last executing test programs: 4.364504188s ago: executing program 3 (id=522): syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x208002, &(0x7f0000000540)=ANY=[], 0x5, 0x1bd, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0x4, 0xffffffff}}, 0x741801) 4.22139007s ago: executing program 3 (id=526): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 3.064536671s ago: executing program 1 (id=541): r0 = socket$inet(0x2, 0xa, 0x266) ioctl$sock_inet_SIOCSARP(r0, 0x8903, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @multicast}, 0x38, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) 2.964432061s ago: executing program 1 (id=542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x240008d3}, 0x4008000) 2.947480052s ago: executing program 1 (id=543): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc40102030109021200010000000009"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x18, &(0x7f0000000400)=@req3={0xa, 0x47, 0x8004, 0x4, 0x3, 0xf7ffffff, 0xfffe0}, 0x1c) unshare(0x2040400) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f00000001c0)=[{}], 0x1, 0x7, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000001680)) io_setup(0x8, &(0x7f0000000000)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0xd3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0xda7, "2b048511119c2921d1f9c408a182282ce9df27ccabfcf9feedeedc0627e04200"}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r5, 0x0, 0x1, 0x5) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r7, 0x80489439, &(0x7f0000001b00)={0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r8, 0x107, 0xc, 0x0, &(0x7f0000002380)) sendto$inet(r6, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.668329576s ago: executing program 3 (id=546): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$overlay(0x0, 0x0, 0x0, 0x200088, &(0x7f0000000e80)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.544171777s ago: executing program 3 (id=549): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000000f40)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 2.341788505s ago: executing program 2 (id=551): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) 2.264457542s ago: executing program 0 (id=552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.251382823s ago: executing program 3 (id=553): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003900)={0x2020}, 0x2020) r1 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) ioctl$VIDIOC_G_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0xd, @pix_mp={0x2, 0xd, 0x20493859, 0x7, 0x9, [{0x7, 0x6}, {0x0, 0x8}, {0xa0, 0x1}, {0x80000000, 0x1}, {0xdf, 0x3}, {0x5, 0x3}, {0xa, 0x3}, {0xa, 0x7}], 0x4, 0x9f, 0x8, 0x0, 0x3}}) 2.237306774s ago: executing program 0 (id=554): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.139681242s ago: executing program 2 (id=556): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b00000008000200"], 0x1c}, 0x1, 0x0, 0x0, 0x24000814}, 0x24048090) 1.980414446s ago: executing program 2 (id=558): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 1.787083453s ago: executing program 0 (id=560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 1.646240966s ago: executing program 0 (id=561): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c000000ed0302002abd7000ffdbdf2507e6d6aa47a0fbad1c304bae77966a8bea9cb4458c036088ffee73f918680721bf0ad20dceb29e02d89209e9e541c26c922e4562de6530328acfefa66c7697cc5e692e0a8fe2116d45a071e1bbb116873342a89b26a2aba5a86fc03b"], 0x6c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0xffffe000) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x47, 0xc1f, &(0x7f0000002a00)="$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") symlinkat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r3, r2], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) 1.59536572s ago: executing program 3 (id=564): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x105334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0xc, 0x200, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0xe, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x7, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x1, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x8, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x3, 0x3515ddcc, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10000, 0x2, 0x802ce}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1.515911397s ago: executing program 32 (id=564): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x105334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0xc, 0x200, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0xe, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x7, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x1, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x8, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x3, 0x3515ddcc, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10000, 0x2, 0x802ce}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1.438161354s ago: executing program 0 (id=567): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x60, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x2}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x367, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x40008c0) 1.37576505s ago: executing program 0 (id=568): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x75, 0x39, 0x21, 0x8, 0x46d, 0x8c6, 0x7cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x48, 0x7e, [{{0x9, 0x4, 0xfc, 0x0, 0x0, 0xff, 0x1, 0x0, 0x4}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x0, 0x0}, {0x6, &(0x7f0000000780)=@string={0x6, 0x3, "faa4c820"}}]}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001700)={0x24, 0x0, &(0x7f0000001640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000002400)={0xc, 0x0, &(0x7f0000002340)={0x0, 0x3, 0x16, @string={0x16, 0x3, "bc03a1ebb2c9b272ba06abfba327728523dcf5b8"}}}, 0x0) 392.430586ms ago: executing program 4 (id=573): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10) syz_emit_vhci(&(0x7f0000005800)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x11}, @hci_ev_le_direct_adv_info={{}, {0x3, 0x1, @any, 0xff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x87}}}}, 0x14) 372.302078ms ago: executing program 1 (id=574): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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") symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x41c902, 0x0, 0x1}, 0x18) 312.272533ms ago: executing program 4 (id=575): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) shutdown(r1, 0x1) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 204.424702ms ago: executing program 4 (id=576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) 204.172532ms ago: executing program 1 (id=577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x34, 0x6, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 203.937623ms ago: executing program 2 (id=578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe0}}, 0x0) 158.587096ms ago: executing program 4 (id=579): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x80045430, 0x0) 101.854111ms ago: executing program 2 (id=580): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r0, &(0x7f0000000080)=""/118, 0x76) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="9800924c8f", 0x5}], 0x1) 44.364467ms ago: executing program 1 (id=581): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000480)=ANY=[@ANYBLOB="ddf963", @ANYBLOB="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"]) 44.132046ms ago: executing program 4 (id=582): syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000140)='./file1\x00', 0x3000840, &(0x7f00000004c0)=ANY=[@ANYBLOB="6469725f756d61736b3d303030303030303030303030303030342c66696c655f756d61736b3d30303030303030303030303030303030303030313334302c696f636861727365743d6d61637475726b6973682c636f6465706167653d69736f383835392d362c63726561746f723d4ddd71752c00eace691af6ae10469da9b01baceb6a9486a6be7f83429052dab3e6e5e287ba3d79e809945e4361c0019a8ed88ae1c6c541bb9a966c0e4d7bde2f8e3add0af5a9c74c520f889381fbcf573e0000000000"], 0x11, 0x2e1, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) 34.266097ms ago: executing program 2 (id=583): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x81, 0x3, 0xfffffffe, 0x717e387f, 0xc0, "1ae34e06268cb2fb00bd00", 0x6, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000020c0), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="d46c3b9397394266a9831020b2e9a17e", 0x10}], 0x1) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) 0s ago: executing program 4 (id=584): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) kernel console output (not intermixed with test programs): 88] ? iov_iter_kvec+0xb4/0x170 [ 70.376243][ T4388] __kernel_read+0x4eb/0x910 [ 70.380816][ T4388] ? __kasan_kmalloc+0xcc/0xf0 [ 70.385577][ T4388] ? rw_verify_area+0x1b0/0x1b0 [ 70.390446][ T4388] integrity_kernel_read+0x86/0xd0 [ 70.395551][ T4388] ? integrity_inode_free+0x170/0x170 [ 70.400927][ T4388] ima_calc_file_hash+0x1546/0x18e0 [ 70.406125][ T4388] ? __lock_acquire+0x13ad/0x7c60 [ 70.411140][ T4388] ? stack_trace_snprint+0xf0/0xf0 [ 70.416243][ T4388] ? check_noncircular+0x16f/0x310 [ 70.421358][ T4388] ? ima_alloc_tfm+0x2f0/0x2f0 [ 70.426144][ T4388] ? __mutex_trylock_common+0x14f/0x250 [ 70.431677][ T4388] ? rcu_lock_release+0x20/0x20 [ 70.436516][ T4388] ? process_measurement+0x65b/0x1a10 [ 70.441876][ T4388] ima_collect_measurement+0x2ef/0x760 [ 70.447335][ T4388] ? ima_get_action+0xa0/0xa0 [ 70.452010][ T4388] ? preempt_count_add+0x8d/0x190 [ 70.457024][ T4388] process_measurement+0xfb9/0x1a10 [ 70.462220][ T4388] ? ima_file_mmap+0x150/0x150 [ 70.466967][ T4388] ? tomoyo_check_path_number_acl+0x280/0x280 [ 70.473047][ T4388] ? aa_get_task_label+0x21c/0x2c0 [ 70.478148][ T4388] ima_file_check+0xc1/0x100 [ 70.482722][ T4388] ? ima_bprm_check+0x1f0/0x1f0 [ 70.487565][ T4388] path_openat+0x2735/0x2f30 [ 70.492168][ T4388] ? do_filp_open+0x3e0/0x3e0 [ 70.496843][ T4388] do_filp_open+0x1b3/0x3e0 [ 70.501335][ T4388] ? vfs_tmpfile+0x300/0x300 [ 70.505924][ T4388] ? _raw_spin_unlock+0x24/0x40 [ 70.510759][ T4388] ? alloc_fd+0x598/0x630 [ 70.515084][ T4388] do_sys_openat2+0x142/0x4a0 [ 70.519750][ T4388] ? __lock_acquire+0x7c60/0x7c60 [ 70.524766][ T4388] ? do_sys_open+0xe0/0xe0 [ 70.529169][ T4388] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 70.535139][ T4388] ? lock_chain_count+0x20/0x20 [ 70.539974][ T4388] ? vtime_user_exit+0x2dc/0x400 [ 70.544900][ T4388] __x64_sys_openat+0x135/0x160 [ 70.549740][ T4388] do_syscall_64+0x4c/0xa0 [ 70.554143][ T4388] ? clear_bhb_loop+0x30/0x80 [ 70.558803][ T4388] ? clear_bhb_loop+0x30/0x80 [ 70.563463][ T4388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.569343][ T4388] RIP: 0033:0x7f81f3c4b749 [ 70.573742][ T4388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.593335][ T4388] RSP: 002b:00007f81f1eb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 70.601733][ T4388] RAX: ffffffffffffffda RBX: 00007f81f3ea1fa0 RCX: 00007f81f3c4b749 [ 70.609692][ T4388] RDX: 000000000014b442 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 70.617647][ T4388] RBP: 00007f81f3ccff91 R08: 0000000000000000 R09: 0000000000000000 [ 70.625604][ T4388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.633560][ T4388] R13: 00007f81f3ea2038 R14: 00007f81f3ea1fa0 R15: 00007ffd676ef658 [ 70.641533][ T4388] [ 70.655285][ T4388] NILFS (loop2): btree level mismatch (ino=16): 1 != 3 [ 70.662566][ T4388] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 70.683638][ T154] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 70.696953][ T4388] CPU: 0 PID: 4388 Comm: syz.2.22 Not tainted syzkaller #0 [ 70.704164][ T4388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.714217][ T4388] Call Trace: [ 70.717498][ T4388] [ 70.720432][ T4388] dump_stack_lvl+0x168/0x230 [ 70.725119][ T4388] ? show_regs_print_info+0x20/0x20 [ 70.730342][ T4388] nilfs_btree_do_lookup+0x96f/0xaf0 [ 70.735649][ T4388] ? nilfs_btree_alloc_path+0x4c/0x600 [ 70.741122][ T4388] ? nilfs_btree_alloc_path+0x600/0x600 [ 70.746682][ T4388] ? nilfs_btree_alloc_path+0x5e5/0x600 [ 70.752253][ T4388] nilfs_btree_lookup_contig+0xfa/0xc00 [ 70.757825][ T4388] ? __might_sleep+0xf0/0xf0 [ 70.762420][ T4388] ? read_lock_is_recursive+0x10/0x10 [ 70.767802][ T4388] ? __might_sleep+0xf0/0xf0 [ 70.772402][ T4388] ? nilfs_btree_lookup+0x70/0x70 [ 70.777433][ T4388] ? __up_read+0x27c/0x660 [ 70.781864][ T4388] ? down_read+0x1aa/0x2e0 [ 70.786295][ T4388] nilfs_bmap_lookup_contig+0x87/0x160 [ 70.791773][ T4388] nilfs_get_block+0x1f8/0x8f0 [ 70.796556][ T4388] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 70.801938][ T4388] ? memset+0x1e/0x40 [ 70.805939][ T4388] block_read_full_page+0x2e8/0xd10 [ 70.811151][ T4388] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 70.816529][ T4388] ? block_is_partially_uptodate+0x2d0/0x2d0 [ 70.822532][ T4388] ? mark_lock+0x94/0x320 [ 70.826886][ T4388] do_mpage_readpage+0x1932/0x1e30 [ 70.832027][ T4388] ? mpage_readahead+0x8a0/0x8a0 [ 70.836976][ T4388] ? page_cache_ra_unbounded+0x83a/0x930 [ 70.842618][ T4388] ? preempt_count_add+0x8d/0x190 [ 70.847648][ T4388] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 70.853028][ T4388] mpage_readpage+0xae/0x180 [ 70.857628][ T4388] ? do_mpage_readpage+0x1e30/0x1e30 [ 70.862937][ T4388] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 70.868320][ T4388] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 70.874834][ T4388] filemap_read_page+0x17b/0x4c0 [ 70.879780][ T4388] filemap_read+0x13d5/0x2480 [ 70.884491][ T4388] ? find_get_pages_range_tag+0x450/0x450 [ 70.890221][ T4388] ? unwind_get_return_address+0x49/0x80 [ 70.895877][ T4388] ? generic_file_read_iter+0x96/0x490 [ 70.901341][ T4388] ? memset+0x1e/0x40 [ 70.905334][ T4388] ? iov_iter_kvec+0xb4/0x170 [ 70.910021][ T4388] __kernel_read+0x4eb/0x910 [ 70.914614][ T4388] ? __kasan_kmalloc+0xcc/0xf0 [ 70.919386][ T4388] ? rw_verify_area+0x1b0/0x1b0 [ 70.924266][ T4388] integrity_kernel_read+0x86/0xd0 [ 70.929384][ T4388] ? integrity_inode_free+0x170/0x170 [ 70.934769][ T4388] ima_calc_file_hash+0x1546/0x18e0 [ 70.939976][ T4388] ? __lock_acquire+0x13ad/0x7c60 [ 70.945003][ T4388] ? stack_trace_snprint+0xf0/0xf0 [ 70.950117][ T4388] ? check_noncircular+0x16f/0x310 [ 70.955242][ T4388] ? ima_alloc_tfm+0x2f0/0x2f0 [ 70.960071][ T4388] ? __mutex_trylock_common+0x14f/0x250 [ 70.965634][ T4388] ? rcu_lock_release+0x20/0x20 [ 70.970499][ T4388] ? process_measurement+0x65b/0x1a10 [ 70.975890][ T4388] ima_collect_measurement+0x2ef/0x760 [ 70.981369][ T4388] ? ima_get_action+0xa0/0xa0 [ 70.986071][ T4388] ? preempt_count_add+0x8d/0x190 [ 70.987283][ T4435] loop3: detected capacity change from 0 to 1024 [ 70.991109][ T4388] process_measurement+0xfb9/0x1a10 [ 70.991148][ T4388] ? ima_file_mmap+0x150/0x150 [ 71.007376][ T4388] ? tomoyo_check_path_number_acl+0x280/0x280 [ 71.013489][ T4388] ? aa_get_task_label+0x21c/0x2c0 [ 71.018622][ T4388] ima_file_check+0xc1/0x100 [ 71.023225][ T4388] ? ima_bprm_check+0x1f0/0x1f0 [ 71.028099][ T4388] path_openat+0x2735/0x2f30 [ 71.032734][ T4388] ? do_filp_open+0x3e0/0x3e0 [ 71.037444][ T4388] do_filp_open+0x1b3/0x3e0 [ 71.041957][ T4388] ? vfs_tmpfile+0x300/0x300 [ 71.046577][ T4388] ? _raw_spin_unlock+0x24/0x40 [ 71.051437][ T4388] ? alloc_fd+0x598/0x630 [ 71.055790][ T4388] do_sys_openat2+0x142/0x4a0 [ 71.060479][ T4388] ? __lock_acquire+0x7c60/0x7c60 [ 71.065521][ T4388] ? do_sys_open+0xe0/0xe0 [ 71.069947][ T4388] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 