxbHwB3rn4AnwRxoMx8YwnT74AbmtmO2Wn7W5LQbog309S2t2d2fnP7rY7/6XNCsC5dX95b/fOT/swUqhQ0j0psIuuqiTpoi5VX25sr203G/VBKwqlqpKHkZKapq/M6kYjq6qtl9RwIjtV0rQ/DycjjuP4R9FBoEhV9xxmLQykint3hn7h06zSMz3RM90KpdYY4zmNzL729UozRccBACiWaZ/fA3een3bj9yCQFtxp3z//f/+34HiP54b2iw6hYN75P8myYmP373/JojTfM5p05TtZ4qjt2LFYWe0jq2uAabqzyv5kMYklmHy21mzcWt1s1gO9VS1h/LxwTlJNdZezZkXbv+r5jHndyv7E3rDSuaaSPkzYPiyl8ddqXpHZrEaPurUPw3w2X81jE+mD6gfjv1Js/D67PfVgIo3/dt7qNp8/ss9Ru1ROL/+3u6F0uXvDDuxlmJeRyG2pOFT3BYKoO85yZq2yemq1e7eY15Jbz2xmraUhteZsrY9erfRozq950sx789DM65c+adkb/wd2ay+o/52ZvZKkpDsyBvanlJSM/FmtK5klg9H7ghGl2/idnuquZl683llfaTYbW+N+YWMYe6Pn80Wk3jmdg+C0RHi0F/Yz1p+jqLFVGk/r5WNvuqrbKXYw01+msrO+UvELt3vaOSH2rrDztj5E650LeEMjHOOnEgqT7vT8Mm/Ef2L+YvbDw7TzP5evTNlRXZL02D/RgHF6PGzY5mVAixm5QXqp/h9vTcZdn8/PgKYyM7iWDpdzJXWv3ZSuezP3diuDcq5IF3SQDZ99Zlnf9ITr/wAAAAAAAAAAAAAAAAAAAGdN37f/v0y3F/zB30t4zfE9cgAAAAAAAAAAAAAAAAAAAAAAjiD//r9VneD9f9PfAUyOcP/f3ht7AjiW3wEAAP//zmlk6Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000080)='\v', 0x1, 0x9000) 243.529253ms ago: executing program 2 (id=770): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000980), 0x0, 0x2, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000240)={0x1, r2, r3}) 186.532035ms ago: executing program 4 (id=771): r0 = memfd_create(&(0x7f00000013c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 306.749µs ago: executing program 6 (id=774): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000005c0)={0xfffffffa, 0x1, 0x0, 'queue0\x00', 0x5}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xff95}], 0x1) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) 0s ago: executing program 2 (id=775): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x1002, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000440)=[@increfs], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): sim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.058031][ T4770] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 88.130066][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.147280][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.189105][ T4770] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 88.196273][ T4770] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 88.219845][ T4769] hfsplus: xattr searching failed [ 88.226599][ T4770] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 88.255270][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.296433][ T4769] hfsplus: xattr search failed [ 88.326348][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.347405][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.379068][ T4769] hfsplus: unknown catalog record type 0 [ 88.399907][ T4769] hfsplus: unknown catalog record type 0 [ 88.435761][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.516125][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.528755][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.550621][ T671] hfsplus: unknown catalog record type 0 [ 88.626453][ T671] hfsplus: unknown catalog record type 0 [ 88.638751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.652543][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.688347][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.697348][ T4721] device hsr_slave_0 entered promiscuous mode [ 88.735749][ T4721] device hsr_slave_1 entered promiscuous mode [ 88.781949][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.286372][ T4238] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.395739][ T4238] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.527786][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 89.537277][ T4238] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.620852][ T4815] loop3: detected capacity change from 0 to 256 [ 89.650885][ T4238] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.668100][ T4815] exfat: Deprecated parameter 'utf8' [ 89.686241][ T4815] exfat: Deprecated parameter 'namecase' [ 89.708260][ T4815] exfat: Deprecated parameter 'namecase' [ 89.789510][ T4815] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 89.917351][ T4721] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 89.976202][ T4721] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 90.019373][ T4721] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 90.053072][ T4721] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 90.175400][ T26] audit: type=1800 audit(1786105117.842:4): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.176" name="report_length" dev="configfs" ino=35335 res=0 errno=0 [ 90.393809][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.435277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.456700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.479810][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.506115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.522768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.535973][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.543126][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.593842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.605093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.628996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.631696][ T4841] loop5: detected capacity change from 0 to 256 [ 90.648407][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.655485][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.670384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.683866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.716276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.752305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.769592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.787463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.812170][ T4841] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 90.831048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.881582][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.904291][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.953183][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.967453][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.986536][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.166348][ T4851] loop5: detected capacity change from 0 to 512 [ 91.274747][ T4238] device hsr_slave_0 left promiscuous mode [ 91.357607][ T4238] device hsr_slave_1 left promiscuous mode [ 91.386137][ T4238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.410674][ T4238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.418193][ T4229] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.443864][ T4238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.457704][ T4238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.474498][ T4238] device bridge_slave_1 left promiscuous mode [ 91.506505][ T4238] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.539405][ T4238] device bridge_slave_0 left promiscuous mode [ 91.545676][ T4238] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.568721][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 91.595505][ T4238] device veth1_macvtap left promiscuous mode [ 91.628519][ T4238] device veth0_macvtap left promiscuous mode [ 91.634638][ T4238] device veth1_vlan left promiscuous mode [ 91.657216][ T4238] device veth0_vlan left promiscuous mode [ 91.824440][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.842666][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.858136][ T4229] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.887240][ T4229] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.914862][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.952562][ T4229] usb 4-1: config 0 descriptor?? [ 92.067648][ T4231] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 92.107185][ T4238] team0 (unregistering): Port device team_slave_1 removed [ 92.124883][ T4238] team0 (unregistering): Port device team_slave_0 removed [ 92.139445][ T4238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.155910][ T4238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.230872][ T4238] bond0 (unregistering): Released all slaves [ 92.303967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.316312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.345823][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.437923][ T4231] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 92.449529][ T4229] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 92.466731][ T4229] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 92.467887][ T4231] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 92.506077][ T4231] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 92.510711][ T4229] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 92.658029][ T4231] usb 6-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 92.713808][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 92.731334][ T4231] usb 6-1: Product: syz [ 92.742127][ T4231] usb 6-1: Manufacturer: syz [ 92.759958][ T1325] usb 4-1: USB disconnect, device number 4 [ 92.787857][ T4871] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 92.817459][ T4231] usb_debug 6-1:1.0: debug converter detected [ 92.840163][ T4231] usb 6-1: debug converter now attached to ttyUSB0 [ 92.917720][ T4340] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 92.948803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.968789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.038186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.058885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.075459][ T4871] debug ttyUSB0: usb_serial_generic_write_start - error submitting urb: -90 [ 93.100745][ T4721] device veth0_vlan entered promiscuous mode [ 93.111847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.112135][ T4904] loop4: detected capacity change from 0 to 4096 [ 93.124652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.162644][ T4721] device veth1_vlan entered promiscuous mode [ 93.189275][ T4230] usb 6-1: USB disconnect, device number 2 [ 93.210949][ T4230] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 93.236867][ T4904] NILFS (loop4): invalid segment: Checksum error in segment payload [ 93.239423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.259079][ T4230] usb_debug 6-1:1.0: device disconnected [ 93.289813][ T4340] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.307647][ T4904] NILFS (loop4): trying rollback from an earlier position [ 93.316006][ T4340] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.334902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.359853][ T4340] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.378382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.417415][ T4904] NILFS (loop4): recovery complete [ 93.433204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.436825][ T4912] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.494379][ T4721] device veth0_macvtap entered promiscuous mode [ 93.546078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.548158][ T4340] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 93.574318][ T4721] device veth1_macvtap entered promiscuous mode [ 93.587091][ T4340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 93.626226][ T4340] usb 3-1: Product: syz [ 93.646527][ T4340] usb 3-1: Manufacturer: syz [ 93.653368][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.664273][ T1325] Bluetooth: hci2: command 0x0419 tx timeout [ 93.667247][ T4340] usb 3-1: SerialNumber: syz [ 93.701580][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.727764][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.740454][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.750879][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.761537][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.771459][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.782692][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.795640][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.812485][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.895722][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.049596][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.061562][ T4924] loop3: detected capacity change from 0 to 256 [ 94.154938][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.167746][ T4924] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 94.210438][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.287606][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.347552][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.399037][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.420665][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.468021][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.492776][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.542273][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.561925][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.592874][ T4721] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.687363][ T4721] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.747475][ T4721] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.796763][ T4721] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.831648][ T4921] loop5: detected capacity change from 0 to 131072 [ 94.852510][ T4340] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 94.865604][ T4340] usb 3-1: USB disconnect, device number 5 [ 94.875364][ T4340] usblp0: removed [ 94.913509][ T4921] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 94.921937][ T4921] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 94.934682][ T4921] F2FS-fs (loop5): invalid crc value [ 95.006821][ T4921] F2FS-fs (loop5): Found nat_bits in checkpoint [ 95.086754][ T4934] loop4: detected capacity change from 0 to 1024 [ 95.109885][ T4934] EXT4-fs (loop4): Ignoring removed bh option [ 95.119964][ T4921] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 95.127185][ T4921] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 95.212017][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.237665][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.266792][ T4934] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 95.349506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.428713][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.485753][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.602913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.947768][ T4340] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 96.187664][ T4340] usb 3-1: Using ep0 maxpacket: 16 [ 96.348194][ T4340] usb 3-1: unable to get BOS descriptor or descriptor too short [ 96.432278][ T4340] usb 3-1: config 1 has an invalid interface number: 206 but max is 0 [ 96.451206][ T4340] usb 3-1: config 1 has no interface number 0 [ 96.600124][ T4951] loop3: detected capacity change from 0 to 32768 [ 96.619384][ T4340] usb 3-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 96.637942][ T4340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.666382][ T4340] usb 3-1: Product: syz [ 96.716257][ T4340] usb 3-1: Manufacturer: syz [ 96.751908][ T4340] usb 3-1: SerialNumber: syz [ 96.798789][ T4951] XFS (loop3): Mounting V5 Filesystem [ 96.900290][ T4951] XFS (loop3): Ending clean mount [ 96.930310][ T4951] XFS (loop3): User initiated shutdown received. [ 96.947285][ T4951] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 96.991965][ T4951] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 97.113380][ T4190] XFS (loop3): Unmounting Filesystem [ 97.174678][ T4340] usb 3-1: USB disconnect, device number 6 [ 97.257940][ T4998] loop6: detected capacity change from 0 to 64 [ 97.394509][ T5002] loop5: detected capacity change from 0 to 1024 [ 97.426537][ T26] audit: type=1800 audit(1786105125.092:5): pid=4998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.210" name="file1" dev="loop6" ino=21 res=0 errno=0 [ 97.524956][ T5002] hfsplus: request for non-existent node 3 in B*Tree [ 97.553989][ T5002] hfsplus: request for non-existent node 3 in B*Tree [ 97.577601][ T5002] hfsplus: invalid length 28418 has been corrected to 255 [ 97.623092][ T5002] hfsplus: invalid length 28418 has been corrected to 255 [ 97.659523][ T4721] hfs: node 4:3 still has 1 user(s)! [ 97.748451][ T5010] loop4: detected capacity change from 0 to 128 [ 97.769828][ T5007] loop2: detected capacity change from 0 to 1024 [ 97.800567][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.211'. [ 97.952250][ T5016] hfsplus: xattr search failed [ 98.001396][ T5020] loop6: detected capacity change from 0 to 128 [ 98.125811][ T5022] loop5: detected capacity change from 0 to 128 [ 98.152217][ T5020] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 98.184561][ T5020] hpfs: filesystem error: improperly stopped [ 98.191008][ T5020] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 98.199154][ T5020] hpfs: You really don't want any checks? You are crazy... [ 98.239364][ T5020] hpfs: Code page index out of array [ 98.265999][ T5020] hpfs: code page support is disabled [ 98.323453][ T5020] hpfs: hpfs_map_4sectors(): unaligned read [ 98.363609][ T5020] hpfs: hpfs_map_4sectors(): unaligned read [ 98.394578][ T5020] hpfs: filesystem error: unable to find root dir [ 98.912713][ T5041] loop5: detected capacity change from 0 to 8192 [ 98.996753][ T5041] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 99.055240][ T5041] REISERFS (device loop5): using ordered data mode [ 99.061922][ T5041] reiserfs: using flush barriers [ 99.116337][ T1325] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 99.173961][ T5063] loop2: detected capacity change from 0 to 2048 [ 99.186489][ T5041] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.218456][ T1325] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.241585][ T5041] REISERFS (device loop5): checking transaction log (loop5) [ 99.275199][ T5041] REISERFS (device loop5): Using r5 hash to sort names [ 99.314985][ T5063] UDF-fs: error (device loop2): udf_read_tagged: block 97: CRC length 511 exceeds block size [ 99.332415][ T5041] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 99.373293][ T5063] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2) [ 99.579705][ T5076] fido_id[5076]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 100.055416][ T5096] sctp: [Deprecated]: syz.5.237 (pid 5096) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.055416][ T5096] Use struct sctp_sack_info instead [ 100.295702][ T5068] loop3: detected capacity change from 0 to 32768 [ 100.423379][ T5068] XFS (loop3): Mounting V5 Filesystem [ 100.587366][ T5123] loop6: detected capacity change from 0 to 64 [ 100.598623][ T5068] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 100.621339][ T4233] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 100.661347][ T5068] XFS (loop3): Starting recovery (logdev: internal) [ 100.723493][ T5068] XFS (loop3): Ending recovery (logdev: internal) [ 100.750063][ T26] audit: type=1800 audit(1786105128.422:6): pid=5123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.245" name="file2" dev="loop6" ino=6 res=0 errno=0 [ 100.777649][ T13] Bluetooth: hci2: command 0x0411 tx timeout [ 100.869376][ T5068] XFS (loop3): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8 [ 100.916580][ T5101] loop4: detected capacity change from 0 to 40427 [ 100.937992][ T5068] XFS (loop3): Unmount and run xfs_repair [ 101.012969][ T5101] F2FS-fs (loop4): invalid crc value [ 101.080401][ T4233] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 101.098529][ T5068] XFS (loop3): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 101.101845][ T4233] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 101.122960][ T5101] F2FS-fs (loop4): Found nat_bits in checkpoint [ 101.208277][ T5068] XFS (loop3): Unmount and run xfs_repair [ 101.209222][ T4233] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 101.214045][ T5068] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 101.276543][ T5142] loop6: detected capacity change from 0 to 1024 [ 101.321410][ T5146] mmap: syz.5.250 (5146) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 101.350251][ T5068] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 101.365975][ T5101] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 101.373756][ T5068] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 101.433792][ T5068] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 101.438400][ T4233] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.467982][ T5068] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 101.490864][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.499510][ T5068] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 101.525564][ T4233] usb 3-1: Product: syz [ 101.539528][ T4233] usb 3-1: Manufacturer: syz [ 101.547655][ T5068] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 101.555541][ T4233] usb 3-1: SerialNumber: syz [ 101.556558][ T5068] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 101.581277][ T5068] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 101.593149][ T5068] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117 [ 101.654471][ T4186] attempt to access beyond end of device [ 101.654471][ T4186] loop4: rw=2049, want=45104, limit=40427 [ 101.668101][ T4233] cdc_mbim 3-1:1.0: skipping garbage [ 101.734918][ T4190] XFS (loop3): Unmounting Filesystem [ 101.758237][ T5119] XFS (loop3): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 101.797848][ T5119] XFS (loop3): Unmount and run xfs_repair [ 101.813851][ T5119] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 101.854463][ T5119] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 101.872320][ T5108] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 101.907617][ T5119] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 101.916509][ T5119] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 101.941899][ T5108] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 101.969243][ T5119] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 101.994161][ T5119] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 102.022275][ T5119] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 102.051290][ T5119] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 102.067960][ T5119] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 102.076869][ T5119] XFS (loop3): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x32c/0x620 (fs/xfs/xfs_buf.c:1515). Shutting down filesystem. [ 102.097249][ T5119] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 102.490269][ T5174] loop4: detected capacity change from 0 to 8 [ 102.605835][ T5174] SQUASHFS error: zlib decompression failed, data probably corrupt [ 102.623550][ T5174] SQUASHFS error: Failed to read block 0x9b: -5 [ 102.631335][ T5174] SQUASHFS error: Unable to read metadata cache entry [99] [ 102.649316][ T5108] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.653746][ T5174] SQUASHFS error: Unable to read inode 0x127 [ 102.661960][ T5108] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.749567][ T5185] loop3: detected capacity change from 0 to 1024 [ 102.938711][ T4233] cdc_mbim 3-1:1.0: bind() failure [ 102.986912][ T4233] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 103.048730][ T4233] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 103.085659][ T4233] usbtest: probe of 3-1:1.1 failed with error -71 [ 103.107279][ T4233] usb 3-1: USB disconnect, device number 7 [ 103.344437][ T5213] loop3: detected capacity change from 0 to 128 [ 103.407312][ T4189] Bluetooth: hci5: unexpected event for opcode 0x1001 [ 103.426296][ T5218] loop6: detected capacity change from 0 to 16 [ 103.471402][ T5218] erofs: (device loop6): mounted with root inode @ nid 36. [ 103.840993][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 103.938886][ T5248] loop3: detected capacity change from 0 to 64 [ 103.964098][ T5250] loop4: detected capacity change from 0 to 512 [ 104.038227][ T5250] EXT4-fs (loop4): Ignoring removed orlov option [ 104.053863][ T5250] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 104.083355][ T5250] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.279: corrupted in-inode xattr [ 104.098284][ T5248] hfs: keylen 1794 too large [ 104.104079][ T5248] hfs: keylen 1794 too large [ 104.150768][ T5250] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.279: couldn't read orphan inode 15 (err -117) [ 104.166860][ T5248] hfs: keylen 1794 too large [ 104.172662][ T5250] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noinit_itable,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 104.237710][ T23] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 104.254325][ T23] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 104.272956][ T23] usb 3-1: config 1 interface 0 has no altsetting 0 [ 104.439351][ T23] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 104.453436][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.462545][ T23] usb 3-1: Product: syz [ 104.466921][ T23] usb 3-1: Manufacturer: syz [ 104.472070][ T5271] loop4: detected capacity change from 0 to 1024 [ 104.479362][ T23] usb 3-1: SerialNumber: syz [ 104.498146][ T5225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 104.505610][ T5225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 104.520119][ T5271] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 104.532638][ T5271] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 104.545794][ T5271] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.585477][ T5271] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 104.595620][ T5271] System zones: 0-1, 3-36 [ 104.602741][ T5271] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 104.709624][ T4233] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.108462][ T4233] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.117140][ T4233] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 105.152554][ T4233] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.173160][ T4233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 105.197794][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.199197][ T4233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 105.235070][ T5304] loop6: detected capacity change from 0 to 2048 [ 105.282208][ T5304] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,quota,auto_da_alloc,dioread_lock,barrier,data_err=ignore,minixdf,min_batch_time=0x0000000000000009,nombcache,bsddf,,errors=continue. Quota mode: writeback. [ 105.378841][ T4233] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.390368][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.398483][ T4233] usb 4-1: Product: syz [ 105.402678][ T4233] usb 4-1: Manufacturer: syz [ 105.460628][ T4233] cdc_wdm 4-1:1.0: skipping garbage [ 105.465207][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 105.465864][ T4233] cdc_wdm 4-1:1.0: skipping garbage [ 105.517446][ T4233] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 105.546186][ T4233] cdc_wdm 4-1:1.0: Unknown control protocol [ 105.597827][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.619782][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.657929][ T23] (unnamed net_device) (uninitialized): Assigned a random MAC address: 32:42:07:03:d9:f8 [ 105.726093][ T23] rtl8150 3-1:1.0: eth9: rtl8150 is detected [ 105.763809][ T23] usb 3-1: USB disconnect, device number 8 [ 105.797855][ T21] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.814294][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.822951][ T21] usb 5-1: Product: syz [ 105.827798][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 105.827822][ T21] usb 5-1: Manufacturer: syz [ 105.834688][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 105.842181][ T21] usb 5-1: SerialNumber: syz [ 105.857652][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 105.864268][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 105.875267][ T4230] usb 4-1: USB disconnect, device number 5 [ 105.887571][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 105.894198][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 105.900282][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 106.093664][ T5333] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.187854][ T21] usb 5-1: 0:2 : does not exist [ 