last executing test programs: 8m17.313094572s ago: executing program 32 (id=167): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x4149, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r0, 0x0, 0x0, 0x2101, 0x0, 0x0) 7m48.267348575s ago: executing program 2 (id=412): setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresgid(0xee00, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20, 0x24040805}}], 0x2, 0x0) 7m48.03527527s ago: executing program 2 (id=415): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, '\x00\x00'}]}}}}}}}}, 0x0) 7m47.874854024s ago: executing program 2 (id=419): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x1234, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x48, 0x1, 0x0, @rand_addr=0x64010102, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x1234, 0x1}}}}}, 0x0) syz_open_dev$sndmidi(0x0, 0x80000000, 0x201) 7m47.714001889s ago: executing program 2 (id=422): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0xfffffe70) 7m47.502517744s ago: executing program 2 (id=427): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xae26}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) 7m46.920270958s ago: executing program 2 (id=433): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000000e00)="c3ef7f670000ec6783b4241544b50000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d925bde6a1b56f92241432fa00228f11b0cc67", 0x0, 0xa0000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000c}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 7m46.630171336s ago: executing program 33 (id=433): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000000e00)="c3ef7f670000ec6783b4241544b50000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d925bde6a1b56f92241432fa00228f11b0cc67", 0x0, 0xa0000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000c}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 7m6.188283886s ago: executing program 1 (id=794): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000580)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xca}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 7m6.085348379s ago: executing program 1 (id=796): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x12, &(0x7f00000012c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@errors_remount}, {@grpjquota}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20) pwrite64(r0, &(0x7f0000000dc0)='/', 0x1, 0x8000c64) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000040)={0x17c04, 0xffffffffffffffff, 0xa5, 0x100000001, 0x2, 0x82c}) 7m5.011362036s ago: executing program 1 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x2c3f86c71f7ac0ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='add foosyz ', 0xd) 7m4.652471325s ago: executing program 1 (id=810): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000007300)={[{@quota}, {@nodiscard}, {@gid}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x6}}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@discard}]}, 0x21, 0x6182, &(0x7f0000001140)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0) 7m3.583541132s ago: executing program 1 (id=816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0) 7m2.111181419s ago: executing program 1 (id=831): socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x3c, 0x0}, 0x0) 7m1.901314224s ago: executing program 34 (id=831): socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x3c, 0x0}, 0x0) 5m55.637028526s ago: executing program 7 (id=1499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0xa}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080083850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m55.516079879s ago: executing program 7 (id=1501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x80000, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m55.334525274s ago: executing program 7 (id=1504): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df7c4972"], 0xc) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) 5m55.202651527s ago: executing program 7 (id=1508): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nls={'nls', 0x3d, 'maciceland'}}]}, 0x9, 0x608, &(0x7f0000000640)="$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") r0 = open(0x0, 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) 5m54.946945614s ago: executing program 7 (id=1512): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 5m54.204297632s ago: executing program 7 (id=1518): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000, &(0x7f0000000340)={[{@dioread_nolock}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7, 0x4d, 0x1}, 0x7) 5m54.165919013s ago: executing program 35 (id=1518): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000, &(0x7f0000000340)={[{@dioread_nolock}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7, 0x4d, 0x1}, 0x7) 2m52.354232674s ago: executing program 8 (id=3434): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="54c0", 0x2}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e24, 0xb7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000580)='5', 0x1}], 0x1}}], 0x2, 0x5c) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000005400)={0x0, @in6={{0xa, 0x4e23, 0x46, @mcast1, 0x40}}}, 0x84) 2m51.995149372s ago: executing program 8 (id=3437): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000080)={r2}) 2m51.829423607s ago: executing program 8 (id=3439): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x140, 0x0) 2m49.528413244s ago: executing program 8 (id=3461): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0xa, 0x40, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000003000000a64200000c00000000000000", @ANYRES32=0x1], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3}) 2m49.443941546s ago: executing program 8 (id=3464): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)="2a20000000df", 0x6) 2m49.191403013s ago: executing program 8 (id=3467): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 2m33.951345255s ago: executing program 36 (id=3467): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1m6.895661884s ago: executing program 9 (id=4321): setreuid(0x0, 0xee01) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x6c}}}], 0x18}, 0xc4) 1m6.446178156s ago: executing program 9 (id=4327): syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x80000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCADDRT(r1, 0x890b, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/165) 1m4.588344082s ago: executing program 9 (id=4338): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x140c1, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r3}}], [], 0x6b}}) 1m4.551765703s ago: executing program 9 (id=4339): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x400000b1, 0x0, 0x1}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]}) 1m4.349928389s ago: executing program 9 (id=4343): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)="2a20000000df", 0x6) 1m4.195377742s ago: executing program 9 (id=4344): ftruncate(0xffffffffffffffff, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='/dev/loop0', 0xa) 48.900653535s ago: executing program 37 (id=4344): ftruncate(0xffffffffffffffff, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='/dev/loop0', 0xa) 14.37753112s ago: executing program 6 (id=4764): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) 14.136655846s ago: executing program 6 (id=4768): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x4, 0x0, 0xff, 0x5, 0x40}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000340)={r1, 0x5, 0x10, 0x5011, 0x6}, &(0x7f0000000380)=0x18) 13.959893101s ago: executing program 6 (id=4773): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 13.804561364s ago: executing program 6 (id=4775): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) close(r0) finit_module(r0, 0x0, 0x2) 13.661943998s ago: executing program 6 (id=4779): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x2000000, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") 12.552425806s ago: executing program 6 (id=4784): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ef) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000140), 0x4000, &(0x7f0000000180)={[{@name}, {@release_agent={'release_agent', 0x3d, './myproc'}}, {@cpuset_v2_mode}, {@cpuset_v2_mode}, {@cpuset_v2_mode}, {@noprefix}, {@cpuset_v2_mode}, {@name={'name', 0x3d, 'proc\x00'}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}) write(r0, &(0x7f0000000240)="76656e646f80e22a723a6d6f1bede58a8c72951a8d9997987210b3e164656c3a", 0x20) 4.127137856s ago: executing program 5 (id=4845): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 3.920909501s ago: executing program 5 (id=4837): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x80000, 0x10400, 0x0, 0x0, 0x0, 0x7f8, 0x0, 0x0, 0x4}}, 0x50) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x1, 0x8, 0x5, &(0x7f0000000340)={0x22, "732a5473c2bf273690bb713bd646baab088d08b240d1e9ee96e13c49e155462c86"}}) 3.053049423s ago: executing program 4 (id=4846): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0x104) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/106, 0x6a}], 0x1) pwrite64(r0, &(0x7f0000000340)="ffe6e9bac4a70be87da98af7efc8ef8b1a15808808f2200ee84b9a4143aa10057631d1a02c2ed6c09c658132071a3d60451ec359377c", 0x36, 0x88ca) 2.891637138s ago: executing program 3 (id=4848): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 2.640940114s ago: executing program 4 (id=4851): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r0, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 2.543302466s ago: executing program 4 (id=4852): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x10}}, 0x0) sendmsg$rds(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1}, 0x0) 2.493552328s ago: executing program 3 (id=4853): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008fc0)=[{{&(0x7f0000002600)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f00000028c0)=[{0x10, 0x1, 0x9}], 0x10}}], 0x1, 0x40) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.436514679s ago: executing program 4 (id=4854): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = memfd_create(&(0x7f0000000040)='\xb1Y\xf8$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95', 0x0) fallocate(r1, 0x0, 0x800657, 0x40000b7) 2.294821132s ago: executing program 3 (id=4856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000709726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000050) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x3, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d3c24", 0x2a}], 0x1}, 0x30008b08) 2.262748593s ago: executing program 4 (id=4857): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$eJzs3M9vFFUcAPDvzO6WgmIr4g8QpIpG4o+Wlh9y8KLRhIMmJnrAeKptIZVCDa2JEKLVAx4NiXfjf2E86cWoF0286t2QEMMF1Mua2Zltl2W33dIfS9vPJ5n2zczrvvedmTf75r3tBrBlDWQ/koj7I+KPiOjLV2/PMJD/unXj8tg/Ny6PJVGtvv13Ust388blsXrW+t/dl69Uq8X6thblXnkvYnRqauJCsT40e+7DoZmLl16cPDd6ZuLMxPmREyeOHtnfc3zk2KrEmcV1c+8n0/v2nHz36ptjp66+/3NSjjzuaIpjtQzkR7elZ1a7sC7b2ZCuHdh5B35dSLe6EuimUkRkp6tSa/99UYrt8/v64vXPm/P3rncFgTVTrVari9yV56rAJpbE0nl6izsFsJkUjwC159/6so7dj667/kr+AJTFfatY8j3lSPPEgUrT8+1qGoiIU3P/fp0tsUbjEAAAjb7P+j8vtOr/pfFInujJfjxQzKH0R8SDEbErIh6KiN0R8XBELe+jEfHYMstvniG5s/+TXrvr4DqQ9f9eLua2bu//pfUs/aVibWct/kpyenJq4nBxTA5FZdvpyWRieJEyfnjt9y/b7Wvs/2VLVn69L1jU49r2plH38dHZ0RUF3eD6ZxF7yxG3KtEUfxL1aZwkIvZExN67LGPyuXLbfUvHv4j2L9ux6jcRz+bnfy6a4q9L2s5PDr90fOTYUG9MTRweql8Vd/rltytvNW0q1RMrin8VZOd/R8vrfz7+/qQ3YubipbO1+dqZ5Zdx5c8v2j7TdHL9lxcGqE/uLK7/nuSd2oaeYsfHo7OzF4YjepI37tw+svBq9fV6/iz+Qwdbt/9dsXAkHo+IfRGxPyKeyB4Ki7o/GRFPRcTBReL/6dWnP1h+/OszV5rFP77U+Y/G87/8ROnsj98tHX92j2t3/o/WUoeKLZ3c/zqt4EqOHQAAAGwUae0z8Ek6mJSLdJoODuaf4d8dO9Kp6ZnZ509Pf3R+PP+sfH9U0vpIV1/DeOhwMTbc3/Da/Q37jxTjxl+VttfWB8emp8a7GDeQt/Na+5+/F+TtP/NXqdu1A9ZcPo+WdrsaQBeswjw6sEFp/7A1JYu2/8q61gVYf97/Yetq1f4/bZt78Ns1rQywrrz/w9bVQfufy3+17xUAG5P3f9i6tH/Yktr+b3zadld2u1jBtwGsTeK/4vsM75X6bP5EpPdENTZcIoll/lW54y+zWEai2pe3/2zLttbNHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFP4PwAA//+dU9wM") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000002100), &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x304982f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/58, 0x3a) 2.106018997s ago: executing program 3 (id=4858): r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f000060c000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x2000)=nil, 0x5000) syz_mount_image$udf(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x200000, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6164696e6963622c6e6f7374726963742c6d6f64653d303030303030303030303030303030303030f1303030342c7569643d666f726765742c6e6f6164696e6963622c756d61736b3d3030303030303030303030303030303430303032300d302c6c617374626c6f636b3d30303030303030303030303030303030303031332c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303020352c0007c9d0aaf59fa72ae985c927d565437f7d193dc82379939551bec3c08a4b45d58534f992d9747ac31f4eb7e18654020981e2be1fa33cf1d3a27fa94e11bb02ddc16ed4bc679b405948acbfbb6f2ddf1b9595bc22749ccc093802af6053c062cb3e6e08a99a853aa45a22a6e763a67ca7c856ba141b684230bfa956f38db7fab032f9ef11b56dd1ed755c06ded3d1adb7cc75617bb803623402b616b10bba90dc9d61c37a66fe5d82ab99df62566dcfc4a9dd5f09729001a3384af843ac8e239a146153c4647adc978ffb8e316cabf5352e7c3de2c0beae89dc8bd9ef624f7e91aeae317583a82bc369074ccf1ccb667f7f54d9d3ea5766c717ae3831c2fae0555e55eb0629474e49a64d15b01fcfa1240b109a0f9e5b24cb07837f162f53bc8411a0c71b0d7abe2e5b676bf3340fd1c4d888f33e1861b837a8c533ec94d1877a35925fbf3903ce50e3d36d6b7551"], 0x1, 0xc18, &(0x7f0000000500)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psgmi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0blXPmHWlky7ay/pC8/v2M/D9z5jmj92N85gj86gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEPHZz104cTIddCsAgEfp0uSXTpz2+Q8AT5TLfv4HAAAAAAAAAAAAAIDDLkURRyLF0Oubabp63FG/2GrfuDk1PrH3YYMpUtSiqOrLr/rJU6fPfOrsudFu3v34B+3D8eLk5QuNFxavXV+aX16en2tMtVuzi3Pz+36F+z3+ViPVADSuvXxj7sqV5cap46d3PX1z+M2Bp48Mnz937Oxot3ZqfGJisqemr/8df/fb3GmFx1NRRDNSvD38VmpGRC3ufyzu8d552AarToxUnZgan6g6stBqtlfKJ1MtV9UiGj0HjXXH6BHMxX0Zi1gtm182eKTs3uT15lJzZmG+8cXm0kprpbXYTrVOa8v+NKIWoyliLSI2Bm5/uf4o4qOR4tUTm2kmIoruOHyyWhh87/bUHkIf96FsZ6M/Yq32GMzZITYQRVyKFD9/42jMlmOWv+LjEV8o8/WI18r8TEQq3xhnIn62x/uIx1NfFPFvkWIxbaa56nzQPa9c/HLj8+0riz213fPKY//58Cgd8nNTPYqYqc74m+mdX+wAAAAAAAAAAAAAAAAA8KANRhHfiRR/8vzvVeuKo1qX/r7zo+956bd714w/d4/XKWuPR8RqbX9rcvvz0uFUK/88hI6xL/Uo4ht5/d8fHXRjAAAAAAAAAAAAAAAAAAAAnmhFvBQpvnLsaFqL3nuKt9pXG5ebMwudu8J27/3bvWf61tbWViN1cizndM7VnGs513Nu5IxaPj7nWM7pnKs513Ku59zIGUU+PudYzumcqznXcq7n3MgZffn4nGM5p3Ou5lzLuZ5zI2ccknv3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8m9SiiF9Eim99bTNFioixiOno5PrAQbcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACjVUxHHI8X6S/Xq8Vot4nJE/GJra6v7FRGbZd6vg+4rAAAAAAAAAAAAAAAAAAAAHFqpiI9Fimf/dzM1IuLm8JsDTx8ZPn/u2NnRIopIZUlv/YuTly80Xli8dn1pfnl5fq4x1W7NLs7N7/fb1S+22jduTo1PPJTO3E1f+dfgQ27/YP2FxeuvLLWufnVlz+eH6hdmlleWmrN7Px2DUYuY7t0zUjV4anyiavRCq9muDk21OzSwFjG2384AAAAAAAAAAAAAAAAAAABwaAylIj4XKX76n2dSd914X2fN/690HhXbta/9wc7vAli4Jbt6f3/AfrbTfhs6Ui28b0yNT0xM9uzu67+9tGxTSkU8Fyk+8eqHqvXwKYb2XBtf1r23rLt2JtcN/1pZt7qrqj4yNT7RuLTYPnZhYWFxtrnSnFmYb0xeb87u+xcHAAAAAAAAAAAAAAAAAAAAwF0MpSJ+HCn+++/+PXXvO5/X//d1HvWs//+tagl9pZ5257Zqbf97q7X9ne33nR8d+ujzd9r/MNb/l21KqYhvRorTP/5QdT/97vr/6Vtqy7o/ixRvPf+RXFd7qqxrdrvTecUrrYX5E2XttyPFr7/drY2q9mqufXan9mRZOxgp/nJzd+1Xc+0HdmpPlbVHI8X3/2vv2g/u1J4ua38aKf7xbxvd2qGy9vdz7ZGd2uOziwtz9xrWcv6/Gyn+5tLvpG6f7zj/Pb//YfWW3HbbnN99+0HN/3DPvtU8r3+a5795j/k/Gym+W/9IruuM/Ux+/pnq7535/0Sk+I9/3V17Jde+f6f25H67ddDK+f9OpPjeX/1ku895/vPI7sxQ7/z/at/u3H6XHND8P9Ozbzi3a/aXHIsn0fIrX3+5ubAwv2TDhg0b2xsHfWbiUSg///88UvzfkSJ1r2Py5/97Oo92rv/+5xs7n//nb8ltB/T5//6efefzVUt/X0R95dr1/uci6suvfP1Y61rz6vzV+fapkyc+/emzJ0+cPNv/VPfibmdr32P3blDO/w8jxY/+/kfbP8fsvv7b+/p/6JbcdkDz/2xvn3Zd1+x7KJ5I5fz/daR45rM/2f55827X/92f/49+bHdu//s7oPn/QM++4dyu1i85FgAAAAAAAAAAAI+ToVTEX0SK3/3j30zdNUT7+f9/c7fktgP6/19HevbNPaJ1DfseZACAQ6S8/vtgpPinrR9sr+Xeff0Xv9Gt7b3+u5PDcP9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB43KUo4g8jxdDrm2l9oHzcUb/Yat+4OTU+sfdhgylS1KKo6suv+slTp8986uy50W7e/fgH7cPx4uTlC40XFq9dX5pfXp6fa0y1W7OLc/P7foX7Pf5WI9UANK69fGPuypXlxqnjp3c9fXP4zYGnjwyfP3fs7Gi3dmp8YmKyp6av/x1/99ukO+x/Kor4QaR4e/it9L2BiFrc/1jc473zsA1WnRipOjE1PlF1ZKHVbK+UT6ZarqpFNHoOGuuO0SOYi/syFrFaNr9s8EjZvcnrzaXmzMJ844vNpZXWSmuxnWqd1pb9aUQtRlPEWkRsDNz+cv1RxDcjxasnNtM/D0QU3XH45KXJL504fe/21La3Xvr2A+3o3ZXtbPRHrNUegzk7xAaiiH+IFD9/42h8fyCiLzpf8fGIL5T5esRrZX4mIpVvjDMRP9vjfcTjqS+KOBMpFtNmemOgPB90zysXv9z4fPvKYk9t97zy2H8+PEqH/NxUjyJ+WJ3xN9O/+HcNAAAAAAAAAAAAAAAAcIgUsRYpvnLsaKrWB2+vKW61rzYuN2cWOsv6umv/umumt7a2thqpk2M5p3Ou5lzLuZ5zI2fU8vE5x3JO51zNuZZzPedGzijy8TnHck7nXM25lnM950bO6MvH5xzLOZ1zNedazvWcGznjkKzdAwAAAAAAAAAAAAAAAAAA3l1qUVR3cf/W1zbT1kDn/tLT0cl19wN91/v/AAAA//+oonXy") shmctl$SHM_LOCK(r0, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.942867001s