last executing test programs: 1m8.68060263s ago: executing program 1 (id=360): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1200c86, &(0x7f0000000140)=ANY=[@ANYBLOB='codepage=euc-jp,umask=00000000000000000000000,iocharset=cp932,gid=', @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x286, &(0x7f0000000200)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) 1m8.075192685s ago: executing program 1 (id=364): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="494d495820274d69632043217013dd92d2652053776974638b272030303030303030303030303030a2b3097f30"], 0x34) close(r0) 1m7.952171872s ago: executing program 1 (id=366): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) 1m7.8187574s ago: executing program 1 (id=368): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000900)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1m7.545236446s ago: executing program 1 (id=375): syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) 1m7.085214743s ago: executing program 1 (id=384): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000010000000000000008000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) 1m6.921537442s ago: executing program 32 (id=384): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000010000000000000008000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) 56.585193435s ago: executing program 5 (id=385): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcf, 0x0, 0x0) 56.388505606s ago: executing program 5 (id=489): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000240)='./bus\x00', 0x1800004, &(0x7f0000000280)={[{@discard_unit_segment}, {}, {@acl}, {@disable_roll_forward}, {@grpjquota={'grpjquota', 0x3d, 'checkpoint=disable'}}, {@resgid={'resgid', 0x3d, r1}}, {@lazytime}, {@nouser_xattr}, {@alloc_mode_reuse}, {@noacl}, {@atgc}, {@background_gc_on}, {@jqfmt_vfsold}, {@noinline_dentry}, {@fsync_mode_strict}]}, 0xfd, 0x552d, &(0x7f000000cf00)="$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") 54.246483961s ago: executing program 5 (id=509): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@utf8}, {@namecase}, {}, {@allow_utime={'allow_utime', 0x3d, 0x10000}}, {@discard}, {@fmask={'fmask', 0x3d, 0x1}}, {}, {@time_offset={'time_offset', 0x3d, 0x1}}, {@allow_utime={'allow_utime', 0x3d, 0xce30}}]}, 0x1, 0x1528, &(0x7f0000000580)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") creat(&(0x7f0000000280)='./bus\x00', 0x2) creat(&(0x7f0000000000)='./bus\x00', 0x42) 53.606360598s ago: executing program 5 (id=516): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x8) 52.097459116s ago: executing program 5 (id=525): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9da, 0x22b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x7e, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xf2, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x60, 0xf, 0x7, {0x7, 0xc, "3bfb17de2c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 51.521219439s ago: executing program 5 (id=531): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) 51.232541237s ago: executing program 33 (id=531): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) 40.86998178s ago: executing program 3 (id=601): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffe, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="3ceb02720500", 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) 40.681669591s ago: executing program 3 (id=603): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000580)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000780)=0x7f) 40.497384131s ago: executing program 3 (id=605): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000280)=0x14) read(r0, &(0x7f00000019c0)=""/4086, 0xff6) 40.413087666s ago: executing program 3 (id=606): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000900)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 39.869510448s ago: executing program 3 (id=608): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="05178100", 0x1a, 0x50, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 38.611914561s ago: executing program 3 (id=613): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad092403060101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x41}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 38.321634269s ago: executing program 34 (id=613): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad092403060101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x41}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 3.507855376s ago: executing program 7 (id=1038): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000240), &(0x7f00000003c0), 0x1000000}, 0x20) 3.387587443s ago: executing program 7 (id=1041): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.178172555s ago: executing program 7 (id=1047): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 3.011578555s ago: executing program 7 (id=1051): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) 2.845090145s ago: executing program 7 (id=1055): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, &(0x7f0000001840)=ANY=[@ANYBLOB=',uid=', @ANYRESHEX=0x0]) 2.814533156s ago: executing program 7 (id=1057): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000406e05fb0000000000000109022d0001000060000904000002030002000921020002012207000905810320"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x7, {[@global=@item_012={0x2, 0x1, 0x8, "1b56"}, @main=@item_012={0x2, 0x0, 0xa, "57e7"}, @main=@item_012={0x0, 0x0, 0x4}]}}, 0x0}, 0x0) 1.904682839s ago: executing program 0 (id=1077): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41, 0x3}}}, 0x10) 1.807233875s ago: executing program 2 (id=1079): r0 = socket(0xa, 0x3, 0x3a) capset(&(0x7f00000020c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x3, 0x648, 0x0, 0x40000, 0xfffffffe}) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) 1.788312696s ago: executing program 0 (id=1080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 1.677203923s ago: executing program 6 (id=1081): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1, 0x443b, &(0x7f0000009e40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x20) 1.676953963s ago: executing program 2 (id=1082): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) 1.653936464s ago: executing program 0 (id=1083): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000000070000000900010073797a3000000000640002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00"], 0x114}], 0x1}, 0x0) 1.466762925s ago: executing program 0 (id=1084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 1.361232081s ago: executing program 0 (id=1085): r0 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x3) 1.344542852s ago: executing program 0 (id=1087): r0 = syz_usb_connect(0x0, 0x20c, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a03b3a1003181055bf7d010203010902fa0101000000000904c3"], 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc8}, @l2cap_cid_signaling={{0xc4}, [@l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x6, 0x3, 0x9, 0x2}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x1, 0x3}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x6}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x14d, 0x86}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_conn_req={{0x2, 0x5, 0x4}, {0x8001, 0x743}}, @l2cap_info_rsp={{0xb, 0x4, 0x2a}, {0xfff, 0x9dc, "a3dda8008d7b0c2dde99bae2aeb2f4c1eac3ae1e201c25b2f3fc9b121f2bc7316a8e23ca06da"}}, @l2cap_conf_rsp={{0x5, 0xf, 0x6}, {0xa85, 0xf3, 0x9}}, @l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x0, 0x40, 0x4, 0x7}}, @l2cap_conf_rsp={{0x5, 0x8, 0x4d}, {0x3, 0x7f, 0x4, [@l2cap_conf_ews={0x7, 0x2, 0x7f}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0xf0, 0x2, 0x5, 0x1, 0x8a5c}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x2, 0x0, 0x10000, 0x4bc9, 0x2}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x1, 0x8, 0x91, 0x6, 0xf8a}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x5}]}}]}}, 0xcd) syz_usb_control_io(r0, &(0x7f0000001180)={0x2c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003d4000000d4034a3470339f1c44f935d2bac496e6231ff5eeae5a31b438b5e0c686e8470db155aa88adfc61da9bbd228397"], 0x0, 0x0, &(0x7f0000001140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x2, 0x5, 0x3, 0x2, 0x3, 0x200}}}, 0x0) 929.242856ms ago: executing program 2 (id=1090): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006"], 0xd0}}, 0x0) 800.912284ms ago: executing program 6 (id=1092): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB="636f6465706167653d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030342c696f636861727365743d63703837342c003e7edf5f55c9c5daacaf151c376bf5599ae01ac194e7255fd3968db191bdb3dea9ab11d122deeea40b32a13ea32f2a9ff939e60ebcebbc118eb664cdd73b80d4eb6c4b56b8fe0236d453ab8a63e9857ec85fb127bfb8164fb999afc3692735e9e7d84e3c94259406c29e6b57a51b034fbb0c84a194062612c98792142feb5b609fda840123ac3ecb292c40338df923876a026fae369e0ebfa97e4ce6"], 0x1, 0x349, &(0x7f0000000880)="$eJzs3T1PFE8cB/Dv7N4de3/44wkYEiuDklgRwEJjAzHE12BhiAhHQjgxUUyUmAjWxtiZmFjSWRt9C9oY34BWFMZKG2LhmnnYu9m7mdvlcSH3/SSey+48/OZ2Z29+IC6IqGfdmPu2fWVH/hFlACGA60AAIAJKAM5hNHq0tp7ZUNjcEtA1RUeZxbW6q2oEU8Ooya9KGLD30dGI4zj+nlnqV7KxddTxUDGEPYMtAdBnZqc6Hh17ZAc249q5qcfVW6wzLHaxi8cYLDIcIiIqnvn8D8ynxIBZvwcBMG7W4af18z+RWt/sFhfHidD8/A/017GQ788ZdUjmeyvrjfqSTuHk2Q+SLNHVlvOaiFtvdwX6ygr7rSWX1YubiiWoLq806hObqoHnmDGsYiPqdQnJQBRftBVgCsBYZ24qHOlqVmvZ+tUYynIM0574h7v16EyAP/7Aa3d3859zxCQ+iS9iXtTwBkvN9V8pFvLNqVR1+p2aKjr+SX+LapQ1XSo1ylb4Z1Un5821gA/vWqOs+t7XCKGMxUW2ItrX77UkzlcVfy0MIf1tBT26Kf/oVK1hoCRU1mDXmm4W+uOsNdLeV3W53KhPLN5v+C76w+XM6MRLcUuM4SfeY85a/wey9LgqEMmRdszM1CwXqqS5MrqOp6RKes5jiprA9/zTkHxupm5++bzAXVzD4MMnG6sLjUb9QfEbyVTZZ/ULhxyPvhDN5Sj3yL+tMojkRhmAt52y/5Bz428cx85DJRzHKSiroV592xryxuqCMPe8g3Uh75xth2b9hQHMAjB7kjvCfnp/1qzV12owV/Xf8myrPe4LMonqGCZI0lXqUIi+XDOl2rFnO6PW0//3dxeiU6h19jF6u+hgqAhy7SB0/mflK5PqriNfal3ynzircavFKU8GNKRe/8uXwTWb9a4T+5ONjJzr4mXgUluPAZIet9pziJqJEyfxp5JdfpQx694t5vAVd/j9fyIiIiIiIiIiIiIiIiIiIiIiIiKi02avv43Q+esEA1m12v7B7E4P/scbREREREREREREREREREREREREREREREQHYz3/FwjVE2Mqruf/dntSkxLqJ8REh/H83zDH83/F5h5GSUQu/wIAAP//ksZbFQ==") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r0, 0xffffffffffffffff, 0x0) 757.228586ms ago: executing program 2 (id=1093): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x8850) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) 661.245982ms ago: executing program 2 (id=1096): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x3) 631.342803ms ago: executing program 2 (id=1097): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000a00)={[{@discard}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@uid}, {@errors_continue}, {@discard}, {@usrquota}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uid}, {@uid}]}, 0x20, 0x61b6, &(0x7f00000075c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 548.508219ms ago: executing program 4 (id=1099): r0 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @loopback, 0x101}, 0x1c) recvmsg(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001280)}, 0x0) 469.280623ms ago: executing program 4 (id=1100): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 406.596126ms ago: executing program 4 (id=1101): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r0}, 0xc) 350.72315ms ago: executing program 6 (id=1102): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) 205.339819ms ago: executing program 4 (id=1103): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c801000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000a8011a80a40102803c00018008"], 0x1c8}}, 0x0) 172.72145ms ago: executing program 6 (id=1104): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x10}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xc, 0x18, 0x8, 0x0, 0x2, 0x2c8ee843}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xec, 0x200, 0x80000a, 0x0, 0xfffffffe, 0x7e}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 135.013422ms ago: executing