last executing test programs: 15m42.308486072s ago: executing program 32 (id=183): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x808040, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2cc, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000) 14m47.777889815s ago: executing program 33 (id=787): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x4, 0x9, 0xa0363159, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x8, 0x0, 0x7}}) 14m41.286316833s ago: executing program 34 (id=837): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000003780)=[{{&(0x7f0000002500)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000003580)=[{&(0x7f0000002540)="9d", 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0xfff, 0x4}, &(0x7f0000000640)=0x90) 12m1.622323479s ago: executing program 35 (id=2242): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000040)='tracefs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x2240, 0x0) 11m26.884946761s ago: executing program 36 (id=2333): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc_mnt\x00', 0x1cc) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) 10m56.206743273s ago: executing program 37 (id=2457): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) 10m2.364737922s ago: executing program 38 (id=2721): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 6m54.717123562s ago: executing program 0 (id=3763): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x2, 0x1, 0x100000000000000, 0x80000000}) 6m54.444923678s ago: executing program 0 (id=3765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_read_part_table(0x4094, &(0x7f0000006600)="$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") 6m51.300491115s ago: executing program 6 (id=3783): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x1000400, &(0x7f0000000000)=ANY=[], 0x2, 0x679, &(0x7f0000020540)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x101000, 0x108) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x40}) 6m50.892870035s ago: executing program 6 (id=3787): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2) unshare(0xe040400) pselect6(0x40, &(0x7f00000001c0)={0xe, 0x80, 0x5, 0x2, 0x1, 0x0, 0x3ff, 0x8}, 0x0, 0x0, &(0x7f0000000280), 0x0) 6m50.68799609s ago: executing program 0 (id=3788): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 6m50.595246202s ago: executing program 6 (id=3789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3b}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '.\xfa\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 6m50.410600847s ago: executing program 0 (id=3790): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 6m50.259032081s ago: executing program 6 (id=3791): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="05000000060c0000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000400100000000000040"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x30004084) 6m49.128528819s ago: executing program 6 (id=3794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1728}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6m49.026263701s ago: executing program 0 (id=3795): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="40032f"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6m48.691092589s ago: executing program 6 (id=3796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f00000003c0)=[{0x30, 0x4a, 0x4, 0xfffff03c}, {0x6, 0x7, 0xff, 0xf02}]}) 6m48.321116098s ago: executing program 1 (id=3798): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0xfffffc74, 0x0, 0xffffffffffffffff}) 6m48.175722072s ago: executing program 1 (id=3799): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1, 0x1}, 0xc) 6m47.905056909s ago: executing program 1 (id=3800): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dlmfs_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./dlmfs_mnt\x00', &(0x7f0000000300)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./dlmfs_mnt/domain1\x00', 0x1ff) 6m47.516731418s ago: executing program 1 (id=3801): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) 6m47.221622775s ago: executing program 1 (id=3802): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00', 0x10, 0x0, 0xe}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'rr\x00', 0x3a, 0x4, 0x15}, 0x2c) 6m46.963800962s ago: executing program 1 (id=3803): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 6m45.738314222s ago: executing program 0 (id=3806): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0x6}, [@typed={0x4}, @typed={0xc, 0xb, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) 6m33.349525575s ago: executing program 39 (id=3796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f00000003c0)=[{0x30, 0x4a, 0x4, 0xfffff03c}, {0x6, 0x7, 0xff, 0xf02}]}) 6m31.803176943s ago: executing program 40 (id=3803): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 6m30.31125661s ago: executing program 41 (id=3806): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0x6}, [@typed={0x4}, @typed={0xc, 0xb, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) 3m17.280266068s ago: executing program 4 (id=4521): r0 = add_key$user(&(0x7f0000005e00), &(0x7f0000005e40)={'syz', 0x2}, &(0x7f0000005e80)="15408d613149608734145a649898580314aca246ba1d", 0x16, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000005f80), &(0x7f0000005fc0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, r1, 0x0) 3m17.031522314s ago: executing program 4 (id=4522): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m16.084165128s ago: executing program 4 (id=4526): r0 = syz_io_uring_setup(0x67eb, &(0x7f0000000000)={0x0, 0x2d76, 0x0, 0xfffffffd, 0x1000028b}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000340)={0x2e, 0x21, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x1, 0x7d6, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x20}}}, &(0x7f00000003c0)) 3m14.965059215s ago: executing program 4 (id=4534): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000300)={[{@noblock_validity}]}, 0x0, 0xbc8, &(0x7f0000002380)="$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") mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) futimesat(r0, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000340)={{0x0, 0x2710}}) 3m13.734270726s ago: executing program 4 (id=4539): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000400)={0x0, 0x0}) 3m11.639962437s ago: executing program 4 (id=4545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x19, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8af}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 3m11.090649771s ago: executing program 42 (id=4545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x19, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8af}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 1m32.671338737s ago: executing program 2 (id=5498): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r1, 0x60b, 0x70bd2d, 0x3, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x38}}, 0x20000000) 1m32.54372119s ago: executing program 2 (id=5502): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x200e}) 1m32.350984055s ago: executing program 2 (id=5506): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 1m32.014501733s ago: executing program 2 (id=5510): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 1m31.245161031s ago: executing program 2 (id=5516): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000200)=0xd, 0x4) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x24000000) 1m30.675635386s ago: executing program 2 (id=5524): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m30.138144479s ago: executing program 43 (id=5524): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.320491689s ago: executing program 7 (id=6413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 2.990391487s ago: executing program 7 (id=6417): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303038303061302c66696c655f756d61736b3d30303030303030303030303030303030303030303030372c636f6465706167653d69736f383835392d31342c696f636861727365743d63703836392c00b1d05817e6068b848902dabc761fe722e8d5cb7f78cd7ddf5652d62fe8fe"], 0x9, 0x344, &(0x7f0000000980)="$eJzs3U9r1EwcB/DvJLvb7LOlT2wrBU9SLXgqbT0oHrRI8eIb8CDF2m6hNFbQCloQq2cRb4Lg0Ztn0begF/ENKB4Kiie9FA9GZjLJJutMNk233db9fsDd7Gb+/CaZSWZaakBEfevi3KeXp7fkP1EF4AI4BzgAPKAC4CjGvDtr6x0LcpMtgSin+CvN4lrTlNWDzqH58lMFg+nvaG+EYRh+tu/+cl69/di/gKgnRHoEpzjAABw1EtV+b98j2xubsl39JnWGxTa2cRdDvQyHiIh6T9//HX2XGNTzd8cBJvQ8/LDf/zPzm+3exXEgJPd/J/ocCnl8/le75HpvZT1oLkVLOHn2nXiVaCrL2CdCFzW9qd4dwG2kplypWsxULE59eSVoTm6qAh7hgpZKNqpelxA3RCaFLVod0bhhbZojr+35GqoNVdmGGUv8I3k1GhfAb7/hmbm6+fcFYhLvxAcxL3w8x1Iy/6uEQh4cdXz8tqESxT9lL1G10o9SZVrZCv+IquRYfAbevGq1sm47rh5cGYuJLEW0z9/9OM6nNXsuDCP7Y4WoddP21qlcI0BF6M7VyjWTJPplzDXaXld9uRo0JxdvBrZO313GFZ14Iq6IcXzHa8yl5v+OTD0B+8jMjHKhUuqekdueikppOY8ZagDfKD4yq4VT/usuGU90m6/Zj49xHWcxdPvexupCEDRv9X4jHiolsx/vcjxRR9TdUX4j31Np4MkN2Qm7VunvMAyNuyooWI4cpKXDiAbUmRetJm+sLgh9zdtdA+WVs23XrD0xgFkA+pv4ilCm9gdJrgFdoF8w+095ttU35g4ZR7UPAySuKrPLxUChkVIvUenl+6sLQemrER0irZOOsavJBFnijwb7hJx3iWj9l1qvTKmrjnzxc9Y/YafCUyVOW1ZAw+r1v2QFp3RYczXsK7hGvNFhzXXiFHCylq3RQVzjw/ZifR0nDuJvJXf+qwwxh4+4xkFORERERERERERERERERERERERERHTY7PSvEcr8OUG2xq0+/I83iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIh2p/X83+T5LjXT83/zntSkuNETYrxuPP/XLfD8X7FZrIFEZPUnAAD//2/CX5Q=") read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 2.666992535s ago: executing program 7 (id=6421): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xffffffff], [], 'erspan0\x00', 'geneve1\x00', {}, {}, 0x4}, 0x0, 0x168, 0x198, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x1, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0xfe}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x172f, 0x32, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x6, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1"], 0x0}, 0x0) 2.628114496s ago: executing program 3 (id=6423): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r2}) 2.494989199s ago: executing program 3 (id=6425): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00000007c0)=0x200, 0x4) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{&(0x7f00000003c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000002ac0)=[{&(0x7f0000001ac0)="d601d16048df06215f3b5e687b95b64a57424df9b9d7dcd2ae102ca5ff9d9884e700bd6a3e9181c2809470848cdae2939596261f45fde540519e5d95fc1e49b424b0210ce77ab001084138ba8dd634e40e3442c460b36d1b7e5d65cc37fc3e67801a64ed59c3023bf658975283e4ddfdd5fe1f1e899141117f2edf2ca51a4f153194219afd421e79e347053ad7cdbcba7361b3e3e0", 0x95}], 0x1}}], 0x1, 0x4000000) 2.335316653s ago: executing program 3 (id=6428): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="10337048eb", 0x5, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 2.247165276s ago: executing program 3 (id=6430): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x400, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$eJzs3V2IXFcBAOBzd3c2u2lrpjW1axrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZzMxmd+7O7vfB3TPnnnPnnDt75879O+cEYMOaWPq7uDhXhHDujZcPvf/AP2avzdnfylFf+jtVitVCCEWMT2Xv995kM7zywfPHuoVFWFj6m+Lh8UutZW8JIZwOO8L5UA/bzl146a2Fx46cOXx259uv7ru4OmsPAAAbyzfO71u8869/vvv2y6/dcyBsas1Px+f1NGOmedx/IB74p+P/idAZL0pT2XSWbypOE7Od+Sa75CuXU8vyTfUofzorv9Yj36Zw4/InS/O6rTeMs7Qd10MxMR9C2NyKT0zMzzfPycPSef10MX/qxMmnn62oosCK+/e9IYQdpeng2c74Wpv2r4E6LHNqrIE6jOV0YHRlXW40Vb7OI5oaW6reAwE05fcLr3M6v7Jwc1rvNjVY+Zcenei+PKyAUW//Q5U/XXH5Qfm/PmOPw8pZr1tTWq/0Pbo1xvP7CPnzS6/8oXO5tvxOR+fc/H5EbcB69rqPMC73F3rVc3LE9ViuXvXPt4v16isxTJ/DVztS7+34/uT/03H5HwPdfZhf/zeZTGt7Ch3x2s28V6Pi/Q+wduXPzTXS/dEof64vT9/UJ32mT/psn/TNfdJv6ZMOG9lvf/DT8GLRvt6Vn9MPez08XWe7LYYfGbI++fXIYcvPn/sd1s2Wnz9PDGvZ748+cfyLTz15ofn8f9Ha/q/G7T2dbtTjd+t8zJCuF+bX1VvP/tc7y5noke+OrD63dcm/9HprZ75ia/t9Qmk/c1095jqX29Ir3/bOfPUs32ycZrL65scnm7Pl0vFH2q+mz2sqW99ath7TWT3SfuX2GOb1gOVI22N6/r/dHqD5/H/aPudCrXj6xMnjj8R42k7/NFnbdG3+7hHXG1g5vb7/6fdrLnS2/7m1Nb82Ud4vbGnPL5r7hdfj+3XOX2iVU5pf+lFLv3Pfnpxdyj9/7Hsnn1qF9YaN7NkfP/edoydPHv++F8t+8bW1UY1hXqTTlrVSHy+GfbFjtYuoeMcErLpdLzQPAh4+8d2jzxx/5vipPXv37llY2PulPYu7lo7rd5WP7stOV1BbYCW1f/SrrgkAAAAAAAAAAAAwqB8ePnThnTe/8G6z/X+7/V9q/5+e/E3t/3+Stf/P28mndvCpHeDtXdKX8mQdrE5n+Wpx+mhW39QNQPFCM7wzW+5jMWyN4xfb/6fi8n5dU33uyubXekSz7gSu6y9lOuuDJB8v8L4Yno3hrwJUqJjtPjuGN+jfuviwtK2n/ilKTXgb+gceH+n/lvdflNp/d+3XqUt7bcbLKFosVr2OQHf/3FD9f/+rveKV18XUe5oabXk/27jbRKPnUfqgI9gArIyqx//8e2iWm65/nvrj12euTSnbpUc795d5/6UwjL+80xlf6+NPrnb5+bh9oy6/6vUf9fifrfHv4v4v7fd67/+yEfPqyyv3Pz+/+G6p2LBt0PLz9U/9QG8drvzLsfy0Ng+Gwcpv/DIrP78hNKD/ZuVvHrD869Z/+/LK/18sP31sD90/aPnNGhcTnfWYzdYj3f/LrxsnV7L1T3173qD8bz7Xbf2XOVDj1Vg+bGTjMs7ssLLjiNZBe7/xf4f9/b/Z8X9blc12a/lzGJ+P8bQjTs855OOdDFv/9HxF+h24M3v/os/vm/F/x9uXY9jv+5DG/03bYz3+5JfiS59lite6fLbrdV8D4+q9DXX/b1TTxeZp0PKWn6m+/qYhpsbkMpZrPWdVcf0bjcbqXtDqo9LCqfzzr/ruc9XnKfdVXH4/+fi/+TF8Pv5vnp6P/5un5+P/5umz8T/0fo/0fPzffHvOx//N0+/K3jcfH3iuT/rHu6QXoZ2+rfvyrdP2u/u8//Y+6Z/ok76zlb6/I0dKv+eGy7fz9Xr/O/qk398n/ZN90j/VJ/2BPukPldLLY0Cn9E9nyxdZ+nqX9j+9Pj9g/crb5/n+w8aR7v/0+v5vbadPl7OMtpbAanjltd0Hn/zNt+rN9v/Tresh6T7egRivxXOjH8V4ft87lOLX0t6M8b9l6VVfbwLa8v4z8t//B/ukA+MrPefl+w0bUDHTfXYM+/Vb1es4n/HymRh+Noafi+HDMZyP4a4Y7o7hwojqx+o4+Prv9r1YtM/3t2Tpgz5PnrcH6ugnKoSwZ8D65NcHhn2ePe/Hb1g3W/4ym4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUZmLp7+LiXBHCuTdePvTEkRO7rs3Z38pRX/o7VYrVWsuF8EgMJ2P4i/jiygfPHyuHV2NYhIVQhKI1Pzx+qVXSLSGE02FHOB/qYdu5Cy+9tfDYkTOHz+58+9V9F1fvEwAAAID17/8BAAD//092Bzk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1.537974003s ago: executing program 5 (id=6437): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/lru_gen\x00', 0x2, 0x172) write(r0, &(0x7f00000002c0)='+ 1 0 3 1', 0x9) 1.529134023s ago: executing program 3 (id=6438): r0 = socket$isdn(0x22, 0x2, 0x3) r1 = socket$isdn(0x22, 0x2, 0x2) r2 = dup3(r1, r0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) 1.336203668s ago: executing program 8 (id=6439): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, @dev}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 1.25932863s ago: executing program 3 (id=6440): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000009c0)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0}) 1.225482361s ago: executing program 9 (id=6441): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) connect$unix(r0, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 1.145765022s ago: executing program 8 (id=6442): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0xa, 0x2}) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x1, 0xa, 0x2}) 991.841876ms ago: executing program 9 (id=6443): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) unshare(0x22020600) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 986.355036ms ago: executing program 8 (id=6444): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x2020) 892.225489ms ago: executing program 5 (id=6445): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='mountproto\x00', &(0x7f0000000300)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 873.986029ms ago: executing program 8 (id=6446): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="c953"], 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 807.165131ms ago: executing program 9 (id=6447): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xd) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000011}) 737.062112ms ago: executing program 8 (id=6448): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 677.991684ms ago: executing program 5 (id=6449): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain= /new_domain\n', 0x65) 536.271997ms ago: executing program 9 (id=6450): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd02, &(0x7f0000000000)="040000000000000000000000380100000000000000b484589adec8e1c356") 530.407707ms ago: executing program 7 (id=6451): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000440)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000100)={0x0, 0x0, 0x8}) 515.643398ms ago: executing program 8 (id=6452): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009780)='./file0\x00', 0x4000, &(0x7f0000000080)={[{@inode32}, {@prjquota}, {@prjquota}]}, 0x1, 0x9839, &(0x7f0000025e80)="$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") lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) llistxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000100)=""/38, 0x26) 470.761969ms ago: executing program 5 (id=6453): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000500)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000a6", 0x28, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x0, 0x0, 0x0, 0xa, 0xc2, 0x1000, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f9f8117a638a8682f1c8fc0e7528fb2c"}]}}}}}}}}, 0x0) 382.552182ms ago: executing program 7 (id=6454): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/fcloop/ctl/del_remote_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000980)='w', 0x1) 334.399312ms ago: executing program 9 (id=6455): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e23, @empty}}}, 