last executing test programs: 15.556761078s ago: executing program 2 (id=865): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x5, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf840, 0x700, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r3, 0x29, 0x0, 0x0, 0x2900, 0xd, @remote, @private1, 0x700, 0x10, 0xfffffffc, 0x40}}) 15.450031758s ago: executing program 2 (id=866): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15.293423204s ago: executing program 2 (id=867): r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file7\x00', 0x812, &(0x7f0000000140)=ANY=[], 0x1, 0x1520, &(0x7f00000003c0)="$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") setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) setgroups(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) 14.9363207s ago: executing program 2 (id=870): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x800, &(0x7f0000000900)={[{@noauto_da_alloc}, {@errors_remount}, {@dioread_nolock}, {@grpquota}]}, 0x4, 0x504, &(0x7f0000000e40)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000500)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000540)='./bus\x00', &(0x7f0000000580), 0x8, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000600)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x101142, 0xeaf9) 14.198512585s ago: executing program 2 (id=874): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='7', 0x1) socket$inet_udp(0x2, 0x2, 0x0) 13.56000519s ago: executing program 2 (id=878): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0x3052, 0x9f3f, 0x85, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x183042, 0x15) 13.244988421s ago: executing program 32 (id=878): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0x3052, 0x9f3f, 0x85, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x183042, 0x15) 6.975019215s ago: executing program 3 (id=923): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0xc0010001, 0x0, 0xbffffffffffffffd}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.709985322s ago: executing program 3 (id=926): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f00000036c0)={&(0x7f00000026c0)=[0x80000000, 0x4, 0xfffffae7, 0x8, 0xb49b, 0xb9, 0x8, 0x7, 0x8, 0xc, 0x5, 0x7fffffff, 0x8000, 0x40, 0xc, 0x3, 0x2, 0x7fffffff, 0x81, 0x800, 0x2, 0xffffffff, 0xcbff, 0xd, 0x0, 0x8, 0x1, 0x5, 0x1, 0x5, 0x0, 0x1, 0x200, 0xa, 0x100, 0xfffffff8, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x9, 0xfffffff8, 0xde, 0x4, 0x7ff, 0x4, 0x101, 0x3c8eb758, 0x5, 0x0, 0x9, 0x1, 0x8, 0xd, 0xf, 0x1, 0x0, 0x2, 0xb3, 0x9, 0x5, 0x2, 0xfffffffe, 0x2, 0x3481, 0xf, 0x3ca, 0x40, 0x7fffffff, 0x1, 0x6, 0x5, 0x645c, 0xe367, 0xff, 0x1, 0x6, 0xb5, 0x7, 0xa, 0x6, 0x2, 0x4, 0x9, 0x80000001, 0x5, 0x8, 0x8, 0x0, 0x7, 0x0, 0x7fffffff, 0x1, 0x32b5c1bb, 0x1b5, 0x2, 0xa8, 0x2, 0x5, 0x163, 0x6, 0x3a, 0x7ff, 0xfffffff9, 0x9, 0x24, 0x9, 0x4, 0x3, 0xa5c, 0xfffffffb, 0x101, 0xd29, 0x5, 0x8, 0x401, 0x9, 0xfc, 0x9, 0x0, 0xffff, 0x120, 0x8, 0x7, 0x0, 0x3e0ccb75, 0x4c, 0x6, 0x1, 0xe, 0x7f, 0x0, 0xfffffff7, 0x1, 0x0, 0x115, 0x9, 0x41aeb496, 0xfffffff7, 0x6, 0x80000000, 0x2, 0x400, 0xfffffff0, 0x6, 0x485, 0x4, 0xd4e, 0x7, 0x0, 0x1, 0x1, 0x5, 0x6, 0x7fffffff, 0xc00, 0x4, 0x4, 0x6d, 0x5, 0x92, 0x7, 0x9, 0xfffff800, 0x9, 0x7, 0x8, 0x8a7, 0x2, 0x94, 0x6, 0x200, 0x4, 0x7, 0xe4, 0x80, 0x5, 0x0, 0x4, 0x8, 0x81, 0x7bcc, 0x0, 0x6, 0x1000, 0xd, 0x0, 0x0, 0x2, 0x5, 0x3, 0x8, 0x5, 0x100, 0x4, 0x58, 0x2, 0xe956, 0x5, 0x9, 0x0, 0xfdae, 0x8, 0x0, 0x7, 0x8001, 0x2, 0xa, 0x0, 0x8, 0x2, 0x7fff, 0xff, 0x8000, 0x10, 0x49, 0x0, 0x1, 0x55, 0x4, 0xc, 0x2, 0x8, 0xff1, 0xffffffc6, 0x1, 0x7, 0x3, 0x5, 0x7, 0x80000001, 0x10000, 0x83db, 0x2, 0xd, 0x1ff, 0x6, 0x0, 0x0, 0xb2, 0x61, 0x7, 0x80000001, 0xb9b, 0x4, 0x35, 0x8, 0x5, 0x7, 0x5, 0x0, 0x7, 0x9, 0x0, 0x4, 0x3, 0xffff, 0x5, 0xbfda, 0x3, 0x5, 0x0, 0x10001, 0x608, 0x0, 0x9, 0x6, 0x1, 0x63d, 0x6, 0xd92583, 0xa9, 0x2, 0x5, 0x6, 0x2, 0xffffffff, 0x9, 0xfffffc71, 0xfffffffe, 0xb, 0x1, 0x5, 0x9, 0x80, 0xfff, 0x2, 0x4, 0x2, 0x81, 0x3, 0x8, 0x682, 0x3, 0x5, 0x9f70, 0x0, 0x8, 0x0, 0x3, 0x3, 0x0, 0x8, 0x0, 0x7f, 0x9ecd, 0x5, 0xb3d, 0x3, 0x9, 0x5, 0xeea1, 0x0, 0xfffffffe, 0x9, 0x6, 0x0, 0x5, 0x101, 0xf5, 0x1, 0xfffffff0, 0xd121, 0x6, 0x4, 0xffffff00, 0x80000000, 0x5, 0xd, 0xf3c, 0x7fffffff, 0x1ff, 0x7, 0x94, 0x8001, 0x0, 0x2, 0x9, 0x6, 0x6, 0x8001, 0x6, 0x0, 0x8000, 0x6, 0x9, 0x4, 0x9d, 0x9, 0x80000001, 0x7, 0x7f8, 0xcb9c, 0x1, 0x6, 0xe, 0x400, 0x1, 0x6, 0x5, 0x51e, 0x7, 0xfffffffd, 0x7, 0x97f1, 0xb, 0x80000001, 0xaa, 0xffff81f5, 0x80, 0x8, 0x9, 0x8, 0x1, 0xffffffe3, 0x5086, 0x4, 0x8, 0x2, 0x8, 0x54d8, 0x1000, 0x7, 0x5848, 0x83, 0x2, 0x10001, 0x9, 0x65b97b8b, 0x1, 0x2, 0x400, 0x3, 0x5, 0x0, 0xa65, 0x280, 0x0, 0xf74, 0x3, 0x2, 0x3, 0x7, 0x400, 0x9, 0x2, 0xfffff122, 0x7fffffff, 0x8, 0x1, 0x1, 0x2, 0x1, 0x9, 0x8000, 0x7274, 0x8001, 0xffff46da, 0x469, 0x9, 0x6, 0x9, 0x3, 0xf, 0x0, 0x0, 0x8, 0x6, 0x3, 0x1, 0xfffffff8, 0x7df2, 0xe939, 0x7, 0x10, 0x6, 0x2, 0x1, 0x8, 0x1145, 0x7, 0xa, 0xe72, 0x2, 0x1, 0x40000, 0x9, 0xfffffffc, 0x5, 0x293400, 0x6c, 0x56, 0x9, 0xfffffff7, 0x80, 0x0, 0x9f, 0x2, 0x3, 0xfff, 0x10001, 0x2, 0x9, 0x9cd5, 0x8, 0x10001, 0x6, 0x6, 0xc02f, 0xc, 0xfffffffa, 0x0, 0x2, 0xa, 0x9, 0x6, 0x6, 0xffffffff, 0x3, 0x7, 0x439b, 0x0, 0x8, 0x8, 0x1, 0x15e, 0x9, 0xfffffffa, 0x800, 0x3, 0xe, 0xfffffe01, 0xfffffffb, 0xed2, 0x800, 0xb, 0x2, 0x6, 0x2, 0xa82c, 0x100, 0x5, 0x7ff, 0x8, 0x9, 0x7f, 0xd9, 0x7d, 0x8, 0x2, 0x1, 0x2, 0x9, 0x6, 0x9, 0x8efe, 0x8, 0x5, 0xc9, 0x2, 0x81, 0x6, 0x5, 0x4, 0x0, 0x9, 0x9, 0xfffffffd, 0x8, 0x34, 0x0, 0xe, 0x6, 0x10, 0xe62, 0x8, 0x8, 0x4, 0x0, 0x9, 0x830, 0x3, 0x0, 0x1b3, 0x0, 0x7, 0x8, 0x7, 0x7, 0x80, 0x8, 0x0, 0x80000000, 0xfffffff8, 0x5, 0x6, 0xfffffff8, 0x4a, 0x3a2, 0x5, 0x400, 0x612, 0x401, 0x200, 0x7, 0x8000, 0x9, 0x9, 0x800, 0xfff, 0x0, 0x8, 0x10001, 0x1, 0x10000, 0x1, 0xb10, 0x43, 0x2, 0x2, 0x1, 0x1, 0x7, 0x6, 0x40, 0x3, 0x800, 0x101, 0x0, 0x6d3a, 0x3, 0xffffffff, 0x1, 0xa59, 0x5, 0x3e6, 0x90000000, 0x101, 0x3, 0xbbd3, 0x4, 0x6, 0xfe1, 0x2, 0x8003, 0xe00, 0xfffe0000, 0x5, 0xfffffffb, 0x8001, 0x10001, 0xfa, 0xb, 0x6, 0xe4, 0x6, 0x2, 0x8, 0x1, 0x1ff, 0x84e, 0x30, 0x2, 0x7, 0x0, 0x7fff, 0x1, 0xfffffffa, 0x300, 0x12c, 0x4, 0xc, 0x6, 0x9, 0x7, 0x40, 0x0, 0xcc, 0x4e6, 0x80000000, 0x2, 0xc202, 0x4cfda994, 0x2, 0x5, 0xfffffbff, 0x9, 0xb, 0x200, 0xd3, 0x0, 0x2, 0x3, 0x8, 0x1, 0x7, 0x5, 0xffffffff, 0x6, 0x8, 0x80, 0x7, 0x1, 0x0, 0x874c, 0x7f, 0x1, 0x4, 0x5, 0x9, 0x26d2, 0x8, 0x5, 0x0, 0x10, 0x2, 0x8000, 0x101, 0x22, 0x0, 0x8, 0x5, 0xf75, 0x2, 0xce, 0x0, 0x5, 0x1d, 0x32d, 0x6, 0x8, 0x1951759c, 0x7, 0x4, 0x101, 0x2, 0x81, 0x9, 0xff, 0x8, 0x1ff, 0xaad3, 0x3, 0xc7, 0x2, 0x4, 0x296, 0x8000, 0x1, 0xfffffffe, 0xc9, 0x1000000, 0x9, 0x1, 0x3, 0x5, 0x4, 0x3, 0x10001, 0x3, 0x8, 0x3, 0x9, 0x3, 0x7, 0x9, 0x2, 0x25, 0x4, 0x6, 0xe, 0x6, 0x200, 0x1, 0x9, 0x6, 0x800, 0x5, 0xfffffffc, 0xfffffffa, 0xe6ba, 0x9, 0x8, 0x10000, 0x222eee1a, 0x4, 0x400000, 0x1000, 0xb9a3, 0x7, 0x1, 0xb0, 0x0, 0x0, 0x9, 0xc, 0x500, 0xf1b, 0x0, 0x8, 0x8, 0x6, 0x9, 0x8fd, 0x1, 0x0, 0x8c, 0xd25, 0xfffff001, 0x80000000, 0x5, 0x7ff, 0x4, 0x4, 0x6, 0x2, 0x1, 0x7, 0x9, 0x1, 0x8, 0x2, 0x6, 0x8, 0x4, 0x1, 0xfffffffe, 0x1, 0x3, 0x800, 0x5, 0x7, 0xff, 0x7, 0xc5aa, 0xc, 0x3, 0x7ff, 0xfffffc01, 0x6, 0x4, 0x4, 0x80, 0x4, 0x80000001, 0x80000000, 0xe, 0x0, 0x7, 0x0, 0x9, 0x1, 0x7, 0xa3, 0xfffffffd, 0x283e, 0x3, 0x5, 0x8, 0xb6, 0x4, 0x0, 0x1, 0x7fffffff, 0x1000, 0x4, 0x4, 0xb00d, 0x4, 0x8, 0xc25c, 0x3, 0xe, 0x9, 0x6, 0x9, 0x518d1433, 0x98, 0x0, 0x7, 0x3, 0x9, 0x9, 0x3, 0x6, 0x8, 0x100, 0x5, 0x2, 0x4, 0xa, 0x0, 0x0, 0xf4, 0x27e, 0x5, 0x557a23e2, 0x5, 0x7, 0xffffffc0, 0xc, 0xb11, 0x6b8d, 0x7, 0x1ff, 0x4, 0x80, 0xf022, 0x3, 0xffffffff, 0x3, 0x7, 0x80000001, 0x10001, 0x2, 0x8, 0xffffffc0, 0xe58, 0x9, 0x7, 0x9, 0x1, 0x6, 0x401, 0x401, 0x6, 0x2, 0xfffffffd, 0x4, 0x4, 0x5, 0xef3, 0x1000, 0x9, 0x5, 0x7, 0x1, 0x8, 0x8, 0x2, 0x8f0e, 0x1, 0x3, 0x860, 0xee4, 0x7f, 0x81, 0x5, 0x2, 0x3, 0x9, 0x1, 0x6, 0x5, 0x10, 0x2, 0x1, 0xff, 0xff, 0x6, 0xc, 0xb, 0x0, 0x7, 0x3, 0x8, 0x2, 0xf5, 0xfffffff9, 0x26ef, 0xffff95b8, 0x4, 0x76, 0x1, 0x0, 0xfff, 0x7, 0x374, 0x9, 0xff, 0x6, 0x7f, 0xffff, 0x52, 0xfffffff6, 0x9, 0x9, 0x3, 0x2, 0x7f, 0x9, 0x2, 0x1000, 0x3, 0xf5c, 0x1908, 0xc50, 0x800, 0x0, 0x7fff, 0xffff0000, 0x1ff, 0xc019, 0x6, 0x0, 0x2, 0x9, 0x400, 0x1f95e79d, 0x10000, 0xefe, 0x8, 0x0, 0x8, 0x6fe2, 0x3, 0x4, 0x7fff, 0x4, 0x4, 0x1, 0x6d2, 0x10000, 0x2, 0x9, 0x8, 0xe, 0xf6, 0x1, 0x8, 0x1, 0x1, 0x2, 0xffffffff, 0x2, 0x2, 0x1, 0x80000000, 0x6, 0x6, 0x92, 0x1, 0xf, 0x6, 0x40000000, 0x1, 0x4, 0xc10, 0xa349, 0xfffffe00, 0x0, 0xfffffff7, 0x5, 0x1, 0x2, 0x6, 0x1, 0x7, 0x4, 0x854, 0x1, 0x101], 0x1, 0x400, 0x7}) 6.511535542s ago: executing program 3 (id=927): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x30, r1, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0x5, 0x34, @random='A'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8891}, 0x0) 6.454182008s ago: executing program 0 (id=928): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x11b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x11, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) syz_open_dev$cec(0x0, 0x0, 0x44a420) 5.203879054s ago: executing program 3 (id=929): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x800, &(0x7f0000000900)={[{@noauto_da_alloc}, {@errors_remount}, {@dioread_nolock}, {@grpquota}]}, 0x4, 0x504, &(0x7f0000000e40)="$eJzs3E1sVNUeAPD/nba05ePRx+PxHjzee0U0NhJbKCgsTAxGExeaGDFRl7UfpDJQQ0siBHVIDC5cGBL3xqVbF25cqBtiXJm4xaWJISGGDWBiHHNn7nx0mGmZMp2x8vsl0znnfp3zn3vP7bnntBPAA2s0/ZGU09ciYntE5Bo3GC2/3b55cfrOzYvTUSgWT/ySlHa7leYz2WFiS5YZy0Xk3k9qK+osnr9waiqfnz2b5SeWTr81sXj+wuPzQ9mSY8eOHD509MnJJ9oPqkl5aVy39ry7sHf3869feXG6v7K8Ulp9HJ0yGqPNqlLySKcL67Ftdemkv4cVoS3p9Z+eroFS+98efbHSySt0sWbAeisWi8XB1qsLxUaX7loCbFhJ9LoGQG9UftGnz7+VV7OOwKb16X703I3j5QegNO7b2Svi/6WFlXGQgYbn204ajYjXCr9+kr5incYhAADqfX28OvyzvP83Up4Z+e3c1afT979lcygjEfH3iNgREf+IiJ0R8c+I2BUR/4qIfzccvy8iiiuUP9qQr5ZfnYTKXe9AmC2l/b+nsrmtWv9vWQVG+rLctohKh3n2YPaZjMXA4Nx8fvbQCmV88+wPH7VaV9//S19p+ZW+YFaP6/0NA3QzU0tT5dSXbxQ+rO/Ft+/GpYg9/Y3xJ/0RSXUmIImI3RGxp43jjtSl5x/7bG81M7B8u9XjLyk2nUfrwDxT8dOIR8vnvxDLzn+txGTZ/OTpqZOzJ2fPTFbnJyeGIj97cGKuZW2++/7yS63WrRr/Fz817vLc0a9OZC3r/qXnf3Pd9R+V+dta/CNJRFKdr11sv4zLP37Q8pmmFv9wW9f/puSVUrryXPr21NLS2UMRm5IX7l4+Wdu3kk/fo1COf2x/8/a/I9sn/ST+ExHpRfzfiPhflJ8Q07rvi4iHImL/CvF/+8zDb64e/4rX/7pJ459puP+Vz/yy81+br2+VSLK5wXz+vcZVfaf2XbvT4uZxb/e/I6XUWLakdv+rlyy7RbSqaWXcI13y+31/egAAALAx5CJia91Y0tbI5cbHy2NAO2NzLr+wuHRgbuHcmZl0XcRIDOTm5vOl8c/yePBAUhn/HKnLTzbkD2fjxh/3DZfy49ML+ZmeRg5sKbX5JDce8WpfXftP/dyZIWbgz2xt82ibO14PoPtWav9pJ37XlS5WBuiqe//9f/Wdda0I0HV17b/Vf/gX1vB3X8AG4PtagJrVv+jHPQM2vqK2DA+0ttr/AV8CCH8l/fFyNZ3raU2AbtP/hwfSqv/Xf1+J4mDzVUNx98YxtPIB+2Jt1RhuUlZPEmnPqielD69lr8q3KbTcJnLtHXAwOnNO59bwIQyWEpWu7eLJXR2/+IvZ38o322Yookns95b4vCvttFmi67ciAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdfFHAAAA//+sD9ei") syz_mount_image$fuse(0x0, &(0x7f0000000500)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000540)='./bus\x00', &(0x7f0000000580), 0x8, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000600)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x101142, 0xeaf9) 4.527433582s ago: executing program 3 (id=931): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) chdir(0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000480)) renameat2(0xffffffffffffff9c, &(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x1) 4.35082691s ago: executing program 0 (id=932): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000640)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000680)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 4.122556683s ago: executing program 4 (id=933): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1842, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184a907c5"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.714882964s ago: executing program 3 (id=934): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x42840, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r1 = syz_io_uring_setup(0x34b8, &(0x7f00000000c0)={0x0, 0xcf0b, 0x0, 0x1, 0x11}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r0, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x101, 0x11, 0x5, 0x0, 0x0) 3.277894548s ago: executing program 33 (id=934): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x42840, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r1 = syz_io_uring_setup(0x34b8, &(0x7f00000000c0)={0x0, 0xcf0b, 0x0, 0x1, 0x11}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r0, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x101, 0x11, 0x5, 0x0, 0x0) 3.272081899s ago: executing program 0 (id=936): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f00000000c0)={[{@dioread_lock}]}, 0x5, 0x7eb, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000b40)='2', 0xfdef, 0xe7c) r1 = open(&(0x7f0000000b80)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000bc0)=[{&(0x7f0000000c00)='e', 0x1}], 0x1, 0x5a00, 0x0, 0xd) 2.850891852s ago: executing program 4 (id=937): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000180)={0x2, 0x0, @multicast2, 0x4}, 0x10) 2.849340562s ago: executing program 0 (id=938): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000180)={0x800000b7, 0x98af, 0x4, 0x5, 0x3, "67095f3139b105cf11000068000085cf41bd00", 0x3, 0x6}) write(r1, &(0x7f0000000140)="7be32c0a3fef93b5a7b0e99e1522b47963703551b482f7e43f2f78b5a24dfe951aa1a51097b76b19b8eaa0ec91cba490414d549340c5e93de8780d", 0x3b) 2.67370381s ago: executing program 4 (id=939): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") r0 = syz_open_procfs(0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e05085a0c"], 0x8) 2.478634179s ago: executing program 0 (id=941): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000001a00)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000280)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.358813461s ago: executing program 1 (id=942): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e21, 0x9, @mcast2, 0x9}, 0x1c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 2.107956907s ago: executing program 1 (id=943): rmdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount$afs(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/@cell/foo@sys\x00', 0x0, 0x0) umount2(&(0x7f0000000500)='./mnt\x00', 0x8) 1.914143486s ago: executing program 1 (id=944): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TCSBRKP(r0, 0x5425, 0x9) 1.724182595s ago: executing program 4 (id=945): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000580)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10852, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES8, @ANYBLOB="39e41d33f23298f82103e703e1b37bd2e4d075e330bb7b9878641c38cb0585ec27a1e806f424f45728ac0a2a0bde917c6f125ed475c02982cb6202a84b9e1cbdcbcf3b2a95e673833b06df258989e529dd2a5b7a235f83268e3cbc1b32b3f31cab0af17b4b954f904fa3cf4d7120810c24bc692914b135099a19079098f820a89c6e83fd00783617abfe600264592a", @ANYBLOB="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", @ANYRESDEC, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES8, @ANYRES16], 0xfe, 0x1508, &(0x7f0000001840)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file2\x00', 0x105042, 0x0) write(0xffffffffffffffff, &(0x7f0000002f00), 0x0) 1.195255899s ago: executing program 1 (id=946): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="5300000007000046009d9aa623f20a5c2ce6c30e8337c6cd88bb", @ANYRESHEX=r0, @ANYRES16=r0], 0x53) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x2004000, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 995.403759ms ago: executing program 1 (id=947): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000900)='fd/3\x00') sendfile(r0, r0, 0x0, 0x8) 902.301458ms ago: executing program 4 (id=948): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000002200)={0x60000008}) 817.995567ms ago: executing program 1 (id=949): syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000380), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000003c0)={0x2, 0x0, 0x1, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000400)={0x2, 0x1, 0x3, 0x4, 0x4}) close(r0) 644.784884ms ago: executing program 4 (id=950): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000340), 0xffffff6a) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}], 0x1, 0x94) sendfile(r0, r1, 0x0, 0x8) 0s ago: executing program 0 (id=951): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) r2 = openat(r1, &(0x7f00000000c0)='.