ago: executing program 3 (id=4859): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x201c448, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRES32, @ANYRES32=0x0, @ANYRES8, @ANYRESOCT], 0x1, 0xa80, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc_mnt\x00', 0x1cc) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[], 0xd) 1.800713105s ago: executing program 4 (id=4860): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f000000d680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffe82) truncate(&(0x7f00000000c0)='./file1\x00', 0x6e3) 1.466399953s ago: executing program 3 (id=4861): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1000484, &(0x7f0000001280)=ANY=[@ANYBLOB='noquota,iocharset=cp1250,iocharset=none,errors=remount-ro,discard,usrquota,iocharset=cp1255,uid=', @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYBLOB="67d86d285dd1a2110c758d96886200ac8a92089c2a5cf8ad2040553cea72d29d82511459fbd2a9c6977026adf0bc539a7856a4dcce70bbea3b7b8dddf096f98ce605c3cb16c50c0e6fb0b31a5f3ad7311a8310f03eceaf60ea4d946908574f99cc18f8e35e3227991fbe9d03e23f4ec43077598ac1bdf548b9b0c490cf4d682ba6c5e225d685ad16dc8ce3cb7f5a7b4f918e2ba56fb558775dcb3ceb5f35b18cf82608931edd6f68586ef55cdb7c8bad0ca333bdf95d5a594c57", @ANYBLOB=',\x00'], 0x1c, 0x623d, &(0x7f0000006580)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.425415164s ago: executing program 5 (id=4862): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c0000005100000005"], 0x0) 1.056261264s ago: executing program 0 (id=4864): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x40000039}) 923.375857ms ago: executing program 0 (id=4865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3}}, 0x0, 0x0, 0x25, 0x0, "fbb3af84d9d7165048514205defffff97f905c1990c91e0323ba5897af26ebf89b6b0412c139cf0b3436d27c8101f3fd8f9ac440ec5a21cbf66c9f22cdf158f9fb3d9f6bbaaea59d8cb4516e1cf9ec21"}, 0xd8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x6e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x8, 0x606d, 0x0, 0x1ff, {[@md5sig={0x13, 0x12, "0e95cd0fb083e7d135ecec0400000041"}]}}}}}}}, 0x0) 766.714571ms ago: executing program 0 (id=4866): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xc, 0x5, 0x7, 0xc1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000032") 688.064483ms ago: executing program 5 (id=4867): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) 543.607786ms ago: executing program 0 (id=4868): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r0, 0xffffffffffffffff, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 324.433502ms ago: executing program 5 (id=4869): r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000700)=0x286e, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40) 267.035544ms ago: executing program 0 (id=4870): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) close(0x3) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) 355.84µs ago: executing program 5 (id=4872): r0 = socket(0x10, 0x3, 0x9) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r4, r4) sendmmsg$unix(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x0, 0x0, 0x4044804}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1, &(0x7f0000000080)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x20, 0x4000004}}], 0x2, 0x24004800) 0s ago: executing program 0 (id=4873): socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) kernel console output (not intermixed with test programs): unknown main item tag 0x0 [ 513.516698][ T4766] hid-led 0003:0FC5:B080.0029: unknown main item tag 0x0 [ 513.681117][ T6531] r8152-cfgselector 7-1: Unknown version 0x0000 [ 513.705254][ T6531] r8152-cfgselector 7-1: USB disconnect, device number 46 [ 514.052912][T10561] usb 10-1: USB disconnect, device number 7 [ 514.495425][T16298] loop6: detected capacity change from 0 to 32768 [ 514.545613][T16298] JBD2: Ignoring recovery information on journal [ 514.590479][T16298] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 514.675761][ T154] (kworker/u4:2,154,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 514.733311][ T154] (kworker/u4:2,154,1):ocfs2_read_locked_inode:554 ERROR: status = -12 [ 514.746237][T16303] loop9: detected capacity change from 0 to 2048 [ 514.760817][ T154] (kworker/u4:2,154,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 514.772556][T16305] Invalid argument reading file caps for ./file0 [ 514.825837][T16303] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 514.861788][T16307] udc-core: couldn't find an available UDC or it's busy [ 514.870476][T16307] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 514.934777][ T5734] ocfs2: Unmounting device (7,6) on (node local) [ 515.057532][T16311] loop4: detected capacity change from 0 to 1024 [ 515.229260][T16314] loop9: detected capacity change from 0 to 512 [ 515.277641][T16311] hfsplus: xattr search failed [ 515.297924][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 515.297941][ T26] audit: type=1800 audit(1787016108.533:1739): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36148 res=0 errno=0 [ 515.407777][ T26] audit: type=1800 audit(1787016108.643:1740): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 515.504710][ T26] audit: type=1800 audit(1787016108.743:1741): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 515.559746][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.619461][ T26] audit: type=1800 audit(1787016108.853:1742): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 515.628829][T16325] loop5: detected capacity change from 0 to 1024 [ 515.650242][T16328] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 515.760451][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 515.770722][T16325] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 515.791030][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.798241][ T26] audit: type=1804 audit(1787016108.883:1743): pid=16327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4210" name="/newroot/1093/file2" dev="tmpfs" ino=5818 res=1 errno=0 [ 515.822374][T16325] ext4 filesystem being mounted at /809/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.952973][T16324] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: comm syz.5.4211: lblock 0 mapped to illegal pblock 0 (length 1) [ 516.011535][ T26] audit: type=1800 audit(1787016108.963:1744): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 516.051471][T16324] EXT4-fs (loop5): Remounting filesystem read-only [ 516.072111][T16325] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.4211: lblock 0 mapped to illegal pblock 0 (length 1) [ 516.091918][ T26] audit: type=1800 audit(1787016109.093:1745): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 516.125803][ T5300] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 516.131378][T16336] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 516.165860][T16325] EXT4-fs (loop5): Remounting filesystem read-only [ 516.173587][T16336] EXT4-fs (loop5): Remounting filesystem read-only [ 516.181572][ T26] audit: type=1800 audit(1787016109.143:1746): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=247941 res=0 errno=0 [ 516.196836][ T5300] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 516.212807][T16346] EXT4-fs error (device loop5): ext4_free_blocks:6231: comm syz.5.4211: Freeing blocks not in datazone - block = 0, count = 1 [ 516.222553][ T26] audit: type=1800 audit(1787016109.153:1747): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=247955 res=0 errno=0 [ 516.277378][T16349] udc-core: couldn't find an available UDC or it's busy [ 516.314381][ T26] audit: type=1800 audit(1787016109.233:1748): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36148 res=0 errno=0 [ 516.321314][T16346] EXT4-fs (loop5): Remounting filesystem read-only [ 516.335617][T16349] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 517.171095][ T5300] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 517.318948][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.337258][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.357505][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.365348][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.381154][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.401343][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.418217][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.427517][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.436590][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.456475][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.466379][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.474289][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.482168][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.489777][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.497682][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.505612][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.513557][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.521388][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.528895][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.536865][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.544701][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.552565][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.554149][ T5300] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.560165][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.573830][ T5300] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.580564][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.590412][ T5300] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 517.609973][ T5300] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 517.616659][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.619886][ T5300] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.641120][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.648678][ T5300] usb 10-1: config 0 descriptor?? [ 517.658316][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.667664][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.683020][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.690472][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.705380][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.715482][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.727900][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.738184][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.753351][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.760793][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.775470][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.785260][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.799798][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.808701][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.823604][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.835023][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.846259][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.857609][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.865760][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.873543][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.881388][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.888818][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.896820][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.904629][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.917253][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.925023][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.932920][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.940378][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.948447][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.956212][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.964068][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.971778][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.979379][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.987170][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 517.995064][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.002795][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.010400][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.018458][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.026378][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.034215][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.042246][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.049686][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.065483][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.076038][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.089145][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.099714][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.115558][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.126296][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.143684][ T5300] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 518.144647][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.167575][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.175669][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.177413][ T5300] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 518.187217][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.203706][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.211495][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.219115][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.226957][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.236149][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.248515][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.258924][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.274294][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.285682][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.297124][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.308411][T10561] hid-generic 0000:0000:0004.002B: unknown main item tag 0x0 [ 518.324552][T10561] hid-generic 0000:0000:0004.002B: hidraw1: HID v0.03 Device [syz1] on syz0 [ 518.461864][T16389] loop4: detected capacity change from 0 to 256 [ 518.499124][ T4766] usb 10-1: USB disconnect, device number 8 [ 518.598766][T16387] fido_id[16387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 518.615347][T16386] fido_id[16386]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 518.851651][T16399] udc-core: couldn't find an available UDC or it's busy [ 518.858782][T16399] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 518.871291][ T6531] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 518.892568][T16397] loop5: detected capacity change from 0 to 1024 [ 519.286811][T16415] loop9: detected capacity change from 0 to 256 [ 519.361240][ T6531] usb 7-1: unable to get BOS descriptor or descriptor too short [ 519.401054][T16415] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 519.423152][ T6531] usb 7-1: not running at top speed; connect to a high speed hub [ 519.457694][T16415] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 519.493290][T16421] batman_adv: batadv0: Adding interface: macvtap0 [ 519.534228][T16421] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.562178][T16415] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x292ddf5b, utbl_chksum : 0xe619d30d) [ 519.586803][T16421] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 519.713554][ T6531] usb 7-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 519.731078][ T6531] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.748272][ T6531] usb 7-1: Product: syz [ 519.762107][ T6531] usb 7-1: Manufacturer: syz [ 519.778051][ T6531] usb 7-1: SerialNumber: syz [ 519.951224][ T8384] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 519.981804][T16437] loop9: detected capacity change from 0 to 2048 [ 520.074185][T16437] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 520.116701][T16437] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 520.251375][ T6531] usb 7-1: 1:1: cannot set