0x108) 193.243296ms ago: executing program 9 (id=6456): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./bus\x00', 0x800000, &(0x7f0000005e00)=ANY=[@ANYBLOB="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"/452], 0x1, 0x5516, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 191.354436ms ago: executing program 5 (id=6466): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r0, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setreuid(r1, r1) getpriority(0x2, r2) 137.272557ms ago: executing program 7 (id=6457): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x0) flock(r1, 0x5) 0s ago: executing program 5 (id=6458): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000680)=r1, 0x4) kernel console output (not intermixed with test programs): x2) checksum algorithm [ 928.489613][T28082] BTRFS info (device loop2): using free space tree [ 928.550688][ T957] usb 6-1: Using ep0 maxpacket: 16 [ 928.558480][ T957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.571438][ T957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.581460][ T957] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 928.595046][ T957] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 928.604187][ T957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.623433][ T957] usb 6-1: config 0 descriptor?? [ 928.747067][T28082] BTRFS info (device loop2): enabling ssd optimizations [ 928.890062][T21811] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 928.916398][T12695] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 929.221308][ T957] microsoft 0003:045E:07DA.0032: ignoring exceeding usage max [ 929.230363][ T957] microsoft 0003:045E:07DA.0032: ignoring exceeding usage max [ 929.283123][ T957] microsoft 0003:045E:07DA.0032: No inputs registered, leaving [ 929.371197][ T957] microsoft 0003:045E:07DA.0032: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 929.410450][ T957] microsoft 0003:045E:07DA.0032: no inputs found [ 929.427117][ T957] microsoft 0003:045E:07DA.0032: could not initialize ff, continuing anyway [ 929.478573][ T957] usb 6-1: USB disconnect, device number 10 [ 929.760978][T28209] fido_id[28209]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 929.822966][T26704] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (26704) [ 930.100574][T27736] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 930.290543][T27736] usb 9-1: Using ep0 maxpacket: 8 [ 930.299887][T27736] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 930.353466][T27736] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 930.393062][T27736] usb 9-1: Product: syz [ 930.397284][T27736] usb 9-1: Manufacturer: syz [ 930.430525][T27736] usb 9-1: SerialNumber: syz [ 930.453903][T27736] usb 9-1: config 0 descriptor?? [ 930.486586][T27736] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 930.888663][T28275] loop3: detected capacity change from 0 to 64 [ 931.093953][T27736] gspca_zc3xx: reg_w_i err -71 [ 931.104749][T27736] gspca_zc3xx: probe of 9-1:0.0 failed with error -71 [ 931.147990][T27736] usb 9-1: USB disconnect, device number 9 [ 931.247281][T28294] loop5: detected capacity change from 0 to 512 [ 931.295524][T28294] EXT4-fs: Ignoring removed oldalloc option [ 931.332167][T28294] EXT4-fs (loop5): Test dummy encryption mode enabled [ 931.393074][T28252] loop2: detected capacity change from 0 to 32768 [ 931.428954][T28294] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 931.455610][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.462128][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.510135][T28256] loop7: detected capacity change from 0 to 40427 [ 931.517930][T28252] XFS (loop2): Mounting V5 Filesystem [ 931.561195][T19698] EXT4-fs (loop5): unmounting filesystem. [ 931.703054][T28256] F2FS-fs (loop7): invalid crc value [ 931.723077][T28252] XFS (loop2): Ending clean mount [ 931.741563][T28256] F2FS-fs (loop7): Found nat_bits in checkpoint [ 931.757227][T28322] loop8: detected capacity change from 0 to 16 [ 931.812184][T28322] erofs: (device loop8): mounted with root inode @ nid 36. [ 931.958918][T12695] XFS (loop2): Unmounting Filesystem [ 931.967120][T28256] F2FS-fs (loop7): Start checkpoint disabled! [ 932.082662][T28256] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 932.434328][ T47] kworker/u4:3: attempt to access beyond end of device [ 932.434328][ T47] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 932.724161][T28356] loop8: detected capacity change from 0 to 64 [ 932.757016][T28358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5388'. [ 932.797473][T28358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5388'. [ 933.165791][T28379] loop7: detected capacity change from 0 to 4096 [ 933.207097][T28379] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 933.271585][T28379] ntfs: (device loop7): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 933.316491][ T4315] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 933.328193][T28379] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 933.347249][T28379] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 933.367172][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.434723][T28379] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 933.436425][T28386] loop2: detected capacity change from 0 to 128 [ 933.465152][T28379] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 933.485262][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.522652][ T4315] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 933.536801][T28386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 933.544992][ T4315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.553469][T28386] System zones: 1-3, 19-19, 35-36 [ 933.558666][ T4315] usb 6-1: Product: syz [ 933.564555][T28386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 933.573351][ T4315] usb 6-1: Manufacturer: syz [ 933.577975][ T4315] usb 6-1: SerialNumber: syz [ 933.584666][T28386] ext4 filesystem being mounted at /575/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 933.654731][T28364] loop3: detected capacity change from 0 to 32768 [ 933.677738][T28379] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 933.702788][ T4315] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 933.730938][T28379] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 933.750952][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.791090][T28364] [ 933.791090][T28364] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 933.791090][T28364] [ 933.833025][T12695] EXT4-fs (loop2): unmounting filesystem. [ 933.857309][T28364] ERROR: (device loop3): diWrite: ixpxd invalid [ 933.857309][T28364] [ 933.867243][T28379] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 933.904069][T28364] ERROR: (device loop3): txCommit: [ 933.904069][T28364] [ 933.913776][T28379] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 933.933878][ C1] vkms_vblank_simulate: vblank timer overrun [ 934.031137][T28379] ntfs: volume version 3.1. [ 934.082250][T21811] [ 934.082250][T21811] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 934.082250][T21811] [ 934.123346][T21811] [ 934.123346][T21811] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 934.123346][T21811] [ 934.277928][T28373] loop8: detected capacity change from 0 to 32768 [ 934.307570][T28373] XFS: attr2 mount option is deprecated. [ 934.412421][T27736] usb 6-1: USB disconnect, device number 11 [ 934.460548][T28373] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 934.490888][T28373] XFS (loop8): Mounting V5 Filesystem [ 934.700543][T28373] XFS (loop8): Ending clean mount [ 934.719156][T28434] netlink: 'syz.2.5411': attribute type 4 has an invalid length. [ 934.733339][T28373] XFS (loop8): Quotacheck needed: Please wait. [ 934.746343][T28434] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5411'. [ 934.911170][T28373] XFS (loop8): Quotacheck: Done. [ 935.051111][ T4315] usb 6-1: Service connection timeout for: 256 [ 935.057331][ T4315] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 935.112789][ T4315] ath9k_htc: Failed to initialize the device [ 935.143769][T27736] usb 6-1: ath9k_htc: USB layer deinitialized [ 935.179253][T24079] XFS (loop8): Unmounting Filesystem [ 935.472214][T28472] netlink: 'syz.5.5425': attribute type 1 has an invalid length. [ 935.506187][T28472] netlink: 120 bytes leftover after parsing attributes in process `syz.5.5425'. [ 936.645149][T28487] loop7: detected capacity change from 0 to 40427 [ 936.655850][T28527] loop5: detected capacity change from 0 to 16 [ 936.689182][T28487] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 936.701448][T28487] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 936.714767][T28527] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 936.741444][T28487] F2FS-fs (loop7): invalid crc value [ 936.769223][T25260] udevd[25260]: incorrect cramfs checksum on /dev/loop5 [ 936.806608][T28487] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 936.885772][T25260] udevd[25260]: incorrect cramfs checksum on /dev/loop5 [ 937.083650][T28551] device veth0 entered promiscuous mode [ 937.098424][T28487] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 937.107344][T28549] device veth0 left promiscuous mode [ 937.125104][T28487] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 937.327048][T28561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5454'. [ 937.334897][T28563] loop2: detected capacity change from 0 to 256 [ 937.380166][T28561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5454'. [ 937.399282][T28563] exfat: Deprecated parameter 'namecase' [ 937.455756][T28563] exfat: Deprecated parameter 'namecase' [ 937.523829][T28563] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 937.696540][T28578] ALSA: mixer_oss: invalid OSS volume '' [ 937.892435][T28589] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5464'. [ 937.896777][T28590] loop3: detected capacity change from 0 to 1024 [ 937.939886][T28590] EXT4-fs: inline encryption not supported [ 938.029831][T28590] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 938.059278][T28590] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 938.104179][T28590] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 2: comm syz.3.5463: lblock 2 mapped to illegal pblock 2 (length 4) [ 938.117305][T28600] device gretap0 entered promiscuous mode [ 938.161288][T28600] device vlan2 entered promiscuous mode [ 938.218713][T21811] EXT4-fs (loop3): unmounting filesystem. [ 938.426332][ T5867] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 938.623284][ T5867] usb 8-1: unable to get BOS descriptor or descriptor too short [ 938.642072][ T5867] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 938.673290][ T5867] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 938.696093][T28631] jffs2: notice: (28631) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 938.707567][T28630] loop5: detected capacity change from 0 to 512 [ 938.716802][ T5867] usb 8-1: string descriptor 0 read error: -22 [ 938.736265][ T5867] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 938.758828][ T5867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.768003][T28630] EXT4-fs: Ignoring removed i_version option [ 938.812534][T28630] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 938.836889][ T5867] usb 8-1: selecting invalid altsetting 1 [ 938.863929][T28630] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 938.864052][ T5867] usb 8-1: unit 3 not found! [ 938.890689][T28630] System zones: 1-12 [ 938.899828][T28630] EXT4-fs (loop5): orphan cleanup on readonly fs [ 938.925388][T28630] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.5473: invalid indirect mapped block 12 (level 1) [ 938.944668][T28630] EXT4-fs (loop5): Remounting filesystem read-only [ 938.951772][T28630] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.5473: invalid indirect mapped block 2 (level 2) [ 938.984721][T28630] EXT4-fs (loop5): Remounting filesystem read-only [ 939.001058][T28630] EXT4-fs (loop5): 1 truncate cleaned up [ 939.006772][T28630] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 939.024851][ T5867] usb 8-1: cannot request logical cluster ID: 0 (err: -5) [ 939.034656][ T5867] usb 8-1: invalid MIXER UNIT descriptor 6 [ 939.073858][ T5867] snd-usb-audio: probe of 8-1:1.0 failed with error -5 [ 939.138337][T26704] udevd[26704]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 939.243041][T28658] loop2: detected capacity change from 0 to 512 [ 939.250226][T19698] EXT4-fs (loop5): unmounting filesystem. [ 939.274190][T28658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 939.312379][ T5867] usb 8-1: USB disconnect, device number 15 [ 939.380574][T28658] System zones: 1-12 [ 939.385509][T28658] EXT4-fs (loop2): orphan cleanup on readonly fs [ 939.470095][T28677] loop3: detected capacity change from 0 to 1024 [ 939.497311][T28658] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.5478: missing EA_INODE flag [ 939.551968][T28658] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.5478: error while reading EA inode 12 err=-117 [ 939.597058][T28658] EXT4-fs (loop2): 1 orphan inode deleted [ 939.610154][T28658] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 939.678377][T28619] loop8: detected capacity change from 0 to 40427 [ 939.689672][T28619] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 939.714551][T28619] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 939.753562][T28619] F2FS-fs (loop8): Found nat_bits in checkpoint [ 939.772493][T12695] EXT4-fs (loop2): unmounting filesystem. [ 939.916971][T28619] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 939.946122][T28619] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 940.086078][T28703] loop3: detected capacity change from 0 to 4096 [ 940.213764][T28710] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 940.433756][T28713] loop7: detected capacity change from 0 to 8192 [ 941.210529][T27736] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 941.419238][T27736] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 941.444584][T27736] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.474445][T27736] usb 9-1: Product: syz [ 941.490273][T27736] usb 9-1: Manufacturer: syz [ 941.495690][T28777] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 941.526551][T27736] usb 9-1: SerialNumber: syz [ 941.555480][T27736] usb 9-1: config 0 descriptor?? [ 941.597609][T27736] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 941.601619][T28773] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 941.649268][T27736] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 941.664576][T28787] set_capacity_and_notify: 1 callbacks suppressed [ 941.664592][T28787] loop5: detected capacity change from 0 to 512 [ 941.687853][T28773] ntfs3: loop3: Failed to load $Extend. [ 941.689662][T27736] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 941.747961][T27736] usb 9-1: media controller created [ 941.795623][T28740] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 941.808465][T27736] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 941.810574][T28740] dvb-usb: bulk message failed: -22 (7/0) [ 941.854149][T28787] EXT4-fs error (device loop5): ext4_orphan_get:1435: comm syz.5.5508: bad orphan inode 15 [ 941.893113][T27736] DVB: Unable to find symbol mt352_attach() [ 941.937721][T28800] loop2: detected capacity change from 0 to 512 [ 941.948106][T28787] ext4_test_bit(bit=14, block=5) = 0 [ 941.954597][T28787] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 942.025451][T28800] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 942.042845][T27736] DVB: Unable to find symbol nxt6000_attach() [ 942.043426][T28787] EXT4-fs warning (device loop5): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 942.049185][T27736] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 942.106333][T28800] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.5510: bad orphan inode 131083 [ 942.135543][T27736] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input54 [ 942.153695][T28800] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 942.163725][T27736] dvb-usb: schedule remote query interval to 1000 msecs. [ 942.171157][T27736] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 942.181934][T27736] dvb-usb: bulk message failed: -22 (7/0) [ 942.188949][T27736] dvb-usb: bulk message failed: -22 (7/0) [ 942.197692][T27736] usb 9-1: USB disconnect, device number 10 [ 942.384870][T27736] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 942.438874][T19698] EXT4-fs (loop5): unmounting filesystem. [ 942.453785][T12695] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 942.710632][ T5868] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 942.824910][T28858] loop3: detected capacity change from 0 to 512 [ 942.896092][T28858] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 942.907518][ T5868] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 942.925501][ T5868] usb 8-1: config 0 has no interface number 0 [ 942.947036][ T5868] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 942.956478][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.965018][ T5868] usb 8-1: Product: syz [ 942.969963][ T5868] usb 8-1: Manufacturer: syz [ 942.975213][ T5868] usb 8-1: SerialNumber: syz [ 942.981715][ T5868] usb 8-1: config 0 descriptor?? [ 942.995525][T12695] EXT4-fs (loop2): unmounting filesystem. [ 943.002577][ T5868] usb 8-1: selecting invalid altsetting 1 [ 943.079610][ T5868] dvb_ttusb_budget: ttusb_init_controller: error [ 943.100866][ T5868] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 943.138436][T21811] EXT4-fs (loop3): unmounting filesystem. [ 943.337300][ T5868] DVB: Unable to find symbol stv0299_attach() [ 943.555485][ T5868] DVB: Unable to find symbol tda8083_attach() [ 943.577958][ T5868] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 943.624202][ T5868] usb 8-1: USB disconnect, device number 16 [ 944.058102][T28919] loop8: detected capacity change from 0 to 4096 [ 944.180495][T28927] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 944.541742][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 944.555853][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 944.564780][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 944.576825][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 944.588890][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 944.596565][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 944.694883][T28957] bridge0: port 3(team0) entered blocking state [ 944.721002][T28957] bridge0: port 3(team0) entered disabled state [ 944.753861][T28957] device team0 entered promiscuous mode [ 944.770730][ T5868] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 944.782592][T28957] device team_slave_0 entered promiscuous mode [ 944.802956][T28957] device team_slave_1 entered promiscuous mode [ 944.826803][T28957] bridge0: port 3(team0) entered blocking state [ 944.833871][T28957] bridge0: port 3(team0) entered forwarding state [ 944.888079][T28942] lo speed is unknown, defaulting to 1000 [ 944.978248][ T5868] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 945.010988][ T5868] usb 9-1: config 0 interface 0 has no altsetting 0 [ 945.049084][ T5868] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 945.101157][ T5868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.131775][ T5868] usb 9-1: config 0 descriptor?? [ 945.405978][T29037] ip_tables: iptables: counters copy to user failed while replacing table [ 945.418847][T28942] chnl_net:caif_netlink_parms(): no params data found [ 945.577241][ T5868] corsair-psu 0003:1B1C:1C09.0033: unknown main item tag 0x0 [ 945.640570][ T5868] corsair-psu 0003:1B1C:1C09.0033: unknown main item tag 0x0 [ 945.652983][T29080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5554'. [ 945.680901][ T5868] corsair-psu 0003:1B1C:1C09.0033: unknown main item tag 0x0 [ 945.707337][ T5868] corsair-psu 0003:1B1C:1C09.0033: unknown main item tag 0x0 [ 945.730362][ T5868] corsair-psu 0003:1B1C:1C09.0033: unknown main item tag 0x0 [ 945.751003][ T5868] corsair-psu 0003:1B1C:1C09.0033: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.8-1/input0 [ 945.790368][T28942] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.820735][T28942] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.827354][T29114] loop3: detected capacity change from 0 to 512 [ 945.850892][ T5868] corsair-psu 0003:1B1C:1C09.0033: unable to initialize device (-38) [ 945.852090][T28942] device bridge_slave_0 entered promiscuous mode [ 945.866307][ T5868] corsair-psu: probe of 0003:1B1C:1C09.0033 failed with error -38 [ 945.907591][ T5868] usb 9-1: USB disconnect, device number 11 [ 945.919140][T29114] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.5557: bg 0: block 7: invalid block bitmap [ 945.943569][T28942] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.950637][T29122] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 946.033387][T28942] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.066487][T29114] EXT4-fs (loop3): Remounting filesystem read-only [ 946.082323][T28942] device bridge_slave_1 entered promiscuous mode [ 946.100778][T29114] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 946.142972][T29114] EXT4-fs (loop3): Remounting filesystem read-only [ 946.170036][T29114] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2921: inode #11: comm syz.3.5557: corrupted xattr block 95 [ 946.187361][T29129] fido_id[29129]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 946.194266][T28942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.232128][T29114] EXT4-fs (loop3): Remounting filesystem read-only [ 946.248912][T29114] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 946.275523][T28942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.301307][T29114] EXT4-fs (loop3): 1 orphan inode deleted [ 946.311093][T29114] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 946.393950][T28942] team0: Port device team_slave_0 added [ 946.450750][T28942] team0: Port device team_slave_1 added [ 946.461556][T29167] loop7: detected capacity change from 0 to 1024 [ 946.531120][T29167] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 946.539270][T28942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.545163][T21811] EXT4-fs (loop3): unmounting filesystem. [ 946.572605][T28942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.650568][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 946.680251][T28942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.695262][T28942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.702954][T28942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.729113][T28942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.787492][T29115] loop5: detected capacity change from 0 to 40427 [ 946.806993][T29115] F2FS-fs (loop5): Corrupted extension count (327717 + 1 > 64) [ 946.843508][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 946.843521][ T26] audit: type=1326 audit(2000000604.720:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29207 comm="syz.3.5562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff85ff9e199 code=0x0 [ 946.845428][T28942] device hsr_slave_0 entered promiscuous mode [ 946.870869][T29115] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 946.930972][T29115] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 946.943608][T29115] F2FS-fs (loop5): invalid crc value [ 946.984333][T29115] F2FS-fs (loop5): Found nat_bits in checkpoint [ 947.004279][T28942] device hsr_slave_1 entered promiscuous mode [ 947.035114][T28942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 947.060562][T28942] Cannot create hsr debugfs directory [ 947.082734][T29227] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5564'. [ 947.152967][T29227] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5564'. [ 947.208201][T29115] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 947.235072][T29115] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 947.375838][T29115] F2FS-fs (loop5): access invalid blkaddr:2816 [ 947.408138][T29115] CPU: 0 PID: 29115 Comm: syz.5.5556 Not tainted syzkaller #0 [ 947.415677][T29115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 947.425801][T29115] Call Trace: [ 947.429101][T29115] [ 947.432066][T29115] dump_stack_lvl+0x188/0x24e [ 947.436777][T29115] ? show_regs_print_info+0x12/0x12 [ 947.442008][T29115] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 947.447973][T29115] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 947.453396][T29115] f2fs_map_blocks+0xba8/0x36a0 [ 947.458319][T29115] ? f2fs_get_block+0x140/0x140 [ 947.463480][T29115] ? clear_nonspinnable+0x60/0x60 [ 947.468544][T29115] ? fiemap_prep+0x1be/0x240 [ 947.473210][T29115] f2fs_fiemap+0x969/0x1aa0 [ 947.477836][T29115] ? do_syscall_64+0x4c/0xa0 [ 947.482481][T29115] ? f2fs_overwrite_io+0x200/0x200 [ 947.487631][T29115] ? __lock_acquire+0x7ea0/0x7ea0 [ 947.492697][T29115] ? __might_fault+0xc2/0x120 [ 947.497475][T29115] ? __might_fault+0xa6/0x120 [ 947.502192][T29115] do_vfs_ioctl+0x1414/0x1d40 [ 947.506915][T29115] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 947.512597][T29115] ? tomoyo_path_number_perm+0x205/0x650 [ 947.518371][T29115] ? __lock_acquire+0x7ea0/0x7ea0 [ 947.523429][T29115] ? slab_free_freelist_hook+0x133/0x1b0 [ 947.529173][T29115] ? tomoyo_path_number_perm+0x4fb/0x650 [ 947.535102][T29115] ? __kmem_cache_free+0xb6/0x200 [ 947.540167][T29115] ? tomoyo_path_number_perm+0x205/0x650 [ 947.545831][T29115] ? tomoyo_path_number_perm+0x5a4/0x650 [ 947.551494][T29115] ? tomoyo_path_number_perm+0x205/0x650 [ 947.557168][T29115] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 947.562800][T29115] ? __fget_files+0x28/0x460 [ 947.567437][T29115] ? bpf_lsm_file_ioctl+0x5/0x10 [ 947.572517][T29115] ? security_file_ioctl+0x7c/0xa0 [ 947.577723][T29115] __se_sys_ioctl+0x83/0x170 [ 947.582369][T29115] do_syscall_64+0x4c/0xa0 [ 947.586819][T29115] ? clear_bhb_loop+0x60/0xb0 [ 947.591596][T29115] ? clear_bhb_loop+0x60/0xb0 [ 947.596320][T29115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.602249][T29115] RIP: 0033:0x7fd5c119e199 [ 947.606690][T29115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.626479][T29115] RSP: 002b:00007fd5c20a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 947.634990][T29115] RAX: ffffffffffffffda RBX: 00007fd5c1425fa0 RCX: 00007fd5c119e199 [ 947.642987][T29115] RDX: 0000200000000440 RSI: 00000000c020660b RDI: 0000000000000004 [ 947.650987][T29115] RBP: 00007fd5c12358e0 R08: 0000000000000000 R09: 0000000000000000 [ 947.658989][T29115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.666995][T29115] R13: 00007fd5c1426038 R14: 00007fd5c1425fa0 R15: 00007ffdc4700208 [ 947.675011][T29115] [ 947.798176][T29314] Bluetooth: MGMT ver 1.22 [ 947.897975][T29308] loop8: detected capacity change from 0 to 8192 [ 947.948647][T29308] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 948.461049][ T5868] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 948.473764][T28942] netdevsim netdevsim9 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.672391][ T5868] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 948.704020][ T5868] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 948.733355][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 948.748229][ T5868] usb 4-1: config 0 interface 0 has no altsetting 0 [ 948.787609][ T5868] usb 4-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 948.838069][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.889672][ T5868] usb 4-1: config 0 descriptor?? [ 948.925158][T29353] loop5: detected capacity change from 0 to 4096 [ 948.959917][T29353] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 948.999027][T29353] ntfs: volume version 3.1. [ 949.138505][T28942] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.324832][ T5868] asus 0003:0B05:183D.0034: ignoring exceeding usage max [ 949.359980][ T5868] asus 0003:0B05:183D.0034: No inputs registered, leaving [ 949.427803][ T5868] asus 0003:0B05:183D.0034: hidraw0: USB HID v0.10 Joystick [HID 0b05:183d] on usb-dummy_hcd.3-1/input0 [ 949.448244][T29387] mmap: syz.7.5590 (29387): VmData 37523456 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 949.591264][ T5868] usb 4-1: USB disconnect, device number 19 [ 949.665691][T28942] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.699275][T29388] fido_id[29388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 949.982791][T28942] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.995172][T29371] loop8: detected capacity change from 0 to 32768 [ 950.123824][T29371] XFS (loop8): Mounting V5 Filesystem [ 950.259365][T29371] XFS (loop8): Ending clean mount [ 950.364260][T28942] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 950.427368][T28942] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 950.461024][T28942] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 950.504526][T28942] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 950.599879][T24079] XFS (loop8): Unmounting Filesystem [ 950.810662][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 950.859895][T28942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.861509][T29483] loop5: detected capacity change from 0 to 1024 [ 950.881437][T29483] EXT4-fs: Ignoring removed mblk_io_submit option [ 950.905756][T29483] EXT4-fs: inline encryption not supported [ 950.978784][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 950.997923][T29483] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.5598: lblock 2 mapped to illegal pblock 2 (length 1) [ 951.021564][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 951.031405][T28942] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.058003][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 951.069228][T29483] EXT4-fs (loop5): Remounting filesystem read-only [ 951.096153][T29483] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 951.124722][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 951.147001][T29483] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 48: comm syz.5.5598: lblock 0 mapped to illegal pblock 48 (length 1) [ 951.170947][ T4881] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.178436][ T4881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.181606][T29483] EXT4-fs (loop5): Remounting filesystem read-only [ 951.241472][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 951.249412][T29483] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 951.273389][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 951.299452][T29483] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.5598: Failed to acquire dquot type 0 [ 951.300149][T29497] loop3: detected capacity change from 0 to 1024 [ 951.324979][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 951.341407][ T4881] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.348624][ T4881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.356095][T29483] EXT4-fs (loop5): Remounting filesystem read-only [ 951.401042][T29483] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 951.401398][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 951.422509][T29497] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 951.430807][T29483] EXT4-fs (loop5): Remounting filesystem read-only [ 951.449213][T29483] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.5598: mark_inode_dirty error [ 951.490881][T29483] EXT4-fs (loop5): Remounting filesystem read-only [ 951.491880][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 951.507844][T29497] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 951.509748][T29483] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 951.550584][T29483] EXT4-fs (loop5): 1 orphan inode deleted [ 951.573152][ T4964] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 951.585035][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 951.587919][T29483] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 951.626148][ T4964] EXT4-fs (loop5): Remounting filesystem read-only [ 951.650936][ T4964] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 951.659434][ T4964] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 0 [ 951.675032][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 951.729295][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 951.732330][T29483] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 16: comm syz.5.5598: lblock 0 mapped to illegal pblock 16 (length 1) [ 951.752044][ T4964] EXT4-fs (loop5): Remounting filesystem read-only [ 951.766291][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 951.802797][T29483] EXT4-fs (loop5): Remounting filesystem read-only [ 951.804545][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 951.840188][T21811] EXT4-fs (loop3): unmounting filesystem. [ 951.871910][T28942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 951.956472][T28942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 951.992578][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 952.004957][T19698] EXT4-fs (loop5): unmounting filesystem. [ 952.028766][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 952.048756][T19698] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 952.088096][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 952.101110][T19698] EXT4-fs (loop5): Remounting filesystem read-only [ 952.107659][T19698] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 952.129746][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 952.153001][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 952.167790][T19698] EXT4-fs (loop5): Remounting filesystem read-only [ 952.178075][T19698] EXT4-fs error (device loop5): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 952.189060][T29491] loop7: detected capacity change from 0 to 40427 [ 