last executing test programs: 7.462118988s ago: executing program 1 (id=1248): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="23517bdb6f330f89ebe284819ab54bfc18ca918d", 0x14}, {&(0x7f0000000100)="00f5fb4c0800000063af450b0954c134a06da9ae51ba6c7c797450badd700a61d85a83eb2bb15f5729b32321adb96b7a91a7eea22528748134210fd01787709ef21cf3d9f1eea5f95750d43b2def520d36533d16", 0x54}, {&(0x7f00000012c0)="f8349585f986e53dcac563a49efc5b04e2b9192a4000dd7b9d2beca22414d168aa98a75021274ba89fbc8ae274ce7ac76762afa4822a917d9400705e40cdf2272e1dfcd57238e7195f29cdb7f7cde4e90663fb0a4ccd9b40929ca5da311bc7ce58e603d0bc6b1cd3c126d3ab046bd3ec75631e96262637f941ccd37d006c94b5ef9d89271d10df216ee5b5a867c98f7e0489f420848ddb0700000053bbda2f167485b133b18cb3c11ad4185ff5aea146fb2fc7d1a460bc2105f180f4a3121a4f2100f5ff5244d0fcc37a261f1c14466b5d76c560ff1ce2d486d097ba021a776bce6997d22dd129841496143b95cecc15d346bb33075197c7673eeeafeeca29b20e617863ba88ef029b604fc065999e6c6d25ca63b49727b4899758ea86f1753b994f190e14984aa99e776c0e64f8000026c578541947a672080a76cd79d416ce4983ddbd02881a88d55bf7e0d787a10a2b7d2857", 0x154}, {&(0x7f00000001c0)="9b89119a2d17a6c679ce623c79f9eedfee46446e", 0x14}], 0x4, 0x5) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) 7.175075635s ago: executing program 1 (id=1251): sendmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="e00100000000000000000000aa06000032548343f47d9738c9654a818cfbf090a2814af003c9fb6fec13787cf0a0c011dd0bf2182916b01789"], 0x1e0}}], 0x1, 0x4000004) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4.149357019s ago: executing program 4 (id=1280): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000004c0)={0xbc, 0x0, 0x7}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x830, 0x5}}], 0x20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.926869275s ago: executing program 4 (id=1281): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) syz_open_procfs(0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.833911881s ago: executing program 1 (id=1286): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r1, 0x0) 2.693632605s ago: executing program 1 (id=1288): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x0, 0x42}) 2.06312488s ago: executing program 4 (id=1296): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20) 2.012312031s ago: executing program 0 (id=1297): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.487548044s ago: executing program 0 (id=1299): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000600)='driver_override\x00', 0x1, 0x0) write$UHID_INPUT(r1, &(0x7f0000000740)={0x8, {"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", 0x1000}}, 0x1006) 1.406676596s ago: executing program 4 (id=1300): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f0f, 0xfffd, 0xfffffffffffffffb, 0x9a76, 0xfffffffffffffffa, 0x1fe, 0x100000001, 0x28, 0x4, 0x2}) 1.25317862s ago: executing program 2 (id=1303): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r2, {0xe, 0x1}}}, 0x24}}, 0x4) 1.228707161s ago: executing program 3 (id=1304): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x4, @void}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r4, 0x4, r4}, 0x5) 1.114322033s ago: executing program 3 (id=1305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8c0, &(0x7f0000000180)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@commit={'commit', 0x3d, 0x401}}, {@atime_quantum={'atime_quantum', 0x3d, 0x6}}, {@noacl}]}, 0x1, 0x4442, &(0x7f000000c300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x42041, 0x12c) link(&(0x7f0000000ac0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 987.037116ms ago: executing program 2 (id=1306): mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x1, 0xb7, 0x2, 0xfffffffe}}, 0xe8) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2162, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 862.374999ms ago: executing program 2 (id=1307): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 837.69382ms ago: executing program 4 (id=1308): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xcc840000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000c80)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xfe\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\x8fY\xc3\xcf\x9e\x95s\x14\xd9\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\x8b\xc5\x06\xee\xf8\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000016c0)='\x00\x00\b\x00\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x00b\x00\x00\x00\x00\x00\x00\x00\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\aOv$\xc8\"\a\xd7T\xfb\xfc\xfa\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xbd\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcf\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\\5y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91O\x9c\xbf\x86\xec\x80TZO\x85\xdd\x9d\x18\x8e\x976\xd9c\xfb`L\x1b\xa7!9\xf3\x94\xd4\xeb\x06\x99M\x9b\xf6#\xf9\xd3\x90D\xf0\x92\xaf\x9ab\xa2\xc9\xe5\xe1\xb4\xb1\xd6\x19I\xcd\x0f\x17\x16\xbcES\x80\x9e\xf9\xb2\x0e\x13\xe6\xdc\xef\xf9\xd8J\x14\x94\x83\xb8\xd6\x995\x83\x11\x19\xb6cA\x1e\xba.\x91\xec\xb2b\x0e\xb5\xd7\xee\xa2\xaf\xcbZ\x05\xf7\x17\xc03\xa7\xb1\x9d\x80\xb6;p\xf6\xa6\x8b$s\xe6\x92\x84\x02emj\x99\x16D\xaeq8>\xee6t\x95\x02K|\xa1\xdc]\xaf\a\xc40(/\a<\x1b[x\xa5/\x86\xf4J!\xed\x1c\'\\I\x9c\xd6\xab\xc6\xbdr\x06Z\x9aFF\x8b\xcc\xf7\xb0Qe\xf2=\xb7\x1d\xce[\xb8[Ec\xf2\x93\xa7j\x1f\xb9&\xb3;s\xbc\x9e\xec\xb2\x91\xb3Y\xdby\xa7\xf5\x1d\xc1\x85\xb3\x83l&\x05t\xdb2\xd0\x99\xe3h\xf1\x8d#\x941e8\xb9\xca8\x021\xb9Yv!l\xcd\x01\x9d\a\br\xa1e\xe6\xd9DZfc\x0f\xb0\xbb\xb2\r\xf5E\x88\x0e\xd9\xbfo\xb0\x81c#!\xf1\aC\x8c\xa5\x10\x17\xf3q\v\xba\xfe\x81\x86\x01\x04\xb2\xcb\xbdU\xab\x1dn\xf1\b\xf6w!\xb6S\xdf\x96\x11\x02\x90\xd6\xd7BQN*\xae\xddP\x1b\\\xf0Nm') 821.1831ms ago: executing program 0 (id=1309): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4104, 0x9b08}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) 752.082242ms ago: executing program 2 (id=1310): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x201, &(0x7f0000000080)={0x0, 0xc9f, 0x10, 0x3, 0x3}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000080)="9b6058", &(0x7f0000000140)=""/209}, 0x20) 647.079215ms ago: executing program 0 (id=1311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0xfff1, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0xa, 0x1, 0x0, 0x0, {{0x7fd, 0x2, 0x1}, {0x101, 0x0, 0x1, "48eaae55"}}}, @TCF_EM_META={0x11, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_VAR="8c1b6dbb266c963bc6eb", @TCF_META_TYPE_VAR="e72301607f9f", @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR='E', @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='}', @TCF_META_TYPE_VAR="d70a258e", @TCF_META_TYPE_VAR="e6e318", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x0, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="cb90", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="93ae536c1194", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x0, 0x2, [@TCF_META_TYPE_VAR="cfd100", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x0, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0x0, 0x1, {{0x3, 0x0, 0x2}, {0x2, 0x6, 0x2}}}, @TCA_EM_META_LVALUE={0x0, 0x2, [@TCF_META_TYPE_INT=0x5]}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 600.688086ms ago: executing program 0 (id=1312): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r0}, './file1\x00'}) 600.381366ms ago: executing program 4 (id=1313): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x2010, 0xffffffffffffffff, 0xec777000) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x40, &(0x7f0000000240)={0x8, 0x1, 0x9}) 471.820449ms ago: executing program 0 (id=1314): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000140)=0x1) 351.478191ms ago: executing program 3 (id=1315): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, r2, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x200005, 0x5d}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x20008090) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x70bd08, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x2000c010) 136.489847ms ago: executing program 1 (id=1316): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 135.695827ms ago: executing program 2 (id=1317): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcadbf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) keyctl$clear(0x5, 0xfffffffffffffffd) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0) 100.305788ms ago: executing program 1 (id=1318): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r2, 0x0, r4, 0x0, 0x20002, 0x5) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 94.934128ms ago: executing program 3 (id=1319): setns(0xc9, 0x40000000) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8914, &(0x7f0000000000)="7770616e3000000000000000000000000100"/40) ioctl(r0, 0x8914, &(0x7f0000000040)="6c6f7770616e300000000000000000000100"/40) setsockopt(r0, 0x1, 0x19, &(0x7f0000000080)='lowpan0\x00', 0x8) sendto$inet6(r0, &(0x7f0000000100)='lowpan_payload', 0xe, 0x0, &(0x7f0000000140)={0xa, 0x1234, 0x0, @empty}, 0x1c) 55.284739ms ago: executing program 2 (id=1320): socket$packet(0x11, 0x3, 0x300) r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) close(r1) 39.551499ms ago: executing program 3 (id=1321): r0 = memfd_create(&(0x7f0000000840)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xe5,\x82\x03\x00\x19\x8d\xff\xff\xff\xff\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xe7!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7c\x06\x00\x00\x00\x00\x00\x00\x001\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfc^\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11X\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xfc\xbc\xeb[^\xc7\xc0v/\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0a\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xed\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x9f\x0f\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r0, 0x0, 0xb, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 0s ago: executing program 3 (id=1322): r0 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x40}) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4) recvfrom(r1, 0x0, 0x0, 0x32, 0x0, 0x0) kernel console output (not intermixed with test programs): to HW filter on device bond1 [ 103.047965][ T5882] bridge0: port 3(bond1) entered blocking state [ 103.055215][ T5882] bridge0: port 3(bond1) entered disabled state [ 103.074599][ T5882] device bond1 entered promiscuous mode [ 103.088294][ T5882] bridge0: port 3(bond1) entered blocking state [ 103.094650][ T5882] bridge0: port 3(bond1) entered forwarding state [ 103.175722][ T5888] device-mapper: table: 248:1: multipath: invalid number of selector args [ 103.184457][ T5888] device-mapper: ioctl: error adding target to table [ 103.217101][ T5893] loop4: detected capacity change from 0 to 64 [ 103.264968][ T5893] hfs: unable to load iocharset "koi8-rucodepage=maciceland" [ 103.283880][ T5893] hfs: unable to parse mount options [ 103.712097][ T5895] loop2: detected capacity change from 0 to 40427 [ 103.723147][ T23] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 103.739848][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.627'. [ 103.796282][ T5895] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 103.819781][ T5895] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 103.839663][ T5895] F2FS-fs (loop2): invalid crc value [ 103.863837][ T5895] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.925914][ T3088] bridge0: port 3(bond1) entered disabled state [ 103.958633][ T5895] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 103.976204][ T5895] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 104.056172][ T5937] loop0: detected capacity change from 0 to 512 [ 104.090048][ T23] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 104.108433][ T23] usb 5-1: config 0 has no interface number 0 [ 104.127236][ T23] usb 5-1: config 0 interface 41 has no altsetting 0 [ 104.135617][ T5937] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,discard,quota,,errors=continue. Quota mode: writeback. [ 104.158587][ T5937] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.310038][ T23] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 104.339187][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.360537][ T23] usb 5-1: Product: syz [ 104.364759][ T23] usb 5-1: Manufacturer: syz [ 104.369440][ T23] usb 5-1: SerialNumber: syz [ 104.393958][ T23] usb 5-1: config 0 descriptor?? [ 104.478213][ T5951] loop0: detected capacity change from 0 to 16 [ 104.510072][ T4261] usb 4-1: USB disconnect, device number 4 [ 104.520017][ T5815] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.573080][ T5953] loop5: detected capacity change from 0 to 7 [ 104.593835][ T5953] Dev loop5: unable to read RDB block 7 [ 104.609850][ T5953] loop5: unable to read partition table [ 104.615793][ T5953] loop5: partition table beyond EOD, truncated [ 104.625982][ T5953] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 104.667309][ T5951] erofs: (device loop0): mounted with root inode @ nid 36. [ 104.736672][ T5951] attempt to access beyond end of device [ 104.736672][ T5951] loop0: rw=524288, want=32, limit=16 [ 104.789882][ T5815] usb 2-1: Using ep0 maxpacket: 16 [ 104.795181][ T5951] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 104.848558][ T26] audit: type=1800 audit(1791210580.248:7): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.636" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 104.950456][ T5815] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.966868][ T5815] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.081205][ T23] CoreChips: probe of 5-1:0.41 failed with error -71 [ 105.111144][ T23] usb 5-1: USB disconnect, device number 8 [ 105.151599][ T5975] loop2: detected capacity change from 0 to 256 [ 105.167007][ T5815] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.201413][ T5975] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.217596][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.226247][ T5815] usb 2-1: Product: syz [ 105.240857][ T5815] usb 2-1: Manufacturer: syz [ 105.245615][ T5975] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 105.260012][ T5815] usb 2-1: SerialNumber: syz [ 105.278248][ T5975] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc67dbcad, utbl_chksum : 0xe619d30d) [ 105.349979][ T4261] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 105.489595][ T5982] loop2: detected capacity change from 0 to 512 [ 105.520025][ T5982] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.580345][ T5982] EXT4-fs (loop2): 1 truncate cleaned up [ 105.590330][ T5982] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,init_itable,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 105.616900][ T5986] loop3: detected capacity change from 0 to 1164 [ 105.626289][ T5815] usb 2-1: 0:2 : does not exist [ 105.719658][ T5815] usb 2-1: USB disconnect, device number 6 [ 105.795744][ T4261] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 105.818089][ T4261] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 105.832155][ T4261] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 105.842455][ T4261] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.853138][ T4261] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.863621][ T4261] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 105.894155][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.965120][ T5965] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 105.994026][ T5965] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 106.015581][ T5965] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 106.046789][ T5102] udevd[5102]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.091060][ T4261] mos7720 1-1:1.0: Moschip 2 port adapter converter detected [ 106.530326][ T4261] usb 1-1: mos7720: usb_control_msg() failed: -71 [ 106.547569][ T4261] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 106.590017][ T6023] team0: Device bridge0 is up. Set it down before adding it as a team port [ 106.598979][ T4261] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 106.662602][ T4261] usb 1-1: USB disconnect, device number 8 [ 106.706112][ T4261] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 106.737098][ T4261] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 106.768834][ T4261] mos7720 1-1:1.0: device disconnected [ 107.237895][ T6047] loop3: detected capacity change from 0 to 2048 [ 107.250326][ T6049] loop1: detected capacity change from 0 to 1764 [ 107.309414][ T6047] loop3: p2 < > p3 < p5 > p4 [ 107.323812][ T6047] loop3: partition table partially beyond EOD, truncated [ 107.363225][ T6047] loop3: p2 start 4278190080 is beyond EOD, truncated [ 107.394451][ T6047] loop3: p4 size 8192 extends beyond EOD, truncated [ 107.418876][ T6047] loop3: p5 size 8192 extends beyond EOD, truncated [ 107.648477][ T5105] udevd[5105]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 107.648567][ T5102] udevd[5102]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 107.678663][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 107.693681][ T6063] netlink: 80 bytes leftover after parsing attributes in process `syz.1.686'. [ 107.713005][ T6063] netlink: 80 bytes leftover after parsing attributes in process `syz.1.686'. [ 107.733763][ T6063] netlink: 80 bytes leftover after parsing attributes in process `syz.1.686'. [ 107.762912][ T5102] udevd[5102]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 107.766844][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 107.775481][ T5105] udevd[5105]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 108.136105][ T6074] loop4: detected capacity change from 0 to 128 [ 108.139882][ T4261] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 108.200390][ T6074] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 108.241089][ T6074] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.294571][ T26] audit: type=1800 audit(1791210583.698:8): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.691" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 108.553250][ T6086] loop3: detected capacity change from 0 to 2048 [ 108.616265][ T4261] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.632507][ T6086] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.655942][ T4261] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.680550][ T6086] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.697628][ T4261] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.749834][ T5811] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 108.784846][ T4261] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 108.809046][ T4261] usb 2-1: config 0 interface 0 has no altsetting 0 [ 108.816064][ T4261] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 108.827217][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.837517][ T4261] usb 2-1: config 0 descriptor?? [ 109.017467][ T6098] loop0: detected capacity change from 0 to 4096 [ 109.035366][ T6098] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 109.061355][ T5811] usb 5-1: Using ep0 maxpacket: 8 [ 109.117760][ T6098] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 109.235518][ T5811] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 109.255016][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.275650][ T6097] loop3: detected capacity change from 0 to 32768 [ 109.337753][ T5811] pvrusb2: Hardware description: Terratec Grabster AV400 [ 109.350621][ T5811] pvrusb2: ********** [ 109.354636][ T5811] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 109.375762][ T4261] logitech-djreceiver 0003:046D:C53A.0004: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0 [ 109.414758][ T6097] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.700 (6097) [ 109.420794][ T5811] pvrusb2: Important functionality might not be entirely working. [ 109.450761][ T5811] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 109.469863][ T5811] pvrusb2: ********** [ 109.493672][ T6097] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 109.509811][ T6097] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 109.529997][ T6097] BTRFS info (device loop3): use zstd compression, level 3 [ 109.537252][ T6097] BTRFS info (device loop3): using free space tree [ 109.546596][ T2422] pvrusb2: Invalid write control endpoint [ 109.587829][ T6097] BTRFS info (device loop3): has skinny extents [ 109.641614][ T2422] pvrusb2: Invalid write control endpoint [ 109.649214][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 109.659410][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 109.667287][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 109.679631][ T2422] pvrusb2: Device being rendered inoperable [ 109.690414][ T2422] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 109.698154][ T2422] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 109.718772][ T2422] pvrusb2: Attached sub-driver cx25840 [ 109.725787][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 109.750146][ T23] usb 5-1: USB disconnect, device number 9 [ 109.795820][ T5811] usb 2-1: USB disconnect, device number 7 [ 109.824604][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 109.850269][ T6097] BTRFS info (device loop3): enabling ssd optimizations [ 109.891642][ T6097] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 109.918939][ T5993] Set syz1 is full, maxelem 65536 reached [ 109.995235][ T6120] loop2: detected capacity change from 0 to 64 [ 110.128200][ T6121] Core dump to core aborted: cannot preserve file permissions [ 110.251810][ T26] audit: type=1800 audit(1791210585.658:9): pid=6098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.701" name="file1" dev="loop0" ino=24 res=0 errno=0 [ 110.431407][ T4185] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 110.467765][ T4185] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 110.580675][ T6132] loop2: detected capacity change from 0 to 4096 [ 110.640110][ T6132] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 110.665083][ T6132] NILFS (loop2): mounting unchecked fs [ 110.682488][ T6132] NILFS (loop2): recovery required for readonly filesystem [ 110.707447][ T6132] NILFS (loop2): write access will be enabled during recovery [ 110.721517][ T5102] udevd[5102]: incorrect nilfs2 checksum on /dev/loop2 [ 110.767238][ T6132] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 110.795228][ T6140] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 110.836687][ T6132] NILFS (loop2): couldn't remount because the filesystem is in an incomplete recovery state [ 110.921157][ T6142] netlink: 'syz.1.721': attribute type 3 has an invalid length. [ 111.001353][ T6123] loop4: detected capacity change from 0 to 32768 [ 111.002201][ T6129] loop3: detected capacity change from 0 to 32768 [ 111.038452][ T6123] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.705 (6123) [ 111.044853][ T6148] loop2: detected capacity change from 0 to 256 [ 111.070983][ T6123] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 111.088530][ T6129] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.702 (6129) [ 111.115696][ T6123] BTRFS info (device loop4): use zlib compression, level 3 [ 111.136660][ T6129] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 111.140424][ T6148] exfat: Deprecated parameter 'utf8' [ 111.154435][ T6123] BTRFS info (device loop4): using free space tree [ 111.157177][ T6129] BTRFS warning (device loop3): excessive commit interval 3581 [ 111.170939][ T6129] BTRFS info (device loop3): force zlib compression, level 3 [ 111.178378][ T6129] BTRFS info (device loop3): metadata ratio 107050 [ 111.183898][ T6148] exfat: Deprecated parameter 'namecase' [ 111.187855][ T6129] BTRFS info (device loop3): turning on flush-on-commit [ 111.198102][ T6129] BTRFS info (device loop3): max_inline at 4096 [ 111.204873][ T6129] BTRFS info (device loop3): using free space tree [ 111.207948][ T6123] BTRFS info (device loop4): has skinny extents [ 111.214111][ T6129] BTRFS info (device loop3): has skinny extents [ 111.239856][ T6148] exfat: Deprecated parameter 'utf8' [ 111.274720][ T6148] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 111.470583][ T6123] BTRFS info (device loop4): enabling ssd optimizations [ 111.508517][ T6129] BTRFS info (device loop3): enabling ssd optimizations [ 112.072518][ T6211] loop1: detected capacity change from 0 to 2048 [ 112.115156][ T6213] serio: Serial port ptm0 [ 112.166687][ T6211] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.582720][ T6227] netlink: 35 bytes leftover after parsing attributes in process `syz.1.741'. [ 112.584040][ T6216] loop3: detected capacity change from 0 to 32768 [ 112.611205][ T6227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.741'. [ 112.662863][ T6216] JBD2: Ignoring recovery information on journal [ 112.731046][ T6216] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 112.991320][ T6216] syz.3.726 (6216) used greatest stack depth: 20384 bytes left [ 113.025605][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 113.154742][ T6256] loop4: detected capacity change from 0 to 256 [ 113.184297][ T6260] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 113.223526][ T6256] exfat: Deprecated parameter 'utf8' [ 113.228894][ T6256] exfat: Deprecated parameter 'namecase' [ 113.270869][ T6256] exfat: Deprecated parameter 'utf8' [ 113.334080][ T6256] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 113.347909][ T6259] loop2: detected capacity change from 0 to 4096 [ 113.447599][ T6259] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 113.627927][ T6288] FAULT_INJECTION: forcing a failure. [ 113.627927][ T6288] name failslab, interval 1, probability 0, space 0, times 0 [ 113.640892][ T6288] CPU: 0 PID: 6288 Comm: syz.4.752 Not tainted syzkaller #0 [ 113.648201][ T6288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.658268][ T6288] Call Trace: [ 113.661568][ T6288] [ 113.664510][ T6288] dump_stack_lvl+0x188/0x250 [ 113.669213][ T6288] ? show_regs_print_info+0x20/0x20 [ 113.674429][ T6288] ? load_image+0x410/0x410 [ 113.678948][ T6288] ? __might_sleep+0xf0/0xf0 [ 113.683542][ T6288] ? __lock_acquire+0x7d40/0x7d40 [ 113.688569][ T6288] should_fail+0x383/0x4b0 [ 113.692986][ T6288] should_failslab+0x5/0x20 [ 113.697480][ T6288] slab_pre_alloc_hook+0x51/0xc0 [ 113.702408][ T6288] kmem_cache_alloc_trace+0x47/0x290 [ 113.707677][ T6288] ? ceph_alloc_options+0xae/0x1c0 [ 113.712781][ T6288] ceph_alloc_options+0xae/0x1c0 [ 113.717711][ T6288] ceph_init_fs_context+0x64/0x4a0 [ 113.722812][ T6288] ? destroy_caches+0x70/0x70 [ 113.727475][ T6288] alloc_fs_context+0x628/0x7d0 [ 113.732324][ T6288] __se_sys_fsopen+0x111/0x320 [ 113.737079][ T6288] do_syscall_64+0x4c/0xa0 [ 113.741482][ T6288] ? clear_bhb_loop+0x30/0x80 [ 113.746150][ T6288] ? clear_bhb_loop+0x30/0x80 [ 113.750811][ T6288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.756693][ T6288] RIP: 0033:0x7f0e9b848199 [ 113.761097][ T6288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.780694][ T6288] RSP: 002b:00007f0e99aa0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 113.789100][ T6288] RAX: ffffffffffffffda RBX: 00007f0e9bacffa0 RCX: 00007f0e9b848199 [ 113.797060][ T6288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 113.805018][ T6288] RBP: 00007f0e9b8df0b8 R08: 0000000000000000 R09: 0000000000000000 [ 113.813005][ T6288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.820962][ T6288] R13: 00007f0e9bad0038 R14: 00007f0e9bacffa0 R15: 00007fff28428648 [ 113.828934][ T6288] [ 113.832040][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.883121][ T4191] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 114.141892][ T6315] sctp: [Deprecated]: syz.4.763 (pid 6315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.141892][ T6315] Use struct sctp_sack_info instead [ 114.197956][ T4201] Bluetooth: hci4: link tx timeout [ 114.203092][ T6319] loop3: detected capacity change from 0 to 64 [ 114.203640][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.337814][ T6327] Core dump to core aborted: cannot preserve file permissions [ 114.388794][ T4201] Bluetooth: hci4: link tx timeout [ 114.394512][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.428187][ T4201] Bluetooth: hci4: link tx timeout [ 114.433572][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.443874][ T6329] FAULT_INJECTION: forcing a failure. [ 114.443874][ T6329] name failslab, interval 1, probability 0, space 0, times 0 [ 114.457421][ T6329] CPU: 0 PID: 6329 Comm: syz.0.769 Not tainted syzkaller #0 [ 114.464743][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.474811][ T6329] Call Trace: [ 114.478107][ T6329] [ 114.481052][ T6329] dump_stack_lvl+0x188/0x250 [ 114.485744][ T6329] ? show_regs_print_info+0x20/0x20 [ 114.490941][ T6329] ? load_image+0x410/0x410 [ 114.495436][ T6329] ? __might_sleep+0xf0/0xf0 [ 114.500362][ T6329] ? __lock_acquire+0x7d40/0x7d40 [ 114.505384][ T6329] should_fail+0x383/0x4b0 [ 114.509795][ T6329] should_failslab+0x5/0x20 [ 114.514293][ T6329] slab_pre_alloc_hook+0x51/0xc0 [ 114.519240][ T6329] __kmalloc+0x6b/0x340 [ 114.523382][ T6329] ? security_prepare_creds+0x47/0x130 [ 114.528828][ T6329] ? prepare_creds+0x3c/0x610 [ 114.533500][ T6329] security_prepare_creds+0x47/0x130 [ 114.538777][ T6329] prepare_creds+0x450/0x610 [ 114.543355][ T6329] keyctl_set_reqkey_keyring+0x78/0x1b0 [ 114.549009][ T6329] __se_sys_keyctl+0x162/0xa20 [ 114.553762][ T6329] ? __x64_sys_keyctl+0xc0/0xc0 [ 114.558608][ T6329] ? __context_tracking_exit+0x4c/0x80 [ 114.564056][ T6329] ? __lock_acquire+0x7d40/0x7d40 [ 114.569073][ T6329] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 114.575046][ T6329] ? lock_chain_count+0x20/0x20 [ 114.579891][ T6329] ? lockdep_hardirqs_on+0x94/0x140 [ 114.585077][ T6329] ? __x64_sys_keyctl+0x1c/0xc0 [ 114.589921][ T6329] do_syscall_64+0x4c/0xa0 [ 114.594341][ T6329] ? clear_bhb_loop+0x30/0x80 [ 114.599005][ T6329] ? clear_bhb_loop+0x30/0x80 [ 114.603674][ T6329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.609554][ T6329] RIP: 0033:0x7f5c439bb199 [ 114.613955][ T6329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.633548][ T6329] RSP: 002b:00007f5c41c13028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 114.641954][ T6329] RAX: ffffffffffffffda RBX: 00007f5c43c42fa0 RCX: 00007f5c439bb199 [ 114.649913][ T6329] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000000e [ 114.657954][ T6329] RBP: 00007f5c43a520b8 R08: 0000000000000000 R09: 0000000000000000 [ 114.665914][ T6329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.673873][ T6329] R13: 00007f5c43c43038 R14: 00007f5c43c42fa0 R15: 00007ffd43379978 [ 114.681843][ T6329] [ 114.684916][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.699763][ T4227] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 114.707498][ T4201] Bluetooth: hci4: link tx timeout [ 114.717494][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.725411][ T4201] Bluetooth: hci4: link tx timeout [ 114.730575][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.094972][ T6363] FAULT_INJECTION: forcing a failure. [ 115.094972][ T6363] name failslab, interval 1, probability 0, space 0, times 0 [ 115.117308][ T6363] CPU: 1 PID: 6363 Comm: syz.3.782 Not tainted syzkaller #0 [ 115.124644][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.134717][ T6363] Call Trace: [ 115.138018][ T6363] [ 115.140963][ T6363] dump_stack_lvl+0x188/0x250 [ 115.145673][ T6363] ? show_regs_print_info+0x20/0x20 [ 115.150893][ T6363] ? load_image+0x410/0x410 [ 115.155435][ T6363] should_fail+0x383/0x4b0 [ 115.159877][ T6363] should_failslab+0x5/0x20 [ 115.164400][ T6363] slab_pre_alloc_hook+0x51/0xc0 [ 115.169352][ T6363] ? anon_vma_clone+0xbc/0x4d0 [ 115.174127][ T6363] kmem_cache_alloc+0x3d/0x280 [ 115.178915][ T6363] anon_vma_clone+0xbc/0x4d0 [ 115.183550][ T6363] __split_vma+0x1ab/0x410 [ 115.188002][ T6363] __do_munmap+0x38a/0xe10 [ 115.192454][ T6363] mremap_to+0x363/0x6b0 [ 115.196736][ T6363] __se_sys_mremap+0x412/0x950 [ 115.201964][ T6363] ? __x64_sys_mremap+0xc0/0xc0 [ 115.206921][ T6363] ? lock_chain_count+0x20/0x20 [ 115.211802][ T6363] ? lockdep_hardirqs_on+0x94/0x140 [ 115.217024][ T6363] ? __x64_sys_mremap+0x1c/0xc0 [ 115.221904][ T6363] do_syscall_64+0x4c/0xa0 [ 115.226334][ T6363] ? clear_bhb_loop+0x30/0x80 [ 115.231036][ T6363] ? clear_bhb_loop+0x30/0x80 [ 115.235747][ T6363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.241657][ T6363] RIP: 0033:0x7efeb3468199 [ 115.246091][ T6363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.265711][ T6363] RSP: 002b:00007efeb16c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 115.274140][ T6363] RAX: ffffffffffffffda RBX: 00007efeb36effa0 RCX: 00007efeb3468199 [ 115.282123][ T6363] RDX: 0000000000002000 RSI: 0000000000003000 RDI: 0000200000000000 [ 115.290110][ T6363] RBP: 00007efeb34ff0b8 R08: 0000200000dcb000 R09: 0000000000000000 [ 115.298090][ T6363] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 115.306080][ T6363] R13: 00007efeb36f0038 R14: 00007efeb36effa0 R15: 00007ffda1257378 [ 115.314087][ T6363] [ 115.439890][ T4227] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 115.448975][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.474511][ T4227] usb 3-1: Product: syz [ 115.484152][ T4227] usb 3-1: Manufacturer: syz [ 115.488819][ T4227] usb 3-1: SerialNumber: syz [ 115.527989][ T4201] Bluetooth: hci4: link tx timeout [ 115.533264][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.561230][ T4227] ums_eneub6250 3-1:1.0: USB Mass Storage device detected [ 115.601683][ T4227] scsi host1: usb-storage 3-1:1.0 [ 115.616311][ T6391] loop4: detected capacity change from 0 to 512 [ 115.707350][ T6373] loop0: detected capacity change from 0 to 40427 [ 115.725323][ T6391] EXT4-fs (loop4): orphan cleanup on readonly fs [ 115.740168][ T6373] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 115.748767][ T6373] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 115.762093][ T4201] Bluetooth: hci4: link tx timeout [ 115.767243][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.774669][ T6399] loop1: detected capacity change from 0 to 256 [ 115.784772][ T6373] F2FS-fs (loop0): invalid crc value [ 115.785959][ T6391] Quota error (device loop4): v2_read_file_info: Block with free entry too big (9 >= 6). [ 115.803400][ T6391] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.818705][ T6391] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 115.836433][ T6373] F2FS-fs (loop0): Found nat_bits in checkpoint [ 115.849541][ T6391] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.789: bad orphan inode 14 [ 115.862066][ T4201] Bluetooth: hci4: link tx timeout [ 115.867226][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.887020][ T6391] ext4_test_bit(bit=13, block=18) = 1 [ 115.902883][ T6391] is_bad_inode(inode)=0 [ 115.922803][ T6391] NEXT_ORPHAN(inode)=0 [ 115.933698][ T6391] max_ino=32 [ 115.936968][ T6391] i_nlink=1 [ 115.940252][ T6391] EXT4-fs (loop4): 1 truncate cleaned up [ 115.946203][ T6391] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.977570][ T6373] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 115.988758][ T6373] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 116.012744][ T4201] Bluetooth: hci4: link tx timeout [ 116.017893][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.025711][ T4227] ums_eneub6250: This driver only supports SD/MS cards. It does not support SM cards. [ 116.232592][ T4420] usb 3-1: USB disconnect, device number 10 [ 116.240888][ T4227] Bluetooth: hci4: command 0x0406 tx timeout [ 116.345443][ T6414] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 116.585841][ T6422] loop1: detected capacity change from 0 to 512 [ 116.637396][ T6422] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 116.637396][ T6422] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 116.637396][ T6422] [ 116.672171][ T6422] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 116.696062][ T6422] EXT4-fs warning (device loop1): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 116.875253][ T6442] loop3: detected capacity change from 0 to 256 [ 116.993744][ T6453] loop0: detected capacity change from 0 to 1024 [ 117.184461][ T6455] loop2: detected capacity change from 0 to 2048 [ 117.276016][ T6455] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.399574][ T6469] loop0: detected capacity change from 0 to 512 [ 117.421713][ T6451] loop1: detected capacity change from 0 to 32768 [ 117.495225][ T6476] loop4: detected capacity change from 0 to 128 [ 117.566428][ T6476] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000002000,quota,,errors=continue. Quota mode: writeback. [ 117.591963][ T6476] ext4 filesystem being mounted at /173/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.680967][ T6451] XFS (loop1): Mounting V5 Filesystem [ 117.688053][ T6476] EXT4-fs error (device loop4): make_indexed_dir:2335: inode #2: block 63: comm syz.4.824: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=687865856, rec_len=4, size=1000 fake=0 [ 117.909017][ T6451] XFS (loop1): Ending clean mount [ 117.984181][ T4189] XFS (loop1): Unmounting Filesystem [ 118.189480][ T6482] XFS (loop2): Mounting V5 Filesystem [ 118.205565][ T6507] netlink: 2172 bytes leftover after parsing attributes in process `syz.3.832'. [ 118.291485][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 118.366326][ T6482] XFS (loop2): Ending clean mount [ 118.527285][ T4191] XFS (loop2): Unmounting Filesystem [ 118.607009][ T6502] XFS (loop0): Mounting V5 Filesystem [ 118.688207][ T4201] Bluetooth: hci4: link tx timeout [ 118.695579][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.758676][ T6502] XFS (loop0): Ending clean mount [ 118.759885][ T4420] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 118.817318][ T4185] XFS (loop0): Unmounting Filesystem [ 118.865126][ T6541] Invalid argument reading file caps for ./file0 [ 118.925875][ T6543] netlink: 'syz.3.844': attribute type 3 has an invalid length. [ 118.975463][ T6543] netlink: 'syz.3.844': attribute type 7 has an invalid length. [ 119.005673][ T6543] netlink: 'syz.3.844': attribute type 8 has an invalid length. [ 119.037145][ T6543] netlink: 'syz.3.844': attribute type 7 has an invalid length. [ 119.060100][ T6543] netlink: 198948 bytes leftover after parsing attributes in process `syz.3.844'. [ 119.145298][ T4420] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.156659][ T4420] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.174066][ T4420] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.185266][ T4420] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 119.206727][ T4420] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.325667][ T6566] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 119.399419][ T6566] FAT-fs (loop3): error, corrupted directory (invalid i_start) [ 119.399869][ T4419] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 119.408162][ T6566] FAT-fs (loop3): Filesystem has been set read-only [ 119.415939][ T4420] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.439905][ T4420] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.448078][ T4420] usb 5-1: Product: syz [ 119.452734][ T4420] usb 5-1: Manufacturer: syz [ 119.457352][ T4420] usb 5-1: SerialNumber: syz [ 119.460844][ T4186] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 119.510867][ T4420] cdc_mbim 5-1:1.0: skipping garbage [ 119.639855][ T4195] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 119.677055][ T6570] read_mapping_page failed! [ 119.680328][ T4419] usb 2-1: Using ep0 maxpacket: 16 [ 119.699482][ T6570] ialloc: diAlloc returned -5! [ 119.799946][ T4419] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 119.810877][ T4419] usb 2-1: config 0 has no interface number 0 [ 119.821484][ T4419] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 119.838487][ T4419] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 119.854184][ T4201] Bluetooth: hci4: link tx timeout [ 119.859356][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.012071][ T4195] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 120.021088][ T4419] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 120.035299][ T4195] usb 1-1: config 0 has no interface number 0 [ 120.041897][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.049553][ T4419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.061194][ T4195] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 120.073240][ T4419] usb 2-1: Product: syz [ 120.077727][ T4419] usb 2-1: Manufacturer: syz [ 120.084938][ T4195] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.097968][ T4419] usb 2-1: SerialNumber: syz [ 120.106282][ T4419] usb 2-1: config 0 descriptor?? [ 120.130098][ T6552] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 120.137253][ T6552] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 120.259955][ T4195] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 120.269129][ T4195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.277185][ T4195] usb 1-1: Product: syz [ 120.281528][ T4195] usb 1-1: Manufacturer: syz [ 120.286301][ T4195] usb 1-1: SerialNumber: syz [ 120.299083][ T4195] usb 1-1: config 0 descriptor?? [ 120.320097][ T6568] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 120.340619][ T4195] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 120.354943][ T6552] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 120.362346][ T6552] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 120.365913][ T4195] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 120.400142][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 120.410084][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 120.471055][ T4227] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 120.480554][ T4201] Bluetooth: hci4: link tx timeout [ 120.485694][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.540024][ T23] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 120.554410][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 120.563097][ T23] usb 4-1: Product: syz [ 120.567277][ T23] usb 4-1: Manufacturer: syz [ 120.589954][ T4419] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 120.600003][ T4420] cdc_mbim 5-1:1.0: bind() failure [ 120.611339][ T23] iuu_phoenix 4-1:1.0: iuu_phoenix converter detected [ 120.619336][ T23] usb 4-1: iuu_phoenix converter now attached to ttyUSB1 [ 120.626697][ T4420] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 120.649844][ T4420] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 120.669865][ T4420] usbtest: probe of 5-1:1.1 failed with error -71 [ 120.682919][ T4420] usb 5-1: USB disconnect, device number 10 [ 120.763380][ T23] usb 1-1: USB disconnect, device number 9 [ 120.781121][ T23] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 120.793244][ T23] cyberjack 1-1:0.69: device disconnected [ 120.822122][ T4255] usb 4-1: USB disconnect, device number 5 [ 120.832301][ T4255] iuu_phoenix ttyUSB1: iuu_phoenix converter now disconnected from ttyUSB1 [ 120.841753][ T4227] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.851993][ T4227] usb 3-1: config 0 has no interfaces? [ 120.857488][ T4227] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.869041][ T4255] iuu_phoenix 4-1:1.0: device disconnected [ 120.878262][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.891332][ T4227] usb 3-1: config 0 descriptor?? [ 121.120032][ T6586] netlink: 64 bytes leftover after parsing attributes in process `syz.4.862'. [ 121.144258][ T4420] usb 3-1: USB disconnect, device number 11 [ 121.239928][ T4419] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 121.251052][ T4419] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 121.289867][ T4419] asix: probe of 2-1:0.34 failed with error -71 [ 121.317605][ T4419] usb 2-1: USB disconnect, device number 8 [ 121.411992][ T6609] device syzkaller1 entered promiscuous mode [ 121.453750][ T6611] xt_TCPMSS: Only works on TCP SYN packets [ 121.461245][ T6611] overlayfs: unrecognized mount option "verity=on" or missing value [ 121.551831][ T6617] nvmet: adding nsid 1 to subsystem testsubsys [ 121.629850][ T4420] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 121.803280][ T6640] ftl_cs: FTL header not found. [ 121.879783][ T4420] usb 1-1: Using ep0 maxpacket: 8 [ 121.887712][ T6640] block2mtd: mtd1: [/dev/zram0] erase_size = 4KiB [4096] [ 122.001897][ T4420] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 122.019351][ T4420] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.034795][ T4420] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.045679][ T4420] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.061829][ T4420] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.078865][ T4420] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 122.096510][ T4420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.262955][ T5102] udevd[5102]: symlink '../../loop9' '/dev/disk/by-diskseq/347.tmp-b7:9' failed: Read-only file system [ 122.336476][ T5102] udevd[5102]: symlink '../../loop9' '/dev/disk/by-diskseq/347.tmp-b7:9' failed: Read-only file system [ 122.369854][ T4420] usb 1-1: usb_control_msg returned -32 [ 122.371508][ T5102] udevd[5102]: symlink '../../loop9' '/dev/disk/by-diskseq/347.tmp-b7:9' failed: Read-only file system [ 122.375950][ T4201] Bluetooth: hci4: link tx timeout [ 122.392095][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.409668][ T4420] usbtmc 1-1:16.0: can't read capabilities [ 122.706928][ T6701] set_capacity_and_notify: 5 callbacks suppressed [ 122.706944][ T6701] loop4: detected capacity change from 0 to 2048 [ 122.815644][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/349.tmp-b7:4' failed: Read-only file system [ 122.828444][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 122.852247][ T6701] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 122.858226][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/349.tmp-b7:4' failed: Read-only file system [ 122.875963][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 122.888915][ T6701] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 122.975538][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/349.tmp-b7:4' failed: Read-only file system [ 122.989911][ T4255] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 123.015260][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/349.tmp-b7:4' failed: Read-only file system [ 123.055560][ T6713] bridge0: port 4(syz_tun) entered blocking state [ 123.062809][ T6713] bridge0: port 4(syz_tun) entered disabled state [ 123.076847][ T6713] device syz_tun entered promiscuous mode [ 123.086347][ T6713] bridge0: port 4(syz_tun) entered blocking state [ 123.093356][ T6713] bridge0: port 4(syz_tun) entered forwarding state [ 123.138531][ T6718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.921'. [ 123.173135][ T6720] netlink: 'syz.4.922': attribute type 8 has an invalid length. [ 123.181133][ T6720] netlink: 'syz.4.922': attribute type 4 has an invalid length. [ 123.190531][ T6720] netlink: 'syz.4.922': attribute type 7 has an invalid length. [ 123.198288][ T6720] netlink: 197204 bytes leftover after parsing attributes in process `syz.4.922'. [ 