last executing test programs: 1m20.676061335s ago: executing program 2 (id=707): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect(0x3, 0x2c, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0xd5, 0x5f, 0xc8, 0x8, 0x499, 0x89a4, 0x4fcd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x2, 0x0, 0x30, 0x5, "", [{{0x9, 0x4, 0xe8, 0x80, 0x0, 0xff, 0xa5, 0x73, 0x50, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x81, 0x2, 0x1}]}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9c01"}, @main=@item_4={0x3, 0x0, 0x8, "4492796d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 1m18.48458703s ago: executing program 2 (id=720): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=0x0], 0x58) 1m18.292761585s ago: executing program 2 (id=721): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1m18.10040902s ago: executing program 2 (id=724): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m17.914854975s ago: executing program 2 (id=726): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) setuid(0xee01) syz_clone3(&(0x7f0000000340)={0x301800000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 1m17.402651958s ago: executing program 2 (id=730): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x174, 0x24, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x2, 0x2, 0x9, 0x0, 0xe, 0x9}}, {0x4}}, {{0x1c, 0x1, {0xf2, 0x7, 0x3a3, 0x6, 0x0, 0x7, 0x3ff, 0x5}}, {0xe, 0x2, [0x20a, 0x22d, 0x7f, 0x6, 0x7]}}, {{0x1c, 0x1, {0x4, 0xff, 0x8, 0x4, 0x2, 0x1, 0x3, 0x3}}, {0xa, 0x2, [0x299a, 0xf7, 0x2000]}}, {{0x1c, 0x1, {0xc, 0x2, 0x100, 0x2d48, 0x2, 0x8, 0x2, 0x3}}, {0xa, 0x2, [0x0, 0x8, 0x1]}}, {{0x1c, 0x1, {0x5, 0x4, 0x6, 0x6, 0x0, 0x1, 0x4, 0x7}}, {0x12, 0x2, [0x9, 0x401, 0x6, 0x8, 0x5, 0x91, 0x7]}}, {{0x1c, 0x1, {0x0, 0x7, 0x5, 0x5ff, 0x1, 0x7, 0x3fe000, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x9, 0x4, 0x6, 0x1, 0x0, 0x7}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x7, 0xfff7, 0x0, 0x1, 0x135a, 0xe635, 0x3}}, {0xa, 0x2, [0x7, 0x453, 0x3b]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x174}}, 0x8891) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 1m17.253264171s ago: executing program 32 (id=730): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x174, 0x24, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x2, 0x2, 0x9, 0x0, 0xe, 0x9}}, {0x4}}, {{0x1c, 0x1, {0xf2, 0x7, 0x3a3, 0x6, 0x0, 0x7, 0x3ff, 0x5}}, {0xe, 0x2, [0x20a, 0x22d, 0x7f, 0x6, 0x7]}}, {{0x1c, 0x1, {0x4, 0xff, 0x8, 0x4, 0x2, 0x1, 0x3, 0x3}}, {0xa, 0x2, [0x299a, 0xf7, 0x2000]}}, {{0x1c, 0x1, {0xc, 0x2, 0x100, 0x2d48, 0x2, 0x8, 0x2, 0x3}}, {0xa, 0x2, [0x0, 0x8, 0x1]}}, {{0x1c, 0x1, {0x5, 0x4, 0x6, 0x6, 0x0, 0x1, 0x4, 0x7}}, {0x12, 0x2, [0x9, 0x401, 0x6, 0x8, 0x5, 0x91, 0x7]}}, {{0x1c, 0x1, {0x0, 0x7, 0x5, 0x5ff, 0x1, 0x7, 0x3fe000, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x9, 0x4, 0x6, 0x1, 0x0, 0x7}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x7, 0xfff7, 0x0, 0x1, 0x135a, 0xe635, 0x3}}, {0xa, 0x2, [0x7, 0x453, 0x3b]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x174}}, 0x8891) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 20.680367341s ago: executing program 3 (id=1221): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r1, r1, 0x0, 0x1002000ff) 20.34567788s ago: executing program 3 (id=1223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8002}, 0x8c0) 20.209324973s ago: executing program 3 (id=1224): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e000000200000000000000000000000000000000000000000000ffff7f000001000320003c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000002b06000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000006000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000, 0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 20.015080478s ago: executing program 3 (id=1225): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) chdir(&(0x7f0000000200)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 19.848789582s ago: executing program 3 (id=1227): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@nolazytime}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000088c0)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) 18.965715164s ago: executing program 3 (id=1231): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x200800, &(0x7f0000000140)={[{@bsdgroups}, {@uqnoenforce}, {@pquota}, {@uqnoenforce}, {@nolargeio}]}, 0x4, 0x96c0, &(0x7f0000009640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000000)={0xe, 0x4, 0x8, 0x26, 0x5e, 0x3f, 0x8}) 18.566003604s ago: executing program 33 (id=1231): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x200800, &(0x7f0000000140)={[{@bsdgroups}, {@uqnoenforce}, {@pquota}, {@uqnoenforce}, {@nolargeio}]}, 0x4, 0x96c0, &(0x7f0000009640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000000)={0xe, 0x4, 0x8, 0x26, 0x5e, 0x3f, 0x8}) 4.089875718s ago: executing program 5 (id=1356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000100000128000480240001800b000100657874686472000014000280080006400000000105000200050000000900010073797a30000000000900020073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000900)=ANY=[@ANYBLOB="0180c2000003ffffffffffff86dd69000000003006fffe800000000000000000000000000039fe8000000000000000000000000000aa4e1f4e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c110000790780003051a00"], 0x0) 4.021166099s ago: executing program 6 (id=1357): setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) mlock2(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000009000/0x3000)=nil, 0x3000) 3.99006959s ago: executing program 1 (id=1359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0000380dc0000800c000180060001001e1c0000cc000a80710001"], 0x10c}, 0x1, 0x0, 0x0, 0x4000805}, 0xc080) 3.943052032s ago: executing program 5 (id=1360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)={0x48, r1, 0x801, 0x70bd2e, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "afcd98551cfb71ee9ea3a0d0db"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0xba83542b86c80fd3}, 0x4) 3.825038985s ago: executing program 5 (id=1362): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000)=0xffff5630, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {@grpid}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec+9Nzz0593t6Tk5CAhhaE9mPQsSrEfFtEnG47dho5Acn1s5bfXh9NtuSaDQ++yuJJN/XOj/Jfx/MM69ExG9fR5wsbCy3tryyUCqX08U8P1mvXJmsLa+culQpzafz6eXpmZkz78xMv//eu32r65vn//nh07sfnfnm+Or3v9w/cjuJs3EoP9Zejx240Z6ZiIn8ORmLs0+cONWHwgZJstsXwLaM5HE+FlkfcDhG8qgH/v++iogGMKQS8Q9DqjUOaM3t+zQPfmE8+HBtArSx/qNrr43Evubc6MBq8tjMKJvvjveh/KyMX/+8czvbon+vQwBs6cbNiDg9Orqx/0vy/m/7TvdwzpNl6P/g+bmbjX/e6jT+KayPf6LD+Odgh9jdjq3jv3C/D8V0lY3/Pug4/l1ftBofyXMvNcd8Y8nFS+U069tejogTMbY3y2+2nnNm9V6j27H28V+2ZeW3xoL5ddwf3fv4Y+ZK9dJO6tzuwc2I1zqOf5P19k86tH/2fJzvsYxj6Z3Xux3buv7PVuPniDc6tv+jFa1k8/XJyeb9MNm6Kzb6+9ax37uVv9v1z9r/wOb1H0/a12trT1/GT/v+Tbsd2+79vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr/Kz+J45v3v91uv/3R8QXPdb/1tFbXU8dhPafe6r2f/rEvY+//LFb+b21/9vN1Il8Ty/9X68XuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G5XHgAAAAAAAAAAAAAAAAAAAAbEwS6f/8/8MbLbVwc8c77yG4bXlvHfj296AgaS//8wvMQ/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/AMAAAAAAAAAAAAAAAAAAAAAAAAAAEBfnT93Ltsaqw+vz2b5uavLSwvVq6fm0tpCsbI0W5ytLl4pzler8+W0OFutbPX3ytXqlanpWLo2WU9r9cna8sqFSnXpcv3CpUppPr2Qjj2XWgEAAAAAAAAAAAAAAAAAAMCLpba8slAql9NFCYltJUYH4zIk+pzY7Z4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB75LwAA///MUDi3") setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000540), 0xff57, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 3.767191626s ago: executing program 1 (id=1363): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="120100020000004025057a120001010200010902200001010080320904000002000000000705810240000007050202"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x802, 0x0) write$binfmt_misc(r0, &(0x7f0000000a00)="6c6e7f80", 0x4) 3.694620828s ago: executing program 6 (id=1365): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) 3.581928071s ago: executing program 0 (id=1367): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="09000000070000002a00000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r0}, &(0x7f0000000cc0), &(0x7f0000000d00)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000180)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.463038443s ago: executing program 0 (id=1369): openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, 0x0) 3.343585127s ago: executing program 6 (id=1370): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0x4004480d, 0x0) 3.169284341s ago: executing program 5 (id=1372): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000010c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="2d12376647d788ad2cdbd0e68c140c7f72d35ae5869c470a1f53ea73c32220190e02cb0b770bb154d1d5d1b343cb1feadca1752e4397955e1a151721f1b28b9e32b7966f9ddd7ad3822c5ff3dc03786c1c86c2a6f7c271710c573396ca95e95a524201b0bf0539042ae14072693f9734306f7a21f92421e8e0ea335d07d1f2839c4c195930cd35c65dfc527de84f2cab4f0c78474734d7c5cba0c70ee0fd10ad5ed3f4b70308c29000e8cd98d57c90c7d9298ee4a2c41b141614627880ace9cfde45a0ae5f6f5cf3eb31254454e92eacdab64eb048b144e4fcc16afe59e7d7dad7696df64aa223d14d69bbe8ee2f76e1d4a32477a7cf108fea86a7e085c1575f683857cff342574109f74cf05e3f63f328f46735ba0578d84b4978ce545621b1666ca7da451d40e961a037822eebcbba9bf9e92af7281442efcaa8e0d3ecd6111d8fc1c742d0e7efe8e51a1c5e6ea04fec02a986cba677d9dc642d110df6f55c786c73f7ce4ebf9415bdb2680d0ff4597006d96e3c164114a4effae84380e492822c002b2e96f160a0784fd0ebe448eddaa801921576287f61a15be332a94eea951c0826874d105173a6b3f2a6e420ed5ef00b1f699b74c524a1859cb7d6dfb7257b6f0b92e17ce21237da0ec892735601b29693dce455876447f76df303a8cb34bd9c9241da9904c1c17d416753c71aeed9cc07d26b4a438df4e302cf120cda73c04d5a1b7295f1cb7ff88084211adde5fdf991f97cb522b56c561ad1119a4675fbf566b77660dfd457467652d23c739cc9ba93bbd5b464c46e46187ce71d7aab533e670c861b227454d7c21f9f16000eee0c1772a152c26acd2744c5553ace622369f15d5354a3b5ac4bb9261a766830d351fa931558dee7ff30768b2e29025c3b115179ed6a12ea76a23db3626bc033f85a43c3c3f50b75b89a418277837ba571189e708f4aaaacc19537e7aa156b7058c200e8f9be1da8a63c7e878f3e733060a1cb24a2a09ea76413efdc4e0b1027a09c6830b4ca5ccd4695e2e0bb1610a21b0cc66012aab283b6c5dfbd20aef8d7ad04e4c618a065a588d05e3f780126eee290cf0f94fb4a2c5a8cb97f60d9e50301a4f01f3787ab052ef8782d6ef0f92385ab59015670a054dab1ab0400be74fdc4ac3d18fb5b5da13e55a05e29ad14dd0abf0435dea601ce80573548f3c8f21ecfcbe5361d1505a91c355d8477fe7e3866be005acae25cbab7bd8684294963c3c95924f7d62ca0ed2d7aa01048cbdcd4d7ae9717d4feb97e1e825f6156e9c5fc456509798d2f5adc9356752a8974894ff5bf9d14aab3ddf18fd4f9af23c66f7e4ef7e345e769260fd9d2a22ddd078dd7e44f904ea78dd3db5b0f4a8d7ce9ae7909cedde165b7458da24d576fc0e18d3c27cccaff21146ad51c1681c629a8f0b8a4ae213c88910c54de9af7890b0a4414e0d38c31d76a130b587b764260655f17f901f96b835a1fecb1f7438f5e18ff60720d37d19b1a9ae3e03dc10aa1c4f2abb918883d56ddd4e74b48a4aeadccf2329956ed18b2001d1e1e80bdf325449beda911916f802234f5b182264754cd3bb26b2ae658cc0ee185a19cba7f9e54e47c32f8b87d0fed97c911d28f971e70be5fb830109a57b600f734a4cc734cbb67a58e6a696ccb39c328c537fe467fd194183aad728f95b0a4afb4557615408a83785c0d313e666d1dab18d49a4feaf12993e73f5537998a1ed25b93f9bca346376129dee3a5a78675d30bd19a78b77f45ea8b5b48cb4c78a1bc30df00badb811585966b8f8ef42d89236f5e99f849a44d62d1431eb187333dcde91582a29e777b9cd6e1bc86eff512ba48d6030681d395bfb8c5259b0c22028400a1d3929a6e3fa0fcda3deb9cf8e7e079c21d7c20b1670eb880789ae809608bac2b05c45da5a3a0377d1d06b917a5a6ee7dbf35f54c327d7d7921266bcb4e8e816b02872139d03d575c491ee077140f7d1aca286f977869288bf90eedaf41727abcd79056936d830bf6480bf6b4573e4dd402f6206099716593a04813cd07437ffa80f10f72ef64e320e48fa59b5ac0e412d9ed14bfc2e9365c67fc21c327d5699f58c3984db4f3ec0c362b633a784c4dfba44187801a0f0fc0f6b7a4610594556b33f1617c7b8b4f95d5d6fba7553512a6098a2e64d10a45347f3a41d11e19f7690ebcbfb9239c59b489061aad4317a08c435fa92c4f5feb662f6413c3d06dca92647fef304d9f8e96a78b5251b0a4d15710937428ab676cc7da5f0006cd04f7fa884625116a0cbddabc012cf55e3f26a4b411cfa1ba8473c3aef570cd23fe2165bf1f9b54632c7e76e5a5818bb70086c5fa609f2199424b8f2de5387a5bf44d3f246bec62433182b0c950ecc2968dba1e6a845c48c506daf90ffb0c13d376be0ac8283abb4e4283f703206a47c2b9c6a642d4bf4a245b8ec978b09d8620fc5d9f917842f83bf5e2efd976e9b98c38a8f836773357ad6d23fca68ee26431acf0196ef0fcef25a979782dc2f1688acacc53b1b2c2f694b638c1256a869f56098b89bb4a14b2dc2d187773e6a75f7d37ed91b8f8aee84c0bdbaeec229139809eaa9948e7a5e18d783ece0cd7ea8996dc3e650b1cff351ad9fbd661f303f40de084d111ec1489ae42d2fc55ce8d892a3d6290f2d2eb72733b4fdc8c433569c34854a84653884b3d90652f499eeb83886bd4246b41f231141cf1a412f1c7840fb8a1595895cfdec1961d887ac9dd1f5ad4b66bbb451d5471fcb1fb4bb25a4c4d43b9c0e3c72a00e8fc83f700c812b1b9c2f37e40bd746c39cbbca41e6fecb8d64424c82e640d8f887cb7d8e75828b2969e1628c7000fba626381dcfdc7262b2b06f47f898d0aa0dab8636c089d4339a37e80f20f8f5196608a3d1ac1418ff9ac0ac54c45c124b15a77d61d50ca05e1603b1b6476cf09d79b138a7f7394a9cf35e6d64654504663db381712da505d0985cd9a4edbd067c0f09c393486b138f01deb4771566d987ac16a6ed0ac5c9b592a20878e5b4050e594f376523697a0aba321a6704db28b0f0fcdf0d8e2a6f1788064d49807f080d7aa29f795935d61bcf152fe39a45a713fd0a3b2982f65437828e110b2edcdbd7b462d5ef8e87ad0aa2352cf3fb1e05787602ed66efd77a7b88c73e76dd1b368e5845cc032ed719635b0db27b39ddc12d899b742a1499ffaa4b95c0a1f29cd85a7d2d30be5bd1fd384a6e4dd3b93b46352ece5144a2ce989bcb8e6255e04e6d5d0a6b4b2736715b116b06189491b4a4a9fd9e482413b2b8851b273b10820040b490de9414fcdee5126ddbedaaddcb8c844cc7e0264f65c4d3607dddf0dbd88a7f3d1ff35bea1bcb48eb576e7083fd8bf8d6a6a1567f77819c3bbe93ff92418632d30fa2b933b33fcf163b5a942d870f22d13ad6be938ddf61de391b35e68fc9ad71aeb7cddfb73e071162bfd1c7facd10e50e9f8046c7ee6f89830b70955a3908c18cc79138c335a5159adb3229e02576cbd1829b4c67504fbe785e3c2129d53cbc3b00a62b232e16a01e01b2dc159fea676ea8c0ad0d8f41ea1840092f4900d26f48b5c549211240a5c5ab663b4f9ac463df05c86af9a3f2e595d4f9981b108d44e9ee060fc8736d7ff71a609252fe6becd2aacb23b7ac66ad8a3dfca068fb7846b9588a0b027e45f96d73cdf6c2d9494c6c5c129a8f5a1e8c4f4e6a1adec722ba74e5a002b1c87793cfc5c689ac82881ac346c3e5be4f6570d3669f797916e2018a784d6a88671c6cd803585ba49cabea506177c5e41145d2c7f192012e1478e409d2dde7de2ac2b03b9d808afaf5f761032fd562d587c653eb07ad8ede76dc1aa8a1e7fb5a56f04e3dfa10e77ee1e51f6879c2670278c8471e03b0f62eee8ec60336b604b6721a81d8ef630749dac6298b488ec09a4aa61ced579231d4231a9cf6d7f20683194e6709fbea4ed66cfdec9a7238bbad6894ceb6c0ca3307274f2749be8450180456280289d0179d8396902250cddd7a440c24ae7df78bc8e146b1b8e5c9924d2b07646ff577da61968503bad37d240aacc9dbba0f665acf1d56667d1aa7e497b7947cca22f7a55113f5e10bc9987e9b5d9405f625a604f7099cf365ea8d3530dfba6b9977f8441e23147049ae8bf0231d824397e885589c693d8a7e756e46baf67f21b062cf6d8db25140c4301233bcb18b408e3c7959056a3307546f09f13e2e732dc26b9bab0ac74d72bc0f115f7cf682aed23d9c627da1c4e4b221bd85a6c19f0391b23137f551cfb99cb1da33d42840439d0ec5f2d0e75c74d15918460e915c18dccf2f9d0ee508292c871ec9f4f2a2d1628a914487df2e8aa43bbb0bf1427e2f99e8eaaa588df310b9e50aeba057b2ce863eaaf9ecca3fc190d88bf10", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000001140)=0x3fd, 0x4) 2.00803471s ago: executing program 5 (id=1387): sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 1.827856035s ago: executing program 1 (id=1378): open(&(0x7f0000000100)='./file0\x00', 0x840, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYRESHEX, @ANYRES32=r0], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 1.811269775s ago: executing program 5 (id=1379): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000540)={0x0, 0xe, 0x4, '?9Cu'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.491090053s ago: executing program 4 (id=1381): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r2, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) 1.490406063s ago: executing program 6 (id=1382): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) unshare(0x64000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000b80)=ANY=[@ANYBLOB="66696c746550000000000000000000000000000000000000000000000000000004"], &(0x7f0000000bc0)=0x2c) 1.381787076s ago: executing program 1 (id=1383): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x96b7ebf37ae689, &(0x7f0000000080)={0xa, 0x4e24, 0x429, @private1, 0x7d8d}, 0x1c) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r1, 0x9) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 1.252168479s ago: executing program 0 (id=1384): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@errors_remount}]}, 0xfe, 0x264, &(0x7f0000000700)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019ef00000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.247055229s ago: executing program 4 (id=1385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}}, 0x0) 1.19793806s ago: executing program 6 (id=1386): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000900)={[{@grpid}, {@init_itable}]}, 0x3, 0x460, &(0x7f0000000380)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0xc6342, 