71.075939][ T4388] ? lock_chain_count+0x20/0x20 [ 71.080802][ T4388] ? vtime_user_exit+0x2dc/0x400 [ 71.085751][ T4388] __x64_sys_openat+0x135/0x160 [ 71.090621][ T4388] do_syscall_64+0x4c/0xa0 [ 71.095043][ T4388] ? clear_bhb_loop+0x30/0x80 [ 71.099728][ T4388] ? clear_bhb_loop+0x30/0x80 [ 71.104420][ T4388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.110320][ T4388] RIP: 0033:0x7f81f3c4b749 [ 71.114737][ T4388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.134343][ T4388] RSP: 002b:00007f81f1eb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 71.142761][ T4388] RAX: ffffffffffffffda RBX: 00007f81f3ea1fa0 RCX: 00007f81f3c4b749 [ 71.150740][ T4388] RDX: 000000000014b442 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 71.158713][ T4388] RBP: 00007f81f3ccff91 R08: 0000000000000000 R09: 0000000000000000 [ 71.166687][ T4388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.171378][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.174656][ T4388] R13: 00007f81f3ea2038 R14: 00007f81f3ea1fa0 R15: 00007ffd676ef658 [ 71.174688][ T4388] [ 71.189279][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.207210][ T4181] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 71.250963][ T4388] NILFS (loop2): btree level mismatch (ino=16): 1 != 3 [ 71.268130][ T4388] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 71.277842][ T4290] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 71.331360][ T4388] CPU: 1 PID: 4388 Comm: syz.2.22 Not tainted syzkaller #0 [ 71.338575][ T4388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.348625][ T4388] Call Trace: [ 71.351900][ T4388] [ 71.354831][ T4388] dump_stack_lvl+0x168/0x230 [ 71.359521][ T4388] ? show_regs_print_info+0x20/0x20 [ 71.364741][ T4388] nilfs_btree_do_lookup+0x96f/0xaf0 [ 71.370043][ T4388] ? nilfs_btree_alloc_path+0x4c/0x600 [ 71.375518][ T4388] ? nilfs_btree_alloc_path+0x600/0x600 [ 71.381073][ T4388] ? nilfs_btree_alloc_path+0x5e5/0x600 [ 71.386633][ T4388] nilfs_btree_lookup_contig+0xfa/0xc00 [ 71.392197][ T4388] ? __might_sleep+0xf0/0xf0 [ 71.396793][ T4388] ? read_lock_is_recursive+0x10/0x10 [ 71.402171][ T4388] ? __might_sleep+0xf0/0xf0 [ 71.406767][ T4388] ? nilfs_btree_lookup+0x70/0x70 [ 71.411793][ T4388] ? __up_read+0x27c/0x660 [ 71.416215][ T4388] ? down_read+0x1aa/0x2e0 [ 71.420635][ T4388] nilfs_bmap_lookup_contig+0x87/0x160 [ 71.426101][ T4388] nilfs_get_block+0x1f8/0x8f0 [ 71.430895][ T4388] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 71.436273][ T4388] ? memset+0x1e/0x40 [ 71.440263][ T4388] block_read_full_page+0x2e8/0xd10 [ 71.445467][ T4388] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 71.450849][ T4388] ? block_is_partially_uptodate+0x2d0/0x2d0 [ 71.456840][ T4388] ? mark_lock+0x94/0x320 [ 71.461178][ T4388] do_mpage_readpage+0x1932/0x1e30 [ 71.466313][ T4388] ? mpage_readahead+0x8a0/0x8a0 [ 71.471258][ T4388] ? page_cache_ra_unbounded+0x83a/0x930 [ 71.473185][ T4460] loop0: detected capacity change from 0 to 32768 [ 71.476889][ T4388] ? preempt_count_add+0x8d/0x190 [ 71.488284][ T4388] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 71.493666][ T4388] mpage_readpage+0xae/0x180 [ 71.498266][ T4388] ? do_mpage_readpage+0x1e30/0x1e30 [ 71.503578][ T4388] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 71.508959][ T4388] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 71.515471][ T4388] filemap_read_page+0x17b/0x4c0 [ 71.520426][ T4388] filemap_read+0x13d5/0x2480 [ 71.525145][ T4388] ? find_get_pages_range_tag+0x450/0x450 [ 71.530871][ T4388] ? unwind_get_return_address+0x49/0x80 [ 71.536528][ T4388] ? generic_file_read_iter+0x96/0x490 [ 71.541991][ T4388] ? memset+0x1e/0x40 [ 71.545979][ T4388] ? iov_iter_kvec+0xb4/0x170 [ 71.550662][ T4388] __kernel_read+0x4eb/0x910 [ 71.555255][ T4388] ? __kasan_kmalloc+0xcc/0xf0 [ 71.560018][ T4388] ? rw_verify_area+0x1b0/0x1b0 [ 71.564877][ T4388] integrity_kernel_read+0x86/0xd0 [ 71.569982][ T4388] ? integrity_inode_free+0x170/0x170 [ 71.575352][ T4388] ima_calc_file_hash+0x1546/0x18e0 [ 71.580544][ T4388] ? __lock_acquire+0x13ad/0x7c60 [ 71.585554][ T4388] ? stack_trace_snprint+0xf0/0xf0 [ 71.590649][ T4388] ? check_noncircular+0x16f/0x310 [ 71.595749][ T4388] ? ima_alloc_tfm+0x2f0/0x2f0 [ 71.600668][ T4388] ? __mutex_trylock_common+0x14f/0x250 [ 71.606215][ T4388] ? rcu_lock_release+0x20/0x20 [ 71.611066][ T4388] ? process_measurement+0x65b/0x1a10 [ 71.616430][ T4388] ima_collect_measurement+0x2ef/0x760 [ 71.621882][ T4388] ? ima_get_action+0xa0/0xa0 [ 71.626563][ T4388] ? preempt_count_add+0x8d/0x190 [ 71.631584][ T4388] process_measurement+0xfb9/0x1a10 [ 71.636783][ T4388] ? ima_file_mmap+0x150/0x150 [ 71.641536][ T4388] ? tomoyo_check_path_number_acl+0x280/0x280 [ 71.647629][ T4388] ? aa_get_task_label+0x21c/0x2c0 [ 71.652733][ T4388] ima_file_check+0xc1/0x100 [ 71.657312][ T4388] ? ima_bprm_check+0x1f0/0x1f0 [ 71.662155][ T4388] path_openat+0x2735/0x2f30 [ 71.666757][ T4388] ? do_filp_open+0x3e0/0x3e0 [ 71.671437][ T4388] do_filp_open+0x1b3/0x3e0 [ 71.675930][ T4388] ? vfs_tmpfile+0x300/0x300 [ 71.680521][ T4388] ? _raw_spin_unlock+0x24/0x40 [ 71.685363][ T4388] ? alloc_fd+0x598/0x630 [ 71.689688][ T4388] do_sys_openat2+0x142/0x4a0 [ 71.694354][ T4388] ? __lock_acquire+0x7c60/0x7c60 [ 71.699370][ T4388] ? do_sys_open+0xe0/0xe0 [ 71.703774][ T4388] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 71.709748][ T4388] ? lock_chain_count+0x20/0x20 [ 71.714586][ T4388] ? vtime_user_exit+0x2dc/0x400 [ 71.719517][ T4388] __x64_sys_openat+0x135/0x160 [ 71.724363][ T4388] do_syscall_64+0x4c/0xa0 [ 71.728772][ T4388] ? clear_bhb_loop+0x30/0x80 [ 71.733437][ T4388] ? clear_bhb_loop+0x30/0x80 [ 71.738118][ T4388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.743997][ T4388] RIP: 0033:0x7f81f3c4b749 [ 71.748401][ T4388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.767991][ T4388] RSP: 002b:00007f81f1eb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 71.776389][ T4388] RAX: ffffffffffffffda RBX: 00007f81f3ea1fa0 RCX: 00007f81f3c4b749 [ 71.784347][ T4388] RDX: 000000000014b442 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 71.792304][ T4388] RBP: 00007f81f3ccff91 R08: 0000000000000000 R09: 0000000000000000 [ 71.800260][ T4388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.808215][ T4388] R13: 00007f81f3ea2038 R14: 00007f81f3ea1fa0 R15: 00007ffd676ef658 [ 71.816184][ T4388] [ 71.850846][ T4388] NILFS (loop2): btree level mismatch (ino=16): 1 != 3 [ 71.858676][ T4435] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,data_err=ignore,,errors=continue. Quota mode: writeback. [ 71.872001][ T4388] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 71.896146][ T4460] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 71.904371][ T4460] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 71.917877][ T4460] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 71.928118][ T1107] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 71.961180][ T1107] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 71.979402][ T4464] blk_update_request: I/O error, dev loop4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.040988][ T4464] qnx4: unable to read the superblock [ 72.111095][ T4290] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.111935][ T1107] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 150ms [ 72.160436][ T1107] gfs2: fsid=syz:syz.0: jid=0: Done [ 72.181886][ T4460] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 72.224475][ T4388] syz.2.22 (4388) used greatest stack depth: 19984 bytes left [ 72.252575][ T25] kauditd_printk_skb: 8 callbacks suppressed [ 72.252588][ T25] audit: type=1800 audit(1767969739.741:20): pid=4388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.22" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 72.433368][ T4468] ODEBUG: Out of memory. ODEBUG disabled [ 72.525560][ T4471] capability: warning: `syz.3.39' uses deprecated v2 capabilities in a way that may be insecure [ 72.573321][ T4466] loop4: detected capacity change from 0 to 8192 [ 72.584938][ T4468] syz.0.48 (4468): drop_caches: 2 [ 72.625560][ T4466] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 72.750880][ T4290] usb 2-1: New USB device found, idVendor=0ccd, idProduct=000a, bcdDevice= 0.00 [ 72.760310][ T4290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.797179][ T4466] REISERFS (device loop4): using ordered data mode [ 72.845002][ T4474] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 72.852458][ T4466] reiserfs: using flush barriers [ 72.874651][ T4290] usb 2-1: config 0 descriptor?? [ 72.902410][ T4290] usb 2-1: can't set config #0, error -71 [ 72.916956][ T4466] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 72.938743][ T4466] REISERFS (device loop4): checking transaction log (loop4) [ 72.943658][ T4290] usb 2-1: USB disconnect, device number 4 [ 72.967970][ T4466] REISERFS (device loop4): Using r5 hash to sort names [ 73.016116][ T4466] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 73.125539][ T4490] loop0: detected capacity change from 0 to 512 [ 73.227276][ T4490] EXT4-fs (loop0): Ignoring removed bh option [ 73.303520][ T4490] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 73.385895][ T4490] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.411356][ T4489] team0 (unregistering): Port device team_slave_0 removed [ 73.481369][ T4489] team0 (unregistering): Port device team_slave_1 removed [ 73.589052][ T4462] netlink: 28 bytes leftover after parsing attributes in process `syz.4.38'. [ 73.605506][ T4513] loop2: detected capacity change from 0 to 2048 [ 73.699685][ T4513] loop2: p1 < > p4 [ 73.699685][ T4513] p4: [ 73.743094][ T4513] loop2: p4 size 722688 extends beyond EOD, truncated [ 73.749985][ T4505] loop1: detected capacity change from 0 to 32768 [ 73.752514][ T4513] loop2: p6 start 262464109 is beyond EOD, truncated [ 73.780672][ T4513] loop2: p7 size 2304 extends beyond EOD, truncated [ 74.035491][ T4515] loop0: detected capacity change from 0 to 8192 [ 74.070076][ T4522] loop2: detected capacity change from 0 to 512 [ 74.087989][ T4515] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 74.132592][ T4515] REISERFS (device loop0): using ordered data mode [ 74.157037][ T4515] reiserfs: using flush barriers [ 74.242310][ T4197] udevd[4197]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 74.255793][ T4195] udevd[4195]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 74.276126][ T4516] udevd[4516]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 74.276217][ T4172] udevd[4172]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 74.342091][ T4515] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.384939][ T4515] REISERFS (device loop0): checking transaction log (loop0) [ 74.429730][ T4515] REISERFS (device loop0): Using r5 hash to sort names [ 74.457767][ T4515] REISERFS warning (device loop0): super-2030 reiserfs_fill_super: This file system claims to use 23297 bitmap blocks in its super block, but requires 125441. Clearing to zero. [ 74.527210][ T4515] REISERFS (device loop0): using 3.5.x disk format [ 74.544422][ T4515] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 74.546830][ T4532] loop2: detected capacity change from 0 to 4096 [ 74.582173][ T4515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 74.590758][ T4526] loop1: detected capacity change from 0 to 32768 [ 74.630890][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 74.695253][ T4526] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 74.696078][ T4532] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 74.879830][ T4532] ntfs3: loop2: Failed to load $Extend. [ 74.960929][ T4536] mkiss: ax0: crc mode is auto. [ 75.033891][ T4536] loop4: detected capacity change from 0 to 2048 [ 75.046255][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.077537][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.113688][ T7] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 75.137920][ T4541] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.150913][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.185312][ T4536] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.55' resets device [ 75.380400][ T7] usb 4-1: config 0 descriptor?? [ 75.857780][ T4192] ocfs2: Unmounting device (7,1) on (node local) [ 75.918679][ T4540] loop0: detected capacity change from 0 to 32768 [ 76.048334][ T4540] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 76.081111][ T7] hid-led: probe of 0003:0FC5:B080.0002 failed with error -71 [ 76.156627][ T7] usb 4-1: USB disconnect, device number 4 [ 76.257998][ T2856] cfg80211: failed to load regulatory.db [ 76.316820][ T4551] loop1: detected capacity change from 0 to 8192 [ 76.338665][ T4180] ocfs2: Unmounting device (7,0) on (node local) [ 76.385033][ T4551] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 76.472817][ T4551] REISERFS (device loop1): using ordered data mode [ 76.540845][ T4551] reiserfs: using flush barriers [ 76.566608][ T4551] REISERFS warning (device loop1): sh-462 check_advise_trans_params: bad transaction max size (1024). FSCK? [ 76.577899][ T4570] IPVS: set_ctl: invalid protocol: 41132 224.0.0.2:20000 [ 76.680342][ T4554] loop2: detected capacity change from 0 to 32768 [ 76.756893][ T4572] loop3: detected capacity change from 0 to 4096 [ 76.832952][ T4554] XFS (loop2): Mounting V5 Filesystem [ 76.931348][ T4572] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 76.956340][ T4554] XFS (loop2): Ending clean mount [ 77.004716][ T4572] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 77.038096][ T4554] XFS (loop2): Quotacheck needed: Please wait. [ 77.042482][ T4572] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 77.100619][ T4554] XFS (loop2): Quotacheck: Done. [ 77.137207][ T4572] ntfs: volume version 3.1. [ 77.470507][ T4573] loop0: detected capacity change from 0 to 40427 [ 77.493392][ T4183] XFS (loop2): Unmounting Filesystem [ 77.498030][ T4573] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 77.500100][ T4597] netlink: 128 bytes leftover after parsing attributes in process `syz.4.60'. [ 77.567200][ T4596] loop1: detected capacity change from 0 to 8192 [ 77.589740][ T4596] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 77.607617][ T4596] REISERFS (device loop1): using ordered data mode [ 77.609509][ T4573] F2FS-fs (loop0): invalid crc value [ 77.614906][ T4596] reiserfs: using flush barriers [ 77.626986][ T4190] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 77.632457][ T4596] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.654953][ T4596] REISERFS (device loop1): checking transaction log (loop1) [ 77.690493][ T4573] F2FS-fs (loop0): Found nat_bits in checkpoint [ 77.749748][ T4596] REISERFS (device loop1): Using rupasov hash to sort names [ 77.763727][ T4596] REISERFS (device loop1): using 3.5.x disk format [ 77.775243][ T4605] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 77.791097][ T4596] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 77.840130][ T4596] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 77.843149][ T4609] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.851663][ T4596] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 77.869200][ T4596] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 77.885899][ T4596] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 77.903947][ T4595] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 77.971288][ T4573] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 78.021069][ T4595] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 