program 6 (id=1105): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) splice(r0, 0x0, r1, 0x0, 0x1, 0xb) 54.223697ms ago: executing program 4 (id=1106): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) copy_file_range(r1, 0x0, r0, 0x0, 0xfffffffffffffffe, 0x0) 26.988679ms ago: executing program 6 (id=1107): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x800, 0xfffffffffffffffe, 0x0, 0x12, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe, 0x87e]}}) 0s ago: executing program 4 (id=1108): socket(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x40, &(0x7f0000008ec0)=ANY=[@ANYBLOB="120110012b95d908e204121410ca0102030109022e000102faa0bf09040008020806620009050a100800f8070307"], 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, 0x0, 0x4000) kernel console output (not intermixed with test programs): ty change from 0 to 64 [ 70.924025][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 71.038351][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.053356][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.096199][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 71.216787][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.236526][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.267192][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.273808][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.278466][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 71.486634][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.511633][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.564837][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 71.791560][ T23] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 71.811592][ T23] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 71.857227][ T4916] netlink: 'syz.4.249': attribute type 3 has an invalid length. [ 71.867724][ T23] usb 3-1: Product: syz [ 71.871893][ T23] usb 3-1: Manufacturer: syz [ 71.883468][ T4889] loop0: detected capacity change from 0 to 32768 [ 71.906443][ T23] usb 3-1: SerialNumber: syz [ 71.922916][ T23] usb 3-1: config 0 descriptor?? [ 71.991296][ T4894] loop1: detected capacity change from 0 to 32768 [ 72.022214][ T23] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 72.151823][ T4894] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 72.151823][ T4894] [ 72.184227][ T4894] ERROR: (device loop1): remounting filesystem as read-only [ 72.204143][ T4894] xtLookup: xtSearch returned -5 [ 72.246539][ T4894] add_index: get/read_metapage failed! [ 72.259834][ T4894] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 72.259834][ T4894] [ 72.346488][ T4894] xtLookup: xtSearch returned -5 [ 72.351457][ T4894] free_index: error reading directory table [ 72.362304][ T4922] loop0: detected capacity change from 0 to 256 [ 72.376751][ T4228] usb 3-1: USB disconnect, device number 3 [ 72.406292][ T4228] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 72.429804][ T4894] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 72.429804][ T4894] [ 72.467904][ T4894] xtLookup: xtSearch returned -5 [ 72.493590][ T4922] FAT-fs (loop0): Directory bread(block 64) failed [ 72.500196][ T4894] free_index: error reading directory table [ 72.516455][ T4922] FAT-fs (loop0): Directory bread(block 65) failed [ 72.523058][ T4922] FAT-fs (loop0): Directory bread(block 66) failed [ 72.531957][ T4894] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 72.531957][ T4894] [ 72.550429][ T4910] loop3: detected capacity change from 0 to 32768 [ 72.562516][ T4894] xtLookup: xtSearch returned -5 [ 72.576611][ T4922] FAT-fs (loop0): Directory bread(block 67) failed [ 72.583217][ T4922] FAT-fs (loop0): Directory bread(block 68) failed [ 72.590133][ T4894] free_index: error reading directory table [ 72.596036][ T4894] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 72.596036][ T4894] [ 72.606247][ T4922] FAT-fs (loop0): Directory bread(block 69) failed [ 72.613320][ T4894] xtLookup: xtSearch returned -5 [ 72.623181][ T4894] free_index: error reading directory table [ 72.629806][ T4922] FAT-fs (loop0): Directory bread(block 70) failed [ 72.642379][ T4894] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 72.642379][ T4894] [ 72.642891][ T4918] loop4: detected capacity change from 0 to 32768 [ 72.652558][ T4922] FAT-fs (loop0): Directory bread(block 71) failed [ 72.659855][ T4894] xtLookup: xtSearch returned -5 [ 72.665586][ T4922] FAT-fs (loop0): Directory bread(block 72) failed [ 72.686639][ T4922] FAT-fs (loop0): Directory bread(block 73) failed [ 72.692499][ T4894] free_index: error reading directory table [ 72.711747][ T4918] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.250 (4918) [ 72.712900][ T4910] XFS (loop3): Mounting V5 Filesystem [ 72.809273][ T4910] XFS (loop3): Ending clean mount [ 72.846608][ T4918] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 72.859591][ T4918] BTRFS info (device loop4): using free space tree [ 72.859837][ T4910] XFS (loop3): Quotacheck needed: Please wait. [ 72.866229][ T4918] BTRFS info (device loop4): has skinny extents [ 72.984946][ T4910] XFS (loop3): Quotacheck: Done. [ 73.186149][ T4918] BTRFS info (device loop4): enabling ssd optimizations [ 73.215435][ T4191] XFS (loop3): Unmounting Filesystem [ 73.534034][ T4970] loop1: detected capacity change from 0 to 512 [ 73.607658][ T4970] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.647588][ T4970] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.692177][ T4970] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 73.730413][ T4970] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.754043][ T4970] EXT4-fs (loop1): 1 truncate cleaned up [ 73.775216][ T4970] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 74.170751][ T4976] loop4: detected capacity change from 0 to 40427 [ 74.194125][ T26] audit: type=1326 audit(1771299950.296:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b0ebbf79 code=0x7ffc0000 [ 74.230471][ T26] audit: type=1326 audit(1771299950.326:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f19b0ebbf79 code=0x7ffc0000 [ 74.259412][ T26] audit: type=1326 audit(1771299950.326:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f19b0ebbf79 code=0x7ffc0000 [ 74.342608][ T4990] loop1: detected capacity change from 0 to 4096 [ 74.358666][ T4976] F2FS-fs (loop4): Found nat_bits in checkpoint [ 74.363173][ T4978] loop3: detected capacity change from 0 to 32768 [ 74.404945][ T4976] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 74.502857][ T5000] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.651303][ T26] audit: type=1800 audit(1771299950.756:6): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.264" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 74.763136][ T4190] attempt to access beyond end of device [ 74.763136][ T4190] loop4: rw=2049, want=45104, limit=40427 [ 75.166608][ T4227] Bluetooth: hci4: command 0x0405 tx timeout [ 75.231396][ T5028] tipc: Started in network mode [ 75.247771][ T5028] tipc: Node identity e0000002, cluster identity 4711 [ 75.280277][ T5028] tipc: Enabling of bearer rejected, failed to enable media [ 75.406946][ T5034] loop3: detected capacity change from 0 to 16 [ 75.456165][ T5034] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 75.549243][ T5040] erofs: (device loop4): mounted with root inode @ nid 36. [ 75.660237][ T4190] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 75.680334][ T4190] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 75.698318][ T4190] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 75.840181][ T5050] netlink: 132 bytes leftover after parsing attributes in process `syz.4.296'. [ 75.855964][ T5050] nbd: must specify a device to reconfigure [ 76.036166][ T5062] sch_fq: defrate 4294967295 ignored. [ 76.193973][ T5064] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.224161][ T5064] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.371528][ T1324] cfg80211: failed to load regulatory.db [ 76.394386][ T26] audit: type=1800 audit(1771299952.496:7): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.303" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 76.565104][ T5058] F2FS-fs (loop1): Mismatch start address, segment0(512) cp_blkaddr(918016) [ 76.613247][ T5058] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 76.645497][ T5079] process 'syz.2.310' launched '/dev/fd/3' with NULL argv: empty string added [ 76.665651][ T5058] F2FS-fs (loop1): invalid crc value [ 76.734190][ T5058] F2FS-fs (loop1): Found nat_bits in checkpoint [ 76.788173][ T5092] vivid-000: disconnect [ 76.822558][ T5058] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 76.824109][ T5091] vivid-000: reconnect [ 76.835699][ T5058] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 76.897247][ T5089] set_capacity_and_notify: 3 callbacks suppressed [ 76.897261][ T5089] loop3: detected capacity change from 0 to 8192 [ 76.984245][ T5089] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 76.996725][ T5089] REISERFS (device loop3): using ordered data mode [ 77.016776][ T4184] attempt to access beyond end of device [ 77.016776][ T4184] loop1: rw=2049, want=45104, limit=40427 [ 77.025069][ T5089] reiserfs: using flush barriers [ 77.048497][ T5089] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.067893][ T5089] REISERFS (device loop3): checking transaction log (loop3) [ 77.143216][ T5089] REISERFS (device loop3): Using r5 hash to sort names [ 77.161292][ T5089] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 77.301075][ T5114] loop0: detected capacity change from 0 to 512 [ 77.390454][ T5114] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.442791][ T5119] netlink: 32 bytes leftover after parsing attributes in process `syz.1.318'. [ 77.486642][ T4227] Bluetooth: hci4: command 0x0411 tx timeout [ 77.497978][ T5114] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #17: comm syz.0.324: inode has both inline data and extents flags [ 77.518893][ T5114] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.324: couldn't read orphan inode 17 (err -117) [ 77.557865][ T4227] Process accounting resumed [ 77.576444][ T2389] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.584567][ T5129] Process accounting resumed [ 77.598786][ T5114] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.626144][ T5133] loop3: detected capacity change from 0 to 64 [ 77.769197][ T5140] loop2: detected capacity change from 0 to 128 [ 77.839445][ T5140] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 77.858280][ T5140] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.869149][ T2389] usb 5-1: Using ep0 maxpacket: 32 [ 77.996639][ T2389] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.024049][ T2389] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.037726][ T2389] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.048565][ T2389] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 78.062419][ T2389] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.070122][ T2389] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 78.155901][ T2389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.200040][ T2389] usb 5-1: config 0 descriptor?? [ 78.444451][ T5177] loop1: detected capacity change from 0 to 512 [ 78.484417][ T5177] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.521855][ T5177] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.533580][ T5177] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.353: bad orphan inode 15 [ 78.556322][ T5177] ext4_test_bit(bit=14, block=18) = 1 [ 78.562061][ T5177] is_bad_inode(inode)=0 [ 78.566222][ T5177] NEXT_ORPHAN(inode)=1023 [ 78.570722][ T5177] max_ino=32 [ 78.574574][ T5177] i_nlink=0 [ 78.591265][ T5177] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.353: bg 0: block 440: padding at end of block bitmap is not set [ 78.620652][ T5177] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 78.631073][ T5177] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.646505][ T4251] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.709888][ T2389] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 78.722416][ T2389] hid-thrustmaster 0003:044F:B65D.0004: Wrong number of endpoints? [ 78.819397][ T4968] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.928724][ T4299] usb 5-1: USB disconnect, device number 2 [ 78.940907][ T5190] loop1: detected capacity change from 0 to 32768 [ 78.942729][ T4716] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 78.956429][ C1] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -2 [ 78.966492][ T5190] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.359 (5190) [ 78.997164][ T5190] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 79.006176][ T5190] BTRFS info (device loop1): setting nodatasum [ 79.013791][ T5190] BTRFS info (device loop1): force zlib compression, level 3 [ 79.021897][ T5190] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 79.032093][ T5190] BTRFS info (device loop1): use lzo compression, level 0 [ 79.041299][ T5190] BTRFS info (device loop1): turning on flush-on-commit [ 79.049106][ T5190] BTRFS info (device loop1): enabling auto defrag [ 79.055567][ T5190] BTRFS info (device loop1): max_inline at 4096 [ 79.062622][ T5190] BTRFS info (device loop1): using free space tree [ 79.069608][ T5190] BTRFS info (device loop1): has skinny extents [ 79.086617][ T4251] usb 4-1: unable to get BOS descriptor or descriptor too short [ 79.113733][ T5190] BTRFS info (device loop1): enabling ssd optimizations [ 79.176946][ T4251] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 79.205516][ T4968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.227310][ T4968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.240756][ T4968] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 79.252643][ T4968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.273144][ T4968] usb 1-1: config 0 descriptor?? [ 79.336587][ T4716] usb 3-1: config 0 has an invalid interface number: 30 but max is 0 [ 79.344821][ T4716] usb 3-1: config 0 has no interface number 0 [ 79.350986][ T4716] usb 3-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 79.360077][ T4716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.369744][ T4716] usb 3-1: config 0 descriptor?? [ 79.376642][ T4251] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 79.385845][ T4251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.408826][ T4716] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 79.419441][ T4251] usb 4-1: Product: syz [ 79.426055][ T4716] usb 3-1: setting power ON [ 79.426987][ T4251] usb 4-1: Manufacturer: syz [ 79.435362][ T4251] usb 4-1: SerialNumber: syz [ 79.437165][ T4716] dvb-usb: bulk message failed: -22 (2/0) [ 79.562590][ T5216] loop1: detected capacity change from 0 to 64 [ 79.603697][ T5218] loop4: detected capacity change from 0 to 256 [ 79.606489][ T4716] dvb-usb: bulk message failed: -22 (1/0) [ 79.641211][ T5218] exfat: Deprecated parameter 'utf8' [ 79.654950][ T5218] exfat: Deprecated parameter 'namecase' [ 79.665187][ T5218] exfat: Deprecated parameter 'namecase' [ 79.676845][ T5218] exfat: Deprecated parameter 'utf8' [ 79.705772][ T5218] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 79.743399][ T4716] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 79.761590][ T4968] lg-g15 0003:046D:C222.0005: collection stack underflow [ 79.778311][ T4968] lg-g15 0003:046D:C222.0005: item 0 0 0 12 parsing failed [ 79.809818][ T4716] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 79.818018][ T4968] lg-g15: probe of 0003:046D:C222.0005 failed with error -22 [ 79.830424][ T4716] dvb_usb_cxusb: probe of 3-1:0.30 failed with error -22 [ 79.855030][ T4716] usb 3-1: USB disconnect, device number 4 [ 79.986302][ T4227] usb 1-1: USB disconnect, device number 3 [ 80.073298][ T5230] loop1: detected capacity change from 0 to 128 [ 80.109722][ T5230] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 80.123240][ T5230] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.202809][ T5230] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 80.223935][ T5230] UDF-fs: error (device loop1): udf_count_free_bitmap: udf_count_free failed [ 80.233902][ T4251] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 80.321723][ T4184] UDF-fs: error (device loop1): udf_read_inode: (ino 104) failed !bh [ 80.334430][ T4184] UDF-fs: error (device loop1): udf_read_inode: (ino 104) failed !bh [ 80.661554][ T4251] usb 4-1: unable to get BOS descriptor or descriptor too short [ 80.709824][ T4184] syz-executor (4184) used greatest stack depth: 20144 bytes left [ 80.756494][ T4251] usb 4-1: device firmware changed [ 80.775037][ T4251] usb 4-1: USB disconnect, device number 2 [ 80.787879][ T4297] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.903875][ T4297] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.984306][ T5248] loop4: detected capacity change from 0 to 32768 [ 81.000188][ T4297] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.106472][ T5248] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.378 (5248) [ 81.121944][ T4297] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.142215][ T5248] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 81.178999][ T5248] BTRFS info (device loop4): using free space tree [ 81.185664][ T5248] BTRFS info (device loop4): has skinny extents [ 81.189820][ T5263] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 81.280622][ T5256] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 81.318198][ T5263] UDF-fs: Scanning with blocksize 512 failed [ 81.369056][ T5263] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 81.385585][ T5263] UDF-fs: Scanning with blocksize 1024 failed [ 81.405955][ T5248] BTRFS info (device loop4): enabling ssd optimizations [ 81.413844][ T5283] exfat: Deprecated parameter 'utf8' [ 81.419657][ T5283] exfat: Deprecated parameter 'namecase' [ 81.425741][ T5283] exfat: Deprecated parameter 'namecase' [ 81.437997][ T5283] exfat: Deprecated parameter 'utf8' [ 81.517894][ T5263] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=515, location=515 [ 81.584049][ T5283] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 81.621725][ T5263] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 81.685547][ T5263] UDF-fs: Scanning with blocksize 2048 failed [ 81.707427][ T5263] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=259, location=259 [ 81.758222][ T5263] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=515, location=515 [ 81.812955][ T5263] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 81.826953][ T5263] UDF-fs: Scanning with blocksize 4096 failed [ 81.833042][ T5263] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 81.859674][ T5264] chnl_net:caif_netlink_parms(): no params data found [ 82.242293][ T4299] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.506449][ T4299] usb 4-1: Using ep0 maxpacket: 32 [ 82.547721][ T5332] set_capacity_and_notify: 3 callbacks suppressed [ 82.547735][ T5332] loop4: detected capacity change from 0 to 16 [ 82.535846][ T5264] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.569222][ T5264] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.577434][ T5264] device bridge_slave_0 entered promiscuous mode [ 82.616955][ T5264] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.624044][ T5264] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.626631][ T4299] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 82.649564][ T4299] usb 4-1: config 0 has no interface number 0 [ 82.675212][ T5332] erofs: (device loop4): mounted with root inode @ nid 36. [ 82.687681][ T5264] device bridge_slave_1 entered promiscuous mode [ 82.705558][ T5342] loop2: detected capacity change from 0 to 764 [ 82.717459][ T4299] usb 4-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 82.773496][ T5264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.806031][ T5264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.871234][ T5264] team0: Port device team_slave_0 added [ 82.874543][ T5347] loop4: detected capacity change from 0 to 512 [ 82.897287][ T5264] team0: Port device team_slave_1 added [ 82.910753][ T4299] usb 4-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 82.940470][ T4299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.958481][ T5347] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 82.980333][ T5342] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.984980][ T5264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.000359][ T5264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.027089][ T5264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.039273][ T5264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.046235][ T5264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.073447][ T5264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.076539][ T4299] usb 4-1: Product: syz [ 83.117019][ T5342] blk_update_request: I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.122010][ T5351] loop0: detected capacity change from 0 to 256 [ 83.129685][ T5347] EXT4-fs (loop4): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 83.148002][ T5342] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 83.158623][ T5342] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.169830][ T4299] usb 4-1: Manufacturer: syz [ 83.170333][ T5342] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 83.174441][ T4299] usb 4-1: SerialNumber: syz [ 83.192236][ T5342] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 83.201852][ T4299] usb 4-1: config 0 descriptor?? [ 83.206826][ T5342] UDF-fs: Scanning with blocksize 512 failed [ 83.207376][ T5342] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.231657][ T5342] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.244071][ T5342] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 83.249492][ T5264] device hsr_slave_0 entered promiscuous mode [ 83.254735][ T5294] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 83.269820][ T5264] device hsr_slave_1 entered promiscuous mode [ 83.277457][ T5264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.310327][ T5342] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.325391][ T5264] Cannot create hsr debugfs directory [ 83.336480][ T5301] Bluetooth: hci0: command 0x0409 tx timeout [ 83.372313][ T5342] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 83.418359][ T5342] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 83.460664][ T5342] UDF-fs: Scanning with blocksize 1024 failed [ 83.492415][ T5342] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.552131][ T5294] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 83.585109][ T5342] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.670557][ T5342] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 83.699450][ T5342] blk_update_request: I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.721584][ T5342] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 83.770087][ T5342] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 83.805268][ T5342] UDF-fs: Scanning with blocksize 2048 failed [ 83.812174][ T5342] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.855784][ T5342] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 83.890608][ T5342] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 83.918942][ T5342] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 83.954492][ T5342] UDF-fs: Scanning with blocksize 4096 failed [ 83.961484][ T5342] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 84.056571][ T4299] asix 4-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 84.091523][ T4299] asix 4-1:0.191 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 84.113308][ T5264] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.153864][ T4299] asix: probe of 4-1:0.191 failed with error -71 [ 84.193082][ T4299] usb 4-1: USB disconnect, device number 3 [ 84.250495][ T4297] device hsr_slave_0 left promiscuous mode [ 84.352773][ T4297] device hsr_slave_1 left promiscuous mode [ 84.373804][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.406516][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.428798][ T5399] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 84.441816][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.480344][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.488487][ T4297] device bridge_slave_1 left promiscuous mode [ 84.496799][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.526090][ T4297] device bridge_slave_0 left promiscuous mode [ 84.532663][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.558752][ T4297] device veth1_macvtap left promiscuous mode [ 84.565278][ T4297] device veth0_macvtap left promiscuous mode [ 84.571714][ T4297] device veth1_vlan left promiscuous mode [ 84.577905][ T4297] device veth0_vlan left promiscuous mode [ 84.619250][ T4968] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.774550][ T5397] loop4: detected capacity change from 0 to 32768 [ 84.866503][ T4968] usb 1-1: Using ep0 maxpacket: 32 [ 84.982862][ T4297] team0 (unregistering): Port device team_slave_1 removed [ 85.025116][ T4297] team0 (unregistering): Port device team_slave_0 removed [ 85.107352][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.124799][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.163164][ T4968] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 85.182875][ T4968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.192510][ T4968] usb 1-1: Product: syz [ 85.207026][ T4968] usb 1-1: Manufacturer: syz [ 85.211632][ T4968] usb 1-1: SerialNumber: syz [ 85.248614][ T4968] usb 1-1: config 0 descriptor?? [ 85.288272][ T4968] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 85.305754][ T4968] dvb-usb: bulk message failed: -22 (2/0) [ 85.309055][ T4297] bond0 (unregistering): Released all slaves [ 85.333598][ T4968] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.366924][ T4968] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 85.375236][ T4968] usb 1-1: media controller created [ 85.386482][ T4716] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.387037][ T5264] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.403643][ T4968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.417451][ T5314] Bluetooth: hci0: command 0x041b tx timeout [ 85.432801][ T4968] usb 1-1: selecting invalid altsetting 7 [ 85.462514][ T5264] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.482392][ T4968] cxusb: set interface failed [ 85.495483][ T5394] cxusb: i2c wr: len=80 is too big! [ 85.495483][ T5394] [ 85.515957][ T5264] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.519511][ T4968] dvb-usb: bulk message failed: -22 (1/0) [ 85.637076][ T4968] DVB: Unable to find symbol lgdt330x_attach() [ 85.644322][ T4968] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 85.749413][ T4716] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 85.771632][ T4716] usb 5-1: config 0 has no interface number 0 [ 85.821262][ T4716] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.832977][ T5264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.871328][ T4968] rc_core: IR keymap rc-dvico-portable not found [ 85.896410][ T4968] Registered IR keymap rc-empty [ 85.897760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.902942][ T4968] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 85.947505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.961800][ T5264] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.000650][ T4968] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input8 [ 86.013781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.043727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.048653][ T4968] dvb-usb: schedule remote query interval to 100 msecs. [ 86.096379][ T4968] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 86.117479][ T4716] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 86.126887][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.131821][ T4716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.133984][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.192851][ T4968] usb 1-1: USB disconnect, device number 4 [ 86.203848][ T4716] usb 5-1: Product: syz [ 86.227443][ T4716] usb 5-1: Manufacturer: syz [ 86.244358][ T4716] usb 5-1: SerialNumber: syz [ 86.266458][ T4716] usb 5-1: config 0 descriptor?? [ 86.279881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.310328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.330779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.341741][ T4716] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 86.353541][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.360670][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.423183][ T5455] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 86.456124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.461084][ T4968] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 86.499983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.524310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.562391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.614237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.658222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.691622][ T5264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.747144][ T5264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.803038][ T5448] loop2: detected capacity change from 0 to 32768 [ 86.819535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.855848][ T4712] usb 5-1: USB disconnect, device number 3 [ 86.860151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.863252][ T4712] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 86.943684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.983911][ T5448] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 87.025369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.081843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.212728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.328286][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 87.508954][ T5305] Bluetooth: hci0: command 0x040f tx timeout [ 87.782593][ T5507] lo speed is unknown, defaulting to 1000 [ 87.833089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.866630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.899458][ T5264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.941597][ T5507] lo speed is unknown, defaulting to 1000 [ 87.992060][ T5507] lo speed is unknown, defaulting to 1000 [ 88.060196][ T5507] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 88.155420][ T5507] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 88.463771][ T5507] lo speed is unknown, defaulting to 1000 [ 88.500720][ T5507] lo speed is unknown, defaulting to 1000 [ 88.549308][ T5507] lo speed is unknown, defaulting to 1000 [ 88.599195][ T5507] lo speed is unknown, defaulting to 1000 [ 88.720213][ T5507] lo speed is unknown, defaulting to 1000 [ 88.775725][ T5555] loop2: detected capacity change from 0 to 256 [ 88.785452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.807534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.917902][ T5555] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.953892][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.997997][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.028220][ T5264] device veth0_vlan entered promiscuous mode [ 89.067872][ T5566] loop3: detected capacity change from 0 to 256 [ 89.081715][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.108720][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.135760][ T5264] device veth1_vlan entered promiscuous mode [ 89.249661][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.269706][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.357940][ T5264] device veth0_macvtap entered promiscuous mode [ 89.415153][ T5264] device veth1_macvtap entered promiscuous mode [ 89.452641][ T5572] loop4: detected capacity change from 0 to 4096 [ 89.459201][ T5566] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x22932667, utbl_chksum : 0xe619d30d) [ 89.494745][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.513455][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.543334][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.575757][ T5305] Bluetooth: hci0: command 0x0419 tx timeout [ 89.607700][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.632203][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.680799][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.722176][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.753268][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.799523][ T5264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.823885][ T5301] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 89.869625][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.909891][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.966920][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.993022][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.089770][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.117547][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.162919][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.217477][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.272302][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.299802][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.342781][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.397720][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.442709][ T5264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.482667][ T5301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.501240][ T5301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.513397][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.537205][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.569830][ T5301] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.599523][ T5264] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.619113][ T5264] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.646386][ T5301] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.655686][ T5264] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.704344][ T5301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.712696][ T5264] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.747443][ T5301] usb 3-1: config 0 descriptor?? [ 90.846676][ T4968] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.930531][ T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.972738][ T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.017555][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.070544][ T4554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.087748][ T4968] usb 4-1: Using ep0 maxpacket: 8 [ 91.102617][ T4554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.161007][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.206622][ T4968] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 91.246631][ T4968] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 91.301540][ T4968] usb 4-1: config 0 interface 0 has no altsetting 0 [ 91.313752][ T5301] plantronics 0003:047F:FFFF.0006: unbalanced collection at end of report description [ 91.346102][ T4968] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 91.347606][ T5301] plantronics 0003:047F:FFFF.0006: parse failed [ 91.412777][ T4968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.416395][ T5301] plantronics: probe of 0003:047F:FFFF.0006 failed with error -22 [ 91.474430][ T4968] usb 4-1: config 0 descriptor?? [ 91.633750][ T5301] usb 3-1: USB disconnect, device number 5 [ 91.844490][ T5606] loop4: detected capacity change from 0 to 32768 [ 91.969081][ T4968] gt683r_led 0003:1770:FF00.0007: ignoring exceeding usage max [ 91.977889][ T5606] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 91.977889][ T5606] [ 92.011130][ T4968] gt683r_led 