123.239665][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.923'. [ 123.254745][ T4255] usb 3-1: Using ep0 maxpacket: 32 [ 123.379983][ T4255] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 123.391592][ T4255] usb 3-1: config 0 has no interface number 0 [ 123.401704][ T4255] usb 3-1: config 0 interface 184 has no altsetting 0 [ 123.418461][ T6734] loop4: detected capacity change from 0 to 2048 [ 123.472199][ T6734] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 123.501806][ T6734] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.504922][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/351.tmp-b7:4' failed: Read-only file system [ 123.625367][ T4255] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 123.642163][ T4255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.659845][ T4255] usb 3-1: Product: syz [ 123.674800][ T4255] usb 3-1: Manufacturer: syz [ 123.679448][ T4255] usb 3-1: SerialNumber: syz [ 123.688037][ T4255] usb 3-1: config 0 descriptor?? [ 123.750943][ T4255] smsc75xx v1.0.0 [ 123.777685][ T6752] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 123.855883][ T4201] Bluetooth: hci4: link tx timeout [ 123.861148][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.878411][ T6762] loop3: detected capacity change from 0 to 128 [ 123.929963][ T6765] loop4: detected capacity change from 0 to 1024 [ 123.930496][ T6762] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 123.957781][ T6762] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.017246][ T6765] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.263172][ T4201] Bluetooth: hci4: link tx timeout [ 124.268375][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.383667][ T6124] usb 1-1: USB disconnect, device number 10 [ 124.391398][ T6778] loop3: detected capacity change from 0 to 32768 [ 124.401620][ T4419] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 124.406321][ T4255] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 124.425022][ T4255] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 124.440177][ T6778] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.947 (6778) [ 124.483065][ T6778] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 124.509895][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 124.517852][ T6778] BTRFS info (device loop3): use zlib compression, level 3 [ 124.536378][ T6778] BTRFS info (device loop3): using free space tree [ 124.544705][ T6778] BTRFS info (device loop3): has skinny extents [ 124.657024][ T6778] BTRFS info (device loop3): enabling ssd optimizations [ 124.710058][ T4255] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 124.741301][ T4255] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 124.810085][ T4419] usb 2-1: unable to get BOS descriptor or descriptor too short [ 124.811348][ T4255] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 124.849976][ T4419] usb 2-1: not running at top speed; connect to a high speed hub [ 124.887322][ T4255] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 124.932750][ T4255] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 124.948648][ T4255] usb 3-1: USB disconnect, device number 12 [ 125.040579][ T23] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 125.050378][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.058396][ T23] usb 5-1: Product: syz [ 125.063276][ T23] usb 5-1: Manufacturer: syz [ 125.067898][ T23] usb 5-1: SerialNumber: syz [ 125.103742][ T4419] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 125.117555][ T23] ums_eneub6250 5-1:1.0: USB Mass Storage device detected [ 125.129268][ T4419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.139808][ T4195] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 125.152629][ T4419] usb 2-1: Product: syz [ 125.156826][ T4419] usb 2-1: Manufacturer: syz [ 125.163540][ T4419] usb 2-1: SerialNumber: syz [ 125.176724][ T23] scsi host1: usb-storage 5-1:1.0 [ 125.211810][ T4419] usb 2-1: selecting invalid altsetting 1 [ 125.235016][ T4419] usb 2-1: selecting invalid altsetting 1 [ 125.244579][ T4419] usb 2-1: selecting invalid altsetting 1 [ 125.392300][ T4195] usb 1-1: Using ep0 maxpacket: 8 [ 125.446631][ T4419] usb 2-1: USB disconnect, device number 9 [ 125.559943][ T23] ums_eneub6250: This driver only supports SD/MS cards. It does not support SM cards. [ 125.675375][ T4195] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 125.694708][ T4195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.710537][ T4195] usb 1-1: Product: syz [ 125.714853][ T4195] usb 1-1: Manufacturer: syz [ 125.719531][ T4195] usb 1-1: SerialNumber: syz [ 125.734162][ T4195] usb 1-1: config 0 descriptor?? [ 125.755330][ T4419] usb 5-1: USB disconnect, device number 11 [ 125.778762][ T4195] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 126.043550][ T6836] loop3: detected capacity change from 0 to 32768 [ 126.237688][ T6843] loop2: detected capacity change from 0 to 32768 [ 126.266454][ T4201] Bluetooth: hci4: link tx timeout [ 126.272091][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.738853][ T6845] loop1: detected capacity change from 0 to 32768 [ 126.783048][ T6870] loop2: detected capacity change from 0 to 256 [ 126.795407][ T6845] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.969 (6845) [ 126.817305][ T6870] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.832896][ T6845] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 126.845351][ T23] usb 1-1: USB disconnect, device number 11 [ 126.860567][ T6845] BTRFS info (device loop1): use zlib compression, level 3 [ 126.867821][ T6845] BTRFS info (device loop1): using free space tree [ 126.906359][ T6845] BTRFS info (device loop1): has skinny extents [ 126.915142][ T6870] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.019076][ T6854] loop3: detected capacity change from 0 to 32768 [ 127.029073][ T4195] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 127.135964][ T6854] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 127.183934][ T6854] JBD2: Ignoring recovery information on journal [ 127.206139][ T6845] BTRFS info (device loop1): enabling ssd optimizations [ 127.294233][ T6854] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 127.500887][ T4195] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 127.519017][ T4195] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 127.538941][ T6854] syz.3.970 (6854) used greatest stack depth: 19072 bytes left [ 127.556236][ T4195] usb 5-1: Product: syz [ 127.585355][ T4195] usb 5-1: config 0 descriptor?? [ 127.603959][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 127.651180][ T4195] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 127.666976][ T4195] usb 5-1: Detected FT232H [ 127.846992][ T6900] loop2: detected capacity change from 0 to 32768 [ 127.878883][ T4195] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 127.960489][ T6900] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 127.997865][ T4201] Bluetooth: hci4: link tx timeout [ 128.003187][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.004377][ T6922] loop3: detected capacity change from 0 to 512 [ 128.068446][ T6900] JBD2: Ignoring recovery information on journal [ 128.151191][ T6922] FAT-fs (loop3): Directory bread(block 199916) failed [ 128.160458][ T6922] FAT-fs (loop3): Directory bread(block 199917) failed [ 128.167537][ T6922] FAT-fs (loop3): Directory bread(block 199918) failed [ 128.174998][ T6922] FAT-fs (loop3): Directory bread(block 199919) failed [ 128.184724][ T6922] FAT-fs (loop3): Directory bread(block 199920) failed [ 128.186210][ T6900] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 128.199495][ T6922] FAT-fs (loop3): Directory bread(block 199921) failed [ 128.217828][ T6922] FAT-fs (loop3): Directory bread(block 199922) failed [ 128.232598][ T6922] FAT-fs (loop3): Directory bread(block 199923) failed [ 128.266721][ T4201] Bluetooth: hci4: link tx timeout [ 128.271922][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.318381][ T6922] FAT-fs (loop3): FAT read failed (blocknr 128) [ 128.405899][ T4195] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 128.427269][ T6934] loop0: detected capacity change from 0 to 128 [ 128.467030][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 128.548945][ T6937] bridge0: port 4(veth0) entered blocking state [ 128.556924][ T6937] bridge0: port 4(veth0) entered disabled state [ 128.617629][ T6937] device veth0 entered promiscuous mode [ 128.624404][ T6934] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 128.625926][ T6924] usb 5-1: USB disconnect, device number 12 [ 128.640728][ T6937] bridge0: port 4(veth0) entered blocking state [ 128.647026][ T6937] bridge0: port 4(veth0) entered forwarding state [ 128.669398][ T6934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.716439][ T6924] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 128.748240][ T6924] ftdi_sio 5-1:0.0: device disconnected [ 128.783174][ T6942] loop3: detected capacity change from 0 to 256 [ 128.835874][ T6942] exfat: Deprecated parameter 'utf8' [ 128.863181][ T6942] exfat: Deprecated parameter 'utf8' [ 128.884518][ T6942] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x30348f56, utbl_chksum : 0xe619d30d) [ 128.964923][ T6952] loop1: detected capacity change from 0 to 512 [ 129.073115][ T6952] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.093571][ T6952] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 129.110676][ T4255] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 129.132188][ T6952] EXT4-fs (loop1): orphan cleanup on readonly fs [ 129.147528][ T6952] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.993: bad orphan inode 15 [ 129.164918][ T6952] ext4_test_bit(bit=14, block=18) = 1 [ 129.170433][ T6952] is_bad_inode(inode)=0 [ 129.174603][ T6952] NEXT_ORPHAN(inode)=1023 [ 129.178938][ T6952] max_ino=32 [ 129.182256][ T6952] i_nlink=0 [ 129.189859][ T4195] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 129.200208][ T6952] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.993: bg 0: block 440: padding at end of block bitmap is not set [ 129.224969][ T6952] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 129.263516][ T6952] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.399780][ T4255] usb 3-1: Using ep0 maxpacket: 8 [ 129.408660][ T6952] EXT4-fs (loop1): shut down requested (0) [ 129.444345][ T6952] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 129.461793][ T4195] usb 4-1: Using ep0 maxpacket: 16 [ 129.478858][ T6960] loop0: detected capacity change from 0 to 32768 [ 129.486522][ T6952] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none. [ 129.514228][ T6960] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.996 (6960) [ 129.551442][ T6960] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 129.551509][ T4255] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 129.561229][ T6960] BTRFS info (device loop0): setting nodatasum [ 129.580198][ T4195] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.599864][ T6960] BTRFS info (device loop0): force zlib compression, level 3 [ 129.606111][ T4255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.607436][ T4195] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.636007][ T6960] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 129.656308][ T4195] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 129.669915][ T6960] BTRFS info (device loop0): use lzo compression, level 0 [ 129.677077][ T6960] BTRFS info (device loop0): turning on flush-on-commit [ 129.697298][ T4255] pvrusb2: Hardware description: Terratec Grabster AV400 [ 129.699848][ T4195] usb 4-1: config 0 interface 0 has no altsetting 0 [ 129.714766][ T4255] pvrusb2: ********** [ 129.718786][ T4255] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 129.719792][ T6960] BTRFS info (device loop0): enabling auto defrag [ 129.735959][ T4195] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 129.755078][ T4255] pvrusb2: Important functionality might not be entirely working. [ 129.755915][ T4195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.771278][ T6960] BTRFS info (device loop0): max_inline at 4096 [ 129.773360][ T4255] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 129.777576][ T6960] BTRFS info (device loop0): using free space tree [ 129.798140][ T4195] usb 4-1: config 0 descriptor?? [ 129.817137][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.827140][ T6960] BTRFS info (device loop0): has skinny extents [ 129.829797][ T4255] pvrusb2: ********** [ 129.863979][ T23] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.915080][ T2422] pvrusb2: Invalid write control endpoint [ 129.938513][ T6991] loop1: detected capacity change from 0 to 128 [ 129.943473][ T2422] pvrusb2: Invalid write control endpoint [ 129.966877][ T6991] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 130.008336][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 130.030024][ T6960] BTRFS info (device loop0): enabling ssd optimizations [ 130.042244][ T6991] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.056414][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 130.079887][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 130.130994][ T2422] pvrusb2: Device being rendered inoperable [ 130.139968][ T26] audit: type=1800 audit(1791210605.538:10): pid=6991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1001" name="file1" dev="loop1" ino=94 res=0 errno=0 [ 130.190486][ T2422] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 130.197829][ T2422] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 130.212775][ T2422] pvrusb2: Attached sub-driver cx25840 [ 130.219348][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 130.235494][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 130.281592][ T4195] hid (null): invalid report_count 2075921239 [ 130.287791][ T4195] hid (null): unknown global tag 0xd [ 130.313726][ T4195] hid (null): invalid report_count 38340 [ 130.321596][ T4255] usb 3-1: USB disconnect, device number 13 [ 130.334289][ T4195] hid (null): invalid report_size 48260 [ 130.354374][ T4195] hid (null): unknown global tag 0xe [ 130.376197][ T4195] hid (null): unknown global tag 0xe [ 130.395247][ T4195] hid (null): unknown global tag 0xc [ 130.415446][ T4195] hid (null): unknown global tag 0xc [ 130.421823][ T4195] hid (null): unknown global tag 0xe [ 130.429553][ T4195] hid (null): unknown global tag 0x55 [ 130.601685][ T4255] usb 4-1: USB disconnect, device number 6 [ 130.679832][ T7000] loop1: detected capacity change from 0 to 8192 [ 130.722451][ T7000] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 130.762172][ T7010] Invalid argument reading file caps for ./file0 [ 130.788117][ T7000] REISERFS (device loop1): using ordered data mode [ 130.795246][ T7000] reiserfs: using flush barriers [ 130.816566][ T7000] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 130.840421][ T7000] REISERFS (device loop1): checking transaction log (loop1) [ 131.081048][ T7000] REISERFS (device loop1): Using tea hash to sort names [ 131.109969][ T7000] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 131.122284][ T7018] loop0: detected capacity change from 0 to 256 [ 131.182726][ T7018] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205a7fec, utbl_chksum : 0xe619d30d) [ 131.238463][ T7000] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 131.402369][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'. [ 131.448146][ T7012] loop4: detected capacity change from 0 to 32768 [ 131.527316][ T7028] netlink: 'syz.0.1015': attribute type 2 has an invalid length. [ 131.559895][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'. [ 131.930879][ T26] audit: type=1326 