78.170904][ T4613] fuse: Unknown parameter '000000010000000000001000x0000000000000003' [ 78.181871][ T4570] cgroup: noprefix used incorrectly [ 78.250114][ T4180] attempt to access beyond end of device [ 78.250114][ T4180] loop0: rw=2049, want=45104, limit=40427 [ 78.326928][ T4609] loop3: detected capacity change from 0 to 40427 [ 78.344878][ T4609] F2FS-fs (loop3): invalid crc value [ 78.360117][ T4616] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.73'. [ 78.422575][ T4609] F2FS-fs (loop3): Found nat_bits in checkpoint [ 78.508981][ T4609] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 78.521634][ T4609] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 78.661720][ T4628] loop0: detected capacity change from 0 to 4096 [ 78.726996][ T4628] ntfs: (device loop0): parse_options(): Invalid gid option argument: G|X 1 JG6Թ!y>ETXjFLg*JCP [ 78.747518][ T4630] loop1: detected capacity change from 0 to 512 [ 78.780247][ T4630] EXT4-fs (loop1): Ignoring removed bh option [ 78.879884][ T4630] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 78.917370][ T4630] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.931818][ T4630] EXT4-fs error (device loop1): ext4_resize_begin:61: comm syz.1.75: resize_inode disabled but reserved GDT blocks non-zero [ 79.053373][ T4635] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.099362][ T4628] loop0: detected capacity change from 0 to 32768 [ 79.113319][ T4630] device pim6reg1 entered promiscuous mode [ 79.320863][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 79.520175][ T4651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 79.562106][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 79.580859][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 79.701116][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 79.732581][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.770398][ T7] usb 4-1: New USB device found, idVendor=056a, idProduct=037b, bcdDevice= 0.00 [ 79.793211][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.801923][ T4656] loop0: detected capacity change from 0 to 512 [ 79.833347][ T7] usb 4-1: config 0 descriptor?? [ 79.888839][ T4643] loop2: detected capacity change from 0 to 32768 [ 79.996684][ T4643] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.036327][ T4667] loop1: detected capacity change from 0 to 1024 [ 80.318999][ T4672] loop0: detected capacity change from 0 to 4096 [ 80.323690][ T7] wacom 0003:056A:037B.0003: unknown main item tag 0x0 [ 80.349783][ T7] wacom 0003:056A:037B.0003: unknown main item tag 0x0 [ 80.367660][ T7] wacom 0003:056A:037B.0003: unknown main item tag 0x0 [ 80.387483][ T7] wacom 0003:056A:037B.0003: unknown main item tag 0x0 [ 80.408831][ T7] wacom 0003:056A:037B.0003: unknown main item tag 0x0 [ 80.437198][ T7] wacom 0003:056A:037B.0003: Unknown device_type for 'HID 056a:037b'. Assuming pen. [ 80.471736][ T7] wacom 0003:056A:037B.0003: hidraw0: USB HID v0.04 Device [HID 056a:037b] on usb-dummy_hcd.3-1/input0 [ 80.513388][ T7] input: Wacom One by Wacom M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:037B.0003/input/input7 [ 80.631159][ T7] usb 4-1: USB disconnect, device number 5 [ 80.843097][ T4679] loop2: detected capacity change from 0 to 65536 [ 80.909284][ T4681] fido_id[4681]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 80.921732][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 81.055812][ T4684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'. [ 81.328500][ T4679] loop2: detected capacity change from 0 to 40427 [ 81.359979][ T4180] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 81.390198][ T4180] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 81.570869][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 81.643875][ T4693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 81.687618][ T4693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 81.696077][ T4694] overlayfs: unrecognized mount option "verity=off" or missing value [ 81.727891][ T4693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 81.763071][ T4697] loop2: detected capacity change from 0 to 1024 [ 81.767415][ T4693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 81.779834][ T4693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 81.809239][ T4693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 81.818130][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 81.941587][ T13] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 81.957540][ T13] usb 4-1: config 0 has no interface number 0 [ 81.974890][ T13] usb 4-1: config 0 interface 110 has no altsetting 0 [ 82.153112][ T13] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=d7.20 [ 82.177692][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.205519][ T13] usb 4-1: Product: syz [ 82.219878][ T13] usb 4-1: Manufacturer: syz [ 82.236323][ T13] usb 4-1: SerialNumber: syz [ 82.255265][ T13] usb 4-1: config 0 descriptor?? [ 82.410412][ T4703] loop0: detected capacity change from 0 to 32768 [ 82.484343][ T4727] capability: warning: `syz.4.103' uses 32-bit capabilities (legacy support in use) [ 82.485803][ T4703] XFS (loop0): Mounting V5 Filesystem [ 82.552198][ T13] keyspan 4-1:0.110: Keyspan 1 port adapter converter detected [ 82.562290][ T13] keyspan 4-1:0.110: found no endpoint descriptor for endpoint 84 [ 82.575317][ T13] keyspan 4-1:0.110: found no endpoint descriptor for endpoint 81 [ 82.585424][ T4703] XFS (loop0): Ending clean mount [ 82.586655][ T13] keyspan 4-1:0.110: found no endpoint descriptor for endpoint 1 [ 82.602825][ T13] keyspan 4-1:0.110: found no endpoint descriptor for endpoint 2 [ 82.614068][ T13] keyspan 4-1:0.110: found no endpoint descriptor for endpoint 83 [ 82.625406][ T13] keyspan 4-1:0.110: found no endpoint descriptor for endpoint 3 [ 82.637356][ T13] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 82.651739][ T13] usb 4-1: USB disconnect, device number 6 [ 82.661055][ T13] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 82.671985][ T13] keyspan 4-1:0.110: device disconnected [ 83.003469][ T4749] loop2: detected capacity change from 0 to 1024 [ 83.045252][ T4749] EXT4-fs (loop2): Ignoring removed bh option [ 83.061086][ T4749] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.115804][ T4749] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent [ 83.148062][ T4180] XFS (loop0): Unmounting Filesystem [ 83.432196][ T4238] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 83.743661][ T4402] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.821178][ T4238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.835220][ T25] audit: type=1326 audit(1767969751.361:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd687e749 code=0x7ffc0000 [ 83.840829][ T4238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.890198][ T25] audit: type=1326 audit(1767969751.391:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd687e749 code=0x7ffc0000 [ 83.907592][ T4238] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.977849][ T4238] usb 4-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 83.994706][ T25] audit: type=1326 audit(1767969751.391:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbd687e749 code=0x7ffc0000 [ 84.013688][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.047541][ T4238] usb 4-1: config 0 descriptor?? [ 84.061010][ T25] audit: type=1326 audit(1767969751.391:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd687e749 code=0x7ffc0000 [ 84.133034][ T25] audit: type=1326 audit(1767969751.391:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd687e749 code=0x7ffc0000 [ 84.186523][ T4402] usb 3-1: config 0 has no interfaces? [ 84.220856][ T25] audit: type=1326 audit(1767969751.401:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fcbd687e749 code=0x7ffc0000 [ 84.290993][ T25] audit: type=1326 audit(1767969751.401:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd687e749 code=0x7ffc0000 [ 84.333195][ T25] audit: type=1326 audit(1767969751.401:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd687e749 code=0x7ffc0000 [ 84.444819][ T4402] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 84.468340][ T4402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.507665][ T4402] usb 3-1: Product: syz [ 84.520868][ T4402] usb 3-1: Manufacturer: syz [ 84.526973][ T4797] loop0: detected capacity change from 0 to 512 [ 84.535210][ T4402] usb 3-1: SerialNumber: syz [ 84.551448][ T4238] hid (null): bogus close delimiter [ 84.558975][ T4238] wacom 0003:056A:00B5.0004: bogus close delimiter [ 84.572471][ T4238] wacom 0003:056A:00B5.0004: item 0 0 2 10 parsing failed [ 84.580504][ T4402] usb 3-1: config 0 descriptor?? [ 84.586754][ T4797] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.597461][ T4238] wacom 0003:056A:00B5.0004: parse failed [ 84.614038][ T4238] wacom: probe of 0003:056A:00B5.0004 failed with error -22 [ 84.677998][ T4797] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.772027][ T4238] usb 4-1: USB disconnect, device number 7 [ 84.899593][ T4402] usb 3-1: USB disconnect, device number 3 [ 84.980965][ T1107] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.040256][ T4818] __nla_validate_parse: 14 callbacks suppressed [ 85.040272][ T4818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 85.213667][ T26] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 85.231131][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 85.322435][ T4830] loop9: detected capacity change from 0 to 7 [ 85.331513][ T4830] Dev loop9: unable to read RDB block 7 [ 85.337344][ T4830] loop9: unable to read partition table [ 85.349304][ T4830] loop9: partition table beyond EOD, truncated [ 85.368053][ T4830] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 85.391458][ T1107] usb 2-1: unable to get BOS descriptor or descriptor too short [ 85.427856][ T4765] syz.2.121 (4765) used greatest stack depth: 19616 bytes left [ 85.471094][ T1107] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1023 [ 85.499274][ T1107] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.521160][ T1107] usb 2-1: config 1 interface 0 has no altsetting 0 [ 85.560883][ T26] usb 1-1: not running at top speed; connect to a high speed hub [ 85.637042][ T4838] loop3: detected capacity change from 0 to 2048 [ 85.681420][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.701493][ T1107] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 85.710553][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.732350][ T4842] loop2: detected capacity change from 0 to 128 [ 85.745032][ T4843] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.771831][ T4838] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 85.772843][ T1107] usb 2-1: Product: syz [ 85.794191][ T4838] Remounting filesystem read-only [ 85.832234][ T1107] usb 2-1: Manufacturer: syz [ 85.836853][ T1107] usb 2-1: SerialNumber: syz [ 85.860232][ T26] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 85.870090][ T26] usb 1-1: New USB device strings: Mfr=1, Product=1, SerialNumber=0 [ 85.871325][ T4842] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.878504][ T26] usb 1-1: Product: syz [ 85.892963][ T26] usb 1-1: Manufacturer: syz [ 85.913349][ T4842] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.941334][ T4807] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 86.148975][ T4402] usb 1-1: USB disconnect, device number 6 [ 86.274695][ T1107] usb 2-1: USB disconnect, device number 5 [ 86.361270][ T26] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 86.629923][ T4857] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 56226 - 0 [ 86.638884][ T4857] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 56226 - 0 [ 86.653974][ T4857] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 56226 - 0 [ 86.665492][ T4857] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 56226 - 0 [ 86.685638][ T4857] device geneve2 entered promiscuous mode [ 86.750854][ T4223] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.750964][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.831159][ T26] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 86.849146][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.870457][ T26] usb 4-1: config 0 descriptor?? [ 86.904458][ T4860] loop0: detected capacity change from 0 to 4096 [ 86.996582][ T4862] loop1: detected capacity change from 0 to 4096 [ 87.071598][ T4862] ntfs3: Unknown parameter 'windows_names' [ 87.111577][ T4223] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 87.151617][ T4223] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 87.186696][ T4223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.224173][ T4223] usb 3-1: config 0 descriptor?? [ 87.370880][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 87.425212][ T26] usbhid 4-1:0.0: can't add hid device: -71 [ 87.432464][ T26] usbhid: probe of 4-1:0.0 failed with error -71 [ 87.451683][ T26] usb 4-1: USB disconnect, device number 8 [ 87.661718][ T4321] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 87.682026][ T2856] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 87.690554][ T2856] Bluetooth: hci0: Injecting HCI hardware error event [ 87.699902][ T4188] Bluetooth: hci0: hardware error 0x00 [ 87.723269][ T4223] hid-generic 0003:6161:4D15.0005: unknown main item tag 0x0 [ 87.736702][ T4223] hid-generic 0003:6161:4D15.0005: unknown main item tag 0x0 [ 87.744819][ T4223] hid-generic 0003:6161:4D15.0005: unknown main item tag 0x0 [ 87.757930][ T4223] hid-generic 0003:6161:4D15.0005: unknown main item tag 0x0 [ 87.767939][ T4223] hid-generic 0003:6161:4D15.0005: unknown main item tag 0x0 [ 87.788336][ T4223] hid-generic 0003:6161:4D15.0005: hidraw0: USB HID v0.05 Device [HID 6161:4d15] on usb-dummy_hcd.2-1/input0 [ 87.901096][ T7] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 87.935062][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.949095][ T7] usb 1-1: Product: syz [ 87.953645][ T7] usb 1-1: Manufacturer: syz [ 87.958235][ T7] usb 1-1: SerialNumber: syz [ 87.984258][ T7] usb 1-1: config 0 descriptor?? [ 88.051415][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.067977][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.080197][ T4321] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.095809][ T4321] usb 2-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 88.104876][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.123436][ T4321] usb 2-1: config 0 descriptor?? [ 88.240395][ T4906] syz.4.180 uses obsolete (PF_INET,SOCK_PACKET) [ 88.270939][ T2856] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 88.282140][ T4906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'. [ 88.470192][ T4923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.185'. [ 88.604044][ T4321] wacom 0003:056A:00B5.0006: Unknown device_type for 'HID 056a:00b5'. Assuming pen. [ 88.622829][ T4321] wacom 0003:056A:00B5.0006: hidraw1: USB HID v0.00 Device [HID 056a:00b5] on usb-dummy_hcd.1-1/input0 [ 88.641869][ T4321] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B5.0006/input/input10 [ 88.654910][ T7] usb 1-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1f, error -71 [ 88.664437][ T7] usb 1-1: Firmware version (0.0) predates our first public release. [ 88.673186][ T7] usb 1-1: Please update to version 0.2 or newer [ 88.673463][ T2856] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 88.693194][ T2856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.700958][ T7] usb 1-1: atusb_probe: initialization failed, error = -71 [ 88.705389][ T2856] usb 4-1: config 0 descriptor?? [ 