0003:1770:FF00.0007: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 92.065805][ T5606] ERROR: (device loop4): remounting filesystem as read-only [ 92.104795][ T5606] ERROR: (device loop4): jfs_unlink: [ 92.104795][ T5606] [ 92.114801][ T5609] loop0: detected capacity change from 0 to 32768 [ 92.273161][ T5609] diRead: diIAGRead returned -5 [ 92.286502][ T4190] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 92.286502][ T4190] [ 92.298243][ T5609] jfs_lookup: iget failed on inum 1048352 [ 92.402877][ T4968] usb 4-1: USB disconnect, device number 4 [ 92.468590][ T4299] gt683r_led 0003:1770:FF00.0007: failed to send set report request: -19 [ 92.603296][ T5640] Cannot find add_set index 46338 as target [ 93.186207][ T5621] loop5: detected capacity change from 0 to 40427 [ 93.357931][ T5621] F2FS-fs (loop5): Invalid log_blocksize (64), supports only 12 [ 93.365607][ T5621] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 93.588299][ T5675] netlink: 32 bytes leftover after parsing attributes in process `syz.3.507'. [ 93.705582][ T5681] loop5: detected capacity change from 0 to 256 [ 93.841856][ T5685] netlink: 256 bytes leftover after parsing attributes in process `syz.4.511'. [ 93.867258][ T5681] exfat: Deprecated parameter 'utf8' [ 93.872617][ T5681] exfat: Deprecated parameter 'namecase' [ 93.929807][ T5681] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 94.239397][ T5700] netlink: 40 bytes leftover after parsing attributes in process `syz.4.515'. [ 94.401900][ T5668] loop2: detected capacity change from 0 to 32768 [ 94.434622][ T5708] loop3: detected capacity change from 0 to 1024 [ 94.493591][ T5707] loop4: detected capacity change from 0 to 1024 [ 94.514262][ T5668] JBD2: Ignoring recovery information on journal [ 94.680961][ T5716] xt_hashlimit: size too large, truncated to 1048576 [ 94.739115][ T5668] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 94.823568][ T5707] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000000a,usrquota,nodiscard,noinit_itable,,errors=continue. Quota mode: writeback. [ 94.856376][ T5668] (syz.2.504,5668,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 94.917122][ T5668] (syz.2.504,5668,0):ocfs2_trim_mainbm:7603 ERROR: status = -12 [ 95.009364][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 96.108344][ T743] hfsplus: b-tree write err: -5, ino 4 [ 96.353841][ T26] audit: type=1326 audit(1771299972.456:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b0ebbf79 code=0x7ffc0000 [ 96.439265][ T4280] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.478330][ T26] audit: type=1326 audit(1771299972.456:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b0ebbf79 code=0x7ffc0000 [ 96.562795][ T26] audit: type=1326 audit(1771299972.456:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b0ebbf79 code=0x7ffc0000 [ 96.625571][ T4280] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.656472][ T26] audit: type=1326 audit(1771299972.456:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b0ebbf79 code=0x7ffc0000 [ 96.745638][ T26] audit: type=1326 audit(1771299972.456:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19b0ebbf79 code=0x7ffc0000 [ 96.819985][ T5769] loop4: detected capacity change from 0 to 4096 [ 96.844488][ T26] audit: type=1326 audit(1771299972.456:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b0ebbf79 code=0x7ffc0000 [ 96.889840][ T4280] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.975937][ T26] audit: type=1326 audit(1771299972.456:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b0ebbf79 code=0x7ffc0000 [ 97.071594][ T5769] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 97.101045][ T26] audit: type=1326 audit(1771299972.456:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.2.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b0ebbf79 code=0x7ffc0000 [ 97.123222][ T5769] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 97.138236][ T4280] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.165035][ T5769] ntfs: volume version 3.1. [ 97.400392][ T5783] lo speed is unknown, defaulting to 1000 [ 97.807068][ T5798] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.836004][ T5789] loop3: detected capacity change from 0 to 8192 [ 97.909177][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 98.275290][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.322144][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.382638][ T5783] device bridge_slave_0 entered promiscuous mode [ 98.517320][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.524397][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.555578][ T5783] device bridge_slave_1 entered promiscuous mode [ 98.626644][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.672035][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.826186][ T5803] loop4: detected capacity change from 0 to 32768 [ 98.866924][ T5783] team0: Port device team_slave_0 added [ 98.906379][ T5783] team0: Port device team_slave_1 added [ 98.965716][ T5803] XFS (loop4): Mounting V5 Filesystem [ 99.127424][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.157578][ T5803] XFS (loop4): Ending clean mount [ 99.170069][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.221784][ T5803] XFS (loop4): Quotacheck needed: Please wait. [ 99.325622][ T5803] XFS (loop4): Quotacheck: Done. [ 99.331877][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.357166][ T5301] Bluetooth: hci0: command 0x0409 tx timeout [ 99.407714][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.414680][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.511591][ T5809] loop2: detected capacity change from 0 to 32768 [ 99.552730][ T4190] XFS (loop4): Unmounting Filesystem [ 99.585709][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.695549][ T5809] XFS (loop2): Mounting V5 Filesystem [ 99.794780][ T5783] device hsr_slave_0 entered promiscuous mode [ 99.863367][ T5783] device hsr_slave_1 entered promiscuous mode [ 99.863938][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.864037][ T5783] Cannot create hsr debugfs directory [ 99.918595][ T5809] XFS (loop2): Ending clean mount [ 99.923436][ T5809] XFS (loop2): Quotacheck needed: Please wait. [ 100.066846][ T5809] XFS (loop2): Quotacheck: Done. [ 100.223278][ T4188] XFS (loop2): Unmounting Filesystem [ 100.535250][ T5859] loop3: detected capacity change from 0 to 1024 [ 100.543904][ T5783] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 100.603391][ T5863] ptrace attach of "./syz-executor exec"[4190] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ ÿÿÿÿ â÷%-ì‹5鎢Ÿ£D|VTyÊÞ\x22ýÍšK«à­N/)éõº/éÙH¯Mú&‚¡CsnVkת{Jv1±Á%­èÈ_)Þ$n»:…,þ\x5c¿]n¯+]±2yrŒrîLË•ß-6·^%D³\x5c~Õzèw'Mc\x22o§â–½‹ÄÙ«·`¿Ë¤=s N¾8|?Þ”Ò¡¿øÅBr›ô9šÎɳbõÝFøü…{iÄ$œ]ûë• [ 100.612204][ T5783] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 100.692095][ T5859] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 100.727486][ T5859] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.844798][ T5859] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.556: Invalid inode table block 0 in block_group 0 [ 100.956747][ T5859] EXT4-fs (loop3): Remounting filesystem read-only [ 100.971483][ T5859] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 100.993125][ T5868] loop4: detected capacity change from 0 to 4096 [ 101.015101][ T5859] EXT4-fs (loop3): Remounting filesystem read-only [ 101.037015][ T5859] EXT4-fs error (device loop3): ext4_quota_write:6646: inode #3: comm syz.3.556: mark_inode_dirty error [ 101.075263][ T5859] EXT4-fs (loop3): Remounting filesystem read-only [ 101.114807][ T5871] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.115104][ T5859] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.556: Failed to acquire dquot type 0 [ 101.138415][ T5783] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 101.147981][ T5783] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 101.268320][ T5868] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 101.306301][ T5859] EXT4-fs (loop3): Remounting filesystem read-only [ 101.349395][ T4280] device hsr_slave_0 left promiscuous mode [ 101.367348][ T5859] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.556: Invalid inode table block 0 in block_group 0 [ 101.390533][ T5868] NILFS error (device loop4): nilfs_readdir: bad page in #2 [ 101.403403][ T4280] device hsr_slave_1 left promiscuous mode [ 101.429349][ T1324] Bluetooth: hci0: command 0x041b tx timeout [ 101.452307][ T5859] EXT4-fs (loop3): Remounting filesystem read-only [ 101.464774][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.472826][ T5859] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 101.489739][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.504290][ T5859] EXT4-fs (loop3): Remounting filesystem read-only [ 101.511116][ T5859] EXT4-fs error (device loop3): ext4_ext_truncate:4456: inode #15: comm syz.3.556: mark_inode_dirty error [ 101.523195][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.539868][ T5859] EXT4-fs (loop3): Remounting filesystem read-only [ 101.546476][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.550742][ T5859] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.556: Invalid inode table block 0 in block_group 0 [ 101.573171][ T4280] device bridge_slave_1 left promiscuous mode [ 101.581921][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.591500][ T4280] device bridge_slave_0 left promiscuous mode [ 101.619593][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.633508][ T5859] EXT4-fs (loop3): Remounting filesystem read-only [ 101.645522][ T5859] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 101.660513][ T4280] device veth1_macvtap left promiscuous mode [ 101.670350][ T5859] EXT4-fs (loop3): Remounting filesystem read-only [ 101.682864][ T4280] device veth0_macvtap left promiscuous mode [ 101.702302][ T5859] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 101.728842][ T4280] device veth1_vlan left promiscuous mode [ 101.735521][ T5859] EXT4-fs (loop3): Remounting filesystem read-only [ 101.754802][ T4280] device veth0_vlan left promiscuous mode [ 101.778423][ T5859] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.556: Invalid inode table block 0 in block_group 0 [ 101.800908][ T5894] loop4: detected capacity change from 0 to 512 [ 101.832048][ T5859] EXT4-fs (loop3): Remounting filesystem read-only [ 101.873032][ T5859] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 101.930937][ T5859] EXT4-fs (loop3): Remounting filesystem read-only [ 101.955912][ T5859] EXT4-fs error (device loop3): ext4_truncate:4279: inode #15: comm syz.3.556: mark_inode_dirty error [ 101.984371][ T5859] EXT4-fs (loop3): Remounting filesystem read-only [ 102.006084][ T5896] loop0: detected capacity change from 0 to 4096 [ 102.012452][ T5859] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 102.012679][ T5859] EXT4-fs (loop3): Remounting filesystem read-only [ 102.032888][ T5859] EXT4-fs (loop3): 1 truncate cleaned up [ 102.054667][ T5859] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000015,stripe=0x0000000000000000,grpid,errors=remount-ro,data_err=ignore,noblock_validity,minixdf,min_batch_time=0x0000000000000013,. Quota mode: writeback. [ 102.087676][ T5894] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 102.114684][ T5894] EXT4-fs (loop4): invalid journal inode [ 102.131896][ T5894] EXT4-fs (loop4): can't get journal size [ 102.187382][ T5894] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 102.252425][ T5894] System zones: 1-12, 13-13 [ 102.339904][ T5894] EXT4-fs (loop4): 1 truncate cleaned up [ 102.382526][ T5894] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback. [ 102.473366][ T5896] ntfs3: loop0: ino=5, "/" directory corrupted [ 102.530655][ T5896] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 102.597093][ T5901] ntfs3: loop0: ino=5, "/" directory corrupted [ 102.732098][ T4280] team0 (unregistering): Port device team_slave_1 removed [ 