0x80) setrlimit(0xa, 0x0) pwrite64(r0, &(0x7f0000000dc0)="db", 0x1, 0x80404042ffc) 1.171667961s ago: executing program 1 (id=1388): socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x21, &(0x7f00000000c0)={0x3, 0x1584, 0x1}) 1.030054625s ago: executing program 1 (id=1389): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 1.029954505s ago: executing program 4 (id=1390): openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000380)={0x23900080, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 868.701379ms ago: executing program 4 (id=1391): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000400)={0xc, 0x0, [{0x9, 0x0, 0x4}, {0x8, 0x0, 0x100000001}, {0x7, 0x0, 0x6}, {0x8, 0x0, 0x8000200100000000}, {0x4, 0x0, 0xfffffffffffff51d}, {0x2, 0x0, 0xedc}, {0x5, 0x0, 0x81}, {0x6, 0x0, 0x5}, {0x8, 0x0, 0xfffffffffffff595}, {0x1, 0x0, 0x85}, {0x8, 0x0, 0x7fff}, {0xce, 0x0, 0x7}, {0x4, 0x0, 0x6}, {0x9, 0x0, 0x207ff}, {0x7, 0x0, 0x5}, {0x9, 0x0, 0x7f}]}) 677.912723ms ago: executing program 0 (id=1392): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0xa, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x9, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x411, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0xd8, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x3e, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x2, 0x2000006, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x6, 0xfffe7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x7ffe, 0x1, 0x68, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0xd, 0x1, 0x17, 0x1, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x6395, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x3, 0xf, 0x21, 0x200, 0xa, 0x6, 0xfffffffe, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0xff, 0x2, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9370, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x268, 0xffffffff, 0x98, 0x188, 0x0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0xffffffff, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {0xff}, 0x6, 0x0, 0x32}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'geneve1\x00', 'wlan1\x00', {}, {}, 0x21}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x3b2fe5ff, 0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 420.26249ms ago: executing program 4 (id=1393): openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x191000, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000640), 0x2008000, 0x0) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2e3, &(0x7f0000000800)="$eJzs3UFPE00cx/Hf7Ja2PPDw7CMYE+PBoERPRvBivDQxxNfgRSPSmhAaiIiJcrHxbHwB3rn4AnwRxoMx8YwnT74AbmtmO2Wn7W5LQbog309S2t2d2fnP7rY7/6XNCsC5dX95b/fOT/swUqhQ0j0psIuuqiTpoi5VX25sr203G/VBKwqlqpKHkZKapq/M6kYjq6qtl9RwIjtV0rQ/DycjjuP4R9FBoEhV9xxmLQykint3hn7h06zSMz3RM90KpdYY4zmNzL729UozRccBACiWaZ/fA3een3bj9yCQFtxp3z//f/+34HiP54b2iw6hYN75P8myYmP373/JojTfM5p05TtZ4qjt2LFYWe0jq2uAabqzyv5kMYklmHy21mzcWt1s1gO9VS1h/LxwTlJNdZezZkXbv+r5jHndyv7E3rDSuaaSPkzYPiyl8ddqXpHZrEaPurUPw3w2X81jE+mD6gfjv1Js/D67PfVgIo3/dt7qNp8/ss9Ru1ROL/+3u6F0uXvDDuxlmJeRyG2pOFT3BYKoO85yZq2yemq1e7eY15Jbz2xmraUhteZsrY9erfRozq950sx789DM65c+adkb/wd2ay+o/52ZvZKkpDsyBvanlJSM/FmtK5klg9H7ghGl2/idnuquZl683llfaTYbW+N+YWMYe6Pn80Wk3jmdg+C0RHi0F/Yz1p+jqLFVGk/r5WNvuqrbKXYw01+msrO+UvELt3vaOSH2rrDztj5E650LeEMjHOOnEgqT7vT8Mm/Ef2L+YvbDw7TzP5evTNlRXZL02D/RgHF6PGzY5mVAixm5QXqp/h9vTcZdn8/PgKYyM7iWDpdzJXWv3ZSuezP3diuDcq5IF3SQDZ99Zlnf9ITr/wAAAAAAAAAAAAAAAAAAAGdN37f/v0y3F/zB30t4zfE9cgAAAAAAAAAAAAAAAAAAAAAAjiD//r9VneD9f9PfAUyOcP/f3ht7AjiW3wEAAP//zmlk6Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000080)='\v', 0x1, 0x9000) 360.980632ms ago: executing program 0 (id=1394): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "a800b043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x2, {"462533f793c6cca8c32cbdfd67bf1739", "37758d06ede99f33d84fd7794e10c244", "baaf86117e6e443c29fa716fa17e47d4"}, 0xffff, 0x2}) 34.255789ms ago: executing program 0 (id=1395): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@errors_continue}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@uid_gt={'uid>', 0xee00}}]}, 0xfd, 0x588, &(0x7f0000000680)="$eJzs3d9rW1UcAPDvTZP96rQdjKE+yGAPTsbStfXHBGHzUXQ40PcZ2qyMpsto0rHWgduDe/FFhiDiQPwDfN/j8B/wrxi4wZBR9EGFyk1vuq7Nj7bLTF0+H8h2Ts5Nzv3m3u/NOfcmTQAD62j6Ty7i1Yj4JokYWdeWj6zx6Opyy4+vT6W3JFZWPv09iTMbnivJ/h/OKq9ExC9fRZzIbe63trg0W6pUyvNZfaw+d2Wstrh08tJcaaY8U748MTl5+u3Jiffefadnsb55/s/vP7n34emvjy1/9/PDQ7eTOBsHs7Y0rh50cWN95Wjpn6xUiLMbFhzvQWe7SdLvFWBHhrI8L0R6DBiJoSzrgRfflxGxAgyoRP7DgGqOA5pz+x7Ng/83Hn2wOgHaHH9+9dxI7GvMjQ4sJ0/NjNL57mgP+k/7GH1w5/bdB3duR+fzEPu71AG25cbNiDiVz28+/iXZ8W/nTjVOHne2sY9Be/+BfrqXjn+SGxGb8j+3Nv6JFuOf4Ra5uxPd8z/3sAfdtJWO/95vOf5dO3SNDmW1lxpjvkJy8VKlfCoiXo6I41HYm9Y7Xc85vXx/pV1bGv/dbPyX3tL+m2PBbD0e5vc+/ZjpUr30LDGv9+hmxGstx7/J2vZPWmz/9PU4v8U+jpTvvN6urXv8z9fKTxFvtNz+T65oJZ2vT4419oex5l6x2R+3jvzarv9+x59u/wOd4x9N1l+vrW2/jx/3/VVu17bT/X9P8lmjvCe771qpXp8fj9iTfJwf3nj/xJPHNuvN5dP4jx9rnf+d9v908vX5FuO/dfhW20W7xv/3ukn6U25usffO0vint7X9t1+4/9EXP+w4/sb2f6tROp7ds5Xj31ZX8FleOwAAAAAAANhtchFxMJJcca2cyxWLhUbb4TiQq1Rr9RMXqwuXp6PxXdnRKOSaV7pH1n0eYjz7PGyzPrGhPhkRhyLi26H9jXpxqlqZ7nfwAAAAAAAAAAAAAAAAAAAAsEsMt/z+/2rbb0P9XjvguWv8sMHefq8F0A9df/K/F7/0BOxKXfMfeGFtP/+dGYAXhfd/GFzyHwaX/IfBtdX8L4w85xUB/nPe/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqfPnzqW3leXH16fS+vTVxYXZ6tWT0+XabHFuYao4VZ2/UpypVmcq5eJUda7b81Wq1SvjE7FwbaxertXHaotLF+aqC5frFy7NlWbKF8oFf2wYAAAAAAAAAAAAAAAAAAAANqktLs2WKpXyvELbwpno5RMmu++VP5Ot0o4ent8tUSj0tNDHgxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbPBvAAAA///YBDOu") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) 10.74693ms ago: executing program 4 (id=1396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r1, r0}, 0xc) 0s ago: executing program 6 (id=1397): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500002400004002"], 0x0) kernel console output (not intermixed with test programs): erface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.633124][ T4263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.641287][ T6144] EXT4-fs (loop1): Ignoring removed oldalloc option [ 147.641312][ T6144] EXT4-fs (loop1): Ignoring removed oldalloc option [ 147.641333][ T6144] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.683915][ T5342] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.700372][ T6131] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 147.701191][ T5342] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.732535][ T4263] hub 1-1:1.0: bad descriptor, ignoring hub [ 147.733406][ T5342] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 147.745450][ T4263] hub: probe of 1-1:1.0 failed with error -5 [ 147.767271][ T4263] cdc_wdm 1-1:1.0: skipping garbage [ 147.773107][ T4263] cdc_wdm 1-1:1.0: skipping garbage [ 147.780117][ T6144] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,min_batch_time=0x0000000000000003,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 147.811423][ T4263] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 147.817383][ T4263] cdc_wdm 1-1:1.0: Unknown control protocol [ 147.831205][ T5342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.865074][ T6142] ntfs3: loop4: ino=5, "/" directory corrupted [ 147.888036][ T5342] usb 3-1: config 0 descriptor?? [ 147.967567][ T144] ntfs3: loop4: ino=5, directory corrupted [ 147.988537][ T144] ntfs3: loop4: ino=1e, Internal error [ 148.005433][ T144] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 148.312443][ T6155] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 148.383447][ T6155] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 148.417285][ T5342] glorious 0003:258A:0033.0008: unknown main item tag 0x0 [ 148.435413][ T5342] glorious 0003:258A:0033.0008: unknown main item tag 0x0 [ 148.455686][ T5342] glorious 0003:258A:0033.0008: unknown main item tag 0x2 [ 148.495260][ T5342] glorious 0003:258A:0033.0008: unknown main item tag 0x0 [ 148.512935][ T5342] glorious 0003:258A:0033.0008: unknown main item tag 0x0 [ 148.530004][ T5342] glorious 0003:258A:0033.0008: unknown main item tag 0x0 [ 148.547880][ T5342] glorious 0003:258A:0033.0008: unknown main item tag 0x0 [ 148.557806][ T6131] usb 1-1: reset low-speed USB device number 11 using dummy_hcd [ 148.565765][ T5342] glorious 0003:258A:0033.0008: item fetching failed at offset 10/40 [ 148.586027][ T5342] glorious: probe of 0003:258A:0033.0008 failed with error -22 [ 148.636588][ T5342] usb 3-1: USB disconnect, device number 7 [ 149.071573][ T6147] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 149.503637][ T4891] usb 1-1: USB disconnect, device number 11 [ 149.651214][ T4263] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 149.690396][ T6181] set_capacity_and_notify: 2 callbacks suppressed [ 149.690478][ T6181] loop1: detected capacity change from 0 to 2048 [ 149.776970][ T6181] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.829241][ T6181] overlayfs: upper fs needs to support d_type. [ 149.844463][ T6181] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 149.852224][ T6181] overlayfs: failed to set xattr on upper [ 149.858833][ T6181] overlayfs: ...falling back to index=off,metacopy=off. [ 149.883470][ T6181] overlayfs: conflicting lowerdir path [ 149.911198][ T4263] usb 3-1: Using ep0 maxpacket: 16 [ 150.031358][ T4263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.061159][ T4263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.070966][ T4263] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.131382][ T4263] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 150.160857][ T4263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.187598][ T4263] usb 3-1: config 0 descriptor?? [ 150.367190][ T6181] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 150.388107][ T6183] loop4: detected capacity change from 0 to 40427 [ 150.420521][ T6183] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 150.437876][ T6183] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 150.460368][ T6177] udc-core: couldn't find an available UDC or it's busy [ 150.471276][ T6177] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 150.480015][ T6183] F2FS-fs (loop4): invalid crc value [ 150.559041][ T6183] F2FS-fs (loop4): Found nat_bits in checkpoint [ 150.571178][ T4891] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 150.709712][ T6183] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 150.724165][ T6183] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 150.759996][ T4263] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input9 [ 150.871990][ T6205] loop1: detected capacity change from 0 to 8192 [ 150.890686][ T4263] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 150.931596][ T6205] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 150.947039][ T4891] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 150.961716][ T6194] loop0: detected capacity change from 0 to 32768 [ 150.983664][ T4263] usb 3-1: USB disconnect, device number 8 [ 150.989621][ T4891] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 150.989823][ T6205] REISERFS (device loop1): using ordered data mode [ 151.006593][ T6205] reiserfs: using flush barriers [ 151.017323][ T6205] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.017479][ T4891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 151.043683][ T6205] REISERFS (device loop1): checking transaction log (loop1) [ 151.164177][ T6211] fido_id[6211]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 151.200155][ T4891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 151.212804][ T6205] REISERFS (device loop1): Using tea hash to sort names [ 151.215529][ T4891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 151.224012][ T6205] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 151.323685][ T6194] XFS (loop0): Mounting V5 Filesystem [ 151.410502][ T6194] XFS (loop0): Ending clean mount [ 151.415963][ T4891] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 151.426292][ T4891] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 151.439735][ T4891] usb 4-1: Product: syz [ 151.445933][ T4891] usb 4-1: Manufacturer: syz [ 151.492428][ T4891] cdc_wdm 4-1:1.0: skipping garbage [ 151.518129][ T4891] cdc_wdm 4-1:1.0: skipping garbage [ 151.568635][ T4891] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 151.628161][ T4891] cdc_wdm 4-1:1.0: Unknown control protocol [ 151.807386][ T4186] XFS (loop0): Unmounting Filesystem [ 151.816885][ T6220] loop4: detected capacity change from 0 to 2048 [ 151.859415][ T6220] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.177065][ T4891] usb 4-1: USB disconnect, device number 11 [ 152.364202][ T6234] loop4: detected capacity change from 0 to 128 [ 152.547582][ T6238] loop4: detected capacity change from 0 to 1024 [ 152.568856][ T6238] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 152.588799][ T6238] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.759950][ T6230] loop1: detected capacity change from 0 to 32768 [ 152.838763][ T6230] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 152.893925][ T6230] JBD2: Ignoring recovery information on journal [ 153.126940][ T6230] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 153.512276][ T4196] ocfs2: Unmounting device (7,1) on (node local) [ 153.619010][ T6251] chnl_net:caif_netlink_parms(): no params data found [ 153.804648][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.813799][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.822877][ T6251] device bridge_slave_0 entered promiscuous mode [ 153.831991][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.839842][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.848559][ T6251] device bridge_slave_1 entered promiscuous mode [ 153.896428][ T6251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.929188][ T6251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.023310][ T6270] loop1: detected capacity change from 0 to 1024 [ 154.030466][ T6251] team0: Port device team_slave_0 added [ 154.050776][ T6251] team0: Port device team_slave_1 added [ 154.076969][ T6270] hfsplus: small dir entry [ 154.128190][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.151455][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.219979][ T6251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.283219][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.290224][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.331550][ T6263] loop3: detected capacity change from 0 to 32768 [ 154.368262][ T6251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.384701][ T4243] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:7: bg 0: block 112: padding at end of block bitmap is not set [ 154.419970][ T4243] EXT4-fs (loop4): Remounting filesystem read-only [ 154.433104][ T6265] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.739 (6265) [ 154.473937][ T6251] device hsr_slave_0 entered promiscuous mode [ 154.489337][ T6251] device hsr_slave_1 entered promiscuous mode [ 154.497431][ T6265] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 154.501715][ T6263] XFS (loop3): Mounting V5 Filesystem [ 154.524637][ T6265] BTRFS info (device loop0): setting nodatasum [ 154.531499][ T6265] BTRFS info (device loop0): force zlib compression, level 3 [ 154.550191][ T6251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.558369][ T6265] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 154.582257][ T6265] BTRFS info (device loop0): use lzo compression, level 0 [ 154.589488][ T6265] BTRFS info (device loop0): turning on flush-on-commit [ 154.615628][ T6251] Cannot create hsr debugfs directory [ 154.632060][ T6279] exfat: Deprecated parameter 'namecase' [ 154.667617][ T6265] BTRFS info (device loop0): enabling auto defrag [ 154.678243][ T6263] XFS (loop3): Ending clean mount [ 154.711284][ T6265] BTRFS info (device loop0): max_inline at 4096 [ 154.722471][ T6265] BTRFS info (device loop0): using free space tree [ 154.731879][ T6265] BTRFS info (device loop0): has skinny extents [ 154.768735][ T6279] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 154.834205][ T4198] XFS (loop3): Unmounting Filesystem [ 154.990277][ T6265] BTRFS info (device loop0): enabling ssd optimizations [ 155.036601][ T6251] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.051173][ T4263] Bluetooth: hci2: command 0x0409 tx timeout [ 155.076937][ T6251] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.157194][ T6251] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.214097][ T6251] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.515619][ T6251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.538321][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.624462][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.703963][ T6251] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.733227][ T4340] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (4340) [ 155.762007][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.778896][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.815390][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.822729][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.870640][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.883673][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.906069][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.915955][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.923135][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.933699][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.947303][ T6319] device syzkaller1 entered promiscuous mode [ 155.978025][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.002778][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.061137][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.075726][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.090906][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.144439][ T6324] input: syz0 as /devices/virtual/input/input10 [ 156.201921][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.219461][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.250434][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.295375][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.324509][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.362970][ T6251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.473942][ T6337] mmap: syz.3.754 (6337) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 156.495044][ T6332] netlink: 'syz.4.752': attribute type 8 has an invalid length. [ 156.526036][ T6332] netlink: 'syz.4.752': attribute type 4 has an invalid length. [ 156.554454][ T6332] netlink: 'syz.4.752': attribute type 7 has an invalid length. [ 156.620464][ T6332] netlink: 197844 bytes leftover after parsing attributes in process `syz.4.752'. [ 156.715546][ T6336] set_capacity_and_notify: 2 callbacks suppressed [ 156.715564][ T6336] loop1: detected capacity change from 0 to 4096 [ 156.752665][ T6345] loop0: detected capacity change from 0 to 1024 [ 156.820125][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.830403][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.860996][ T6251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.878197][ T6336] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 157.035192][ T6336] ntfs3: loop1: Failed to load $Extend. [ 157.093841][ T26] audit: type=1800 audit(1785856456.713:14): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.753" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 157.132311][ T4893] Bluetooth: hci2: command 0x041b tx timeout [ 157.544449][ T6370] sctp: [Deprecated]: syz.0.764 (pid 6370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.544449][ T6370] Use struct sctp_sack_info instead [ 157.584422][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.597993][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.636256][ T6373] loop8: detected capacity change from 0 to 7 [ 157.667475][ T6373] Dev loop8: unable to read RDB block 7 [ 157.677301][ T6373] loop8: unable to read partition table [ 157.690099][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.691002][ T6373] loop8: partition table beyond EOD, [ 157.702558][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.721350][ T6373] truncated [ 157.729801][ T6373] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 157.763634][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 157.782853][ T6376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.768'. [ 157.825236][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 157.848342][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 157.880269][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 157.904279][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 157.946450][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 157.965685][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 157.973857][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 157.993771][ T6251] device veth0_vlan entered promiscuous mode [ 158.003614][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.022115][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.052454][ T6251] device veth1_vlan entered promiscuous mode [ 158.182205][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.191469][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.203534][ T6251] device veth0_macvtap entered promiscuous mode [ 158.243847][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.773'. [ 158.259455][ T6251] device veth1_macvtap entered promiscuous mode [ 158.279014][ T6389] loop1: detected capacity change from 0 to 256 [ 158.317431][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.329965][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.340675][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.352203][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.362284][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.373064][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.383363][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.404409][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.430447][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.472055][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.494906][ T6389] FAT-fs (loop1): Directory bread(block 64) failed [ 158.502260][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.519647][ T6389] FAT-fs (loop1): Directory bread(block 65) failed [ 158.527189][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.545135][ T6389] FAT-fs (loop1): Directory bread(block 66) failed [ 158.564720][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.577476][ T6389] FAT-fs (loop1): Directory bread(block 67) failed [ 158.590069][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.591656][ T6389] FAT-fs (loop1): Directory bread(block 68) failed [ 158.618206][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.638719][ T6389] FAT-fs (loop1): Directory bread(block 69) failed [ 158.645673][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.667618][ T6389] FAT-fs (loop1): Directory bread(block 70) failed [ 158.674447][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.684778][ T6389] FAT-fs (loop1): Directory bread(block 71) failed [ 158.691646][ T6389] FAT-fs (loop1): Directory bread(block 72) failed [ 158.698365][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.709272][ T6389] FAT-fs (loop1): Directory bread(block 73) failed [ 158.716479][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.746618][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.771129][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.794341][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.825756][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.843515][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.875623][ T6251] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.910859][ T6251] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.939349][ T6251] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.968779][ T6251] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.001227][ T6399] netlink: 'syz.1.778': attribute type 3 has an invalid length. [ 159.021248][ T6399] netlink: 'syz.1.778': attribute type 3 has an invalid length. [ 159.037480][ T6399] netlink: 'syz.1.778': attribute type 3 has an invalid length. [ 159.061460][ T6399] netlink: 'syz.1.778': attribute type 3 has an invalid length. [ 159.072663][ T6399] netlink: 'syz.1.778': attribute type 3 has an invalid length. [ 159.083970][ T6399] netlink: 'syz.1.778': attribute type 3 has an invalid length. [ 159.097848][ T6399] netlink: 'syz.1.778': attribute type 3 has an invalid length. [ 159.116383][ T6391] loop0: detected capacity change from 0 to 40427 [ 159.205943][ T6391] F2FS-fs (loop0): invalid crc value [ 159.247259][ T4890] Bluetooth: hci2: command 0x040f tx timeout [ 159.273027][ T6391] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 159.341781][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.357582][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.390270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.428848][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.445224][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.473501][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.489969][ T6391] F2FS-fs (loop0): Start checkpoint disabled! [ 159.526588][ T6391] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 159.591202][ T1324] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 159.613607][ T4243] attempt to access beyond end of device [ 159.613607][ T4243] loop0: rw=2049, want=45112, limit=40427 [ 159.819130][ T6420] loop5: detected capacity change from 0 to 1024 [ 159.884342][ T6420] EXT4-fs (loop5): Ignoring removed orlov option [ 159.897050][ T6420] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 159.932808][ T6420] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.999804][ T6420] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,dioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 160.022621][ T1324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 160.034127][ T1324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 160.127983][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 160.177560][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 160.189944][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 160.205920][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 160.221359][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 160.236012][ T1324] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 160.251367][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 160.259259][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 160.266934][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.276167][ T1324] usb 2-1: Product: syz [ 160.284114][ T1324] usb 2-1: Manufacturer: syz [ 160.288773][ T1324] usb 2-1: SerialNumber: syz [ 160.294049][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 160.303929][ T1324] usb 2-1: config 0 descriptor?? [ 160.342225][ T1324] hub 2-1:0.0: bad descriptor, ignoring hub [ 160.351332][ T1324] hub: probe of 2-1:0.0 failed with error -5 [ 160.360081][ T1324] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 160.619677][ T6408] loop1: detected capacity change from 0 to 2048 [ 160.711720][ T6408] Alternate GPT is invalid, using primary GPT. [ 160.718001][ T6408] loop1: p1 p2 p3 [ 160.718426][ T6439] loop3: detected capacity change from 0 to 256 [ 160.804305][ T6439] FAT-fs (loop3): Directory bread(block 64) failed [ 160.812068][ T6439] FAT-fs (loop3): Directory bread(block 65) failed [ 160.819441][ T6439] FAT-fs (loop3): Directory bread(block 66) failed [ 160.827510][ T6439] FAT-fs (loop3): Directory bread(block 67) failed [ 160.857986][ T6439] FAT-fs (loop3): Directory bread(block 68) failed [ 160.874279][ T6439] FAT-fs (loop3): Directory bread(block 69) failed [ 160.886303][ T6439] FAT-fs (loop3): Directory bread(block 70) failed [ 160.896254][ T6439] FAT-fs (loop3): Directory bread(block 71) failed [ 160.910049][ T6439] FAT-fs (loop3): Directory bread(block 72) failed [ 160.919849][ T6439] FAT-fs (loop3): Directory bread(block 73) failed [ 160.971332][ T4890] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 161.212088][ T4890] usb 1-1: Using ep0 maxpacket: 8 [ 161.237763][ T6444] Invalid argument reading file caps for ./file0 [ 161.291650][ T4891] Bluetooth: hci2: command 0x0419 tx timeout [ 161.323525][ T6447] loop9: detected capacity change from 0 to 524287936 [ 161.491437][ T4890] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 161.500573][ T4890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.550147][ T4890] usb 1-1: Product: syz [ 161.571004][ T4890] usb 1-1: Manufacturer: syz [ 161.578961][ T4890] usb 1-1: SerialNumber: syz [ 161.617872][ T4890] usb 1-1: config 0 descriptor?? [ 161.663487][ T4890] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 161.677709][ T5338] usb 2-1: USB disconnect, device number 7 [ 161.915866][ T6463] sctp: [Deprecated]: syz.5.802 (pid 6463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.915866][ T6463] Use struct sctp_sack_info instead [ 162.125763][ T6453] Trying to write to read-only block-device nullb0 [ 162.311214][ T4890] gspca_sonixj: reg_w1 err -71 [ 162.316107][ T4890] sonixj: probe of 1-1:0.0 failed with error -71 [ 162.356755][ T4890] usb 1-1: USB disconnect, device number 12 [ 162.756862][ T6485] loop5: detected capacity change from 0 to 1024 [ 162.819213][ T6489] loop1: detected capacity change from 0 to 256 [ 162.920231][ T6491] overlayfs: workdir and upperdir must reside under the same mount [ 163.009260][ T6485] hfsplus: xattr searching failed [ 163.119691][ T154] hfsplus: b-tree write err: -5, ino 3 [ 163.149029][ T6251] hfsplus: node 4:3 still has 1 user(s)! [ 163.477811][ T6509] loop0: detected capacity change from 0 to 1024 [ 163.523582][ T6509] EXT4-fs (loop0): Ignoring removed orlov option [ 163.546396][ T6509] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 163.564118][ T6509] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.622430][ T6509] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,dioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 163.761626][ T6498] loop1: detected capacity change from 0 to 32768 [ 164.006214][ T6519] loop0: detected capacity change from 0 to 256 [ 164.022367][ T6498] XFS (loop1): Mounting V5 Filesystem [ 164.063949][ T6519] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.136509][ T6498] XFS (loop1): Ending clean mount [ 164.148957][ T6519] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 164.175454][ T6526] loop3: detected capacity change from 0 to 256 [ 164.216928][ T6519] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 164.260256][ T6526] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 164.291089][ T4196] XFS (loop1): Unmounting Filesystem [ 164.541540][ T6531] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 164.680031][ T6537] loop0: detected capacity change from 0 to 128 [ 164.772036][ T6537] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 165.071498][ T6548] loop0: detected capacity change from 0 to 256 [ 165.171139][ T6548] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.210678][ T6548] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 165.257738][ T6561] loop1: detected capacity change from 0 to 16 [ 165.266437][ T6548] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 165.287378][ T6560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.844'. [ 165.342321][ T6563] loop5: detected capacity change from 0 to 2048 [ 165.377155][ T6561] erofs: (device loop1): mounted with root inode @ nid 36. [ 165.396556][ T6561] attempt to access beyond end of device [ 165.396556][ T6561] loop1: rw=0, want=40, limit=16 [ 165.415525][ T3558] loop5: p1 < > p4 [ 165.415525][ T3558] p4: [ 165.428202][ T3558] loop5: p4 size 722688 extends beyond EOD, truncated [ 165.429583][ T6561] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 165.462940][ T3558] loop5: p6 start 262464109 is beyond EOD, truncated [ 165.469681][ T3558] loop5: p7 size 2304 extends beyond EOD, truncated [ 165.477369][ T6561] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 165.490341][ T6561] erofs: (device loop1): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 165.500031][ T6561] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 165.510718][ T6561] attempt to access beyond end of device [ 165.510718][ T6561] loop1: rw=524288, want=328, limit=16 [ 165.524239][ T6561] attempt to access beyond end of device [ 165.524239][ T6561] loop1: rw=524288, want=336, limit=16 [ 165.537253][ T6561] attempt to access beyond end of device [ 165.537253][ T6561] loop1: rw=524288, want=1049296, limit=16 [ 165.552846][ T6563] loop5: p1 < > p4 [ 165.552846][ T6563] p4: [ 165.571544][ T6561] attempt to access beyond end of device [ 165.571544][ T6561] loop1: rw=524288, want=1049304, limit=16 [ 165.571965][ T6563] loop5: p4 size 722688 extends beyond EOD, truncated [ 165.609230][ T6561] attempt to access beyond end of device [ 165.609230][ T6561] loop1: rw=524288, want=48, limit=16 [ 165.622229][ T6561] attempt to access beyond end of device [ 165.622229][ T6561] loop1: rw=524288, want=408, limit=16 [ 165.623560][ T6563] loop5: p6 start 262464109 is beyond EOD, truncated [ 165.648357][ T6563] loop5: p7 size 2304 extends beyond EOD, truncated [ 165.660994][ T6561] attempt to access beyond end of device [ 165.660994][ T6561] loop1: rw=524288, want=416, limit=16 [ 165.681242][ T6561] attempt to access beyond end of device [ 165.681242][ T6561] loop1: rw=524288, want=32, limit=16 [ 165.696621][ T6569] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 165.878637][ T6574] validate_nla: 47 callbacks suppressed [ 165.878655][ T6574] netlink: 'syz.5.850': attribute type 2 has an invalid length. [ 165.893787][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.911284][ T4230] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 165.968781][ T4232] ntfs3: loop0: ino=1b, Internal error [ 165.976684][ T4232] ntfs3: loop0: ntfs3_write_inode r=1b failed, -22. [ 166.151149][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 166.271339][ T4230] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.314351][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 166.316127][ T4284] udevd[4284]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 166.340058][ T4230] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.364887][ T4768] udevd[4768]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 166.382052][ T4230] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.395200][ T4340] udevd[4340]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 166.462241][ T4230] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.494657][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 166.500825][ T4768] udevd[4768]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 166.546782][ T6596] MINIX-fs: mounting file system with errors, running fsck is recommended [ 166.556787][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 166.593933][ T6597] udevd[6597]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 166.641399][ T4230] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.676467][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.694231][ T6596] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 166.721300][ T4230] usb 4-1: SerialNumber: syz [ 166.748225][ T6603] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 166.789861][ T4230] hub 4-1:1.0: bad descriptor, ignoring hub [ 166.801385][ T4230] hub: probe of 4-1:1.0 failed with error -5 [ 166.833160][ T4230] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 166.925534][ T6607] EXT4-fs (loop1): Ignoring removed orlov option [ 166.982767][ T6607] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 166.989952][ T6607] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.152595][ T6607] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,dioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 167.803037][ T6631] set_capacity_and_notify: 5 callbacks suppressed [ 167.803054][ T6631] loop5: detected capacity change from 0 to 512 [ 167.854627][ T6618] loop4: detected capacity change from 0 to 40427 [ 167.891117][ T6618] F2FS-fs (loop4): invalid crc value [ 167.911972][ T6618] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 168.037670][ T6631] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 168.081225][ T6631] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.139982][ T6640] loop0: detected capacity change from 0 to 64 [ 168.369178][ T6618] F2FS-fs (loop4): Start checkpoint disabled! [ 168.419060][ T6618] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e7 [ 168.456939][ T6646] loop5: detected capacity change from 0 to 7 [ 168.505287][ T6646] Dev loop5: unable to read RDB block 7 [ 168.514683][ T6646] loop5: unable to read partition table [ 168.550744][ T6646] loop5: partition table beyond EOD, truncated [ 168.557193][ T6646] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 168.603914][ T1276] attempt to access beyond end of device [ 168.603914][ T1276] loop4: rw=2049, want=45104, limit=40427 [ 168.798093][ T6630] loop1: detected capacity change from 0 to 32768 [ 168.821422][ T5338] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 168.856597][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.5.882'. [ 168.898896][ T5338] usb 4-1: device reset changed ep0 maxpacket size! [ 168.967872][ T5338] usb 4-1: USB disconnect, device number 12 [ 169.131720][ T4891] Bluetooth: hci2: command 0x0405 tx timeout [ 169.461255][ T5338] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 169.687816][ T5339] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 169.751370][ T5338] usb 4-1: Using ep0 maxpacket: 32 [ 169.843272][ T6692] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 169.901544][ T5338] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 169.930200][ T5338] usb 4-1: config 0 has no interface number 0 [ 169.942715][ T6694] loop0: detected capacity change from 0 to 1024 [ 169.960789][ T5338] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 169.978523][ T5338] usb 4-1: config 0 interface 196 has no altsetting 0 [ 170.090992][ T6694] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 170.101259][ T6694] hfsplus: xattr search failed [ 170.103187][ T5339] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 170.146576][ T5339] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 170.158178][ T4232] hfsplus: b-tree write err: -5, ino 25 [ 170.175305][ T4232] hfsplus: b-tree write err: -5, ino 4 [ 170.181719][ T5338] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 170.190962][ T5338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.212308][ T4232] hfsplus: b-tree write err: -5, ino 2 [ 170.222471][ T5338] usb 4-1: Product: syz [ 170.226778][ T5338] usb 4-1: Manufacturer: syz [ 170.233522][ T5338] usb 4-1: SerialNumber: syz [ 170.258219][ T5338] usb 4-1: config 0 descriptor?? [ 170.288480][ T6649] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 170.301400][ T5339] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 170.320801][ T5339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 170.330270][ T5339] usb 2-1: Product: syz [ 170.339298][ T1324] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 170.350398][ T5339] usb 2-1: Manufacturer: syz [ 170.371471][ T6671] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 170.381548][ T6671] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 170.392477][ T5339] usb_debug 2-1:1.0: debug converter detected [ 170.408619][ T5339] usb 2-1: debug converter now attached to ttyUSB0 [ 170.647274][ T6716] loop0: detected capacity change from 0 to 512 [ 170.648523][ T1324] usb 6-1: Using ep0 maxpacket: 8 [ 170.661257][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.674385][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.683917][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.693207][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.702640][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.712262][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.721692][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.731074][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.743523][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.753054][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.762520][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.771806][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.781222][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.790520][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.792098][ T1324] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 170.816046][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.825392][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.835652][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.844943][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.849269][ T1324] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.854403][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.873499][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.882959][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.892191][ T5338] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 170.892313][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.900955][ T1324] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.909697][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.928061][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.937578][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.946879][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.956288][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.965582][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.975045][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.984341][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 170.986626][ T1324] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.993847][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 171.012939][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 171.022375][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 171.036102][ T1324] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.069863][ T6716] EXT4-fs (loop0): Test dummy encryption mode enabled [ 171.091266][ T6716] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 171.093950][ T1324] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 171.158708][ T1324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.168689][ T6716] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.907: bad orphan inode 131083 [ 171.172946][ T5339] usb 2-1: USB disconnect, device number 8 [ 171.197111][ T6716] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue. Quota mode: none. [ 171.228871][ T5339] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 171.248126][ T5339] usb_debug 2-1:1.0: device disconnected [ 171.327533][ T6716] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none. [ 171.352575][ T6716] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz.0.907: path /203/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 171.451984][ T1324] usb 6-1: usb_control_msg returned -32 [ 171.459681][ T1324] usbtmc 6-1:16.0: can't read capabilities [ 171.821447][ T6740] usbtmc 6-1:16.0: control status returned 2 [ 172.024732][ T4893] usb 6-1: USB disconnect, device number 2 [ 172.033604][ T6724] loop4: detected capacity change from 0 to 40427 [ 172.093170][ T6724] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 172.117123][ T6724] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 172.138956][ T6724] F2FS-fs (loop4): invalid crc value [ 172.164321][ T6724] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 172.186405][ T4891] usb 4-1: USB disconnect, device number 13 [ 172.305115][ T6758] loop3: detected capacity change from 0 to 2048 [ 172.375342][ T6758] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=3932051, location=3932051 [ 172.391918][ T6724] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 172.417529][ T6724] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 172.432558][ T6758] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.479665][ T6758] 9pnet: p9_errstr2errno: server reported unknown error @ [ 172.479665][ T6758] Œe៤úÄŽ‰¼™Ø;ID¤p“Ñqua[×ë²w29ÀbDù4޼EŠ)Îþ²:SùÿÿÿÿÿÿÿÿD†ü [ 172.633845][ T4190] attempt to access beyond end of device [ 172.633845][ T4190] loop4: rw=2049, want=45104, limit=40427 [ 172.741782][ T4891] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 172.815136][ T6764] Set syz1 is full, maxelem 1029 reached [ 174.142333][ T6811] device hsr0 entered promiscuous mode [ 174.169894][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 174.235244][ T6811] device hsr_slave_0 left promiscuous mode [ 174.267478][ T6796] loop3: detected capacity change from 0 to 131072 [ 174.274418][ T4891] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 174.298051][ T6778] loop0: detected capacity change from 0 to 40427 [ 174.313757][ T6811] device hsr_slave_1 left promiscuous mode [ 174.335357][ T6796] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 174.342229][ T6796] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 174.358567][ T6796] F2FS-fs (loop3): invalid crc value [ 174.379600][ T6796] F2FS-fs (loop3): Found nat_bits in checkpoint [ 174.439635][ T6790] loop5: detected capacity change from 0 to 32768 [ 174.470826][ T6811] device hsr0 left promiscuous mode [ 174.476458][ T6778] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 174.486624][ T6796] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 174.493901][ T6796] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 174.511442][ T6778] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 174.569928][ T6778] F2FS-fs (loop0): invalid crc value [ 174.589338][ T6778] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 174.732203][ T6790] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 174.914826][ T6778] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 174.922276][ T4891] usb 2-1: string descriptor 0 read error: -22 [ 174.928595][ T4891] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 174.951941][ T6778] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 174.960603][ T6251] ocfs2: Unmounting device (7,5) on (node local) [ 174.971419][ T4891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.022546][ T4891] usb 2-1: config 0 descriptor?? [ 175.063146][ T4891] usbtest 2-1:0.0: FX2 device [ 175.067895][ T4891] usbtest 2-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 175.329517][ T6837] device syzkaller1 entered promiscuous mode [ 175.842426][ T4892] usb 2-1: USB disconnect, device number 9 [ 176.050096][ T6834] loop4: detected capacity change from 0 to 32768 [ 176.061157][ T4230] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 176.106922][ T6856] loop1: detected capacity change from 0 to 2048 [ 176.139055][ T6834] (syz.4.934,6834,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 176.207781][ T6834] (syz.4.934,6834,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 176.304862][ T6856] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.373153][ T6834] JBD2: Ignoring recovery information on journal [ 176.441387][ T4230] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 176.450191][ T4230] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 176.459575][ T4230] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 176.470817][ T4230] usb 6-1: config 220 has no interface number 2 [ 176.477554][ T4230] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 176.482210][ T6834] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 176.492994][ T4230] usb 6-1: config 220 interface 0 has no altsetting 0 [ 176.507026][ T4230] usb 6-1: config 220 interface 76 has no altsetting 0 [ 176.514172][ T4230] usb 6-1: config 220 interface 1 has no altsetting 0 [ 176.688228][ T4230] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 176.711193][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.737583][ T4230] usb 6-1: Product: syz [ 176.749136][ T4230] usb 6-1: Manufacturer: syz [ 176.758645][ T4230] usb 6-1: SerialNumber: syz [ 176.909403][ T4190] ocfs2: Unmounting device (7,4) on (node local) [ 177.131790][ T4230] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 177.138232][ T4230] usb 6-1: No valid video chain found. [ 177.154449][ T4230] usb 6-1: selecting invalid altsetting 0 [ 177.241216][ T4890] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 177.252743][ T4230] usb 6-1: selecting invalid altsetting 0 [ 177.258524][ T4230] usbtest: probe of 6-1:220.1 failed with error -22 [ 177.283868][ T6880] block nbd4: NBD_DISCONNECT [ 177.301324][ T4230] usb 6-1: USB disconnect, device number 3 [ 177.318802][ T6880] block nbd4: Disconnected due to user request. [ 177.347913][ T6880] block nbd4: shutting down sockets [ 177.492751][ T6885] loop4: detected capacity change from 0 to 128 [ 177.508145][ T6873] loop1: detected capacity change from 0 to 32768 [ 177.546597][ T6885] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 177.577392][ T6885] hpfs: filesystem error: improperly stopped [ 177.591594][ T6885] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 177.599532][ T6885] hpfs: You really don't want any checks? You are crazy... [ 177.612075][ T4890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.631425][ T6885] hpfs: Code page index out of array [ 177.637439][ T6885] hpfs: code page support is disabled [ 177.645159][ T6873] JBD2: Ignoring recovery information on journal [ 177.656072][ T6885] hpfs: hpfs_map_4sectors(): unaligned read [ 177.662359][ T6885] hpfs: hpfs_map_4sectors(): unaligned read [ 177.668371][ T6885] hpfs: filesystem error: unable to find root dir [ 177.712654][ T4890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.739339][ T6873] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 177.786632][ T6885] hpfs: hpfs_map_4sectors(): unaligned read [ 177.822334][ T4890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.860229][ T6873] overlayfs: upper fs does not support tmpfile. [ 177.888738][ T4890] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.898348][ T4890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.928805][ T4890] usb 1-1: config 0 descriptor?? [ 177.940061][ T6873] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 178.004795][ T6895] loop5: detected capacity change from 0 to 1024 [ 178.050870][ T6873] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature [ 178.069658][ T6895] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 178.069658][ T6895] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 178.069658][ T6895] [ 178.107376][ T6895] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,delalloc,journal_dev=0x0000000000000007,nouid32,noacl,noinit_itable,usrquota,,errors=continue. Quota mode: writeback. [ 178.128768][ T6895] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.177921][ T6873] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 178.191264][ T6873] OCFS2: File system is now read-only. [ 178.200987][ T6873] (syz.1.943,6873,1):ocfs2_search_chain:1783 ERROR: status = -30 [ 178.277037][ T6873] (syz.1.943,6873,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 178.285528][ T6873] (syz.1.943,6873,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 178.294387][ T6873] (syz.1.943,6873,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 178.304250][ T6873] (syz.1.943,6873,0):ocfs2_claim_metadata:2040 ERROR: status = -30 [ 178.312890][ T6873] (syz.1.943,6873,0):ocfs2_claim_metadata:2053 ERROR: status = -30 [ 178.321182][ T6873] (syz.1.943,6873,0):ocfs2_create_xattr_block:2891 ERROR: status = -30 [ 178.329572][ T6873] (syz.1.943,6873,0):ocfs2_xattr_block_set:2972 ERROR: status = -30 [ 178.354578][ T6873] overlayfs: failed to set xattr on upper [ 178.380922][ T6873] overlayfs: ...falling back to index=off,metacopy=off. [ 178.398809][ T6873] overlayfs: upper fs missing required features. [ 178.443887][ T4890] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 178.498797][ T4890] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 178.526701][ T4196] ocfs2: Unmounting device (7,1) on (node local) [ 178.629431][ T6893] loop3: detected capacity change from 0 to 32768 [ 178.728055][ T6893] (syz.3.951,6893,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.753455][ T5332] usb 1-1: USB disconnect, device number 13 [ 178.776791][ T6893] (syz.3.951,6893,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.807572][ T6914] loop4: detected capacity change from 0 to 512 [ 178.845695][ T6893] JBD2: Ignoring recovery information on journal [ 178.865970][ T6914] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 178.884256][ T6909] fido_id[6909]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 178.950427][ T6914] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 178.965783][ T6914] System zones: 1-12 [ 178.974423][ T6914] EXT4-fs (loop4): orphan cleanup on readonly fs [ 179.024680][ T6893] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 179.043469][ T6914] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.961: bg 0: block 361: padding at end of block bitmap is not set [ 179.066000][ T6914] EXT4-fs (loop4): Remounting filesystem read-only [ 179.073387][ T6914] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 179.084280][ T6914] EXT4-fs (loop4): Remounting filesystem read-only [ 179.112165][ T6914] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.961: invalid indirect mapped block 12 (level 1) [ 179.135391][ T6914] EXT4-fs (loop4): Remounting filesystem read-only [ 179.144577][ T6914] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.961: invalid indirect mapped block 2 (level 2) [ 179.166071][ T6914] EXT4-fs (loop4): Remounting filesystem read-only [ 179.178947][ T6914] EXT4-fs (loop4): 1 truncate cleaned up [ 179.185962][ T6914] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,acl,inode_readahead_blks=0x0000000000000040,errors=remount-ro,init_itable. Quota mode: none. [ 179.401929][ T4198] ocfs2: Unmounting device (7,3) on (node local) [ 179.564549][ T4891] kernel write not supported for file /dummy_udc (pid: 4891 comm: kworker/1:13) [ 179.705048][ T6937] set_capacity_and_notify: 1 callbacks suppressed [ 179.705066][ T6937] loop4: detected capacity change from 0 to 22 [ 179.742893][ T6941] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.792071][ T6937] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 179.831226][ T6937] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 179.983426][ T6944] loop5: detected capacity change from 0 to 2048 [ 180.045597][ T6944] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.062617][ T6947] loop0: detected capacity change from 0 to 4096 [ 180.244676][ T6954] binder: 6951:6954 ioctl c0306201 200000000080 returned -14 [ 180.284097][ T6955] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.810722][ T6980] loop0: detected capacity change from 0 to 512 [ 180.821752][ T6976] loop1: detected capacity change from 0 to 2048 [ 180.888131][ T6982] loop4: detected capacity change from 0 to 64 [ 180.897469][ T6976] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.941560][ T6980] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 180.949667][ T6980] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 181.092803][ T6982] hfs: keylen 1794 too large [ 181.098554][ T6982] hfs: keylen 1794 too large [ 181.163445][ T6991] hfs: keylen 1794 too large [ 181.198849][ T6980] EXT4-fs (loop0): 1 truncate cleaned up [ 181.236742][ T6980] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 181.382603][ T6998] loop5: detected capacity change from 0 to 8 [ 181.471273][ T7005] loop3: detected capacity change from 0 to 512 [ 181.546113][ T7005] EXT4-fs (loop3): Ignoring removed bh option [ 181.557428][ T7005] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 181.582966][ T7005] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.998: inode has both inline data and extents flags [ 181.606747][ T7005] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.998: couldn't read orphan inode 15 (err -117) [ 181.665835][ T7005] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,init_itable=0x0000000000000001,bsddf,nouid32,max_dir_size_kb=0x0000000000000003,bh,data=journal,,errors=continue. Quota mode: none. [ 181.711232][ T4892] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 181.731379][ T1324] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 181.767793][ T7007] loop0: detected capacity change from 0 to 4096 [ 181.891351][ T7014] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.006805][ T1324] usb 2-1: Using ep0 maxpacket: 16 [ 182.049233][ T7016] loop5: detected capacity change from 0 to 1024 [ 182.084387][ T4892] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.151283][ T7016] EXT4-fs (loop5): Mount option "journal_ioprio=0x0000000000000006" incompatible with ext2 [ 182.162710][ T1324] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 182.192355][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.236078][ T1324] usb 2-1: config 0 descriptor?? [ 182.281503][ T4892] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.290664][ T4892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.323779][ T1324] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 182.361134][ T4892] usb 5-1: Product: syz [ 182.374830][ T4892] usb 5-1: Manufacturer: syz [ 182.389720][ T4892] usb 5-1: SerialNumber: syz [ 182.812867][ T7022] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 182.897402][ T7035] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.948480][ T7035] EXT4-fs (loop0): shut down requested (1) [ 183.014735][ T4198] ocfs2: Unmounting device (7,3) on (node local) [ 183.178661][ T7029] F2FS-fs (loop5): invalid crc value [ 183.189273][ T7029] F2FS-fs (loop5): Found nat_bits in checkpoint [ 183.374081][ T7029] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 183.401497][ T1324] gspca_sonixj: reg_w1 err -71 [ 183.441218][ T1324] sonixj: probe of 2-1:0.0 failed with error -71 [ 183.458313][ T1324] usb 2-1: USB disconnect, device number 10 [ 183.499256][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'. [ 183.564755][ T6251] attempt to access beyond end of device [ 183.564755][ T6251] loop5: rw=2049, want=45104, limit=40427 [ 183.572549][ T4892] cdc_ncm 5-1:1.0: bind() failure [ 183.598959][ T4892] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 183.652279][ T4892] cdc_ncm 5-1:1.1: bind() failure [ 183.688045][ T4892] usb 5-1: USB disconnect, device number 10 [ 184.717453][ T7088] set_capacity_and_notify: 3 callbacks suppressed [ 184.717472][ T7088] loop5: detected capacity change from 0 to 2048 [ 184.823762][ T7064] loop3: detected capacity change from 0 to 32768 [ 184.852087][ T7088] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 184.883185][ T7088] NILFS (loop5): mounting unchecked fs [ 184.903563][ T4311] udevd[4311]: incorrect nilfs2 checksum on /dev/loop5 [ 184.987983][ T7088] NILFS (loop5): recovery complete [ 185.047259][ T7064] XFS (loop3): Mounting V5 Filesystem [ 185.090349][ T7100] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.133968][ T7072] loop0: detected capacity change from 0 to 32768 [ 185.305604][ T7086] loop1: detected capacity change from 0 to 32768 [ 185.325294][ T7064] XFS (loop3): Ending clean mount [ 185.344194][ T7072] XFS (loop0): Mounting V5 Filesystem [ 185.460561][ T4198] XFS (loop3): Unmounting Filesystem [ 185.529878][ T7086] XFS (loop1): Mounting V5 Filesystem [ 185.632646][ T7072] XFS (loop0): Ending clean mount [ 185.756857][ T7086] XFS (loop1): Ending clean mount [ 186.005754][ T4196] XFS (loop1): Unmounting Filesystem [ 186.094040][ T7135] loop5: detected capacity change from 0 to 2048 [ 186.166183][ T7135] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 186.249153][ T4186] XFS (loop0): Unmounting Filesystem [ 186.258941][ T7135] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 186.342848][ T7135] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.370013][ T7137] 9pnet: p9_errstr2errno: server reported unknown error 000000000000000000000040x0000000000000003.cÖ,iŠ [ 186.606355][ T26] audit: type=1326 audit(1785856486.213:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.3.1047" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4570d2019 code=0x0 [ 186.714079][ T7145] loop4: detected capacity change from 0 to 128 [ 187.205800][ T4230] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 187.333293][ T7165] loop4: detected capacity change from 0 to 4096 [ 187.460796][ T7168] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.520234][ T7165] NILFS (loop4): error -2 reading inode: ino=835371204608 [ 187.551478][ T4230] usb 6-1: not running at top speed; connect to a high speed hub [ 187.631539][ T4230] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 187.646718][ T4230] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 187.656448][ T4230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.712969][ T4230] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 187.771980][ T4230] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 187.830260][ T7159] loop1: detected capacity change from 0 to 32768 [ 187.904952][ T7159] XFS (loop1): Mounting V5 Filesystem [ 187.998869][ T7190] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1062'. [ 188.051249][ T7159] XFS (loop1): Ending clean mount [ 188.059359][ T7192] loop3: detected capacity change from 0 to 256 [ 188.198102][ T4890] usb 6-1: USB disconnect, device number 4 [ 188.231135][ T4890] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 188.259097][ T4890] garmin_gps 6-1:1.0: device disconnected [ 188.459392][ T4196] XFS (loop1): Unmounting Filesystem [ 188.625214][ T5342] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 188.882361][ T7211] tap0: tun_chr_ioctl cmd 2147774992 [ 188.896101][ T4890] kernel write not supported for file /sequencer (pid: 4890 comm: kworker/1:12) [ 188.904733][ T7211] tap0: tun_chr_ioctl cmd 2147767517 [ 189.108736][ T7222] loop5: detected capacity change from 0 to 256 [ 189.281453][ T5342] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 189.290725][ T5342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.317872][ T5342] usb 1-1: Product: syz [ 189.322219][ T5342] usb 1-1: Manufacturer: syz [ 189.337169][ T5342] usb 1-1: SerialNumber: syz [ 189.395229][ T7224] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 189.511734][ T7224] EXT4-fs (loop4): 1 truncate cleaned up [ 189.517535][ T7224] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.592104][ T7216] JBD2: Ignoring recovery information on journal [ 189.753269][ T7216] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 189.933081][ T4196] ocfs2: Unmounting device (7,1) on (node local) [ 190.089685][ T7245] set_capacity_and_notify: 3 callbacks suppressed [ 190.089704][ T7245] loop5: detected capacity change from 0 to 1024 [ 190.137836][ T7247] loop4: detected capacity change from 0 to 128 [ 190.151394][ T5332] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 190.237830][ T7247] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.281332][ T7247] ext4 filesystem being mounted at /218/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.320021][ T7247] fscrypt (loop4, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 190.601615][ T5332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.622868][ T5332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.705169][ T5332] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 190.741063][ T5332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.796552][ T5332] usb 4-1: config 0 descriptor?? [ 191.033616][ T7243] loop1: detected capacity change from 0 to 40427 [ 191.117344][ T7243] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 191.157098][ T7243] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 191.271778][ T7243] F2FS-fs (loop1): Found nat_bits in checkpoint [ 191.284558][ T5332] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 191.313383][ T7263] device ipvlan2 entered promiscuous mode [ 191.322641][ T5332] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 191.344623][ T7263] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 191.365758][ T5332] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 191.395998][ T5332] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 191.413131][ T5332] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 191.457783][ T5332] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 191.477792][ T7243] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 191.488560][ T7243] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 191.503341][ T7254] loop5: detected capacity change from 0 to 131072 [ 191.515823][ T4891] Bluetooth: hci1: command 0x0406 tx timeout [ 191.522208][ T4891] Bluetooth: hci3: command 0x0406 tx timeout [ 191.528282][ T4891] Bluetooth: hci0: command 0x0406 tx timeout [ 191.557535][ T7254] F2FS-fs (loop5): Test dummy encryption mode enabled [ 191.566435][ T7254] F2FS-fs (loop5): invalid crc value [ 191.581497][ T7254] F2FS-fs (loop5): Found nat_bits in checkpoint [ 191.628557][ T7254] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 191.650781][ T7254] F2FS-fs (loop5): Start checkpoint disabled! [ 191.670688][ T7254] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 191.721440][ T7254] F2FS-fs (loop5): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 191.962296][ T5342] rtl8150 1-1:1.0: couldn't reset the device [ 191.968614][ T5342] rtl8150: probe of 1-1:1.0 failed with error -5 [ 191.990202][ T5342] usb 1-1: USB disconnect, device number 14 [ 192.068399][ T5332] playstation 0003:054C:0DF2.000B: Failed to retrieve feature with reportID 5: -71 [ 192.088232][ T5332] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense calibration info: -71 [ 192.134844][ T5332] playstation 0003:054C:0DF2.000B: Failed to get calibration data from DualSense [ 192.144525][ T5332] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 192.154340][ T5332] playstation: probe of 0003:054C:0DF2.000B failed with error -71 [ 192.195048][ T7278] Invalid ELF header len 8 [ 192.213101][ T5332] usb 4-1: USB disconnect, device number 14 [ 192.282567][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1100'. [ 192.391391][ T5342] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 192.406198][ T7281] fido_id[7281]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 192.651310][ T5342] usb 1-1: Using ep0 maxpacket: 8 [ 192.702986][ T7291] loop3: detected capacity change from 0 to 128 [ 192.781354][ T5342] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 192.822072][ T7291] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 192.833934][ T5342] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 192.872502][ T5342] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.873778][ T7291] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.925468][ T5342] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.970908][ T5342] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 193.017768][ T5342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.241275][ T5342] usb 1-1: usb_control_msg returned -71 [ 193.247022][ T5342] usbtmc 1-1:16.0: can't read capabilities [ 