\x00', 0x0, 0x88) lseek(r2, 0x200, 0x1) kernel console output (not intermixed with test programs): 5132] tipc: Started in network mode [ 102.334189][ T5132] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 102.345765][ T5132] tipc: Enabled bearer , priority 10 [ 102.418452][ T5134] IPv4: Oversized IP packet from 127.0.0.1 [ 102.425179][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 102.448333][ T5002] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 102.467171][ T5002] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 102.507599][ T5002] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 102.518293][ T5002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.527119][ T5002] usb 4-1: Product: syz [ 102.531667][ T5002] usb 4-1: Manufacturer: syz [ 102.556146][ T5002] usb 4-1: SerialNumber: syz [ 102.573589][ T5002] usb 4-1: config 0 descriptor?? [ 102.590414][ T5121] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.619653][ T5121] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.702502][ T5144] loop2: detected capacity change from 0 to 1024 [ 102.744813][ T5144] hfsplus: failed to load root directory [ 102.842407][ T5121] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.860286][ T5121] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.042296][ T5136] loop0: detected capacity change from 0 to 32768 [ 103.123687][ T5136] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 103.142011][ T5136] XFS (loop0): Mounting V5 Filesystem [ 103.255673][ T5136] XFS (loop0): Ending clean mount [ 103.268342][ T5136] XFS (loop0): Quotacheck needed: Please wait. [ 103.351931][ T5136] XFS (loop0): Quotacheck: Done. [ 103.467813][ T4375] tipc: Node number set to 8432298 [ 103.503971][ T4279] XFS (loop0): Unmounting Filesystem [ 103.697054][ T5002] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 103.746485][ T5002] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 28:da:91:db:87:5c [ 103.778847][ T5002] usb 4-1: USB disconnect, device number 6 [ 103.816592][ T5002] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 103.984244][ T5184] input: syz1 as /devices/virtual/input/input9 [ 104.237300][ T5190] tipc: Started in network mode [ 104.242230][ T5190] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 104.292761][ T5190] tipc: Enabled bearer , priority 0 [ 104.435595][ T27] audit: type=1400 audit(1794333702.063:54): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=5199 comm="syz.4.251" [ 104.693248][ T5210] device batadv_slave_1 entered promiscuous mode [ 104.724583][ T5208] device batadv_slave_1 left promiscuous mode [ 104.747014][ T5181] loop2: detected capacity change from 0 to 32768 [ 104.796485][ T5181] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 105.007686][ T5220] loop3: detected capacity change from 0 to 128 [ 105.123735][ T5220] syz.3.258: attempt to access beyond end of device [ 105.123735][ T5220] loop3: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 105.130588][ T4268] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 105.418619][ T5008] tipc: Node number set to 43690 [ 105.856228][ T4539] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 106.016257][ T5008] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 106.077702][ T4539] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.093897][ T4539] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 106.105624][ T4539] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.129061][ T4539] usb 1-1: Found UVC 1.00 device (046d:0825) [ 106.226258][ T5008] usb 4-1: Using ep0 maxpacket: 8 [ 106.233485][ T5008] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 106.246316][ T5008] usb 4-1: config 0 has no interface number 0 [ 106.288296][ T5008] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 106.307113][ T5008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.337098][ T5008] usb 4-1: Product: syz [ 106.348070][ T5008] usb 4-1: Manufacturer: syz [ 106.360436][ T5008] usb 4-1: SerialNumber: syz [ 106.373605][ T5008] usb 4-1: config 0 descriptor?? [ 106.534769][ T4539] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 106.557228][ T4539] uvcvideo 1-1:1.1: No frame descriptor found for the default format. [ 106.579794][ T4539] uvcvideo 1-1:1.1: Failed to initialize the device (-22). [ 106.593240][ T5008] usb 4-1: USB disconnect, device number 7 [ 107.106189][ T5008] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 107.299481][ T5008] usb 5-1: Using ep0 maxpacket: 16 [ 107.310008][ T5008] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 107.339100][ T5008] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 107.359290][ T5008] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 107.370104][ T5008] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 107.385121][ T5008] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 107.396537][ T5008] usb 5-1: config 0 has no interface number 0 [ 107.402666][ T5008] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 107.434336][ T5008] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 107.460889][ T5008] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.487883][ T5008] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.511255][ T5008] usb 5-1: config 0 interface 125 has no altsetting 0 [ 107.521363][ T5008] usb 5-1: config 0 interface 125 has no altsetting 2 [ 107.531793][ T5008] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 107.541990][ T5008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.551221][ T5008] usb 5-1: Product: syz [ 107.555718][ T5008] usb 5-1: Manufacturer: syz [ 107.569724][ T5008] usb 5-1: SerialNumber: syz [ 107.585801][ T5008] usb 5-1: config 0 descriptor?? [ 107.590942][ T4359] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 107.595683][ T5008] usb 5-1: selecting invalid altsetting 2 [ 107.776885][ T4359] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 107.792824][ T4359] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.811269][ T4359] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.837690][ T4359] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.860389][ T4359] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.875540][ T4359] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.893217][ T4359] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.913461][ T4359] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.932559][ T4359] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.949026][ T4359] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.970675][ T4359] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.987316][ T4359] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.009029][ T4359] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.030722][ T4359] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.050394][ T4359] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.060777][ T4359] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.071736][ T4359] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.083555][ T4359] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 108.110613][ T4359] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 108.129501][ T4359] usb 4-1: Product: syz [ 108.139561][ T4359] usb 4-1: Manufacturer: syz [ 108.144219][ T4359] usb 4-1: SerialNumber: syz [ 108.174217][ T4359] usb 4-1: config 0 descriptor?? [ 108.189622][ T4359] yurex 4-1:0.0: Could not find endpoints [ 108.231292][ T5283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.249839][ T5283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.259307][ C1] usb 5-1: async_complete: urb error -71 [ 108.265032][ C1] usb 5-1: async_complete: urb error -71 [ 108.272312][ T5008] get_1284_register: usb error -71 [ 108.289511][ T5008] usb 5-1: USB disconnect, device number 6 [ 108.503088][ T5008] usb 4-1: USB disconnect, device number 8 [ 108.597496][ T5002] usb 1-1: USB disconnect, device number 6 [ 109.102426][ T5312] loop4: detected capacity change from 0 to 256 [ 109.169927][ T4699] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.777683][ T5348] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0 [ 110.007794][ T5360] CIFS: Attempting to mount \\127.0.0.1\share [ 110.434285][ T5380] clocksource: Switched to clocksource acpi_pm [ 110.454329][ T5380] clocksource: Switched to clocksource tsc [ 110.544676][ T5386] input: syz0 as /devices/virtual/input/input10 [ 110.695499][ T5388] loop3: detected capacity change from 0 to 4096 [ 110.746294][ T5008] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 110.782537][ T5388] ntfs3: loop3: Failed to load $Extend. [ 110.835818][ T5360] CIFS: VFS: cifs_mount failed w/return code = -512 [ 110.950009][ T5008] usb 5-1: Using ep0 maxpacket: 16 [ 110.960518][ T5008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.000887][ T5008] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.007807][ T4278] ntfs3: loop3: ino=5, mi_enum_attr [ 111.034686][ T5008] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.048566][ T5400] loop2: detected capacity change from 0 to 1024 [ 111.078013][ T5008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.080955][ T5402] loop0: detected capacity change from 0 to 1024 [ 111.112040][ T5008] usb 5-1: config 0 descriptor?? [ 111.129223][ T4278] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 111.141276][ T4278] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 111.385180][ T11] hfsplus: found bad thread record in catalog [ 111.535276][ T5008] hid_parser_main: 3 callbacks suppressed [ 111.535294][ T5008] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 111.576576][ T5008] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 111.594234][ T5008] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 111.604034][ T5408] loop1: detected capacity change from 0 to 4096 [ 111.604372][ T5008] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 111.617967][ T5008] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 111.625228][ T5008] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 111.646153][ T5008] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 111.654692][ T5008] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 111.662515][ T5408] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.664196][ T5008] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 111.688484][ T5008] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 111.713943][ T5008] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input11 [ 111.730031][ T5408] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.747860][ T5008] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 111.776143][ T5408] EXT4-fs (loop1): Test dummy encryption mode enabled [ 111.866726][ T5408] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 112.134206][ T4539] usb 5-1: USB disconnect, device number 7 [ 112.242661][ T5428] loop3: detected capacity change from 0 to 512 [ 112.290663][ T5412] loop2: detected capacity change from 0 to 32768 [ 112.297982][ T5428] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.376554][ T5428] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.421089][ T5428] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.324: invalid indirect mapped block 32768 (level 2) [ 112.488081][ T5428] EXT4-fs (loop3): 1 orphan inode deleted [ 112.537638][ T5428] EXT4-fs (loop3): 1 truncate cleaned up [ 112.554797][ T5428] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 112.766739][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 112.851814][ T5441] loop4: detected capacity change from 0 to 2048 [ 112.912362][ T5443] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 112.930732][ T5441] loop4: p1 < > p4 < > [ 113.046275][ T5408] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 113.102096][ T5450] loop2: detected capacity change from 0 to 256 [ 113.214433][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 113.235235][ T5455] Zero length message leads to an empty skb [ 113.461731][ T5460] netlink: 'syz.3.337': attribute type 29 has an invalid length. [ 113.481076][ T5460] netlink: 'syz.3.337': attribute type 29 has an invalid length. [ 113.515718][ T5468] netlink: 'syz.3.337': attribute type 29 has an invalid length. [ 113.548046][ T5460] netlink: 'syz.3.337': attribute type 29 has an invalid length. [ 113.557987][ T5460] netlink: 'syz.3.337': attribute type 29 has an invalid length. [ 113.621326][ T5470] Bluetooth: MGMT ver 1.22 [ 113.712350][ T5474] device syzkaller1 entered promiscuous mode [ 113.813798][ T5484] team0: No ports can be present during mode change [ 114.082144][ T5498] loop0: detected capacity change from 0 to 128 [ 114.141875][ T5502] loop2: detected capacity change from 0 to 512 [ 114.148453][ T5498] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.274227][ T5502] EXT4-fs (loop2): 1 orphan inode deleted [ 114.281101][ T5502] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 114.290994][ T31] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 114.301254][ T5502] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.321414][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6884: comm kworker/u4:2: Failed to release dquot type 1 [ 114.388150][ T5507] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.417442][ T5498] FAT-fs (loop0): error, parent dir link count too low (2) [ 114.434401][ T5498] FAT-fs (loop0): Filesystem has been set read-only [ 114.452572][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 114.592452][ T4279] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.853392][ T5515] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.923732][ T5518] device dummy0 entered promiscuous mode [ 114.949803][ T5518] device netdevsim0 entered promiscuous mode [ 114.976054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 115.223042][ T5532] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.256485][ T5532] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.309914][ T5532] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 115.335310][ T5532] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 115.353239][ T5532] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.365: Failed to acquire dquot type 0 [ 115.373300][ T5532] EXT4-fs (loop1): Remounting filesystem read-only [ 115.380288][ T5532] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 115.391485][ T5532] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 115.406380][ T5008] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 115.413375][ T5532] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.365: Failed to acquire dquot type 0 [ 115.431324][ T5532] EXT4-fs (loop1): Remounting filesystem read-only [ 115.440277][ T5532] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 44 vs 41 free clusters [ 115.465539][ T5532] EXT4-fs (loop1): Remounting filesystem read-only [ 115.483634][ T4539] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 115.497537][ T5532] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 115.521249][ T5532] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 115.551508][ T5532] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.365: Failed to acquire dquot type 0 [ 115.593357][ T5532] EXT4-fs (loop1): Remounting filesystem read-only [ 115.613426][ T5532] EXT4-fs (loop1): 1 orphan inode deleted [ 115.623827][ T5008] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 115.639004][ T5008] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 115.654323][ T5532] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.666456][ T5008] usb 5-1: config 0 interface 0 has no altsetting 0 [ 115.674308][ T5532] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.687180][ T5008] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.692425][ T4539] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 115.696745][ T5008] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 115.726567][ T5008] usb 5-1: Product: syz [ 115.730915][ T5008] usb 5-1: Manufacturer: syz [ 115.734169][ T4539] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 115.735541][ T5008] usb 5-1: SerialNumber: syz [ 115.769758][ T4539] usb 4-1: Product: syz [ 115.771592][ T5532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.365'. [ 115.780403][ T4539] usb 4-1: config 0 descriptor?? [ 115.804035][ T4539] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 115.807467][ T5532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.365'. [ 115.821477][ T5008] usb 5-1: config 0 descriptor?? [ 115.830546][ T5008] hub 5-1:0.0: bad descriptor, ignoring hub [ 115.838893][ T4539] usb 4-1: Detected FT232H [ 115.846188][ T5008] hub: probe of 5-1:0.0 failed with error -5 [ 115.867958][ T5008] usb 5-1: selecting invalid altsetting 0 [ 115.881041][ T5532] netlink: 'syz.1.365': attribute type 15 has an invalid length. [ 115.954594][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 116.007783][ T4539] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 116.440488][ T4539] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 116.536394][ T5570] i2c i2c-0: new_device: Can't parse I2C address [ 116.567370][ T5527] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 116.631140][ T4359] usb 4-1: USB disconnect, device number 9 [ 116.672389][ T4359] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 116.694062][ T4359] ftdi_sio 4-1:0.0: device disconnected [ 116.890407][ T5585] netlink: 'syz.2.385': attribute type 6 has an invalid length. [ 117.023535][ T5591] set_capacity_and_notify: 3 callbacks suppressed [ 117.023545][ T5591] loop1: detected capacity change from 0 to 1024 [ 117.054801][ T5591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.092887][ T5591] EXT4-fs (loop1): barriers disabled [ 117.100708][ T5591] JBD2: no valid journal superblock found [ 117.113546][ T5591] EXT4-fs (loop1): error loading journal [ 117.133774][ T5595] tipc: Enabled bearer , priority 0 [ 117.190219][ T27] audit: type=1326 audit(1794333714.822:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5590 comm="syz.1.388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50459a8f19 code=0x7ffc0000 [ 117.248613][ T4539] usb 5-1: USB disconnect, device number 8 [ 117.265213][ T27] audit: type=1326 audit(1794333714.852:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5590 comm="syz.1.388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50459a8f19 code=0x7ffc0000 [ 117.422607][ T27] audit: type=1326 audit(1794333714.862:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5590 comm="syz.1.388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50459a8f19 code=0x7ffc0000 [ 117.626373][ T4359] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 117.641813][ T5615] kvm: apic: phys broadcast and lowest prio [ 117.806395][ T4359] usb 4-1: Using ep0 maxpacket: 32 [ 117.813916][ T4359] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.845865][ T4359] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.873160][ T4359] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 117.886863][ T4359] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 117.897613][ T4359] usb 4-1: Product: syz [ 117.901893][ T4359] usb 4-1: Manufacturer: syz [ 117.925741][ T4359] hub 4-1:4.0: USB hub found [ 118.123209][ T4359] hub 4-1:4.0: 3 ports detected [ 118.328933][ T4359] hub 4-1:4.0: hub_hub_status failed (err = 0) [ 118.337460][ T4359] hub 4-1:4.0: config failed, can't get hub status (err -5) [ 118.586367][ T4539] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.609133][ T5649] ip_tables: iptables: counters copy to user failed while replacing table [ 118.651417][ T5004] usb 4-1: USB disconnect, device number 10 [ 118.749921][ T5655] netlink: 104 bytes leftover after parsing attributes in process `syz.1.417'. [ 118.771353][ T4539] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 118.790828][ T4539] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.825670][ T4539] usb 1-1: config 0 descriptor?? [ 118.850653][ T4539] cp210x 1-1:0.0: cp210x converter detected [ 119.254228][ T4539] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 119.294589][ T4539] usb 1-1: cp210x converter now attached to ttyUSB0 [ 119.379324][ T5668] loop4: detected capacity change from 0 to 8 [ 119.438414][ T5668] SQUASHFS error: zlib decompression failed, data probably corrupt [ 119.447235][ T5668] SQUASHFS error: Failed to read block 0x9b: -5 [ 119.454557][ T5668] SQUASHFS error: Unable to read metadata cache entry [99] [ 119.477603][ T4359] usb 1-1: USB disconnect, device number 7 [ 119.507289][ T5668] SQUASHFS error: Unable to read inode 0x127 [ 119.520478][ T4359] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 119.562583][ T4359] cp210x 1-1:0.0: device disconnected [ 119.699455][ T5665] loop3: detected capacity change from 0 to 32768 [ 119.765583][ T5665] JBD2: Ignoring recovery information on journal [ 119.811731][ T5678] loop2: detected capacity change from 0 to 2048 [ 119.840903][ T5678] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.855949][ T5665] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 119.886369][ T4540] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 119.984970][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 120.066503][ T4540] usb 5-1: Using ep0 maxpacket: 32 [ 120.074563][ T4540] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.101323][ T4540] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.126613][ T4540] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 120.150808][ T4540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.168274][ T4540] usb 5-1: config 0 descriptor?? [ 120.195076][ T4540] hub 5-1:0.0: USB hub found [ 120.210860][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 120.369803][ T5694] loop3: detected capacity change from 0 to 2048 [ 120.388650][ T4540] hub 5-1:0.0: 26 ports detected [ 120.394295][ T4540] hub 5-1:0.0: insufficient power available to use all downstream ports [ 120.399903][ T5694] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.516947][ T5004] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.595294][ T4540] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 120.605408][ T4540] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 120.630875][ T4540] usbhid 5-1:0.0: can't add hid device: -71 [ 120.651292][ T4540] usbhid: probe of 5-1:0.0 failed with error -71 [ 120.689441][ T4540] usb 5-1: USB disconnect, device number 9 [ 120.716373][ T5004] usb 3-1: Using ep0 maxpacket: 8 [ 120.723330][ T5004] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 120.745342][ T5004] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.771586][ T5004] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.795602][ T5004] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.806465][ T5004] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.819624][ T5004] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.833986][ T5706] sctp: [Deprecated]: syz.3.437 (pid 5706) Use of int in max_burst socket option deprecated. [ 120.833986][ T5706] Use struct sctp_assoc_value instead [ 120.849984][ T5004] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.921337][ T5708] loop1: detected capacity change from 0 to 512 [ 120.953332][ T5708] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.438: iget: bad i_size value: 38620345925642 [ 120.971717][ T5708] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.438: couldn't read orphan inode 15 (err -117) [ 120.989345][ T5708] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.074903][ T5004] usb 3-1: usb_control_msg returned -32 [ 121.081585][ T5004] usbtmc 3-1:16.0: can't read capabilities [ 121.110316][ T5707] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.438: bg 0: block 5: invalid block bitmap [ 121.167198][ T5716] FAULT_INJECTION: forcing a failure. [ 121.167198][ T5716] name fail_futex, interval 1, probability 0, space 0, times 1 [ 121.197923][ T5716] CPU: 0 PID: 5716 Comm: syz.0.440 Not tainted syzkaller #0 [ 121.205263][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 121.215356][ T5716] Call Trace: [ 121.218652][ T5716] [ 121.221600][ T5716] dump_stack_lvl+0x188/0x24e [ 121.226366][ T5716] ? __lock_acquire+0x7ea0/0x7ea0 [ 121.231422][ T5716] ? show_regs_print_info+0x12/0x12 [ 121.236655][ T5716] ? load_image+0x410/0x410 [ 121.241190][ T5716] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 121.247107][ T5716] ? lockdep_hardirqs_on+0x94/0x140 [ 121.252336][ T5716] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 121.258255][ T5716] ? _raw_spin_unlock+0x40/0x40 [ 121.263136][ T5716] should_fail_ex+0x390/0x4c0 [ 121.267841][ T5716] get_futex_key+0x1a6/0xe70 [ 121.272459][ T5716] ? kasan_set_track+0x60/0x70 [ 121.277254][ T5716] ? futex_setup_timer+0xc0/0xc0 [ 121.282217][ T5716] ? slab_free_freelist_hook+0x133/0x1b0 [ 121.287886][ T5716] ? listxattr+0x259/0x2e0 [ 121.292320][ T5716] ? __x64_sys_flistxattr+0x128/0x1a0 [ 121.297721][ T5716] ? do_syscall_64+0x4c/0xa0 [ 121.302324][ T5716] futex_wake+0x123/0x4f0 [ 121.306661][ T5716] ? futex_wake_mark+0x150/0x150 [ 121.311624][ T5716] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 121.317617][ T5716] do_futex+0x2e2/0x320 [ 121.321775][ T5716] ? __ia32_sys_get_robust_list+0x100/0x100 [ 121.327687][ T5716] ? lockdep_hardirqs_on+0x94/0x140 [ 121.332892][ T5716] __se_sys_futex+0x381/0x410 [ 121.337568][ T5716] ? __x64_sys_futex+0xf0/0xf0 [ 121.342333][ T5716] ? __x64_sys_futex+0x1d/0xf0 [ 121.347093][ T5716] do_syscall_64+0x4c/0xa0 [ 121.351513][ T5716] ? clear_bhb_loop+0x60/0xb0 [ 121.356190][ T5716] ? clear_bhb_loop+0x60/0xb0 [ 121.360867][ T5716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.366759][ T5716] RIP: 0033:0x7f058e9a8f19 [ 121.371192][ T5716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.390831][ T5716] RSP: 002b:00007f058f8c80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.399250][ T5716] RAX: ffffffffffffffda RBX: 00007f058ec25fa8 RCX: 00007f058e9a8f19 [ 121.407222][ T5716] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f058ec25fac [ 121.415214][ T5716] RBP: 00007f058ec25fa0 R08: 00083d938c3d779c R09: 0000000000000000 [ 121.423181][ T5716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.431147][ T5716] R13: 00007f058ec26038 R14: 00007ffca6f50070 R15: 00007ffca6f50158 [ 121.439128][ T5716] [ 121.450194][ T5720] process 'syz.4.442' launched './file0' with NULL argv: empty string added [ 121.459923][ T5720] Invalid argument reading file caps for ./file0 [ 121.473266][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 121.498541][ T5721] usbtmc 3-1:16.0: stb usb_control_msg returned -32 [ 121.518742][ T4540] usb 3-1: USB disconnect, device number 3 [ 121.633417][ T5725] Console: switching to colour VGA+ 80x25 [ 121.729487][ T5725] Console: switching to colour frame buffer device 128x48 [ 121.906004][ T5738] loop0: detected capacity change from 0 to 512 [ 121.926793][ T5738] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.956458][ T5738] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.449: invalid indirect mapped block 32768 (level 2) [ 122.029563][ T5738] EXT4-fs (loop0): 1 orphan inode deleted [ 122.037854][ T5738] EXT4-fs (loop0): 1 truncate cleaned up [ 122.054445][ T5738] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 122.171561][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 122.287331][ T5743] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4280] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5743] [ 122.305507][ T5743] FAULT_INJECTION: forcing a failure. [ 122.305507][ T5743] name fail_futex, interval 1, probability 0, space 0, times 0 [ 122.326479][ T5743] CPU: 1 PID: 5743 Comm: syz.2.452 Not tainted syzkaller #0 [ 122.333826][ T5743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 122.343900][ T5743] Call Trace: [ 122.347205][ T5743] [ 122.350144][ T5743] dump_stack_lvl+0x188/0x24e [ 122.354853][ T5743] ? show_regs_print_info+0x12/0x12 [ 122.360080][ T5743] ? load_image+0x410/0x410 [ 122.364604][ T5743] ? stack_trace_save+0xa6/0xf0 [ 122.369475][ T5743] ? __stack_depot_save+0x439/0x480 [ 122.374696][ T5743] should_fail_ex+0x390/0x4c0 [ 122.379398][ T5743] get_futex_key+0x1a6/0xe70 [ 122.383998][ T5743] ? syscall_exit_to_user_mode+0x16/0x40 [ 122.389647][ T5743] ? do_syscall_64+0x58/0xa0 [ 122.394273][ T5743] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.400368][ T5743] ? futex_setup_timer+0xc0/0xc0 [ 122.405326][ T5743] futex_wake+0x123/0x4f0 [ 122.409677][ T5743] ? futex_wake_mark+0x150/0x150 [ 122.414641][ T5743] do_futex+0x2e2/0x320 [ 122.419163][ T5743] ? __ia32_sys_get_robust_list+0x100/0x100 [ 122.425070][ T5743] ? blkcg_maybe_throttle_current+0x1a0/0xa80 [ 122.431165][ T5743] __se_sys_futex+0x381/0x410 [ 122.435865][ T5743] ? __x64_sys_futex+0xf0/0xf0 [ 122.440649][ T5743] ? __x64_sys_futex+0x1d/0xf0 [ 122.445431][ T5743] do_syscall_64+0x4c/0xa0 [ 122.449866][ T5743] ? clear_bhb_loop+0x60/0xb0 [ 122.454563][ T5743] ? clear_bhb_loop+0x60/0xb0 [ 122.459267][ T5743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.465184][ T5743] RIP: 0033:0x7f577a7a8f19 [ 122.469612][ T5743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.489258][ T5743] RSP: 002b:00007f577b73b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.497697][ T5743] RAX: ffffffffffffffda RBX: 00007f577aa25fa8 RCX: 00007f577a7a8f19 [ 122.505690][ T5743] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f577aa25fac [ 122.513682][ T5743] RBP: 00007f577aa25fa0 R08: 000ffd38254b9534 R09: 0000000000000000 [ 122.521674][ T5743] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 122.529665][ T5743] R13: 00007f577aa26038 R14: 00007ffd18d99340 R15: 00007ffd18d99428 [ 122.537675][ T5743] [ 122.540853][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.741195][ T5741] loop1: detected capacity change from 0 to 131072 [ 122.758141][ T5741] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 122.766797][ T5741] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 122.799050][ T5741] F2FS-fs (loop1): invalid crc value [ 122.843149][ T5741] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.877187][ T5752] loop8: detected capacity change from 0 to 7 [ 122.889826][ T5741] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 122.889980][ T4268] Dev loop8: unable to read RDB block 7 [ 122.897080][ T5741] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 122.933884][ T5755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 122.940806][ T4268] loop8: unable to read partition table [ 122.955497][ T5755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.455'. [ 122.963257][ T4268] loop8: partition table beyond EOD, truncated [ 122.991086][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 122.991101][ T27] audit: type=1800 audit(1794333720.622:74): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.450" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 123.002457][ T5752] Dev loop8: unable to read RDB block 7 [ 123.033277][ T5752] loop8: unable to read partition table [ 123.054396][ T5752] loop8: partition table beyond EOD, truncated [ 123.102967][ T5752] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 123.516325][ T5004] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.669219][ T5773] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.721965][ T5004] usb 3-1: Using ep0 maxpacket: 8 [ 123.729157][ T5004] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 123.758971][ T5004] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 123.784252][ T5004] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.803739][ T5004] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.825773][ T5004] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.835699][ T5004] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.931447][ T4540] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 123.975965][ T5783] loop4: detected capacity change from 0 to 512 [ 124.003126][ T5783] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 124.011626][ T5783] System zones: 0-7 [ 124.017415][ T5783] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 124.079075][ T5004] usb 3-1: GET_CAPABILITIES returned 0 [ 124.084621][ T5004] usbtmc 3-1:16.0: can't read capabilities [ 124.135595][ T4540] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.157946][ T4540] usb 4-1: not running at top speed; connect to a high speed hub [ 124.176453][ T4540] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 124.190115][ T4540] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 124.192993][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 124.200200][ T4540] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.214038][ T4540] usb 4-1: Product: syz [ 124.218825][ T4540] usb 4-1: Manufacturer: syz [ 124.223930][ T4540] usb 4-1: SerialNumber: syz [ 124.296354][ T5004] usb 3-1: USB disconnect, device number 4 [ 124.463295][ T4540] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 124.481340][ T5797] FAULT_INJECTION: forcing a failure. [ 124.481340][ T5797] name failslab, interval 1, probability 0, space 0, times 0 [ 124.495108][ T5797] CPU: 1 PID: 5797 Comm: syz.4.474 Not tainted syzkaller #0 [ 124.502488][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 124.512646][ T5797] Call Trace: [ 124.515931][ T5797] [ 124.518883][ T5797] dump_stack_lvl+0x188/0x24e [ 124.523591][ T5797] ? show_regs_print_info+0x12/0x12 [ 124.528819][ T5797] ? load_image+0x410/0x410 [ 124.533350][ T5797] ? __might_sleep+0xd0/0xd0 [ 124.537961][ T5797] ? __lock_acquire+0x7ea0/0x7ea0 [ 124.543070][ T5797] should_fail_ex+0x390/0x4c0 [ 124.547780][ T5797] should_failslab+0x5/0x20 [ 124.552283][ T5797] slab_pre_alloc_hook+0x59/0x300 [ 124.557314][ T5797] ? fscontext_alloc_log+0x4f/0x150 [ 124.562531][ T5797] __kmem_cache_alloc_node+0x4f/0x270 [ 124.567909][ T5797] ? fscontext_alloc_log+0x4f/0x150 [ 124.573121][ T5797] kmalloc_trace+0x26/0xe0 [ 124.577558][ T5797] fscontext_alloc_log+0x4f/0x150 [ 124.582597][ T5797] __se_sys_fspick+0x28d/0x300 [ 124.587385][ T5797] ? __x64_sys_fspick+0x80/0x80 [ 124.592272][ T5797] ? lockdep_hardirqs_on+0x94/0x140 [ 124.597501][ T5797] do_syscall_64+0x4c/0xa0 [ 124.601936][ T5797] ? clear_bhb_loop+0x60/0xb0 [ 124.606626][ T5797] ? clear_bhb_loop+0x60/0xb0 [ 124.611304][ T5797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.617208][ T5797] RIP: 0033:0x7f71a2da8f19 [ 124.621643][ T5797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.641277][ T5797] RSP: 002b:00007f71a3cf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 124.649725][ T5797] RAX: ffffffffffffffda RBX: 00007f71a3025fa0 RCX: 00007f71a2da8f19 [ 124.657717][ T5797] RDX: 0000000000000000 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 124.665712][ T5797] RBP: 00007f71a2e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 124.671358][ T4540] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 124.673687][ T5797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.673705][ T5797] R13: 00007f71a3026038 R14: 00007f71a3025fa0 R15: 00007ffd6f8e86c8 [ 124.673733][ T5797] [ 124.673816][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.683121][ T4540] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 124.749342][ T4540] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 124.786375][ T4540] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 124.805168][ T4540] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 124.813089][ T4540] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 125.093147][ T5808] loop0: detected capacity change from 0 to 256 [ 125.135473][ T5808] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 125.251495][ T5800] loop1: detected capacity change from 0 to 40427 [ 125.278631][ T5800] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 125.329535][ T4540] usb 4-1: USB disconnect, device number 11 [ 125.336690][ T5800] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 125.391755][ T5800] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.570836][ T5800] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 125.596405][ T5800] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.627469][ T4691] udevd[4691]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.713849][ T5830] ip_tables: iptables: counters copy to user failed while replacing table [ 126.031867][ T5834] loop5: detected capacity change from 0 to 7 [ 126.071074][ T4699] Dev loop5: unable to read RDB block 7 [ 126.080064][ T4699] loop5: unable to read partition table [ 126.094382][ T4699] loop5: partition table beyond EOD, truncated [ 126.122818][ T5834] Dev loop5: unable to read RDB block 7 [ 126.130787][ T5834] loop5: unable to read partition table [ 126.143797][ T5834] loop5: partition table beyond EOD, truncated [ 126.162375][ T5834] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü�¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 126.600332][ T5829] loop4: detected capacity change from 0 to 32768 [ 126.640699][ T5829] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.488 (5829) [ 126.699990][ T5829] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.749359][ T5829] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 126.759355][ T5829] BTRFS info (device loop4): metadata ratio 220 [ 126.766300][ T5008] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.790218][ T5829] BTRFS info (device loop4): setting nodatasum [ 126.815698][ T5829] BTRFS info (device loop4): metadata ratio 4 [ 126.846272][ T5829] BTRFS info (device loop4): enabling ssd optimizations [ 126.886240][ T5829] BTRFS info (device loop4): allowing degraded mounts [ 126.893781][ T5829] BTRFS info (device loop4): using free space tree [ 126.950256][ T5854] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 126.967418][ T5008] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 126.993659][ T5008] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 127.039379][ T5008] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 127.109696][ T5008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.188524][ T5008] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 127.210752][ T5008] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 127.399080][ T4287] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.481064][ T5004] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 127.557658][ T5008] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 127.706347][ T5004] usb 2-1: Using ep0 maxpacket: 32 [ 127.711781][ T5846] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 127.727137][ T5004] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 127.772297][ T5004] usb 2-1: config 0 has no interface number 0 [ 127.780181][ T5008] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.798347][ T5846] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 127.798738][ T5004] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 127.826991][ T5846] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 127.837264][ T5008] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 127.874435][ T5008] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 127.896221][ T5008] usb 1-1: Product: syz [ 127.900441][ T5008] usb 1-1: Manufacturer: syz [ 127.905050][ T5008] usb 1-1: SerialNumber: syz [ 127.912498][ T5004] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 127.943956][ T5004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.976659][ T5008] usb 1-1: config 0 descriptor?? [ 128.001499][ T5004] usb 2-1: Product: syz [ 128.005762][ T5004] usb 2-1: Manufacturer: syz [ 128.011584][ T5897] loop4: detected capacity change from 0 to 64 [ 128.021751][ T5844] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 128.023978][ T5008] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 128.040100][ T5004] usb 2-1: SerialNumber: syz [ 128.044134][ T5899] loop3: detected capacity change from 0 to 2048 [ 128.066802][ T5004] usb 2-1: config 0 descriptor?? [ 128.081225][ T5892] usb 3-1: USB disconnect, device number 5 [ 128.086031][ T5008] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 128.096768][ T5869] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 128.115476][ T5008] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 88 [ 128.148501][ T5892] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 128.179578][ T5899] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.189690][ T5008] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 128.191113][ T5008] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 128.230174][ T5892] spcp8x5 3-1:1.0: device disconnected [ 128.285347][ T5008] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 128.318275][ T5869] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 128.339294][ T5008] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 128.374645][ T5008] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 128.388619][ T5008] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 128.399440][ T5008] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 128.418058][ T5008] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 128.468658][ T5008] usb 1-1: USB disconnect, device number 8 [ 128.506840][ T5008] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 128.520559][ T5008] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 128.569081][ T5008] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 128.587142][ T5008] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 128.597734][ T5008] keyspan 1-1:0.0: device disconnected [ 128.811916][ T5892] hid_parser_main: 3 callbacks suppressed [ 128.811935][ T5892] hid-generic 0005:4C4A:0005.0007: unknown main item tag 0x0 [ 128.827356][ T5892] hid-generic 0005:4C4A:0005.0007: unknown main item tag 0x0 [ 128.834789][ T5892] hid-generic 0005:4C4A:0005.0007: unknown main item tag 0x0 [ 128.842596][ T5892] hid-generic 0005:4C4A:0005.0007: unknown main item tag 0x0 [ 128.850134][ T5892] hid-generic 0005:4C4A:0005.0007: unknown main item tag 0x0 [ 128.857979][ T5892] hid-generic 0005:4C4A:0005.0007: unknown main item tag 0x0 [ 128.865395][ T5892] hid-generic 0005:4C4A:0005.0007: unknown main item tag 0x0 [ 128.872996][ T5892] hid-generic 0005:4C4A:0005.0007: unknown main item tag 0x0 [ 128.881363][ T5892] hid-generic 0005:4C4A:0005.0007: unknown main item tag 0x0 [ 128.889123][ T5892] hid-generic 0005:4C4A:0005.0007: unknown main item tag 0x0 [ 128.916710][ T5892] hid-generic 0005:4C4A:0005.0007: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 128.937466][ T5004] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 128.971364][ T5004] asix: probe of 2-1:0.188 failed with error -71 [ 129.023586][ T5004] usb 2-1: USB disconnect, device number 6 [ 129.091325][ T5911] loop0: detected capacity change from 0 to 1024 [ 129.143836][ T5909] loop2: detected capacity change from 0 to 2048 [ 129.171102][ T5911] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 129.172727][ T5917] loop4: detected capacity change from 0 to 2048 [ 129.249044][ T5917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.345292][ T5909] NILFS (loop2): invalid segment: Magic number mismatch [ 129.397696][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 129.404695][ T5909] NILFS (loop2): trying rollback from an earlier position [ 129.465973][ T5909] NILFS (loop2): recovery complete [ 129.602743][ T5919] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.828531][ T5913] loop3: detected capacity change from 0 to 40427 [ 129.855987][ T5913] F2FS-fs (loop3): invalid crc value [ 129.929419][ T5913] F2FS-fs (loop3): Found nat_bits in checkpoint [ 130.112479][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 130.128551][ T5913] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 130.206153][ T5890] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.214178][ T5913] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 130.384188][ T5938] tap0: tun_chr_ioctl cmd 1074025675 [ 130.400926][ T4278] syz-executor: attempt to access beyond end of device [ 130.400926][ T4278] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.406227][ T5938] tap0: persist enabled [ 130.422388][ T5890] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.463398][ T5890] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 130.476493][ T5940] tap0: tun_chr_ioctl cmd 1074025675 [ 130.515678][ T5940] tap0: persist enabled [ 130.532572][ T5890] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 130.574134][ T5890] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 130.613572][ T5890] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 130.641919][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.721578][ T5932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.740081][ T5932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.788355][ T5890] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 130.807101][ T5890] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 130.814843][ T5890] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 130.854617][ T5890] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 130.887096][ T5890] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 130.894836][ T5890] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 130.954872][ T5890] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 131.006291][ T5002] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.218433][ T5002] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 131.246329][ T5002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.278035][ T5002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.298394][ T5002] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 131.352511][ T5002] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 131.383097][ T5002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.408294][ T5960] loop0: detected capacity change from 0 to 164 [ 131.415488][ T5002] usb 2-1: config 0 descriptor?? [ 131.427316][ T5004] usb 5-1: USB disconnect, device number 10 [ 131.451133][ T5004] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 131.496026][ T5004] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 131.530552][ T5004] keyspan 5-1:1.0: device disconnected [ 131.858516][ T5002] holtek_kbd 0003:04D9:A055.0008: collection stack underflow [ 131.908056][ T5002] holtek_kbd 0003:04D9:A055.0008: item 0 0 0 12 parsing failed [ 131.921823][ T5953] loop2: detected capacity change from 0 to 40427 [ 131.940839][ T5002] holtek_kbd: probe of 0003:04D9:A055.0008 failed with error -22 [ 131.961048][ T5953] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 132.022536][ T5953] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 132.076029][ T5002] usb 2-1: USB disconnect, device number 7 [ 132.198504][ T5953] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.481553][ T5986] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.490373][ T5953] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 132.508160][ T5953] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 132.608718][ T5992] loop3: detected capacity change from 0 to 164 [ 132.669449][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.675829][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.728977][ T5994] loop0: detected capacity change from 0 to 1024 [ 132.835017][ T5994] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 132.851339][ T4280] syz-executor: attempt to access beyond end of device [ 132.851339][ T4280] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.893619][ T5994] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 132.903285][ T4290] Bluetooth: hci4: link tx timeout [ 132.910397][ T4290] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.920708][ T4290] Bluetooth: hci4: link tx timeout [ 132.925843][ T4290] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.926432][ T5994] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.544: Failed to acquire dquot type 0 [ 132.990022][ T5994] EXT4-fs error (device loop0): mb_free_blocks:1853: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 133.037016][ T5994] EXT4-fs (loop0): 1 truncate cleaned up [ 133.043544][ T5994] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 133.202355][ T27] audit: type=1800 audit(1794333730.832:75): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.544" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 133.301962][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 133.373534][ T6020] loop4: detected capacity change from 0 to 1024 [ 133.965263][ T6041] loop4: detected capacity change from 0 to 1024 [ 133.988498][ T6041] EXT4-fs: Ignoring removed bh option [ 134.045545][ T6043] netlink: 'syz.1.565': attribute type 2 has an invalid length. [ 134.062662][ T6041] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 134.096243][ T6043] netlink: 120 bytes leftover after parsing attributes in process `syz.1.565'. [ 134.300866][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 134.592939][ T6064] loop0: detected capacity change from 0 to 128 [ 134.642435][ T6063] loop2: detected capacity change from 0 to 2048 [ 134.677241][ T6064] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 134.718747][ T6063] loop2: p4 < > [ 134.771205][ T6064] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.803302][ T6063] syz.2.572: attempt to access beyond end of device [ 134.803302][ T6063] loop2p4: rw=2048, sector=2, nr_sectors = 1 limit=2 [ 134.803409][ T6063] hfsplus: unable to find HFS+ superblock [ 134.881061][ T6071] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 134.902503][ T6071] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 134.986280][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 135.041720][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 135.173845][ T6081] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 135.330678][ T6085] VFS: file-max limit 0 reached [ 135.489217][ T27] audit: type=1800 audit(1794333733.122:76): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.585" name="power" dev="configfs" ino=39358 res=0 errno=0 [ 135.584919][ T6092] null_blk: disk my_zoned_dev created [ 136.259414][ T6131] loop1: detected capacity change from 0 to 512 [ 136.290530][ T6133] loop4: detected capacity change from 0 to 128 [ 136.623056][ T6131] EXT4-fs (loop1): Test dummy encryption mode enabled [ 136.651121][ T6124] loop2: detected capacity change from 0 to 32768 [ 136.694023][ T6131] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.602: inode has both inline data and extents flags [ 136.713026][ T6131] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.602: couldn't read orphan inode 15 (err -117) [ 136.728617][ T6131] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 136.729046][ T6124] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 136.751586][ T6143] loop0: detected capacity change from 0 to 2048 [ 136.809725][ T6143] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.964474][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 137.097376][ T4280] ocfs2: Unmounting device (7,2) on (node local) [ 137.376179][ T5893] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 137.436177][ T5890] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 137.557896][ T5893] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 137.569588][ T5893] usb 2-1: config 0 has no interface number 0 [ 137.583679][ T5893] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.606466][ T5893] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 137.616607][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.628189][ T5893] usb 2-1: Product: syz [ 137.632651][ T5890] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 137.650103][ T5893] usb 2-1: Manufacturer: syz [ 137.659359][ T5893] usb 2-1: SerialNumber: syz [ 137.664083][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.682193][ T5893] usb 2-1: config 0 descriptor?? [ 137.693134][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.711136][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 137.724648][ T5893] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 137.764050][ T5890] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 137.780777][ T5890] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 137.793503][ T5890] usb 1-1: Manufacturer: syz [ 137.822750][ T5890] usb 1-1: config 0 descriptor?? [ 138.128056][ T5893] usb 2-1: USB disconnect, device number 8 [ 138.151009][ T5893] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 138.244948][ T5890] hid_parser_main: 24 callbacks suppressed [ 138.244966][ T5890] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 138.272433][ T5890] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 138.304349][ T5890] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 138.427972][ T6165] loop4: detected capacity change from 0 to 40427 [ 138.455903][ T6165] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 138.475286][ T6165] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 138.504789][ T6165] F2FS-fs (loop4): invalid crc value [ 138.533426][ T6165] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 138.549961][ T5893] usb 1-1: USB disconnect, device number 9 [ 138.746420][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 138.752980][ T6165] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 138.769094][ T6165] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 138.836977][ T27] audit: type=1804 audit(1794333736.462:77): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.613" name="/newroot/105/file1/bus" dev="loop4" ino=10 res=1 errno=0 [ 138.896648][ T6167] loop2: detected capacity change from 0 to 32768 [ 138.970492][ T4287] syz-executor: attempt to access beyond end of device [ 138.970492][ T4287] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 139.258553][ T6179] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 139.258553][ T6179] The task syz.2.617 (6179) triggered the difference, watch for misbehavior. [ 139.643024][ T6173] loop1: detected capacity change from 0 to 40427 [ 139.694475][ T6173] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff [ 139.742215][ T6173] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x30e4 [ 139.776631][ T6173] F2FS-fs (loop1): invalid crc value [ 139.794400][ T27] audit: type=1800 audit(1794333737.422:78): pid=6197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.625" name="zoned" dev="configfs" ino=39527 res=0 errno=0 [ 139.824336][ T6173] F2FS-fs (loop1): Found nat_bits in checkpoint [ 139.880541][ T6173] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 139.950956][ T6173] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 140.044678][ T6173] F2FS-fs (loop1) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x178/0x910 [ 140.112767][ T6206] loop4: detected capacity change from 0 to 4096 [ 140.132612][ T27] audit: type=1326 audit(1794333737.762:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b9da8f19 code=0x7ffc0000 [ 140.214093][ T27] audit: type=1326 audit(1794333737.762:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff3b9da8f19 code=0x7ffc0000 [ 140.238822][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.253293][ T6206] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 140.263797][ T27] audit: type=1326 audit(1794333737.762:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b9da8f19 code=0x7ffc0000 [ 140.287611][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.294254][ T6206] ntfs3: loop4: Failed to load $Extend. [ 140.344368][ T27] audit: type=1326 audit(1794333737.762:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b9da8f19 code=0x7ffc0000 [ 140.368271][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.383630][ T4290] Bluetooth: hci3: ISO packet too small [ 140.423445][ T6221] netlink: 'syz.3.634': attribute type 3 has an invalid length. [ 140.469520][ T27] audit: type=1326 audit(1794333737.762:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff3b9da8f19 code=0x7ffc0000 [ 140.596827][ T27] audit: type=1326 audit(1794333737.762:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b9da8f19 code=0x7ffc0000 [ 140.608040][ T6224] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 140.620672][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.688347][ T27] audit: type=1326 audit(1794333737.762:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b9da8f19 code=0x7ffc0000 [ 140.724756][ T27] audit: type=1326 audit(1794333737.762:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.631" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7ff3b9da8f19 code=0x7ffc0000 [ 140.748645][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.951544][ T6234] loop3: detected capacity change from 0 to 512 [ 140.974894][ T6234] EXT4-fs: Ignoring removed oldalloc option [ 140.997537][ T6234] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.065474][ T6234] EXT4-fs (loop3): 1 truncate cleaned up [ 141.110525][ T6234] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 141.250767][ T6248] netlink: 'syz.1.646': attribute type 101 has an invalid length. [ 142.154836][ T6263] loop0: detected capacity change from 0 to 32768 [ 142.176753][ T6263] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 142.192959][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 142.226221][ T5008] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 142.429430][ T5008] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 142.440178][ T4699] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 142.456192][ T5008] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 142.486139][ T5008] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 142.525668][ T5008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.535777][ T6288] loop3: detected capacity change from 0 to 1024 [ 142.743201][ T48] hfsplus: b-tree write err: -5, ino 3 [ 142.775482][ T4278] hfsplus: node 4:3 still has 1 user(s)! [ 142.829898][ T5008] usb 5-1: USB disconnect, device number 11 [ 142.899965][ T6280] loop2: detected capacity change from 0 to 32768 [ 143.118557][ T5890] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 143.322212][ T6299] Invalid argument reading file caps for ./file0 [ 143.322508][ T5890] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.365156][ T5890] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.407237][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 143.427818][ T5890] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 143.452334][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.515768][ T5890] usb 4-1: config 0 descriptor?? [ 143.690827][ T6313] futex_wake_op: syz.1.676 tries to shift op by 144; fix this program [ 143.855868][ T6305] loop0: detected capacity change from 0 to 32768 [ 143.912725][ T6305] JBD2: Ignoring recovery information on journal [ 143.948722][ T5890] lg-g15 0003:046D:0A07.000A: unknown main item tag 0x5 [ 143.955830][ T5890] lg-g15 0003:046D:0A07.000A: unknown main item tag 0x7 [ 144.029646][ T5890] lg-g15 0003:046D:0A07.000A: reserved main item tag 0xd [ 144.064079][ T6305] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 144.085825][ T5890] lg-g15 0003:046D:0A07.000A: unknown main item tag 0x0 [ 144.119781][ T5890] lg-g15 0003:046D:0A07.000A: unknown main item tag 0x3 [ 144.150689][ T5890] lg-g15 0003:046D:0A07.000A: item fetching failed at offset 22/24 [ 144.170406][ T5890] lg-g15: probe of 0003:046D:0A07.000A failed with error -22 [ 144.205907][ T5890] usb 4-1: USB disconnect, device number 12 [ 144.430550][ T4279] ocfs2: Unmounting device (7,0) on (node local) [ 144.507119][ T6320] loop1: detected capacity change from 0 to 32768 [ 144.564862][ T6332] loop4: detected capacity change from 0 to 128 [ 144.627192][ T6332] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 144.659511][ T6332] hpfs: filesystem error: improperly stopped [ 144.694283][ T6332] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 144.731171][ T6332] hpfs: You really don't want any checks? You are crazy... [ 144.750626][ T6332] hpfs: Code page index out of array [ 144.758491][ T6332] hpfs: code page support is disabled [ 144.786329][ T6332] hpfs: hpfs_map_4sectors(): unaligned read [ 144.794631][ T6332] hpfs: hpfs_map_4sectors(): unaligned read [ 144.798913][ T6322] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 144.826686][ T6332] hpfs: filesystem error: unable to find root dir [ 144.853719][ T6337] loop3: detected capacity change from 0 to 512 [ 144.872411][ T6338] jffs2: notice: (6338) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 144.904613][ T6337] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.993220][ T6337] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #15: comm syz.3.685: inline data xattr refers to an external xattr inode [ 145.065946][ T6348] loop1: detected capacity change from 0 to 128 [ 145.082555][ T6337] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.685: couldn't read orphan inode 15 (err -117) [ 145.128975][ T6337] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 145.170238][ T6348] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 145.173074][ T6337] EXT4-fs (loop3): shut down requested (2) [ 145.205427][ T6352] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 145.283673][ T4699] udevd[4699]: incorrect ext4 checksum on /dev/loop1 [ 145.385952][ T6337] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 145.592447][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 145.749534][ T6373] netlink: 'syz.3.696': attribute type 1 has an invalid length. [ 145.815955][ T6378] loop2: detected capacity change from 0 to 16 [ 145.858826][ T6378] erofs: (device loop2): mounted with root inode @ nid 36. [ 145.905499][ T6382] loop0: detected capacity change from 0 to 1024 [ 145.944995][ T6382] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.971817][ T6382] EXT4-fs (loop0): barriers disabled [ 145.996250][ T6382] JBD2: no valid journal superblock found [ 146.002063][ T6382] EXT4-fs (loop0): error loading journal [ 146.065196][ T6386] loop1: detected capacity change from 0 to 512 [ 146.072363][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 146.072376][ T27] audit: type=1326 audit(1794333743.702:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.703" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e9a8f19 code=0x7ffc0000 [ 146.088666][ T6386] EXT4-fs: Ignoring removed nobh option [ 146.159614][ T27] audit: type=1326 audit(1794333743.702:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.703" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e9a8f19 code=0x7ffc0000 [ 146.212531][ T6386] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 146.216476][ T5893] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 146.246485][ T6386] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.258474][ T27] audit: type=1326 audit(1794333743.702:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.703" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e9a8f19 code=0x7ffc0000 [ 146.284084][ T27] audit: type=1326 audit(1794333743.702:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.703" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e9a8f19 code=0x7ffc0000 [ 146.309489][ T27] audit: type=1326 audit(1794333743.702:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.703" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f058e9a8f19 code=0x7ffc0000 [ 146.333739][ T27] audit: type=1326 audit(1794333743.712:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.703" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e9a8f19 code=0x7ffc0000 [ 146.358039][ T27] audit: type=1326 audit(1794333743.712:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.703" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e9a8f19 code=0x7ffc0000 [ 146.391930][ T6386] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #2: comm syz.1.705: corrupted inode contents [ 146.417515][ T27] audit: type=1326 audit(1794333743.712:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.703" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e9a8f19 code=0x7ffc0000 [ 146.447023][ T5893] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.447281][ T6396] loop0: detected capacity change from 0 to 8192 [ 146.466196][ T5893] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 146.490492][ T5893] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 146.496927][ T6396] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.521045][ T27] audit: type=1326 audit(1794333743.712:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.703" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e9a8f19 code=0x7ffc0000 [ 146.536018][ T6396] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 146.545524][ T5893] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 146.560666][ T6396] REISERFS (device loop0): using ordered data mode [ 146.573758][ T6396] reiserfs: using flush barriers [ 146.580452][ T6396] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.592840][ T6386] EXT4-fs error (device loop1): ext4_dirty_inode:6199: inode #2: comm syz.1.705: mark_inode_dirty error [ 146.599174][ T6396] REISERFS (device loop0): checking transaction log (loop0) [ 146.684035][ T5893] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 146.687037][ T6396] REISERFS (device loop0): Using tea hash to sort names [ 146.693812][ T6386] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #2: comm syz.1.705: corrupted inode contents [ 146.701475][ T6396] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 146.726246][ T27] audit: type=1326 audit(1794333743.712:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.703" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f058e9a8f19 code=0x7ffc0000 [ 146.729455][ T6386] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.705: mark_inode_dirty error [ 146.775222][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.817228][ T6384] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.824578][ T6384] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.853906][ T5893] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 146.880268][ T5893] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 146.900572][ T5893] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 146.918983][ T5893] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 146.929634][ T5893] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 146.938244][ T5893] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 146.947424][ T5893] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 146.988670][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 147.199138][ T6410] loop4: detected capacity change from 0 to 128 [ 147.259809][ T6410] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 147.326261][ T6410] hpfs: filesystem error: improperly stopped [ 147.361429][ T6410] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 147.379730][ T6410] hpfs: You really don't want any checks? You are crazy... [ 147.412918][ T6410] hpfs: Code page index out of array [ 147.427068][ T6410] hpfs: code page support is disabled [ 147.453564][ T6410] hpfs: hpfs_map_4sectors(): unaligned read [ 147.463624][ T6410] hpfs: hpfs_map_4sectors(): unaligned read [ 147.486489][ T6410] hpfs: filesystem error: unable to find root dir [ 147.502850][ T6420] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 147.647285][ T5008] usb 4-1: USB disconnect, device number 13 [ 147.690567][ T5008] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 147.775258][ T5008] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 147.824624][ T5008] keyspan 4-1:1.0: device disconnected [ 148.463397][ T6425] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 148.502999][ T6425] XFS (loop1): Mounting V5 Filesystem [ 148.693942][ T6425] XFS (loop1): Ending clean mount [ 148.741192][ T6425] XFS (loop1): Quotacheck needed: Please wait. [ 148.815712][ T4268] Dev loop8: unable to read RDB block 7 [ 148.841250][ T4268] loop8: unable to read partition table [ 148.875744][ T4268] loop8: partition table beyond EOD, truncated [ 148.892766][ T6425] XFS (loop1): Quotacheck: Done. [ 148.898150][ T6452] Dev loop8: unable to read RDB block 7 [ 148.903823][ T6452] loop8: unable to read partition table [ 148.936532][ T6452] loop8: partition table beyond EOD, truncated [ 148.965788][ T6452] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 149.174411][ T6463] set_capacity_and_notify: 2 callbacks suppressed [ 149.174426][ T6463] loop4: detected capacity change from 0 to 512 [ 149.206379][ T4275] XFS (loop1): Unmounting Filesystem [ 149.235470][ T6463] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.413175][ T6463] EXT4-fs (loop4): 1 truncate cleaned up [ 149.437049][ T6463] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 149.587511][ T6462] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.729: corrupted xattr entries [ 149.645585][ T6462] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 149.661302][ T6462] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.729: corrupted xattr entries [ 149.686371][ T6463] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.729: corrupted xattr entries [ 149.739727][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 149.985953][ T6485] loop4: detected capacity change from 0 to 128 [ 150.033260][ T6485] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 150.063359][ T6485] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.713575][ T6488] loop1: detected capacity change from 0 to 32768 [ 150.869287][ T6494] loop4: detected capacity change from 0 to 32768 [ 150.906437][ T6507] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 150.936192][ T5893] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 150.950783][ T6494] JBD2: Ignoring recovery information on journal [ 151.079612][ T6494] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 151.130605][ T5893] usb 4-1: config 1 has an invalid interface number: 65 but max is 1 [ 151.148999][ T5893] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.179375][ T5893] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 151.234579][ T5893] usb 4-1: config 1 has no interface number 2 [ 151.267629][ T5893] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.312073][ T5893] usb 4-1: config 1 interface 65 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 151.341978][ T5893] usb 4-1: config 1 interface 65 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 151.383510][ T5893] usb 4-1: config 1 interface 65 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.443362][ T5893] usb 4-1: config 1 interface 65 has no altsetting 0 [ 151.478688][ T5893] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.500158][ T4287] ocfs2: Unmounting device (7,4) on (node local) [ 151.512723][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.531705][ T5893] usb 4-1: Product: syz [ 151.537294][ T5893] usb 4-1: Manufacturer: syz [ 151.557975][ T5893] usb 4-1: SerialNumber: syz [ 151.586302][ T5893] cdc_mbim 4-1:1.0: skipping garbage [ 151.591707][ T5893] usb 4-1: selecting invalid altsetting 1 [ 151.791436][ T6504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.845529][ T6504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.019422][ T6525] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4287] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6525] [ 152.108343][ T5893] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 152.114607][ T5893] cdc_mbim 4-1:1.0: bind() failure [ 152.156994][ T6528] FAULT_INJECTION: forcing a failure. [ 152.156994][ T6528] name failslab, interval 1, probability 0, space 0, times 0 [ 152.170711][ T6528] CPU: 1 PID: 6528 Comm: syz.0.768 Not tainted syzkaller #0 [ 152.178037][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 152.188092][ T6528] Call Trace: [ 152.191367][ T6528] [ 152.194295][ T6528] dump_stack_lvl+0x188/0x24e [ 152.198988][ T6528] ? show_regs_print_info+0x12/0x12 [ 152.204218][ T6528] ? load_image+0x410/0x410 [ 152.208723][ T6528] ? __might_sleep+0xd0/0xd0 [ 152.213309][ T6528] ? __lock_acquire+0x7ea0/0x7ea0 [ 152.218336][ T6528] should_fail_ex+0x390/0x4c0 [ 152.223015][ T6528] should_failslab+0x5/0x20 [ 152.227520][ T6528] slab_pre_alloc_hook+0x59/0x300 [ 152.232551][ T6528] ? kstrdup_quotable+0x1a1/0x560 [ 152.237569][ T6528] __kmem_cache_alloc_node+0x4f/0x270 [ 152.242945][ T6528] ? kstrdup_quotable+0x1a1/0x560 [ 152.247963][ T6528] __kmalloc+0xa3/0x240 [ 152.252113][ T6528] kstrdup_quotable+0x1a1/0x560 [ 152.256990][ T6528] ? string_escape_mem+0xb80/0xb80 [ 152.262095][ T6528] ? mmput+0x62/0x70 [ 152.265987][ T6528] ? get_cmdline+0x2aa/0x300 [ 152.270578][ T6528] kstrdup_quotable_cmdline+0x33e/0x3b0 [ 152.276124][ T6528] __report_access+0x72/0x300 [ 152.280805][ T6528] ? lockdep_hardirqs_on+0x94/0x140 [ 152.286005][ T6528] task_work_run+0x1d0/0x260 [ 152.290598][ T6528] ? task_work_cancel+0x220/0x220 [ 152.295620][ T6528] ? __se_sys_ptrace+0x366/0x3c0 [ 152.300576][ T6528] ? exit_to_user_mode_loop+0x3b/0x110 [ 152.306044][ T6528] exit_to_user_mode_loop+0xe6/0x110 [ 152.311335][ T6528] exit_to_user_mode_prepare+0xee/0x180 [ 152.316880][ T6528] syscall_exit_to_user_mode+0x16/0x40 [ 152.322367][ T6528] do_syscall_64+0x58/0xa0 [ 152.326798][ T6528] ? clear_bhb_loop+0x60/0xb0 [ 152.331487][ T6528] ? clear_bhb_loop+0x60/0xb0 [ 152.336173][ T6528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.342072][ T6528] RIP: 0033:0x7f058e9a8f19 [ 152.346485][ T6528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.366093][ T6528] RSP: 002b:00007f058f8c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 152.374504][ T6528] RAX: ffffffffffffffff RBX: 00007f058ec25fa0 RCX: 00007f058e9a8f19 [ 152.382480][ T6528] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000010 [ 152.390447][ T6528] RBP: 00007f058ea37f6d R08: 0000000000000000 R09: 0000000000000000 [ 152.398415][ T6528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.406379][ T6528] R13: 00007f058ec26038 R14: 00007f058ec25fa0 R15: 00007ffca6f50158 [ 152.414363][ T6528] [ 152.432586][ T5893] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 152.436866][ T4290] Bluetooth: hci3: unexpected cc 0x200b length: 2 > 1 [ 152.439726][ T5893] cdc_ncm 4-1:1.1: bind() failure [ 152.454748][ T6528] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4279] was attempted by "(null)"[6528] [ 152.694416][ T5890] usb 4-1: USB disconnect, device number 14 [ 152.762749][ T6539] loop0: detected capacity change from 0 to 2048 [ 152.797863][ T6539] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 153.311201][ T5890] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.366155][ T6560] bond0: (slave dummy0): Error: Slave does not support XDP [ 153.508465][ T5890] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 153.520863][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 153.534813][ T5890] usb 3-1: Product: syz [ 153.548661][ T5890] usb 3-1: config 0 descriptor?? [ 153.565442][ T5890] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 153.574439][ T5890] usb 3-1: Detected FT232H [ 153.761308][ T5890] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 153.986821][ T6574] ip_tables: iptables: counters copy to user failed while replacing table [ 154.186699][ T5890] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 154.363554][ T6571] loop0: detected capacity change from 0 to 131072 [ 154.377928][ T6571] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 154.384667][ T6571] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 154.393693][ T6571] F2FS-fs (loop0): invalid crc value [ 154.427876][ T6571] F2FS-fs (loop0): Found nat_bits in checkpoint [ 154.428940][ T5893] usb 3-1: USB disconnect, device number 6 [ 154.471253][ T6571] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 154.479231][ T6571] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 154.533040][ T5893] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 154.574979][ T5893] ftdi_sio 3-1:0.0: device disconnected [ 155.042393][ T6593] loop1: detected capacity change from 0 to 256 [ 155.171956][ T6593] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.274169][ T6593] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 155.306732][ T6595] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 155.371225][ T6593] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b889, utbl_chksum : 0xe619d30d) [ 155.414243][ T6589] loop4: detected capacity change from 0 to 131072 [ 155.427660][ T6593] exFAT-fs (loop1): failed to load alloc-bitmap [ 155.434067][ T6593] exFAT-fs (loop1): failed to recognize exfat type [ 155.440673][ T6589] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (512, 24) [ 155.448559][ T6589] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 155.457611][ T6589] F2FS-fs (loop4): Test dummy encryption mode enabled [ 155.467121][ T6589] F2FS-fs (loop4): invalid crc value [ 155.503202][ T6589] F2FS-fs (loop4): Found nat_bits in checkpoint [ 155.537107][ T6589] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 155.590954][ T6589] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 155.602100][ T6589] F2FS-fs (loop4): Start checkpoint disabled! [ 155.658018][ T6589] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 155.665167][ T6589] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 155.734867][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 155.734882][ T27] audit: type=1800 audit(1794333753.362:113): pid=6589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.782" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 155.818346][ T6609] loop0: detected capacity change from 0 to 512 [ 155.979046][ T4373] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 156.846310][ T5008] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.879397][ T6633] loop3: detected capacity change from 0 to 512 [ 156.932440][ T6635] loop0: detected capacity change from 0 to 128 [ 156.940218][ T6633] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 156.980542][ T6635] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 157.011190][ T6635] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.025527][ T6633] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.801: invalid indirect mapped block 9 (level 0) [ 157.046301][ T5008] usb 2-1: Using ep0 maxpacket: 32 [ 157.061662][ T5008] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 157.091424][ T5008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.099621][ T5008] usb 2-1: Product: syz [ 157.103969][ T5008] usb 2-1: Manufacturer: syz [ 157.108817][ T5008] usb 2-1: SerialNumber: syz [ 157.120118][ T5008] usb 2-1: config 0 descriptor?? [ 157.129815][ T5008] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 157.145587][ T6633] EXT4-fs (loop3): 1 truncate cleaned up [ 157.190691][ T6633] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 157.433169][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 157.612061][ T6651] rxe_eth0 speed is unknown, defaulting to 1000 [ 158.136959][ T5008] gspca_ov534_9: reg_w failed -71 [ 158.503743][ T6659] block device autoloading is deprecated and will be removed. [ 158.576285][ T5008] gspca_ov534_9: Unknown sensor 0000 [ 158.576354][ T5008] ov534_9: probe of 2-1:0.0 failed with error -22 [ 158.590523][ T5008] usb 2-1: USB disconnect, device number 9 [ 159.085135][ T6685] loop3: detected capacity change from 0 to 512 [ 159.116304][ T5008] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.321302][ T5008] usb 1-1: Using ep0 maxpacket: 8 [ 159.345974][ T5008] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 159.375194][ T5008] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 159.405460][ T5008] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.433595][ T5008] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.453241][ T5008] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.462789][ T5008] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.613012][ T6698] netlink: 'syz.2.827': attribute type 8 has an invalid length. [ 159.634530][ T6698] netlink: 'syz.2.827': attribute type 7 has an invalid length. [ 159.651985][ T6698] netlink: 126196 bytes leftover after parsing attributes in process `syz.2.827'. [ 159.661545][ T6702] loop4: detected capacity change from 0 to 4096 [ 159.693614][ T5008] usb 1-1: GET_CAPABILITIES returned 0 [ 159.706627][ T5008] usbtmc 1-1:16.0: can't read capabilities [ 159.736420][ T6702] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 159.919184][ T5893] usb 1-1: USB disconnect, device number 10 [ 159.967816][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 160.120423][ T6716] loop3: detected capacity change from 0 to 512 [ 160.292175][ T27] audit: type=1326 audit(1794333757.922:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6719 comm="syz.1.837" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50459a8f19 code=0x0 [ 160.338244][ T6708] loop2: detected capacity change from 0 to 32768 [ 160.396646][ T6708] XFS (loop2): Mounting V5 Filesystem [ 160.463447][ T6708] XFS (loop2): Ending clean mount [ 160.568608][ T5008] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 160.594056][ T5008] XFS (loop2): Unmount and run xfs_repair [ 160.596677][ T6736] loop0: detected capacity change from 0 to 512 [ 160.611442][ T5008] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 160.632033][ T6736] EXT4-fs: Ignoring removed nobh option [ 160.663785][ T5008] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 160.677714][ T6736] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.840: invalid indirect mapped block 256 (level 2) [ 160.684192][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 160.710262][ T4280] XFS (loop2): Unmounting Filesystem [ 160.715965][ T6736] EXT4-fs (loop0): 2 truncates cleaned up [ 160.732468][ T6736] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 160.761715][ T5008] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 160.782396][ T5008] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 160.798102][ T5008] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 160.827418][ T5008] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 160.836874][ T5008] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.852051][ T5008] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.861438][ T5008] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.877258][ T5893] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 160.892842][ T5893] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x17e5/0x1ed0 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 160.909542][ T5893] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 160.997291][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 161.397523][ T6751] loop6: detected capacity change from 0 to 1 [ 161.428577][ T4699] Dev loop6: unable to read RDB block 1 [ 161.441694][ T4699] loop6: unable to read partition table [ 161.458442][ C1] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 161.466421][ T4699] loop6: partition table beyond EOD, truncated [ 161.522107][ T6751] Dev loop6: unable to read RDB block 1 [ 161.539421][ T6751] loop6: unable to read partition table [ 161.556504][ T6751] loop6: partition table beyond EOD, truncated [ 161.576411][ T6751] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 161.653257][ T6743] loop4: detected capacity change from 0 to 32768 [ 162.302573][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'. [ 162.388604][ T6781] netlink: 36 bytes leftover after parsing attributes in process `syz.0.859'. [ 162.400050][ T5893] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 162.408194][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'. [ 162.597908][ T5893] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.600307][ T5004] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 162.632605][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 162.656150][ T5893] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 162.685639][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.701598][ T5893] usb 2-1: config 0 descriptor?? [ 162.823200][ T5004] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 162.841840][ T5004] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 162.863780][ T5004] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 162.874009][ T5004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.904097][ T5004] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 162.921645][ T5004] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 163.000387][ T6799] loop2: detected capacity change from 0 to 256 [ 163.002308][ T6785] loop4: detected capacity change from 0 to 32768 [ 163.028502][ T6799] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.063063][ T6799] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 163.086755][ T6785] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 163.107969][ T6799] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b889, utbl_chksum : 0xe619d30d) [ 163.121217][ T6785] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 163.125739][ T5893] razer 0003:1532:011B.000B: ignoring exceeding usage max [ 163.153397][ T6799] exFAT-fs (loop2): failed to load alloc-bitmap [ 163.161052][ T6799] exFAT-fs (loop2): failed to recognize exfat type [ 163.280627][ T4287] XFS (loop4): Unmounting Filesystem [ 163.331223][ T5893] razer 0003:1532:011B.000B: failed to enable macro keys: -71 [ 163.347096][ T5893] razer 0003:1532:011B.000B: No inputs registered, leaving [ 163.352177][ T6779] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 163.367096][ T5893] razer 0003:1532:011B.000B: hidraw0: USB HID v0.11 Joystick [HID 1532:011b] on usb-dummy_hcd.1-1/input0 [ 163.373764][ T6779] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 163.389484][ T5893] usb 2-1: USB disconnect, device number 10 [ 163.414482][ T6810] loop2: detected capacity change from 0 to 512 [ 163.426363][ T6779] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 163.466599][ T6810] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.573604][ T6810] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.870: bg 0: block 5: invalid block bitmap [ 163.651489][ T6778] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 163.705485][ T5008] usb 4-1: USB disconnect, device number 15 [ 163.731825][ T6810] EXT4-fs (loop2): Remounting filesystem read-only [ 163.741983][ T6810] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6195: Corrupt filesystem [ 163.769664][ T5008] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 163.796639][ T6810] EXT4-fs (loop2): Remounting filesystem read-only [ 163.803304][ T6810] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.870: invalid indirect mapped block 3 (level 2) [ 163.811800][ T5008] spcp8x5 4-1:1.0: device disconnected [ 163.867018][ T6810] EXT4-fs (loop2): Remounting filesystem read-only [ 163.882016][ T6811] fido_id[6811]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 163.884001][ T6810] EXT4-fs (loop2): 2 truncates cleaned up [ 163.905206][ T6810] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 163.995212][ T6819] VFS: file-max limit 0 reached [ 164.001799][ T4280] EXT4-fs error (device loop2): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 164.036023][ T4280] EXT4-fs (loop2): Remounting filesystem read-only [ 164.050501][ T4280] EXT4-fs error (device loop2): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 164.070027][ T4280] EXT4-fs (loop2): Remounting filesystem read-only [ 164.248139][ T6823] loop1: detected capacity change from 0 to 4096 [ 164.265429][ T6097] tipc: Resetting bearer [ 164.351642][ T6824] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.372030][ T6097] tipc: Disabling bearer [ 164.494414][ T4275] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 164.572509][ T6097] EXT4-fs (loop2): unmounting filesystem. [ 164.767840][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.789146][ T6831] sctp: [Deprecated]: syz.3.879 (pid 6831) Use of int in max_burst socket option deprecated. [ 164.789146][ T6831] Use struct sctp_assoc_value instead [ 164.927021][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.096676][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.110816][ T6840] loop4: detected capacity change from 0 to 2048 [ 165.122987][ T6838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.883'. [ 165.132617][ T6841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.883'. [ 165.184703][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.326348][ T5890] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 165.516290][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 165.528877][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.568180][ T5890] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.597677][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.609678][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.619003][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.628734][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.636391][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 165.644008][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.660103][ T5890] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.687636][ T5890] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 165.706215][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 165.723159][ T5890] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 165.743401][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.744766][ T6854] rxe_eth0 speed is unknown, defaulting to 1000 [ 165.771445][ T5890] usb 2-1: config 0 descriptor?? [ 165.797778][ T31] tipc: Disabling bearer [ 165.808875][ T31] tipc: Left network mode [ 165.993463][ T6863] sock: sock_set_timeout: `syz.0.890' (pid 6863) tries to set negative timeout [ 166.029342][ T6865] loop4: detected capacity change from 0 to 512 [ 166.061759][ T6865] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.085573][ T6865] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 166.193070][ T6865] EXT4-fs (loop4): 1 truncate cleaned up [ 166.200358][ T6865] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 166.256868][ T5890] logitech-djreceiver 0003:046D:C53A.000C: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0 [ 166.286770][ T6873] EXT4-fs (loop4): shut down requested (2) [ 166.498466][ T5890] usb 2-1: USB disconnect, device number 11 [ 166.564879][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 166.581413][ T6880] fido_id[6880]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 166.702945][ T27] audit: type=1800 audit(1794333764.332:115): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.896" name="c_srate" dev="configfs" ino=42909 res=0 errno=0 [ 166.801377][ T6854] chnl_net:caif_netlink_parms(): no params data found [ 166.817241][ T6894] loop3: detected capacity change from 0 to 512 [ 167.017321][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.024704][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.033176][ T6854] device bridge_slave_0 entered promiscuous mode [ 167.036514][ T6898] loop4: detected capacity change from 0 to 1024 [ 167.042334][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.054156][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.062667][ T6854] device bridge_slave_1 entered promiscuous mode [ 167.131260][ T6898] hfsplus: invalid gid specified [ 167.182280][ T6898] hfsplus: unable to parse mount options [ 167.240470][ T6904] smc: removing ib device rxe0 [ 167.490593][ T6854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.545050][ T6916] loop4: detected capacity change from 0 to 64 [ 167.595259][ T6854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.628083][ T5890] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 167.706439][ T50] Bluetooth: hci3: command 0x0409 tx timeout [ 167.828118][ T5890] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 167.851421][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 167.866828][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 167.887239][ T5890] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 167.912772][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.950148][ T6854] team0: Port device team_slave_0 added [ 167.989143][ T5890] usb 4-1: config 0 descriptor?? [ 168.074446][ T6854] team0: Port device team_slave_1 added [ 168.277477][ T6927] loop0: detected capacity change from 0 to 512 [ 168.288518][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.303479][ T6927] EXT4-fs: Ignoring removed bh option [ 168.309199][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.338983][ T6927] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 168.351821][ T6854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.383900][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.401274][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.431926][ T5890] uclogic 0003:28BD:0071.000D: interface is invalid, ignoring [ 168.482445][ T6927] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 168.510892][ T6854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.525692][ T6927] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.701693][ T6854] device hsr_slave_0 entered promiscuous mode [ 168.728732][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 168.734705][ T5890] usb 4-1: USB disconnect, device number 16 [ 168.754209][ T6854] device hsr_slave_1 entered promiscuous mode [ 168.777793][ T6854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.786899][ T6854] Cannot create hsr debugfs directory [ 168.832113][ T27] audit: type=1800 audit(1794333766.452:116): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.909" name="power" dev="configfs" ino=44077 res=0 errno=0 [ 169.459128][ T6952] gadgetfs: bound to dummy_udc driver [ 169.467530][ T6944] loop4: detected capacity change from 0 to 32768 [ 169.490955][ T27] audit: type=1800 audit(1794333767.122:117): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.913" name="ep1in-bulk" dev="gadgetfs" ino=43246 res=0 errno=0 [ 169.564448][ T6944] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 169.610621][ T5002] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 169.746232][ T31] device hsr_slave_0 left promiscuous mode [ 169.768766][ T31] device hsr_slave_1 left promiscuous mode [ 169.786319][ T50] Bluetooth: hci3: command 0x041b tx timeout [ 169.806819][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.814722][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.824435][ T5002] usb 1-1: unable to get BOS descriptor or descriptor too short [ 169.850296][ T5002] usb 1-1: not running at top speed; connect to a high speed hub [ 169.889370][ T5002] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 45, changing to 4 [ 169.901081][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.925835][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.943955][ T5002] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.973590][ T5002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.985932][ T4287] ocfs2: Unmounting device (7,4) on (node local) [ 170.008482][ T5002] usb 1-1: Product: syz [ 170.012696][ T5002] usb 1-1: Manufacturer: syz [ 170.028876][ T5002] usb 1-1: SerialNumber: syz [ 170.065503][ T31] device bridge_slave_1 left promiscuous mode [ 170.082318][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.126968][ T31] device bridge_slave_0 left promiscuous mode [ 170.135806][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.392768][ T31] device veth1_macvtap left promiscuous mode [ 170.410167][ T31] device veth0_macvtap left promiscuous mode [ 170.445977][ T31] device veth1_vlan left promiscuous mode [ 170.446992][ T6976] FAULT_INJECTION: forcing a failure. [ 170.446992][ T6976] name failslab, interval 1, probability 0, space 0, times 0 [ 170.476211][ T31] device veth0_vlan left promiscuous mode [ 170.494949][ T6976] CPU: 0 PID: 6976 Comm: syz.1.919 Not tainted syzkaller #0 [ 170.502293][ T6976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 170.512371][ T6976] Call Trace: [ 170.513076][ T5002] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 170.515651][ T6976] [ 170.515663][ T6976] dump_stack_lvl+0x188/0x24e [ 170.529995][ T6976] ? show_regs_print_info+0x12/0x12 [ 170.535229][ T6976] ? load_image+0x410/0x410 [ 170.539770][ T6976] ? __might_sleep+0xd0/0xd0 [ 170.544384][ T6976] ? __lock_acquire+0x7ea0/0x7ea0 [ 170.549450][ T6976] should_fail_ex+0x390/0x4c0 [ 170.554186][ T6976] should_failslab+0x5/0x20 [ 170.558707][ T6976] slab_pre_alloc_hook+0x59/0x300 [ 170.563739][ T6976] ? cgroup_init_fs_context+0x50/0x3c0 [ 170.569219][ T6976] __kmem_cache_alloc_node+0x4f/0x270 [ 170.574615][ T6976] ? cgroup_init_fs_context+0x50/0x3c0 [ 170.580094][ T6976] kmalloc_trace+0x26/0xe0 [ 170.584531][ T6976] cgroup_init_fs_context+0x50/0x3c0 [ 170.589837][ T6976] ? cgroup_do_get_tree+0x510/0x510 [ 170.595055][ T6976] alloc_fs_context+0x628/0x7d0 [ 170.599933][ T6976] __se_sys_fsopen+0xa0/0x2c0 [ 170.604619][ T6976] do_syscall_64+0x4c/0xa0 [ 170.609034][ T6976] ? clear_bhb_loop+0x60/0xb0 [ 170.613709][ T6976] ? clear_bhb_loop+0x60/0xb0 [ 170.618382][ T6976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.624270][ T6976] RIP: 0033:0x7f50459a8f19 [ 170.628699][ T6976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.648298][ T6976] RSP: 002b:00007f504693e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 170.656707][ T6976] RAX: ffffffffffffffda RBX: 00007f5045c25fa0 RCX: 00007f50459a8f19 [ 170.664670][ T6976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 170.672633][ T6976] RBP: 00007f5045a37f6d R08: 0000000000000000 R09: 0000000000000000 [ 170.680594][ T6976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.688552][ T6976] R13: 00007f5045c26038 R14: 00007f5045c25fa0 R15: 00007ffca7563ec8 [ 170.696526][ T6976] [ 170.733672][ T5002] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 170.862581][ T5002] usb 1-1: USB disconnect, device number 11 [ 171.337959][ T4375] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 171.358000][ T6995] kvm [6994]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0xbffffffffffffffd [ 171.535409][ T7000] loop0: detected capacity change from 0 to 2048 [ 171.562223][ T4375] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 171.572881][ T4375] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 171.620370][ T7000] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.630487][ T4375] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.640163][ T4375] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 171.674868][ T4375] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 171.703179][ T4375] usb 2-1: Product: syz [ 171.716409][ T4375] usb 2-1: Manufacturer: syz [ 171.721083][ T4375] usb 2-1: SerialNumber: syz [ 171.754740][ T4375] usb 2-1: config 0 descriptor?? [ 171.763967][ T4375] hub 2-1:0.0: bad descriptor, ignoring hub [ 171.777542][ T4375] hub: probe of 2-1:0.0 failed with error -5 [ 171.789619][ T4375] usb 2-1: selecting invalid altsetting 0 [ 171.866534][ T50] Bluetooth: hci3: command 0x040f tx timeout [ 172.221739][ T5890] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 172.240719][ T31] team0 (unregistering): Port device team_slave_1 removed [ 172.287623][ T31] team0 (unregistering): Port device team_slave_0 removed [ 172.334442][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.392487][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.406214][ T6986] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 172.423121][ T5890] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.450639][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0 [ 172.457999][ T5890] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 172.467295][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.476723][ T5890] usb 1-1: config 0 descriptor?? [ 172.840571][ T31] bond0 (unregistering): Released all slaves [ 172.894280][ T5890] razer 0003:1532:011B.000E: ignoring exceeding usage max [ 172.939761][ T6854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.977168][ T6854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.995860][ T6854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.040127][ T6854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.047567][ T5892] usb 2-1: USB disconnect, device number 12 [ 173.081471][ T7009] loop3: detected capacity change from 0 to 512 [ 173.091502][ T5890] razer 0003:1532:011B.000E: failed to enable macro keys: -71 [ 173.133269][ T7009] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.134157][ T5890] razer 0003:1532:011B.000E: No inputs registered, leaving [ 173.185781][ T7009] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.929: bg 0: block 5: invalid block bitmap [ 173.227998][ T5890] razer 0003:1532:011B.000E: hidraw0: USB HID v0.11 Joystick [HID 1532:011b] on usb-dummy_hcd.0-1/input0 [ 173.249084][ T7009] EXT4-fs (loop3): Remounting filesystem read-only [ 173.285427][ T7009] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6195: Corrupt filesystem [ 173.328184][ T5890] usb 1-1: USB disconnect, device number 12 [ 173.370569][ T7009] EXT4-fs (loop3): Remounting filesystem read-only [ 173.431850][ T7009] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.929: invalid indirect mapped block 3 (level 2) [ 173.490910][ T7011] loop4: detected capacity change from 0 to 32768 [ 173.500830][ T7009] EXT4-fs (loop3): Remounting filesystem read-only [ 173.570989][ T7009] EXT4-fs (loop3): 2 truncates cleaned up [ 173.589721][ T7009] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 173.622470][ T7014] fido_id[7014]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 173.654136][ T7011] XFS (loop4): Mounting V5 Filesystem [ 173.710488][ T4278] EXT4-fs error (device loop3): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 173.801844][ T4278] EXT4-fs (loop3): Remounting filesystem read-only [ 173.816123][ T6854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.840957][ T7011] XFS (loop4): Ending clean mount [ 173.846994][ T4278] EXT4-fs error (device loop3): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 173.882056][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.896958][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.917117][ T4278] EXT4-fs (loop3): Remounting filesystem read-only [ 173.931291][ T6854] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.946270][ T50] Bluetooth: hci3: command 0x0419 tx timeout [ 173.990244][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.018842][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.048304][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.055443][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.093382][ T4287] XFS (loop4): Unmounting Filesystem [ 174.107919][ T5008] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 174.116660][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.125598][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.145032][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.152257][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.177439][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.325333][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.330397][ T5008] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 174.364046][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.375767][ T5008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.394381][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.412308][ T5008] usb 2-1: config 0 descriptor?? [ 174.434133][ T5008] cp210x 2-1:0.0: cp210x converter detected [ 174.443887][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.457954][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.473575][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 174.484337][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.570986][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.588212][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.609648][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.629757][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.656808][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.684490][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.845825][ T5008] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 175.062043][ T5008] usb 2-1: cp210x converter now attached to ttyUSB0 [ 175.072489][ T7047] loop0: detected capacity change from 0 to 2048 [ 175.154853][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.176936][ T7047] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.936: bad orphan inode 214 [ 175.216384][ T7047] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 175.322317][ T4375] usb 2-1: USB disconnect, device number 13 [ 175.350665][ T4375] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 175.374884][ T4375] cp210x 2-1:0.0: device disconnected [ 175.404403][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.438692][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 175.566663][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.688908][ T7060] loop4: detected capacity change from 0 to 1024 [ 175.731735][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.747107][ T7060] EXT4-fs: Ignoring removed orlov option [ 175.810097][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.822858][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.833471][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.843074][ T7060] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 175.852673][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.864627][ T4292] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 175.885219][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.980246][ T7059] rxe_eth0 speed is unknown, defaulting to 1000 [ 176.061068][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.073727][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.098722][ T6854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.117233][ T7059] rxe_eth0 speed is unknown, defaulting to 1000 [ 176.144941][ T7059] rxe_eth0 speed is unknown, defaulting to 1000 [ 176.206273][ T5893] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 176.396297][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 176.407286][ T5893] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 176.436455][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.470900][ T7059] infiniband rxe0: set active [ 176.486245][ T5893] usb 1-1: Product: syz [ 176.493995][ T5893] usb 1-1: Manufacturer: syz [ 176.499022][ T7059] infiniband rxe0: added rxe_eth0 [ 176.506259][ T5893] usb 1-1: SerialNumber: syz [ 176.524165][ T5893] usb 1-1: config 0 descriptor?? [ 176.573936][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 176.663613][ T4359] rxe_eth0 speed is unknown, defaulting to 1000 [ 176.672062][ T7059] RDS/IB: rxe0: added [ 176.676916][ T7059] smc: adding ib device rxe0 with port count 1 [ 176.683382][ T7059] smc: ib device rxe0 port 1 has pnetid [ 176.689899][ T4359] rxe_eth0 speed is unknown, defaulting to 1000 [ 176.699583][ T7059] rxe_eth0 speed is unknown, defaulting to 1000 [ 176.822626][ T7092] loop4: detected capacity change from 0 to 256 [ 176.868045][ T7092] exfat: Deprecated parameter 'utf8' [ 176.891172][ T7092] exfat: Deprecated parameter 'namecase' [ 176.902698][ T7092] exfat: Deprecated parameter 'namecase' [ 176.967407][ T7092] exfat: Deprecated parameter 'utf8' [ 176.973701][ T5893] airspy 1-1:0.0: Board ID: 00 [ 176.978715][ T5893] airspy 1-1:0.0: Firmware version: [ 177.044549][ T7092] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 177.162834][ T7096] 9pnet: p9_errstr2errno: server reported unknown error �š¦#ò [ 177.162834][ T7096] \,æÃƒ7ÆÍˆ»0x0000000000000004 [ 177.202806][ T7059] rxe_eth0 speed is unknown, defaulting to 1000 [ 177.212283][ T27] audit: type=1800 audit(1794333774.842:118): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.945" name="file2" dev="loop4" ino=1048644 res=0 errno=0 [ 177.592756][ T5893] airspy 1-1:0.0: usb_control_msg() failed -71 request 12 [ 177.632379][ T5893] airspy 1-1:0.0: Registered as swradio24 [ 177.638596][ T5893] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 177.656126][ T7059] rxe_eth0 speed is unknown, defaulting to 1000 [ 177.689185][ T5893] usb 1-1: USB disconnect, device number 13 [ 177.747718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.768939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.812506][ T5008] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 177.848371][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.871513][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.946335][ T50] Bluetooth: hci2: command 0x0409 tx timeout [ 178.022505][ T5008] usb 2-1: Using ep0 maxpacket: 32 [ 178.039234][ T5008] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 178.064413][ T5008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.087853][ T5008] usb 2-1: config 0 descriptor?? [ 178.114128][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.128076][ T5008] as10x_usb: device has been detected [ 178.134800][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.143499][ T5008] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 178.158106][ T7059] rxe_eth0 speed is unknown, defaulting to 1000 [ 178.164868][ T6854] device veth0_vlan entered promiscuous mode [ 178.251031][ T6854] device veth1_vlan entered promiscuous mode [ 178.256903][ T5008] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 178.301528][ T7104] ------------[ cut here ]------------ [ 178.307134][ T7104] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 178.332936][ T7104] WARNING: CPU: 1 PID: 7104 at kernel/locking/mutex.c:582 __mutex_lock+0xa7e/0xb40 [ 178.348768][ T7104] Modules linked in: [ 178.352718][ T7104] CPU: 1 PID: 7104 Comm: syz.1.949 Not tainted syzkaller #0 [ 178.360064][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 178.366812][ T6854] device veth0_macvtap entered promiscuous mode [ 178.370148][ T7104] RIP: 0010:__mutex_lock+0xa7e/0xb40 [ 178.381686][ T7104] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d d3 21 e2 04 00 0f 85 93 f6 ff ff 48 c7 c7 40 07 ac 8a 48 c7 c6 e0 07 ac 8a e8 e2 75 0d f7 <0f> 0b e9 79 f6 ff ff 0f 0b e9 27 f9 ff ff 48 c7 c1 40 91 c6 97 80 [ 178.401386][ T7104] RSP: 0018:ffffc90003acfac0 EFLAGS: 00010246 [ 178.407499][ T7104] RAX: 9020327a3bfa1400 RBX: ffff888079900ce0 RCX: 0000000000080000 [ 178.415491][ T7104] RDX: ffffc90005012000 RSI: 00000000000023ee RDI: 00000000000023ef [ 178.423530][ T7104] RBP: ffffc90003acfc20 R08: ffff8880b8d279db R09: 1ffff110171a4f3b [ 178.427541][ T6854] device veth1_macvtap entered promiscuous mode [ 178.431534][ T7104] R10: dffffc0000000000 R11: ffffed10171a4f3c R12: dffffc0000000000 [ 178.445781][ T7104] R13: 0000000000000000 R14: ffff888079900000 R15: 0000000000000000 [ 178.453807][ T7104] FS: 00007f504693e6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 178.462794][ T7104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.469425][ T7104] CR2: 00007f058ec27dac CR3: 0000000058fe3000 CR4: 00000000003506e0 [ 178.477448][ T7104] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 178.478739][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.485419][ T7104] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 178.485434][ T7104] Call Trace: [ 178.485440][ T7104] [ 178.485448][ T7104] ? __mutex_lock+0x1ab/0xb40 [ 178.514794][ T7104] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 178.520486][ T7104] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 178.526158][ T7104] ? mutex_lock_nested+0x10/0x10 [ 178.530667][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.531095][ T7104] ? dmx_ts_feed_start_filtering+0x4e/0x210 [ 178.546871][ T7104] ? mutex_unlock+0x10/0x10 [ 178.551391][ T7104] ? mutex_lock_nested+0x10/0x10 [ 178.554236][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.556362][ T7104] ? _raw_spin_lock_irq+0xb7/0xf0 [ 178.556384][ T7104] ? _raw_spin_unlock_irq+0x1f/0x40 [ 178.556401][ T7104] as102_dvb_dmx_start_feed+0x6c/0x280 [ 178.556419][ T7104] dmx_ts_feed_start_filtering+0x11c/0x210 [ 178.556435][ T7104] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 178.556450][ T7104] dvb_dmxdev_filter_start+0x422/0x1060 [ 178.556475][ T7104] dvb_demux_do_ioctl+0x47e/0x530 [ 178.556496][ T7104] dvb_usercopy+0x191/0x2b0 [ 178.556515][ T7104] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 178.556538][ T7104] ? dvb_generic_ioctl+0xb0/0xb0 [ 178.556566][ T7104] ? dvb_demux_poll+0x210/0x210 [ 178.556585][ T7104] dvb_demux_ioctl+0x25/0x30 [ 178.556604][ T7104] __se_sys_ioctl+0xfa/0x170 [ 178.556626][ T7104] do_syscall_64+0x4c/0xa0 [ 178.596141][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.599961][ T7104] ? clear_bhb_loop+0x60/0xb0 [ 178.625275][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.629401][ T7104] ? clear_bhb_loop+0x60/0xb0 [ 178.629430][ T7104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.629450][ T7104] RIP: 0033:0x7f50459a8f19 [ 178.629465][ T7104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.629479][ T7104] RSP: 002b:00007f504693e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.629498][ T7104] RAX: ffffffffffffffda RBX: 00007f5045c25fa0 RCX: 00007f50459a8f19 [ 178.629510][ T7104] RDX: 00002000000003c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 178.629521][ T7104] RBP: 00007f5045a37f6d R08: 0000000000000000 R09: 0000000000000000 [ 178.639020][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.648316][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.648339][ T7104] R13: 00007f5045c26038 R14: 00007f5045c25fa0 R15: 00007ffca7563ec8 [ 178.648356][ T7104] [ 178.648382][ T7104] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 178.648391][ T7104] CPU: 1 PID: 7104 Comm: syz.1.949 Not tainted syzkaller #0 [ 178.648408][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 178.648417][ T7104] Call Trace: [ 178.648423][ T7104] [ 178.648428][ T7104] dump_stack_lvl+0x188/0x24e [ 178.648453][ T7104] ? memcpy+0x3c/0x60 [ 178.648467][ T7104] ? show_regs_print_info+0x12/0x12 [ 178.648487][ T7104] ? load_image+0x410/0x410 [ 178.648509][ T7104] panic+0x2d3/0x710 [ 178.648528][ T7104] ? bpf_jit_dump+0xd0/0xd0 [ 178.648548][ T7104] __warn+0x2f8/0x4f0 [ 178.648563][ T7104] ? __mutex_lock+0xa7e/0xb40 [ 178.648580][ T7104] ? __mutex_lock+0xa7e/0xb40 [ 178.648594][ T7104] report_bug+0x2ba/0x4f0 [ 178.648617][ T7104] ? __mutex_lock+0xa7e/0xb40 [ 178.648635][ T7104] handle_bug+0x3a/0x70 [ 178.648648][ T7104] exc_invalid_op+0x16/0x40 [ 178.648661][ T7104] asm_exc_invalid_op+0x16/0x20 [ 178.648677][ T7104] RIP: 0010:__mutex_lock+0xa7e/0xb40 [ 178.648693][ T7104] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d d3 21 e2 04 00 0f 85 93 f6 ff ff 48 c7 c7 40 07 ac 8a 48 c7 c6 e0 07 ac 8a e8 e2 75 0d f7 <0f> 0b e9 79 f6 ff ff 0f 0b e9 27 f9 ff ff 48 c7 c1 40 91 c6 97 80 [ 178.648707][ T7104] RSP: 0018:ffffc90003acfac0 EFLAGS: 00010246 [ 178.648723][ T7104] RAX: 9020327a3bfa1400 RBX: ffff888079900ce0 RCX: 0000000000080000 [ 178.648735][ T7104] RDX: ffffc90005012000 RSI: 00000000000023ee RDI: 00000000000023ef [ 178.648746][ T7104] RBP: ffffc90003acfc20 R08: ffff8880b8d279db R09: 1ffff110171a4f3b [ 178.648758][ T7104] R10: dffffc0000000000 R11: ffffed10171a4f3c R12: dffffc0000000000 [ 178.648770][ T7104] R13: 0000000000000000 R14: ffff888079900000 R15: 0000000000000000 [ 178.648788][ T7104] ? __mutex_lock+0x1ab/0xb40 [ 178.648803][ T7104] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 178.648821][ T7104] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 178.648836][ T7104] ? mutex_lock_nested+0x10/0x10 [ 178.648849][ T7104] ? dmx_ts_feed_start_filtering+0x4e/0x210 [ 178.648867][ T7104] ? mutex_unlock+0x10/0x10 [ 178.648881][ T7104] ? mutex_lock_nested+0x10/0x10 [ 178.648897][ T7104] ? _raw_spin_lock_irq+0xb7/0xf0 [ 178.648916][ T7104] ? _raw_spin_unlock_irq+0x1f/0x40 [ 178.648935][ T7104] as102_dvb_dmx_start_feed+0x6c/0x280 [ 178.648954][ T7104] dmx_ts_feed_start_filtering+0x11c/0x210 [ 178.648971][ T7104] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 178.648988][ T7104] dvb_dmxdev_filter_start+0x422/0x1060 [ 178.649016][ T7104] dvb_demux_do_ioctl+0x47e/0x530 [ 178.649039][ T7104] dvb_usercopy+0x191/0x2b0 [ 178.649060][ T7104] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 178.649082][ T7104] ? dvb_generic_ioctl+0xb0/0xb0 [ 178.649111][ T7104] ? dvb_demux_poll+0x210/0x210 [ 178.649132][ T7104] dvb_demux_ioctl+0x25/0x30 [ 178.649153][ T7104] __se_sys_ioctl+0xfa/0x170 [ 178.649176][ T7104] do_syscall_64+0x4c/0xa0 [ 178.649197][ T7104] ? clear_bhb_loop+0x60/0xb0 [ 178.649218][ T7104] ? clear_bhb_loop+0x60/0xb0 [ 178.649240][ T7104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.649260][ T7104] RIP: 0033:0x7f50459a8f19 [ 178.649273][ T7104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.649286][ T7104] RSP: 002b:00007f504693e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.649302][ T7104] RAX: ffffffffffffffda RBX: 00007f5045c25fa0 RCX: 00007f50459a8f19 [ 178.649314][ T7104] RDX: 00002000000003c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 178.649325][ T7104] RBP: 00007f5045a37f6d R08: 0000000000000000 R09: 0000000000000000 [ 178.649342][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.649352][ T7104] R13: 00007f5045c26038 R14: 00007f5045c25fa0 R15: 00007ffca7563ec8 [ 178.649370][ T7104] [ 178.653433][ T7104] Kernel Offset: disabled [ 179.124040][ T7104] Rebooting in 86400 seconds..