952.234650][T19698] EXT4-fs (loop5): Remounting filesystem read-only [ 952.307300][T29491] F2FS-fs (loop7): Found nat_bits in checkpoint [ 952.501327][T29491] F2FS-fs (loop7): Start checkpoint disabled! [ 952.571175][T29538] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 952.624395][T29541] loop3: detected capacity change from 0 to 2048 [ 952.632087][T29491] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 952.709810][T29541] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 952.891145][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 953.098421][T23945] kworker/u4:9: attempt to access beyond end of device [ 953.098421][T23945] loop7: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 953.168768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 953.178869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 953.204130][T28942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.546280][T29535] loop5: detected capacity change from 0 to 32768 [ 953.689140][T29535] XFS (loop5): Mounting V5 Filesystem [ 953.768358][T29535] XFS (loop5): Ending clean mount [ 953.838207][T29556] loop8: detected capacity change from 0 to 32768 [ 953.929032][T19698] XFS (loop5): Unmounting Filesystem [ 954.072179][T29556] XFS (loop8): Mounting V5 Filesystem [ 954.191694][T29556] XFS (loop8): Ending clean mount [ 954.211983][T29556] XFS (loop8): Quotacheck needed: Please wait. [ 954.405470][T29556] XFS (loop8): Quotacheck: Done. [ 954.493831][T24079] XFS (loop8): Unmounting Filesystem [ 954.523981][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 954.581014][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 954.653000][T28942] device veth0_vlan entered promiscuous mode [ 954.687570][T23945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 954.723799][T23945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 954.753675][T23945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 954.800258][T23945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 954.829190][T28942] device veth1_vlan entered promiscuous mode [ 954.911716][T23945] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 954.931590][T23945] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 954.966765][T23945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 954.978067][T23945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 954.998918][T28942] device veth0_macvtap entered promiscuous mode [ 955.019833][T28942] device veth1_macvtap entered promiscuous mode [ 955.111859][T28942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.159862][T28942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.198587][T28942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.220988][T28942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.250455][T28942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.289808][T28942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.308036][T28942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.334881][T28942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.340506][ T5871] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 955.359290][T28942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.374051][T28942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.398835][T28942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.417180][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 955.430143][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 955.460233][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 955.475818][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 955.516792][T28942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.552785][T28942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.565954][ T5871] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 955.572222][T28942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.602995][ T5871] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 955.606012][T28942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.630657][ T5871] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 955.661660][T28942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.671127][ T5871] usb 8-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 955.704877][ T5871] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.711591][T28942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.731658][ T5871] usb 8-1: config 0 descriptor?? [ 955.746849][T28942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.755231][T29629] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 955.787902][T28942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.833009][T28942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.852428][T29663] ip_tables: iptables: counters copy to user failed while replacing table [ 955.866606][T28942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.899080][T28942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.927737][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 955.956676][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 955.989531][T28942] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.016352][T28942] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.047644][T28942] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.078679][T28942] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.206409][ T5871] gt683r_led 0003:1770:FF00.0035: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.7-1/input0 [ 956.374985][T29686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5639'. [ 956.380913][ T4881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.439626][ T4881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.471906][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.485699][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 956.512701][ T5867] usb 8-1: USB disconnect, device number 17 [ 956.521135][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.531915][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 956.540082][ T4313] gt683r_led 0003:1770:FF00.0035: failed to send set report request: -19 [ 956.550631][T29705] loop8: detected capacity change from 0 to 256 [ 956.661770][T29689] fido_id[29689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 956.700025][T29705] FAT-fs (loop8): Directory bread(block 64) failed [ 956.710618][T29722] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5642'. [ 956.721021][T29705] FAT-fs (loop8): Directory bread(block 65) failed [ 956.749548][T29705] FAT-fs (loop8): Directory bread(block 66) failed [ 956.766903][T29705] FAT-fs (loop8): Directory bread(block 67) failed [ 956.781300][T29705] FAT-fs (loop8): Directory bread(block 68) failed [ 956.791034][T29725] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5526'. [ 956.800143][T29705] FAT-fs (loop8): Directory bread(block 69) failed [ 956.807550][T29705] FAT-fs (loop8): Directory bread(block 70) failed [ 956.825881][T29705] FAT-fs (loop8): Directory bread(block 71) failed [ 956.840713][T29705] FAT-fs (loop8): Directory bread(block 72) failed [ 956.861484][T29705] FAT-fs (loop8): Directory bread(block 73) failed [ 956.909718][T29727] loop3: detected capacity change from 0 to 4096 [ 956.943889][T29727] EXT4-fs: Ignoring removed oldalloc option [ 956.952515][T29727] EXT4-fs: inline encryption not supported [ 956.991442][T29727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 957.010357][T29727] EXT4-fs (loop3): Test dummy encryption mode enabled [ 957.055178][T29727] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 957.099226][T29727] System zones: 0-5 [ 957.160020][T29742] loop8: detected capacity change from 0 to 512 [ 957.169592][T29727] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 957.194874][T29742] EXT4-fs (loop8): orphan cleanup on readonly fs [ 957.211306][T29742] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 957.263362][T29742] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 957.331579][T21811] EXT4-fs (loop3): unmounting filesystem. [ 957.379202][T29742] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.5646: attempt to clear invalid blocks 2 len 1 [ 957.481368][T29742] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.5646: invalid indirect mapped block 1819239214 (level 0) [ 957.565085][T29742] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.5646: invalid indirect mapped block 1819239214 (level 1) [ 957.652990][T29742] EXT4-fs (loop8): 1 truncate cleaned up [ 957.658702][T29742] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 957.784357][T29742] EXT4-fs (loop8): shut down requested (0) [ 957.979361][T24079] EXT4-fs (loop8): unmounting filesystem. [ 958.010549][ T5867] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 958.202468][ T5867] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1306, setting to 64 [ 958.224063][ T5867] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 958.268790][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.300631][T29766] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 958.320868][ T5867] mdc800 4-1:1.0: Found Mustek MDC800 on USB. [ 958.537661][ T4313] usb 4-1: USB disconnect, device number 20 [ 958.586051][ T4313] mdc800 4-1:1.0: Mustek MDC800 disconnected from USB. [ 958.738572][T29828] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5669'. [ 959.377972][T29821] loop8: detected capacity change from 0 to 32768 [ 959.470839][T29819] loop5: detected capacity change from 0 to 32768 [ 959.532464][T29821] JBD2: Ignoring recovery information on journal [ 959.595231][T29819] XFS (loop5): Mounting V5 Filesystem [ 959.644719][T29821] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 959.660768][T29866] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000003 out of range (51000..2150000) [ 959.733049][T29819] XFS (loop5): Ending clean mount [ 959.839433][ T26] audit: type=1800 audit(2000000617.710:652): pid=29819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5668" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 959.952317][T24079] ocfs2: Unmounting device (7,8) on (node local) [ 960.017531][T19698] XFS (loop5): Unmounting Filesystem [ 960.139410][T29880] netlink: 296 bytes leftover after parsing attributes in process `syz.9.5683'. [ 960.628290][T29895] Bluetooth: hci0: unsupported parameter 5135 [ 960.648967][T29895] Bluetooth: hci0: unsupported parameter 8192 [ 960.673576][T29895] Bluetooth: hci0: unsupported parameter 5135 [ 960.690813][T29895] Bluetooth: hci0: unsupported parameter 8192 [ 960.889898][T29910] loop3: detected capacity change from 0 to 2048 [ 960.957685][T29910] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 961.028830][T29916] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 961.041013][T26704] udevd[26704]: incorrect nilfs2 checksum on /dev/loop3 [ 961.056688][ T4315] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 961.139474][T29924] loop7: detected capacity change from 0 to 128 [ 961.183073][T29924] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 961.260623][ T4315] usb 6-1: Using ep0 maxpacket: 32 [ 961.267738][ T4315] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 961.268057][T29924] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 961.305372][ T4315] usb 6-1: config 0 has no interface number 0 [ 961.317284][T29931] loop3: detected capacity change from 0 to 64 [ 961.326494][ T4315] usb 6-1: config 0 interface 184 has no altsetting 0 [ 961.347111][ T4315] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 961.371597][ T4315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.379635][ T4315] usb 6-1: Product: syz [ 961.384418][ T4318] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 961.395092][T29931] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 961.414822][ T4315] usb 6-1: Manufacturer: syz [ 961.419464][ T4315] usb 6-1: SerialNumber: syz [ 961.466942][ T4315] usb 6-1: config 0 descriptor?? [ 961.492145][ T4315] smsc75xx v1.0.0 [ 961.500852][T23945] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 961.582687][ T4318] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 961.611015][ T4318] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 961.661090][ T4318] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 961.667601][T29945] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5700'. [ 961.710196][T29901] loop8: detected capacity change from 0 to 32768 [ 961.710588][T29949] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000003 out of range (51000..2150000) [ 961.729158][ T4318] usb 10-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 961.776789][ T4318] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.834526][ T4318] usb 10-1: config 0 descriptor?? [ 961.840319][T29920] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 961.864901][T29901] XFS (loop8): Mounting V5 Filesystem [ 961.920544][T29901] XFS (loop8): Ending clean mount [ 962.070537][T24079] XFS (loop8): Unmounting Filesystem [ 962.115605][ T4315] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 962.161403][ T4315] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 962.181011][ T4315] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 962.199943][ T4315] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 962.212261][ T4315] usb 6-1: USB disconnect, device number 12 [ 962.277365][ T4318] gt683r_led 0003:1770:FF00.0036: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.9-1/input0 [ 962.487225][ T4315] usb 10-1: USB disconnect, device number 3 [ 962.525891][ T4318] gt683r_led 0003:1770:FF00.0036: failed to send set report request: -19 [ 963.049212][T30023] loop5: detected capacity change from 0 to 16 [ 963.113791][T30023] erofs: (device loop5): mounted with root inode @ nid 36. [ 963.130623][ T4285] Bluetooth: hci0: command 0x0c3a tx timeout [ 963.136873][ T4276] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 963.206268][T30023] erofs: (device loop5): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 963.254455][T30033] loop7: detected capacity change from 0 to 1024 [ 963.604881][T30050] netlink: 'syz.5.5718': attribute type 10 has an invalid length. [ 963.620632][ T4881] hfsplus: b-tree write err: -5, ino 25 [ 963.626386][ T4881] hfsplus: b-tree write err: -5, ino 4 [ 963.642102][ T4881] hfsplus: b-tree write err: -5, ino 2 [ 964.012414][T30072] loop3: detected capacity change from 0 to 512 [ 964.048932][T30072] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 964.102717][T30076] loop9: detected capacity change from 0 to 1024 [ 964.162107][T30076] EXT4-fs: inline encryption not supported [ 964.167986][T30076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 964.197674][T30072] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 964.247630][T30076] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 964.342877][T30076] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 964.396611][T30095] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5736'. [ 964.407181][T30095] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5736'. [ 964.417902][T30076] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 964.656738][T30104] ip_tables: iptables: counters copy to user failed while replacing table [ 964.656820][T28942] EXT4-fs (loop9): unmounting filesystem. [ 964.689913][T30100] loop7: detected capacity change from 0 to 4096 [ 964.692065][T30104] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 964.759239][T30100] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 965.010351][T30119] raw_sendmsg: syz.9.5742 forgot to set AF_INET. Fix it! [ 965.210992][ T4276] Bluetooth: hci0: command 0x0405 tx timeout [ 965.269066][T30134] loop9: detected capacity change from 0 to 1024 [ 965.500552][ T4313] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 965.503556][T30144] loop8: detected capacity change from 0 to 2048 [ 965.560126][T30144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 965.691059][ T4313] usb 8-1: Using ep0 maxpacket: 32 [ 965.698432][ T4313] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 965.740548][ T4313] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 965.790658][ T4313] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 965.798887][ T4313] usb 8-1: Product: syz [ 965.841761][ T4313] usb 8-1: Manufacturer: syz [ 965.860927][ T4313] usb 8-1: SerialNumber: syz [ 965.885300][ T4313] usb 8-1: config 0 descriptor?? [ 965.901802][T30133] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 965.925329][ T4313] hub 8-1:0.0: bad descriptor, ignoring hub [ 965.952255][ T4313] hub: probe of 8-1:0.0 failed with error -5 [ 966.126710][T30176] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5755'. [ 966.271530][ T4313] usb 8-1: USB disconnect, device number 18 [ 966.480720][ T127] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 966.585686][T30214] loop3: detected capacity change from 0 to 1024 [ 966.640776][ T4313] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 966.670567][ T127] usb 9-1: Using ep0 maxpacket: 8 [ 