193.308016][ T5342] usb 1-1: USB disconnect, device number 15 [ 193.344115][ T7308] loop3: detected capacity change from 0 to 256 [ 194.264389][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.270802][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.486769][ T7306] loop0: detected capacity change from 0 to 32768 [ 194.551122][ T4891] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 194.569113][ T7319] loop1: detected capacity change from 0 to 131072 [ 194.584445][ T7331] loop4: detected capacity change from 0 to 16 [ 194.618631][ T7319] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 194.627044][ T7319] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 194.645366][ T7319] F2FS-fs (loop1): invalid crc value [ 194.664927][ T7331] erofs: (device loop4): mounted with root inode @ nid 36. [ 194.695449][ T7319] F2FS-fs (loop1): Found nat_bits in checkpoint [ 194.704322][ T7306] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 194.757693][ T7319] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 194.764975][ T7319] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 194.797577][ T7319] F2FS-fs (loop1): checksum invalid, nid = 7, ino_of_node = 7, a6222242 vs. 7c4dd4cf [ 194.808212][ T4891] usb 4-1: Using ep0 maxpacket: 32 [ 194.814825][ T7319] F2FS-fs (loop1): checksum invalid, nid = 7, ino_of_node = 7, a6222242 vs. 7c4dd4cf [ 194.860561][ T7306] (syz.0.1109,7306,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 194.951601][ T4891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.978306][ T7342] loop5: detected capacity change from 0 to 512 [ 194.983332][ T4891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.037604][ T4891] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 195.047695][ T7339] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #64 has bitmap size 448 but physical max of 256 [ 195.085556][ T4891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.099188][ T7339] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 195.140431][ T7339] OCFS2: File system is now read-only. [ 195.148517][ T4891] usb 4-1: config 0 descriptor?? [ 195.153932][ T7339] (syz.0.1109,7339,1):ocfs2_test_suballoc_bit:2814 ERROR: read group 64 failed -30 [ 195.174545][ T7342] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.193974][ T7339] (syz.0.1109,7339,1):ocfs2_test_suballoc_bit:2825 ERROR: status = -30 [ 195.205186][ T7342] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.220116][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'. [ 195.267386][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'. [ 195.281310][ T7339] (syz.0.1109,7339,1):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -30 [ 195.311290][ T7344] netlink: 'syz.4.1120': attribute type 13 has an invalid length. [ 195.331286][ T7339] (syz.0.1109,7339,1):ocfs2_test_inode_bit:2896 ERROR: status = -30 [ 195.350143][ T7344] netlink: 'syz.4.1120': attribute type 14 has an invalid length. [ 195.381312][ T7339] (syz.0.1109,7339,1):ocfs2_get_parent:166 ERROR: test inode bit failed -30 [ 195.430407][ T7350] loop1: detected capacity change from 0 to 512 [ 195.533789][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 195.610549][ T7350] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.610670][ T7350] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.728594][ T4891] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 195.821222][ T4892] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 195.983428][ T7362] loop0: detected capacity change from 0 to 128 [ 195.999936][ T5338] usb 4-1: USB disconnect, device number 15 [ 196.101706][ T7362] FAT-fs (loop0): bogus number of reserved sectors [ 196.108399][ T7362] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 196.131410][ T7362] FAT-fs (loop0): Can't find a valid FAT filesystem [ 196.221319][ T4892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 196.301213][ T4892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.311499][ T4892] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 196.320807][ T4892] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 196.403892][ T7366] smpboot: CPU 1 is now offline [ 196.561223][ T4892] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 196.615430][ T4892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.691163][ T4892] usb 5-1: Product: syz [ 196.726646][ T4892] usb 5-1: Manufacturer: syz [ 196.768323][ T4892] usb 5-1: SerialNumber: syz [ 196.840269][ T7378] loop8: detected capacity change from 0 to 8 [ 196.866599][ T4340] Dev loop8: unable to read RDB block 8 [ 196.911173][ T4340] loop8: unable to read partition table [ 196.927976][ T7382] loop0: detected capacity change from 0 to 512 [ 196.955757][ T4340] loop8: partition table beyond EOD, truncated [ 196.984265][ T7378] Dev loop8: unable to read RDB block 8 [ 197.022819][ T7378] loop8: unable to read partition table [ 197.076466][ T7378] loop8: partition table beyond EOD, truncated [ 197.140797][ T7378] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 197.179128][ T4892] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 197.294230][ T4892] usb 5-1: USB disconnect, device number 11 [ 197.320324][ T7368] x86: Booting SMP configuration: [ 197.469321][ T7368] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 197.536822][ T0] kvm-clock: cpu 1, msr f103041, secondary cpu clock [ 197.551459][ T18] kvm-guest: stealtime: cpu 1, msr b9127440 [ 197.670666][ T6594] udevd[6594]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.183310][ T7402] loop3: detected capacity change from 0 to 4096 [ 198.311144][ T5342] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 198.337680][ T7403] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.394924][ T26] audit: type=1800 audit(1785856498.013:16): pid=7402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1145" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 198.419066][ T7384] loop0: detected capacity change from 0 to 32768 [ 198.559708][ T7384] JBD2: Ignoring recovery information on journal [ 198.566486][ T5342] usb 2-1: Using ep0 maxpacket: 8 [ 198.674248][ T7384] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 198.685280][ T7392] loop5: detected capacity change from 0 to 32768 [ 198.692366][ T5342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.711375][ T5342] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 198.751270][ T5342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.782512][ T5342] usb 2-1: config 0 descriptor?? [ 198.872370][ T7392] XFS (loop5): Mounting V5 Filesystem [ 198.906770][ T7384] overlayfs: upper fs does not support tmpfile. [ 198.924697][ T7384] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 198.980121][ T7384] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature [ 199.032655][ T5342] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 199.093411][ T7422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1148'. [ 199.104152][ T7392] XFS (loop5): Ending clean mount [ 199.170764][ T7384] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 199.215259][ T7384] OCFS2: File system is now read-only. [ 199.242321][ T6251] XFS (loop5): Unmounting Filesystem [ 199.257827][ T7384] (syz.0.1137,7384,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 199.280199][ T7384] (syz.0.1137,7384,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 199.292733][ T5342] usb 2-1: USB disconnect, device number 11 [ 199.312089][ T7384] (syz.0.1137,7384,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 199.361974][ T7384] (syz.0.1137,7384,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 199.375364][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 199.411843][ T7384] (syz.0.1137,7384,0):ocfs2_claim_metadata:2040 ERROR: status = -30 [ 199.420417][ T7384] (syz.0.1137,7384,0):ocfs2_claim_metadata:2053 ERROR: status = -30 [ 199.459033][ T7384] (syz.0.1137,7384,0):ocfs2_create_xattr_block:2891 ERROR: status = -30 [ 199.485837][ T7384] (syz.0.1137,7384,0):ocfs2_xattr_block_set:2972 ERROR: status = -30 [ 199.497260][ T7384] overlayfs: failed to set xattr on upper [ 199.522593][ T7384] overlayfs: ...falling back to index=off,metacopy=off. [ 199.529686][ T7384] overlayfs: upper fs missing required features. [ 199.642259][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 199.681155][ T5338] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 200.061332][ T5338] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.174528][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.201625][ T5338] usb 5-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 200.210794][ T5338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 200.218960][ T5339] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 200.228189][ T7442] sctp: [Deprecated]: syz.3.1158 (pid 7442) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.228189][ T7442] Use struct sctp_sack_info instead [ 200.255098][ T5338] usb 5-1: Product: syz [ 200.259578][ T5338] usb 5-1: Manufacturer: syz [ 200.322542][ T5338] usb_debug 5-1:1.0: debug converter detected [ 200.336840][ T5338] usb 5-1: debug converter now attached to ttyUSB0 [ 200.388656][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.481205][ T5339] usb 2-1: Using ep0 maxpacket: 8 [ 200.529933][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.541704][ T5338] usb 5-1: USB disconnect, device number 12 [ 200.573790][ T5338] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 200.601437][ T5339] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 200.614794][ T5338] usb_debug 5-1:1.0: device disconnected [ 200.626359][ T5339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.629401][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.713876][ T5339] pvrusb2: Hardware description: Terratec Grabster AV400 [ 200.731752][ T5339] pvrusb2: ********** [ 200.748545][ T5339] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 200.801992][ T5339] pvrusb2: Important functionality might not be entirely working. [ 200.835365][ T5339] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 200.887712][ T5339] pvrusb2: ********** [ 200.945506][ T2425] pvrusb2: Invalid write control endpoint [ 201.138151][ T2425] pvrusb2: Invalid write control endpoint [ 201.169854][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 201.211409][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 201.219080][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 201.298973][ T2425] pvrusb2: Device being rendered inoperable [ 201.366499][ T7429] pvrusb2: Attempted to execute control transfer when device not ok [ 201.392429][ T1324] usb 2-1: USB disconnect, device number 12 [ 201.421696][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 201.439677][ T7464] loop4: detected capacity change from 0 to 8192 [ 201.447425][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 201.468452][ T2425] pvrusb2: Attached sub-driver cx25840 [ 201.474979][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 201.485860][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 201.521370][ T5332] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 201.540220][ T7464] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 201.581777][ T7464] REISERFS (device loop4): using ordered data mode [ 201.617839][ T7464] reiserfs: using flush barriers [ 201.692675][ T7464] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 201.757934][ T7464] REISERFS (device loop4): checking transaction log (loop4) [ 201.781205][ T5332] usb 4-1: Using ep0 maxpacket: 16 [ 201.843224][ T7482] loop0: detected capacity change from 0 to 8 [ 201.901520][ T5332] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 201.949663][ T5332] usb 4-1: config 0 interface 0 has no altsetting 0 [ 201.964431][ T7482] SQUASHFS error: zlib decompression failed, data probably corrupt [ 201.992918][ T7482] SQUASHFS error: Failed to read block 0x9b: -5 [ 201.999228][ T7482] SQUASHFS error: Unable to read metadata cache entry [99] [ 202.013907][ T5332] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 202.053774][ T5332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.074061][ T7482] SQUASHFS error: Unable to read inode 0x127 [ 202.105479][ T5332] usb 4-1: config 0 descriptor?? [ 202.147863][ T7464] REISERFS (device loop4): Using tea hash to sort names [ 202.170176][ T7464] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 202.573945][ T5332] cypress 0003:04B4:DE61.000D: unknown main item tag 0x0 [ 202.587183][ T5332] cypress 0003:04B4:DE61.000D: unknown main item tag 0x0 [ 202.621150][ T5332] cypress 0003:04B4:DE61.000D: unknown main item tag 0x0 [ 202.638962][ T5332] cypress 0003:04B4:DE61.000D: unknown main item tag 0x0 [ 202.664370][ T5332] cypress 0003:04B4:DE61.000D: unknown main item tag 0x0 [ 202.688463][ T5332] cypress 0003:04B4:DE61.000D: unknown main item tag 0x0 [ 202.711499][ T5332] cypress 0003:04B4:DE61.000D: unknown main item tag 0x0 [ 202.735894][ T5332] cypress 0003:04B4:DE61.000D: item fetching failed at offset 26/33 [ 202.762852][ T5332] cypress 0003:04B4:DE61.000D: parse failed [ 202.785896][ T5332] cypress: probe of 0003:04B4:DE61.000D failed with error -22 [ 202.820864][ T5332] usb 4-1: USB disconnect, device number 16 [ 202.880017][ T7508] loop4: detected capacity change from 0 to 1024 [ 202.958890][ T7486] loop5: detected capacity change from 0 to 32768 [ 202.992892][ T5342] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 203.148252][ T7486] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 203.148252][ T7486] [ 203.226262][ T7486] ERROR: (device loop5): remounting filesystem as read-only [ 203.253938][ T7486] xtLookup: xtSearch returned -5 [ 203.272258][ T7486] free_index: error reading directory table [ 203.299962][ T7486] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 203.299962][ T7486] [ 203.362915][ T5342] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 203.382185][ T7486] xtLookup: xtSearch returned -5 [ 203.390539][ T5342] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 203.429000][ T7486] free_index: error reading directory table [ 203.445949][ T7486] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 203.445949][ T7486] [ 203.510932][ T7520] loop1: detected capacity change from 0 to 4096 [ 203.518373][ T7486] xtLookup: xtSearch returned -5 [ 203.539739][ T7486] free_index: error reading directory table [ 203.568652][ T7486] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 203.568652][ T7486] [ 203.591872][ T5342] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 203.605612][ T7486] xtLookup: xtSearch returned -5 [ 203.610620][ T7486] free_index: error reading directory table [ 203.617374][ T5342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.635971][ T5342] usb 1-1: Product: syz [ 203.640474][ T7486] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 203.640474][ T7486] [ 203.655112][ T5342] usb 1-1: Manufacturer: syz [ 203.659772][ T5342] usb 1-1: SerialNumber: syz [ 203.667344][ T7486] xtLookup: xtSearch returned -5 [ 203.681148][ T7486] free_index: error reading directory table [ 203.687181][ T7486] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 203.687181][ T7486] [ 203.708109][ T144] device hsr_slave_0 left promiscuous mode [ 203.708627][ T7486] xtLookup: xtSearch returned -5 [ 203.778852][ T144] device hsr_slave_1 left promiscuous mode [ 203.786134][ T7520] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 203.807214][ T7486] add_index: get/read_metapage failed! [ 203.824110][ T7520] ntfs3: loop1: Failed to load $Extend. [ 203.834796][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.849200][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.853073][ T7486] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 203.853073][ T7486] [ 203.889885][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.898720][ T7486] xtLookup: xtSearch returned -5 [ 203.903872][ T7486] free_index: error reading directory table [ 203.919755][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.947700][ T7486] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 203.947700][ T7486] [ 203.958376][ T5342] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 203.959528][ T144] device bridge_slave_1 left promiscuous mode [ 204.005626][ T7486] xtLookup: xtSearch returned -5 [ 204.040802][ T7486] free_index: error reading directory table [ 204.060852][ T7486] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 204.060852][ T7486] [ 204.080703][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.130457][ T7536] loop3: detected capacity change from 0 to 512 [ 204.141145][ T7486] xtLookup: xtSearch returned -5 [ 204.180021][ T7486] free_index: error reading directory table [ 204.200842][ T7486] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 204.200842][ T7486] [ 204.220826][ T144] device bridge_slave_0 left promiscuous mode [ 