88.717824][ T7] atusb: probe of 1-1:0.0 failed with error -71 [ 88.736950][ T7] usb 1-1: USB disconnect, device number 7 [ 88.752683][ T2856] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 88.804598][ T26] usb 2-1: USB disconnect, device number 6 [ 88.852700][ T4926] fido_id[4926]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 89.182211][ T2856] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 89.357019][ T4321] usb 3-1: USB disconnect, device number 4 [ 89.465822][ T4946] loop2: detected capacity change from 0 to 128 [ 89.488996][ T4940] device syzkaller0 entered promiscuous mode [ 89.543983][ T4946] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 89.567019][ T4946] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.732996][ T4951] loop0: detected capacity change from 0 to 512 [ 89.784409][ T4951] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 89.808570][ T4951] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #13: comm syz.0.194: iget: bad i_size value: 12154757448730 [ 89.848936][ T4951] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.194: couldn't read orphan inode 13 (err -117) [ 89.867719][ T2856] gspca_cpia1: usb_control_msg 05, error -71 [ 89.874901][ T2856] cpia1 4-1:0.0: unexpected systemstate: 00 [ 89.897063][ T2856] usb 4-1: USB disconnect, device number 9 [ 89.903147][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 89.916254][ T4951] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,stripe=0x000000000000ffff,sysvgroups,jqfmt=vfsold,nouid32,grpjquota=.,errors=continue. Quota mode: writeback. [ 90.170914][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 90.290984][ T4402] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 90.301020][ T21] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 90.309197][ T21] usb 2-1: config 0 has no interface number 0 [ 90.315501][ T21] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 172, changing to 7 [ 90.467939][ T4960] Zero length message leads to an empty skb [ 90.481774][ T21] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 90.491208][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.499227][ T21] usb 2-1: Product: syz [ 90.504157][ T21] usb 2-1: Manufacturer: syz [ 90.508758][ T21] usb 2-1: SerialNumber: syz [ 90.522129][ T21] usb 2-1: config 0 descriptor?? [ 90.563210][ T21] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 90.573951][ T21] em28xx 2-1:0.132: Video interface 132 found: isoc [ 90.621664][ T4968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.198'. [ 90.661903][ T4402] usb 1-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 90.674442][ T4402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.722906][ T4402] pwc: Logitech ViewPort AV 100 webcam detected. [ 90.872158][ T21] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 90.981085][ T21] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 90.990235][ T21] em28xx 2-1:0.132: board has no eeprom [ 91.000872][ T1107] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 91.080857][ T21] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 91.089010][ T21] em28xx 2-1:0.132: analog set to isoc mode. [ 91.098222][ T21] usb 2-1: USB disconnect, device number 7 [ 91.107299][ T21] em28xx 2-1:0.132: Disconnecting em28xx [ 91.113415][ T26] em28xx 2-1:0.132: Registering V4L2 extension [ 91.160702][ T4951] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 91.160860][ T4321] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 91.187975][ T26] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 91.196136][ T26] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 91.203409][ T4402] pwc: send_video_command error -71 [ 91.208682][ T4402] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 91.216211][ T26] em28xx 2-1:0.132: No AC97 audio processor [ 91.224668][ T4402] Philips webcam: probe of 1-1:127.0 failed with error -71 [ 91.234426][ T26] usb 2-1: Decoder not found [ 91.239006][ T26] em28xx 2-1:0.132: failed to create media graph [ 91.255749][ T4402] usb 1-1: USB disconnect, device number 8 [ 91.262551][ T26] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 91.271443][ T1107] usb 4-1: Using ep0 maxpacket: 32 [ 91.277646][ T26] em28xx 2-1:0.132: Remote control support is not available for this card. [ 91.286669][ T21] em28xx 2-1:0.132: Closing input extension [ 91.327557][ T21] em28xx 2-1:0.132: Freeing device [ 91.411019][ T1107] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 91.420153][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.429789][ T1107] usb 4-1: config 0 descriptor?? [ 91.472950][ T1107] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 91.540963][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.552136][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.561977][ T4321] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 91.571076][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.580629][ T4321] usb 3-1: config 0 descriptor?? [ 91.618079][ T4983] lo speed is unknown, defaulting to 1000 [ 91.625175][ T4983] lo speed is unknown, defaulting to 1000 [ 91.633946][ T4983] lo speed is unknown, defaulting to 1000 [ 91.644842][ T4983] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 91.655583][ T4983] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 91.681571][ T4983] lo speed is unknown, defaulting to 1000 [ 91.687980][ T4983] lo speed is unknown, defaulting to 1000 [ 91.695172][ T4983] lo speed is unknown, defaulting to 1000 [ 91.702125][ T4983] lo speed is unknown, defaulting to 1000 [ 91.708807][ T4983] lo speed is unknown, defaulting to 1000 [ 92.042121][ T4321] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 92.054744][ T4999] loop1: detected capacity change from 0 to 256 [ 92.064032][ T4321] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 92.111447][ T4999] exfat: Deprecated parameter 'utf8' [ 92.131177][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 92.141415][ T4999] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 92.251272][ T4321] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 92.265357][ T5001] loop1: detected capacity change from 0 to 128 [ 92.401216][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 92.490668][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.214'. [ 92.541106][ T7] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 92.549292][ T7] usb 1-1: config 0 has no interface number 0 [ 92.555606][ T7] usb 1-1: config 0 interface 12 has no altsetting 0 [ 92.585910][ T1107] gspca_vc032x: reg_w err -71 [ 92.590586][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.596333][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.602134][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.607515][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.613083][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.618465][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.625096][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.630484][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.636116][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.641978][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.647262][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.652915][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.658200][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.663972][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.669263][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.674759][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.680037][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.685835][ T1107] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.691257][ T1107] gspca_vc032x: Unknown sensor... [ 92.696309][ T1107] vc032x: probe of 4-1:0.0 failed with error -22 [ 92.701652][ T4402] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 92.721505][ T1107] usb 4-1: USB disconnect, device number 10 [ 92.731112][ T7] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 92.740144][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.748870][ T7] usb 1-1: Product: syz [ 92.753383][ T7] usb 1-1: Manufacturer: syz [ 92.757977][ T7] usb 1-1: SerialNumber: syz [ 92.763983][ T7] usb 1-1: config 0 descriptor?? [ 92.917608][ T4975] cp2112 0003:10C4:EA90.0007: Unsupported transaction 0 [ 92.925209][ T4975] cp2112 0003:10C4:EA90.0007: Error starting transaction: -38 [ 92.950967][ T4321] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 92.960544][ T4321] usb 3-1: USB disconnect, device number 5 [ 93.009286][ T5019] fido_id[5019]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 93.071010][ T4402] usb 2-1: config 0 has an invalid interface number: 104 but max is 0 [ 93.079209][ T4402] usb 2-1: config 0 has no interface number 0 [ 93.092240][ T4402] usb 2-1: config 0 interface 104 has no altsetting 0 [ 93.103370][ T5021] loop3: detected capacity change from 0 to 64 [ 93.202524][ T5025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.223'. [ 93.260902][ T4402] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 93.270131][ T4402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.278566][ T4402] usb 2-1: Product: syz [ 93.282933][ T4402] usb 2-1: Manufacturer: syz [ 93.287527][ T4402] usb 2-1: SerialNumber: syz [ 93.300184][ T4402] usb 2-1: config 0 descriptor?? [ 93.528557][ T1107] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 93.578337][ T5045] loop2: detected capacity change from 0 to 256 [ 93.611148][ T5045] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 93.719891][ T5003] loop1: detected capacity change from 0 to 32768 [ 93.774499][ T5003] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.212 (5003) [ 93.837676][ T5003] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 93.847893][ T5003] BTRFS info (device loop1): setting nodatacow, compression disabled [ 93.856060][ T5003] BTRFS info (device loop1): force clearing of disk cache [ 93.863237][ T5003] BTRFS info (device loop1): enabling ssd optimizations [ 93.870178][ T5003] BTRFS info (device loop1): using spread ssd allocation scheme [ 93.877886][ T5003] BTRFS info (device loop1): turning off barriers [ 93.884439][ T5003] BTRFS info (device loop1): disabling free space tree [ 93.891351][ T5003] BTRFS info (device loop1): not using ssd optimizations [ 93.898378][ T5003] BTRFS info (device loop1): not using spread ssd allocation scheme [ 93.906461][ T5003] BTRFS info (device loop1): has skinny extents [ 93.938803][ T5003] BTRFS info (device loop1): clearing free space tree [ 93.946283][ T5003] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 93.956897][ T5003] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 94.031050][ T1107] usb 4-1: Using ep0 maxpacket: 32 [ 94.033991][ T5072] overlayfs: failed to clone upperpath [ 94.091257][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 94.161082][ T1107] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 94.177254][ T1107] usb 4-1: config 0 has no interface number 0 [ 94.183488][ T1107] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.194738][ T1107] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.205003][ T1107] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 94.214169][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.232083][ T1107] usb 4-1: config 0 descriptor?? [ 94.350818][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 94.470931][ T13] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 94.479353][ T13] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 94.488587][ T13] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 94.497588][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 94.507352][ T13] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 94.517010][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 94.530061][ T13] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 94.539127][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.560900][ T13] usb 3-1: config 0 descriptor?? [ 94.656484][ T4402] go7007: probe of 2-1:0.104 failed with error -12 [ 94.678639][ T4402] usb 2-1: USB disconnect, device number 8 [ 94.696260][ T7] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 94.706250][ T7] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 94.714327][ T7] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 94.726245][ T7] f81534: probe of 1-1:0.12 failed with error -71 [ 94.736622][ T7] usb 1-1: USB disconnect, device number 9 [ 94.817494][ T13] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 94.848606][ T13] usb 3-1: USB disconnect, device number 6 [ 94.870088][ T13] usblp0: removed [ 94.900964][ T1107] uclogic 0003:28BD:0094.0008: pen parameters not found [ 94.907953][ T1107] uclogic 0003:28BD:0094.0008: interface is invalid, ignoring [ 95.140537][ T5092] loop5: detected capacity change from 0 to 7 [ 95.154901][ T4531] Dev loop5: unable to read RDB block 7 [ 95.161974][ T4531] loop5: AHDI p1 [ 95.165836][ T4531] loop5: partition table partially beyond EOD, truncated [ 95.186931][ T5092] Dev loop5: unable to read RDB block 7 [ 95.198397][ T5092] loop5: AHDI p1 [ 95.202444][ T5092] loop5: partition table partially beyond EOD, truncated [ 95.202689][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.217723][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.370968][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 96.300870][ T4223] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 96.350893][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 96.473798][ T5088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.486634][ T13] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 96.499038][ T13] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 96.514669][ T13] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 96.525653][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.539858][ T13] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 96.556189][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 96.569858][ T13] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 96.589497][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.614020][ T13] usb 3-1: config 0 descriptor?? [ 96.658503][ T5088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.671008][ T4223] usb 1-1: config 0 has an invalid interface number: 22 but max is 0 [ 96.679090][ T4223] usb 1-1: config 0 has no interface number 0 [ 96.840906][ T4223] usb 1-1: New USB device found, idVendor=2770, idProduct=913d, bcdDevice=bd.5e [ 96.852413][ T13] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 96.865776][ T4223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.879520][ T25] audit: type=1326 audit(1767969764.401:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5109 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f3c4b749 code=0x7ffc0000 [ 96.906400][ T13] usb 3-1: USB disconnect, device number 7 [ 96.912284][ T4223] usb 1-1: Product: syz [ 96.916443][ T4223] usb 1-1: Manufacturer: syz [ 96.923266][ T4223] usb 1-1: SerialNumber: syz [ 96.929859][ T13] usblp0: removed [ 96.951382][ T25] audit: type=1326 audit(1767969764.401:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5109 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f81f3c4b749 code=0x7ffc0000 [ 96.952402][ T4223] usb 1-1: config 0 descriptor?? [ 96.979109][ T25] audit: type=1326 audit(1767969764.401:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5109 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f3c4b749 code=0x7ffc0000 [ 97.024362][ T4223] gspca_main: sq905c-2.14.0 probing 2770:913d [ 97.103026][ T5088] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.112169][ T5088] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.121226][ T5088] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.130517][ T5088] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.218860][ T5108] team0: Device gtp0 is of different type [ 97.331057][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 97.349199][ T5078] usb 4-1: USB disconnect, device number 11 [ 97.363508][ T5116] loop3: detected capacity change from 0 to 256 [ 97.431187][ T5116] attempt to access beyond end of device [ 97.431187][ T5116] loop3: rw=2049, want=288, limit=256 [ 97.443708][ T5116] attempt to access beyond end of device [ 97.443708][ T5116] loop3: rw=2049, want=388, limit=256 [ 97.459780][ T5116] attempt to access beyond end of device [ 97.459780][ T5116] loop3: rw=34817, want=288, limit=256 [ 97.471936][ T5116] attempt to access beyond end of device [ 97.471936][ T5116] loop3: rw=34817, want=357, limit=256 [ 97.571284][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 97.690922][ T4223] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 97.698419][ T13] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 97.707633][ T4223] sq905c: probe of 1-1:0.22 failed with error -71 [ 97.714285][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.725348][ T4223] usb 1-1: USB disconnect, device number 10 [ 97.735249][ T13] usb 3-1: config 0 descriptor?? [ 97.782219][ T13] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 97.810337][ T5125] loop1: detected capacity change from 0 to 512 [ 97.854034][ T5125] EXT4-fs (loop1): Ignoring removed bh option [ 97.881814][ T5125] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 97.894961][ T5125] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.920894][ T4402] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 98.188378][ T25] audit: type=1326 audit(1767969765.711:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.4.264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6523e2749 code=0x0 [ 98.209950][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.317583][ T5158] loop1: detected capacity change from 0 to 512 [ 98.340340][ T5158] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 98.350338][ T5158] EXT4-fs (loop1): invalid journal inode [ 98.356948][ T5158] EXT4-fs (loop1): can't get journal size [ 98.363121][ T4402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.374454][ T4402] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.390464][ T4402] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 98.420077][ T5158] EXT4-fs (loop1): 1 truncate cleaned up [ 98.428315][ T4402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.438318][ T4402] usb 4-1: config 0 descriptor?? [ 98.439564][ T5158] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,grpquota,sysvgroups,lazytime,,errors=continue. Quota mode: writeback. [ 98.517144][ T5165] loop0: detected capacity change from 0 to 1024 [ 98.622209][ T5165] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.270: Invalid block bitmap block 0 in block_group 0 [ 98.638748][ T5165] EXT4-fs (loop0): Remounting filesystem read-only [ 98.645991][ T5165] Quota error (device loop0): write_blk: dquota write failed [ 98.654047][ T5165] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 98.664626][ T5165] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.270: Failed to acquire dquot type 0 [ 98.669040][ T5168] loop1: detected capacity change from 0 to 2048 [ 98.682563][ T5165] EXT4-fs (loop0): Remounting filesystem read-only [ 98.689765][ T5165] EXT4-fs error (device loop0): ext4_free_blocks:6218: comm syz.0.270: Freeing blocks not in datazone - block = 0, count = 4096 [ 98.708029][ T5165] EXT4-fs (loop0): Remounting filesystem read-only [ 98.715674][ T5165] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.270: Invalid inode bitmap blk 0 in block_group 0 [ 98.728008][ T5168] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 98.739453][ T5165] EXT4-fs (loop0): Remounting filesystem read-only [ 98.746841][ T5165] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 98.756705][ T5165] EXT4-fs (loop0): Remounting filesystem read-only [ 98.759806][ T154] Quota error (device loop0): remove_tree: Getting block too big (0 >= 8) [ 98.763920][ T5165] EXT4-fs (loop0): 1 orphan inode deleted [ 98.778511][ T5165] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; errors=remount-ro,grpid,. Quota mode: writeback. [ 98.782917][ T5168] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 98.809376][ T154] EXT4-fs error (device loop0): ext4_release_dquot:6245: comm kworker/u4:2: Failed to release dquot type 0 [ 98.832326][ T154] EXT4-fs (loop0): Remounting filesystem read-only [ 98.943792][ T4402] hid-led 0003:1294:1320.0009: unexpected long global item [ 98.965956][ T4402] hid-led: probe of 0003:1294:1320.0009 failed with error -22 [ 99.046911][ T5170] loop0: detected capacity change from 0 to 512 [ 99.059087][ T5177] No source specified [ 99.064638][ T4188] Bluetooth: hci1: hcon ffff888078d66000 sent 1 < count 9 [ 99.072480][ T4188] Bluetooth: hci1: hcon ffff888078d66000 sent 0 < count 9 [ 99.079615][ T4188] Bluetooth: hci1: hcon ffff88801a7c0000 sent 1 < count 56702 [ 99.088063][ T4188] Bluetooth: hci1: hcon ffff888078d66000 sent 0 < count 16 [ 99.109282][ T5170] EXT4-fs (loop0): Ignoring removed nobh option [ 99.120956][ T5170] EXT4-fs (loop0): old and new quota format mixing [ 99.144591][ T4223] usb 4-1: USB disconnect, device number 12 [ 99.232350][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.277'. [ 99.259752][ T5170] netlink: 60 bytes leftover after parsing attributes in process `syz.0.272'. [ 99.264824][ T5184] IPVS: set_ctl: invalid protocol: 207 255.255.255.255:20001 [ 99.320926][ T7] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 99.378067][ T25] audit: type=1326 audit(1767969766.901:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.4.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6523e2749 code=0x7ffc0000 [ 99.412797][ T25] audit: type=1326 audit(1767969766.921:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.4.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6523e2749 code=0x7ffc0000 [ 99.444317][ T25] audit: type=1326 audit(1767969766.931:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.4.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6523e2749 code=0x7ffc0000 [ 99.521078][ T13] gspca_vc032x: reg_w err -71 [ 99.526884][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.536976][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.542333][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.567480][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.573632][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.579085][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.592937][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.598396][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.604704][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.610112][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.615724][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.622706][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.628094][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.633728][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.639123][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.651641][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.656931][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.662755][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.668190][ T13] gspca_vc032x: Unknown sensor... [ 99.673390][ T13] vc032x: probe of 3-1:0.0 failed with error -22 [ 99.681050][ T7] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 99.703260][ T13] usb 3-1: USB disconnect, device number 8 [ 99.715226][ T7] usb 2-1: config 0 has no interface number 0 [ 99.749645][ T7] usb 2-1: config 0 interface 184 has no altsetting 0 [ 99.774976][ T5209] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 99.792237][ T5209] overlayfs: failed to set xattr on upper [ 99.801232][ T5209] overlayfs: ...falling back to index=off,metacopy=off. [ 99.894910][ T5219] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.931249][ T7] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a23, bcdDevice=1c.d3 [ 99.969092][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.985840][ T7] usb 2-1: Product: syz [ 99.990020][ T7] usb 2-1: Manufacturer: syz [ 99.999161][ T5225] netlink: 87 bytes leftover after parsing attributes in process `syz.0.296'. [ 100.008745][ T7] usb 2-1: SerialNumber: syz [ 100.035164][ T7] usb 2-1: config 0 descriptor?? [ 100.281644][ T21] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 100.366770][ T7] usb 2-1: USB disconnect, device number 9 [ 100.390861][ T13] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 100.550862][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 100.630900][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 100.681027][ T21] usb 4-1: config 0 has no interfaces? [ 100.686656][ T21] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 100.695953][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.706037][ T21] usb 4-1: config 0 descriptor?? [ 100.771102][ T13] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 100.779364][ T13] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 100.789655][ T13] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.799040][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.878821][ T5252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 101.009059][ T13] usb 4-1: USB disconnect, device number 13 [ 101.162464][ T5275] netlink: 'syz.2.317': attribute type 13 has an invalid length. [ 101.397025][ T5275] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.404275][ T5275] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.420328][ T5278] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.490896][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 101.604969][ T4188] Bluetooth: Wrong link type (-22) [ 101.663545][ T5282] loop3: detected capacity change from 0 to 4096 [ 101.888067][ T5275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.913664][ T5275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.011185][ T7] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 102.058840][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.067021][ T4244] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 102.074679][ T7] usb 2-1: Product: syz [ 102.078817][ T7] usb 2-1: Manufacturer: syz [ 102.083515][ T7] usb 2-1: SerialNumber: syz [ 102.231660][ T5275] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.240565][ T5275] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.249903][ T5275] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.258798][ T5275] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.353586][ T5299] IPVS: Unknown mcast interface: pim6reg [ 102.450979][ T4244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.465443][ T4244] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.479030][ T4244] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 102.488283][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.511482][ T4244] usb 4-1: config 0 descriptor?? [ 102.581280][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 102.731122][ T26] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 102.993688][ T4244] hid-led 0003:1294:1320.000A: item fetching failed at offset 0/3 [ 103.002421][ T4244] hid-led: probe of 0003:1294:1320.000A failed with error -22 [ 103.080488][ T4244] usb 1-1: USB disconnect, device number 11 [ 103.121068][ T26] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 103.130554][ T26] usb 3-1: config 0 has no interface number 0 [ 103.147307][ T5318] loop0: detected capacity change from 0 to 512 [ 103.168112][ T5318] EXT4-fs (loop0): Unrecognized mount option "journal_path" or missing value [ 103.196017][ T4223] usb 4-1: USB disconnect, device number 14 [ 103.311026][ T26] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 103.324073][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.339187][ T26] usb 3-1: Product: syz [ 103.343681][ T26] usb 3-1: Manufacturer: syz [ 103.348287][ T26] usb 3-1: SerialNumber: syz [ 103.356261][ T26] usb 3-1: config 0 descriptor?? [ 103.386519][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'. [ 103.402549][ T26] kobil_sct 3-1:0.148: required endpoints missing [ 103.515542][ T5335] loop0: detected capacity change from 0 to 4096 [ 103.584151][ T5335] netlink: 165 bytes leftover after parsing attributes in process `syz.0.342'. [ 103.605988][ T26] usb 3-1: USB disconnect, device number 9 [ 103.825470][ T5342] loop3: detected capacity change from 0 to 512 [ 103.930191][ T5342] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.951000][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 103.990991][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 104.021039][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 104.051397][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 104.090908][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 104.130973][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 104.170913][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 104.210906][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 104.252034][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 104.300999][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 104.315731][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 104.337464][ T7] lan78xx: probe of 2-1:1.0 failed with error -71 [ 104.355935][ T7] usb 2-1: USB disconnect, device number 10 [ 104.524497][ T5370] loop0: detected capacity change from 0 to 512 [ 104.773875][ T5379] lo speed is unknown, defaulting to 1000 [ 104.779669][ T5379] lo speed is unknown, defaulting to 1000 [ 104.786892][ T5379] lo speed is unknown, defaulting to 1000 [ 104.798139][ T5379] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 104.819673][ T5379] lo speed is unknown, defaulting to 1000 [ 104.826303][ T5379] lo speed is unknown, defaulting to 1000 [ 104.832919][ T5379] lo speed is unknown, defaulting to 1000 [ 104.839509][ T5379] lo speed is unknown, defaulting to 1000 [ 104.846102][ T5379] lo speed is unknown, defaulting to 1000 [ 104.871592][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 104.930932][ T4223] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 105.144742][ T5387] 9pnet: Insufficient options for proto=fd [ 105.182849][ T5391] loop2: detected capacity change from 0 to 128 [ 105.241401][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.259921][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.272383][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.285365][ T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.294715][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.308117][ T7] usb 2-1: config 0 descriptor?? [ 105.371456][ T5393] loop2: detected capacity change from 0 to 1024 [ 105.451442][ T4223] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 105.460785][ T154] hfsplus: b-tree write err: -5, ino 4 [ 105.471233][ T4223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.484216][ T4223] usb 1-1: Product: syz [ 105.488456][ T4223] usb 1-1: Manufacturer: syz [ 105.493445][ T4223] usb 1-1: SerialNumber: syz [ 105.508280][ T4223] usb 1-1: config 0 descriptor?? [ 105.626409][ T5403] loop3: detected capacity change from 0 to 1024 [ 105.686078][ T5403] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.759271][ T5403] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 