audit(1791210607.328:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.1.1021" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff778ff199 code=0x0 [ 132.226656][ T7057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1025'. [ 132.261334][ T7060] FAULT_INJECTION: forcing a failure. [ 132.261334][ T7060] name failslab, interval 1, probability 0, space 0, times 0 [ 132.298570][ T7060] CPU: 0 PID: 7060 Comm: syz.3.1024 Not tainted syzkaller #0 [ 132.305993][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 132.309146][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 132.316061][ T7060] Call Trace: [ 132.316077][ T7060] [ 132.316085][ T7060] dump_stack_lvl+0x188/0x250 [ 132.316115][ T7060] ? show_regs_print_info+0x20/0x20 [ 132.316133][ T7060] ? load_image+0x410/0x410 [ 132.316152][ T7060] ? __might_sleep+0xf0/0xf0 [ 132.316169][ T7060] ? __lock_acquire+0x7d40/0x7d40 [ 132.316195][ T7060] should_fail+0x383/0x4b0 [ 132.316220][ T7060] should_failslab+0x5/0x20 [ 132.316236][ T7060] slab_pre_alloc_hook+0x51/0xc0 [ 132.316255][ T7060] kmem_cache_alloc_trace+0x47/0x290 [ 132.329170][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 132.329509][ T7060] ? ceph_alloc_options+0x4a/0x1c0 [ 132.348694][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 132.353553][ T7060] ceph_alloc_options+0x4a/0x1c0 [ 132.353589][ T7060] ceph_init_fs_context+0x64/0x4a0 [ 132.353608][ T7060] ? destroy_caches+0x70/0x70 [ 132.353625][ T7060] alloc_fs_context+0x628/0x7d0 [ 132.353651][ T7060] __se_sys_fsopen+0x111/0x320 [ 132.353674][ T7060] do_syscall_64+0x4c/0xa0 [ 132.358724][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 132.362581][ T7060] ? clear_bhb_loop+0x30/0x80 [ 132.362609][ T7060] ? clear_bhb_loop+0x30/0x80 [ 132.362627][ T7060] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.362647][ T7060] RIP: 0033:0x7efeb3468199 [ 132.362663][ T7060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.362675][ T7060] RSP: 002b:00007efeb16c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 132.362695][ T7060] RAX: ffffffffffffffda RBX: 00007efeb36effa0 RCX: 00007efeb3468199 [ 132.362708][ T7060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 132.362720][ T7060] RBP: 00007efeb34ff0b8 R08: 0000000000000000 R09: 0000000000000000 [ 132.362731][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.362743][ T7060] R13: 00007efeb36f0038 R14: 00007efeb36effa0 R15: 00007ffda1257378 [ 132.362775][ T7060] [ 132.576447][ T7063] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 132.614717][ T7063] REISERFS (device loop2): using ordered data mode [ 132.627082][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 132.647565][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 132.665649][ T7063] reiserfs: using flush barriers [ 132.675062][ T7064] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 132.721662][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.727991][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.751761][ T7063] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.785884][ T7063] REISERFS (device loop2): checking transaction log (loop2) [ 132.794710][ T7063] REISERFS (device loop2): Using rupasov hash to sort names [ 132.802174][ T7063] REISERFS (device loop2): using 3.5.x disk format [ 132.809246][ T7063] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 132.821381][ T7063] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 132.832737][ T7063] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 132.844101][ T7063] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 132.994808][ T7082] set_capacity_and_notify: 2 callbacks suppressed [ 132.994823][ T7082] loop3: detected capacity change from 0 to 1024 [ 133.167218][ T7091] capability: warning: `syz.3.1040' uses deprecated v2 capabilities in a way that may be insecure [ 133.209786][ T4229] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 133.240096][ T7090] loop1: detected capacity change from 0 to 4096 [ 133.329309][ T7090] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 133.392593][ T7087] loop2: detected capacity change from 0 to 32768 [ 133.407731][ T7087] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1034 (7087) [ 133.484968][ T7087] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 133.500486][ T7087] BTRFS info (device loop2): use zlib compression, level 3 [ 133.513357][ T7087] BTRFS info (device loop2): using free space tree [ 133.514752][ T4189] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 133.544863][ T7087] BTRFS info (device loop2): has skinny extents [ 133.570084][ T4229] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.593688][ T4229] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 133.617575][ T4229] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 133.627928][ T4229] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 133.647566][ T4229] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 133.694214][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.761749][ T7078] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 133.768931][ T7078] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 133.801446][ T4229] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 133.860884][ T4229] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 133.885542][ T7087] BTRFS info (device loop2): enabling ssd optimizations [ 133.894405][ T4229] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 133.908920][ T4229] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 133.926061][ T4229] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 133.936385][ T4229] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 133.949570][ T4229] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 134.305840][ T7113] loop1: detected capacity change from 0 to 32768 [ 134.331242][ T4232] usb 5-1: USB disconnect, device number 13 [ 134.345344][ T7142] loop3: detected capacity change from 0 to 256 [ 134.372679][ T4232] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 134.399838][ T4232] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 134.423679][ T4232] keyspan 5-1:1.0: device disconnected [ 134.523195][ T7113] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 134.621989][ T7113] JBD2: Ignoring recovery information on journal [ 134.780150][ T7113] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 134.982429][ T7145] loop0: detected capacity change from 0 to 32768 [ 135.003803][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 135.261678][ T7164] nvmet: adding nsid 1 to subsystem testsubsys [ 135.377425][ T7170] FAULT_INJECTION: forcing a failure. [ 135.377425][ T7170] name failslab, interval 1, probability 0, space 0, times 0 [ 135.426528][ T7170] CPU: 0 PID: 7170 Comm: syz.1.1067 Not tainted syzkaller #0 [ 135.433952][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.444028][ T7170] Call Trace: [ 135.447319][ T7170] [ 135.450249][ T7170] dump_stack_lvl+0x188/0x250 [ 135.454941][ T7170] ? show_regs_print_info+0x20/0x20 [ 135.460136][ T7170] ? load_image+0x410/0x410 [ 135.464655][ T7170] ? __lock_acquire+0x7d40/0x7d40 [ 135.469705][ T7170] should_fail+0x383/0x4b0 [ 135.474191][ T7170] should_failslab+0x5/0x20 [ 135.478728][ T7170] slab_pre_alloc_hook+0x51/0xc0 [ 135.483692][ T7170] ? __se_sys_mount+0x9b/0x3d0 [ 135.488479][ T7170] __kmalloc_track_caller+0x69/0x330 [ 135.493783][ T7170] ? __se_sys_mount+0x9b/0x3d0 [ 135.498564][ T7170] ? strnlen_user+0x19b/0x250 [ 135.503259][ T7170] strndup_user+0x71/0x150 [ 135.507688][ T7170] __se_sys_mount+0x9b/0x3d0 [ 135.512299][ T7170] ? __x64_sys_mount+0xc0/0xc0 [ 135.517084][ T7170] ? lockdep_hardirqs_on+0x94/0x140 [ 135.522295][ T7170] ? __x64_sys_mount+0x1c/0xc0 [ 135.527083][ T7170] do_syscall_64+0x4c/0xa0 [ 135.531519][ T7170] ? clear_bhb_loop+0x30/0x80 [ 135.536215][ T7170] ? clear_bhb_loop+0x30/0x80 [ 135.540917][ T7170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.546831][ T7170] RIP: 0033:0x7eff778ff199 [ 135.551264][ T7170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.570891][ T7170] RSP: 002b:00007eff75b57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 135.579334][ T7170] RAX: ffffffffffffffda RBX: 00007eff77b86fa0 RCX: 00007eff778ff199 [ 135.587326][ T7170] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.595318][ T7170] RBP: 00007eff779960b8 R08: 0000000000000000 R09: 0000000000000000 [ 135.603308][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.611301][ T7170] R13: 00007eff77b87038 R14: 00007eff77b86fa0 R15: 00007ffd4974bd48 [ 135.619308][ T7170] [ 135.700763][ T7157] loop2: detected capacity change from 0 to 32768 [ 135.742108][ T7157] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1061 (7157) [ 135.773166][ T7168] loop4: detected capacity change from 0 to 32768 [ 135.785874][ T7157] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 135.799501][ T7157] BTRFS info (device loop2): setting nodatasum [ 135.806395][ T7168] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1066 (7168) [ 135.821069][ T7157] BTRFS info (device loop2): force zlib compression, level 3 [ 135.838736][ T7157] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 135.857820][ T7168] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 135.871168][ T7157] BTRFS info (device loop2): use lzo compression, level 0 [ 135.878477][ T7168] BTRFS info (device loop4): setting nodatacow, compression disabled [ 135.890453][ T7157] BTRFS info (device loop2): turning on flush-on-commit [ 135.897518][ T7157] BTRFS info (device loop2): enabling auto defrag [ 135.908621][ T7168] BTRFS info (device loop4): setting datasum, datacow enabled [ 135.918269][ T7157] BTRFS info (device loop2): max_inline at 4096 [ 135.933471][ T7168] BTRFS info (device loop4): force clearing of disk cache [ 135.942175][ T7157] BTRFS info (device loop2): using free space tree [ 135.948789][ T7157] BTRFS info (device loop2): has skinny extents [ 135.975145][ T7168] BTRFS info (device loop4): turning on sync discard [ 135.982217][ T4232] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 135.997241][ T7168] BTRFS info (device loop4): enabling ssd optimizations [ 136.005189][ T7168] BTRFS info (device loop4): using spread ssd allocation scheme [ 136.013725][ T7168] BTRFS info (device loop4): not using ssd optimizations [ 136.021365][ T7168] BTRFS info (device loop4): not using spread ssd allocation scheme [ 136.029372][ T7168] BTRFS info (device loop4): using free space tree [ 136.036895][ T7168] BTRFS info (device loop4): has skinny extents [ 136.116776][ T7157] BTRFS info (device loop2): enabling ssd optimizations [ 136.147675][ T7168] BTRFS info (device loop4): clearing free space tree [ 136.156419][ T7168] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 136.167967][ T7168] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 136.217204][ T7168] BTRFS info (device loop4): creating free space tree [ 136.237059][ T7168] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 136.247538][ T7168] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 136.384512][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 136.562565][ T4232] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 136.594211][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.610118][ T4232] usb 1-1: Product: syz [ 136.614370][ T4232] usb 1-1: Manufacturer: syz [ 136.619390][ T4232] usb 1-1: SerialNumber: syz [ 136.646439][ T4232] usb 1-1: config 0 descriptor?? [ 136.750028][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.779398][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.857417][ T7231] loop1: detected capacity change from 0 to 2048 [ 136.870401][ T23] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 136.879911][ T4818] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 136.893216][ T23] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 136.903986][ T23] usb 4-1: Manufacturer: syz [ 136.927190][ T7231] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 136.939955][ T23] usb 4-1: config 0 descriptor?? [ 136.949027][ T7231] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 136.972362][ T4229] usb 1-1: USB disconnect, device number 12 [ 136.989589][ T7231] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,discard,errors=remount-ro,mblk_io_submit,usrquota,mblk_io_submit,minixdf,barrier=0x0000000000000002,nombcache,bsddf,. Quota mode: writeback. [ 137.129881][ T4818] usb 3-1: Using ep0 maxpacket: 32 [ 137.220794][ T7243] nvmet: adding nsid 1 to subsystem testsubsys [ 137.249920][ T4818] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 137.270330][ T4818] usb 3-1: config 0 has no interface number 0 [ 137.296323][ T7250] FAULT_INJECTION: forcing a failure. [ 137.296323][ T7250] name failslab, interval 1, probability 0, space 0, times 0 [ 137.309425][ T7250] CPU: 0 PID: 7250 Comm: syz.1.1085 Not tainted syzkaller #0 [ 137.316843][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 137.326896][ T7250] Call Trace: [ 137.327622][ T7251] loop4: detected capacity change from 0 to 512 [ 137.330207][ T7250] [ 137.330219][ T7250] dump_stack_lvl+0x188/0x250 [ 137.330246][ T7250] ? show_regs_print_info+0x20/0x20 [ 137.330263][ T7250] ? load_image+0x410/0x410 [ 137.330283][ T7250] ? __lock_acquire+0x7d40/0x7d40 [ 137.330308][ T7250] should_fail+0x383/0x4b0 [ 137.330330][ T7250] should_failslab+0x5/0x20 [ 137.367697][ T7250] slab_pre_alloc_hook+0x51/0xc0 [ 137.372648][ T7250] ? prepare_creds+0x3c/0x610 [ 137.377319][ T7250] kmem_cache_alloc+0x3d/0x280 [ 137.382075][ T7250] prepare_creds+0x3c/0x610 [ 137.386575][ T7250] keyctl_set_reqkey_keyring+0x78/0x1b0 [ 137.392131][ T7250] __se_sys_keyctl+0x162/0xa20 [ 137.396893][ T7250] ? __x64_sys_keyctl+0xc0/0xc0 [ 137.401741][ T7250] ? __context_tracking_exit+0x4c/0x80 [ 137.407194][ T7250] ? __lock_acquire+0x7d40/0x7d40 [ 137.412222][ T7250] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 137.418230][ T7250] ? lock_chain_count+0x20/0x20 [ 137.423107][ T7250] ? lockdep_hardirqs_on+0x94/0x140 [ 137.428319][ T7250] ? __x64_sys_keyctl+0x1c/0xc0 [ 137.433181][ T7250] do_syscall_64+0x4c/0xa0 [ 137.437592][ T7250] ? clear_bhb_loop+0x30/0x80 [ 137.440363][ T4818] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 137.442264][ T7250] ? clear_bhb_loop+0x30/0x80 [ 137.451742][ T4818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.455950][ T7250] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.455981][ T7250] RIP: 0033:0x7eff778ff199 [ 137.455999][ T7250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.465819][ T4818] usb 3-1: Product: syz [ 137.469828][ T7250] RSP: 002b:00007eff75b57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 137.469853][ T7250] RAX: ffffffffffffffda RBX: 00007eff77b86fa0 RCX: 00007eff778ff199 [ 137.469865][ T7250] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000000e [ 137.469875][ T7250] RBP: 00007eff779960b8 R08: 0000000000000000 R09: 0000000000000000 [ 137.469884][ T7250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.469894][ T7250] R13: 00007eff77b87038 R14: 00007eff77b86fa0 R15: 00007ffd4974bd48 [ 137.469917][ T7250] [ 137.550509][ T4818] usb 3-1: Manufacturer: syz [ 137.555113][ T4818] usb 3-1: SerialNumber: syz [ 137.563919][ T4818] usb 3-1: config 0 descriptor?? [ 137.606545][ T4818] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 137.635626][ T7251] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.654793][ T7251] ext4 filesystem being mounted at /235/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.756918][ T7251] EXT4-fs (loop4): Remounting file system with no journal so ignoring journalled data option [ 137.776053][ T7251] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring [ 137.787780][ T7251] EXT4-fs (loop4): re-mounted. Opts: journal_checksum,journal_ioprio=0x0000000000000001,user_xattr,grpjquota=,data=writeback,noblock_validity,minixdf,journal_checksum,. Quota