freq 44100 to ep 0x1 [ 520.371365][ T6531] usb 7-1: 2:1: cannot set freq 44100 to ep 0x82 [ 520.390084][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 520.390102][ T26] audit: type=1800 audit(1787016113.623:1796): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36148 res=0 errno=0 [ 520.431285][ T8384] usb 6-1: unable to get BOS descriptor or descriptor too short [ 520.521286][ T8384] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.539763][ T6531] usb 7-1: USB disconnect, device number 47 [ 520.585159][ T8384] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 520.653846][ T26] audit: type=1800 audit(1787016113.743:1797): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248470 res=0 errno=0 [ 520.696588][T14347] udevd[14347]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.742574][ T8384] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 520.799731][ T8384] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 520.843926][ T26] audit: type=1800 audit(1787016113.753:1798): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=248513 res=0 errno=0 [ 520.910043][ T8384] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 520.971589][ T8384] usb 6-1: config 1 interface 1 has no altsetting 0 [ 520.980848][ T26] audit: type=1800 audit(1787016113.753:1799): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=248477 res=0 errno=0 [ 521.094712][ T26] audit: type=1800 audit(1787016113.753:1800): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=248478 res=0 errno=0 [ 521.186448][ T26] audit: type=1800 audit(1787016113.753:1801): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=248499 res=0 errno=0 [ 521.207477][T16439] loop4: detected capacity change from 0 to 131072 [ 521.214540][ T26] audit: type=1800 audit(1787016113.753:1802): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=248500 res=0 errno=0 [ 521.234650][ T26] audit: type=1800 audit(1787016113.753:1803): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=248479 res=0 errno=0 [ 521.254768][ T26] audit: type=1800 audit(1787016113.753:1804): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=248501 res=0 errno=0 [ 521.278463][ T26] audit: type=1800 audit(1787016113.773:1805): pid=14654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248685 res=0 errno=0 [ 521.311286][T16439] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 521.319436][T16439] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 521.331777][ T8384] usb 6-1: string descriptor 0 read error: -22 [ 521.338112][ T8384] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 521.347836][ T5300] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 521.361342][T16439] F2FS-fs (loop4): invalid crc value [ 521.371572][T16439] F2FS-fs (loop4): Found nat_bits in checkpoint [ 521.420081][ T8384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.433868][T16439] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 521.441525][T16439] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 521.578542][T16439] F2FS-fs (loop4): Can't enable fs-verity on inode 8: the verity feature is not enabled on this filesystem [ 521.636286][ T5300] usb 10-1: Using ep0 maxpacket: 16 [ 521.811158][ T5300] usb 10-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 521.822607][ T5300] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 521.832241][ T5300] usb 10-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xCA, skipping [ 521.843974][ T5300] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 521.863810][ C1] vkms_vblank_simulate: vblank timer overrun [ 522.018255][ T5300] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.040976][ T5300] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.059662][ T5300] usb 10-1: Product: syz [ 522.064315][ T5300] usb 10-1: Manufacturer: syz [ 522.069075][ T5300] usb 10-1: SerialNumber: syz [ 522.441345][ T8384] usb 6-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4 [ 522.468445][ T8384] usb 6-1: Warning! Unlikely big volume range (=18513), cval->res is probably wrong. [ 522.486440][ T8384] usb 6-1: [2] FU [Speaker Playback Volume] ch = 1, val = -18513/0/1 [ 522.549576][ T8384] usb 6-1: USB disconnect, device number 39 [ 522.611288][ T5300] usb 10-1: 0:2 : does not exist [ 522.617087][ T5300] usb 10-1: unit 6 not found! [ 522.671802][ T5300] usb 10-1: USB disconnect, device number 9 [ 522.969278][T15330] udevd[15330]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 523.258183][T16479] loop4: detected capacity change from 0 to 40427 [ 523.290758][T16479] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 523.312779][T16479] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 523.386122][T16479] F2FS-fs (loop4): invalid crc value [ 523.408970][T16479] F2FS-fs (loop4): Found nat_bits in checkpoint [ 523.566713][T16479] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 523.582660][T16479] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 523.739919][T16511] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4285'. [ 523.979691][T16518] overlayfs: failed to verify origin (/syz9, ino=363, err=-116) [ 523.988226][T16518] overlayfs: failed to verify upper root origin [ 524.748107][T16546] loop4: detected capacity change from 0 to 512 [ 524.778845][T16549] loop6: detected capacity change from 0 to 256 [ 525.017315][T16559] loop5: detected capacity change from 0 to 1024 [ 525.086577][T16559] EXT4-fs (loop5): Ignoring removed bh option [ 525.143359][T16559] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 525.170868][T16559] ext4 filesystem being mounted at /824/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.194988][T16559] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 3: comm syz.5.4309: lblock 3 mapped to illegal pblock 3 (length 3) [ 525.210120][T16559] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 525.222936][T16559] EXT4-fs (loop5): This should not happen!! Data will be lost [ 525.222936][T16559] [ 525.238634][T16559] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.4309: bg 0: block 112: padding at end of block bitmap is not set [ 525.256750][T16559] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 3 with error 28 [ 525.269335][T16559] EXT4-fs (loop5): This should not happen!! Data will be lost [ 525.269335][T16559] [ 525.290825][T16559] EXT4-fs (loop5): Total free blocks count 0 [ 525.308145][T16559] EXT4-fs (loop5): Free/Dirty block details [ 525.314737][T16559] EXT4-fs (loop5): free_blocks=0 [ 525.319872][T16559] EXT4-fs (loop5): dirty_blocks=64 [ 525.325200][T16559] EXT4-fs (loop5): Block reservation details [ 525.338580][T16559] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 525.348131][T16570] EXT4-fs error (device loop5): ext4_ext_remove_space:2944: inode #15: comm syz.5.4309: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 525.402658][T16570] EXT4-fs error (device loop5) in ext4_setattr:5645: Corrupt filesystem [ 525.418482][T16572] device veth0 entered promiscuous mode [ 525.437803][ T26] kauditd_printk_skb: 68 callbacks suppressed [ 525.437820][ T26] audit: type=1800 audit(1787016118.673:1874): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36148 res=0 errno=0 [ 525.439601][T16572] device veth0 left promiscuous mode [ 525.519453][T16574] loop9: detected capacity change from 0 to 512 [ 525.526637][ T26] audit: type=1800 audit(1787016118.763:1875): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 525.562322][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.629266][T16574] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 525.664561][ T26] audit: type=1800 audit(1787016118.903:1876): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36148 res=0 errno=0 [ 525.706423][T16574] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 525.721816][T16574] System zones: 1-12 [ 525.754505][ T26] audit: type=1800 audit(1787016118.963:1877): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 525.773345][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.777287][T16574] EXT4-fs (loop9): orphan cleanup on readonly fs [ 525.841972][T16574] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.4313: invalid indirect mapped block 12 (level 1) [ 525.858723][T16574] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.4313: invalid indirect mapped block 2 (level 2) [ 525.902347][T16574] EXT4-fs (loop9): 1 truncate cleaned up [ 525.908061][T16574] EXT4-fs (loop9): mounted filesystem without journal. Opts: usrquota,nobarrier,,,errors=continue. Quota mode: writeback. [ 525.938167][ T26] audit: type=1800 audit(1787016119.173:1878): pid=16584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4318" name="report_length" dev="configfs" ino=77230 res=0 errno=0 [ 525.959228][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.085379][ T26] audit: type=1800 audit(1787016119.223:1879): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36148 res=0 errno=0 [ 526.170625][T16592] loop5: detected capacity change from 0 to 512 [ 526.185520][T16595] netlink: 'syz.6.4320': attribute type 2 has an invalid length. [ 526.206700][ T26] audit: type=1804 audit(1787016119.253:1880): pid=16574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4313" name="/newroot/proc/asound/card0/oss_mixer" dev="proc" ino=4026532429 res=1 errno=0 [ 526.254878][T16595] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4320'. [ 526.284371][ T26] audit: type=1800 audit(1787016119.293:1881): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 526.332434][T16592] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 526.409685][ T26] audit: type=1800 audit(1787016119.373:1882): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 526.541045][ T26] audit: type=1800 audit(1787016119.623:1883): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 526.601252][T16592] EXT4-fs error (device loop5): ext4_validate_block_bitmap:420: comm syz.5.4322: bg 0: bad block bitmap checksum [ 526.785954][T16611] sctp: [Deprecated]: syz.0.4328 (pid 16611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 526.785954][T16611] Use struct sctp_sack_info instead [ 526.891027][ T4270] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 527.142263][ T4270] usb 10-1: Using ep0 maxpacket: 32 [ 527.261281][ T4270] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 527.271985][T16625] loop5: detected capacity change from 0 to 4096 [ 527.350484][T16625] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 527.431265][ T4270] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 527.441010][ T5300] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 527.460823][ T4270] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.489234][ T4270] usb 10-1: Product: syz [ 527.502790][ T4270] usb 10-1: Manufacturer: syz [ 527.535626][ T4270] usb 10-1: SerialNumber: syz [ 527.560077][ T4270] usb 10-1: config 0 descriptor?? [ 527.601359][T16608] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 527.621907][ T4270] hub 10-1:0.0: bad descriptor, ignoring hub [ 527.628006][ T4270] hub: probe of 10-1:0.0 failed with error -5 [ 527.651185][ T4270] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input69 [ 527.805776][T16623] loop4: detected capacity change from 0 to 40427 [ 527.842818][ T4270] usb 10-1: USB disconnect, device number 10 [ 527.851009][ C1] usbtouchscreen 10-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 527.852591][ T5300] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 527.871801][ T5300] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.875675][T16623] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 527.887180][ T5300] usb 7-1: config 0 has no interface number 0 [ 527.895530][ T5300] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 527.911775][T16623] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 527.920332][ T5300] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 527.934918][ T5300] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.009805][T16623] F2FS-fs (loop4): Found nat_bits in checkpoint [ 528.105857][T16623] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 528.119563][T16623] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 528.151389][ T5300] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 528.166229][ T5300] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.177535][ T5300] usb 7-1: Product: syz [ 528.187641][ T5300] usb 7-1: Manufacturer: syz [ 528.196138][ T5300] usb 7-1: SerialNumber: syz [ 528.218424][ T5300] usb 7-1: config 0 descriptor?? [ 528.289533][ T4192] attempt to access beyond end of device [ 528.289533][ T4192] loop4: rw=2049, want=45104, limit=40427 [ 528.477038][T16631] loop5: detected capacity change from 0 to 32768 [ 528.520601][T16631] XFS: attr2 mount option is deprecated. [ 528.538281][T16631] XFS: attr2 mount option is deprecated. [ 528.621900][T16648] loop6: detected capacity change from 0 to 8 [ 528.695478][T16648] loop6: detected capacity change from 8 to 0 [ 528.741178][T16631] XFS (loop5): Mounting V5 Filesystem [ 528.884984][T16631] XFS (loop5): Ending clean mount [ 528.940333][ T5300] usb 7-1: USB disconnect, device number 48 [ 528.985602][T16631] XFS (loop5): Quotacheck needed: Please wait. [ 529.115630][T16631] XFS (loop5): Quotacheck: Done. [ 529.269673][T16661] loop4: detected capacity change from 0 to 4096 [ 529.292655][ T4800] XFS (loop5): Unmounting Filesystem [ 529.459537][T16661] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 529.575855][T16663] loop6: detected capacity change from 0 to 512 [ 529.666954][T16663] EXT4-fs (loop6): Ignoring removed oldalloc option [ 529.673882][ T4192] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 529.752277][T16663] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 530.255286][T16672] netlink: 'syz.6.4350': attribute type 7 has an invalid length. [ 530.293712][T16672] netlink: 'syz.6.4350': attribute type 1 has an invalid length. [ 530.311009][T16672] netlink: 'syz.6.4350': attribute type 4 has an invalid length. [ 530.324605][T16672] netlink: 'syz.6.4350': attribute type 7 has an invalid length. [ 530.360249][T16672] netlink: 207220 bytes leftover after parsing attributes in process `syz.6.4350'. [ 530.509921][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 530.509938][ T26] audit: type=1800 audit(1787016123.743:1940): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 530.639257][ T26] audit: type=1800 audit(1787016123.873:1941): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 530.770036][T16683] overlayfs: invalid origin (0000007900a900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 530.808870][ T26] audit: type=1800 audit(1787016124.043:1942): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 530.987940][ T26] audit: type=1800 audit(1787016124.223:1943): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 531.012120][T16688] udc-core: couldn't find an available UDC or it's busy [ 531.019559][T16688] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 531.089513][ T26] audit: type=1800 audit(1787016124.323:1944): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 531.189262][ T26] audit: type=1800 audit(1787016124.423:1945): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 531.268225][ T26] audit: type=1800 audit(1787016124.503:1946): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 531.328603][T16697] loop5: detected capacity change from 0 to 512 [ 531.416375][T16697] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.4361: bg 0: block 4: invalid block bitmap [ 531.460299][T16697] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 531.510441][T16697] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.4361: invalid indirect mapped block 1 (level 1) [ 531.531329][ T26] audit: type=1800 audit(1787016124.773:1947): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 531.596535][ T26] audit: type=1800 audit(1787016124.833:1948): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 531.641330][T16697] EXT4-fs (loop5): 1 truncate cleaned up [ 531.647121][T16697] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 531.730416][ T26] audit: type=1800 audit(1787016124.963:1949): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 531.962042][T16711] Invalid argument reading file caps for ./file0 [ 532.378983][T16729] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 533.019619][T16754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4382'. [ 533.481011][ T4681] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 