105.793098][ T7] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 105.817962][ T7] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 105.847619][ T5403] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.371: missing EA_INODE flag [ 105.896063][ T5403] EXT4-fs (loop3): Remounting filesystem read-only [ 105.908107][ T5403] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.371: error while reading EA inode 11 err=-117 [ 105.923505][ T5403] EXT4-fs (loop3): Remounting filesystem read-only [ 105.930143][ T5403] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.001094][ T4223] usb 1-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 106.019762][ T4223] usb 1-1: Firmware version (0.0) predates our first public release. [ 106.027938][ T4223] usb 1-1: Please update to version 0.2 or newer [ 106.080955][ T4223] usb 1-1: Firmware: build a [ 106.085794][ T4223] usb 1-1: atusb_probe: initialization failed, error = -32 [ 106.101125][ T4223] atusb: probe of 1-1:0.0 failed with error -32 [ 106.458480][ T5422] loop2: detected capacity change from 0 to 64 [ 106.472671][ T4223] usb 2-1: USB disconnect, device number 11 [ 106.499366][ T5422] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 106.588525][ T5412] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.595803][ T5412] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.736096][ T5427] loop2: detected capacity change from 0 to 47 [ 106.948080][ T5433] loop2: detected capacity change from 0 to 512 [ 107.023031][ T5433] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.041226][ T5433] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.200897][ T25] kauditd_printk_skb: 50 callbacks suppressed [ 107.200913][ T25] audit: type=1800 audit(1767969774.701:86): pid=5433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.382" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 107.270168][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.346610][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.658995][ T5412] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.668382][ T5412] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.678129][ T5412] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.680234][ T4185] usb 1-1: USB disconnect, device number 12 [ 107.699412][ T5412] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.740862][ T13] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 107.780702][ T5449] loop0: detected capacity change from 0 to 4096 [ 107.802821][ T5449] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 107.838207][ T5449] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 107.873152][ T5412] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 56226 - 0 [ 107.882720][ T4318] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 107.889293][ T4180] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 107.889360][ T5412] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 56226 - 0 [ 107.897757][ T4180] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 107.909798][ T5412] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 56226 - 0 [ 107.922240][ T5412] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 56226 - 0 [ 107.937325][ T4180] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 107.945495][ T26] lo speed is unknown, defaulting to 1000 [ 107.983862][ T1236] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 107.992198][ T4180] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 107.992326][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 108.150994][ T13] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 108.173630][ T13] usb 3-1: config 0 has no interface number 0 [ 108.184060][ T5463] lo speed is unknown, defaulting to 1000 [ 108.201098][ T5463] lo speed is unknown, defaulting to 1000 [ 108.284407][ T5468] loop1: detected capacity change from 0 to 128 [ 108.336388][ T13] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 108.340549][ T5468] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.356570][ T5468] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.384060][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.397268][ T13] usb 3-1: Product: syz [ 108.409860][ T13] usb 3-1: Manufacturer: syz [ 108.423380][ T13] usb 3-1: SerialNumber: syz [ 108.447339][ T13] usb 3-1: config 0 descriptor?? [ 108.450827][ T26] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 108.492284][ T13] smsc95xx v2.0.0 [ 108.521696][ T5475] loop1: detected capacity change from 0 to 16 [ 108.533870][ T5477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.400'. [ 108.683261][ T5483] loop0: detected capacity change from 0 to 512 [ 108.720878][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 108.785629][ T5483] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 108.806479][ T5483] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.828421][ T5483] EXT4-fs (loop0): 1 truncate cleaned up [ 108.835143][ T5483] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,noinit_itable,nodiscard,nomblk_io_submit,barrier=0x0000000000000000,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 108.930965][ T13] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 108.986639][ T13] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 109.041240][ T26] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 109.060874][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.068865][ T26] usb 4-1: Product: syz [ 109.107560][ T26] usb 4-1: Manufacturer: syz [ 109.127605][ T26] usb 4-1: SerialNumber: syz [ 109.138900][ T26] usb 4-1: config 0 descriptor?? [ 109.206146][ T4185] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 109.431015][ T26] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 109.690937][ T13] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 109.709750][ T13] smsc95xx: probe of 3-1:0.67 failed with error -32 [ 109.861435][ T4185] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 109.870663][ T4185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.879168][ T4185] usb 1-1: Product: syz [ 109.890989][ T4185] usb 1-1: Manufacturer: syz [ 109.895588][ T4185] usb 1-1: SerialNumber: syz [ 110.181039][ T26] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 110.192913][ T26] usb 4-1: USB disconnect, device number 15 [ 110.370960][ T4185] net_ratelimit: 1 callbacks suppressed [ 110.370981][ T4185] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 110.444951][ T5525] device syzkaller0 entered promiscuous mode [ 110.467158][ T5525] device syzkaller0 left promiscuous mode [ 110.590982][ T5527] device bridge_slave_0 left promiscuous mode [ 110.598567][ T5527] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.613456][ T5527] device bridge_slave_1 left promiscuous mode [ 110.619622][ T5527] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.629445][ T5527] bond0: (slave bond_slave_0): Releasing backup interface [ 110.637890][ T5527] bond0: (slave bond_slave_1): Releasing backup interface [ 110.652176][ T5527] team0: Port device team_slave_0 removed [ 110.658835][ T5527] team0: Port device team_slave_1 removed [ 110.665099][ T5527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.673473][ T5527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.681042][ T4402] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 110.692570][ T5528] team0: Mode changed to "random" [ 110.716412][ T13] usb 3-1: USB disconnect, device number 10 [ 110.742639][ T5530] loop3: detected capacity change from 0 to 512 [ 110.859321][ T5530] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 110.882337][ T26] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 110.889711][ T5530] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.890618][ T26] Bluetooth: hci2: Injecting HCI hardware error event [ 110.908736][ T4194] Bluetooth: hci2: hardware error 0x00 [ 110.962200][ T5530] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 110.980896][ T4402] usb 2-1: Using ep0 maxpacket: 32 [ 110.986561][ T5530] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 110.999960][ T5530] EXT4-fs (loop3): This should not happen!! Data will be lost [ 110.999960][ T5530] [ 111.009822][ T5530] EXT4-fs (loop3): Total free blocks count 0 [ 111.016865][ T5530] EXT4-fs (loop3): Free/Dirty block details [ 111.023168][ T5530] EXT4-fs (loop3): free_blocks=65280 [ 111.028568][ T5530] EXT4-fs (loop3): dirty_blocks=33 [ 111.034040][ T5530] EXT4-fs (loop3): Block reservation details [ 111.040271][ T5530] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 111.056430][ T5530] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 111.069977][ T5530] EXT4-fs (loop3): This should not happen!! Data will be lost [ 111.069977][ T5530] [ 111.107719][ T4402] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.115791][ T4402] usb 2-1: config 0 has no interface number 0 [ 111.122340][ T4402] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.133269][ T4402] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.143458][ T4402] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 111.152601][ T4402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.169076][ T4402] usb 2-1: config 0 descriptor?? [ 111.710840][ T13] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 111.760959][ T4185] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 111.790888][ T4185] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 111.830951][ T4185] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 111.860897][ T4185] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 111.890928][ T4402] uclogic 0003:28BD:0094.000C: pen parameters not found [ 111.899839][ T4185] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 111.911588][ T4402] uclogic 0003:28BD:0094.000C: interface is invalid, ignoring [ 111.950950][ T4185] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 112.000917][ T4185] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 112.030896][ T4185] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 112.060877][ T4185] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 112.070999][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.086167][ T13] usb 4-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.00 [ 112.095372][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.098422][ T4402] usb 2-1: USB disconnect, device number 12 [ 112.110647][ T4185] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 112.117713][ T13] usb 4-1: config 0 descriptor?? [ 112.123411][ T4185] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 112.133837][ T4185] lan78xx: probe of 1-1:1.0 failed with error -71 [ 112.154807][ T4185] usb 1-1: USB disconnect, device number 13 [ 112.252017][ T4244] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 112.490899][ T4244] usb 3-1: Using ep0 maxpacket: 8 [ 112.618212][ T13] hid-generic 0003:05AC:0340.000D: item fetching failed at offset 5/6 [ 112.645064][ T13] hid-generic: probe of 0003:05AC:0340.000D failed with error -22 [ 112.689479][ T5594] loop1: detected capacity change from 0 to 512 [ 112.704195][ T4185] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 112.780946][ T4244] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 112.791828][ T4244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.799834][ T4244] usb 3-1: Product: syz [ 112.804802][ T4244] usb 3-1: Manufacturer: syz [ 112.809400][ T4244] usb 3-1: SerialNumber: syz [ 112.816656][ T4402] usb 4-1: USB disconnect, device number 16 [ 112.817999][ T4244] usb 3-1: config 0 descriptor?? [ 112.836374][ T5594] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 112.856757][ T5594] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.895639][ T4244] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 112.987620][ T4185] usb 1-1: Using ep0 maxpacket: 32 [ 113.004552][ T5601] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 113.038554][ T5604] loop1: detected capacity change from 0 to 512 [ 113.057890][ T5604] EXT4-fs (loop1): Ignoring removed nobh option [ 113.083458][ T5604] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 113.097351][ T5604] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.111070][ T4185] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.121049][ T4185] usb 1-1: config 0 has no interface number 0 [ 113.131717][ T5604] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.453: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 113.145698][ T4185] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.170556][ T4185] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.180668][ T4185] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 113.193651][ T4185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.206605][ T4185] usb 1-1: config 0 descriptor?? [ 113.259786][ T5610] netlink: 40 bytes leftover after parsing attributes in process `syz.4.456'. [ 113.369800][ T5617] loop3: detected capacity change from 0 to 512 [ 113.487226][ T5617] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 113.525910][ T5617] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 113.536548][ T5617] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.459: Corrupt directory, running e2fsck is recommended [ 113.571698][ T4244] gspca_sonixj: reg_w1 err -71 [ 113.576505][ T4244] sonixj: probe of 3-1:0.0 failed with error -71 [ 113.594173][ T5617] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 113.613524][ T5617] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.459: corrupted in-inode xattr [ 113.630225][ T4244] usb 3-1: USB disconnect, device number 11 [ 113.639409][ T5617] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.459: couldn't read orphan inode 15 (err -117) [ 113.667404][ T5617] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.journal_async_commit,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback. [ 113.910966][ T4185] uclogic 0003:28BD:0094.000E: failed retrieving string descriptor #100: -71 [ 113.919923][ T4185] uclogic 0003:28BD:0094.000E: failed retrieving pen parameters: -71 [ 113.929430][ T4185] uclogic 0003:28BD:0094.000E: pen probing failed: -71 [ 113.936531][ T4185] uclogic 0003:28BD:0094.000E: failed probing parameters: -71 [ 113.944460][ T4185] uclogic: probe of 0003:28BD:0094.000E failed with error -71 [ 113.969923][ T4185] usb 1-1: USB disconnect, device number 14 [ 114.241615][ T5636] loop3: detected capacity change from 0 to 4096 [ 114.260198][ T5636] ntfs3: Unknown parameter 'windows_names' [ 114.299506][ T5650] loop2: detected capacity change from 0 to 1024 [ 114.377916][ T5650] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 114.396011][ T5652] loop3: detected capacity change from 0 to 128 [ 114.398962][ T5650] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 114.418643][ T5650] EXT4-fs error (device loop2): ext4_get_journal_inode:5160: inode #32: comm syz.2.472: iget: special inode unallocated [ 114.437314][ T4402] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 114.445850][ T5650] EXT4-fs (loop2): no journal found [ 114.456256][ T5650] EXT4-fs (loop2): can't get journal size [ 114.463246][ T5650] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 114.602387][ T5661] loop3: detected capacity change from 0 to 1024 [ 114.637940][ T5661] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.699755][ T5661] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 114.851324][ T4402] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 114.859749][ T26] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 114.869894][ T4402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.886238][ T5669] loop3: detected capacity change from 0 to 2048 [ 