mode: writeback. [ 137.795095][ T7268] Invalid argument reading file caps for ./file0 [ 137.821427][ T4818] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 137.842778][ T23] input: syz Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0007/input/input11 [ 137.891136][ T4818] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 138.000540][ T23] input: syz Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0007/input/input12 [ 138.022763][ T7269] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback. [ 138.070537][ T23] uclogic 0003:256C:006D.0007: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 138.112976][ T23] usb 4-1: USB disconnect, device number 7 [ 138.224201][ T7277] fido_id[7277]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 138.321218][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 138.338557][ T4820] usb 3-1: USB disconnect, device number 14 [ 138.370782][ T4820] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 138.419524][ T4820] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 138.431907][ T4229] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 138.473705][ T4820] quatech2 3-1:0.51: device disconnected [ 138.646058][ T7290] netlink: 'syz.4.1100': attribute type 39 has an invalid length. [ 138.809939][ T4229] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.827894][ T4229] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 138.853509][ T4229] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 138.881884][ T4229] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 138.958416][ T7286] set_capacity_and_notify: 1 callbacks suppressed [ 138.958448][ T7286] loop1: detected capacity change from 0 to 32768 [ 138.989305][ T7294] binder: 7293:7294 unknown command 1074553619 [ 138.997430][ T7294] binder: 7293:7294 ioctl c0306201 2000000001c0 returned -22 [ 139.028867][ T7286] XFS (loop1): Mounting V5 Filesystem [ 139.044865][ T7304] binder: 7293:7304 unknown command 1074291477 [ 139.060073][ T4229] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.075555][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.082275][ T7304] binder: 7293:7304 ioctl c0306201 200000000340 returned -22 [ 139.096246][ T4229] usb 1-1: Product: syz [ 139.100716][ T4229] usb 1-1: Manufacturer: syz [ 139.105476][ T4229] usb 1-1: SerialNumber: syz [ 139.126356][ T7286] XFS (loop1): Ending clean mount [ 139.143480][ T7275] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.167208][ T7311] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.202562][ T4229] cdc_mbim 1-1:1.0: skipping garbage [ 139.257470][ T4189] XFS (loop1): Unmounting Filesystem [ 139.424980][ T7275] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.435788][ T7275] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.489450][ T7309] loop4: detected capacity change from 0 to 32768 [ 139.581160][ T7309] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 139.711741][ T7320] loop2: detected capacity change from 0 to 32768 [ 139.749848][ T7309] syz.4.1106 (7309) used greatest stack depth: 18240 bytes left [ 139.777448][ T7320] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 139.813167][ T7320] JBD2: Ignoring recovery information on journal [ 139.824329][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 139.925997][ T7320] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 140.033772][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 140.101794][ T7275] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 140.103068][ T7336] bridge0: port 3(syz_tun) entered blocking state [ 140.115864][ T7336] bridge0: port 3(syz_tun) entered disabled state [ 140.139652][ T7336] device syz_tun entered promiscuous mode [ 140.147151][ T7336] bridge0: port 3(syz_tun) entered blocking state [ 140.153706][ T7336] bridge0: port 3(syz_tun) entered forwarding state [ 140.155118][ T7337] FAULT_INJECTION: forcing a failure. [ 140.155118][ T7337] name failslab, interval 1, probability 0, space 0, times 0 [ 140.174090][ T7275] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 140.180271][ T7337] CPU: 1 PID: 7337 Comm: syz.4.1115 Not tainted syzkaller #0 [ 140.188413][ T7337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.198481][ T7337] Call Trace: [ 140.201797][ T7337] [ 140.204733][ T7337] dump_stack_lvl+0x188/0x250 [ 140.209430][ T7337] ? show_regs_print_info+0x20/0x20 [ 140.214636][ T7337] ? load_image+0x410/0x410 [ 140.219153][ T7337] ? __might_sleep+0xf0/0xf0 [ 140.223768][ T7337] ? __lock_acquire+0x7d40/0x7d40 [ 140.228814][ T7337] ? propagate_protected_usage+0x7a/0x240 [ 140.234561][ T7337] should_fail+0x383/0x4b0 [ 140.239005][ T7337] should_failslab+0x5/0x20 [ 140.243523][ T7337] slab_pre_alloc_hook+0x51/0xc0 [ 140.248473][ T7337] kmem_cache_alloc_node+0x47/0x2c0 [ 140.253685][ T7337] ? __alloc_skb+0xf4/0x750 [ 140.258205][ T7337] __alloc_skb+0xf4/0x750 [ 140.262565][ T7337] alloc_skb_with_frags+0xa7/0x720 [ 140.267699][ T7337] ? __lock_acquire+0x7d40/0x7d40 [ 140.272764][ T7337] sock_alloc_send_pskb+0x87f/0x9a0 [ 140.278022][ T7337] ? sock_kzfree_s+0x50/0x50 [ 140.282618][ T7337] unix_dgram_sendmsg+0x6f8/0x19c0 [ 140.287731][ T7337] ? aa_sk_perm+0x7dc/0x910 [ 140.292230][ T7337] ? aa_af_perm+0x340/0x340 [ 140.296725][ T7337] ? unix_dgram_poll+0x680/0x680 [ 140.301668][ T7337] ? tomoyo_socket_sendmsg_permission+0x1d6/0x2f0 [ 140.308074][ T7337] ? apparmor_socket_sendmsg+0x88/0x230 [ 140.313623][ T7337] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 140.319155][ T7337] ? security_socket_sendmsg+0x7c/0xa0 [ 140.324607][ T7337] ? unix_dgram_poll+0x680/0x680 [ 140.329545][ T7337] ____sys_sendmsg+0x5be/0x8f0 [ 140.334336][ T7337] ? __sys_sendmsg_sock+0x30/0x30 [ 140.339390][ T7337] ? preempt_schedule+0xbc/0xd0 [ 140.344261][ T7337] ? import_iovec+0x6f/0xa0 [ 140.348789][ T7337] ___sys_sendmsg+0x236/0x2e0 [ 140.353488][ T7337] ? __sys_sendmsg+0x290/0x290 [ 140.358312][ T7337] __sys_sendmmsg+0x2ba/0x500 [ 140.363026][ T7337] ? __ia32_sys_sendmsg+0x80/0x80 [ 140.368055][ T7337] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 140.374026][ T7337] ? lock_chain_count+0x20/0x20 [ 140.379050][ T7337] __x64_sys_sendmmsg+0x9c/0xb0 [ 140.383892][ T7337] do_syscall_64+0x4c/0xa0 [ 140.388312][ T7337] ? clear_bhb_loop+0x30/0x80 [ 140.392978][ T7337] ? clear_bhb_loop+0x30/0x80 [ 140.397646][ T7337] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.403537][ T7337] RIP: 0033:0x7f0e9b848199 [ 140.407982][ T7337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.427584][ T7337] RSP: 002b:00007f0e99aa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 140.436004][ T7337] RAX: ffffffffffffffda RBX: 00007f0e9bacffa0 RCX: 00007f0e9b848199 [ 140.443990][ T7337] RDX: 0000000000000001 RSI: 00002000000012c0 RDI: 0000000000000004 [ 140.451948][ T7337] RBP: 00007f0e9b8df0b8 R08: 0000000000000000 R09: 0000000000000000 [ 140.459905][ T7337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.467881][ T7337] R13: 00007f0e9bad0038 R14: 00007f0e9bacffa0 R15: 00007fff28428648 [ 140.475845][ T7337] [ 140.481464][ T4229] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 140.504102][ T4229] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 140.630214][ T7354] netlink: 'syz.3.1124': attribute type 1 has an invalid length. [ 140.638124][ T4229] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 7e:9c:6b:db:de:9f [ 140.719472][ T6924] usb 1-1: USB disconnect, device number 13 [ 140.728369][ T6924] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 140.762441][ T7360] loop2: detected capacity change from 0 to 4096 [ 140.849209][ T7360] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 140.959927][ T7360] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 141.039378][ T7360] ntfs3: loop2: ino=5, "/" directory corrupted [ 141.070133][ T7360] ntfs3: loop2: ino=5, "/" directory corrupted [ 141.322162][ T7364] loop4: detected capacity change from 0 to 32768 [ 141.336517][ T7364] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1129 (7364) [ 141.367741][ T7364] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 141.387824][ T7364] BTRFS info (device loop4): turning off barriers [ 141.406634][ T7364] BTRFS info (device loop4): turning on async discard [ 141.421961][ T7364] BTRFS info (device loop4): doing ref verification [ 141.433389][ T7364] BTRFS info (device loop4): using free space tree [ 141.459861][ T7364] BTRFS info (device loop4): has skinny extents [ 141.469549][ T7381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1137'. [ 141.500607][ T7371] loop3: detected capacity change from 0 to 40427 [ 141.519819][ T4261] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 141.529118][ T7364] BTRFS info (device loop4): enabling ssd optimizations [ 141.551386][ T7371] F2FS-fs (loop3): Wrong segment_count / block_count (64 > 16384) [ 141.559364][ T7371] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 141.598924][ T26] audit: type=1400 audit(1791210616.998:12): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7401 comm="syz.0.1138" name="unknown" offset=16 [ 141.699100][ T7371] F2FS-fs (loop3): Found nat_bits in checkpoint [ 141.789876][ T4261] usb 3-1: Using ep0 maxpacket: 32 [ 141.895788][ T7371] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 141.909864][ T7371] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 141.941719][ T4261] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 141.959757][ T4261] usb 3-1: config 0 has no interface number 0 [ 141.965970][ T4261] usb 3-1: config 0 interface 184 has no altsetting 0 [ 142.134651][ T4820] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 142.150000][ T4261] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 142.169191][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.189383][ T4261] usb 3-1: Product: syz [ 142.193948][ T4261] usb 3-1: Manufacturer: syz [ 142.198573][ T4261] usb 3-1: SerialNumber: syz [ 142.211889][ T4261] usb 3-1: config 0 descriptor?? [ 142.270881][ T4261] smsc75xx v1.0.0 [ 142.401989][ T4820] usb 2-1: Using ep0 maxpacket: 16 [ 142.444591][ T7423] loop4: detected capacity change from 0 to 40427 [ 142.487361][ T7423] F2FS-fs (loop4): invalid crc value [ 142.503814][ T7423] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 142.515454][ T7429] loop3: detected capacity change from 0 to 1024 [ 142.522893][ T4820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 142.602041][ T7423] F2FS-fs (loop4): Start checkpoint disabled! [ 142.616224][ T7423] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e7 [ 142.720201][ T4820] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 142.735547][ T4820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.755039][ T4820] usb 2-1: Product: syz [ 142.759243][ T4820] usb 2-1: Manufacturer: syz [ 142.764032][ T4820] usb 2-1: SerialNumber: syz [ 142.782406][ T4820] usb 2-1: config 0 descriptor?? [ 142.820673][ T4820] hub 2-1:0.0: bad descriptor, ignoring hub [ 142.826653][ T4820] hub: probe of 2-1:0.0 failed with error -5 [ 143.139823][ T4261] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 143.159465][ T4261] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 143.180025][ T4261] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 143.198418][ T4261] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 143.208306][ T4261] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 143.218817][ T4261] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 143.229896][ T4201] Bluetooth: hci4: link tx timeout [ 143.235071][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.240123][ T4261] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 143.254506][ T4261] usb 3-1: USB disconnect, device number 15 [ 143.265904][ T5814] usb 2-1: USB disconnect, device number 10 [ 143.309852][ T4820] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 143.670242][ T4820] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 143.688193][ T4820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.985518][ T5814] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 144.022038][ T7479] FAULT_INJECTION: forcing a failure. [ 144.022038][ T7479] name failslab, interval 1, probability 0, space 0, times 0 [ 144.039233][ T7479] CPU: 0 PID: 7479 Comm: syz.4.1168 Not tainted syzkaller #0 [ 144.046616][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 144.056660][ T7479] Call Trace: [ 144.059928][ T7479] [ 144.062846][ T7479] dump_stack_lvl+0x188/0x250 [ 144.067519][ T7479] ? show_regs_print_info+0x20/0x20 [ 144.072711][ T7479] ? load_image+0x410/0x410 [ 144.077378][ T7479] ? __might_sleep+0xf0/0xf0 [ 144.081979][ T7479] ? __lock_acquire+0x7d40/0x7d40 [ 144.086993][ T7479] ? lockdep_softirqs_off+0x430/0x430 [ 144.092388][ T7479] should_fail+0x383/0x4b0 [ 144.096796][ T7479] should_failslab+0x5/0x20 [ 144.101288][ T7479] slab_pre_alloc_hook+0x51/0xc0 [ 144.106223][ T7479] kmem_cache_alloc_trace+0x47/0x290 [ 144.111512][ T7479] ? do_inotify_init+0xa7/0x450 [ 144.116395][ T7479] do_inotify_init+0xa7/0x450 [ 144.121067][ T7479] __x64_sys_inotify_init1+0x33/0x40 [ 144.126367][ T7479] do_syscall_64+0x4c/0xa0 [ 144.130790][ T7479] ? clear_bhb_loop+0x30/0x80 [ 144.135458][ T7479] ? clear_bhb_loop+0x30/0x80 [ 144.140132][ T7479] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.146010][ T7479] RIP: 0033:0x7f0e9b848199 [ 144.150424][ T7479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.170033][ T7479] RSP: 002b:00007f0e99aa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 144.178461][ T7479] RAX: ffffffffffffffda RBX: 00007f0e9bacffa0 RCX: 00007f0e9b848199 [ 144.186429][ T7479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.194387][ T7479] RBP: 00007f0e9b8df0b8 R08: 0000000000000000 R09: 0000000000000000 [ 144.202352][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.210318][ T7479] R13: 00007f0e9bad0038 R14: 00007f0e9bacffa0 R15: 00007fff28428648 [ 144.218315][ T7479] [ 144.310492][ T7488] loop3: detected capacity change from 0 to 1024 [ 144.321621][ T4229] libceph: connect (1)[c::]:6789 error -101 [ 144.333818][ T4229] libceph: mon0 (1)[c::]:6789 connect error [ 144.344157][ T4195] libceph: connect (1)[c::]:6789 error -101 [ 144.351414][ T4195] libceph: mon0 (1)[c::]:6789 connect error [ 144.359759][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 144.372404][ T7488] EXT4-fs (loop3): Ignoring removed oldalloc option [ 144.381195][ T7484] ceph: No mds server is up or the cluster is laggy [ 144.390209][ T7488] EXT4-fs (loop3): Ignoring removed orlov option [ 144.457759][ T7488] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 144.544581][ T5814] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.559144][ T5814] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.589925][ T5814] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.601290][ T5814] usb 3-1: New USB device found, idVendor=045e, idProduct=00dc, bcdDevice= 0.00 [ 144.612927][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.623829][ T5814] usb 3-1: config 0 descriptor?? [ 144.633112][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 144.702308][ T7504] Bluetooth: hci0: service_discovery: too big uuid_count value 36441 [ 144.789021][ T7512] loop3: detected capacity change from 0 to 512 [ 144.834865][ T7512] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 144.849829][ T7512] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.873256][ T7512] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.1180: corrupted in-inode xattr [ 144.876521][ T7517] bridge0: port 4(macvlan1) entered blocking state [ 144.894598][ T7517] bridge0: port 4(macvlan1) entered disabled state [ 144.898583][ T7512] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1180: couldn't read orphan inode 15 (err -117) [ 144.901911][ T4820] usb 1-1: unexpected transceiver, part 0x00 version 0x01 [ 144.922136][ T7517] device macvlan1 entered promiscuous mode [ 144.930950][ T7512] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 144.932486][ T7517] bridge0: port 4(macvlan1) entered blocking state [ 144.959497][ T4820] usb 1-1: Firmware version (0.0) predates our first public release. [ 144.965681][ T7517] bridge0: port 4(macvlan1) entered forwarding state [ 144.966525][ T7518] device macvlan1 left promiscuous mode [ 144.987690][ T7518] bridge0: port 4(macvlan1) entered disabled state [ 145.003301][ T4820] usb 1-1: Please update to version 0.2 or newer [ 145.119847][ T4820] usb 1-1: atusb_probe: initialization failed, error = -19 [ 145.145600][ T4820] usb 1-1: USB disconnect, device number 14 [ 145.153718][ T5814] input: HID 045e:00dc as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:00DC.0008/input/input13 [ 145.175560][ T7526] loop1: detected capacity change from 0 to 256 [ 145.228506][ T7526] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 145.253717][ T5814] microsoft 0003:045E:00DC.