533.741075][ T4681] usb 6-1: Using ep0 maxpacket: 32 [ 533.861374][ T4681] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 533.869533][ T4681] usb 6-1: config 0 has no interface number 0 [ 534.051234][ T4681] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 534.060347][ T4681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.084038][ T4681] usb 6-1: Product: syz [ 534.098728][ T4681] usb 6-1: Manufacturer: syz [ 534.103749][ T4681] usb 6-1: SerialNumber: syz [ 534.121987][ T4681] usb 6-1: config 0 descriptor?? [ 534.163227][ T4681] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 534.388153][ T4681] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 534.440436][ T4681] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 534.781075][ T4681] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 534.860992][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 534.881361][ T4766] usb 6-1: USB disconnect, device number 40 [ 534.916310][ T4766] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 534.961513][ T4766] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 534.984267][ T4766] quatech2 6-1:0.51: device disconnected [ 535.021002][ T4681] usb 7-1: Using ep0 maxpacket: 16 [ 535.047910][T16803] loop4: detected capacity change from 0 to 1764 [ 535.141104][ T4681] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 535.149196][ T4681] usb 7-1: config 0 has no interface number 0 [ 535.341208][ T4681] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 535.350354][ T4681] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.381484][ T4681] usb 7-1: Product: syz [ 535.385721][ T4681] usb 7-1: Manufacturer: syz [ 535.390347][ T4681] usb 7-1: SerialNumber: syz [ 535.422307][ T4681] usb 7-1: config 0 descriptor?? [ 535.463555][ T4681] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 535.518383][ T26] kauditd_printk_skb: 51 callbacks suppressed [ 535.518401][ T26] audit: type=1800 audit(1787016128.753:2001): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 535.613447][ T26] audit: type=1800 audit(1787016128.853:2002): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 536.201117][ T4766] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 536.297215][ T26] audit: type=1800 audit(1787016129.533:2003): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 536.357545][ T26] audit: type=1800 audit(1787016129.593:2004): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250730 res=0 errno=0 [ 536.439604][ T26] audit: type=1800 audit(1787016129.673:2005): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 536.481357][T16825] input: syz0 as /devices/virtual/input/input71 [ 536.505560][ T26] audit: type=1800 audit(1787016129.683:2006): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250745 res=0 errno=0 [ 536.534850][ T26] audit: type=1800 audit(1787016129.703:2007): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250759 res=0 errno=0 [ 536.561027][ T4681] gspca_spca1528: reg_w err -71 [ 536.565988][ T4681] spca1528: probe of 7-1:0.1 failed with error -71 [ 536.568337][ T26] audit: type=1800 audit(1787016129.723:2008): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250773 res=0 errno=0 [ 536.601188][ T4681] usb 7-1: USB disconnect, device number 49 [ 536.658829][ T4766] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 536.684529][ T4766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.709808][ T26] audit: type=1800 audit(1787016129.723:2009): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=250788 res=0 errno=0 [ 536.726817][ T4766] usb 6-1: config 0 descriptor?? [ 536.781392][ T26] audit: type=1800 audit(1787016129.723:2010): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=250791 res=0 errno=0 [ 536.807271][ T4766] cp210x 6-1:0.0: cp210x converter detected [ 537.027023][T16834] loop4: detected capacity change from 0 to 4096 [ 537.077562][T16834] EXT4-fs (loop4): Test dummy encryption mode enabled [ 537.100000][T16834] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 537.156123][T16834] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 537.164658][T16834] System zones: 0-5 [ 537.181734][T16834] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000005,acl,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 537.231223][ T4766] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 537.295133][ T4766] cp210x 6-1:0.0: GPIO initialisation failed: -524 [ 537.313561][ T4766] usb 6-1: cp210x converter now attached to ttyUSB0 [ 537.488308][ T4681] usb 6-1: USB disconnect, device number 41 [ 537.501230][ T4681] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 537.512898][ T4681] cp210x 6-1:0.0: device disconnected [ 538.130157][T16860] loop5: detected capacity change from 0 to 1024 [ 538.262041][T16864] netlink: 'syz.4.4430': attribute type 12 has an invalid length. [ 538.270237][T16864] netlink: 'syz.4.4430': attribute type 29 has an invalid length. [ 538.288819][T16864] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4430'. [ 538.320804][T16860] attempt to access beyond end of device [ 538.320804][T16860] loop5: rw=2049, want=5780, limit=1024 [ 538.340415][T16866] loop6: detected capacity change from 0 to 256 [ 538.348750][T16864] netlink: 'syz.4.4430': attribute type 1 has an invalid length. [ 538.369239][T16866] exfat: Deprecated parameter 'utf8' [ 538.373473][T16860] Buffer I/O error on dev loop5, logical block 2889, lost async page write [ 538.409784][T16866] exfat: Deprecated parameter 'utf8' [ 538.417742][T16866] exfat: Deprecated parameter 'namecase' [ 538.517122][T16866] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 538.788597][T16873] type: 2297912225 invalid [ 538.838271][T16877] loop6: detected capacity change from 0 to 512 [ 538.969225][T16881] device syzkaller1 entered promiscuous mode [ 538.985786][T16877] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 539.246743][ T4681] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 539.433175][T16889] netlink: 'syz.6.4439': attribute type 4 has an invalid length. [ 539.514545][T16891] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4451'. [ 539.535645][T16879] loop5: detected capacity change from 0 to 32768 [ 539.611321][ T4681] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.632164][ T4681] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 539.834078][ T4681] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 539.853714][ T4681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.879883][ T4681] usb 5-1: Product: syz [ 539.892167][ T4681] usb 5-1: Manufacturer: syz [ 539.896858][ T4681] usb 5-1: SerialNumber: syz [ 540.345803][T16908] 9pnet: p9_errstr2errno: server reported unknown error Dfß ¥®r [ 540.345803][T16908] °’°µÔ†ÿÿÿÿÿ [ 540.591780][ T26] kauditd_printk_skb: 65 callbacks suppressed [ 540.591796][ T26] audit: type=1800 audit(1787016133.833:2076): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 540.736144][ T26] audit: type=1800 audit(1787016133.973:2077): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 540.847213][ T26] audit: type=1800 audit(1787016134.083:2078): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 540.850602][T16920] loop6: detected capacity change from 0 to 1024 [ 540.920406][ T26] audit: type=1800 audit(1787016134.153:2079): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 541.101140][ T4681] cdc_ncm 5-1:1.0: bind() failure [ 541.110347][ T26] audit: type=1800 audit(1787016134.343:2080): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=251225 res=0 errno=0 [ 541.145123][ T26] audit: type=1800 audit(1787016134.373:2081): pid=15342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=251487 res=0 errno=0 [ 541.168142][T16922] loop6: detected capacity change from 0 to 1024 [ 541.177884][ T4681] usbtest: probe of 5-1:1.1 failed with error -71 [ 541.203741][ T26] audit: type=1800 audit(1787016134.443:2082): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 541.228612][ T4681] usb 5-1: USB disconnect, device number 49 [ 541.463596][ T26] audit: type=1800 audit(1787016134.703:2083): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 541.618288][ T26] audit: type=1800 audit(1787016134.853:2084): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 541.698910][ T26] audit: type=1800 audit(1787016134.933:2085): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 541.737121][T16935] loop5: detected capacity change from 0 to 1024 [ 541.860746][T16935] attempt to access beyond end of device [ 541.860746][T16935] loop5: rw=2057, want=65536, limit=1024 [ 541.878539][T16935] attempt to access beyond end of device [ 541.878539][T16935] loop5: rw=1, want=2310, limit=1024 [ 541.931350][T16935] attempt to access beyond end of device [ 541.931350][T16935] loop5: rw=1, want=4358, limit=1024 [ 541.953166][T16935] attempt to access beyond end of device [ 541.953166][T16935] loop5: rw=1, want=6406, limit=1024 [ 542.001947][T16935] attempt to access beyond end of device [ 542.001947][T16935] loop5: rw=1, want=8454, limit=1024 [ 542.037520][T16935] attempt to access beyond end of device [ 542.037520][T16935] loop5: rw=1, want=10502, limit=1024 [ 542.092162][T16935] attempt to access beyond end of device [ 542.092162][T16935] loop5: rw=1, want=12550, limit=1024 [ 542.131709][T16935] attempt to access beyond end of device [ 542.131709][T16935] loop5: rw=1, want=14598, limit=1024 [ 542.168694][T16935] attempt to access beyond end of device [ 542.168694][T16935] loop5: rw=1, want=16646, limit=1024 [ 542.370179][T16954] loop6: detected capacity change from 0 to 64 [ 542.812202][T16965] loop4: detected capacity change from 0 to 1024 [ 543.450609][T16982] loop4: detected capacity change from 0 to 8192 [ 543.553262][T16982] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 543.626110][T16982] REISERFS (device loop4): using ordered data mode [ 543.660554][T16995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4483'. [ 543.686446][T16982] reiserfs: using flush barriers [ 543.728834][T16982] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 543.758231][T16982] REISERFS (device loop4): checking transaction log (loop4) [ 543.785188][T16982] REISERFS (device loop4): Using rupasov hash to sort names [ 543.806283][T16982] REISERFS (device loop4): using 3.5.x disk format [ 543.821361][T16982] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 543.836024][T16982] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 543.854986][T16982] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 543.874853][T16982] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 543.896010][T16982] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 543.933851][T16982] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 543.951795][T16982] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 543.985821][T16982] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 544.286217][T17002] loop6: detected capacity change from 0 to 64 [ 544.534059][T17012] loop4: detected capacity change from 0 to 128 [ 544.671070][T17012] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 544.723690][T17012] ext4 filesystem being mounted at /832/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 544.787146][T17012] syz.4.4491 (pid 17012) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 544.853706][ T9] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.929170][ T9] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.064066][T17019] lo speed is unknown, defaulting to 1000 [ 545.143624][ T9] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.285487][ T9] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.488286][T17047] device veth0 entered promiscuous mode [ 545.574163][T17046] device veth0 left promiscuous mode [ 545.628873][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 545.628889][ T26] audit: type=1800 audit(1787016138.863:2143): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 545.738231][ T26] audit: type=1800 audit(1787016138.953:2144): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 545.829985][ T26] audit: type=1800 audit(1787016139.063:2145): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4509" name="c_volume_present" dev="configfs" ino=79528 res=0 errno=0 [ 545.971518][ T26] audit: type=1800 audit(1787016139.213:2146): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 546.138959][ T26] audit: type=1800 audit(1787016139.373:2147): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 546.279433][ T26] audit: type=1800 audit(1787016139.503:2148): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 546.326652][T17019] chnl_net:caif_netlink_parms(): no params data found [ 546.369533][ T26] audit: type=1800 audit(1787016139.533:2149): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 546.397804][T17084] loop5: detected capacity change from 0 to 128 [ 546.443865][ T26] audit: type=1800 audit(1787016139.603:2150): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 546.443912][ T26] audit: type=1800 audit(1787016139.653:2151): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 546.532958][T17093] loop6: detected capacity change from 0 to 128 [ 546.536457][T17084] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 546.536496][T17084] hpfs: filesystem error: improperly stopped [ 546.536520][T17084] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 546.536539][T17084] hpfs: You really don't want any checks? You are crazy... [ 546.536561][T17084] hpfs: Code page index out of array [ 546.536570][T17084] hpfs: code page support is disabled [ 546.536649][T17084] hpfs: hpfs_map_4sectors(): unaligned read [ 546.536688][T17084] hpfs: hpfs_map_4sectors(): unaligned read [ 546.536699][T17084] hpfs: filesystem error: unable to find root dir [ 546.564892][ T26] audit: type=1800 audit(1787016139.803:2152): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 546.796550][T17019] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.805994][T17019] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.822977][T17019] device bridge_slave_0 entered promiscuous mode [ 546.847785][T17019] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.855606][T17019] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.864938][T17019] device bridge_slave_1 entered promiscuous mode [ 546.901415][ T4681] Bluetooth: hci1: command 0x0409 tx timeout [ 546.915782][T17104] loop5: detected capacity change from 0 to 256 [ 546.971973][T17104] exfat: Deprecated parameter 'utf8' [ 546.973187][T17019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.977427][T17104] exfat: Deprecated parameter 'namecase' [ 546.993857][T17108] loop6: detected capacity change from 0 to 256 [ 547.020052][T17110] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 547.041913][T17019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.051877][T17104] exfat: Deprecated parameter 'namecase' [ 547.057841][T17104] exfat: Deprecated parameter 'utf8' [ 547.101502][T17104] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 547.142342][T17108] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 547.171250][T17019] team0: Port device team_slave_0 added [ 547.253516][T17019] team0: Port device team_slave_1 added [ 547.269805][T17117] udc-core: couldn't find an available UDC or it's busy [ 547.319694][T17117] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 547.359355][T17115] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4529'. [ 547.438473][T17115] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4529'. [ 547.612133][T17019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.619156][T17019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.667731][T17019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.681666][T17019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.688784][T17019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.776318][T17019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.056308][T17019] device hsr_slave_0 entered promiscuous mode [ 548.074795][T17019] device hsr_slave_1 entered promiscuous mode [ 548.099683][T17019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.112209][T17019] Cannot create hsr debugfs directory [ 548.172035][ T9] device hsr_slave_0 left promiscuous mode [ 548.189118][T17143] loop6: detected capacity change from 0 to 8192 [ 548.196193][ T9] device hsr_slave_1 left promiscuous mode [ 548.202268][ T4681] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 