106.254564][ T21] usb 5-1: USB disconnect, device number 2 [ 106.537368][ T5350] loop3: detected capacity change from 0 to 256 [ 106.597048][ T4293] udevd[4293]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.601434][ T5350] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.657599][ T5350] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 106.657755][ T4228] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 106.685704][ T5350] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 106.783512][ C0] blk_update_request: operation not supported error, dev loop3, sector 32 op 0x9:(WRITE_ZEROES) flags 0x800800 phys_seg 0 prio class 0 [ 106.988754][ T4228] usb 3-1: Using ep0 maxpacket: 16 [ 107.095748][ T5351] loop6: detected capacity change from 0 to 32768 [ 107.129154][ C1] sd 0:0:1:0: tag#1789 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 107.139184][ C1] sd 0:0:1:0: tag#1789 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 107.152041][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.187581][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.198635][ T5351] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.302 (5351) [ 107.247566][ T4228] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.291228][ T4228] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 107.307671][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.342808][ T4228] usb 3-1: config 0 descriptor?? [ 107.362019][ T5351] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 107.381443][ T5351] BTRFS info (device loop6): using free space tree [ 107.400646][ T5351] BTRFS info (device loop6): has skinny extents [ 107.500941][ T5358] loop4: detected capacity change from 0 to 32768 [ 107.532847][ T5358] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 107.550445][ T5358] JBD2: Ignoring recovery information on journal [ 107.648123][ T5351] BTRFS info (device loop6): enabling ssd optimizations [ 107.695531][ T5358] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 107.805271][ T5368] loop3: detected capacity change from 0 to 32768 [ 107.893284][ T5368] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 107.907281][ T4228] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 107.941840][ T4228] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 107.952815][ T5368] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 108.126522][ T4228] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 108.137872][ T5368] syz.3.306 (5368) used greatest stack depth: 18304 bytes left [ 108.165548][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 108.189575][ T4190] ocfs2: Unmounting device (7,3) on (node local) [ 108.197839][ T4228] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 108.236951][ T4228] microsoft 0003:045E:07DA.0006: no inputs found [ 108.265958][ T4228] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 108.335692][ T4228] usb 3-1: USB disconnect, device number 9 [ 108.489277][ T5404] fido_id[5404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 108.773364][ T5428] loop3: detected capacity change from 0 to 128 [ 108.847546][ T5428] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 108.897683][ T5428] hpfs: filesystem error: improperly stopped [ 108.903726][ T5428] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 108.985490][ T5428] hpfs: You really don't want any checks? You are crazy... [ 109.005228][ T5428] hpfs: Code page index out of array [ 109.011801][ T5428] hpfs: code page support is disabled [ 109.017432][ T5428] hpfs: hpfs_map_4sectors(): unaligned read [ 109.023751][ T5428] hpfs: hpfs_map_4sectors(): unaligned read [ 109.030054][ T5428] hpfs: filesystem error: unable to find root dir [ 109.079499][ T5428] hpfs: hpfs_map_4sectors(): unaligned read [ 109.398307][ T5452] loop4: detected capacity change from 0 to 1024 [ 109.452940][ T5452] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 109.464356][ T5452] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 109.474425][ T5452] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.508125][ T5452] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 109.523960][ T5452] System zones: 0-1, 3-36 [ 109.551892][ T5452] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 109.964706][ T5471] loop4: detected capacity change from 0 to 512 [ 110.004061][ T5471] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 110.014057][ T5471] System zones: 1-2, 4-12, 8-8 [ 110.027423][ T5471] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.326: iget: bad i_size value: 38620345925642 [ 110.046845][ T5471] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.326: couldn't read orphan inode 15 (err -117) [ 110.065269][ T5471] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,delalloc,data_err=ignore,debug,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 110.101257][ T5463] loop2: detected capacity change from 0 to 32768 [ 110.110874][ T5471] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.326: bg 0: block 5: invalid block bitmap [ 110.134119][ T5471] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 110.164411][ T5471] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.164411][ T5471] [ 110.180142][ T5471] EXT4-fs (loop4): Total free blocks count 0 [ 110.186349][ T5471] EXT4-fs (loop4): Free/Dirty block details [ 110.218351][ T5475] loop3: detected capacity change from 0 to 2048 [ 110.237271][ T5471] EXT4-fs (loop4): free_blocks=0 [ 110.258557][ T5471] EXT4-fs (loop4): dirty_blocks=2 [ 110.263948][ T5471] EXT4-fs (loop4): Block reservation details [ 110.271349][ T5471] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 110.278655][ T5475] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.308649][ T5463] XFS (loop2): Mounting V5 Filesystem [ 110.397715][ T5463] XFS (loop2): Ending clean mount [ 110.529132][ T4200] XFS (loop2): Unmounting Filesystem [ 110.589534][ T5493] loop6: detected capacity change from 0 to 256 [ 110.764815][ T5492] loop4: detected capacity change from 0 to 4096 [ 110.858711][ T5492] ntfs3: loop4: Failed to load $Extend. [ 110.985962][ T5492] ntfs3: loop4: ino=5, "/" directory corrupted [ 111.005840][ T5492] ntfs3: loop4: ino=5, "/" directory corrupted [ 111.109118][ T5509] netlink: 260 bytes leftover after parsing attributes in process `syz.3.337'. [ 111.810337][ T5536] loop2: detected capacity change from 0 to 1024 [ 112.067905][ T5517] loop6: detected capacity change from 0 to 131072 [ 112.139959][ T5517] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 112.148136][ T5517] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 112.160644][ T5517] F2FS-fs (loop6): invalid crc value [ 112.183245][ T5517] F2FS-fs (loop6): Found nat_bits in checkpoint [ 112.248783][ T5517] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 112.255841][ T5517] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 112.328659][ T5517] F2FS-fs (loop6): checksum invalid, nid = 7, ino_of_node = 7, a6222242 vs. 7c4dd4cf [ 112.373382][ T5517] F2FS-fs (loop6): checksum invalid, nid = 7, ino_of_node = 7, a6222242 vs. 7c4dd4cf [ 112.428340][ T5552] loop3: detected capacity change from 0 to 256 [ 112.459089][ T26] audit: type=1326 audit(1786105140.132:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.2.348" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7a6c580d9 code=0x0 [ 112.509657][ T5557] netlink: 1372 bytes leftover after parsing attributes in process `syz.4.350'. [ 112.532973][ T5552] FAT-fs (loop3): Directory bread(block 64) failed [ 112.558507][ T5552] FAT-fs (loop3): Directory bread(block 65) failed [ 112.583373][ T5552] FAT-fs (loop3): Directory bread(block 66) failed [ 112.607920][ T5552] FAT-fs (loop3): Directory bread(block 67) failed [ 112.614525][ T5552] FAT-fs (loop3): Directory bread(block 68) failed [ 112.641983][ T5552] FAT-fs (loop3): Directory bread(block 69) failed [ 112.668334][ T5552] FAT-fs (loop3): Directory bread(block 70) failed [ 112.674883][ T5552] FAT-fs (loop3): Directory bread(block 71) failed [ 112.688138][ T5552] FAT-fs (loop3): Directory bread(block 72) failed [ 112.694691][ T5552] FAT-fs (loop3): Directory bread(block 73) failed [ 112.722920][ T5561] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 113.391271][ T5573] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0 [ 113.852912][ T5585] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0x7cda66ab, 0x7bbbea8c expected [ 113.885179][ T4293] udevd[4293]: incorrect erofs checksum on /dev/loop4 [ 113.897582][ T21] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 114.043063][ T5421] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 114.109813][ T5601] set_capacity_and_notify: 3 callbacks suppressed [ 114.109827][ T5601] loop5: detected capacity change from 0 to 128 [ 114.192642][ T5603] loop4: detected capacity change from 0 to 1024 [ 114.217875][ T5422] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.267261][ T5603] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.278444][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 114.288498][ T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 114.299271][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 114.303239][ T5603] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.309611][ T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 114.322436][ T5421] usb 7-1: Using ep0 maxpacket: 16 [ 114.370445][ T5603] EXT4-fs (loop4): shut down requested (2) [ 114.488004][ T21] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 114.501655][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.519284][ T21] usb 3-1: Product: syz [ 114.530020][ T21] usb 3-1: Manufacturer: syz [ 114.543918][ T21] usb 3-1: SerialNumber: syz [ 114.551512][ T21] usb 3-1: config 0 descriptor?? [ 114.589195][ T21] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 114.609374][ T5614] loop4: detected capacity change from 0 to 2048 [ 114.627711][ T5422] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.646492][ T5422] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.656486][ T5422] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 114.666240][ T5422] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.679398][ T5421] usb 7-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 114.688568][ T5422] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 114.698013][ T5421] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.703905][ T5617] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.707588][ T5422] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.724727][ T5421] usb 7-1: Product: syz [ 114.728977][ T5421] usb 7-1: Manufacturer: syz [ 114.733591][ T5421] usb 7-1: SerialNumber: syz [ 114.746414][ T5421] usb 7-1: config 0 descriptor?? [ 114.757147][ T26] audit: type=1800 audit(1786105142.422:8): pid=5614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.372" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 114.800588][ T5421] gspca_main: spca508-2.14.0 probing 041e:4018 [ 114.836988][ T21] scsi host1: usb-storage 3-1:0.0 [ 114.868933][ T21] usb 3-1: USB disconnect, device number 10 [ 115.017834][ T5421] gspca_spca508: reg_read err -32 [ 115.052967][ T5622] netlink: 236 bytes leftover after parsing attributes in process `syz.4.374'. [ 115.077889][ T5421] gspca_spca508: reg_read err -32 [ 115.133644][ T5421] gspca_spca508: reg_read err -32 [ 115.397642][ T5421] gspca_spca508: reg_read err -71 [ 115.408343][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.417665][ T5421] gspca_spca508: reg write: error -71 [ 115.423122][ T5421] spca508: probe of 7-1:0.0 failed with error -71 [ 115.447783][ T5421] usb 7-1: USB disconnect, device number 2 [ 115.657953][ T5422] gud 4-1:1.0: Failed to get connectors (error=-5) [ 115.672599][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 115.675020][ T5422] gud: probe of 4-1:1.0 failed with error -5 [ 115.820759][ T5650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 115.830869][ T23] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 115.847609][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.863917][ T23] usb 5-1: config 0 descriptor?? [ 115.909859][ T23] gspca_main: sq930x-2.14.0 probing 041e:403c [ 115.930972][ T5650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 115.947999][ T5422] usb 4-1: USB disconnect, device number 6 [ 116.485408][ T5685] loop2: detected capacity change from 0 to 128 [ 116.578398][ T5691] loop6: detected capacity change from 0 to 8 [ 116.977694][ T23] gspca_sq930x: ucbus_write failed -71 [ 116.983586][ T23] sq930x: probe of 5-1:0.0 failed with error -71 [ 117.000568][ T23] usb 5-1: USB disconnect, device number 3 [ 117.107190][ T5712] smpboot: CPU 1 is now offline [ 117.129535][ T4340] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 117.253873][ T5715] x86: Booting SMP configuration: [ 117.282937][ T5715] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 117.349923][ T0] kvm-clock: cpu 1, msr f103041, secondary cpu clock [ 117.371564][ T18] kvm-guest: stealtime: cpu 1, msr b9127440 [ 117.377691][ T4340] usb 6-1: Using ep0 maxpacket: 16 [ 117.527895][ T4340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.559800][ T4340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.581810][ T4340] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.624477][ T4340] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.652439][ T4340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.690073][ T4340] usb 6-1: config 0 descriptor?? [ 117.945935][ T5742] loop4: detected capacity change from 0 to 256 [ 117.956765][ T5710] loop2: detected capacity change from 0 to 40427 [ 118.044442][ T5710] F2FS-fs (loop2): Wrong segment_count / block_count (64 > 16384) [ 118.066705][ T5710] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 118.182298][ T4340] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0007/input/input10 [ 118.237637][ T5710] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.259084][ T5755] loop6: detected capacity change from 0 to 512 [ 118.325747][ T4340] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 118.469068][ T5710] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 118.486939][ T5424] usb 6-1: USB disconnect, device number 3 [ 118.527108][ T5710] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 118.561458][ T5755] EXT4-fs (loop6): 1 truncate cleaned up [ 118.567137][ T5755] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 118.677224][ T5768] fido_id[5768]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 118.735036][ T4340] kernel read not supported for file /video9 (pid: 4340 comm: kworker/1:6) [ 118.775352][ T5724] loop3: detected capacity change from 0 to 32768 [ 118.821258][ T5710] attempt to access beyond end of device [ 118.821258][ T5710] loop2: rw=2049, want=45112, limit=40427 [ 118.903959][ T5710] attempt to access beyond end of device [ 118.903959][ T5710] loop2: rw=0, want=45112, limit=40427 [ 119.062188][ T5782] netlink: 188 bytes leftover after parsing attributes in process `syz.6.415'. [ 119.083302][ T5724] XFS (loop3): Mounting V5 Filesystem [ 119.224212][ T4200] attempt to access beyond end of device [ 119.224212][ T4200] loop2: rw=2049, want=45120, limit=40427 [ 119.257749][ T5724] XFS (loop3): Ending clean mount [ 119.344872][ T5801] loop5: detected capacity change from 0 to 2048 [ 119.524352][ T5809] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.543968][ T5811] loop4: detected capacity change from 0 to 1024 [ 119.610132][ T26] audit: type=1326 audit(1786105147.282:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.5.