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 045e:00dc] on usb-dummy_hcd.2-1/input0 [ 145.286169][ T26] audit: type=1800 audit(1791210620.688:13): pid=7526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1185" name="file1" dev="loop1" ino=1048672 res=0 errno=0 [ 145.356636][ T4229] usb 3-1: USB disconnect, device number 16 [ 145.369629][ T7531] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 145.397723][ T7529] fido_id[7529]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 145.416283][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.436972][ T7526] exFAT-fs (loop1): Filesystem has been set read-only [ 145.447921][ T7526] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805e8c4260 iblock : 8, err : -5) [ 145.463750][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.472669][ T7526] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805e8c4260 iblock : 8, err : -5) [ 145.483107][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.490769][ T7526] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805e8c4260 iblock : 9, err : -5) [ 145.515688][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.522840][ T7526] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805e8c4260 iblock : 10, err : -5) [ 145.538769][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.545088][ T7526] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805e8c4260 iblock : 11, err : -5) [ 145.561117][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.567358][ T7526] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805e8c4260 iblock : 12, err : -5) [ 145.577962][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.585622][ T7526] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805e8c4260 iblock : 13, err : -5) [ 145.596789][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.602854][ T7526] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805e8c4260 iblock : 14, err : -5) [ 145.612996][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.619462][ T7526] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805e8c4260 iblock : 15, err : -5) [ 145.629531][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.635702][ T7526] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805e8c4260 iblock : 16, err : -5) [ 145.645941][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.651980][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.658067][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.664116][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.670182][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.676224][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.686062][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.692383][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.698396][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.706255][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.726778][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.733016][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.742437][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.749645][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.756175][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.762996][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.769202][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.786063][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.792284][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.798316][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.804452][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.812362][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.818416][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.825311][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.831519][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.837532][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.846645][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.853046][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.859155][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.865462][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.875550][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.899744][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.905778][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.914151][ T7540] loop2: detected capacity change from 0 to 256 [ 145.914503][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.940355][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.946560][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.950318][ T7540] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.963359][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.969171][ T7540] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 145.969373][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.983781][ T7540] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 145.996154][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.996181][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.996199][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.996216][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 145.996231][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.042662][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.048789][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.066390][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.080627][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.093242][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.119049][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.139756][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.145811][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.168026][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.189820][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.195855][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.209867][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.215900][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.239758][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.245801][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.261362][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.267379][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.289749][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.295768][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.309752][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.315950][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.325368][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fff7c00: rx timeout, send abort [ 146.329858][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.336122][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fff6400: rx timeout, send abort [ 146.345877][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.348597][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fff7c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 146.355709][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.371034][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fff6400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 146.379738][ T4261] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 146.401814][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.409175][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.416573][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.423002][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.429070][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.475468][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.483996][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.490473][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.496688][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.503127][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.509295][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.523965][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.533420][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.544595][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.555223][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.564900][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.571363][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.577873][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.596946][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.609837][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.627091][ T7526] exFAT-fs (loop1): error, broken FAT chain. [ 146.638625][ T26] audit: type=1800 audit(1791210622.048:14): pid=7526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1185" name="file1" dev="loop1" ino=1048672 res=0 errno=0 [ 146.832749][ T7562] loop1: detected capacity change from 0 to 128 [ 146.843282][ T7561] loop0: detected capacity change from 0 to 256 [ 146.863698][ T4261] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 146.880889][ T4261] usb 4-1: config 0 has no interface number 0 [ 146.889294][ T4261] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.912530][ T7564] device syzkaller1 entered promiscuous mode [ 146.915815][ T7561] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 146.992681][ T7562] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 147.032888][ T7562] ext4 filesystem being mounted at /272/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.075104][ T4820] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 147.084299][ T4820] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.130284][ T4261] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 147.140552][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.183109][ T4261] usb 4-1: Product: syz [ 147.199406][ T4261] usb 4-1: Manufacturer: syz [ 147.209895][ T4261] usb 4-1: SerialNumber: syz [ 147.230522][ T4261] usb 4-1: config 0 descriptor?? [ 147.298412][ T4261] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 147.363573][ T7577] loop0: detected capacity change from 0 to 16 [ 147.390857][ T7577] erofs: (device loop0): mounted with root inode @ nid 36. [ 147.426657][ T7577] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.528957][ T4261] usb 4-1: USB disconnect, device number 8 [ 147.542591][ T4261] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 147.621884][ T7584] overlayfs: refusing to follow metacopy origin for (/file1) [ 147.634616][ T7586] loop2: detected capacity change from 0 to 512 [ 147.707704][ T7586] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1211: bg 0: block 7: invalid block bitmap [ 147.745271][ T7586] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 147.775511][ T7586] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2928: inode #11: comm syz.2.1211: corrupted xattr block 95 [ 147.817037][ T7586] EXT4-fs warning (device loop2): ext4_evict_inode:304: xattr delete (err -117) [ 147.830708][ T7586] EXT4-fs (loop2): 1 orphan inode deleted [ 147.836556][ T7586] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.941141][ T7586] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 148.018900][ T7609] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 148.018900][ T7609] Q&|x6 [ 148.393564][ T7622] loop1: detected capacity change from 0 to 32768 [ 148.448806][ T7622] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.1226 (7622) [ 148.462455][ T4261] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 148.485154][ T7622] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 148.506165][ T7622] BTRFS info (device loop1): using free space tree [ 148.543393][ T7622] BTRFS info (device loop1): has skinny extents [ 148.545062][ T7628] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 148.595295][ T7622] BTRFS info (device loop1): enabling ssd optimizations [ 148.636121][ T7649] loop0: detected capacity change from 0 to 512 [ 148.661958][ T7649] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1230: bg 0: block 5: invalid block bitmap [ 148.675068][ T7649] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 148.694306][ T7649] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1230: invalid indirect mapped block 3 (level 2) [ 148.759900][ T7622] loop_set_status: loop0 () has still dirty pages (nrpages=2) [ 148.781100][ T7649] EXT4-fs (loop0): 1 orphan inode deleted [ 148.787126][ T7649] EXT4-fs (loop0): 1 truncate cleaned up [ 148.793870][ T7649] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback. [ 148.990031][ T4261] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 149.016203][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 149.018078][ T4178] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 11 /dev/loop1 scanned by udevd (4178) [ 149.045600][ T4261] usb 3-1: Product: syz [ 149.055616][ T4261] usb 3-1: SerialNumber: syz [ 149.101963][ T4261] usb 3-1: config 0 descriptor?? [ 149.390101][ T4261] hso 3-1:0.0: Can't find BULK IN endpoint [ 149.453332][ T7674] set_capacity_and_notify: 1 callbacks suppressed [ 149.453347][ T7674] loop0: detected capacity change from 0 to 128 [ 149.515200][ T13] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 149.592675][ T23] usb 3-1: USB disconnect, device number 17 [ 149.704588][ T7688] "syz.0.1244" (7688) uses obsolete ecb(arc4) skcipher [ 149.747120][ T7691] FAULT_INJECTION: forcing a failure. [ 149.747120][ T7691] name failslab, interval 1, probability 0, space 0, times 0 [ 149.755025][ T7688] syz.0.1244 sent an empty control message without MSG_MORE. [ 149.767855][ T7691] CPU: 0 PID: 7691 Comm: syz.4.1246 Not tainted syzkaller #0 [ 149.775785][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 149.785847][ T7691] Call Trace: [ 149.789131][ T7691] [ 149.792067][ T7691] dump_stack_lvl+0x188/0x250 [ 149.796759][ T7691] ? show_regs_print_info+0x20/0x20 [ 149.801963][ T7691] ? load_image+0x410/0x410 [ 149.806486][ T7691] ? __lock_acquire+0x7d40/0x7d40 [ 149.811552][ T7691] should_fail+0x383/0x4b0 [ 149.815986][ T7691] should_failslab+0x5/0x20 [ 149.820499][ T7691] slab_pre_alloc_hook+0x51/0xc0 [ 149.825456][ T7691] __kmalloc+0x6b/0x340 [ 149.829624][ T7691] ? security_sk_alloc+0x47/0x130 [ 149.834664][ T7691] security_sk_alloc+0x47/0x130 [ 149.839536][ T7691] sk_prot_alloc+0x101/0x210 [ 149.844133][ T7691] ? sk_alloc+0x1d/0x310 [ 149.848395][ T7691] sk_alloc+0x2f/0x310 [ 149.852480][ T7691] __netlink_create+0x6c/0x290 [ 149.857265][ T7691] __netlink_kernel_create+0x14a/0x7d0 [ 149.862741][ T7691] ? netlink_set_err+0x3c0/0x3c0 [ 149.867913][ T7691] uevent_net_init+0xf8/0x2d0 [ 149.872606][ T7691] ? audit_net_init+0xed/0x1f0 [ 149.877380][ T7691] ? alloc_uevent_skb+0x230/0x230 [ 149.882402][ T7691] ? uevent_net_exit+0x1d0/0x1d0 [ 149.887354][ T7691] ops_init+0x360/0x5f0 [ 149.891548][ T7691] setup_net+0x39e/0xa10 [ 149.895825][ T7691] ? copy_net_ns+0x5b0/0x5b0 [ 149.900421][ T7691] ? copy_net_ns+0x324/0x5b0 [ 149.905015][ T7691] ? down_read_killable+0x1ce/0x340 [ 149.910223][ T7691] copy_net_ns+0x33e/0x5b0 [ 149.914649][ T7691] create_new_namespaces+0x3ce/0x700 [ 149.919955][ T7691] unshare_nsproxy_namespaces+0x116/0x160 [ 149.925682][ T7691] ksys_unshare+0x4f6/0x8e0 [ 149.930189][ T7691] ? __lock_acquire+0x7d40/0x7d40 [ 149.935230][ T7691] ? sighand_ctor+0x40/0x40 [ 149.939745][ T7691] ? lock_chain_count+0x20/0x20 [ 149.944610][ T7691] ? syscall_enter_from_user_mode+0x21/0x70 [ 149.950515][ T7691] __x64_sys_unshare+0x34/0x40 [ 149.955282][ T7691] do_syscall_64+0x4c/0xa0 [ 149.959695][ T7691] ? clear_bhb_loop+0x30/0x80 [ 149.964370][ T7691] ? clear_bhb_loop+0x30/0x80 [ 149.969051][ T7691] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.974946][ T7691] RIP: 0033:0x7f0e9b848199 [ 149.979370][ T7691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.998984][ T7691] RSP: 002b:00007f0e99aa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 150.007412][ T7691] RAX: ffffffffffffffda RBX: 00007f0e9bacffa0 RCX: 00007f0e9b848199 [ 150.015395][ T7691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 150.023373][ T7691] RBP: 00007f0e9b8df0b8 R08: 0000000000000000 R09: 0000000000000000 [ 150.031360][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.039336][ T7691] R13: 00007f0e9bad0038 R14: 00007f0e9bacffa0 R15: 00007fff28428648 [ 150.047333][ T7691] [ 150.056733][ T7691] kobject_uevent: unable to create netlink socket! [ 150.171624][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.200585][ T13] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 150.223221][ T7700] xt_hashlimit: size too large, truncated to 1048576 [ 150.406215][ T7708] loop2: detected capacity change from 0 to 512 [ 150.456656][ T7708] EXT4-fs (loop2): Ignoring removed oldalloc option [ 150.459969][ T13] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 150.485794][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.489829][ T7708] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.519739][ T13] usb 4-1: Product: syz [ 150.523942][ T13] usb 4-1: Manufacturer: syz [ 150.558964][ T13] usb 4-1: SerialNumber: syz [ 150.573770][ T7708] EXT4-fs (loop2): 1 truncate cleaned up [ 150.585622][ T7708] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 150.779452][ T7693] loop0: detected capacity change from 0 to 40427 [ 150.786002][ T7707] loop4: detected capacity change from 0 to 32768 [ 150.882467][ T7707] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 150.953722][ T7693] F2FS-fs (loop0): invalid crc value [ 151.018168][ T7693] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 151.067465][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 151.328971][ T7693] F2FS-fs (loop0): Start checkpoint disabled! [ 151.372624][ T7693] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e7 [ 151.432349][ T7724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.017496][ T7748] af_packet: packet size is too long (4294966980 > 2016) [ 152.106173][ T7753] aoe: unknown AoE command type 0x27 [ 152.555666][ T7758] loop2: detected capacity change from 0 to 32768 [ 152.624323][ T7758] XFS (loop2): Mounting V5 Filesystem [ 152.699223][ T7758] XFS (loop2): Ending clean mount [ 152.770230][ T4191] XFS (loop2): Unmounting Filesystem [ 153.019750][ C0] usb 4-1: received EP1 urb->status = -71 [ 153.055193][ T26] audit: type=1800 audit(1791210628.458:15): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1277" name="ipv4_address" dev="configfs" ino=44009 res=0 errno=0 [ 153.110950][ T13] input: as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 153.396148][ T13] usb 4-1: USB disconnect, device number 9 [ 153.789054][ T7821] loop3: detected capacity change from 0 to 256 [ 153.826315][ T7821] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.837148][ T7821] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 153.863043][ T7821] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 153.885658][ T7811] udevd[7811]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.003379][ T7790] loop0: detected capacity change from 0 to 40427 [ 154.075910][ T7790] F2FS-fs (loop0): invalid crc value [ 154.158649][ T7790] F2FS-fs (loop0): Found nat_bits in checkpoint [ 154.319631][ T7809] loop4: detected capacity change from 0 to 32768 [ 154.383380][ T7790] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 154.404375][ T7809] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1281 (7809) [ 154.469888][ T7809] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 154.519789][ T7809] BTRFS info (device loop4): setting nodatasum [ 154.530299][ T7809] BTRFS info (device loop4): force zlib compression, level 3 [ 154.543280][ T7790] attempt to access beyond end of device [ 154.543280][ T7790] loop0: rw=2049, want=45104, limit=40427 [ 154.576817][ T7809] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 154.607173][ T7809] BTRFS info (device loop4): use lzo compression, level 0 [ 154.647635][ T7809] BTRFS info (device loop4): turning on flush-on-commit [ 154.678237][ T7813] loop2: detected capacity change from 0 to 40427 [ 154.684009][ T7809] BTRFS info (device loop4): enabling auto defrag [ 154.693829][ T4185] attempt to access beyond end of device [ 154.693829][ T4185] loop0: rw=2049, want=45112, limit=40427 [ 154.701530][ T7809] BTRFS info (device loop4): max_inline at 4096 [ 154.746845][ T7813] F2FS-fs (loop2): invalid crc value [ 154.772425][ T7809] BTRFS info (device loop4): using free space tree [ 154.778973][ T7809] BTRFS info (device loop4): has skinny extents [ 154.808073][ T7813] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 154.962166][ T13] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 154.983723][ T7813] F2FS-fs (loop2): Start checkpoint disabled! [ 155.004196][ T7813] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e7 [ 155.100825][ T7809] BTRFS info (device loop4): enabling ssd optimizations [ 155.171801][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1294'. [ 155.377830][ T7898] loop0: detected capacity change from 0 to 2048 [ 155.430057][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.437789][ T7900] loop3: detected capacity change from 0 to 512 [ 155.461032][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.499938][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.549810][ T7900] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 155.601212][ T7898] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.609202][ T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.621771][ T7898] ext4 filesystem being mounted at /223/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.723094][ T7900] EXT4-fs (loop3): 1 truncate cleaned up [ 155.728783][ T7900] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,quota,lazytime,errors=remount-ro,quota,quota,. Quota mode: writeback. [ 155.755614][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.779609][ T7900] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz.3.1298: path /289/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 155.822653][ T13] usb 2-1: config 0 descriptor?? [ 155.875149][ T7900] EXT4-fs (loop3): Remounting filesystem read-only [ 156.100699][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'. [ 156.109772][ T7924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.165398][ T7924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.321585][ T13] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 156.340949][ T13] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 156.369291][ T13] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 156.448399][ T7930] loop3: detected capacity change from 0 to 32768 [ 156.548076][ T7930] JBD2: Ignoring recovery information on journal [ 156.613621][ T13] usb 2-1: USB disconnect, device number 11 [ 156.617252][ T7930] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 156.689649][ T7930] OCFS2: ERROR (device loop3): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71 [ 156.706977][ T7930] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 156.716895][ T7930] OCFS2: File system is now read-only. [ 156.722714][ T7930] (syz.3.1305,7930,1):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30 [ 156.731299][ T7930] (syz.3.1305,7930,1):ocfs2_reserve_cluster_bitmap_bits:1155 ERROR: status = -30 [ 156.740548][ T7930] (syz.3.1305,7930,1):ocfs2_reserve_clusters_with_limit:1224 ERROR: status = -30 [ 156.749782][ T7930] (syz.3.1305,7930,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 156.759617][ T7930] (syz.3.1305,7930,1):ocfs2_block_group_alloc:697 ERROR: status = -30 [ 156.760074][ T26] audit: type=1326 audit(1791210632.158:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.4.1313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e9b848199 code=0x0 [ 156.767920][ T7930] (syz.3.1305,7930,1):ocfs2_block_group_alloc:780 ERROR: status = -30 [ 156.767999][ T7930] (syz.3.1305,7930,1):ocfs2_reserve_suballoc_bits:855 ERROR: status = -30 [ 156.808817][ T7930] (syz.3.1305,7930,1):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30 [ 156.817438][ T7930] (syz.3.1305,7930,1):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -30 [ 156.826621][ T7930] (syz.3.1305,7930,1):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -30 [ 156.836469][ T7930] (syz.3.1305,7930,1):ocfs2_expand_inline_dir:2840 ERROR: status = -30 [ 156.846424][ T7930] (syz.3.1305,7930,1):ocfs2_extend_dir:3204 ERROR: status = -30 [ 156.857528][ T7930] (syz.3.1305,7930,1):ocfs2_prepare_dir_for_insert:4325 ERROR: status = -30 [ 156.866322][ T7930] (syz.3.1305,7930,1):ocfs2_link:764 ERROR: status = -30 [ 156.873468][ T7930] (syz.3.1305,7930,1):ocfs2_link:841 ERROR: status = -30 [ 156.986213][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 157.245511][ T7964] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 157.435864][ T7048] general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN [ 157.447793][ T7048] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 157.456206][ T7048] CPU: 0 PID: 7048 Comm: syz.1.1021 Not tainted syzkaller #0 [ 157.463581][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 157.473640][ T7048] RIP: 0010:klist_remove+0x151/0x300 [ 157.478941][ T7048] Code: c1 05 4d 89 f4 49 c1 ec 03 43 80 3c 2c 00 74 08 4c 89 f7 e8 01 f5 b3 fd 4d 8b 3e 49 83 e7 fe 49 8d 7f 58 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 e3 f4 b3 fd 49 8b 47 58 48 89 44 24 08 4c [ 157.498553][ T7048] RSP: 0018:ffffc9000314f6a0 EFLAGS: 00010202 [ 157.504632][ T7048] RAX: 000000000000000b RBX: ffff8880219d5940 RCX: 0000000000000000 [ 157.512612][ T7048] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 157.520590][ T7048] RBP: ffffc9000314f7a0 R08: ffffffff8c94ca63 R09: 1ffffffff192994c [ 157.528566][ T7048] R10: dffffc0000000000 R11: fffffbfff192994d R12: 1ffff1100f3d5a8c [ 157.536548][ T7048] R13: dffffc0000000000 R14: ffff888079ead460 R15: 0000000000000000 [ 157.539780][ T3518] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 157.544522][ T7048] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 157.560956][ T7048] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.567543][ T7048] CR2: 0000560c9bf0c1d8 CR3: 000000007d3de000 CR4: 00000000003506f0 [ 157.575524][ T7048] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 157.583500][ T7048] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 157.591478][ T7048] Call Trace: [ 157.594757][ T7048] [ 157.597697][ T7048] ? klist_del+0x110/0x110 [ 157.602125][ T7048] ? kobject_move+0x5cd/0x710 [ 157.606803][ T7048] ? kobject_put+0x450/0x450 [ 157.611374][ T7048] ? get_device_parent+0x288/0x3e0 [ 157.616477][ T7048] device_move+0x18a/0x6e0 [ 157.620877][ T7048] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 157.626748][ T7048] hci_conn_del_sysfs+0xab/0x160 [ 157.631664][ T7048] hci_conn_cleanup+0x49b/0x660 [ 157.636491][ T7048] hci_conn_del+0x2ab/0x3e0 [ 157.640969][ T7048] hci_conn_hash_flush+0x185/0x220 [ 157.646074][ T7048] hci_dev_do_close+0x918/0x1020 [ 157.650989][ T7048] ? blocking_notifier_chain_unregister+0x115/0x210 [ 157.657555][ T7048] hci_unregister_dev+0x2eb/0x590 [ 157.662558][ T7048] vhci_release+0x73/0xc0 [ 157.666869][ T7048] ? vhci_open+0x290/0x290 [ 157.671261][ T7048] __fput+0x212/0x8c0 [ 157.675223][ T7048] task_work_run+0x125/0x1a0 [ 157.679805][ T7048] do_exit+0x635/0x2110 [ 157.683953][ T7048] ? put_task_struct+0x80/0x80 [ 157.688697][ T7048] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 157.694658][ T7048] do_group_exit+0x12c/0x2f0 [ 157.699224][ T7048] ? lockdep_hardirqs_on+0x94/0x140 [ 157.704408][ T7048] get_signal+0x7eb/0x12e0 [ 157.708820][ T7048] arch_do_signal_or_restart+0xe6/0x12a0 [ 157.714438][ T7048] ? get_sigframe_size+0x10/0x10 [ 157.719369][ T7048] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 157.725337][ T7048] ? __lock_acquire+0x7d40/0x7d40 [ 157.730339][ T7048] ? exit_to_user_mode_loop+0x3b/0x130 [ 157.735785][ T7048] exit_to_user_mode_loop+0x9e/0x130 [ 157.741047][ T7048] exit_to_user_mode_prepare+0xee/0x180 [ 157.746580][ T7048] syscall_exit_to_user_mode+0x16/0x40 [ 157.752019][ T7048] ret_from_fork+0x15/0x30 [ 157.756432][ T7048] RIP: 0033:0x7eff778ff199 [ 157.760823][ T7048] Code: Unable to access opcode bytes at RIP 0x7eff778ff16f. [ 157.768163][ T7048] RSP: 002b:00007eff75b56fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 157.776549][ T7048] RAX: 0000000000000000 RBX: 00007eff77b86fa0 RCX: 00007eff778ff199 [ 157.784504][ T7048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.792474][ T7048] RBP: 00007eff779960b8 R08: 0000000000000000 R09: 0000000000000000 [ 157.799744][ T3518] usb 3-1: Using ep0 maxpacket: 16 [ 157.800424][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.813468][ T7048] R13: 00007eff77b87038 R14: 00007eff77b86fa0 R15: 00007ffd4974bd48 [ 157.821423][ T7048] [ 157.824454][ T7048] Modules linked in: [ 157.830614][ T7048] ---[ end trace 7a41d4e0c0f2a977 ]--- [ 157.836100][ T7048] RIP: 0010:klist_remove+0x151/0x300 [ 157.846071][ T7048] Code: c1 05 4d 89 f4 49 c1 ec 03 43 80 3c 2c 00 74 08 4c 89 f7 e8 01 f5 b3 fd 4d 8b 3e 49 83 e7 fe 49 8d 7f 58 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 e3 f4 b3 fd 49 8b 47 58 48 89 44 24 08 4c [ 157.866072][ T7048] RSP: 0018:ffffc9000314f6a0 EFLAGS: 00010202 [ 157.872508][ T7048] RAX: 000000000000000b RBX: ffff8880219d5940 RCX: 0000000000000000 [ 157.880727][ T7048] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 157.888807][ T7048] RBP: ffffc9000314f7a0 R08: ffffffff8c94ca63 R09: 1ffffffff192994c [ 157.897017][ T7048] R10: dffffc0000000000 R11: fffffbfff192994d R12: 1ffff1100f3d5a8c [ 157.905299][ T7048] R13: dffffc0000000000 R14: ffff888079ead460 R15: 0000000000000000 [ 157.913347][ T7048] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 157.922674][ T3518] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.932936][ T3518] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.933677][ T7048] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.944043][ T3518] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.953116][ T7048] CR2: 0000001b32a1fff8 CR3: 000000005f323000 CR4: 00000000003506e0 [ 157.960521][ T3518] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 157.968591][ T7048] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 157.981268][ T3518] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.990870][ T7048] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 157.995922][ T3518] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 158.004042][ T7048] Kernel panic - not syncing: Fatal exception [ 158.016274][ T3518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.019055][ T7048] Kernel Offset: disabled [ 158.031306][ T7048] Rebooting in 86400 seconds..