114.960424][ T5669] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.973630][ T4402] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 114.989221][ T4402] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 115.008902][ T4402] usb 2-1: Manufacturer: syz [ 115.030699][ T4402] usb 2-1: config 0 descriptor?? [ 115.110823][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 115.134239][ T4402] rc_core: IR keymap rc-hauppauge not found [ 115.140162][ T4402] Registered IR keymap rc-empty [ 115.146066][ T4402] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 115.157279][ T4402] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 115.230983][ T26] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 115.239346][ T26] usb 1-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 115.250283][ T26] usb 1-1: config 252 has no interface number 0 [ 115.281280][ T7] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 115.366853][ T5684] overlayfs: failed to clone upperpath [ 115.412980][ T26] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 115.424028][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.433528][ T26] usb 1-1: Product: syz [ 115.437731][ T26] usb 1-1: Manufacturer: syz [ 115.446182][ T25] audit: type=1326 audit(1767969782.971:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6523e2749 code=0x7ffc0000 [ 115.471987][ T26] usb 1-1: SerialNumber: syz [ 115.483997][ T25] audit: type=1326 audit(1767969782.971:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6523e2749 code=0x7ffc0000 [ 115.510353][ T25] audit: type=1326 audit(1767969782.971:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6523e2749 code=0x7ffc0000 [ 115.537085][ T25] audit: type=1326 audit(1767969782.971:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6523e2749 code=0x7ffc0000 [ 115.560883][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 115.566955][ T26] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 115.579873][ T25] audit: type=1326 audit(1767969782.971:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6523e2749 code=0x7ffc0000 [ 115.602620][ T25] audit: type=1326 audit(1767969782.971:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6523e2749 code=0x7ffc0000 [ 115.625275][ T25] audit: type=1326 audit(1767969782.971:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6523e2749 code=0x7ffc0000 [ 115.647834][ T25] audit: type=1326 audit(1767969782.971:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6523e2749 code=0x7ffc0000 [ 115.711048][ T7] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 66, changing to 10 [ 115.726804][ T5698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.488'. [ 115.727876][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.736876][ T26] usb 2-1: USB disconnect, device number 13 [ 115.757928][ T7] usb 4-1: New USB device found, idVendor=1e71, idProduct=200d, bcdDevice= 0.00 [ 115.761259][ T1236] usb 1-1: Failed to submit usb control message: -71 [ 115.771817][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.778880][ T1236] usb 1-1: unable to send the bmi data to the device: -71 [ 115.795153][ T13] usb 1-1: USB disconnect, device number 15 [ 115.802087][ T1236] usb 1-1: unable to get target info from device [ 115.807558][ T7] usb 4-1: config 0 descriptor?? [ 115.810007][ T1236] usb 1-1: could not get target info (-71) [ 115.819755][ T1236] usb 1-1: could not probe fw (-71) [ 115.828514][ T5705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.489'. [ 115.953910][ T5711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.492'. [ 116.267113][ T5671] udc-core: couldn't find an available UDC or it's busy [ 116.277238][ T5671] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 116.304264][ T5731] loop1: detected capacity change from 0 to 128 [ 116.322922][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.330716][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.338127][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.345728][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.360839][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.371928][ T25] audit: type=1800 audit(1767969783.901:95): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.502" name="file1" dev="loop1" ino=1048598 res=0 errno=0 [ 116.378567][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.406842][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.414671][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.420819][ T26] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 116.422416][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.438216][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.445707][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.453277][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.460696][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.468479][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.475949][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.484129][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.491615][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.499070][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.506476][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.513967][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.521395][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.528843][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.536256][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.544163][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.551591][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.559072][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.567405][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.574985][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.583052][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.590508][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.598061][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.605514][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.612930][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.620300][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.627720][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.635133][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.642641][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.650014][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.657414][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.664852][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.672293][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.679668][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.680830][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 116.687501][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.700043][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.707517][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.715038][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.722524][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.729975][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.737396][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.744861][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.752300][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.759671][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.767103][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.774509][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.781969][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.789622][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.797039][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.804437][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.811844][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x1 [ 116.819211][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.820951][ T26] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 116.826627][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.835205][ T26] usb 3-1: config 0 has no interface number 0 [ 116.842384][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x7 [ 116.855791][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.863228][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.870588][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.877998][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.885418][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.893289][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.900664][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.908066][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.915472][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.922888][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.930255][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.937673][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.945066][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.952496][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x2 [ 116.959867][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.967428][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.975009][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x2 [ 116.982448][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 116.990184][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x4 [ 116.997628][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.005022][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.010929][ T26] usb 3-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=fe.bb [ 117.012435][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.026650][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.028750][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.037068][ T26] usb 3-1: Product: syz [ 117.044236][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.060179][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.062570][ T26] usb 3-1: Manufacturer: syz [ 117.067620][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.067644][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.067666][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.067688][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.067710][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x1 [ 117.067731][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.067752][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.067774][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x1 [ 117.067804][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x4 [ 117.097796][ T26] usb 3-1: SerialNumber: syz [ 117.104056][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.134828][ T26] usb 3-1: config 0 descriptor?? [ 117.139481][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.163991][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.171572][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.179023][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.186564][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x2 [ 117.194049][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.194876][ T26] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 117.203134][ T7] hid-generic 0003:1E71:200D.000F: unknown main item tag 0x0 [ 117.216073][ T7] hid-generic 0003:1E71:200D.000F: unbalanced collection at end of report description [ 117.225872][ T7] hid-generic: probe of 0003:1E71:200D.000F failed with error -22 [ 117.237456][ T7] usb 4-1: USB disconnect, device number 17 [ 117.385651][ T5741] loop1: detected capacity change from 0 to 1024 [ 117.395738][ T13] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 117.400672][ T5743] loop3: detected capacity change from 0 to 256 [ 117.458725][ T5743] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 117.525813][ T25] audit: type=1800 audit(1767969785.051:96): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.506" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 117.634795][ T4315] hfsplus: bad catalog file entry [ 117.640107][ T4315] hfsplus: b-tree write err: -5, ino 3 [ 117.640872][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 117.665255][ T5745] loop3: detected capacity change from 0 to 4096 [ 117.707135][ T5745] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 117.733561][ T5745] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 117.740626][ T5745] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 117.747337][ T5745] ntfs3: loop3: Failed to load $Bitmap. [ 117.753498][ T5745] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 117.760127][ T5745] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 117.824275][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 117.843549][ T26] gspca_nw80x: reg_w err -71 [ 117.848728][ T26] nw80x: probe of 3-1:0.136 failed with error -71 [ 117.869833][ T5751] loop3: detected capacity change from 0 to 1024 [ 117.876842][ T26] usb 3-1: USB disconnect, device number 12 [ 117.921275][ T13] usb 1-1: config 1 has an invalid interface number: 252 but max is 0 [ 117.929475][ T13] usb 1-1: config 1 has no interface number 0 [ 117.998806][ T5751] hfsplus: b-tree write err: -5, ino 3 [ 118.031896][ T4315] hfsplus: bad catalog file entry [ 118.036966][ T4315] hfsplus: b-tree write err: -5, ino 3 [ 118.092194][ T13] usb 1-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= 7.cd [ 118.107067][ T5753] netlink: 92 bytes leftover after parsing attributes in process `syz.3.512'. [ 118.116506][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.124650][ T13] usb 1-1: Product: syz [ 118.129636][ T13] usb 1-1: Manufacturer: syz [ 118.139219][ T13] usb 1-1: SerialNumber: syz [ 118.223624][ T5759] loop3: detected capacity change from 0 to 256 [ 118.244823][ T5759] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 118.470120][ T5774] loop3: detected capacity change from 0 to 8 [ 118.613473][ T5778] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 118.625060][ T5774] SQUASHFS error: Corrupted symlink [ 118.714819][ T5782] netlink: 'syz.3.526': attribute type 13 has an invalid length. [ 118.861135][ T13] usb 1-1: Found UVC 0.00 device syz (046d:08c6) [ 118.868750][ T13] usb 1-1: No valid video chain found. [ 118.882399][ T13] usb 1-1: USB disconnect, device number 16 [ 118.944066][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.951457][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.287342][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.319994][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.551726][ T5805] loop0: detected capacity change from 0 to 64 [ 119.905783][ T5782] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.920384][ T5782] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.930129][ T5782] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.939335][ T5782] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.016045][ T4238] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 120.027095][ T4238] Bluetooth: hci1: Injecting HCI hardware error event [ 120.039067][ T4188] Bluetooth: hci1: hardware error 0x00 [ 120.126360][ T5825] mmap: syz.0.544 (5825) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 120.175282][ T4402] lo speed is unknown, defaulting to 1000 [ 120.181302][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 120.240998][ T2856] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 120.306460][ T5833] loop2: detected capacity change from 0 to 256 [ 120.366671][ T5833] exfat: Deprecated parameter 'utf8' [ 120.373611][ T5833] exfat: Deprecated parameter 'utf8' [ 120.406526][ T5835] loop3: detected capacity change from 0 to 4096 [ 120.416306][ T5833] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 