548.231864][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.239361][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.284333][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.304529][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.327232][T17143] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 548.342258][ T9] device bridge_slave_1 left promiscuous mode [ 548.348209][T17143] REISERFS (device loop6): using ordered data mode [ 548.355265][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.386349][ T9] device bridge_slave_0 left promiscuous mode [ 548.398814][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.411597][T17143] reiserfs: using flush barriers [ 548.418203][T17143] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 548.441450][ T4681] usb 5-1: Using ep0 maxpacket: 16 [ 548.471488][ T9] device veth1_macvtap left promiscuous mode [ 548.478805][ T9] device veth0_macvtap left promiscuous mode [ 548.509363][ T9] device veth1_vlan left promiscuous mode [ 548.530578][ T9] device veth0_vlan left promiscuous mode [ 548.541955][T17143] REISERFS (device loop6): checking transaction log (loop6) [ 548.561257][ T4681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.595280][ T4681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.627404][ T4681] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 548.686083][ T4681] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 548.729621][ T4681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.774829][ T4681] usb 5-1: config 0 descriptor?? [ 548.870652][T17143] REISERFS (device loop6): Using tea hash to sort names [ 548.884403][T17143] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 548.910839][T17163] netlink: 'syz.5.4540': attribute type 8 has an invalid length. [ 548.937325][T17163] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4540'. [ 548.983781][ T4270] Bluetooth: hci1: command 0x041b tx timeout [ 549.273874][ T4681] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 549.287473][ T4681] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 549.303082][ T4681] microsoft 0003:045E:07DA.002D: ignoring exceeding usage max [ 549.324753][ T4681] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 549.343781][ T4681] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 549.351333][ T4681] microsoft 0003:045E:07DA.002D: unsupported Resolution Multiplier 0 [ 549.371784][ T4681] microsoft 0003:045E:07DA.002D: implement() called with n (56) > 32! (kworker/1:18) [ 549.490674][ T9] team0 (unregistering): Port device team_slave_1 removed [ 549.491453][ T4681] microsoft 0003:045E:07DA.002D: unsupported Resolution Multiplier 0 [ 549.508077][ T4681] microsoft 0003:045E:07DA.002D: No inputs registered, leaving [ 549.521745][ T4681] microsoft 0003:045E:07DA.002D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 549.533478][ T4681] microsoft 0003:045E:07DA.002D: no inputs found [ 549.539933][ T4681] microsoft 0003:045E:07DA.002D: could not initialize ff, continuing anyway [ 549.563421][ T9] team0 (unregistering): Port device team_slave_0 removed [ 549.587059][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.618053][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.731382][ T4270] usb 5-1: USB disconnect, device number 50 [ 549.741107][ T4681] usb 7-1: new low-speed USB device number 50 using dummy_hcd [ 549.767287][ T9] bond0 (unregistering): Released all slaves [ 549.946925][T17170] lo speed is unknown, defaulting to 1000 [ 550.111496][ T4681] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 550.140079][ T4681] usb 7-1: config 0 has no interface number 0 [ 550.156206][ T4681] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 550.187882][ T4681] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 550.209411][ T4681] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 550.225624][ T4681] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.290689][ T4681] usb 7-1: config 0 descriptor?? [ 550.332805][T17165] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 550.359495][ T4681] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 550.591936][ T4766] usb 7-1: USB disconnect, device number 50 [ 550.610967][ C0] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 551.074399][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 551.074415][ T26] audit: type=1800 audit(1787016144.313:2203): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266407 res=0 errno=0 [ 551.151053][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 551.170007][ T26] audit: type=1800 audit(1787016144.313:2204): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=266411 res=0 errno=0 [ 551.231046][ T26] audit: type=1800 audit(1787016144.343:2205): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266490 res=0 errno=0 [ 551.312073][ T26] audit: type=1800 audit(1787016144.353:2206): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=266494 res=0 errno=0 [ 551.383245][ T26] audit: type=1800 audit(1787016144.503:2207): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 551.481272][ T26] audit: type=1800 audit(1787016144.623:2208): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 551.571116][ T26] audit: type=1800 audit(1787016144.653:2209): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266573 res=0 errno=0 [ 551.645111][ T26] audit: type=1800 audit(1787016144.723:2210): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 551.702275][ T26] audit: type=1800 audit(1787016144.793:2211): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 551.765628][ T26] audit: type=1800 audit(1787016144.983:2212): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 551.949430][T17214] ip_tables: iptables: counters copy to user failed while replacing table [ 552.018919][T17214] tipc: Enabling of bearer rejected, already enabled [ 552.192258][T17019] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 552.210292][T17019] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 552.276343][T17019] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 552.312132][T17019] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 552.413224][ T8384] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 552.603618][T17019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.641484][T17237] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4566'. [ 552.660624][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 552.674510][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 552.695447][T17019] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.715775][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 552.732129][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 552.747960][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.755155][ T4620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.840567][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 552.848498][ T8384] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.867374][ T8384] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 552.882866][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 552.917306][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 552.928264][T17248] sctp: [Deprecated]: syz.0.4569 (pid 17248) Use of struct sctp_assoc_value in delayed_ack socket option. [ 552.928264][T17248] Use struct sctp_sack_info instead [ 552.955777][ T4620] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.962981][ T4620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.981610][ T8384] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 552.992977][ T8384] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 553.022362][ T8384] usb 7-1: SerialNumber: syz [ 553.029387][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 553.087649][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 553.145102][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 553.197145][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 553.221176][ T4677] Bluetooth: hci1: command 0x0419 tx timeout [ 553.228563][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 553.273297][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 553.289446][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 553.354057][ T8384] usb 7-1: 0:2 : does not exist [ 553.368812][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 553.387465][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 553.418592][ T8384] usb 7-1: USB disconnect, device number 51 [ 553.473665][T17019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.526486][T17019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 553.560706][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 553.570075][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 553.762770][T15330] udevd[15330]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.005860][T17273] loop5: detected capacity change from 0 to 4096 [ 554.077412][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 554.100047][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 554.134847][T17273] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 554.177731][T17019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.187471][T17273] ntfs3: loop5: Failed to load $Extend. [ 554.253627][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 554.273113][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 554.343357][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 554.372405][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 554.402402][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 554.434627][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 554.505934][T17019] device veth0_vlan entered promiscuous mode [ 554.569133][T17019] device veth1_vlan entered promiscuous mode [ 554.684399][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 554.724143][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 554.799144][T17019] device veth0_macvtap entered promiscuous mode [ 554.851538][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 554.893404][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 554.969441][ T5762] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 555.009981][T17019] device veth1_macvtap entered promiscuous mode [ 555.079507][T17019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.161153][T17019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.205055][T17019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.229736][T17019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.251341][T17019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.274075][T17019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.319731][T17315] binder: 17311:17315 ioctl c0306201 200000001a80 returned -14 [ 555.341037][T17019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.360235][T17019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.375321][T17019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.394931][T17019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.402125][T17325] loop4: detected capacity change from 0 to 256 [ 555.436705][T17019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.453997][T17322] bond0: Caught tx_queue_len zero misconfig [ 555.471126][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 555.477793][T17329] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4591'. [ 555.501333][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 555.538654][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 555.603615][T17019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.622588][T17019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.656758][T17019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.677731][T17019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.699118][T17019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.714554][T17019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.725227][T17019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.735833][T17019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.745953][T17019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.756511][T17019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.783655][T17019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.811404][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 555.826800][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 555.844441][T17019] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.877155][T17019] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.921047][T17019] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.922244][T17339] ieee802154 phy0 wpan0: encryption failed: -22 [ 555.929825][T17019] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.107648][T17334] loop4: detected capacity change from 0 to 8192 [ 556.150406][T17342] Invalid argument reading file caps for ./file0 [ 556.172955][ T26] kauditd_printk_skb: 49 callbacks suppressed [ 556.172971][ T26] audit: type=1800 audit(1787081685.405:2262): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 556.256230][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.270611][T17334] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 556.291341][ T26] audit: type=1800 audit(1787081685.435:2263): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=267569 res=0 errno=0 [ 556.311239][ T26] audit: type=1800 audit(1787081685.505:2264): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 556.329933][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.343716][T17334] REISERFS (device loop4): using ordered data mode [ 556.350287][T17334] reiserfs: using flush barriers [ 556.356722][T17334] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 556.382395][T17334] REISERFS (device loop4): checking transaction log (loop4) [ 556.397198][T17334] REISERFS (device loop4): Using r5 hash to sort names [ 556.404830][T17334] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 556.448379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 556.475332][ T26] audit: type=1800 audit(1787081685.705:2265): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 556.513084][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.541605][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.673267][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 556.718245][ T26] audit: type=1800 audit(1787081685.945:2266): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 556.894573][ T26] audit: type=1800 audit(1787081686.095:2267): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 557.127233][ T26] audit: type=1800 audit(1787081686.095:2268): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=267740 res=0 errno=0 [ 557.341046][ T26] audit: type=1800 audit(1787081686.245:2269): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 557.456376][ T26] audit: type=1800 audit(1787081686.475:2270): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 557.478715][T17350] loop6: detected capacity change from 0 to 131072 [ 557.548822][ T26] audit: type=1800 audit(1787081686.535:2271): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 557.569219][T17350] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 557.577380][T17350] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 557.624210][T17350] F2FS-fs (loop6): invalid crc value [ 557.657925][T17350] F2FS-fs (loop6): Found nat_bits in checkpoint [ 557.741628][T17350] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 557.748734][T17350] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 558.231180][ T8384] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 558.481088][ T8384] usb 6-1: Using ep0 maxpacket: 16 [ 558.823553][ T8384] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 558.846311][ T8384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.866005][ T8384] usb 6-1: Product: syz [ 558.870240][ T8384] usb 6-1: Manufacturer: syz [ 558.901647][ T8384] usb 6-1: SerialNumber: syz [ 558.911718][ T8384] r8152-cfgselector 6-1: config 0 descriptor?? [ 559.181306][ T8384] r8152-cfgselector 6-1: Unknown version 0x0000 [ 559.256741][T17407] loop6: detected capacity change from 0 to 7 [ 559.451615][ T8384] r8152-cfgselector 6-1: Unknown version 0x0000 [ 559.471545][ T8384] r8152-cfgselector 6-1: USB disconnect, device number 42 [ 559.520532][T17415] loop6: detected capacity change from 0 to 8 [ 559.629944][T17418] loop3: detected capacity change from 0 to 128 [ 559.740612][T17418] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 559.765726][T17423] loop6: detected capacity change from 0 to 256 [ 