966.677332][ T127] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 966.710719][ T127] usb 9-1: config 179 has no interface number 0 [ 966.730892][ T127] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 966.780248][ T127] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 966.827949][ T127] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 966.840099][ T4313] usb 8-1: Using ep0 maxpacket: 32 [ 966.847353][ T4313] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 966.878355][ T127] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 966.892068][ T4313] usb 8-1: string descriptor 0 read error: -22 [ 966.898333][ T4313] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 966.929835][ T127] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 966.947191][ T4313] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 966.959344][ T127] usb 9-1: config 179 interface 65 has no altsetting 0 [ 966.976622][ T4313] usb 8-1: config 0 descriptor?? [ 966.982994][ T127] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 966.993041][T30133] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 967.001304][ T4313] hub 8-1:0.0: bad descriptor, ignoring hub [ 967.016481][ T127] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.025024][ T4313] hub: probe of 8-1:0.0 failed with error -5 [ 967.109309][ T127] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input57 [ 967.324503][T30185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.350709][ T4313] usb 8-1: USB disconnect, device number 19 [ 967.386635][T30185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.425208][ T4315] usb 9-1: USB disconnect, device number 12 [ 967.438050][ T4315] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 967.845504][T30303] loop9: detected capacity change from 0 to 128 [ 967.889854][T30303] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 967.914162][T30303] hpfs: filesystem error: improperly stopped [ 967.953118][T30303] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 967.990595][T30303] hpfs: You really don't want any checks? You are crazy... [ 967.990727][ T4313] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 967.998188][T30303] hpfs: hpfs_map_sector(): read error [ 968.060576][T30303] hpfs: code page support is disabled [ 968.066174][T30303] hpfs: hpfs_map_4sectors(): unaligned read [ 968.103999][T30303] hpfs: hpfs_map_4sectors(): unaligned read [ 968.109953][T30303] hpfs: filesystem error: unable to find root dir [ 968.149539][T30303] hpfs: hpfs_map_4sectors(): unaligned read [ 968.186996][T30303] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 968.192215][ T4313] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.229852][ T4313] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 968.261873][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.279914][ T4313] usb 4-1: Product: syz [ 968.295258][ T4313] usb 4-1: Manufacturer: syz [ 968.305385][ T4313] usb 4-1: SerialNumber: syz [ 968.489217][T30318] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 968.546162][ T4313] snd-usb-6fire 4-1:1.0: unknown device firmware state received from device: [ 968.571502][ T4313] eb aa 00 00 00 00 00 00 [ 968.590984][ T4313] snd-usb-6fire: probe of 4-1:1.0 failed with error -5 [ 968.649448][T30330] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5785'. [ 968.915026][T30339] netlink: 'syz.5.5788': attribute type 10 has an invalid length. [ 968.949450][T30339] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5788'. [ 968.993735][T30339] device nr15 entered promiscuous mode [ 969.016439][T30339] IPv6: ADDRCONF(NETDEV_CHANGE): nr15: link becomes ready [ 969.034616][T30339] IPv6: ADDRCONF(NETDEV_CHANGE): nr15: link becomes ready [ 969.045495][T30339] A link change request failed with some changes committed already. Interface nr15 may have been left with an inconsistent configuration, please check. [ 969.710397][ C1] sched: RT throttling activated [ 969.717378][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 970.122761][T30354] loop4: detected capacity change from 0 to 524287964 [ 970.409310][T30361] team0: Device vlan3 is already an upper device of the team interface [ 970.460431][T30334] loop9: detected capacity change from 0 to 262144 [ 970.514399][ T4313] usb 4-1: USB disconnect, device number 21 [ 970.527340][T30334] F2FS-fs (loop9): invalid crc value [ 970.586792][T30334] F2FS-fs (loop9): Found nat_bits in checkpoint [ 970.641334][T30334] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 971.019490][T30395] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5800'. [ 971.034302][T30394] loop9: detected capacity change from 0 to 8 [ 971.039804][T30395] netlink: 580 bytes leftover after parsing attributes in process `syz.5.5800'. [ 971.205881][T30394] SQUASHFS error: Failed to read block 0x6e6: -5 [ 971.233746][T30394] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 971.269603][T30394] SQUASHFS error: Unable to read directory block [631:26] [ 971.352300][T30412] loop7: detected capacity change from 0 to 512 [ 971.771706][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 972.096946][T30454] loop7: detected capacity change from 0 to 256 [ 972.134995][T30454] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 972.727603][T30479] loop7: detected capacity change from 0 to 2048 [ 972.801089][T30479] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 972.835142][T30479] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 972.901620][T30479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 972.988942][T30489] loop3: detected capacity change from 0 to 1024 [ 973.284853][T30500] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5833'. [ 973.359712][ T3933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 973.382384][T30462] loop5: detected capacity change from 0 to 32768 [ 973.470205][T30462] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 973.538010][T30462] JBD2: Ignoring recovery information on journal [ 973.654443][T30462] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 973.692964][T30521] loop3: detected capacity change from 0 to 64 [ 974.013910][T19698] ocfs2: Unmounting device (7,5) on (node local) [ 974.022334][T30523] loop9: detected capacity change from 0 to 8192 [ 974.074451][T30523] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 974.206871][T30523] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 974.221459][T30523] REISERFS (device loop9): using ordered data mode [ 974.228006][T30523] reiserfs: using flush barriers [ 974.260987][T30523] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 974.324950][T30523] REISERFS (device loop9): checking transaction log (loop9) [ 974.360172][T30523] REISERFS (device loop9): Using r5 hash to sort names [ 974.379201][T30523] REISERFS warning (device loop9): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 974.455984][T30523] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 974.495373][T30547] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 974.553219][T30547] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 974.701726][T30559] ip_tables: iptables: counters copy to user failed while replacing table [ 975.082389][T30574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5850'. [ 975.411219][T30588] CUSE: unknown device info "" [ 975.416134][T30588] CUSE: unknown device info "" [ 975.452921][T30590] IPVS: Error connecting to the multicast addr [ 975.465697][T30588] CUSE: unknown device info "" [ 975.480522][T30588] CUSE: unknown device info "" [ 975.485422][T30588] CUSE: unknown device info "ÿ" [ 975.530839][T30588] CUSE: zero length info key specified [ 976.271986][T30631] set_capacity_and_notify: 1 callbacks suppressed [ 976.272003][T30631] loop8: detected capacity change from 0 to 1024 [ 976.365723][T30631] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 976.410900][T30638] loop3: detected capacity change from 0 to 256 [ 976.455067][T30638] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 976.502586][T30599] loop7: detected capacity change from 0 to 32768 [ 977.117986][T30620] loop5: detected capacity change from 0 to 40427 [ 977.129312][T30666] netlink: 128 bytes leftover after parsing attributes in process `syz.9.5880'. [ 977.149326][T30668] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5875'. [ 977.167896][T30666] netlink: 'syz.9.5880': attribute type 5 has an invalid length. [ 977.204273][T30620] F2FS-fs (loop5): Corrupted extension count (33554469 + 1 > 64) [ 977.230493][T30620] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 977.286993][T30620] F2FS-fs (loop5): invalid crc value [ 977.311032][T30620] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 977.335305][T30678] loop3: detected capacity change from 0 to 8 [ 977.368250][T30678] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 977.412685][T25264] udevd[25264]: incorrect cramfs checksum on /dev/loop3 [ 977.423601][T30678] cramfs: Error -3 while decompressing! [ 977.450944][ T4313] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 977.481516][T30678] cramfs: ffffffff96dc71f8(16)->ffff88803dedc000(4096) [ 977.510794][T30678] cramfs: Error -3 while decompressing! [ 977.534097][T30678] cramfs: ffffffff96dc71f8(16)->ffff88803dedc000(4096) [ 977.545184][T30620] F2FS-fs (loop5): recover fsync data on readonly fs [ 977.568630][ T26] audit: type=1800 audit(2000000635.440:653): pid=30678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5882" name="file0" dev="loop3" ino=244 res=0 errno=0 [ 977.627878][T30620] F2FS-fs (loop5): Try to recover 2th superblock, ret: -30 [ 977.650972][T30620] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 977.652446][ T4313] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 977.716143][ T4313] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 977.750209][ T4313] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 977.777156][ T4313] usb 9-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 977.813781][ T4313] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.851511][T30670] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 978.099065][ T4276] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 978.106926][ T4276] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 978.302669][ T4285] Bluetooth: hci5: Reading Intel version command failed (-71) [ 978.317975][ T5871] usb 9-1: USB disconnect, device number 13 [ 978.526158][T30731] loop7: detected capacity change from 0 to 256 [ 978.611724][T30731] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 978.808637][T30690] loop9: detected capacity change from 0 to 32768 [ 978.900492][ T5871] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 978.982833][T30690] ialloc: diAlloc returned -5! [ 978.984228][T30749] loop5: detected capacity change from 0 to 1764 [ 978.998459][T30750] ialloc: diAlloc returned -5! [ 979.028977][T30755] device team_slave_0 entered promiscuous mode [ 979.035295][T30755] device team_slave_1 entered promiscuous mode [ 979.050306][T30755] device macvtap1 entered promiscuous mode [ 979.057304][T30755] device team0 entered promiscuous mode [ 979.095543][ T5871] usb 4-1: unable to get BOS descriptor or descriptor too short [ 979.103975][T30755] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 979.120067][ T5871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.142038][T30755] team0: Device macvtap1 is already an upper device of the team interface [ 979.159824][ T5871] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 979.180846][T30755] device team0 left promiscuous mode [ 979.196766][ T5871] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 979.207730][T30755] device team_slave_0 left promiscuous mode [ 979.213864][T30755] device team_slave_1 left promiscuous mode [ 979.222783][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.231187][ T5871] usb 4-1: Product: syz [ 979.238598][ T5871] usb 4-1: Manufacturer: syz [ 979.244045][ T5871] usb 4-1: SerialNumber: syz [ 979.464405][T30767] loop9: detected capacity change from 0 to 8192 [ 979.477725][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 979.485686][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 979.494018][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 979.501563][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 979.512221][ T5871] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 979.519200][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 979.541898][ T5871] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 979.562500][ T5871] usb 4-1: 2:1: invalid format type 0x400 is detected, processed as PCM [ 979.577152][ T5871] usb 4-1: 2:1 : unsupported sample bitwidth 14 in 15 bytes [ 979.587975][T30767] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 979.625724][T30784] binder: BINDER_SET_CONTEXT_MGR already set [ 979.670580][T30784] binder: 30782:30784 ioctl 40046207 0 returned -16 [ 979.677317][T30767] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 979.696309][T30767] REISERFS (device loop9): using ordered data mode [ 979.716883][ T5871] usb 4-1: USB disconnect, device number 22 [ 979.740728][T30767] reiserfs: using flush barriers [ 979.762652][T30767] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 979.911619][T30767] REISERFS (device loop9): checking transaction log (loop9) [ 979.929273][T30815] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5905'. [ 980.028582][T26704] udevd[26704]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 980.139831][T30821] loop5: detected capacity change from 0 to 2048 [ 980.220897][T30767] REISERFS (device loop9): Using tea hash to sort names [ 980.242810][T30767] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 980.268835][T30821] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 980.325574][T30821] ext4 filesystem being mounted at /387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 980.357479][ C1] vkms_vblank_simulate: vblank timer overrun [ 980.772115][T19698] EXT4-fs (loop5): unmounting filesystem. [ 981.503325][T30885] set_capacity_and_notify: 1 callbacks suppressed [ 981.503344][T30885] loop9: detected capacity change from 0 to 256 [ 981.609168][T30883] loop8: detected capacity change from 0 to 4096 [ 981.642957][T30883] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 981.753352][T30883] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 981.774549][T30897] loop9: detected capacity change from 0 to 512 [ 981.911609][T30897] EXT4-fs error (device loop9): ext4_orphan_get:1435: comm syz.9.5931: bad orphan inode 16 [ 982.006530][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 982.006587][T24079] ntfs3: loop8: ntfs_sync_fs r=1a failed, -22. [ 982.025436][T30897] ext4_test_bit(bit=15, block=18) = 1 [ 982.031028][T30897] is_bad_inode(inode)=0 [ 982.036126][T30897] NEXT_ORPHAN(inode)=83886080 [ 982.061833][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 982.062754][T30897] max_ino=32 [ 982.073985][T24079] ntfs3: loop8: ntfs_evict_inode r=1a failed, -22. [ 982.121681][T30897] i_nlink=0 [ 982.146491][T30919] binder: BINDER_SET_CONTEXT_MGR already set [ 982.164432][T30919] binder: 30916:30919 ioctl 40046207 0 returned -16 [ 982.202460][T30897] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 982.226443][ T4964] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 982.241234][T30897] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 982.272371][ T4964] EXT4-fs error (device loop9): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 1 [ 982.407415][T30930] loop7: detected capacity change from 0 to 1024 [ 982.446463][T28942] EXT4-fs (loop9): unmounting filesystem. [ 982.526487][T30930] hfsplus: bad catalog entry type [ 982.647700][T30947] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 982.998444][T30969] loop9: detected capacity change from 0 to 256 [ 983.064490][T30969] exfat: Deprecated parameter 'utf8' [ 983.129326][T30969] exfat: Deprecated parameter 'namecase' [ 983.176394][T30969] exfat: Deprecated parameter 'utf8' [ 983.211355][ T4285] Bluetooth: hci0: command 0x0405 tx timeout [ 983.217535][ T5871] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 983.229933][T30969] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 983.400515][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 983.408424][ T5871] usb 4-1: too many endpoints for config 0 interface 0 altsetting 9: 255, using maximum allowed: 30 [ 983.440297][ T5871] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 144, changing to 11 [ 983.460489][ T5871] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 983.476641][T30948] loop8: detected capacity change from 0 to 32768 [ 983.494233][ T5871] usb 4-1: config 0 interface 0 has no altsetting 0 [ 983.511655][ T5871] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 983.531642][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.554588][T30971] loop7: detected capacity change from 0 to 32768 [ 983.569601][ T5871] usb 4-1: config 0 descriptor?? [ 