120.503845][ T5837] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.534967][ T2856] usb 2-1: Using ep0 maxpacket: 8 [ 120.557956][ T5835] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only [ 120.649185][ T4190] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 13 already freed [ 120.660954][ T2856] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 120.677291][ T5844] binder: 5841:5844 ioctl c0306201 200000000240 returned -22 [ 120.695184][ T4190] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 120.740283][ T4190] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 120.794833][ T4190] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 16 already freed [ 120.828810][ T4190] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 17 already freed [ 120.871087][ T2856] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 120.893051][ T4190] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 11 [ 120.906887][ T2856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.925506][ T2856] usb 2-1: Product: syz [ 120.937196][ T4190] Remounting filesystem read-only [ 120.942945][ T2856] usb 2-1: Manufacturer: syz [ 120.947816][ T4190] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 11 [ 120.962365][ T2856] usb 2-1: SerialNumber: syz [ 120.981185][ T2856] usb 2-1: config 0 descriptor?? [ 121.213104][ T4190] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 121.219341][ T5861] loop0: detected capacity change from 0 to 2048 [ 121.250519][ T5865] netlink: 64 bytes leftover after parsing attributes in process `syz.4.563'. [ 121.280816][ T4185] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 121.309703][ T5861] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.557772][ T5873] lo speed is unknown, defaulting to 1000 [ 121.567939][ T5873] lo speed is unknown, defaulting to 1000 [ 121.637336][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 121.661059][ T4185] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.678720][ T4185] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.705986][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.713178][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.720963][ T5873] device bridge_slave_0 entered promiscuous mode [ 121.729306][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.736439][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.744068][ T5873] device bridge_slave_1 entered promiscuous mode [ 121.764572][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.775061][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.791088][ T4185] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.803633][ T4185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.806440][ T5873] team0: Port device team_slave_0 added [ 121.815202][ T4185] usb 3-1: SerialNumber: syz [ 121.820472][ T5873] team0: Port device team_slave_1 added [ 121.830931][ T13] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 121.844906][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.852386][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.878251][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.885652][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.897615][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.904611][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.930475][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.936645][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.964141][ T5873] device hsr_slave_0 entered promiscuous mode [ 121.970631][ T5873] device hsr_slave_1 entered promiscuous mode [ 121.977284][ T5873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.984868][ T5873] Cannot create hsr debugfs directory [ 122.057635][ T5873] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.067081][ T5873] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.070839][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 122.080324][ T5873] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.092256][ T5873] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.112500][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.119560][ T5873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.127040][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.134083][ T5873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.145514][ T4185] usb 3-1: 0:2 : does not exist [ 122.182705][ T4185] usb 3-1: USB disconnect, device number 13 [ 122.230169][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.240991][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.249366][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.258215][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.269162][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.292822][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.310150][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.320209][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.329350][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.336458][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.343015][ T13] usb 1-1: config 1 has an invalid interface number: 252 but max is 0 [ 122.352645][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.362486][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.367675][ T13] usb 1-1: config 1 has no interface number 0 [ 122.374462][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.383625][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.396385][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.405516][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.424574][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.447178][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.458734][ T4531] udevd[4531]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.477523][ T4244] usb 2-1: USB disconnect, device number 14 [ 122.479068][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.503318][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.532388][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.537998][ T5902] loop1: detected capacity change from 0 to 1024 [ 122.548056][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.563926][ T5873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.576036][ T5873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.596018][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.615790][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.677771][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.741039][ T13] usb 1-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= 7.cd [ 122.750138][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.792436][ T13] usb 1-1: Product: ꓺ⃈ [ 122.798767][ T13] usb 1-1: SerialNumber: syz [ 122.882119][ T5923] INFO: trying to register non-static key. [ 122.887947][ T5923] The code is fine but needs lockdep annotation, or maybe [ 122.895042][ T5923] you didn't initialize this object before use? [ 122.898321][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.901264][ T5923] turning off the locking correctness validator. [ 122.901274][ T5923] CPU: 1 PID: 5923 Comm: syz.2.583 Not tainted syzkaller #0 [ 122.901304][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.901322][ T5923] Call Trace: [ 122.901329][ T5923] [ 122.901337][ T5923] dump_stack_lvl+0x168/0x230 [ 122.909971][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.914931][ T5923] ? show_regs_print_info+0x20/0x20 [ 122.914956][ T5923] ? load_image+0x3b0/0x3b0 [ 122.914980][ T5923] ? cpumask_next+0xb3/0xd0 [ 122.915001][ T5923] ? __is_module_percpu_address+0x2a7/0x410 [ 122.915020][ T5923] ? is_kernel_percpu_address+0x143/0x160 [ 122.915042][ T5923] assign_lock_key+0x1e0/0x1f0 [ 122.928679][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.932328][ T5923] ? SOFTIRQ_verbose+0x10/0x10 [ 122.932351][ T5923] ? verify_lock_unused+0x140/0x140 [ 122.932370][ T5923] ? mark_lock+0x94/0x320 [ 122.932390][ T5923] register_lock_class+0x20e/0x880 [ 122.932409][ T5923] ? __lock_acquire+0x13ad/0x7c60 [ 122.932435][ T5923] ? is_dynamic_key+0x1f0/0x1f0 [ 122.932459][ T5923] __lock_acquire+0x160/0x7c60 [ 122.932480][ T5923] ? mark_lock+0x94/0x320 [ 122.932501][ T5923] ? __lock_acquire+0x12d9/0x7c60 [ 122.932522][ T5923] ? verify_lock_unused+0x140/0x140 [ 122.932549][ T5923] ? verify_lock_unused+0x140/0x140 [ 123.041157][ T5923] ? __might_sleep+0xf0/0xf0 [ 123.045736][ T5923] lock_acquire+0x197/0x3f0 [ 123.050234][ T5923] ? gsmld_write+0x57/0x120 [ 123.054737][ T5923] ? read_lock_is_recursive+0x10/0x10 [ 123.060095][ T5923] ? _copy_from_iter+0x5c7/0x1150 [ 123.065102][ T5923] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 123.070455][ T5923] ? lockdep_hardirqs_off+0x70/0x100 [ 123.075724][ T5923] _raw_spin_lock_irqsave+0xa4/0xf0 [ 123.080906][ T5923] ? gsmld_write+0x57/0x120 [ 123.085395][ T5923] ? _raw_spin_lock+0x40/0x40 [ 123.090058][ T5923] ? __virt_addr_valid+0x3c6/0x470 [ 123.095155][ T5923] gsmld_write+0x57/0x120 [ 123.099474][ T5923] file_tty_write+0x557/0x910 [ 123.104142][ T5923] ? gsmld_read+0x10/0x10 [ 123.108460][ T5923] do_iter_readv_writev+0x497/0x600 [ 123.113649][ T5923] ? generic_file_rw_checks+0x280/0x280 [ 123.119182][ T5923] ? common_file_perm+0x171/0x1c0 [ 123.124190][ T5923] ? fsnotify_perm+0x5d/0x560 [ 123.128847][ T5923] ? security_file_permission+0x75/0xa0 [ 123.134374][ T5923] do_iter_write+0x205/0x7b0 [ 123.138945][ T5923] ? import_iovec+0x6f/0xa0 [ 123.143433][ T5923] do_writev+0x254/0x410 [ 123.147661][ T5923] ? do_readv+0x3e0/0x3e0 [ 123.151977][ T5923] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 123.157942][ T5923] ? lock_chain_count+0x20/0x20 [ 123.162774][ T5923] ? vtime_user_exit+0x2dc/0x400 [ 123.167693][ T5923] ? lockdep_hardirqs_on+0x94/0x140 [ 123.172874][ T5923] do_syscall_64+0x4c/0xa0 [ 123.177270][ T5923] ? clear_bhb_loop+0x30/0x80 [ 123.181928][ T5923] ? clear_bhb_loop+0x30/0x80 [ 123.186585][ T5923] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.192459][ T5923] RIP: 0033:0x7f81f3c4b749 [ 123.196854][ T5923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.216439][ T5923] RSP: 002b:00007f81f1eb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 123.224833][ T5923] RAX: ffffffffffffffda RBX: 00007f81f3ea1fa0 RCX: 00007f81f3c4b749 [ 123.232787][ T5923] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 123.240738][ T5923] RBP: 00007f81f3ccff91 R08: 0000000000000000 R09: 0000000000000000 [ 123.248690][ T5923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.256641][ T5923] R13: 00007f81f3ea2038 R14: 00007f81f3ea1fa0 R15: 00007ffd676ef658 [ 123.264602][ T5923] [ 123.267683][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.340863][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 123.364967][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.374623][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.388961][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.398062][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.406181][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.414973][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.423668][ T5873] device veth0_vlan entered promiscuous mode [ 123.432815][ T5873] device veth1_vlan entered promiscuous mode [ 123.445968][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.454975][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.462867][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.471116][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.480695][ T5873] device veth0_macvtap entered promiscuous mode [ 123.488924][ T5873] device veth1_macvtap entered promiscuous mode [ 123.499861][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.511427][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.523489][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.530739][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.531194][ T4238] Bluetooth: hci3: command 0x0409 tx timeout [ 123.545326][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.553065][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.561617][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.570924][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.580809][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 123.581645][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.596797][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.606555][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.615008][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.625751][ T5873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.634619][ T5873] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.643568][ T5873] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.653473][ T5873] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.673823][ T5873] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 123.689126][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.689798][ T5873] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 123.700927][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.715540][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.726332][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.731473][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.734472][ T13] usb 1-1: Found UVC 0.00 device ꓺ⃈ (046d:08c6) [ 123.742356][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.749073][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.766052][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.773289][ T13] usb 1-1: No valid video chain found. [ 123.780533][ T13] usb 1-1: USB disconnect, device number 17 [ 123.788693][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 123.798396][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 123.808400][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.900908][ T7] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 123.909990][ T7] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 123.918026][ T7] usb 2-1: Manufacturer: syz [ 123.923494][ T7] usb 2-1: config 0 descriptor?? [ 124.220884][ T7] rc_core: IR keymap rc-hauppauge not found [ 124.231230][ T7] Registered IR keymap rc-empty [ 124.236314][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 124.270850][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 124.301608][ T7] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 124.314930][ T7] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 124.330041][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 124.361980][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 124.390885][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 124.420902][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 124.450833][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 124.481520][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 124.510824][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 124.541952][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 124.570843][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 124.601376][ T7] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 124.632196][ T7] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 124.641372][ T7] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 125.600861][ T4238] Bluetooth: hci3: command 0x041b tx timeout [ 125.792685][ T7] usb 2-1: USB disconnect, device number 15 [ 127.681037][ T2856] Bluetooth: hci3: command 0x040f tx timeout [ 129.771058][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 132.561832][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.568146][ T1421] ieee802154 phy1 wpan1: encryption failed: -22