204.231331][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.231528][ T7486] xtLookup: xtSearch returned -5 [ 204.278424][ T7534] loop4: detected capacity change from 0 to 4096 [ 204.300880][ T7486] add_index: get/read_metapage failed! [ 204.392946][ T5332] usb 1-1: USB disconnect, device number 16 [ 204.453269][ T5332] usblp0: removed [ 204.469631][ T144] device veth1_macvtap left promiscuous mode [ 204.486487][ T144] device veth0_macvtap left promiscuous mode [ 204.497833][ T144] device veth1_vlan left promiscuous mode [ 204.510035][ T144] device veth0_vlan left promiscuous mode [ 204.535045][ T7534] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 204.651391][ T4894] Bluetooth: hci4: command 0x0406 tx timeout [ 204.741241][ T5329] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 204.991187][ T5329] usb 4-1: Using ep0 maxpacket: 32 [ 204.996656][ T5338] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 205.023228][ T7553] loop0: detected capacity change from 0 to 64 [ 205.121370][ T5329] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 205.130838][ T5329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.154219][ T5329] usb 4-1: config 0 descriptor?? [ 205.257253][ T144] team0 (unregistering): Port device team_slave_1 removed [ 205.261670][ T5338] usb 6-1: Using ep0 maxpacket: 32 [ 205.278724][ T144] team0 (unregistering): Port device team_slave_0 removed [ 205.301172][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.318827][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.396295][ T5338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.411232][ T5329] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 205.422856][ T5338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.427832][ T144] bond0 (unregistering): Released all slaves [ 205.439731][ T5329] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 205.456585][ T5338] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 205.467446][ T5338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.481550][ T5329] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 205.489129][ T5329] usb 4-1: media controller created [ 205.496343][ T5338] usb 6-1: config 0 descriptor?? [ 205.519009][ T5329] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.557476][ T7539] device syzkaller1 entered promiscuous mode [ 205.633590][ T5329] az6027: usb out operation failed. (-71) [ 205.661213][ T5329] az6027: usb out operation failed. (-71) [ 205.667192][ T5329] stb0899_attach: Driver disabled by Kconfig [ 205.686895][ T7558] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1192'. [ 205.696240][ T5329] az6027: no front-end attached [ 205.696240][ T5329] [ 205.741226][ T5329] az6027: usb out operation failed. (-71) [ 205.761425][ T5329] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 205.788603][ T5329] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 205.866765][ T5329] dvb-usb: schedule remote query interval to 400 msecs. [ 205.881932][ T7566] i2c i2c-0: delete_device: Can't find device in list [ 205.901264][ T5329] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 205.939330][ T5329] usb 4-1: USB disconnect, device number 17 [ 206.001503][ T5338] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 206.113879][ T7563] loop1: detected capacity change from 0 to 8192 [ 206.179145][ T5329] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 206.356989][ T5339] usb 6-1: USB disconnect, device number 5 [ 206.391287][ T5338] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 206.410990][ T7578] fido_id[7578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 206.448189][ T7574] loop4: detected capacity change from 0 to 8192 [ 206.591409][ T7574] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 206.611412][ T7574] REISERFS (device loop4): using ordered data mode [ 206.617981][ T7574] reiserfs: using flush barriers [ 206.637550][ T7574] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 206.660640][ T5338] usb 2-1: Using ep0 maxpacket: 16 [ 206.677728][ T7574] REISERFS (device loop4): checking transaction log (loop4) [ 206.781271][ T5338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.811317][ T5329] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 206.825282][ T5338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.857943][ T5338] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 206.921135][ T7574] REISERFS (device loop4): Using tea hash to sort names [ 206.959247][ T7574] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 206.969942][ T5338] usb 2-1: New USB device found, idVendor=045e, idProduct=0009, bcdDevice= 0.00 [ 206.999213][ T7602] loop5: detected capacity change from 0 to 256 [ 207.006435][ T5338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.052529][ T5338] usb 2-1: config 0 descriptor?? [ 207.143227][ T7602] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.175029][ T7602] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 207.204433][ T5329] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 207.241647][ T5329] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 207.258258][ T7602] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 207.280645][ T5329] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 207.313892][ T5329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.353239][ C1] blk_update_request: operation not supported error, dev loop5, sector 32 op 0x9:(WRITE_ZEROES) flags 0x800800 phys_seg 0 prio class 0 [ 207.482839][ T7605] loop0: detected capacity change from 0 to 4096 [ 207.560320][ T5338] hid-multitouch 0003:045E:0009.000F: unknown main item tag 0xd [ 207.601997][ T7605] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 207.644283][ T5338] hid-multitouch 0003:045E:0009.000F: hidraw0: USB HID v0.00 Device [HID 045e:0009] on usb-dummy_hcd.1-1/input0 [ 207.781123][ T5338] usb 2-1: USB disconnect, device number 13 [ 207.916828][ T7615] loop5: detected capacity change from 0 to 512 [ 207.973593][ T4186] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 207.984466][ T7612] fido_id[7612]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 208.147725][ T7615] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 208.177211][ T7615] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.531390][ T5329] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 208.584678][ T5329] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input14 [ 208.730564][ T7643] loop5: detected capacity change from 0 to 1024 [ 208.812503][ T5329] input: failed to attach handler kbd to device input14, error: -5 [ 208.884800][ T5329] usb 4-1: USB disconnect, device number 18 [ 209.891114][ T5339] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 210.282354][ T5339] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 210.313797][ T7687] loop0: detected capacity change from 0 to 736 [ 210.323390][ T5339] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 210.451324][ T5339] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.468530][ T7650] loop4: detected capacity change from 0 to 32768 [ 210.484878][ T5339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 210.518324][ T5339] usb 2-1: SerialNumber: syz [ 210.655892][ T7698] loop5: detected capacity change from 0 to 512 [ 210.670390][ T7650] XFS (loop4): Mounting V5 Filesystem [ 210.811811][ T5339] usb 2-1: bad CDC descriptors [ 210.828027][ T5339] usb 2-1: USB disconnect, device number 14 [ 210.846534][ T7698] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 210.957118][ T7650] XFS (loop4): Ending clean mount [ 210.975201][ T7698] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.244019][ T4190] XFS (loop4): Unmounting Filesystem [ 211.566551][ T5329] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 211.617498][ T5329] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 212.108859][ T7736] loop1: detected capacity change from 0 to 256 [ 212.676206][ T7731] chnl_net:caif_netlink_parms(): no params data found [ 212.955340][ T5342] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 212.984292][ T7766] loop1: detected capacity change from 0 to 1024 [ 213.057295][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.091162][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.099518][ T7731] device bridge_slave_0 entered promiscuous mode [ 213.120008][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.137184][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.201230][ T7731] device bridge_slave_1 entered promiscuous mode [ 213.231153][ T5342] usb 5-1: Using ep0 maxpacket: 16 [ 213.313648][ T7731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.353505][ T5342] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.372257][ T7731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.378848][ T5342] usb 5-1: config 0 has no interface number 0 [ 213.482092][ T7731] team0: Port device team_slave_0 added [ 213.511746][ T7731] team0: Port device team_slave_1 added [ 213.551328][ T5342] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 213.571596][ T5342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.587687][ T5342] usb 5-1: Product: syz [ 213.595921][ T5342] usb 5-1: Manufacturer: syz [ 213.600987][ T5342] usb 5-1: SerialNumber: syz [ 213.608994][ T5342] usb 5-1: config 0 descriptor?? [ 213.628799][ T7731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.648628][ T7731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.662903][ T5342] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 213.676751][ T7731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.732072][ T7731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.739183][ T7731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.852256][ T7731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.028542][ T7731] device hsr_slave_0 entered promiscuous mode [ 214.053343][ T7731] device hsr_slave_1 entered promiscuous mode [ 214.060127][ T7731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.092161][ T5329] Bluetooth: hci4: command 0x0409 tx timeout [ 214.121965][ T7731] Cannot create hsr debugfs directory [ 214.159863][ T7800] netlink: 'syz.5.1253': attribute type 1 has an invalid length. [ 214.370556][ T7810] tipc: Started in network mode [ 214.382146][ T7810] tipc: Node identity ac14142f, cluster identity 4711 [ 214.403072][ T7810] tipc: New replicast peer: 172.20.20.170 [ 214.417812][ T7810] tipc: Enabled bearer , priority 10 [ 214.482486][ T7812] tipc: New replicast peer: 0.0.0.0 [ 214.518131][ T144] IPVS: stopping backup sync thread 5980 ... [ 214.742313][ T7731] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 214.771370][ T5342] gspca_spca1528: reg_w err -71 [ 214.776548][ T5342] spca1528: probe of 5-1:0.1 failed with error -71 [ 214.811350][ T5342] usb 5-1: USB disconnect, device number 13 [ 214.813147][ T7731] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 214.858667][ T7731] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 214.883777][ T7731] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 214.906563][ T7826] device syzkaller1 entered promiscuous mode [ 215.058032][ T144] device hsr_slave_0 left promiscuous mode [ 215.069949][ T7831] loop0: detected capacity change from 0 to 128 [ 215.096892][ T144] device hsr_slave_1 left promiscuous mode [ 215.116335][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.144838][ T7831] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 215.167928][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.182698][ T144] device bridge_slave_1 left promiscuous mode [ 215.201871][ T7831] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.228367][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.233102][ T7831] ext2 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.259241][ T144] device bridge_slave_0 left promiscuous mode [ 215.266211][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.537716][ T144] team0 (unregistering): Port device team_slave_1 removed [ 215.631854][ T7843] loop4: detected capacity change from 0 to 512 [ 215.666670][ T144] team0 (unregistering): Port device team_slave_0 removed [ 215.731927][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.776097][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.977862][ T144] bond0 (unregistering): Released all slaves [ 216.065067][ T5342] tipc: Node number set to 2886997039 [ 216.207343][ T1324] Bluetooth: hci4: command 0x041b tx timeout [ 216.362322][ T7731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.397444][ T7864] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 216.457730][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.495984][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.531376][ T7731] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.595925][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.610347][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.637174][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.644353][ T4232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.731124][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.793637][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.815774][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1275'. [ 216.845522][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.879291][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.886464][ T4232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.918323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.930821][ T7879] loop1: detected capacity change from 0 to 4096 [ 216.949886][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1276'. [ 216.990904][ T7886] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1276'. [ 217.022260][ T7879] EXT4-fs (loop1): Test dummy encryption mode enabled [ 217.029437][ T7879] EXT4-fs (loop1): Ignoring removed orlov option [ 217.045558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.088398][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.128138][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.152660][ T7879] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 217.256985][ T7894] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 217.367483][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.383149][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.432137][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.449880][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.494059][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.551565][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.574286][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.593476][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.831450][ T1324] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 218.107416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.129239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.167100][ T7731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.201606][ T1324] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 218.225935][ T1324] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 218.251828][ T5342] Bluetooth: hci4: command 0x040f tx timeout [ 218.418729][ T1324] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 218.436195][ T1324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.468000][ T1324] usb 6-1: Product: syz [ 218.483585][ T1324] usb 6-1: Manufacturer: syz [ 218.497389][ T1324] usb 6-1: SerialNumber: syz [ 218.703322][ T7947] device syzkaller1 entered promiscuous mode [ 218.773700][ T1324] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 218.867923][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.892470][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.943940][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.963304][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.997051][ T7731] device veth0_vlan entered promiscuous mode [ 219.012990][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.042863][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.067893][ T7731] device veth1_vlan entered promiscuous mode [ 219.103701][ T7956] tipc: Started in network mode [ 219.112109][ T7956] tipc: Node identity ac14142f, cluster identity 4711 [ 219.127200][ T7956] tipc: New replicast peer: 172.20.20.170 [ 219.140875][ T7956] tipc: Enabled bearer , priority 10 [ 219.157784][ T7957] tipc: New replicast peer: 0.0.0.0 [ 219.170308][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 219.196172][ T5339] usb 6-1: USB disconnect, device number 6 [ 219.228076][ T7954] loop1: detected capacity change from 0 to 8192 [ 219.239725][ T5339] usblp0: removed [ 219.330735][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.366144][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.422582][ T7960] loop4: detected capacity change from 0 to 512 [ 219.435505][ T7731] device veth0_macvtap entered promiscuous mode [ 219.476714][ T7731] device veth1_macvtap