559.824729][T17418] FAT-fs (loop3): error, parent dir link count too low (2) [ 559.849257][T17418] FAT-fs (loop3): Filesystem has been set read-only [ 559.908727][ T7] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 559.930358][T17423] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 560.001190][ T7] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 560.071652][T17019] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 560.621041][ T4270] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 560.736345][T17453] loop6: detected capacity change from 0 to 4096 [ 560.780163][T17453] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 560.871111][ T4270] usb 6-1: Using ep0 maxpacket: 8 [ 560.878401][T17453] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 560.909001][T17453] ntfs3: loop6: Failed to load $Extend. [ 560.990137][T17453] ntfs3: loop6: MftZone: unavailable [ 560.992054][ T4270] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 561.019006][T17453] ntfs3: loop6: MftZone: unavailable [ 561.031584][ T4270] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 561.053557][T17453] ntfs3: loop6: no free space to extend mft [ 561.072049][ T4270] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 561.122968][ T4270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.192527][ T4270] kobil_sct 6-1:1.0: KOBIL USB smart card terminal converter detected [ 561.236208][ T4270] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 561.261594][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 561.261610][ T26] audit: type=1800 audit(1787081690.495:2303): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268216 res=0 errno=0 [ 561.450611][ T26] audit: type=1800 audit(1787081690.495:2304): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=268256 res=0 errno=0 [ 561.524391][T17450] loop3: detected capacity change from 0 to 32768 [ 561.537303][ T26] audit: type=1800 audit(1787081690.495:2305): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=268223 res=0 errno=0 [ 561.636862][ T26] audit: type=1800 audit(1787081690.535:2306): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 561.678228][T17450] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 561.704876][ T26] audit: type=1800 audit(1787081690.565:2307): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=268224 res=0 errno=0 [ 561.726139][ T26] audit: type=1800 audit(1787081690.575:2308): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=268225 res=0 errno=0 [ 561.746944][ T26] audit: type=1800 audit(1787081690.595:2309): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268265 res=0 errno=0 [ 561.767810][ T26] audit: type=1800 audit(1787081690.595:2310): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268281 res=0 errno=0 [ 561.792403][ T26] audit: type=1800 audit(1787081690.605:2311): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268295 res=0 errno=0 [ 561.825725][ T26] audit: type=1800 audit(1787081690.605:2312): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=268266 res=0 errno=0 [ 561.880433][T17450] (syz.3.4625,17450,0):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 561.923527][T17450] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #64 has bitmap size 448 but physical max of 256 [ 561.994354][T17450] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 562.042467][T17450] OCFS2: File system is now read-only. [ 562.071919][ T7] usb 6-1: USB disconnect, device number 43 [ 562.078564][T17450] (syz.3.4625,17450,0):ocfs2_test_suballoc_bit:2814 ERROR: read group 64 failed -30 [ 562.096819][ T7] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 562.123877][T17450] (syz.3.4625,17450,0):ocfs2_test_suballoc_bit:2825 ERROR: status = -30 [ 562.143298][ T7] kobil_sct 6-1:1.0: device disconnected [ 562.197420][T17450] (syz.3.4625,17450,0):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -30 [ 562.233866][T17450] (syz.3.4625,17450,0):ocfs2_test_inode_bit:2896 ERROR: status = -30 [ 562.260967][T17450] (syz.3.4625,17450,0):ocfs2_get_parent:166 ERROR: test inode bit failed -30 [ 562.370811][T17019] ocfs2: Unmounting device (7,3) on (node local) [ 562.728344][T17488] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 562.729490][T17464] loop6: detected capacity change from 0 to 32768 [ 562.792596][T17488] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4631'. [ 562.937299][T17464] XFS (loop6): Mounting V5 Filesystem [ 562.985418][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.991808][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.075861][T17464] XFS (loop6): Ending clean mount [ 563.204827][T17470] loop4: detected capacity change from 0 to 32768 [ 563.211576][ T5734] XFS (loop6): Unmounting Filesystem [ 563.340378][T17470] gfs2: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 563.888297][T17526] loop3: detected capacity change from 0 to 512 [ 564.081732][ T6531] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 564.297359][T17534] loop3: detected capacity change from 0 to 1024 [ 564.440578][T17534] EXT4-fs (loop3): Ignoring removed bh option [ 564.494027][ T6531] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 564.510788][ T6531] usb 6-1: config 2 has no interface number 0 [ 564.523805][T17534] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 564.541829][T17534] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.563533][ T6531] usb 6-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 564.586200][T17534] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 3: comm syz.3.4641: lblock 3 mapped to illegal pblock 3 (length 3) [ 564.609713][T17534] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 564.658587][ T6531] usb 6-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 564.694242][T17534] EXT4-fs (loop3): This should not happen!! Data will be lost [ 564.694242][T17534] [ 564.724705][ T6531] usb 6-1: config 2 interface 88 has no altsetting 0 [ 564.756059][T17548] EXT4-fs error (device loop3): ext4_ext_remove_space:2944: inode #15: comm syz.3.4641: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 564.827894][T17548] EXT4-fs error (device loop3) in ext4_setattr:5645: Corrupt filesystem [ 564.866450][T17545] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4641: bg 0: block 112: padding at end of block bitmap is not set [ 564.882498][T17545] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 1 with error 28 [ 564.921237][ T6531] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 564.933233][T17545] EXT4-fs (loop3): This should not happen!! Data will be lost [ 564.933233][T17545] [ 564.943383][ T6531] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.950873][T17545] EXT4-fs (loop3): Total free blocks count 0 [ 564.966559][T17545] EXT4-fs (loop3): Free/Dirty block details [ 564.990417][T17545] EXT4-fs (loop3): free_blocks=0 [ 565.001114][ T6531] usb 6-1: Product: syz [ 565.029026][ T6531] usb 6-1: Manufacturer: syz [ 565.041523][ T6531] usb 6-1: SerialNumber: syz [ 565.066729][T17545] EXT4-fs (loop3): dirty_blocks=16 [ 565.081325][T17523] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 565.088191][T17545] EXT4-fs (loop3): Block reservation details [ 565.099917][T17523] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 565.131218][T17545] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 565.362327][T17523] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 565.370124][T17562] netlink: 'syz.0.4647': attribute type 1 has an invalid length. [ 565.400397][T17542] loop6: detected capacity change from 0 to 40427 [ 565.410470][T17523] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 565.426985][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4647'. [ 565.478615][T17542] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 565.485603][T17564] loop3: detected capacity change from 0 to 128 [ 565.517355][T17542] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 565.570272][T17542] F2FS-fs (loop6): invalid crc value [ 565.689348][T17542] F2FS-fs (loop6): Found nat_bits in checkpoint [ 566.023308][T17542] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 566.030408][T17542] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 566.073412][T17592] loop3: detected capacity change from 0 to 512 [ 566.208296][T17592] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 566.256617][T17592] System zones: 1-12 [ 566.300672][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 566.300687][ T26] audit: type=1800 audit(1787081695.525:2346): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 566.331195][ T6531] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 566.341885][ T6531] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 566.360524][ T6531] asix: probe of 6-1:2.88 failed with error -71 [ 566.372882][T17592] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.4655: Directory hole found for htree index block 0 [ 566.380330][ T6531] usb 6-1: USB disconnect, device number 44 [ 566.426322][T17592] EXT4-fs (loop3): Remounting filesystem read-only [ 566.446658][T17592] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 566.481138][ T26] audit: type=1800 audit(1787081695.595:2347): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=268496 res=0 errno=0 [ 566.528017][T17592] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.4655: Directory hole found for htree index block 0 [ 566.561159][ T26] audit: type=1800 audit(1787081695.635:2348): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268517 res=0 errno=0 [ 566.596823][T17592] EXT4-fs (loop3): Remounting filesystem read-only [ 566.643020][T17592] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 566.670994][T17592] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nodioread_nolock,errors=remount-ro,,. Quota mode: writeback. [ 566.690662][ T26] audit: type=1800 audit(1787081695.865:2349): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 566.887259][ T26] audit: type=1800 audit(1787081696.125:2350): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 566.988267][T17592] loop3: detected capacity change from 0 to 512 [ 567.093696][T17592] EXT4-fs (loop3): Ignoring removed oldalloc option [ 567.117876][ T26] audit: type=1800 audit(1787081696.345:2351): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 567.161138][T17592] EXT4-fs (loop3): 1 truncate cleaned up [ 567.166861][T17592] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 567.187208][T17592] EXT4-fs (loop3): can't change dax mount option while remounting [ 567.291005][ T26] audit: type=1800 audit(1787081696.445:2352): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 567.386282][ T26] audit: type=1800 audit(1787081696.605:2353): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 567.600152][ T26] audit: type=1800 audit(1787081696.825:2354): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 567.730867][ T26] audit: type=1800 audit(1787081696.955:2355): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 567.760419][T17653] loop5: detected capacity change from 0 to 1024 [ 567.809371][T17657] loop3: detected capacity change from 0 to 256 [ 567.849385][T17658] loop4: detected capacity change from 0 to 256 [ 567.901857][T17657] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 567.964838][T17653] hfsplus: xattr search failed [ 568.405795][T17677] loop6: detected capacity change from 0 to 128 [ 568.493011][T17677] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 568.678193][ T4620] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 568.695361][T17692] device-mapper: ioctl: name not supplied when creating device [ 569.048247][T17707] udc-core: couldn't find an available UDC or it's busy [ 569.094674][T17707] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 569.134458][T17712] input: syz1 as /devices/virtual/input/input72 [ 569.221999][T17717] loop5: detected capacity change from 0 to 512 [ 569.367778][T17717] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,sysvgroups,inode_readahead_blks=0x0000000000800000,bsdgroups,i_version,nobarrier,. Quota mode: writeback. [ 569.474217][T17717] ext4 filesystem being mounted at /906/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.490054][T17726] loop6: detected capacity change from 0 to 1024 [ 569.677879][T17726] hfsplus: xattr search failed [ 569.854251][T17737] input: syz0 as /devices/virtual/input/input73 [ 570.442161][T17761] loop4: detected capacity change from 0 to 64 [ 570.528747][T17766] loop5: detected capacity change from 0 to 16 [ 570.578077][T17766] erofs: (device loop5): mounted with root inode @ nid 36. [ 570.641370][T14942] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -10 in[4096, 0] out[9000] [ 570.679127][T17766] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -10 in[4096, 0] out[4096] [ 571.241005][ T4677] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 571.303069][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 571.303085][ T26] audit: type=1800 audit(1787081700.535:2412): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 571.347262][T17745] loop3: detected capacity change from 0 to 32768 [ 571.449674][T17745] XFS (loop3): Mounting V5 Filesystem [ 571.501114][ T4677] usb 7-1: Using ep0 maxpacket: 32 [ 571.596341][T17745] XFS (loop3): Ending clean mount [ 571.603538][T17745] XFS (loop3): Quotacheck needed: Please wait. [ 571.611370][ T26] audit: type=1800 audit(1787081700.845:2413): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=269116 res=0 errno=0 [ 571.631698][ T4677] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 571.640790][ T4677] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.691099][ T4677] usb 7-1: config 0 descriptor?? [ 571.750310][T17745] XFS (loop3): Quotacheck: Done. [ 571.767360][ T26] audit: type=1800 audit(1787081700.995:2414): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 572.002063][ T4677] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 572.010406][T17019] XFS (loop3): Unmounting Filesystem [ 572.023406][ T4677] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 572.052938][ T4677] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 572.060211][ T4677] usb 7-1: media controller created [ 572.119910][ T4677] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 572.224275][ T4677] az6027: usb out operation failed. (-71) [ 572.261703][ T4677] az6027: usb out operation failed. (-71) [ 572.267516][ T4677] stb0899_attach: Driver disabled by Kconfig [ 572.285373][ T4677] az6027: no front-end attached [ 572.285373][ T4677] [ 572.331127][ T4677] az6027: usb out operation failed. (-71) [ 572.341016][T10561] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 572.348924][ T4677] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 572.361021][ T26] audit: type=1800 audit(1787081701.595:2415): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 572.414239][ T4677] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input74 [ 572.428027][ T4677] dvb-usb: schedule remote query interval to 400 msecs. [ 572.446432][ T4677] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 572.471051][ T26] audit: type=1800 audit(1787081701.695:2416): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=269132 res=0 errno=0 [ 572.532939][ T4677] usb 7-1: USB disconnect, device number 52 [ 572.613454][ T26] audit: type=1800 audit(1787081701.695:2417): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=269172 res=0 errno=0 [ 572.698225][ T26] audit: type=1800 audit(1787081701.725:2418): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=269139 res=0 errno=0 [ 572.721880][ T4677] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 572.791198][ T26] audit: type=1800 audit(1787081701.725:2419): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=269140 res=0 errno=0 [ 572.898329][ T26] audit: type=1800 audit(1787081701.725:2420): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=269141 res=0 errno=0 [ 572.931211][T10561] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 572.950589][T10561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.970826][T10561] usb 5-1: Product: syz [ 572.997763][ T26] audit: type=1800 audit(1787081701.725:2421): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=269213 res=0 errno=0 [ 573.020276][T10561] usb 5-1: Manufacturer: syz [ 573.021627][ T4764] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 573.047793][T10561] usb 5-1: SerialNumber: syz [ 573.281311][T17841] loop3: detected capacity change from 0 to 1024 [ 573.321361][ T4764] usb 6-1: Using ep0 maxpacket: 8 [ 573.454052][T17841] hfsplus: xattr search failed [ 573.471352][ T4764] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 573.479531][ T4764] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 573.540964][ T4764] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 573.569820][ T4764] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 573.608068][ T4764] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 573.661355][ T4764] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.714178][ T4764] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 573.770217][ T4764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.199363][T17857] loop3: detected capacity change from 0 to 32768 [ 574.211318][ T4764] usb 6-1: GET_CAPABILITIES returned 0 [ 574.216874][ T4764] usbtmc 6-1:16.0: can't read capabilities [ 574.273345][T17861] loop6: detected capacity change from 0 to 64 [ 574.304615][T17857] (syz.3.4725,17857,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 574.319080][T17857] (syz.3.4725,17857,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 574.343422][ T4677] usb 6-1: USB disconnect, device number 45 [ 574.353457][T17857] JBD2: Ignoring recovery information on journal [ 574.443176][T17857] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 574.511096][T10561] usb 5-1: probing VID:PID(0424:012C) [ 574.518514][T10561] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 574.550071][T10561] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 574.589398][T10561] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 574.644273][T10561] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 574.650787][T10561] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 574.723789][T10561] vub300: probe of 5-1:1.0 failed with error -71 [ 574.756945][T17019] ocfs2: Unmounting device (7,3) on (node local) [ 574.783621][T10561] usb 5-1: USB disconnect, device number 51 [ 575.950977][T17880] loop5: detected capacity change from 0 to 131072 [ 576.078995][T17880] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 576.087320][T17880] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 576.097829][T17880] F2FS-fs (loop5): invalid crc value [ 576.146406][T17880] F2FS-fs (loop5): Found nat_bits in checkpoint [ 576.238755][T17880] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 576.245920][T17880] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 576.310646][T17923] loop3: detected capacity change from 0 to 2048 [ 576.333958][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 576.333974][ T26] audit: type=1800 audit(1787081705.565:2479): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 576.361100][T17880] F2FS-fs (loop5): checksum invalid, nid = 7, ino_of_node = 7, a6222242 vs. 7c4dd4cf [ 576.373090][ T8384] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 576.380724][T17880] F2FS-fs (loop5): checksum invalid, nid = 7, ino_of_node = 7, a6222242 vs. 7c4dd4cf [ 576.527499][ T26] audit: type=1800 audit(1787081705.755:2480): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 576.606418][ T26] audit: type=1800 audit(1787081705.835:2481): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 576.638413][T17923] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 576.649928][T17923] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.742052][T17938] udc-core: couldn't find an available UDC or it's busy [ 576.749490][ T26] audit: type=1800 audit(1787081705.975:2482): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35830 res=0 errno=0 [ 576.797884][T17938] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 576.851936][ T8384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 576.875371][ T8384] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 576.911539][ T8384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 576.940980][ T8384] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 576.987938][ T8384] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 577.008257][ T8384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.038671][ T8384] usb 5-1: config 0 descriptor?? [ 577.071616][ T26] audit: type=1800 audit(1787081706.285:2483): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 577.111184][T10561] usb 7-1: new low-speed USB device number 53 using dummy_hcd [ 577.154483][ T26] audit: type=1800 audit(1787081706.385:2484): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 577.218009][ T26] audit: type=1800 audit(1787081706.445:2485): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 577.302023][ T26] audit: type=1800 audit(1787081706.535:2486): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 577.341525][ T8384] hdpvr 5-1:0.0: firmware version 0x12 dated ¾@µ2Ì7ÔB½•ËDŠ^jvi0ì [ 577.341525][ T8384] †Ã›‘êpY [ 577.421801][ T26] audit: type=1800 audit(1787081706.605:2487): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 577.481232][T10561] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 577.499549][T10561] usb 7-1: config 0 has no interface number 0 [ 577.530050][T10561] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 577.558454][ T26] audit: type=1800 audit(1787081706.785:2488): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 577.579774][T10561] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 577.581545][ T8384] hdpvr 5-1:0.0: device init failed [ 577.616123][T10561] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 577.637722][ T8384] hdpvr: probe of 5-1:0.0 failed with error -12 [ 577.646966][T10561] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.682586][T10561] usb 7-1: config 0 descriptor?? [ 577.689579][ T8384] usb 5-1: USB disconnect, device number 52 [ 577.702923][T17941] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 577.741893][T10561] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 577.931016][T17975] bond0: (slave macvlan0): Opening slave failed [ 577.969028][T10561] usb 7-1: USB disconnect, device number 53 [ 577.980978][ C1] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 578.595687][T18000] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4763'. [ 578.729437][T18003] device batadv_slave_1 entered promiscuous mode [ 578.770526][T18002] device batadv_slave_1 left promiscuous mode [ 579.103607][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 579.563059][T10561] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 579.656455][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4780'. [ 579.666545][T18039] loop6: detected capacity change from 0 to 8192 [ 579.792743][T18039] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 579.841637][T18039] REISERFS (device loop6): using ordered data mode [ 579.848516][T18045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 579.909326][T18020] loop4: detected capacity change from 0 to 32768 [ 579.911126][T18039] reiserfs: using flush barriers [ 579.931246][T10561] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 579.939315][T10561] usb 4-1: config 0 has no interface number 0 [ 579.950623][T18020] XFS: ikeep mount option is deprecated. [ 579.963346][T10561] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 579.990966][T10561] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 580.008106][T10561] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 580.017591][T10561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.031138][T18039] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 580.047972][T10561] usb 4-1: config 0 descriptor?? [ 580.061699][T18039] REISERFS (device loop6): checking transaction log (loop6) [ 580.071552][T18034] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 580.098414][T10561] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 580.143507][T18039] REISERFS (device loop6): Using r5 hash to sort names [ 580.182958][T18039] REISERFS (device loop6): using 3.5.x disk format [ 580.214371][T18039] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 580.248172][T18020] XFS (loop4): Mounting V5 Filesystem [ 580.424602][ T4677] usb 4-1: USB disconnect, device number 4 [ 580.440954][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 580.651101][T18020] XFS (loop4): Ending clean mount [ 580.729141][T18020] XFS (loop4): Quotacheck needed: Please wait. [ 580.856365][T18020] XFS (loop4): Quotacheck: Done. [ 580.903800][ T4192] XFS (loop4): Unmounting Filesystem [ 581.543838][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 581.543856][ T26] audit: type=1800 audit(1787081710.775:2541): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 581.677697][ T26] audit: type=1800 audit(1787081710.905:2542): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 581.742176][ T26] audit: type=1800 audit(1787081710.965:2543): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 581.830234][T18111] device syzkaller1 entered promiscuous mode [ 581.835743][ T26] audit: type=1800 audit(1787081711.055:2544): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 581.932777][ T26] audit: type=1800 audit(1787081711.165:2545): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 581.994828][T18120] loop5: detected capacity change from 0 to 512 [ 582.003037][ T26] audit: type=1800 audit(1787081711.215:2546): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 582.063948][T18120] EXT4-fs (loop5): Test dummy encryption mode enabled [ 582.090949][ T26] audit: type=1800 audit(1787081711.315:2547): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 582.121253][T18120] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 582.168017][T18120] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.4796: bad orphan inode 131083 [ 582.190640][ T26] audit: type=1800 audit(1787081711.375:2548): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 582.210532][T18120] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue. Quota mode: none. [ 582.322567][T18122] loop3: detected capacity change from 0 to 2048 [ 582.365053][T18120] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: none. [ 582.390265][T18133] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.4796: path /931/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 582.498975][T18122] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,errors=remount-ro,max_dir_size_kb=0x0000000000000004,grpjquota=,. Quota mode: none. [ 582.582477][ T26] audit: type=1800 audit(1787081711.815:2549): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 582.884437][ T26] audit: type=1800 audit(1787081712.115:2550): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 582.956264][T18128] loop4: detected capacity change from 0 to 32768 [ 583.036356][T18128] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 583.055396][ T5300] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 583.101988][T18128] JBD2: Ignoring recovery information on journal [ 583.264246][T18128] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 583.493394][ T5300] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 583.513443][ T5300] usb 6-1: config 0 has no interface number 0 [ 583.529981][ T5300] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 583.567365][ T5300] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 583.639497][ T5300] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 583.659800][ T5300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.688387][ T5300] usb 6-1: config 0 descriptor?? [ 583.712271][T18143] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 583.722894][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 583.766018][ T5300] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 583.927558][T18168] loop9: detected capacity change from 0 to 524287936 [ 583.937259][T18170] loop5: detected capacity change from 0 to 6 [ 583.986411][T18170] Dev loop5: unable to read RDB block 6 [ 584.001837][T18170] loop5: AHDI p3 [ 584.005552][T18170] loop5: partition table partially beyond EOD, truncated [ 584.022818][ T5300] usb 6-1: USB disconnect, device number 46 [ 584.148622][T18175] loop4: detected capacity change from 0 to 256 [ 584.387995][T18183] loop3: detected capacity change from 0 to 1024 [ 584.510422][T18183] handle_bad_sector: 24 callbacks suppressed [ 584.510444][T18183] attempt to access beyond end of device [ 584.510444][T18183] loop3: rw=2049, want=5780, limit=1024 [ 584.601600][T18183] Buffer I/O error on dev loop3, logical block 2889, lost async page write [ 584.742792][T18195] loop4: detected capacity change from 0 to 512 [ 584.821107][T18195] FAT-fs (loop4): bogus number of FAT sectors [ 584.827284][T18195] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 584.934846][T18195] FAT-fs (loop4): Can't find a valid FAT filesystem [ 585.282999][T18216] udc-core: couldn't find an available UDC or it's busy [ 585.318867][T18216] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 585.539695][T18207] loop5: detected capacity change from 0 to 32768 [ 585.671211][T18207] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 1 [ 585.671211][T18207] [ 586.411804][T18226] loop5: detected capacity change from 0 to 32768 [ 586.528829][T18226] JBD2: Ignoring recovery information on journal [ 586.638476][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 586.638492][ T26] audit: type=1800 audit(1787081715.865:2576): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 586.685498][T18226] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 586.740796][ T26] audit: type=1800 audit(1787081715.965:2577): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 586.782880][ T26] audit: type=1800 audit(1787081716.005:2578): pid=18226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4818" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 587.061686][T18226] syz.5.4818 (18226) used greatest stack depth: 18192 bytes left [ 587.160801][ T9] hfsplus: b-tree write err: -5, ino 25 [ 587.174704][ T9] hfsplus: b-tree write err: -5, ino 4 [ 587.180586][ T9] hfsplus: b-tree write err: -5, ino 2 [ 587.212652][ T4800] ocfs2: Unmounting device (7,5) on (node local) [ 587.226872][ T9] hfsplus: b-tree write err: -5, ino 26 [ 587.494210][ T26] audit: type=1800 audit(1787081716.725:2579): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 587.594280][ T26] audit: type=1800 audit(1787081716.775:2580): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 587.679790][ T26] audit: type=1800 audit(1787081716.805:2581): pid=18279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4835" name="dummy_udc" dev="gadgetfs" ino=32956 res=0 errno=0 [ 587.728766][ T26] audit: type=1800 audit(1787081716.865:2582): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 587.790681][ T26] audit: type=1800 audit(1787081716.945:2583): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 587.891091][ T8384] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 587.918868][ T26] audit: type=1800 audit(1787081717.145:2584): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 588.116838][ T26] audit: type=1800 audit(1787081717.345:2585): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 588.301503][ T8384] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 588.319801][ T8384] usb 5-1: config 0 has no interface number 0 [ 588.336695][ T8384] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 588.368124][ T8384] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 588.399806][ T8384] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 588.429380][ T8384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.459084][ T8384] usb 5-1: config 0 descriptor?? [ 588.501458][T18281] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 588.531370][ T8384] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 588.574551][T18283] set_capacity_and_notify: 1 callbacks suppressed [ 588.574570][T18283] loop3: detected capacity change from 0 to 40427 [ 588.737581][T18283] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 588.758648][T18283] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 588.778226][ T8384] usb 5-1: USB disconnect, device number 53 [ 588.791477][T18283] F2FS-fs (loop3): invalid crc value [ 588.800134][T18283] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 588.979316][T18322] input: syz1 as /devices/virtual/input/input76 [ 589.054130][T18283] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 589.076016][T18283] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 589.311153][T17019] attempt to access beyond end of device [ 589.311153][T17019] loop3: rw=2049, want=40976, limit=40427 [ 589.460947][ T4270] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 589.513192][T18345] loop6: detected capacity change from 0 to 8 [ 589.591464][T18345] loop6: detected capacity change from 8 to 0 [ 589.830480][T18352] loop6: detected capacity change from 0 to 8 [ 590.011320][ T4270] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 590.031232][ T4270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.071060][ T4270] usb 6-1: Product: syz [ 590.075348][ T4270] usb 6-1: Manufacturer: syz [ 590.108502][ T4270] usb 6-1: SerialNumber: syz [ 590.151351][ T4270] usb 6-1: config 0 descriptor?? [ 590.242052][ T4270] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 590.265739][ T4270] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 590.341361][ T4270] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 590.350728][ T4270] usb 6-1: media controller created [ 590.416303][ T4270] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 590.445916][T18331] dvb-usb: bulk message failed: -22 (7/0) [ 590.547360][ T4270] DVB: Unable to find symbol mt352_attach() [ 590.658845][ T4270] DVB: Unable to find symbol nxt6000_attach() [ 590.666205][ T4270] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 590.742421][ T4270] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input77 [ 590.795176][ T4270] dvb-usb: schedule remote query interval to 1000 msecs. [ 590.825136][ T4270] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 590.854302][T18394] loop4: detected capacity change from 0 to 512 [ 590.860533][ T4270] dvb-usb: bulk message failed: -22 (7/0) [ 590.880723][ T4270] dvb-usb: bulk message failed: -22 (7/0) [ 590.911263][ T4270] usb 6-1: USB disconnect, device number 47 [ 590.953327][T18394] EXT4-fs (loop4): Ignoring removed bh option [ 591.013165][ T4270] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 591.063810][T18394] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.4857: corrupted in-inode xattr [ 591.109320][T18394] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.4857: couldn't read orphan inode 15 (err -117) [ 591.124914][T18394] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 591.241750][T18403] loop3: detected capacity change from 0 to 1764 [ 591.683521][T18417] loop5: detected capacity change from 0 to 128 [ 591.764748][ T26] kauditd_printk_skb: 53 callbacks suppressed [ 591.764765][ T26] audit: type=1800 audit(1787081720.995:2639): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 591.933429][T18417] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 591.986631][T18425] kernel read not supported for file /eth0 (pid: 18425 comm: syz.0.4864) [ 592.011773][ T26] audit: type=1800 audit(1787081721.245:2640): pid=18425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4864" name="eth0" dev="mqueue" ino=59773 res=0 errno=0 [ 592.053466][T18417] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 592.172347][ T26] audit: type=1800 audit(1787081721.405:2641): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 592.285420][T18408] loop4: detected capacity change from 0 to 32768 [ 592.460190][ T26] audit: type=1800 audit(1787081721.685:2642): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 592.538833][T18408] JBD2: Ignoring recovery information on journal [ 592.541656][T18414] loop3: detected capacity change from 0 to 32768 [ 592.638791][ T26] audit: type=1800 audit(1787081721.855:2643): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35512 res=0 errno=0 [ 592.707052][T18408] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 592.747699][ T26] audit: type=1800 audit(1787081721.955:2644): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 592.795846][T18414] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 1 [ 592.795846][T18414] [ 592.919045][ T26] audit: type=1800 audit(1787081722.055:2645): pid=18408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4860" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 593.023971][T18447] [ 593.026350][T18447] ====================================================== [ 593.033372][T18447] WARNING: possible circular locking dependency detected [ 593.040508][T18447] syzkaller #0 Not tainted [ 593.044923][T18447] ------------------------------------------------------ [ 593.051948][T18447] syz.4.4860/18447 is trying to acquire lock: [ 593.058037][T18447] ffff88807ad5c990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x19f/0x270 [ 593.067758][T18447] [ 593.067758][T18447] but task is already holding lock: [ 593.075178][T18447] ffff8880614078e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 593.085580][T18447] [ 593.085580][T18447] which lock already depends on the new lock. [ 593.085580][T18447] [ 593.096009][T18447] [ 593.096009][T18447] the existing dependency chain (in reverse order) is: [ 593.105052][T18447] [ 593.105052][T18447] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 593.113604][T18447] down_read+0x44/0x2e0 [ 593.118330][T18447] ocfs2_start_trans+0x3a6/0x6f0 [ 593.123828][T18447] ocfs2_update_inode_atime+0xed/0x580 [ 593.129856][T18447] ocfs2_inode_lock_atime+0x338/0x530 [ 593.135807][T18447] ocfs2_readdir+0x184/0x470 [ 593.141030][T18447] iterate_dir+0x213/0x550 [ 593.145991][T18447] __se_sys_getdents64+0xf2/0x270 [ 593.151587][T18447] do_syscall_64+0x4c/0xa0 [ 593.156547][T18447] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 593.162977][T18447] [ 593.162977][T18447] -> #4 (sb_internal#3){.+.+}-{0:0}: [ 593.170480][T18447] ocfs2_start_trans+0x2a7/0x6f0 [ 593.175965][T18447] ocfs2_acquire_dquot+0x6c0/0xb30 [ 593.181733][T18447] dqget+0x713/0xbb0 [ 593.186233][T18447] __dquot_initialize+0x3a9/0xd00 [ 593.191808][T18447] ocfs2_get_init_inode+0x144/0x1b0 [ 593.197556][T18447] ocfs2_mknod+0x8c1/0x2510 [ 593.202599][T18447] ocfs2_create+0x192/0x420 [ 593.207650][T18447] path_openat+0x120a/0x2fb0 [ 593.212820][T18447] do_filp_open+0x1df/0x400 [ 593.218129][T18447] do_sys_openat2+0x14b/0x500 [ 593.223467][T18447] __x64_sys_creat+0x8c/0xb0 [ 593.228617][T18447] do_syscall_64+0x4c/0xa0 [ 593.233581][T18447] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 593.240020][T18447] [ 593.240020][T18447] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 593.248897][T18447] down_write+0x38/0x60 [ 593.253596][T18447] ocfs2_create_local_dquot+0x199/0x18d0 [ 593.259854][T18447] ocfs2_acquire_dquot+0x822/0xb30 [ 593.265501][T18447] dqget+0x713/0xbb0 [ 593.269939][T18447] __dquot_initialize+0x3a9/0xd00 [ 593.275495][T18447] ocfs2_get_init_inode+0x144/0x1b0 [ 593.281229][T18447] ocfs2_mknod+0x8c1/0x2510 [ 593.286294][T18447] ocfs2_create+0x192/0x420 [ 593.291327][T18447] path_openat+0x120a/0x2fb0 [ 593.296455][T18447] do_filp_open+0x1df/0x400 [ 593.301491][T18447] do_sys_openat2+0x14b/0x500 [ 593.306701][T18447] __x64_sys_creat+0x8c/0xb0 [ 593.311824][T18447] do_syscall_64+0x4c/0xa0 [ 593.316775][T18447] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 593.323215][T18447] [ 593.323215][T18447] -> #2 (&dquot->dq_lock){+.+.}-{3:3}: [ 593.330875][T18447] __mutex_lock_common+0x1e5/0x2400 [ 593.336620][T18447] mutex_lock_nested+0x17/0x20 [ 593.341925][T18447] dquot_commit+0x5a/0x410 [ 593.346880][T18447] ext4_write_dquot+0x1f0/0x360 [ 593.352337][T18447] mark_all_dquot_dirty+0x1e3/0x400 [ 593.358073][T18447] __dquot_free_space+0x7c3/0xb80 [ 593.363635][T18447] ext4_free_blocks+0x1b1b/0x24c0 [ 593.369280][T18447] ext4_ext_remove_space+0x2106/0x41a0 [ 593.375322][T18447] ext4_ext_truncate+0x182/0x230 [ 593.380841][T18447] ext4_truncate+0xa41/0x1190 [ 593.386071][T18447] ext4_evict_inode+0xb0f/0x1050 [ 593.391543][T18447] evict+0x4b6/0x8b0 [ 593.396063][T18447] ext4_orphan_cleanup+0xad8/0x1320 [ 593.401816][T18447] ext4_fill_super+0x8c65/0x93f0 [ 593.407290][T18447] mount_bdev+0x28a/0x3c0 [ 593.412155][T18447] legacy_get_tree+0xe6/0x180 [ 593.417478][T18447] vfs_get_tree+0x88/0x270 [ 593.422434][T18447] do_new_mount+0x247/0xa40 [ 593.427530][T18447] __se_sys_mount+0x2e3/0x3d0 [ 593.432747][T18447] do_syscall_64+0x4c/0xa0 [ 593.437707][T18447] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 593.444135][T18447] [ 593.444135][T18447] -> #1 (&ei->i_data_sem){++++}-{3:3}: [ 593.451801][T18447] down_read+0x44/0x2e0 [ 593.456520][T18447] ext4_map_blocks+0x350/0x1a50 [ 593.461919][T18447] ext4_append+0x22d/0x560 [ 593.466868][T18447] ext4_init_new_dir+0x2a7/0x910 [ 593.472338][T18447] ext4_mkdir+0x4c3/0xc90 [ 593.477196][T18447] vfs_mkdir+0x386/0x570 [ 593.481976][T18447] do_mkdirat+0x1dd/0x5c0 [ 593.486837][T18447] __x64_sys_mkdir+0x6a/0x80 [ 593.491964][T18447] do_syscall_64+0x4c/0xa0 [ 593.496944][T18447] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 593.503389][T18447] [ 593.503389][T18447] -> #0 (jbd2_handle){++++}-{0:0}: [ 593.510724][T18447] __lock_acquire+0x2c66/0x7b50 [ 593.516122][T18447] lock_acquire+0x19e/0x400 [ 593.521165][T18447] wait_transaction_locked+0x1bb/0x270 [ 593.527175][T18447] add_transaction_credits+0x104/0xcb0 [ 593.533169][T18447] start_this_handle+0x723/0x1560 [ 593.538727][T18447] jbd2__journal_start+0x2b7/0x5a0 [ 593.544373][T18447] jbd2_journal_start+0x26/0x30 [ 593.549752][T18447] ocfs2_start_trans+0x3b2/0x6f0 [ 593.555234][T18447] ocfs2_setattr+0xbdd/0x1b40 [ 593.560449][T18447] notify_change+0xbc6/0xee0 [ 593.565573][T18447] do_truncate+0x1ac/0x240 [ 593.570585][T18447] vfs_truncate+0x262/0x2f0 [ 593.575652][T18447] do_sys_truncate+0xf2/0x1c0 [ 593.580951][T18447] do_syscall_64+0x4c/0xa0 [ 593.585897][T18447] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 593.592324][T18447] [ 593.592324][T18447] other info that might help us debug this: [ 593.592324][T18447] [ 593.603083][T18447] Chain exists of: [ 593.603083][T18447] jbd2_handle --> sb_internal#3 --> &journal->j_trans_barrier [ 593.603083][T18447] [ 593.616486][T18447] Possible unsafe locking scenario: [ 593.616486][T18447] [ 593.623944][T18447] CPU0 CPU1 [ 593.629315][T18447] ---- ---- [ 593.634696][T18447] lock(&journal->j_trans_barrier); [ 593.639996][T18447] lock(sb_internal#3); [ 593.646794][T18447] lock(&journal->j_trans_barrier); [ 593.654615][T18447] lock(jbd2_handle); [ 593.658700][T18447] [ 593.658700][T18447] *** DEADLOCK *** [ 593.658700][T18447] [ 593.666856][T18447] 5 locks held by syz.4.4860/18447: [ 593.672508][T18447] #0: ffff888062e36460 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 593.681764][T18447] #1: ffff8880410bdf48 (&sb->s_type->i_mutex_key#27){+.+.}-{3:3}, at: do_truncate+0x198/0x240 [ 593.692228][T18447] #2: ffff8880410bdbe0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_setattr+0xbd0/0x1b40 [ 593.703123][T18447] #3: ffff888062e36650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_setattr+0xbdd/0x1b40 [ 593.712544][T18447] #4: ffff8880614078e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 593.723294][T18447] [ 593.723294][T18447] stack backtrace: [ 593.729191][T18447] CPU: 0 PID: 18447 Comm: syz.4.4860 Not tainted syzkaller #0 [ 593.736683][T18447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 593.746757][T18447] Call Trace: [ 593.750048][T18447] [ 593.752996][T18447] dump_stack_lvl+0x188/0x250 [ 593.757712][T18447] ? load_image+0x410/0x410 [ 593.762233][T18447] ? show_regs_print_info+0x20/0x20 [ 593.767488][T18447] ? print_circular_bug+0x12b/0x1a0 [ 593.772706][T18447] check_noncircular+0x296/0x330 [ 593.777666][T18447] ? add_chain_block+0x9b0/0x9b0 [ 593.782619][T18447] ? lockdep_lock+0xf1/0x1f0 [ 593.787231][T18447] ? mark_lock+0x94/0x320 [ 593.791583][T18447] ? _find_first_zero_bit+0xd1/0xf0 [ 593.796989][T18447] __lock_acquire+0x2c66/0x7b50 [ 593.801869][T18447] ? verify_lock_unused+0x140/0x140 [ 593.807080][T18447] ? verify_lock_unused+0x140/0x140 [ 593.812317][T18447] ? kasan_set_free_info+0x1f/0x40 [ 593.817526][T18447] ? ____kasan_slab_free+0xd5/0x110 [ 593.822768][T18447] ? mark_lock+0x94/0x320 [ 593.827111][T18447] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 593.833133][T18447] lock_acquire+0x19e/0x400 [ 593.837658][T18447] ? wait_transaction_locked+0x19f/0x270 [ 593.843310][T18447] ? wait_transaction_locked+0x17c/0x270 [ 593.848956][T18447] ? __lock_acquire+0x7b50/0x7b50 [ 593.853998][T18447] ? read_lock_is_recursive+0x10/0x10 [ 593.859410][T18447] wait_transaction_locked+0x1bb/0x270 [ 593.864880][T18447] ? wait_transaction_locked+0x19f/0x270 [ 593.870534][T18447] ? add_transaction_credits+0xcb0/0xcb0 [ 593.876187][T18447] ? __kernel_text_address+0x9a/0x100 [ 593.881577][T18447] ? init_wait_entry+0xd0/0xd0 [ 593.886355][T18447] ? stack_trace_save+0xf0/0xf0 [ 593.891221][T18447] ? arch_stack_walk+0xf2/0x140 [ 593.896157][T18447] add_transaction_credits+0x104/0xcb0 [ 593.901639][T18447] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 593.908334][T18447] ? read_lock_is_recursive+0x10/0x10 [ 593.913727][T18447] ? __kasan_slab_alloc+0xa9/0xc0 [ 593.918778][T18447] ? __kasan_slab_alloc+0x92/0xc0 [ 593.923820][T18447] ? slab_post_alloc_hook+0x4c/0x380 [ 593.929117][T18447] ? jbd2__journal_start+0x13c/0x5a0 [ 593.934419][T18447] ? jbd2_journal_start+0x26/0x30 [ 593.939459][T18447] ? ocfs2_start_trans+0x3b2/0x6f0 [ 593.944585][T18447] ? notify_change+0xbc6/0xee0 [ 593.949366][T18447] ? do_truncate+0x1ac/0x240 [ 593.953971][T18447] ? vfs_truncate+0x262/0x2f0 [ 593.958670][T18447] ? do_syscall_64+0x4c/0xa0 [ 593.963282][T18447] start_this_handle+0x723/0x1560 [ 593.968332][T18447] ? jbd2__journal_start+0x5a0/0x5a0 [ 593.973653][T18447] ? slab_post_alloc_hook+0x68/0x380 [ 593.978959][T18447] ? jbd2__journal_start+0x13c/0x5a0 [ 593.984264][T18447] ? rcu_is_watching+0x11/0xa0 [ 593.989096][T18447] ? jbd2__journal_start+0x13c/0x5a0 [ 593.994395][T18447] ? kmem_cache_alloc+0x189/0x280 [ 593.999444][T18447] jbd2__journal_start+0x2b7/0x5a0 [ 594.004571][T18447] jbd2_journal_start+0x26/0x30 [ 594.009439][T18447] ocfs2_start_trans+0x3b2/0x6f0 [ 594.014503][T18447] ? ocfs2_recovery_exit+0x50/0x50 [ 594.019650][T18447] ? setattr_prepare+0x1ed/0xd30 [ 594.024616][T18447] ocfs2_setattr+0xbdd/0x1b40 [ 594.029366][T18447] ? ocfs2_extend_allocation+0x1830/0x1830 [ 594.035198][T18447] ? ktime_get_coarse_real_ts64+0x2b/0x120 [ 594.041026][T18447] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 594.047285][T18447] ? _raw_spin_unlock_irq+0x2a/0x40 [ 594.052500][T18447] ? rwsem_down_write_slowpath+0x1051/0x13a0 [ 594.058509][T18447] ? ktime_get_coarse_real_ts64+0x106/0x120 [ 594.064449][T18447] ? current_time+0x1ad/0x2c0 [ 594.069160][T18447] ? atime_needs_update+0x770/0x770 [ 594.074383][T18447] ? bpf_lsm_inode_setattr+0x5/0x10 [ 594.079675][T18447] ? try_break_deleg+0x79/0x120 [ 594.084552][T18447] ? ocfs2_extend_allocation+0x1830/0x1830 [ 594.090383][T18447] notify_change+0xbc6/0xee0 [ 594.095437][T18447] do_truncate+0x1ac/0x240 [ 594.099881][T18447] ? rcu_lock_release+0x20/0x20 [ 594.104863][T18447] ? HAS_UNMAPPED_ID+0x1c5/0x220 [ 594.109818][T18447] ? bpf_lsm_path_truncate+0x5/0x10 [ 594.115043][T18447] vfs_truncate+0x262/0x2f0 [ 594.119789][T18447] do_sys_truncate+0xf2/0x1c0 [ 594.124514][T18447] ? lock_chain_count+0x20/0x20 [ 594.129389][T18447] ? break_lease+0xd0/0xd0 [ 594.133834][T18447] ? lockdep_hardirqs_on+0x94/0x140 [ 594.139055][T18447] do_syscall_64+0x4c/0xa0 [ 594.143491][T18447] ? clear_bhb_loop+0x30/0x80 [ 594.148185][T18447] ? clear_bhb_loop+0x30/0x80 [ 594.152877][T18447] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 594.158796][T18447] RIP: 0033:0x7fc53c01c0d9 [ 594.163234][T18447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.182855][T18447] RSP: 002b:00007fc53a253028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 594.191285][T18447] RAX: ffffffffffffffda RBX: 00007fc53c2a4090 RCX: 00007fc53c01c0d9 [ 594.199293][T18447] RDX: 0000000000000000 RSI: 00000000000006e3 RDI: 00002000000000c0 [ 594.207499][T18447] RBP: 00007fc53c0b3024 R08: 0000000000000000 R09: 0000000000000000 [ 594.215495][T18447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.223489][T18447] R13: 00007fc53c2a4128 R14: 00007fc53c2a4090 R15: 00007fffe7d810d8 [ 594.231489][T18447] [ 594.263811][ T26] audit: type=1800 audit(1787081722.075:2646): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 594.336562][ T26] audit: type=1800 audit(1787081722.105:2647): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=271966 res=0 errno=0 [ 594.440729][ T26] audit: type=1800 audit(1787081722.195:2648): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 594.520044][ T4192] ocfs2: Unmounting device (7,4) on (node local)