983.592853][T30948] BTRFS info (device loop8): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 983.611170][T30971] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.5950 (30971) [ 983.630691][T30948] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 983.640160][T30948] BTRFS info (device loop8): turning off barriers [ 983.689658][T30971] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 983.720087][T30948] BTRFS info (device loop8): turning on async discard [ 983.727385][T30971] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 983.740509][ T4313] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 983.741428][T30948] BTRFS info (device loop8): doing ref verification [ 983.759507][T30971] BTRFS info (device loop7): use zlib compression, level 3 [ 983.788950][T30971] BTRFS info (device loop7): using free space tree [ 983.810619][T30948] BTRFS info (device loop8): using free space tree [ 983.920650][ T4313] usb 6-1: Using ep0 maxpacket: 32 [ 983.928363][ T4313] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 983.951667][ T4313] usb 6-1: config 0 has no interface number 0 [ 983.957869][ T4313] usb 6-1: config 0 interface 12 has no altsetting 0 [ 983.998463][ T4313] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 984.013465][ T5871] input: HID 17ef:60a4 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:17EF:60A4.0037/input/input58 [ 984.044637][ T4313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.062316][T30948] BTRFS info (device loop8): enabling ssd optimizations [ 984.072554][ T4313] usb 6-1: Product: syz [ 984.076759][ T4313] usb 6-1: Manufacturer: syz [ 984.122879][ T4313] usb 6-1: SerialNumber: syz [ 984.144820][ T5871] lenovo 0003:17EF:60A4.0037: input,hidraw0: USB HID v1.00 Joystick [HID 17ef:60a4] on usb-dummy_hcd.3-1/input0 [ 984.187921][T30971] BTRFS info (device loop7): enabling ssd optimizations [ 984.195368][ T4313] usb 6-1: config 0 descriptor?? [ 984.302499][ T5871] usb 4-1: USB disconnect, device number 23 [ 984.535706][T19894] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 984.594557][T31060] fido_id[31060]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 984.865192][ T4313] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 984.909395][ T4313] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 984.916641][T24079] BTRFS info (device loop8): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 984.930456][ T4313] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 984.950510][ T4313] f81534: probe of 6-1:0.12 failed with error -71 [ 984.983863][ T4313] usb 6-1: USB disconnect, device number 13 [ 985.275625][T31062] lec:lec_atm_close: lec0: Shut down! [ 986.207395][ T3933] device veth1_vlan entered promiscuous mode [ 986.658453][T31161] loop3: detected capacity change from 0 to 128 [ 986.712990][T31161] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 986.794554][T31161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 987.087777][T31178] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5986'. [ 987.392101][T31192] loop7: detected capacity change from 0 to 256 [ 987.735056][T31160] loop9: detected capacity change from 0 to 40427 [ 987.785540][T31160] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 987.824326][T31160] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 987.873599][T31160] F2FS-fs (loop9): invalid crc_offset: 33558524 [ 987.916201][T31211] loop5: detected capacity change from 0 to 4096 [ 987.935878][T31160] F2FS-fs (loop9): Found nat_bits in checkpoint [ 987.958328][T31211] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 988.146455][T31211] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 988.164770][T31160] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 988.225755][T31160] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 988.269985][T31211] ntfs3: loop5: ino=1e, "file1" attr_set_size [ 988.466197][T31160] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix. [ 988.518030][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 988.649973][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 988.676277][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 988.679162][T31264] loop3: detected capacity change from 0 to 512 [ 988.734401][T31264] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 988.750001][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 988.778173][T31264] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 988.793668][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 988.828099][T31264] EXT4-fs (loop3): orphan cleanup on readonly fs [ 988.830908][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 988.884726][T31264] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.6004: Allocating blocks 41-42 which overlap fs metadata [ 988.889647][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 988.992152][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 989.011114][T31264] EXT4-fs (loop3): Remounting filesystem read-only [ 989.018132][T31264] Quota error (device loop3): write_blk: dquota write failed [ 989.080869][T31264] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 989.140748][T31264] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.6004: Failed to acquire dquot type 0 [ 989.191556][T31264] EXT4-fs (loop3): Remounting filesystem read-only [ 989.198276][T31264] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 989.293702][T31264] EXT4-fs (loop3): Remounting filesystem read-only [ 989.305194][T31264] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.6004: corrupted inode contents [ 989.350933][T31264] EXT4-fs (loop3): Remounting filesystem read-only [ 989.377948][T31264] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #12: comm syz.3.6004: mark_inode_dirty error [ 989.448338][T31264] EXT4-fs (loop3): Remounting filesystem read-only [ 989.458603][T31264] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.6004: corrupted inode contents [ 989.499503][T31264] EXT4-fs (loop3): Remounting filesystem read-only [ 989.521830][T31264] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.6004: mark_inode_dirty error [ 989.545758][T31263] loop7: detected capacity change from 0 to 32768 [ 989.560748][T31264] EXT4-fs (loop3): Remounting filesystem read-only [ 989.588415][T31264] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.6004: corrupted inode contents [ 989.611800][T31263] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 989.658561][T31264] EXT4-fs (loop3): Remounting filesystem read-only [ 989.668839][T31263] JBD2: Ignoring recovery information on journal [ 989.686557][T31264] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 989.727146][T31264] EXT4-fs (loop3): Remounting filesystem read-only [ 989.766446][T31264] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.6004: corrupted inode contents [ 989.782954][T31263] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 989.823068][T31264] EXT4-fs (loop3): Remounting filesystem read-only [ 989.827177][T31272] loop8: detected capacity change from 0 to 32768 [ 989.829729][T31264] EXT4-fs error (device loop3): ext4_truncate:4325: inode #12: comm syz.3.6004: mark_inode_dirty error [ 989.901406][ T26] audit: type=1800 audit(2000000647.780:654): pid=31272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6008" name="file1" dev="loop8" ino=4 res=0 errno=0 [ 989.919286][T31272] ERROR: (device loop8): diAllocAG: ipimap->i_size is wrong [ 989.919286][T31272] [ 989.944644][T31264] EXT4-fs (loop3): Remounting filesystem read-only [ 989.958584][T31264] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 989.960647][ T4922] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 989.991686][T31264] EXT4-fs (loop3): Remounting filesystem read-only [ 990.003076][T31264] EXT4-fs (loop3): 1 truncate cleaned up [ 990.016918][T31272] ERROR: (device loop8): remounting filesystem as read-only [ 990.026533][T19894] ocfs2: Unmounting device (7,7) on (node local) [ 990.034335][T31264] EXT4-fs (loop3): pa ffff88805497b700: logic 1, phys. 41, len 23 [ 990.042435][T31264] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 990.080296][T31272] ialloc: diAlloc returned -5! [ 990.146372][T31264] EXT4-fs (loop3): Remounting filesystem read-only [ 990.174455][T31264] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 990.196768][ T4922] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 990.230419][ T4922] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 990.240298][ T4922] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 990.282311][ T4922] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 990.311805][ T4922] usb 10-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 990.408857][ T4922] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.440446][ T4922] usb 10-1: Product: syz [ 990.444752][ T4922] usb 10-1: Manufacturer: syz [ 990.449471][ T4922] usb 10-1: SerialNumber: syz [ 990.471759][T21811] EXT4-fs (loop3): unmounting filesystem. [ 990.490161][ T4922] usb 10-1: config 0 descriptor?? [ 990.512385][ T4922] ums-isd200 10-1:0.0: USB Mass Storage device detected [ 990.720686][ T4922] scsi host1: usb-storage 10-1:0.0 [ 990.724349][T31336] loop3: detected capacity change from 0 to 512 [ 990.795952][T31336] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.6023: bad orphan inode 16 [ 990.840490][T31336] ext4_test_bit(bit=15, block=18) = 1 [ 990.845966][T31336] is_bad_inode(inode)=0 [ 990.855074][T31336] NEXT_ORPHAN(inode)=83886080 [ 990.859809][T31336] max_ino=32 [ 990.864047][T31336] i_nlink=0 [ 990.875148][T31336] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 990.885003][T31336] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 990.901053][ T4964] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 990.947385][ T4964] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 1 [ 990.959628][ T5872] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 990.967493][ T4923] usb 10-1: USB disconnect, device number 4 [ 991.025588][T21811] EXT4-fs (loop3): unmounting filesystem. [ 991.140670][ T5872] usb 8-1: Using ep0 maxpacket: 8 [ 991.147854][ T5872] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 991.189007][ T5872] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 991.216758][T31372] loop8: detected capacity change from 0 to 1024 [ 991.218825][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.250904][ T5872] usb 8-1: Product: syz [ 991.255902][ T5872] usb 8-1: Manufacturer: syz [ 991.270466][ T5872] usb 8-1: SerialNumber: syz [ 991.290124][T31372] hfsplus: extend alloc file! (16384,256,150995124) [ 991.301829][ T5872] usb 8-1: config 0 descriptor?? [ 991.326584][ T5872] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 991.365415][ T5872] usb 8-1: setting power ON [ 991.372174][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 991.430968][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 991.469022][ T5872] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 991.488235][ T5872] usb 8-1: media controller created [ 991.513311][T31333] dvb-usb: bulk message failed: -22 (3/0) [ 991.539467][T31333] cxusb: i2c rd: len=150 is too big! [ 991.539467][T31333] [ 991.553391][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 991.585279][ T5872] usb 8-1: selecting invalid altsetting 6 [ 991.585303][ T5872] usb 8-1: digital interface selection failed (-22) [ 991.585319][ T5872] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 991.586522][ T5872] usb 8-1: setting power OFF [ 991.586587][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 991.586627][ T5872] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 991.586638][ T5872] (NULL device *): no alternate interface [ 991.648365][ T5872] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 991.658944][ T5872] usb 8-1: USB disconnect, device number 20 [ 991.842772][T31405] loop5: detected capacity change from 0 to 256 [ 991.953551][T31405] FAT-fs (loop5): Directory bread(block 64) failed [ 991.960148][T31405] FAT-fs (loop5): Directory bread(block 65) failed [ 991.984581][T31405] FAT-fs (loop5): Directory bread(block 66) failed [ 992.009725][T31405] FAT-fs (loop5): Directory bread(block 67) failed [ 992.037665][T31370] loop3: detected capacity change from 0 to 32768 [ 992.042315][T31405] FAT-fs (loop5): Directory bread(block 68) failed [ 992.079934][T31405] FAT-fs (loop5): Directory bread(block 69) failed [ 992.105162][T31405] FAT-fs (loop5): Directory bread(block 70) failed [ 992.136692][T31405] FAT-fs (loop5): Directory bread(block 71) failed [ 992.145668][T31405] FAT-fs (loop5): Directory bread(block 72) failed [ 992.152283][T31370] XFS (loop3): Mounting V5 Filesystem [ 992.164862][T31405] FAT-fs (loop5): Directory bread(block 73) failed [ 992.294510][T31428] loop9: detected capacity change from 0 to 512 [ 992.321024][T31370] XFS (loop3): Ending clean mount [ 992.332666][T31408] lec:lec_atm_close: lec0: Shut down! [ 992.390342][T31428] EXT4-fs error (device loop9): ext4_get_journal_inode:5762: comm syz.9.6033: inode #2147418112: comm syz.9.6033: iget: illegal inode # [ 992.478226][T31428] EXT4-fs (loop9): no journal found [ 992.484131][T21811] XFS (loop3): Unmounting Filesystem [ 992.520764][T31428] EXT4-fs (loop9): can't get journal size [ 992.557816][T31428] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 992.571500][T31428] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 992.579248][T31428] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 992.761820][T28942] EXT4-fs (loop9): unmounting filesystem. [ 992.901075][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.907408][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.916341][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 992.927101][ T1280] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 993.162936][T31457] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 993.201488][T31457] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 993.677038][T31490] loop3: detected capacity change from 0 to 2048 [ 993.793140][T31490] NILFS (loop3): invalid segment: Magic number mismatch [ 993.841401][T31490] NILFS (loop3): trying rollback from an earlier position [ 993.898022][T31490] NILFS (loop3): recovery complete [ 993.960786][T31512] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 993.990027][T31442] loop8: detected capacity change from 0 to 40427 [ 994.034343][T31442] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 994.079292][T31442] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 994.101861][T31490] syz.3.6037: attempt to access beyond end of device [ 994.101861][T31490] loop3: rw=0, sector=2388, nr_sectors = 4 limit=2048 [ 994.144956][T31442] F2FS-fs (loop8): invalid crc value [ 994.199945][T31442] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 994.234309][T31490] NILFS (loop3): I/O error reading node block for GC (ino=6, vblocknr=2147483649) [ 994.266946][ T26] audit: type=1326 audit(2000000652.140:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31532 comm="syz.9.6051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa267f9e199 code=0x7ffc0000 [ 994.311978][T31490] NILFS (loop3): error -5 preparing GC: cannot read source blocks [ 994.390475][ T26] audit: type=1326 audit(2000000652.140:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31532 comm="syz.9.6051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa267f9e199 code=0x7ffc0000 [ 994.516653][ T26] audit: type=1326 audit(2000000652.170:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31532 comm="syz.9.6051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa267f9e199 code=0x7ffc0000 [ 994.531968][T31442] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 994.596546][T31442] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 994.688258][ T26] audit: type=1326 audit(2000000652.180:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31532 comm="syz.9.6051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa267f9e199 code=0x7ffc0000 [ 994.734070][T31536] loop5: detected capacity change from 0 to 4096 [ 994.763725][T31536] EXT4-fs: Ignoring removed bh option [ 994.769159][T31536] EXT4-fs: Ignoring removed orlov option [ 994.841362][ T26] audit: type=1326 audit(2000000652.180:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31532 comm="syz.9.6051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa267f9e199 code=0x7ffc0000 [ 994.921257][ T26] audit: type=1326 audit(2000000652.180:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31532 comm="syz.9.6051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa267f9e199 code=0x7ffc0000 [ 994.945760][ T26] audit: type=1326 audit(2000000652.180:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31532 comm="syz.9.6051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa267f9e199 code=0x7ffc0000 [ 994.972335][ T26] audit: type=1326 audit(2000000652.180:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31532 comm="syz.9.6051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa267f9e199 