entered promiscuous mode [ 219.546705][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.562497][ T7960] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.1291: corrupted in-inode xattr [ 219.581371][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.646579][ T7960] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1291: couldn't read orphan inode 15 (err -117) [ 219.677938][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.772132][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.791116][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.816633][ T7960] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 219.821153][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.868314][ T7960] openvswitch: netlink: Actions may not be safe on all matching packets [ 219.912083][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.961189][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.003494][ T7731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.049612][ T7967] device batadv_slave_1 entered promiscuous mode [ 220.098091][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.122019][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.157768][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.229027][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.283368][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.319513][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.332470][ T5342] Bluetooth: hci4: command 0x0419 tx timeout [ 220.351106][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.381065][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.451140][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.486694][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.500500][ T7994] loop1: detected capacity change from 0 to 512 [ 220.516849][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.552461][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.580328][ T7731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.617403][ T7966] device batadv_slave_1 left promiscuous mode [ 220.631882][ T5332] tipc: Node number set to 2886997039 [ 220.641111][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.670891][ T7994] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 220.688628][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.702729][ T7994] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 220.735593][ T7994] EXT4-fs (loop1): orphan cleanup on readonly fs [ 220.760565][ T7994] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #13: comm syz.1.1300: iget: bad i_size value: 12154761577498 [ 220.773041][ T7731] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.773277][ T7731] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.791735][ T7731] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.800570][ T7731] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.872295][ T7994] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1300: couldn't read orphan inode 13 (err -117) [ 220.901782][ T7994] EXT4-fs (loop1): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none. [ 221.063328][ T8001] loop0: detected capacity change from 0 to 8192 [ 221.156386][ T7994] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1300: dx entry: limit 65535 != root limit 120 [ 221.168848][ T1462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.202302][ T1462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.223263][ T8001] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 221.282901][ T8001] REISERFS (device loop0): using ordered data mode [ 221.310186][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 221.319726][ T7994] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1300: Corrupt directory, running e2fsck is recommended [ 221.342537][ T1462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.383930][ T8001] reiserfs: using flush barriers [ 221.409989][ T1462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.437653][ T8001] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 221.449208][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.462241][ T7994] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.1300: path /241/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 221.532374][ T8001] REISERFS (device loop0): checking transaction log (loop0) [ 221.962221][ T8001] REISERFS (device loop0): Using tea hash to sort names [ 222.003450][ T8001] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 222.282913][ T8001] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 222.546832][ T8043] loop4: detected capacity change from 0 to 512 [ 222.738685][ T8043] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 222.822261][ T8043] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.946216][ T8058] loop6: detected capacity change from 0 to 2048 [ 223.071335][ T8058] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 223.118433][ T8058] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 223.240667][ T8058] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.257085][ T8067] loop0: detected capacity change from 0 to 256 [ 223.347732][ T8067] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.391136][ T8067] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 223.467976][ T8067] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 224.404477][ T8109] netlink: 'syz.0.1336': attribute type 10 has an invalid length. [ 224.454583][ T8109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1336'. [ 224.648122][ T8076] loop4: detected capacity change from 0 to 32768 [ 224.731849][ T26] audit: type=1800 audit(1785856524.353:17): pid=8076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1323" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 225.370907][ T8145] loop0: detected capacity change from 0 to 256 [ 225.692447][ T4893] kernel write not supported for file /input/mice (pid: 4893 comm: kworker/1:15) [ 226.037059][ T8170] loop4: detected capacity change from 0 to 256 [ 226.127194][ T8177] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1359'. [ 226.152808][ T8170] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 226.360517][ T8185] loop5: detected capacity change from 0 to 1024 [ 226.641083][ T1324] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 226.672815][ T8185] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,grpid,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 226.859290][ T5329] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 226.882179][ T5329] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 227.001512][ T5339] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 227.023110][ T1324] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 227.047325][ T1324] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 227.088269][ T1324] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 227.224018][ T8226] loop4: detected capacity change from 0 to 1024 [ 227.231490][ T1324] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 227.241241][ T5339] usb 1-1: Using ep0 maxpacket: 8 [ 227.248759][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 227.262647][ T1324] usb 2-1: Product: syz [ 227.270268][ T1324] usb 2-1: Manufacturer: syz [ 227.301528][ T8188] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 227.325021][ T1324] usb_debug 2-1:1.0: debug converter detected [ 227.335362][ T1324] usb 2-1: debug converter now attached to ttyUSB0 [ 227.361384][ T5339] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 227.390129][ T5339] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.450253][ T5339] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.504495][ T5339] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.520517][ T8226] hfsplus: xattr search failed [ 227.565104][ T8188] debug ttyUSB0: usb_serial_generic_write_start - error submitting urb: -90 [ 227.579749][ T5339] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.628479][ T5339] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 227.655165][ T5339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.690537][ T5329] usb 2-1: USB disconnect, device number 15 [ 227.709667][ T5329] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 227.727178][ T5329] usb_debug 2-1:1.0: device disconnected [ 227.931398][ T5339] usb 1-1: GET_CAPABILITIES returned 0 [ 227.936980][ T5339] usbtmc 1-1:16.0: can't read capabilities [ 228.121767][ T8248] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 228.181519][ T5329] usb 1-1: USB disconnect, device number 17 [ 228.317670][ T8255] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff [ 228.611434][ T5339] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 228.861194][ T5339] usb 6-1: Using ep0 maxpacket: 32 [ 228.894355][ T8278] loop0: detected capacity change from 0 to 128 [ 228.923684][ T8280] loop6: detected capacity change from 0 to 512 [ 228.981656][ T5339] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 228.998821][ T5339] usb 6-1: config 0 has no interface number 0 [ 229.082084][ T8278] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 229.101329][ T8278] ext4 filesystem being mounted at /307/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 229.133504][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.191348][ T5339] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 229.206591][ T8289] loop1: detected capacity change from 0 to 8192 [ 229.223578][ T5339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.248053][ T5339] usb 6-1: Product: syz [ 229.264084][ T5339] usb 6-1: Manufacturer: syz [ 229.269042][ T5339] usb 6-1: SerialNumber: syz [ 229.288471][ T8280] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 229.306895][ T5339] usb 6-1: config 0 descriptor?? [ 229.339573][ T8289] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 229.359472][ T8289] REISERFS (device loop1): using ordered data mode [ 229.382645][ T8289] reiserfs: using flush barriers [ 229.429758][ T5339] smsc95xx v2.0.0 [ 229.448479][ T8280] EXT4-fs (loop6): 1 truncate cleaned up [ 229.491191][ T8289] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 229.582791][ T8289] REISERFS (device loop1): checking transaction log (loop1) [ 229.661106][ T8280] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,init_itable,,errors=continue. Quota mode: none. [ 229.784831][ T8305] loop4: detected capacity change from 0 to 64 [ 229.801546][ T5339] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 229.811133][ T26] audit: type=1800 audit(1785856529.423:18): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1386" name="cgroup" dev="loop6" ino=18 res=0 errno=0 [ 229.821260][ T5339] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 229.946451][ T8289] REISERFS (device loop1): Using tea hash to sort names [ 229.985518][ T8289] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 230.066463][ T144] ------------[ cut here ]------------ [ 230.081834][ T144] kernel BUG at fs/hfs/inode.c:447! [ 230.116816][ T8312] loop0: detected capacity change from 0 to 512 [ 230.131094][ T144] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 230.137243][ T144] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 230.144825][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.155090][ T144] Workqueue: writeback wb_workfn (flush-7:4) [ 230.161132][ T144] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 230.166725][ T144] Code: 8d ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 51 cc 8d ff e9 43 fe ff ff e8 97 a9 48 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 230.186487][ T144] RSP: 0018:ffffc900016af3a0 EFLAGS: 00010293 [ 230.192644][ T144] RAX: ffffffff82305319 RBX: ffff8880771c2898 RCX: ffff888017bcd940 [ 230.200654][ T144] RDX: 0000000000000000 RSI: ffffffff8c4e3080 RDI: 0000000000000000 [ 230.208667][ T144] RBP: ffffc900016af530 R08: ffff888017bcd940 R09: 0000000000000003 [ 230.216799][ T144] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 230.224818][ T144] R13: 1ffff920002d5e78 R14: 0000000000000000 R15: ffff8880771c2858 [ 230.232832][ T144] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 230.241802][ T144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.248427][ T144] CR2: 00007f77e7597000 CR3: 0000000056d26000 CR4: 00000000003506f0 [ 230.256440][ T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 230.264462][ T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 230.272476][ T144] Call Trace: [ 230.275788][ T144] [ 230.278749][ T144] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 230.284174][ T144] ? __writeback_single_inode+0x46d/0xda0 [ 230.289935][ T144] ? __rwlock_init+0x140/0x140 [ 230.294742][ T144] __writeback_single_inode+0x6c4/0xda0 [ 230.300326][ T144] writeback_sb_inodes+0xaaa/0x1750 [ 230.305575][ T144] ? queue_io+0x530/0x530 [ 230.309938][ T144] ? move_expired_inodes+0x722/0x770 [ 230.315274][ T144] ? rcu_is_watching+0x11/0xa0 [ 230.320124][ T144] ? queue_io+0x3ba/0x530 [ 230.324580][ T144] wb_writeback+0x44a/0xbc0 [ 230.329130][ T144] ? rcu_lock_release+0x20/0x20 [ 230.334017][ T144] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 230.340138][ T144] ? __lock_acquire+0x7b50/0x7b50 [ 230.345207][ T144] ? _raw_spin_unlock_irq+0x1f/0x40 [ 230.350436][ T144] wb_workfn+0x43a/0xf20 [ 230.354730][ T144] ? inode_wait_for_writeback+0x220/0x220 [ 230.360583][ T144] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 230.366599][ T144] ? __lock_acquire+0x7b50/0x7b50 [ 230.371666][ T144] ? read_lock_is_recursive+0x10/0x10 [ 230.377079][ T144] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 230.383150][ T144] ? _raw_spin_unlock+0x40/0x40 [ 230.388039][ T144] ? _raw_spin_unlock_irq+0x1f/0x40 [ 230.393281][ T144] process_one_work+0x867/0xff0 [ 230.398175][ T144] ? worker_detach_from_pool+0x240/0x240 [ 230.403844][ T144] ? lockdep_hardirqs_off+0x70/0x100 [ 230.409167][ T144] ? _raw_spin_lock_irq+0xb7/0xf0 [ 230.414229][ T144] ? _raw_spin_lock_irqsave+0x100/0x100 [ 230.419818][ T144] ? wq_worker_running+0x97/0x170 [ 230.426717][ T144] worker_thread+0xad7/0x12a0 [ 230.431446][ T144] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 230.437425][ T144] kthread+0x42e/0x520 [ 230.441541][ T144] ? rcu_lock_release+0x20/0x20 [ 230.446428][ T144] ? kthread_blkcg+0xd0/0xd0 [ 230.451050][ T144] ret_from_fork+0x1f/0x30 [ 230.455526][ T144] [ 230.458589][ T144] Modules linked in: [ 230.462741][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.537387][ T8312] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 230.548953][ T8312] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 230.566492][ T8312] EXT4-fs (loop0): orphan cleanup on readonly fs [ 230.573229][ T8312] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #13: comm syz.0.1395: iget: bad i_size value: 12154761577498 [ 230.611862][ T8312] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1395: couldn't read orphan inode 13 (err -117) [ 230.643245][ T8312] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none. [ 230.681243][ T5339] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 230.694848][ T8312] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1395: dx entry: limit 65535 != root limit 120 [ 230.721326][ T5339] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 230.741239][ T5339] usb 6-1: USB disconnect, device number 7 [ 230.747583][ T8312] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1395: Corrupt directory, running e2fsck is recommended [ 230.802847][ T8312] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.1395: path /310/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 230.835206][ T144] ---[ end trace 16bcb0968e59bc86 ]--- [ 230.861114][ T144] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 230.884330][ T144] Code: 8d ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 51 cc 8d ff e9 43 fe ff ff e8 97 a9 48 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 230.928985][ T144] RSP: 0018:ffffc900016af3a0 EFLAGS: 00010293 [ 230.946489][ T144] RAX: ffffffff82305319 RBX: ffff8880771c2898 RCX: ffff888017bcd940 [ 230.966537][ T144] RDX: 0000000000000000 RSI: ffffffff8c4e3080 RDI: 0000000000000000 [ 230.990061][ T144] RBP: ffffc900016af530 R08: ffff888017bcd940 R09: 0000000000000003 [ 231.008741][ T144] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 231.030196][ T144] R13: 1ffff920002d5e78 R14: 0000000000000000 R15: ffff8880771c2858 [ 231.042291][ T144] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 231.061277][ T144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.075914][ T144] CR2: 000055a56c8bf950 CR3: 0000000062860000 CR4: 00000000003506f0 [ 231.094434][ T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 231.114706][ T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 231.131081][ T144] Kernel panic - not syncing: Fatal exception [ 231.137419][ T144] Kernel Offset: disabled [ 231.141894][ T144] Rebooting in 86400 seconds..