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6f700d0d9 code=0x0 [ 119.719259][ T5817] NILFS (loop5): error -2 truncating bmap (ino=16) [ 119.826395][ T4190] XFS (loop3): Unmounting Filesystem [ 120.302525][ T5838] loop2: detected capacity change from 0 to 22 [ 120.321317][ T5836] loop4: detected capacity change from 0 to 512 [ 120.348374][ T5839] device syzkaller1 entered promiscuous mode [ 120.388304][ T5838] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 120.439862][ T5838] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 120.535862][ T5836] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrjquota=,errors=continue,. Quota mode: none. [ 120.755530][ T5856] loop5: detected capacity change from 0 to 1024 [ 120.884876][ T5856] EXT4-fs (loop5): Ignoring removed oldalloc option [ 120.905802][ T5856] EXT4-fs (loop5): Ignoring removed bh option [ 120.925253][ T5862] loop3: detected capacity change from 0 to 512 [ 121.014971][ T5856] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,oldalloc,errors=remount-ro,nodioread_nolock,bh,. Quota mode: none. [ 121.094811][ T5856] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.147901][ T26] audit: type=1800 audit(1786105148.812:10): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.437" name="dummy_udc" dev="gadgetfs" ino=32466 res=0 errno=0 [ 121.260403][ T5856] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 3: comm syz.5.430: lblock 3 mapped to illegal pblock 3 (length 3) [ 121.372411][ T5862] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.399129][ T5856] EXT4-fs (loop5): Remounting filesystem read-only [ 121.438694][ T5896] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.430: lblock 3 mapped to illegal pblock 3 (length 1) [ 121.521317][ T5862] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.532622][ T5852] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 4: comm syz.5.430: lblock 4 mapped to illegal pblock 4 (length 2) [ 121.633507][ T5852] EXT4-fs (loop5): Remounting filesystem read-only [ 121.669538][ T5896] EXT4-fs (loop5): Remounting filesystem read-only [ 121.676737][ T5891] loop4: detected capacity change from 0 to 8192 [ 121.691946][ T5908] loop6: detected capacity change from 0 to 2048 [ 121.705060][ T5912] loop2: detected capacity change from 0 to 8 [ 121.719861][ T5896] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.430: lblock 3 mapped to illegal pblock 3 (length 1) [ 121.753911][ T5852] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 4: comm syz.5.430: lblock 4 mapped to illegal pblock 4 (length 2) [ 121.780420][ T5862] EXT4-fs (loop3): can't change dax mount option while remounting [ 121.789578][ T5896] EXT4-fs (loop5): Remounting filesystem read-only [ 121.796168][ T5896] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.430: lblock 3 mapped to illegal pblock 3 (length 1) [ 121.837142][ T5913] Dev loop4: unable to read partition block 8322945 [ 121.859055][ T5913] loop4: RDSK (65024) unable to read partition table [ 121.883001][ T5915] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.886435][ T5913] loop4: partition table beyond EOD, [ 121.912183][ T5852] EXT4-fs (loop5): Remounting filesystem read-only [ 121.957754][ T5913] truncated [ 121.977121][ T5891] Dev loop4: unable to read partition block 8322945 [ 122.017757][ T5852] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 4: comm syz.5.430: lblock 4 mapped to illegal pblock 4 (length 2) [ 122.045549][ T5891] loop4: RDSK (65024) unable to read partition table [ 122.070518][ T5891] loop4: partition table beyond EOD, truncated [ 122.078205][ T5896] EXT4-fs (loop5): Remounting filesystem read-only [ 122.136025][ T5852] EXT4-fs (loop5): Remounting filesystem read-only [ 122.154587][ T5891] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 122.173038][ T5896] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.430: lblock 3 mapped to illegal pblock 3 (length 1) [ 122.220969][ T5924] loop6: detected capacity change from 0 to 512 [ 122.261049][ T5852] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 4: comm syz.5.430: lblock 4 mapped to illegal pblock 4 (length 2) [ 122.291609][ T5924] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 122.360403][ T5896] EXT4-fs (loop5): Remounting filesystem read-only [ 122.376753][ T5896] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.430: lblock 3 mapped to illegal pblock 3 (length 1) [ 122.427719][ T5852] EXT4-fs (loop5): Remounting filesystem read-only [ 122.463042][ T5852] EXT4-fs (loop5): Remounting filesystem read-only [ 122.473562][ T154] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 122.506619][ T5928] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.652797][ T5928] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 122.753215][ T5928] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.847729][ T4233] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.097819][ T4233] usb 5-1: Using ep0 maxpacket: 16 [ 123.144360][ T5954] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.452: inode has both inline data and extents flags [ 123.217894][ T4233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.267603][ T4233] usb 5-1: config 0 has no interfaces? [ 123.370462][ T5954] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.452: couldn't read orphan inode 15 (err -117) [ 123.418908][ T5962] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 123.457826][ T4233] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 123.478270][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.486298][ T4233] usb 5-1: Product: syz [ 123.507252][ T5954] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 123.538177][ T4233] usb 5-1: Manufacturer: syz [ 123.557642][ T4233] usb 5-1: SerialNumber: syz [ 123.584275][ T4233] r8152-cfgselector 5-1: config 0 descriptor?? [ 123.682160][ T5962] ntfs: (device loop5): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 123.735158][ T5962] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 123.777810][ T5962] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 123.810463][ T5981] EXT4-fs (loop6): Ignoring removed oldalloc option [ 123.827618][ T5962] ntfs: (device loop5): read_ntfs_boot_sector(): Using backup boot sector. [ 123.878863][ T4233] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 123.908476][ T5962] ntfs: volume version 3.1. [ 123.946224][ T5981] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.456: invalid block [ 124.130385][ T5424] usb 5-1: USB disconnect, device number 4 [ 124.138128][ T5962] ntfs: (device loop5): map_mft_record_page(): Mft record 0x40 is corrupt. Run chkdsk. [ 124.161670][ T5981] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.456: invalid indirect mapped block 1024 (level 0) [ 124.176940][ T5962] ntfs: (device loop5): map_mft_record(): Failed with error code 5. [ 124.210508][ T5962] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 124.267998][ T5981] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.456: bg 0: block 35: padding at end of block bitmap is not set [ 124.382763][ T5966] set_capacity_and_notify: 4 callbacks suppressed [ 124.382779][ T5966] loop2: detected capacity change from 0 to 32768 [ 124.442968][ T5981] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 124.483300][ T5981] EXT4-fs (loop6): 1 truncate cleaned up [ 124.507706][ T5416] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 124.552484][ T5981] EXT4-fs (loop6): mounted filesystem without journal. Opts: oldalloc,grpjquota=,min_batch_time=0x0000000000000002,,errors=continue. Quota mode: none. [ 124.907701][ T5416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.947632][ T5416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.989452][ T5416] usb 4-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 125.039330][ T5416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.089307][ T5416] usb 4-1: config 0 descriptor?? [ 125.243692][ T6025] device veth0 entered promiscuous mode [ 125.289158][ T6023] device veth0 left promiscuous mode [ 125.700370][ T5416] cypress 0003:04B4:DE64.0008: hidraw0: USB HID vff.ff Device [HID 04b4:de64] on usb-dummy_hcd.3-1/input0 [ 126.011347][ T5424] usb 4-1: USB disconnect, device number 7 [ 126.356991][ T6049] loop4: detected capacity change from 0 to 4096 [ 126.575286][ T6058] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.749010][ T6062] loop6: detected capacity change from 0 to 16 [ 126.875743][ T6062] erofs: (device loop6): mounted with root inode @ nid 36. [ 126.962101][ T6062] erofs: (device loop6): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 127.141817][ T6076] netlink: 24 bytes leftover after parsing attributes in process `syz.5.476'. [ 127.183781][ T6076] netlink: 67 bytes leftover after parsing attributes in process `syz.5.476'. [ 127.193600][ T5424] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.437782][ T5424] usb 5-1: Using ep0 maxpacket: 16 [ 127.557977][ T5424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.600673][ T5424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.654140][ T5424] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 127.710955][ T5424] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 127.747602][ T5424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.812450][ T5424] usb 5-1: config 0 descriptor?? [ 127.853250][ T6095] 9pnet: p9_errstr2errno: server reported unknown error ť [ 127.875586][ T6097] loop6: detected capacity change from 0 to 64 [ 128.040291][ T6101] loop2: detected capacity change from 0 to 256 [ 128.047274][ T6097] hfs: part requires an argument [ 128.092451][ T6097] hfs: unable to parse mount options [ 128.178117][ T6101] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 128.343273][ T5424] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0009/input/input11 [ 128.476323][ T5424] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 128.510712][ T6107] loop2: detected capacity change from 0 to 256 [ 128.539434][ T5424] usb 5-1: USB disconnect, device number 5 [ 128.588562][ T6105] loop5: detected capacity change from 0 to 512 [ 128.620924][ T6109] fido_id[6109]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 128.816190][ T6105] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.882564][ T6105] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.931305][ T6116] loop3: detected capacity change from 0 to 1024 [ 129.097770][ T6105] EXT4-fs (loop5): can't change dax mount option while remounting [ 129.667623][ T5421] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.727913][ T5416] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 129.813003][ T6097] loop6: detected capacity change from 0 to 32768 [ 129.897776][ T4233] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 129.987844][ T5416] usb 6-1: Using ep0 maxpacket: 8 [ 130.030921][ T6097] JBD2: Ignoring recovery information on journal [ 130.056372][ T5421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.103588][ T5421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.127995][ T5416] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 130.145987][ T5416] usb 6-1: config 179 has no interface number 0 [ 130.167854][ T5421] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.191138][ T5416] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 130.232786][ T5421] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.242995][ T5416] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 130.277626][ T5421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.295875][ T5416] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.308812][ T6097] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 130.328851][ T5421] usb 4-1: config 0 descriptor?? [ 130.337594][ T5416] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 130.377577][ T5416] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 130.411404][ T5416] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 130.427832][ T4233] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 130.437355][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.467593][ T5416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.477705][ T4233] usb 5-1: Product: syz [ 130.481891][ T4233] usb 5-1: Manufacturer: syz [ 130.503138][ T4233] usb 5-1: SerialNumber: syz [ 130.517948][ T6125] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 130.550787][ T4233] usb 5-1: config 0 descriptor?? [ 130.566796][ T4721] ocfs2: Unmounting device (7,6) on (node local) [ 130.624642][ T4233] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 130.810255][ T5421] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 130.848781][ T5424] usb 5-1: USB disconnect, device number 6 [ 130.863605][ T5421] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 130.960165][ T5421] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input12 [ 131.116725][ T6125] udc-core: couldn't find an available UDC or it's busy [ 131.134565][ T6125] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 131.253161][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.355549][ T6149] loop6: detected capacity change from 0 to 64 [ 131.378655][ T5416] usb 6-1: USB disconnect, device number 4 [ 131.397594][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 131.407498][ T5416] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 131.684283][ T6151] loop4: detected capacity change from 0 to 4096 [ 131.815704][ T6154] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.106081][ T6161] loop6: detected capacity change from 0 to 512 [ 132.246430][ T6161] EXT4-fs (loop6): Ignoring removed nobh option [ 132.323526][ T6161] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 132.375016][ T6163] loop5: detected capacity change from 0 to 4096 [ 132.383797][ T6161] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.678058][ T6176] loop4: detected capacity change from 0 to 512 [ 132.751996][ T6180] loop2: detected capacity change from 0 to 256 [ 132.787661][ T6176] EXT4-fs (loop4): Ignoring removed nobh option [ 132.825486][ T6176] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 132.869658][ T6180] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 132.937736][ T6176] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.975135][ T4505] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 132.986852][ T5421] usb 4-1: USB disconnect, device number 8 [ 133.030022][ T4505] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 133.046126][ T6176] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.516: corrupted inode contents [ 133.118044][ T6176] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #2: comm syz.4.516: mark_inode_dirty error [ 133.193391][ T6176] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.516: corrupted inode contents [ 133.278216][ T6176] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.516: mark_inode_dirty error [ 133.552064][ T6195] loop2: detected capacity change from 0 to 7 [ 133.576047][ T6195] Dev loop2: unable to read RDB block 7 [ 133.594123][ T6195] loop2: AHDI p1 p2 p3 p4 [ 133.610154][ T6195] loop2: partition table partially beyond EOD, truncated [ 133.619713][ T6193] loop5: detected capacity change from 0 to 4096 [ 133.633586][ T6195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 133.658500][ T6195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 133.666289][ T6182] loop6: detected capacity change from 0 to 32768 [ 133.679851][ T6195] loop2: p3 start 9 is beyond EOD, truncated [ 133.727010][ T6182] XFS (loop6): Mounting V5 Filesystem [ 133.953862][ T6208] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.964782][ T6182] XFS (loop6): Ending clean mount [ 134.005158][ T6182] XFS (loop6): Quotacheck needed: Please wait. [ 134.085548][ T6182] XFS (loop6): Quotacheck: Done. [ 134.229038][ T26] audit: type=1800 audit(1786105161.902:11): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.518" name="bus" dev="loop6" ino=9291 res=0 errno=0 [ 134.273878][ T26] audit: type=1800 audit(1786105161.902:12): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.518" name="file1" dev="loop6" ino=9286 res=0 errno=0 [ 134.336539][ T4721] XFS (loop6): Unmounting Filesystem [ 134.633994][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.541'. [ 134.757681][ T5424] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 135.021094][ T6239] smpboot: CPU 1 is now offline [ 135.098601][ T6242] x86: Booting SMP configuration: [ 135.130666][ T5424] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 135.144608][ T6242] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 135.175896][ T5424] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.191212][ T0] kvm-clock: cpu 1, msr f103041, secondary cpu clock [ 135.201180][ T18] kvm-guest: stealtime: cpu 1, msr b9127440 [ 135.234711][ T5424] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 135.367935][ T5424] usb 3-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 135.386102][ T5424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 135.414512][ T5424] usb 3-1: Product: syz [ 135.427826][ T5424] usb 3-1: Manufacturer: syz [ 135.468048][ T6222] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 135.488935][ T5424] usb_debug 3-1:1.0: debug converter detected [ 135.502201][ T5424] usb 3-1: debug converter now attached to ttyUSB0 [ 135.531201][ T6260] set_capacity_and_notify: 1 callbacks suppressed [ 135.531211][ T6260] loop6: detected capacity change from 0 to 1024 [ 135.574155][ T6259] loop5: detected capacity change from 0 to 4096 [ 135.587828][ T5421] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 135.597209][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 135.678298][ T6260] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.708810][ T6259] NILFS (loop5): invalid segment: Checksum error in segment payload [ 135.736641][ T6259] NILFS (loop5): trying rollback from an earlier position [ 135.745690][ T6222] debug ttyUSB0: usb_serial_generic_write_start - error submitting urb: -90 [ 135.792721][ T6260] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 135.822280][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.830816][ T5424] usb 3-1: USB disconnect, device number 11 [ 135.855346][ T6259] NILFS (loop5): recovery complete [ 135.860641][ T5421] usb 4-1: Using ep0 maxpacket: 16 [ 135.877422][ T5424] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 135.897090][ T6270] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.928973][ T5424] usb_debug 3-1:1.0: device disconnected [ 135.967291][ T6271] loop4: detected capacity change from 0 to 1024 [ 135.996880][ T6260] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 136.016934][ T6260] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 136.029619][ T5421] usb 4-1: unable to get BOS descriptor or descriptor too short [ 136.037473][ T6260] EXT4-fs (loop6): This should not happen!! Data will be lost [ 136.037473][ T6260] [ 136.050004][ T6260] EXT4-fs (loop6): Total free blocks count 0 [ 136.056177][ T6260] EXT4-fs (loop6): Free/Dirty block details [ 136.064391][ T6260] EXT4-fs (loop6): free_blocks=20480 [ 136.075578][ T6260] EXT4-fs (loop6): dirty_blocks=16 [ 136.081066][ T6260] EXT4-fs (loop6): Block reservation details [ 136.087409][ T6260] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 136.108503][ T5421] usb 4-1: config 1 has an invalid interface number: 206 but max is 0 [ 136.128319][ T5421] usb 4-1: config 1 has no interface number 0 [ 136.297817][ T5421] usb 4-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 136.322309][ T5421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.339297][ T5421] usb 4-1: Product: syz [ 136.343756][ T5421] usb 4-1: Manufacturer: syz [ 136.348491][ T5421] usb 4-1: SerialNumber: syz [ 136.567610][ T5416] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 136.763328][ T5421] usb 4-1: USB disconnect, device number 9 [ 137.097629][ T5416] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 137.107120][ T5416] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.115640][ T5416] usb 7-1: Product: syz [ 137.120188][ T5416] usb 7-1: Manufacturer: syz [ 137.125686][ T5416] usb 7-1: SerialNumber: syz [ 137.387702][ T5416] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 137.401759][ T6304] loop2: detected capacity change from 0 to 1024 [ 137.447707][ T5416] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 137.761386][ T6320] loop3: detected capacity change from 0 to 1024 [ 137.873748][ T6326] loop5: detected capacity change from 0 to 128 [ 137.911170][ T6320] hfsplus: xattr search failed [ 137.918862][ T6328] loop2: detected capacity change from 0 to 1024 [ 137.947695][ T5416] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 137.963435][ T5416] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 137.974447][ T5416] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 137.989665][ T6326] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 138.012098][ T5416] lan78xx: probe of 7-1:1.0 failed with error -71 [ 138.022235][ T6326] hpfs: filesystem error: improperly stopped [ 138.037796][ T6326] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 138.053036][ T5416] usb 7-1: USB disconnect, device number 3 [ 138.077657][ T6326] hpfs: You really don't want any checks? You are crazy... [ 138.088515][ T6328] hfsplus: request for non-existent node 3 in B*Tree [ 138.108170][ T6328] hfsplus: request for non-existent node 3 in B*Tree [ 138.115020][ T6328] hfsplus: invalid length 28418 has been corrected to 255 [ 138.179088][ T6326] hpfs: Code page index out of array [ 138.184398][ T6326] hpfs: code page support is disabled [ 138.210312][ T6328] hfsplus: invalid length 28418 has been corrected to 255 [ 138.218825][ T6326] hpfs: hpfs_map_4sectors(): unaligned read [ 138.224797][ T6326] hpfs: hpfs_map_4sectors(): unaligned read [ 138.279223][ T6326] hpfs: filesystem error: unable to find root dir [ 138.468455][ T6341] loop5: detected capacity change from 0 to 512 [ 138.552603][ T6347] loop2: detected capacity change from 0 to 128 [ 138.607700][ T5421] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 138.627846][ T1325] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 138.653699][ T6341] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.584: inode has both inline data and extents flags [ 138.704473][ T6341] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.584: couldn't read orphan inode 15 (err -117) [ 138.754785][ T6341] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 138.867614][ T5421] usb 5-1: Using ep0 maxpacket: 16 [ 139.027783][ T5421] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.039652][ T6365] loop5: detected capacity change from 0 to 256 [ 139.062321][ T6367] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.089422][ T6365] exfat: Deprecated parameter 'utf8' [ 139.095184][ T6365] exfat: Deprecated parameter 'namecase' [ 139.107967][ T6365] exfat: Deprecated parameter 'namecase' [ 139.118198][ T5421] usb 5-1: config 1 has an invalid interface number: 206 but max is 0 [ 139.131437][ T5421] usb 5-1: config 1 has no interface number 0 [ 139.179918][ T6365] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 139.198071][ T1325] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 139.212002][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.236987][ T26] audit: type=1800 audit(1786105166.902:13): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.596" name="report_length" dev="configfs" ino=41234 res=0 errno=0 [ 139.242308][ T1325] usb 4-1: Product: syz [ 139.290442][ T1325] usb 4-1: Manufacturer: syz [ 139.295368][ T1325] usb 4-1: SerialNumber: syz [ 139.300357][ T5421] usb 5-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 139.310711][ T5421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.320148][ T1325] usb 4-1: config 0 descriptor?? [ 139.325318][ T5421] usb 5-1: Product: syz [ 139.330337][ T5421] usb 5-1: Manufacturer: syz [ 139.335030][ T5421] usb 5-1: SerialNumber: syz [ 139.358813][ T1325] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 139.639130][ T1325] usb 4-1: USB disconnect, device number 10 [ 139.739613][ T5421] usb 5-1: USB disconnect, device number 7 [ 139.872316][ T6379] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 139.892117][ T6379] REISERFS (device loop2): using ordered data mode [ 139.915126][ T6379] reiserfs: using flush barriers [ 139.937701][ T6379] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 139.963405][ T6392] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 139.998162][ T6379] REISERFS (device loop2): checking transaction log (loop2) [ 140.023000][ T6379] REISERFS (device loop2): Using r5 hash to sort names [ 140.038312][ T6379] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 140.136201][ T6392] ntfs: (device loop6): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 140.179666][ T6392] ntfs: (device loop6): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 140.242381][ T6392] ntfs: (device loop6): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 140.282739][ T6392] ntfs: (device loop6): read_ntfs_boot_sector(): Using backup boot sector. [ 140.334146][ T6392] ntfs: volume version 3.1. [ 140.437680][ T6392] ntfs: (device loop6): map_mft_record_page(): Mft record 0x40 is corrupt. Run chkdsk. [ 140.476231][ T6392] ntfs: (device loop6): map_mft_record(): Failed with error code 5. [ 140.508083][ T6392] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 140.547630][ T5421] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 140.571947][ T6386] XFS (loop5): Mounting V5 Filesystem [ 140.610302][ T26] audit: type=1800 audit(1786105168.282:14): pid=6414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.610" name="report_length" dev="configfs" ino=41428 res=0 errno=0 [ 140.738447][ T6386] XFS (loop5): Ending clean mount [ 140.744489][ T6420] set_capacity_and_notify: 4 callbacks suppressed [ 140.744502][ T6420] loop2: detected capacity change from 0 to 128 [ 140.800842][ T6420] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 140.851196][ T6420] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.884811][ T4505] XFS (loop5): Unmounting Filesystem [ 140.891143][ T6420] ext2 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.931685][ T5421] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.946262][ T5421] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 140.974784][ T5421] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.154827][ T6432] loop2: detected capacity change from 0 to 128 [ 141.161820][ T5421] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 141.183129][ T5421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 141.200250][ T5421] usb 4-1: Product: syz [ 141.210161][ T5421] usb 4-1: Manufacturer: syz [ 141.219080][ T5421] usb 4-1: SerialNumber: syz [ 141.397402][ T6437] loop5: detected capacity change from 0 to 1024 [ 141.494171][ T6437] EXT4-fs (loop5): Ignoring removed bh option [ 141.502795][ T5421] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 141.580640][ T6437] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 141.735414][ T5421] usb 4-1: USB disconnect, device number 11 [ 141.754779][ T5421] usblp0: removed [ 141.804843][ T6449] loop4: detected capacity change from 0 to 4096 [ 141.934058][ T6449] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 142.093656][ T6449] ntfs: volume version 3.1. [ 142.359070][ T6443] loop2: detected capacity change from 0 to 32768 [ 142.398590][ T6462] loop3: detected capacity change from 0 to 128 [ 142.470691][ T6443] XFS (loop2): Mounting V5 Filesystem [ 142.479609][ T6462] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 142.560845][ T6462] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.630916][ T6443] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 142.649915][ T6462] ext2 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.713007][ T6443] XFS (loop2): Starting recovery (logdev: internal) [ 142.789004][ T6443] XFS (loop2): Ending recovery (logdev: internal) [ 142.915340][ T6443] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8 [ 142.947272][ T6443] XFS (loop2): Unmount and run xfs_repair [ 143.030763][ T4234] XFS (loop2): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 143.065147][ T4234] XFS (loop2): Unmount and run xfs_repair [ 143.093309][ T4234] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 143.101336][ T4234] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 143.120134][ T4234] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 143.124978][ T6478] loop6: detected capacity change from 0 to 128 [ 143.135402][ T4234] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 143.148004][ T4234] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 143.157049][ T4234] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 143.174541][ T4234] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.185928][ T4234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.199600][ T4234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.212006][ T6443] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117 [ 143.291259][ T6460] loop4: detected capacity change from 0 to 32768 [ 143.346327][ T4200] XFS (loop2): Unmounting Filesystem [ 143.365109][ T6472] XFS (loop2): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 143.376340][ T6472] XFS (loop2): Unmount and run xfs_repair [ 143.388150][ T6472] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 143.395548][ T6472] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 143.472084][ T6472] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 143.487541][ T6472] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 143.496841][ T6472] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 143.516548][ T6472] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 143.527226][ T6472] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.541868][ T6472] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.543413][ T6460] XFS (loop4): Mounting V5 Filesystem [ 143.551643][ T6472] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.572649][ T6472] XFS (loop2): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x32c/0x620 (fs/xfs/xfs_buf.c:1515). Shutting down filesystem. [ 143.590967][ T6472] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 143.696231][ T6460] XFS (loop4): Ending clean mount [ 143.855542][ T4186] XFS (loop4): Unmounting Filesystem [ 144.414206][ T6500] loop3: detected capacity change from 0 to 4096 [ 144.551108][ T6496] loop6: detected capacity change from 0 to 32768 [ 144.666401][ T6500] ntfs: volume version 3.1. [ 144.673659][ T6496] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 144.870838][ T4721] ocfs2: Unmounting device (7,6) on (node local) [ 145.439401][ T6519] EXT4-fs (loop3): Ignoring removed orlov option [ 145.445813][ T6519] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 145.496912][ T6519] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.645: corrupted in-inode xattr [ 145.530876][ T6522] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 145.562957][ T6519] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.645: couldn't read orphan inode 15 (err -117) [ 145.613217][ T6522] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 145.672559][ T6522] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.685464][ T6519] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noinit_itable,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 145.717682][ T6525] hfsplus: xattr search failed [ 145.763792][ T6522] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 145.794275][ T6522] System zones: 0-1, 3-36 [ 145.821363][ T6522] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 145.885747][ T6531] set_capacity_and_notify: 4 callbacks suppressed [ 145.885757][ T6531] loop6: detected capacity change from 0 to 1024 [ 146.031931][ T6531] EXT4-fs (loop6): Ignoring removed bh option [ 146.075100][ T1325] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 146.112685][ T1325] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 146.125402][ T6531] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 146.172760][ T6535] loop3: detected capacity change from 0 to 2048 [ 146.234467][ T6535] UDF-fs: error (device loop3): udf_read_tagged: block 97: CRC length 511 exceeds block size [ 146.294564][ T6535] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 146.863429][ T6543] loop2: detected capacity change from 0 to 40427 [ 146.996308][ T6543] F2FS-fs (loop2): invalid crc value [ 147.048236][ T6543] F2FS-fs (loop2): Found nat_bits in checkpoint [ 147.140970][ T6543] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 147.235888][ T4200] attempt to access beyond end of device [ 147.235888][ T4200] loop2: rw=2049, want=45104, limit=40427 [ 147.364262][ T6558] loop6: detected capacity change from 0 to 1024 [ 147.497591][ T1325] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 147.844632][ T6567] loop2: detected capacity change from 0 to 4096 [ 147.877888][ T1325] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 147.889502][ T1325] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 147.901605][ T6567] __ntfs_warning: 16 callbacks suppressed [ 147.901620][ T6567] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 147.931578][ T1325] usb 4-1: config 1 interface 0 has no altsetting 0 [ 147.957907][ T5416] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 148.032611][ T6567] ntfs: (device loop2): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 148.070707][ T6567] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 148.097841][ T1325] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 148.122139][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.130853][ T6567] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 148.157584][ T1325] usb 4-1: Product: syz [ 148.161782][ T1325] usb 4-1: Manufacturer: syz [ 148.169380][ T6574] loop5: detected capacity change from 0 to 64 [ 148.176775][ T6567] ntfs: (device loop2): read_ntfs_boot_sector(): Using backup boot sector. [ 148.192133][ T1325] usb 4-1: SerialNumber: syz [ 148.217865][ T6549] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.224941][ T6549] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.241315][ T6567] ntfs: volume version 3.1. [ 148.247773][ T26] audit: type=1800 audit(1786105175.912:16): pid=6574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.662" name="file2" dev="loop5" ino=6 res=0 errno=0 [ 148.318517][ T5416] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 148.335529][ T6576] loop6: detected capacity change from 0 to 512 [ 148.351355][ T5416] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 148.364261][ T6567] ntfs: (device loop2): map_mft_record_page(): Mft record 0x40 is corrupt. Run chkdsk. [ 148.375010][ T5416] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 148.386362][ T6567] ntfs: (device loop2): map_mft_record(): Failed with error code 5. [ 148.409299][ T6567] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 148.422658][ T6576] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 148.451176][ T6576] EXT4-fs (loop6): 1 truncate cleaned up [ 148.506244][ T6576] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,nodioread_nolock,,errors=continue. Quota mode: none. [ 148.557792][ T5416] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.577301][ T5416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.607481][ T5416] usb 5-1: Product: syz [ 148.612219][ T5416] usb 5-1: Manufacturer: syz [ 148.616829][ T5416] usb 5-1: SerialNumber: syz [ 148.669269][ T5416] cdc_mbim 5-1:1.0: skipping garbage [ 148.872685][ T6564] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 148.887741][ T6564] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 148.947597][ T5422] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 149.317776][ T5422] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.335085][ T5422] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.363180][ T5422] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 149.384486][ T5422] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.397739][ T1325] (unnamed net_device) (uninitialized): Assigned a random MAC address: e2:92:2b:a7:ec:24 [ 149.420569][ T1325] rtl8150 4-1:1.0: eth9: rtl8150 is detected [ 149.438797][ T1325] usb 4-1: USB disconnect, device number 12 [ 149.574681][ T6564] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 149.584916][ T6564] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 149.592258][ T5422] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.607592][ T5422] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.625882][ T5422] usb 6-1: Product: syz [ 149.630137][ T5422] usb 6-1: Manufacturer: syz [ 149.634765][ T5422] usb 6-1: SerialNumber: syz [ 149.698744][ T5422] cdc_ncm 6-1:1.0: skipping garbage [ 149.837764][ T5416] cdc_mbim 5-1:1.0: bind() failure [ 149.867675][ T5416] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 149.894557][ T5416] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 149.909209][ T6582] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 149.947732][ T5416] usbtest: probe of 5-1:1.1 failed with error -71 [ 149.977419][ T5416] usb 5-1: USB disconnect, device number 8 [ 150.102317][ T6591] loop3: detected capacity change from 0 to 8192 [ 150.233327][ T6591] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 150.253000][ T6591] REISERFS (device loop3): using ordered data mode [ 150.263125][ T6591] reiserfs: using flush barriers [ 150.277579][ T6591] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.314696][ T6591] REISERFS (device loop3): checking transaction log (loop3) [ 150.333895][ T6591] REISERFS (device loop3): Using r5 hash to sort names [ 150.362405][ T6591] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 150.588276][ T6582] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 150.635235][ T6600] loop2: detected capacity change from 0 to 2048 [ 150.811730][ T6600] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.827925][ T5422] cdc_ncm 6-1:1.0: bind() failure [ 150.857692][ T5422] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 150.898259][ T5422] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 150.937607][ T5422] usbtest: probe of 6-1:1.1 failed with error -71 [ 150.976027][ T5422] usb 6-1: USB disconnect, device number 5 [ 151.134970][ T6608] loop4: detected capacity change from 0 to 16 [ 151.270199][ T6608] erofs: (device loop4): mounted with root inode @ nid 36. [ 151.415528][ T6612] loop2: detected capacity change from 0 to 512 [ 151.481412][ T6615] loop5: detected capacity change from 0 to 1024 [ 151.572214][ T6615] EXT4-fs (loop5): Ignoring removed bh option [ 151.613886][ T6612] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 151.671821][ T6603] loop3: detected capacity change from 0 to 40427 [ 151.696816][ T6612] EXT4-fs (loop2): 1 truncate cleaned up [ 151.703986][ T6615] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 151.730987][ T6612] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,nodioread_nolock,,errors=continue. Quota mode: none. [ 151.777743][ T6615] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.835489][ T6603] F2FS-fs (loop3): invalid crc value [ 151.860095][ T6621] loop6: detected capacity change from 0 to 8192 [ 151.919211][ T6615] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 3: comm syz.5.681: lblock 3 mapped to illegal pblock 3 (length 3) [ 151.943181][ T6603] F2FS-fs (loop3): Found nat_bits in checkpoint [ 151.967685][ T6621] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 152.001738][ T6621] REISERFS (device loop6): using ordered data mode [ 152.019162][ T6615] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 152.074286][ T6631] device syzkaller1 entered promiscuous mode [ 152.105696][ T6621] reiserfs: using flush barriers [ 152.128989][ T6621] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 152.156370][ T6632] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.681: bg 0: block 112: padding at end of block bitmap is not set [ 152.212259][ T6603] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 152.224327][ T6621] REISERFS (device loop6): checking transaction log (loop6) [ 152.232560][ T6615] EXT4-fs (loop5): This should not happen!! Data will be lost [ 152.232560][ T6615] [ 152.292383][ T6632] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 3 with error 28 [ 152.321763][ T6621] REISERFS (device loop6): Using r5 hash to sort names [ 152.338020][ T6621] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 152.352556][ T6638] loop2: detected capacity change from 0 to 512 [ 152.407853][ T6632] EXT4-fs (loop5): This should not happen!! Data will be lost [ 152.407853][ T6632] [ 152.439808][ T6632] EXT4-fs (loop5): Total free blocks count 0 [ 152.454005][ T4190] attempt to access beyond end of device [ 152.454005][ T4190] loop3: rw=2049, want=45104, limit=40427 [ 152.478290][ T6632] EXT4-fs (loop5): Free/Dirty block details [ 152.484197][ T6632] EXT4-fs (loop5): free_blocks=0 [ 152.517978][ T6632] EXT4-fs (loop5): dirty_blocks=64 [ 152.532993][ T6632] EXT4-fs (loop5): Block reservation details [ 152.550764][ T6632] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 152.557107][ T6634] EXT4-fs error (device loop5): ext4_ext_remove_space:2944: inode #15: comm syz.5.681: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 152.578345][ T6634] EXT4-fs error (device loop5) in ext4_setattr:5645: Corrupt filesystem [ 152.588830][ T6638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 152.596819][ T6638] System zones: 1-2, 4-12, 8-8 [ 152.639108][ T6638] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.686: iget: bad i_size value: 38620345925642 [ 152.709161][ T6638] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.686: couldn't read orphan inode 15 (err -117) [ 152.755580][ T6649] loop4: detected capacity change from 0 to 16 [ 152.765348][ T6638] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,delalloc,data_err=ignore,debug,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 152.839700][ T6638] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.686: bg 0: block 5: invalid block bitmap [ 152.910966][ T6649] erofs: (device loop4): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 152.921815][ T6638] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 153.004467][ T6638] EXT4-fs (loop2): This should not happen!! Data will be lost [ 153.004467][ T6638] [ 153.026300][ T6638] EXT4-fs (loop2): Total free blocks count 0 [ 153.046766][ T6649] loop4: detected capacity change from 0 to 512 [ 153.053555][ T6638] EXT4-fs (loop2): Free/Dirty block details [ 153.065274][ T6638] EXT4-fs (loop2): free_blocks=0 [ 153.136345][ T6638] EXT4-fs (loop2): dirty_blocks=2 [ 153.162360][ T6638] EXT4-fs (loop2): Block reservation details [ 153.241225][ T6638] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 153.507798][ T4233] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 153.537988][ T5416] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 153.609061][ T1325] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 153.803514][ T6678] loop2: detected capacity change from 0 to 32768 [ 153.857648][ T1325] usb 6-1: Using ep0 maxpacket: 16 [ 153.877687][ T4233] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.888553][ T4233] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.903651][ T5416] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.912470][ T6678] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.702 (6678) [ 153.925855][ T5416] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 153.936771][ T4233] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 153.948518][ T5416] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.957838][ T4233] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.971465][ T5416] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 153.983254][ T5416] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 154.005485][ T6678] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 154.014351][ T1325] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.032913][ T1325] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.044979][ T6678] BTRFS info (device loop2): using free space tree [ 154.052412][ T6678] BTRFS info (device loop2): has skinny extents [ 154.059522][ T1325] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.074099][ T1325] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 154.084524][ T1325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.096407][ T1325] usb 6-1: config 0 descriptor?? [ 154.107862][ T5416] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.120822][ T5416] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.132942][ T5416] usb 5-1: Product: syz [ 154.137132][ T5416] usb 5-1: Manufacturer: syz [ 154.142523][ T4233] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.154888][ T4233] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.167710][ T4233] usb 7-1: Product: syz [ 154.171988][ T4233] usb 7-1: Manufacturer: syz [ 154.176849][ T4233] usb 7-1: SerialNumber: syz [ 154.198822][ T5416] cdc_wdm 5-1:1.0: skipping garbage [ 154.204052][ T5416] cdc_wdm 5-1:1.0: skipping garbage [ 154.218551][ T4233] cdc_ncm 7-1:1.0: skipping garbage [ 154.226780][ T5416] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 154.233127][ T5416] cdc_wdm 5-1:1.0: Unknown control protocol [ 154.252946][ T6678] BTRFS info (device loop2): enabling ssd optimizations [ 154.423134][ T6660] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.456788][ T4293] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (4293) [ 154.557539][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 154.564184][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 154.581138][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 154.587773][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 154.594941][ T1325] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 154.602541][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 154.602565][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 154.617531][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 154.624182][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 154.637540][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 154.644272][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 154.657556][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 154.664213][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 154.672015][ T1325] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 154.679575][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 154.679597][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 154.697557][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 154.704177][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 154.717557][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 154.724182][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 154.737552][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 154.744165][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 154.773258][ T6703] loop3: detected capacity change from 0 to 8192 [ 154.806583][ T1325] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 154.819631][ T1325] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 154.831588][ T1325] microsoft 0003:045E:07DA.000C: no inputs found [ 154.838130][ T1325] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 154.852424][ T1325] usb 6-1: USB disconnect, device number 6 [ 154.944450][ T5413] usb 5-1: USB disconnect, device number 9 [ 154.957547][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 154.992034][ T6703] Dev loop3: unable to read partition block 8322945 [ 155.008556][ T6703] loop3: RDSK (65024) unable to read partition table [ 155.025841][ T6703] loop3: partition table beyond EOD, truncated [ 155.037813][ T6703] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 155.066235][ T6706] fido_id[6706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 155.133678][ T6660] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 155.145200][ T6708] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 155.162909][ T6708] hpfs: filesystem error: improperly stopped [ 155.170149][ T6708] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 155.178314][ T6708] hpfs: You really don't want any checks? You are crazy... [ 155.185758][ T6708] hpfs: Code page index out of array [ 155.191845][ T6708] hpfs: code page support is disabled [ 155.205738][ T6708] hpfs: hpfs_map_4sectors(): unaligned read [ 155.217891][ T6708] hpfs: hpfs_map_4sectors(): unaligned read [ 155.223952][ T6703] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 155.231131][ T6708] hpfs: filesystem error: unable to find root dir [ 155.239297][ T6703] vxfs: WRONG superblock magic 7b318cb5 at 8 [ 155.245551][ T6703] vxfs: can't find superblock. [ 155.259722][ T6708] hpfs: hpfs_map_4sectors(): unaligned read [ 155.387653][ T4233] cdc_ncm 7-1:1.0: bind() failure [ 155.418357][ T4233] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 155.457660][ T4233] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 155.487793][ T4233] usbtest: probe of 7-1:1.1 failed with error -71 [ 155.510810][ T6710] EXT4-fs (loop2): Ignoring removed oldalloc option [ 155.520228][ T6710] EXT4-fs (loop2): Ignoring removed bh option [ 155.526788][ T4233] usb 7-1: USB disconnect, device number 4 [ 155.601267][ T6710] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,oldalloc,errors=remount-ro,nodioread_nolock,bh,. Quota mode: none. [ 155.619434][ T6714] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 155.652712][ T6714] overlayfs: failed to resolve './file0': -2 [ 155.660344][ T6710] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.800903][ T6710] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.707: lblock 3 mapped to illegal pblock 3 (length 3) [ 156.428022][ T6725] set_capacity_and_notify: 4 callbacks suppressed [ 156.428034][ T6725] loop4: detected capacity change from 0 to 131072 [ 156.459663][ T6710] EXT4-fs (loop2): Remounting filesystem read-only [ 156.474741][ T6727] tcpci: probe of 0-0050 failed with error -5 [ 156.485432][ T6729] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.707: lblock 3 mapped to illegal pblock 3 (length 1) [ 156.499524][ T6725] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 156.507678][ T6725] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 156.519928][ T6709] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 4: comm syz.2.707: lblock 4 mapped to illegal pblock 4 (length 2) [ 156.537535][ T6723] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 156.546921][ T6725] F2FS-fs (loop4): invalid crc value [ 156.555729][ T6725] F2FS-fs (loop4): Found nat_bits in checkpoint [ 156.593070][ T6725] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 156.600233][ T6725] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 156.617723][ T6625] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 156.627846][ T6727] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 156.663889][ T6725] F2FS-fs (loop4): checksum invalid, nid = 7, ino_of_node = 7, a6222242 vs. 7c4dd4cf [ 156.687281][ T6728] tcpci: probe of 0-0051 failed with error -5 [ 156.695189][ T6725] F2FS-fs (loop4): checksum invalid, nid = 7, ino_of_node = 7, a6222242 vs. 7c4dd4cf [ 156.707264][ T6709] EXT4-fs (loop2): Remounting filesystem read-only [ 156.744169][ T6625] EXT4-fs (loop2): Remounting filesystem read-only [ 156.752410][ T6709] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 4: comm syz.2.707: lblock 4 mapped to illegal pblock 4 (length 2) [ 156.801849][ T6728] i2c i2c-0: new_device: Instantiated device tcpci at 0x51 [ 156.841382][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 156.889787][ T6729] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.707: lblock 3 mapped to illegal pblock 3 (length 1) [ 156.958156][ T6709] EXT4-fs (loop2): Remounting filesystem read-only [ 157.004008][ T6709] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 4: comm syz.2.707: lblock 4 mapped to illegal pblock 4 (length 2) [ 157.084946][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 157.117801][ T6729] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.707: lblock 3 mapped to illegal pblock 3 (length 1) [ 157.163705][ T6739] loop6: detected capacity change from 0 to 4096 [ 157.196257][ T6709] EXT4-fs (loop2): Remounting filesystem read-only [ 157.222717][ T6709] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 4: comm syz.2.707: lblock 4 mapped to illegal pblock 4 (length 2) [ 157.276979][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 157.294153][ T6739] ntfs3: loop6: Failed to load $Extend. [ 157.328017][ T6729] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.707: lblock 3 mapped to illegal pblock 3 (length 1) [ 157.364585][ T6739] ntfs3: loop6: ino=5, "/" directory corrupted [ 157.381732][ T6739] ntfs3: loop6: ino=5, "/" directory corrupted [ 157.388178][ T6709] EXT4-fs (loop2): Remounting filesystem read-only [ 157.419009][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 157.528625][ T5413] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 157.776172][ T6737] loop3: detected capacity change from 0 to 32768 [ 157.887678][ T5413] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.903503][ T5413] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 157.962684][ T5413] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 158.001499][ T5413] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 158.040191][ T5413] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 158.182453][ T6763] loop3: detected capacity change from 0 to 2048 [ 158.189380][ T5413] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 158.207723][ T5413] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 158.225394][ T5413] usb 6-1: Product: syz [ 158.235553][ T5413] usb 6-1: Manufacturer: syz [ 158.293453][ T5413] cdc_wdm 6-1:1.0: skipping garbage [ 158.300099][ T5413] cdc_wdm 6-1:1.0: skipping garbage [ 158.318278][ T6764] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.330549][ T5413] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 158.336728][ T5413] cdc_wdm 6-1:1.0: Unknown control protocol [ 158.355514][ T26] audit: type=1326 audit(1786105186.022:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.3.726" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23d73730d9 code=0x0 [ 158.456517][ T6765] NILFS (loop3): error -2 truncating bmap (ino=16) [ 158.559342][ T5413] usb 6-1: USB disconnect, device number 7 [ 158.758428][ T6775] loop4: detected capacity change from 0 to 128 [ 159.034351][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.738'. [ 159.062530][ T6790] netlink: 34959 bytes leftover after parsing attributes in process `syz.6.738'. [ 159.112709][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 159.122734][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 159.130327][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.140395][ T4201] Workqueue: hci3 hci_rx_work [ 159.145112][ T4201] Call Trace: [ 159.148408][ T4201] [ 159.151358][ T4201] dump_stack_lvl+0x188/0x250 [ 159.156052][ T4201] ? show_regs_print_info+0x20/0x20 [ 159.161244][ T4201] ? load_image+0x410/0x410 [ 159.165751][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 159.170854][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 159.175517][ T4201] ? kthread+0x42e/0x520 [ 159.179759][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 159.184971][ T4201] kobject_add_internal+0x5ba/0xcd0 [ 159.190195][ T4201] kobject_add+0x160/0x230 [ 159.194648][ T4201] ? kobject_init+0x1c0/0x1c0 [ 159.199376][ T4201] ? __raw_spin_lock_init+0x41/0x100 [ 159.204680][ T4201] ? klist_children_get+0x50/0x50 [ 159.209722][ T4201] ? get_device_parent+0x121/0x3e0 [ 159.214955][ T4201] device_add+0x470/0x1050 [ 159.219392][ T4201] ? device_initialize+0x2a5/0x4d0 [ 159.224514][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 159.229461][ T4201] le_conn_complete_evt+0xc2e/0x14d0 [ 159.234792][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 159.239940][ T4201] ? __mutex_trylock_common+0x15c/0x260 [ 159.245514][ T4201] hci_le_meta_evt+0x285/0x3ca0 [ 159.250416][ T4201] ? hci_event_packet+0x363/0x1310 [ 159.255527][ T4201] ? __lock_acquire+0x7b50/0x7b50 [ 159.260552][ T4201] ? __traceiter_x86_fpu_xstate_check_failed+0xb0/0xb0 [ 159.267396][ T4201] ? hci_remote_host_features_evt+0x240/0x240 [ 159.273457][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 159.279113][ T4201] ? mark_lock+0x94/0x320 [ 159.283465][ T4201] ? mutex_unlock+0x10/0x10 [ 159.288006][ T4201] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 159.294024][ T4201] ? lock_chain_count+0x20/0x20 [ 159.298904][ T4201] ? __rwlock_init+0x140/0x140 [ 159.303680][ T4201] hci_event_packet+0xe0b/0x1310 [ 159.308624][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 159.313492][ T4201] ? rcu_lock_release+0x20/0x20 [ 159.318360][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 159.323557][ T4201] hci_rx_work+0x255/0xa10 [ 159.327993][ T4201] process_one_work+0x867/0xff0 [ 159.332914][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 159.338575][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 159.343884][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 159.348925][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 159.354474][ T4201] ? wq_worker_running+0x97/0x170 [ 159.359502][ T4201] worker_thread+0xad7/0x12a0 [ 159.364204][ T4201] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 159.370099][ T4201] kthread+0x42e/0x520 [ 159.374179][ T4201] ? rcu_lock_release+0x20/0x20 [ 159.379036][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 159.383679][ T4201] ret_from_fork+0x1f/0x30 [ 159.388135][ T4201] [ 159.395907][ T4201] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 159.409344][ T4201] Bluetooth: hci3: failed to register connection device [ 159.522168][ T6797] loop4: detected capacity change from 0 to 512 [ 159.538450][ T6800] device hsr0 entered promiscuous mode [ 159.583214][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.741'. [ 159.647719][ T6800] device hsr_slave_0 left promiscuous mode [ 159.708257][ T6800] device hsr_slave_1 left promiscuous mode [ 159.769885][ T6811] loop2: detected capacity change from 0 to 128 [ 159.777316][ T6800] device hsr0 left promiscuous mode [ 159.835098][ T6813] loop4: detected capacity change from 0 to 512 [ 160.017124][ T6813] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 160.158263][ T6813] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.748: corrupted inode contents [ 160.183515][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 160.193379][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 160.200953][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.211027][ T4201] Workqueue: hci4 hci_rx_work [ 160.211884][ T6813] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #16: comm syz.4.748: mark_inode_dirty error [ 160.215739][ T4201] Call Trace: [ 160.215781][ T4201] [ 160.215792][ T4201] dump_stack_lvl+0x188/0x250 [ 160.237898][ T4201] ? show_regs_print_info+0x20/0x20 [ 160.243122][ T4201] ? load_image+0x410/0x410 [ 160.247681][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 160.252829][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 160.255059][ T6813] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.748: corrupted inode contents [ 160.257530][ T4201] ? kthread+0x42e/0x520 [ 160.257558][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 160.257587][ T4201] kobject_add_internal+0x5ba/0xcd0 [ 160.257621][ T4201] kobject_add+0x160/0x230 [ 160.257652][ T4201] ? kobject_init+0x1c0/0x1c0 [ 160.257680][ T4201] ? __raw_spin_lock_init+0x41/0x100 [ 160.257702][ T4201] ? klist_children_get+0x50/0x50 [ 160.257724][ T4201] ? get_device_parent+0x121/0x3e0 [ 160.257749][ T4201] device_add+0x470/0x1050 [ 160.313044][ T4201] ? device_initialize+0x2a5/0x4d0 [ 160.318191][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 160.323259][ T4201] le_conn_complete_evt+0xc2e/0x14d0 [ 160.328596][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 160.333751][ T4201] ? __mutex_trylock_common+0x15c/0x260 [ 160.334338][ T6813] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.748: mark_inode_dirty error [ 160.339329][ T4201] hci_le_meta_evt+0x285/0x3ca0 [ 160.339359][ T4201] ? hci_event_packet+0x363/0x1310 [ 160.339387][ T4201] ? __lock_acquire+0x7b50/0x7b50 [ 160.339422][ T4201] ? hci_remote_host_features_evt+0x240/0x240 [ 160.339449][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 160.377215][ T4201] ? mark_lock+0x94/0x320 [ 160.381564][ T4201] ? mutex_unlock+0x10/0x10 [ 160.386098][ T4201] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 160.392110][ T4201] ? lock_chain_count+0x20/0x20 [ 160.396990][ T4201] ? __rwlock_init+0x140/0x140 [ 160.401782][ T4201] hci_event_packet+0xe0b/0x1310 [ 160.406757][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 160.411667][ T4201] ? rcu_lock_release+0x20/0x20 [ 160.416748][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 160.421972][ T4201] hci_rx_work+0x255/0xa10 [ 160.423475][ T6813] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.748: corrupted inode contents [ 160.426425][ T4201] process_one_work+0x867/0xff0 [ 160.426474][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 160.448705][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 160.454034][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 160.459126][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 160.461106][ T5413] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 160.464717][ T4201] ? wq_worker_running+0x97/0x170 [ 160.477305][ T4201] worker_thread+0xad7/0x12a0 [ 160.482036][ T4201] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 160.487976][ T4201] kthread+0x42e/0x520 [ 160.492084][ T4201] ? rcu_lock_release+0x20/0x20 [ 160.496968][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 160.501605][ T4201] ret_from_fork+0x1f/0x30 [ 160.506077][ T4201] [ 160.510077][ T4201] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 160.518117][ T6813] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.748: mark_inode_dirty error [ 160.523585][ T4201] Bluetooth: hci4: failed to register connection device [ 160.600667][ T6813] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.748: corrupted inode contents [ 160.654853][ T6813] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 160.702870][ T6813] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.748: corrupted inode contents [ 160.725715][ T6840] loop6: detected capacity change from 0 to 512 [ 160.752558][ T6813] EXT4-fs error (device loop4): ext4_truncate:4286: inode #16: comm syz.4.748: mark_inode_dirty error [ 160.767728][ T5413] usb 4-1: Using ep0 maxpacket: 16 [ 160.815473][ T6813] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 160.855282][ T6813] EXT4-fs (loop4): 1 truncate cleaned up [ 160.879880][ T6813] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.923324][ T6850] device hsr0 entered promiscuous mode [ 160.931575][ T6813] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.949323][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.6.764'. [ 160.975377][ T6852] loop5: detected capacity change from 0 to 128 [ 160.999787][ T6850] device hsr_slave_0 left promiscuous mode [ 161.016492][ T6850] device hsr_slave_1 left promiscuous mode [ 161.056805][ T5413] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 161.066953][ T6852] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 161.079870][ T5413] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.096219][ T6852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.108547][ T5413] usb 4-1: Product: syz [ 161.113925][ T5413] usb 4-1: Manufacturer: syz [ 161.119105][ T5413] usb 4-1: SerialNumber: syz [ 161.137151][ T5413] usb 4-1: config 0 descriptor?? [ 161.152421][ T6850] device hsr0 left promiscuous mode [ 161.191056][ T5413] gspca_main: spca508-2.14.0 probing 041e:4018 [ 161.407667][ T5413] gspca_spca508: reg_read err -32 [ 161.447751][ T5413] gspca_spca508: reg_read err -32 [ 161.489920][ T5413] gspca_spca508: reg_read err -32 [ 161.515708][ T6867] set_capacity_and_notify: 1 callbacks suppressed [ 161.515723][ T6867] loop5: detected capacity change from 0 to 2048 [ 161.564557][ T154] ------------[ cut here ]------------ [ 161.584843][ T154] kernel BUG at fs/hfs/inode.c:447! [ 161.598444][ T154] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 161.604583][ T154] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 161.612064][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.622137][ T154] Workqueue: writeback wb_workfn (flush-7:6) [ 161.628175][ T154] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 161.633756][ T154] Code: 8d ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 51 cc 8d ff e9 43 fe ff ff e8 97 a9 48 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 161.653394][ T154] RSP: 0018:ffffc90001fb73a0 EFLAGS: 00010293 [ 161.659484][ T154] RAX: ffffffff82305319 RBX: ffff88802ac3cf98 RCX: ffff88801d95d940 [ 161.667473][ T154] RDX: 0000000000000000 RSI: ffffffff8c4e3080 RDI: 0000000000000000 [ 161.675566][ T154] RBP: ffffc90001fb7530 R08: ffff88801d95d940 R09: 0000000000000003 [ 161.683563][ T154] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 161.691569][ T154] R13: 1ffff920003f6e78 R14: 0000000000000000 R15: ffff88802ac3cf58 [ 161.699558][ T154] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 161.708513][ T154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.715129][ T154] CR2: 00007f8492a51000 CR3: 000000007cfaf000 CR4: 00000000003506e0 [ 161.723128][ T154] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 161.731122][ T154] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 161.739111][ T154] Call Trace: [ 161.742399][ T154] [ 161.745354][ T154] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 161.747818][ T5413] gspca_spca508: reg_read err -71 [ 161.750761][ T154] ? __writeback_single_inode+0x46d/0xda0 [ 161.750803][ T154] ? __rwlock_init+0x140/0x140 [ 161.766294][ T154] __writeback_single_inode+0x6c4/0xda0 [ 161.771871][ T154] writeback_sb_inodes+0xaaa/0x1750 [ 161.777107][ T154] ? queue_io+0x530/0x530 [ 161.777996][ T5413] gspca_spca508: reg write: error -71 [ 161.781461][ T154] ? move_expired_inodes+0x722/0x770 [ 161.781504][ T154] ? rcu_is_watching+0x11/0xa0 [ 161.795174][ T5413] spca508: probe of 4-1:0.0 failed with error -71 [ 161.796900][ T154] ? queue_io+0x3ba/0x530 [ 161.796923][ T154] wb_writeback+0x44a/0xbc0 [ 161.812162][ T154] ? rcu_lock_release+0x20/0x20 [ 161.817037][ T154] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 161.823048][ T154] ? __lock_acquire+0x7b50/0x7b50 [ 161.827812][ T5413] usb 4-1: USB disconnect, device number 13 [ 161.828102][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 161.839204][ T154] wb_workfn+0x43a/0xf20 [ 161.843497][ T154] ? inode_wait_for_writeback+0x220/0x220 [ 161.849251][ T154] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 161.855257][ T154] ? __lock_acquire+0x7b50/0x7b50 [ 161.860326][ T154] ? read_lock_is_recursive+0x10/0x10 [ 161.865730][ T154] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 161.871642][ T154] ? _raw_spin_unlock+0x40/0x40 [ 161.876526][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 161.881757][ T154] process_one_work+0x867/0xff0 [ 161.886640][ T154] ? worker_detach_from_pool+0x240/0x240 [ 161.892297][ T154] ? lockdep_hardirqs_off+0x70/0x100 [ 161.897619][ T154] ? _raw_spin_lock_irq+0xb7/0xf0 [ 161.902660][ T154] ? _raw_spin_lock_irqsave+0x100/0x100 [ 161.908232][ T154] ? wq_worker_running+0x97/0x170 [ 161.913292][ T154] worker_thread+0xad7/0x12a0 [ 161.918007][ T154] kthread+0x42e/0x520 [ 161.922093][ T154] ? rcu_lock_release+0x20/0x20 [ 161.926970][ T154] ? kthread_blkcg+0xd0/0xd0 [ 161.931587][ T154] ret_from_fork+0x1f/0x30 [ 161.936031][ T154] [ 161.939082][ T154] Modules linked in: [ 161.957553][ T6873] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.971194][ T154] ---[ end trace 200cb15f4e024298 ]--- [ 161.976710][ T154] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 161.984525][ T154] Code: 8d ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 51 cc 8d ff e9 43 fe ff ff e8 97 a9 48 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 162.006435][ T154] RSP: 0018:ffffc90001fb73a0 EFLAGS: 00010293 [ 162.013692][ T154] RAX: ffffffff82305319 RBX: ffff88802ac3cf98 RCX: ffff88801d95d940 [ 162.023854][ T154] RDX: 0000000000000000 RSI: ffffffff8c4e3080 RDI: 0000000000000000 [ 162.032009][ T154] RBP: ffffc90001fb7530 R08: ffff88801d95d940 R09: 0000000000000003 [ 162.042107][ T154] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 162.050440][ T154] R13: 1ffff920003f6e78 R14: 0000000000000000 R15: ffff88802ac3cf58 [ 162.060456][ T154] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 162.069592][ T154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.076197][ T154] CR2: 00007f8492a4b000 CR3: 000000007e1f7000 CR4: 00000000003506e0 [ 162.086444][ T154] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 162.094624][ T154] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 162.105076][ T154] Kernel panic - not syncing: Fatal exception [ 162.111499][ T154] Kernel Offset: disabled [ 162.115863][ T154] Rebooting in 86400 seconds..