code=0x7ffc0000 [ 994.976804][T31536] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 994.996934][ T26] audit: type=1326 audit(2000000652.180:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31532 comm="syz.9.6051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fa267f9e199 code=0x7ffc0000 [ 994.996970][ T26] audit: type=1326 audit(2000000652.180:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31532 comm="syz.9.6051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa267f9e199 code=0x7ffc0000 [ 995.271812][T19698] EXT4-fs (loop5): unmounting filesystem. [ 995.836818][T31541] loop9: detected capacity change from 0 to 40427 [ 995.908600][T31541] F2FS-fs (loop9): invalid crc value [ 995.927250][T31541] F2FS-fs (loop9): Found nat_bits in checkpoint [ 996.032591][T31574] netlink: 88 bytes leftover after parsing attributes in process `syz.7.6064'. [ 996.106687][T31579] tipc: Enabling of bearer rejected, failed to enable media [ 996.139302][T31541] F2FS-fs (loop9): Start checkpoint disabled! [ 996.229265][T31541] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 996.376490][T31586] loop3: detected capacity change from 0 to 8 [ 996.411987][T31588] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6071'. [ 996.490159][T31586] SQUASHFS error: Unable to read directory block [629:26] [ 996.597027][ T4328] kworker/u4:5: attempt to access beyond end of device [ 996.597027][ T4328] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 996.683598][ T4328] kworker/u4:5: attempt to access beyond end of device [ 996.683598][ T4328] loop9: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 996.777370][T31601] xt_l2tp: v2 sid > 0xffff: 1114112 [ 997.290665][T27736] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 997.507066][T27736] usb 9-1: Using ep0 maxpacket: 16 [ 997.514350][T27736] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.540520][T27736] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 997.570970][T31633] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[28942] was attempted by "\x22"[31633] [ 997.580648][T27736] usb 9-1: config 0 interface 0 has no altsetting 0 [ 997.613247][T27736] usb 9-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 997.643022][T27736] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.682557][T27736] usb 9-1: config 0 descriptor?? [ 998.103762][T31623] loop3: detected capacity change from 0 to 32768 [ 998.114975][T27736] input: HID 0810:0001 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0810:0001.0038/input/input59 [ 998.195592][T31623] XFS (loop3): Mounting V5 Filesystem [ 998.247228][T27736] pantherlord 0003:0810:0001.0038: input,hidraw0: USB HID v0.0a Joystick [HID 0810:0001] on usb-dummy_hcd.8-1/input0 [ 998.261723][T27736] pantherlord 0003:0810:0001.0038: no output reports found [ 998.279074][T31623] XFS (loop3): Ending clean mount [ 998.342667][T27736] usb 9-1: USB disconnect, device number 14 [ 998.533812][T21811] XFS (loop3): Unmounting Filesystem [ 998.632381][T31695] fido_id[31695]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 999.246626][T31719] loop8: detected capacity change from 0 to 64 [ 999.344206][T31719] Trying to free block not in datazone [ 999.469568][T31727] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6108'. [ 1000.283199][T31765] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6120'. [ 1000.419152][T31736] loop8: detected capacity change from 0 to 32768 [ 1000.463865][T31736] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.6111 (31736) [ 1000.521961][T31770] loop3: detected capacity change from 0 to 512 [ 1000.535079][T31736] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1000.560579][T31736] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 1000.608063][T31770] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1000.619087][T31736] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1000.647996][T31770] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1000.660756][T31736] BTRFS info (device loop8): use lzo compression, level 0 [ 1000.667938][T31736] BTRFS info (device loop8): using free space tree [ 1000.884920][T21811] EXT4-fs (loop3): unmounting filesystem. [ 1000.939119][T31790] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6122'. [ 1000.951375][T31790] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6122'. [ 1001.048448][T31736] BTRFS info (device loop8): enabling ssd optimizations [ 1001.099153][T31760] loop5: detected capacity change from 0 to 40427 [ 1001.132685][T31760] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1001.147616][T31760] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1001.180997][T31760] F2FS-fs (loop5): invalid crc_offset: 33558524 [ 1001.214477][T31760] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1001.364155][T24079] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1001.403211][T31760] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1001.429433][T31760] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1001.471161][T31813] futex_wake_op: syz.9.6125 tries to shift op by -1; fix this program [ 1001.509517][T31733] loop7: detected capacity change from 0 to 32768 [ 1001.518513][T31817] loop3: detected capacity change from 0 to 128 [ 1001.581078][T31817] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 1001.660670][T31817] System zones: 1-3, 19-19, 35-36 [ 1001.666818][T31817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1001.737917][T31760] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 1001.754909][T31817] ext4 filesystem being mounted at /414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.811539][T31825] loop9: detected capacity change from 0 to 64 [ 1002.010731][ T4285] Bluetooth: hci0: command 0x2016 tx timeout [ 1002.040099][T31733] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by syz.7.6109 (31733) [ 1002.119441][T26704] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop8 scanned by udevd (26704) [ 1002.119582][T21811] EXT4-fs (loop3): unmounting filesystem. [ 1002.191375][T31733] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1002.315277][T31733] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 1002.412181][T31733] BTRFS info (device loop7): turning off barriers [ 1002.472022][T31733] BTRFS info (device loop7): turning on async discard [ 1002.531637][T31733] BTRFS info (device loop7): doing ref verification [ 1002.621309][T31733] BTRFS info (device loop7): using free space tree [ 1002.870883][T31867] loop3: detected capacity change from 0 to 1024 [ 1002.966339][T31867] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1003.063724][T31867] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 1003.084525][T31867] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1003.135086][T31877] loop8: detected capacity change from 0 to 736 [ 1003.168565][T31867] EXT4-fs warning (device loop3): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 1003.320841][T31883] loop5: detected capacity change from 0 to 2048 [ 1003.374173][T31883] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1003.434853][T25264] udevd[25264]: incorrect nilfs2 checksum on /dev/loop5 [ 1003.442781][T31886] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1003.476109][T21811] EXT4-fs (loop3): unmounting filesystem. [ 1003.482221][T25260] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by udevd (25260) [ 1003.495313][T31733] BTRFS error (device loop7): open_ctree failed: -12 [ 1003.713183][T31896] tipc: Enabled bearer , priority 0 [ 1003.746986][T31886] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1003.783052][T31886] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1003.830975][T31886] Remounting filesystem read-only [ 1003.841247][T19698] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 1003.909608][T31904] option changes via remount are deprecated (pid=31903 comm=syz.7.6140) [ 1004.618582][T31938] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6151'. [ 1004.651198][T31938] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6151'. [ 1004.660114][T31938] netlink: 'syz.7.6151': attribute type 14 has an invalid length. [ 1004.667362][T31945] loop9: detected capacity change from 0 to 64 [ 1004.710630][T31938] netlink: 'syz.7.6151': attribute type 11 has an invalid length. [ 1004.944871][T31957] loop7: detected capacity change from 0 to 256 [ 1004.975346][T31958] loop9: detected capacity change from 0 to 64 [ 1004.981609][T31957] exfat: Deprecated parameter 'utf8' [ 1004.981642][T31957] exfat: Deprecated parameter 'utf8' [ 1005.034752][T31957] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1005.060012][T31908] loop3: detected capacity change from 0 to 40427 [ 1005.100413][T31958] hfs: unable to locate alternate MDB [ 1005.105838][T31958] hfs: continuing without an alternate MDB [ 1005.166855][T31908] F2FS-fs (loop3): Invalid log blocks per segment (1) [ 1005.189153][T31908] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1005.251513][T31908] F2FS-fs (loop3): invalid crc value [ 1005.290827][T31908] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1005.504265][T31908] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1005.529214][T31908] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1005.678725][T31968] f2fs_ckpt-7:3: attempt to access beyond end of device [ 1005.678725][T31968] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1005.917430][T31997] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6166'. [ 1006.596452][T32004] loop8: detected capacity change from 0 to 32768 [ 1006.832934][T32027] loop3: detected capacity change from 0 to 4096 [ 1006.875309][T32027] __ntfs_warning: 4 callbacks suppressed [ 1006.875327][T32027] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1006.978073][T32027] ntfs: volume version 3.1. [ 1007.109384][T32032] loop5: detected capacity change from 0 to 4096 [ 1007.171571][T32032] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1007.275200][T32032] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1007.422306][ T26] audit: type=1800 audit(2000000665.300:669): pid=32032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6175" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 1007.424032][T32048] i2c i2c-0: new_device: Can't parse I2C address [ 1008.473058][T32087] loop7: detected capacity change from 0 to 2048 [ 1009.086281][T32072] loop5: detected capacity change from 0 to 40427 [ 1009.110046][T32072] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1009.138407][T32072] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1009.170235][T32072] F2FS-fs (loop5): invalid crc value [ 1009.199209][T32072] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1009.220696][T32006] block2mtd: error: cannot open device /dev/ [ 1009.305412][T32084] loop3: detected capacity change from 0 to 32768 [ 1009.404954][T32084] XFS (loop3): Mounting V5 Filesystem [ 1009.438229][T32072] F2FS-fs (loop5): Start checkpoint disabled! [ 1009.534484][T32084] XFS (loop3): Ending clean mount [ 1009.559799][T32072] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1009.584572][T32084] XFS (loop3): Quotacheck needed: Please wait. [ 1009.588375][T32072] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1009.851105][T32084] XFS (loop3): Quotacheck: Done. [ 1010.131794][T21811] XFS (loop3): Unmounting Filesystem [ 1010.788843][T32144] loop8: detected capacity change from 0 to 4096 [ 1010.943119][T32144] ntfs3: loop8: failed to convert "0080" to cp775 [ 1010.965880][T32144] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1011.010212][T32144] ntfs3: loop8: failed to convert name for inode 1e. [ 1011.024346][T32130] loop7: detected capacity change from 0 to 32768 [ 1011.194404][T32130] XFS (loop7): Mounting V5 Filesystem [ 1011.293043][T32130] XFS (loop7): Ending clean mount [ 1011.445150][T19894] XFS (loop7): Unmounting Filesystem [ 1011.540631][ T4923] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1011.764765][ T4923] usb 9-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1011.788869][ T4923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1011.817936][ T4923] usb 9-1: Product: syz [ 1011.830183][ T4923] usb 9-1: Manufacturer: syz [ 1012.059113][T32172] loop3: detected capacity change from 0 to 32768 [ 1012.173444][T32149] loop9: detected capacity change from 0 to 40427 [ 1012.187692][T32172] XFS (loop3): Mounting V5 Filesystem [ 1012.214186][T32149] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x3ffff [ 1012.271416][T32149] F2FS-fs (loop9): invalid crc value [ 1012.332802][T32172] XFS (loop3): Ending clean mount [ 1012.386033][T32149] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1012.460019][ T4923] scsi host1: uas [ 1012.517786][ C1] usb 9-1: stat urb: no pending cmd for uas-tag 78 [ 1012.571392][T21811] XFS (loop3): Unmounting Filesystem [ 1012.676470][T32149] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1012.730525][ C1] usb 9-1: cmd cmplt err -71 [ 1012.741058][ T5871] usb 9-1: USB disconnect, device number 15 [ 1012.748522][ T5871] scsi 1:0:0:0: tag#4 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 1012.756353][ T5871] scsi 1:0:0:0: tag#4 CDB: Inquiry 12 00 00 00 24 00 [ 1013.033354][T28942] syz-executor: attempt to access beyond end of device [ 1013.033354][T28942] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1013.836380][T32266] loop3: detected capacity change from 0 to 4096 [ 1013.923006][T32273] loop9: detected capacity change from 0 to 256 [ 1013.952539][T32277] Cannot find add_set index 4 as target [ 1013.980818][T32278] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1013.995043][T32273] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d) [ 1014.124505][T32243] loop7: detected capacity change from 0 to 32768 [ 1014.257383][T32243] XFS (loop7): Mounting V5 Filesystem [ 1014.433421][T32305] loop8: detected capacity change from 0 to 512 [ 1014.475062][T32243] XFS (loop7): Ending clean mount [ 1014.482163][T32303] netem: change failed [ 1014.514362][T32243] XFS (loop7): Quotacheck needed: Please wait. [ 1014.699674][T32243] XFS (loop7): Quotacheck: Done. [ 1015.226822][T19894] XFS (loop7): Unmounting Filesystem [ 1015.589151][T32341] program syz.8.6238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1016.145728][T32328] loop5: detected capacity change from 0 to 40427 [ 1016.200942][T32328] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1016.208780][T32328] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1016.265938][T32364] program syz.8.6244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1016.281496][T32328] F2FS-fs (loop5): invalid crc value [ 1016.339458][T32328] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1016.560978][T32328] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1016.568148][T32328] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1016.608422][T32376] loop7: detected capacity change from 0 to 2048 [ 1016.659467][T32376] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1016.758087][T32376] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1016.807208][T32376] EXT4-fs (loop7): shut down requested (2) [ 1016.829444][T32351] loop3: detected capacity change from 0 to 32768 [ 1016.897470][T32351] (syz.3.6241,32351,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1016.975051][T32351] (syz.3.6241,32351,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1017.032976][ T11] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1017.049174][T19894] EXT4-fs (loop7): unmounting filesystem. [ 1017.095459][T32351] JBD2: Ignoring recovery information on journal [ 1017.150660][ T11] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1017.253296][T32351] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1017.379258][T32408] loop9: detected capacity change from 0 to 8 [ 1017.514133][T21811] ocfs2: Unmounting device (7,3) on (node local) [ 1017.514314][T32413] netem: incorrect gi model size [ 1017.562287][T32413] netem: change failed [ 1017.875997][T32427] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1018.488437][T32411] loop7: detected capacity change from 0 to 40427 [ 1018.548156][T32411] F2FS-fs (loop7): invalid crc value [ 1018.620252][T32411] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1018.703455][T32456] loop8: detected capacity change from 0 to 2048 [ 1018.754481][T32411] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 1018.828759][T32463] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1018.860205][T32411] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1018.871522][T32464] usbip-vudc usbip-vudc.0: gadget not bound [ 1018.878990][T32463] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1018.917241][T32463] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1018.974204][T32463] Remounting filesystem read-only [ 1019.081181][T24079] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 1019.728445][T32451] loop5: detected capacity change from 0 to 40427 [ 1019.759968][T32451] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 1019.814505][T32451] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1019.848988][T32451] F2FS-fs (loop5): invalid crc value [ 1019.878659][T32451] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1019.967383][T32451] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1019.996555][T32451] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1020.084890][ T26] audit: type=1800 audit(2000000677.960:670): pid=32451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6268" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 1020.131218][T32451] syz.5.6268: attempt to access beyond end of device [ 1020.131218][T32451] loop5: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 1020.514192][T19698] syz-executor: attempt to access beyond end of device [ 1020.514192][T19698] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1020.624729][T32519] netlink: 'syz.8.6287': attribute type 1 has an invalid length. [ 1020.882674][T32523] loop9: detected capacity change from 0 to 512 [ 1021.146214][ T26] audit: type=1800 audit(2000000679.020:671): pid=32534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.6291" name="protocol" dev="configfs" ino=91808 res=0 errno=0 [ 1021.319052][T32542] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6292'. [ 1021.824346][T32567] loop8: detected capacity change from 0 to 512 [ 1021.895854][T32567] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1021.980746][T32567] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.6302: bg 0: block 104: invalid block bitmap [ 1022.064580][T32567] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1022.123147][T32567] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.6302: invalid indirect mapped block 1 (level 1) [ 1022.151128][T32567] EXT4-fs (loop8): 1 truncate cleaned up [ 1022.179147][T32567] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1022.265307][T32567] EXT4-fs (loop8): shut down requested (2) [ 1022.400286][T24079] EXT4-fs (loop8): unmounting filesystem. [ 1022.552298][T32603] loop8: detected capacity change from 0 to 128 [ 1022.560627][T32601] loop3: detected capacity change from 0 to 2048 [ 1022.616314][T32603] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1022.625050][T32601] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1022.671465][T32601] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1022.714493][ T26] audit: type=1800 audit(2000000680.590:672): pid=32601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6312" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1022.780496][T32603] ext4 filesystem being mounted at /327/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1022.803327][T21811] EXT4-fs (loop3): unmounting filesystem. [ 1022.994978][T24079] EXT4-fs (loop8): unmounting filesystem. [ 1023.032430][T32622] loop3: detected capacity change from 0 to 512 [ 1023.141967][T32630] loop5: detected capacity change from 0 to 512 [ 1023.191074][T32630] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1023.329470][T32630] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.6321: bg 0: block 104: invalid block bitmap [ 1023.431606][T32630] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1023.501833][T32630] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.6321: invalid indirect mapped block 1 (level 1) [ 1023.534448][T32630] EXT4-fs (loop5): 1 truncate cleaned up [ 1023.540247][T32630] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1023.627248][T32630] EXT4-fs (loop5): shut down requested (2) [ 1023.731289][T19698] EXT4-fs (loop5): unmounting filesystem. [ 1023.737197][T32649] loop8: detected capacity change from 0 to 4096 [ 1023.791070][T32649] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 1025.107872][T32713] loop7: detected capacity change from 0 to 1024 [ 1025.206290][T32713] hfsplus: b-tree write err: -5, ino 17 [ 1025.354593][ T76] hfsplus: b-tree write err: -5, ino 4 [ 1025.360231][ T76] hfsplus: b-tree write err: -5, ino 17 [ 1025.561711][T32728] loop7: detected capacity change from 0 to 2048 [ 1025.631072][T32728] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1025.642693][T32738] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6347'. [ 1025.655307][T32728] ext4 filesystem being mounted at /440/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1025.743393][T32741] loop8: detected capacity change from 0 to 64 [ 1025.852136][T19894] EXT4-fs (loop7): unmounting filesystem. [ 1026.237804][ T300] loop9: detected capacity change from 0 to 256 [ 1026.268310][ T303] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1026.303265][ T300] exfat: Deprecated parameter 'utf8' [ 1026.360715][ T300] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xad31b01c, utbl_chksum : 0xe619d30d) [ 1026.632717][ T317] loop9: detected capacity change from 0 to 1024 [ 1027.018837][T32762] loop7: detected capacity change from 0 to 32768 [ 1027.714233][ T362] loop9: detected capacity change from 0 to 512 [ 1027.806712][ T362] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 1027.852999][ T362] System zones: 0-2, 18-18, 34-34 [ 1027.902484][ T362] EXT4-fs (loop9): 1 orphan inode deleted [ 1027.908242][ T362] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1027.983621][ T372] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1027.990838][ T362] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.138690][T28942] EXT4-fs (loop9): unmounting filesystem. [ 1028.728315][ T393] loop5: detected capacity change from 0 to 4096 [ 1028.808228][ T393] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1029.075124][ T417] loop7: detected capacity change from 0 to 512 [ 1029.085463][ T421] loop9: detected capacity change from 0 to 128 [ 1029.143254][ T417] EXT4-fs: inline encryption not supported [ 1029.231004][ T417] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1029.308309][ T417] EXT4-fs (loop7): 1 truncate cleaned up [ 1029.340549][ T417] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1029.525483][ T417] EXT4-fs error (device loop7): __ext4_expand_extra_isize:5972: inode #12: comm syz.7.6391: bad extra_isize 62 (inode size 256) [ 1029.571149][ T417] EXT4-fs (loop7): Remounting filesystem read-only [ 1029.590748][ T417] EXT4-fs error (device loop7): __ext4_expand_extra_isize:5972: inode #12: comm syz.7.6391: bad extra_isize 62 (inode size 256) [ 1029.635727][ T417] EXT4-fs (loop7): Remounting filesystem read-only [ 1029.758065][T19894] EXT4-fs (loop7): unmounting filesystem. [ 1030.110703][ T5871] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1030.126177][ T478] set_capacity_and_notify: 1 callbacks suppressed [ 1030.126192][ T478] loop8: detected capacity change from 0 to 128 [ 1030.171407][ T480] input: syz0 as /devices/virtual/input/input60 [ 1030.312241][ T5871] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1030.343369][ T5871] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1030.375945][ T5871] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1030.440891][ T5871] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1030.468437][ T5871] usb 10-1: Product: syz [ 1030.488022][ T5871] usb 10-1: Manufacturer: syz [ 1030.514554][ T5871] usb 10-1: SerialNumber: syz [ 1030.531065][ T5871] usb 10-1: config 0 descriptor?? [ 1030.561340][ T5871] usb 10-1: selecting invalid altsetting 0 [ 1030.806712][ T5871] usb 10-1: USB disconnect, device number 5 [ 1030.892723][ T529] loop7: detected capacity change from 0 to 64 [ 1030.979862][ T5862] kernel write not supported for file /snd/midiC2D0 (pid: 5862 comm: kworker/1:9) [ 1031.298100][ T564] loop8: detected capacity change from 0 to 64 [ 1031.431277][ T5862] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1031.608053][ T579] loop3: detected capacity change from 0 to 2048 [ 1031.640913][ T5862] usb 8-1: Using ep0 maxpacket: 16 [ 1031.649624][ T5862] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.676231][ T5862] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.717394][ T5862] usb 8-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1031.736160][ T587] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1031.780619][ T5862] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1031.787941][ T5862] usb 8-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 1031.875992][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.876226][ T587] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1031.915920][ T5862] usb 8-1: config 0 descriptor?? [ 1031.981304][ T587] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1032.031008][ T587] Remounting filesystem read-only [ 1032.195627][T21811] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 1032.353672][ T5862] waltop 0003:172F:0032.0039: unknown main item tag 0x3 [ 1032.383158][ T5862] waltop 0003:172F:0032.0039: unbalanced collection at end of report description [ 1032.421571][ T5862] waltop: probe of 0003:172F:0032.0039 failed with error -22 [ 1032.579021][ T33] usb 8-1: USB disconnect, device number 21 [ 1032.811072][ T5862] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1032.893300][ T645] trusted_key: encrypted_key: keyword 'ÉSw' not recognized [ 1033.005042][ T5862] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1033.025649][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.062953][ T5862] usb 4-1: config 0 descriptor?? [ 1033.436759][ T678] nvme_fcloop: unknown parameter or missing value 'w' [ 1033.557544][ T5862] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 1033.592075][ T5862] [drm] Initialized udl on minor 2 [ 1033.703514][ T5862] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1033.724811][ T5862] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1033.860660][ T4285] [ 1033.863063][ T4285] ====================================================== [ 1033.870123][ T4285] WARNING: possible circular locking dependency detected [ 1033.877160][ T4285] syzkaller #0 Not tainted [ 1033.881581][ T4285] ------------------------------------------------------ [ 1033.888595][ T4285] kworker/u5:5/4285 is trying to acquire lock: [ 1033.894750][ T4285] ffff88807b7b4428 (&hdev->lock){+.+.}-{3:3}, at: discov_off+0x86/0x1f0 [ 1033.903128][ T4285] [ 1033.903128][ T4285] but task is already holding lock: [ 1033.910502][ T4285] ffffc900043b7d00 ((work_completion)(&(&hdev->discov_off)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1033.922523][ T4285] [ 1033.922523][ T4285] which lock already depends on the new lock. [ 1033.922523][ T4285] [ 1033.932940][ T4285] [ 1033.932940][ T4285] the existing dependency chain (in reverse order) is: [ 1033.941943][ T4285] [ 1033.941943][ T4285] -> #1 ((work_completion)(&(&hdev->discov_off)->work)){+.+.}-{0:0}: [ 1033.952180][ T4285] __flush_work+0x122/0xac0 [ 1033.957199][ T4285] __cancel_work_timer+0x3f4/0x560 [ 1033.962820][ T4285] mgmt_index_removed+0x269/0x310 [ 1033.968354][ T4285] hci_unregister_dev+0x2ee/0x500 [ 1033.973887][ T4285] vhci_release+0x7f/0xd0 [ 1033.978817][ T4285] __fput+0x20a/0x8b0 [ 1033.983342][ T4285] task_work_run+0x1d0/0x260 [ 1033.988465][ T4285] do_exit+0x9d5/0x2570 [ 1033.993191][ T4285] do_group_exit+0x229/0x2e0 [ 1033.998291][ T4285] __x64_sys_exit_group+0x3b/0x40 [ 1034.003829][ T4285] do_syscall_64+0x4c/0xa0 [ 1034.008762][ T4285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1034.015171][ T4285] [ 1034.015171][ T4285] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 1034.022454][ T4285] __lock_acquire+0x3a03/0x7ea0 [ 1034.027820][ T4285] lock_acquire+0x1bc/0x4a0 [ 1034.032835][ T4285] __mutex_lock+0x12d/0xae0 [ 1034.037854][ T4285] discov_off+0x86/0x1f0 [ 1034.042611][ T4285] process_one_work+0x8ab/0x1160 [ 1034.048062][ T4285] worker_thread+0xaf5/0x12a0 [ 1034.053248][ T4285] kthread+0x29d/0x330 [ 1034.057825][ T4285] ret_from_fork+0x1f/0x30 [ 1034.062752][ T4285] [ 1034.062752][ T4285] other info that might help us debug this: [ 1034.062752][ T4285] [ 1034.073057][ T4285] Possible unsafe locking scenario: [ 1034.073057][ T4285] [ 1034.080489][ T4285] CPU0 CPU1 [ 1034.085839][ T4285] ---- ---- [ 1034.091189][ T4285] lock((work_completion)(&(&hdev->discov_off)->work)); [ 1034.098197][ T4285] lock(&hdev->lock); [ 1034.104800][ T4285] lock((work_completion)(&(&hdev->discov_off)->work)); [ 1034.114434][ T4285] lock(&hdev->lock); [ 1034.118494][ T4285] [ 1034.118494][ T4285] *** DEADLOCK *** [ 1034.118494][ T4285] [ 1034.126620][ T4285] 2 locks held by kworker/u5:5/4285: [ 1034.131886][ T4285] #0: ffff888046af1938 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1034.142062][ T4285] #1: ffffc900043b7d00 ((work_completion)(&(&hdev->discov_off)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1034.154505][ T4285] [ 1034.154505][ T4285] stack backtrace: [ 1034.160380][ T4285] CPU: 1 PID: 4285 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1034.167920][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1034.177981][ T4285] Workqueue: hci0 discov_off [ 1034.182570][ T4285] Call Trace: [ 1034.185842][ T4285] [ 1034.188769][ T4285] dump_stack_lvl+0x188/0x24e [ 1034.193439][ T4285] ? load_image+0x410/0x410 [ 1034.197934][ T4285] ? show_regs_print_info+0x12/0x12 [ 1034.203127][ T4285] ? print_circular_bug+0x12b/0x1a0 [ 1034.208325][ T4285] check_noncircular+0x2f8/0x400 [ 1034.213251][ T4285] ? deref_stack_reg+0x18e/0x220 [ 1034.218206][ T4285] ? print_deadlock_bug+0x5d0/0x5d0 [ 1034.223396][ T4285] ? lockdep_lock+0xf1/0x1f0 [ 1034.228069][ T4285] ? unwind_next_frame+0x1769/0x1fd0 [ 1034.233347][ T4285] ? _find_first_zero_bit+0xd2/0x100 [ 1034.238636][ T4285] __lock_acquire+0x3a03/0x7ea0 [ 1034.243494][ T4285] ? stack_trace_save+0xf0/0xf0 [ 1034.248393][ T4285] ? verify_lock_unused+0x140/0x140 [ 1034.253581][ T4285] ? lockdep_unlock+0x142/0x2e0 [ 1034.258526][ T4285] ? lockdep_lock+0x1f0/0x1f0 [ 1034.263197][ T4285] ? add_lock_to_list+0x191/0x280 [ 1034.268217][ T4285] lock_acquire+0x1bc/0x4a0 [ 1034.272732][ T4285] ? discov_off+0x86/0x1f0 [ 1034.277144][ T4285] ? __might_sleep+0xd0/0xd0 [ 1034.281782][ T4285] ? read_lock_is_recursive+0x10/0x10 [ 1034.287152][ T4285] ? __lock_acquire+0x142d/0x7ea0 [ 1034.292166][ T4285] ? verify_lock_unused+0x140/0x140 [ 1034.297366][ T4285] __mutex_lock+0x12d/0xae0 [ 1034.301860][ T4285] ? discov_off+0x86/0x1f0 [ 1034.306267][ T4285] ? discov_off+0x86/0x1f0 [ 1034.310678][ T4285] ? mutex_lock_nested+0x10/0x10 [ 1034.315605][ T4285] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1034.321580][ T4285] discov_off+0x86/0x1f0 [ 1034.325809][ T4285] ? send_cancel_destroy+0x20/0x20 [ 1034.330908][ T4285] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1034.336091][ T4285] ? process_one_work+0x7b4/0x1160 [ 1034.341190][ T4285] process_one_work+0x8ab/0x1160 [ 1034.346146][ T4285] ? worker_detach_from_pool+0x240/0x240 [ 1034.351767][ T4285] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1034.356785][ T4285] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1034.362325][ T4285] ? wq_worker_running+0x97/0x190 [ 1034.367335][ T4285] worker_thread+0xaf5/0x12a0 [ 1034.372008][ T4285] kthread+0x29d/0x330 [ 1034.376080][ T4285] ? worker_clr_flags+0x1a0/0x1a0 [ 1034.381092][ T4285] ? kthread_blkcg+0xd0/0xd0 [ 1034.385669][ T4285] ret_from_fork+0x1f/0x30 [ 1034.390095][ T4285] [ 1034.393167][ C1] vkms_vblank_simulate: vblank timer overrun [ 1034.434174][ T5862] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1034.442417][ T5871] usb 4-1: USB disconnect, device number 24 [ 1034.453726][ T5862] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1034.462277][ T5862] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1034.553823][ T672] loop8: detected capacity change from 0 to 32768 [ 1034.626942][ T672] XFS (loop8): Mounting V5 Filesystem [ 1034.655534][ T688] loop9: detected capacity change from 0 to 40427 [ 1034.668849][ T688] F2FS-fs (loop9): Small segment_count (9 < 1 * 24) [ 1034.675710][ T688] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1034.684772][ T688] F2FS-fs (loop9): invalid crc value [ 1034.696963][ T672] XFS (loop8): Ending clean mount [ 1034.722171][ T688] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1034.722252][ T672] XFS (loop8): Quotacheck needed: Please wait. [ 1034.754934][ T688] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1034.762240][ T688] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1034.794900][ T672] XFS (loop8): Quotacheck: Done. [ 1034.828532][ T26] audit: type=1800 audit(2000000692.700:673): pid=688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6456" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 1034.832085][ T688] syz.9.6456: attempt to access beyond end of device [ 1034.832085][ T688] loop9: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 1034.904618][T24079] XFS (loop8): Unmounting Filesystem [ 1034.985293][T28942] syz-executor: attempt to access beyond end of device [ 1034.985293][T28942] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427