102.841713][ T4280] team0 (unregistering): Port device team_slave_0 removed [ 102.882360][ T4280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.939615][ T4280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.988714][ T5914] loop3: detected capacity change from 0 to 1024 [ 103.235705][ T5914] hfsplus: trying to free free bnode 0(1) [ 103.251232][ T4280] bond0 (unregistering): Released all slaves [ 103.469223][ T154] hfsplus: b-tree write err: -5, ino 4 [ 103.475061][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 103.493092][ T5314] Bluetooth: hci0: command 0x040f tx timeout [ 103.552179][ T5924] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.575057][ T5924] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 103.806480][ T4712] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.850423][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.889205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.899767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.932497][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.956548][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.992619][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.062796][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.069960][ T4554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.146814][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.232835][ T4712] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 104.246835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.255519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.266358][ T4712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.320959][ T4712] usb 1-1: config 0 descriptor?? [ 104.327360][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.334433][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.365579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.442774][ T4712] cp210x 1-1:0.0: cp210x converter detected [ 104.447078][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.488275][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.546551][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.580297][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.595391][ T5956] loop2: detected capacity change from 0 to 1024 [ 104.627123][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.645931][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.664929][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.695809][ T5956] EXT4-fs (loop2): Unrecognized mount option "hash" or missing value [ 104.748715][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.829894][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.860688][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.914515][ T5783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.918274][ T4712] usb 1-1: cp210x converter now attached to ttyUSB0 [ 105.143071][ T5936] loop4: detected capacity change from 0 to 40427 [ 105.145021][ T4299] usb 1-1: USB disconnect, device number 5 [ 105.196915][ T4299] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 105.212327][ T5936] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 105.233421][ T4299] cp210x 1-1:0.0: device disconnected [ 105.313304][ T5936] F2FS-fs (loop4): invalid crc value [ 105.392585][ T5936] F2FS-fs (loop4): Found nat_bits in checkpoint [ 105.548942][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.577055][ T1324] Bluetooth: hci0: command 0x0419 tx timeout [ 105.602427][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.616567][ T5936] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 105.627501][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.906856][ T4190] attempt to access beyond end of device [ 105.906856][ T4190] loop4: rw=2049, want=45104, limit=40427 [ 106.414956][ T6023] ax25_connect(): syz.3.596 uses autobind, please contact jreuter@yaina.de [ 106.521863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.578139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.591476][ T4299] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.634315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.649654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.674578][ T6030] loop3: detected capacity change from 0 to 64 [ 106.728348][ T5783] device veth0_vlan entered promiscuous mode [ 106.740565][ T6030] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 106.760501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.782184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.842107][ T5783] device veth1_vlan entered promiscuous mode [ 106.908115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.957031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.974532][ T4299] usb 3-1: Using ep0 maxpacket: 16 [ 107.046550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.065481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.109696][ T5783] device veth0_macvtap entered promiscuous mode [ 107.149535][ T5783] device veth1_macvtap entered promiscuous mode [ 107.215099][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.236684][ T6048] [U]  [ 107.274150][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.320555][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.374749][ T4299] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 107.377936][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.398538][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.416364][ T4299] usb 3-1: Product: syz [ 107.429355][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.446368][ T4299] usb 3-1: Manufacturer: syz [ 107.451842][ T4299] usb 3-1: SerialNumber: syz [ 107.478168][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.486995][ T4299] r8152-cfgselector 3-1: config 0 descriptor?? [ 107.503695][ T6059] loop3: detected capacity change from 0 to 128 [ 107.516811][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.550331][ T6059] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 107.572778][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.585228][ T5314] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 107.617318][ T6059] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.637824][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.667838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.677005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.686874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.700683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.736266][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.758996][ T6059] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 107.780088][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.781452][ T6059] UDF-fs: error (device loop3): udf_count_free_bitmap: udf_count_free failed [ 107.806460][ T6063] netlink: 'syz.0.607': attribute type 27 has an invalid length. [ 107.818722][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.825409][ T4299] r8152-cfgselector 3-1: Unknown version 0x0000 [ 107.832913][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.832930][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.832945][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.832956][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.832968][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.834327][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.841078][ T5783] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.916188][ T4299] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 107.966579][ T5783] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.977461][ T5783] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.010566][ T5783] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.056754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.068694][ T5314] usb 5-1: config 0 interface 0 altsetting 41 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.092907][ T4191] UDF-fs: error (device loop3): udf_read_inode: (ino 104) failed !bh [ 108.101891][ T5314] usb 5-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.117392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.127276][ T4191] UDF-fs: error (device loop3): udf_read_inode: (ino 104) failed !bh [ 108.134217][ T6065] loop0: detected capacity change from 0 to 4096 [ 108.146115][ T5314] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.176858][ T5314] usb 5-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 108.185931][ T5314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.249651][ T5314] usb 5-1: config 0 descriptor?? [ 108.257946][ T1324] usb 3-1: USB disconnect, device number 6 [ 108.441958][ T4207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.459726][ T4207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.507186][ T6065] EXT4-fs (loop0): Test dummy encryption mode enabled [ 108.552479][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.601759][ T4207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.610753][ T4207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.619971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.668056][ T6065] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 108.745553][ T5314] wacom 0003:056A:00BB.0008: Unknown device_type for 'HID 056a:00bb'. Assuming pen. [ 108.756775][ T5314] wacom 0003:056A:00BB.0008: hidraw0: USB HID v0.09 Device [HID 056a:00bb] on usb-dummy_hcd.4-1/input0 [ 108.777860][ T5314] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00BB.0008/input/input10 [ 108.872993][ T6084] loop6: detected capacity change from 0 to 64 [ 108.963697][ T6065] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 108.993773][ T5314] usb 5-1: USB disconnect, device number 4 [ 109.156082][ T6088] fido_id[6088]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 109.453650][ T6095] tipc: Started in network mode [ 109.536387][ T6095] tipc: Node identity ac14140f, cluster identity 4711 [ 109.546030][ T6095] tipc: Enabled bearer , priority 10 [ 109.717969][ T6104] loop0: detected capacity change from 0 to 128 [ 109.967258][ T6080] loop2: detected capacity change from 0 to 32768 [ 110.005810][ T6104] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.042346][ T6104] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.195594][ T6080] XFS (loop2): Mounting V5 Filesystem [ 110.365251][ T4280] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.527682][ T6080] XFS (loop2): Ending clean mount [ 110.528552][ T6114] lo speed is unknown, defaulting to 1000 [ 110.540289][ T6080] XFS (loop2): Quotacheck needed: Please wait. [ 110.549014][ T4968] tipc: Node number set to 2886997007 [ 110.630591][ T4280] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.677494][ T6080] XFS (loop2): Quotacheck: Done. [ 110.681369][ T6109] loop4: detected capacity change from 0 to 32768 [ 110.767868][ T4188] XFS (loop2): Unmounting Filesystem [ 110.768030][ T6144] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\Ãåý07†ðÿ$Áܲ¹" or missing value [ 110.773362][ T4280] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.044266][ T4280] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.371823][ T6169] netlink: 140 bytes leftover after parsing attributes in process `syz.2.626'. [ 111.447646][ T6169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.626'. [ 111.463313][ T6114] chnl_net:caif_netlink_parms(): no params data found [ 111.584551][ T4280] tipc: Left network mode [ 111.725100][ T6114] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.758213][ T6194] netlink: 'syz.0.647': attribute type 3 has an invalid length. [ 111.777953][ T6114] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.786078][ T6114] device bridge_slave_0 entered promiscuous mode [ 111.823264][ T6114] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.833539][ T6114] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.896462][ T4968] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 111.941020][ T6114] device bridge_slave_1 entered promiscuous mode [ 112.045741][ T6114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.127741][ T4299] Bluetooth: hci4: command 0x0409 tx timeout [ 112.139114][ T6114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.228317][ T6114] team0: Port device team_slave_0 added [ 112.256705][ T4968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.278537][ T4968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 112.285130][ T6114] team0: Port device team_slave_1 added [ 112.342104][ T4968] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.386986][ T6114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.390950][ T4968] usb 3-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 112.417248][ T6114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.430239][ T4968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.488599][ T6114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.500846][ T4968] usb 3-1: config 0 descriptor?? [ 112.526624][ T6233] netlink: 20 bytes leftover after parsing attributes in process `syz.6.653'. [ 112.530762][ T6182] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.566996][ T6114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.574657][ T6114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.674166][ T6114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.821594][ T6114] device hsr_slave_0 entered promiscuous mode [ 112.848068][ T6114] device hsr_slave_1 entered promiscuous mode [ 112.882871][ T6251] loop4: detected capacity change from 0 to 4096 [ 112.895423][ T6114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.914655][ T6114] Cannot create hsr debugfs directory [ 112.951237][ T6251] EXT4-fs (loop4): inline encryption not supported [ 112.970737][ T6251] EXT4-fs (loop4): mb_optimize_scan should be set to 0 or 1. [ 113.051012][ T4968] asus 0003:048D:CE50.0009: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.2-1/input0 [ 113.092823][ T4968] asus 0003:048D:CE50.0009: Asus input not registered [ 113.105099][ T6224] loop0: detected capacity change from 0 to 40427 [ 113.136183][ T4968] asus: probe of 0003:048D:CE50.0009 failed with error -12 [ 113.162204][ T6224] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 113.223071][ T6224] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 113.325636][ T6224] F2FS-fs (loop0): invalid crc value [ 113.405999][ T6224] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.425620][ T1108] usb 3-1: USB disconnect, device number 7 [ 113.529342][ T6224] F2FS-fs (loop0): Start checkpoint disabled! [ 113.537712][ T6114] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 113.590822][ T4280] device hsr_slave_0 left promiscuous mode [ 113.597647][ T6224] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 113.620075][ T4280] device hsr_slave_1 left promiscuous mode [ 113.648152][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.655593][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.694166][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.734561][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.747031][ T4280] device bridge_slave_1 left promiscuous mode [ 113.753255][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.763331][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 113.763343][ T26] audit: type=1800 audit(1771299989.866:18): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.649" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 113.808836][ T6224] F2FS-fs (loop0) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2b6/0x550 [ 113.831353][ T6248] loop6: detected capacity change from 0 to 32768 [ 113.847166][ T4280] device bridge_slave_0 left promiscuous mode [ 113.866745][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.872416][ T6224] attempt to access beyond end of device [ 113.872416][ T6224] loop0: rw=2049, want=78240, limit=40427 [ 113.925404][ T4280] device veth1_macvtap left promiscuous mode [ 113.936828][ T4280] device veth0_macvtap left promiscuous mode [ 113.957127][ T4280] device veth1_vlan left promiscuous mode [ 113.957803][ T6248] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 113.962949][ T4280] device veth0_vlan left promiscuous mode [ 114.006415][ T6248] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 114.043323][ T6262] loop4: detected capacity change from 0 to 32768 [ 114.101502][ T6262] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.659 (6262) [ 114.111904][ T6248] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 114.174541][ T6262] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 114.195182][ T4297] attempt to access beyond end of device [ 114.195182][ T4297] loop0: rw=2049, want=40976, limit=40427 [ 114.206493][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 114.243107][ T6262] BTRFS info (device loop4): using free space tree [ 114.258531][ T6262] BTRFS info (device loop4): has skinny extents [ 114.260740][ T6248] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 114.559359][ T6262] BTRFS info (device loop4): enabling ssd optimizations [ 114.820280][ T6298] loop6: detected capacity change from 0 to 4096 [ 114.904985][ T4297] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 114.909153][ T6303] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.036879][ T6305] loop2: detected capacity change from 0 to 1024 [ 115.255269][ T26] audit: type=1800 audit(1771299991.356:19): pid=6305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.665" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 115.326030][ T6309] loop6: detected capacity change from 0 to 512 [ 115.338228][ T4280] team0 (unregistering): Port device team_slave_1 removed [ 115.384793][ T4280] team0 (unregistering): Port device team_slave_0 removed [ 115.497744][ T26] audit: type=1326 audit(1771299991.606:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.4.668" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa8e9477f79 code=0x0 [ 115.561063][ T4280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.564705][ T6309] EXT4-fs (loop6): 1 truncate cleaned up [ 115.569772][ T6302] loop0: detected capacity change from 0 to 32768 [ 115.603384][ T4280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.625027][ T6309] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 115.809732][ T4280] bond0 (unregistering): Released all slaves [ 115.870177][ T6302] XFS (loop0): Mounting V5 Filesystem [ 115.914858][ T6114] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 116.019331][ T5301] lo speed is unknown, defaulting to 1000 [ 116.019773][ T6114] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 116.056194][ T6114] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 116.133576][ T6302] XFS (loop0): Ending clean mount [ 116.152802][ T6346] loop6: detected capacity change from 0 to 512 [ 116.163942][ T6302] XFS (loop0): Quotacheck needed: Please wait. [ 116.286576][ T4299] Bluetooth: hci4: command 0x040f tx timeout [ 116.357289][ T6114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.374461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.386038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.411054][ T6302] XFS (loop0): Quotacheck: Done. [ 116.448129][ T6114] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.519970][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.553859][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.601698][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.608830][ T4554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.641474][ T6363] loop6: detected capacity change from 0 to 1024 [ 116.642960][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.673013][ T4183] XFS (loop0): Unmounting Filesystem [ 116.709917][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.724895][ T6363] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 116.764409][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.774366][ T6363] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 116.780203][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.791359][ T4554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.822655][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.828921][ T6363] EXT4-fs (loop6): invalid journal inode [ 116.838332][ T6363] EXT4-fs (loop6): can't get journal size [ 116.841702][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.868920][ T6363] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 116.894627][ T6114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.905044][ T6114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.919613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.984260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.017548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.029353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.047331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.062278][ T6363] EXT4-fs (loop6): Online resizing not supported with sparse_super2 [ 117.067109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.081160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.090242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.104326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.145547][ T6372] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.157122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.501467][ T6382] loop6: detected capacity change from 0 to 4096 [ 117.517475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.524982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.548638][ T6114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.604462][ T6382] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 117.691020][ T6382] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 117.794190][ T6382] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 117.861482][ T6382] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 117.967666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.993683][ T6360] loop4: detected capacity change from 0 to 40427 [ 118.006358][ T6382] ntfs: (device loop6): check_mft_mirror(): Failed to read $MFTMirr. [ 118.064733][ T6382] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 118.122962][ T6360] F2FS-fs (loop4): invalid crc value [ 118.152622][ T6382] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 118.166329][ T6360] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 118.202186][ T6382] ntfs: volume version 3.1. [ 118.314555][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.348803][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.366471][ T4712] Bluetooth: hci4: command 0x0419 tx timeout [ 118.387622][ T6360] F2FS-fs (loop4): Start checkpoint disabled! [ 118.407031][ T6360] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 118.435891][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.457670][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.497619][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.555927][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.571192][ T6114] device veth0_vlan entered promiscuous mode [ 118.630819][ T6114] device veth1_vlan entered promiscuous mode [ 118.743080][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.780750][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.827275][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.867726][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.910237][ T6114] device veth0_macvtap entered promiscuous mode [ 118.949280][ T6114] device veth1_macvtap entered promiscuous mode [ 119.025232][ T6114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.086982][ T6114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.131507][ T6114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.175405][ T6114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.218566][ T6114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.257094][ T6114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.305989][ T6114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.357536][ T6114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.387732][ T6114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.424107][ T6114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.480732][ T6114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.526452][ T6114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.542091][ T6409] loop0: detected capacity change from 0 to 40427 [ 119.557284][ T6114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.597997][ T6114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.665643][ T6114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.682206][ T6114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.702901][ T6114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.726930][ T6114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.796545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.836855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.862770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.902182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.941048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.977880][ T6409] F2FS-fs (loop0): invalid crc value [ 119.983215][ T6409] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 120.038093][ T6409] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.046181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.099550][ T6465] netlink: 'syz.4.700': attribute type 4 has an invalid length. [ 120.129640][ T6114] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.186360][ T6114] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.227667][ T6409] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 120.234285][ T6409] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 120.246356][ T6114] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.294819][ T6114] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.325098][ T6409] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 120.494884][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.533022][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.578311][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.620809][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.638986][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.649607][ T6475] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 120.668708][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.848682][ T6458] loop2: detected capacity change from 0 to 32768 [ 121.090062][ T6486] loop7: detected capacity change from 0 to 64 [ 121.321352][ T6470] loop4: detected capacity change from 0 to 32768 [ 121.344603][ T6470] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.702 (6470) [ 121.396202][ T6470] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 121.396285][ T6470] BTRFS info (device loop4): using free space tree [ 121.396402][ T6470] BTRFS info (device loop4): has skinny extents [ 121.889415][ T6470] BTRFS info (device loop4): enabling ssd optimizations [ 121.975014][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 121.975028][ T26] audit: type=1800 audit(1771299998.076:21): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.702" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 122.402322][ T6546] loop0: detected capacity change from 0 to 1024 [ 122.469431][ T6549] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 122.537640][ T6546] hfsplus: bad catalog entry type [ 122.677792][ T4297] hfsplus: b-tree write err: -5, ino 4 [ 122.903357][ T6561] loop7: detected capacity change from 0 to 32768 [ 123.031877][ T6571] loop2: detected capacity change from 0 to 4096 [ 123.115668][ T6583] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.215105][ T6561] XFS (loop7): Mounting V5 Filesystem [ 123.224527][ T6588] loop0: detected capacity change from 0 to 64 [ 123.305531][ T1108] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x1 [ 123.342836][ T6588] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 123.373793][ T1108] XFS (loop7): Unmount and run xfs_repair [ 123.410673][ T1108] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 123.451146][ T1108] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 20 00 XAGF.......... . [ 123.469152][ T1108] 00000010: 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 01 ................ [ 123.516400][ T1108] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 123.565429][ T1108] 00000030: 00 00 00 06 00 00 13 e3 00 00 13 e0 00 00 00 00 ................ [ 123.587379][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 123.596259][ T1108] 00000040: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 123.611842][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 123.620958][ T1108] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 3f ...............? [ 123.666456][ T1108] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.683296][ T6601] device macvlan2 entered promiscuous mode [ 123.689825][ T1108] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.721691][ T6561] XFS (loop7): metadata I/O error in "xfs_read_agf+0x252/0x510" at daddr 0x1 len 1 error 74 [ 123.733488][ T6561] XFS (loop7): Error -117 reserving per-AG metadata reserve pool. [ 123.742367][ T6561] XFS (loop7): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1bf/0x1f0 (fs/xfs/xfs_fsops.c:577). Shutting down filesystem. [ 123.757920][ T6561] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 123.766586][ T6561] XFS (loop7): Ending clean mount [ 123.796209][ T6561] XFS (loop7): Failed to initialize disk quotas. [ 123.802740][ T6561] XFS (loop7): Error -5 reserving per-AG metadata reserve pool. [ 124.180088][ T6623] loop4: detected capacity change from 0 to 4096 [ 124.216765][ T26] audit: type=1326 audit(1771300000.316:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.6.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55076a1f79 code=0x7ffc0000 [ 124.253286][ T6628] loop2: detected capacity change from 0 to 4096 [ 124.280244][ T26] audit: type=1326 audit(1771300000.316:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.6.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55076a1f79 code=0x7ffc0000 [ 124.366289][ T6623] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 124.400203][ T26] audit: type=1326 audit(1771300000.326:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.6.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55076a1f79 code=0x7ffc0000 [ 124.506406][ T26] audit: type=1326 audit(1771300000.326:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.6.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55076a1f79 code=0x7ffc0000 [ 124.576664][ T26] audit: type=1326 audit(1771300000.346:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.6.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f55076a1f79 code=0x7ffc0000 [ 124.722061][ T26] audit: type=1326 audit(1771300000.346:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.6.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55076a1f79 code=0x7ffc0000 [ 124.790857][ T6647] loop0: detected capacity change from 0 to 4096 [ 124.816406][ T26] audit: type=1326 audit(1771300000.346:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.6.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55076a1f79 code=0x7ffc0000 [ 124.881845][ T6647] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 124.927217][ T26] audit: type=1326 audit(1771300000.346:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.6.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55076a1f79 code=0x7ffc0000 [ 124.992677][ T6647] ntfs: volume version 3.1. [ 125.051689][ T6653] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.095077][ T6664] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 125.212459][ T6664] EXT4-fs (loop7): 1 truncate cleaned up [ 125.223344][ T6664] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,inode_readahead_blks=0x0000000004000000,noquota,,errors=continue. Quota mode: none. [ 125.375601][ T6664] EXT4-fs warning (device loop7): verify_group_input:147: Cannot add at group 9 (only 1 groups) [ 125.699791][ T6680] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.859539][ T6684] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.921438][ T6700] netlink: 'syz.4.758': attribute type 1 has an invalid length. [ 125.975399][ T6684] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.999377][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 126.543058][ T6739] set_capacity_and_notify: 6 callbacks suppressed [ 126.543074][ T6739] loop7: detected capacity change from 0 to 512 [ 126.714140][ T6747] loop4: detected capacity change from 0 to 2048 [ 126.752252][ T6739] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.792929][ T6747] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 126.825975][ T6739] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.908788][ T6747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.118284][ T6768] loop7: detected capacity change from 0 to 64 [ 127.275415][ T6768] hfs: keylen 1794 too large [ 127.299908][ T6706] loop6: detected capacity change from 0 to 40427 [ 127.331197][ T6768] hfs: keylen 1794 too large [ 127.394945][ T6706] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 127.442581][ T6706] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 127.591305][ T6706] F2FS-fs (loop6): invalid crc value [ 127.665164][ T6706] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 128.007308][ T6706] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 128.021783][ T6706] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 128.078400][ T6795] loop0: detected capacity change from 0 to 4096 [ 128.143549][ T6795] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 128.192635][ T26] kauditd_printk_skb: 69 callbacks suppressed [ 128.192649][ T26] audit: type=1800 audit(1771300004.296:97): pid=6706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.768" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 128.277771][ T6806] loop2: detected capacity change from 0 to 512 [ 128.295598][ T5783] attempt to access beyond end of device [ 128.295598][ T5783] loop6: rw=2049, want=45104, limit=40427 [ 128.509013][ T6806] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,journal_dev=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 128.586549][ T6806] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.598224][ T6776] loop4: detected capacity change from 0 to 32768 [ 128.753747][ T6821] loop0: detected capacity change from 0 to 1024 [ 128.772894][ T6776] XFS (loop4): Mounting V5 Filesystem [ 128.939319][ T6821] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.020712][ T6776] XFS (loop4): Ending clean mount [ 129.063864][ T6776] XFS (loop4): Quotacheck needed: Please wait. [ 129.189367][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'. [ 129.227910][ T6776] XFS (loop4): Quotacheck: Done. [ 129.398897][ T4190] XFS (loop4): Unmounting Filesystem [ 129.561363][ T6854] loop2: detected capacity change from 0 to 256 [ 129.608222][ T6852] loop0: detected capacity change from 0 to 1024 [ 129.637230][ T26] audit: type=1800 audit(1771300005.746:98): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.814" name=AB558DD927B972A7B6E39F9435C9CE7FF7 dev="loop2" ino=1048642 res=0 errno=0 [ 129.739955][ T6842] infiniband syz1: set active [ 129.745115][ T6842] infiniband syz1: added batadv_slave_0 [ 130.020656][ T6842] RDS/IB: syz1: added [ 130.025778][ T6842] smc: adding ib device syz1 with port count 1 [ 130.116673][ T6842] smc: ib device syz1 port 1 has pnetid [ 130.246997][ T6874] erofs: (device loop0): mounted with root inode @ nid 36. [ 130.717062][ T6891] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none. [ 130.939495][ T6868] F2FS-fs (loop2): invalid crc value [ 131.005576][ T6868] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 131.153784][ T6910] erofs: (device loop7): mounted with root inode @ nid 36. [ 131.195498][ T6910] attempt to access beyond end of device [ 131.195498][ T6910] loop7: rw=524288, want=1072, limit=16 [ 131.283159][ T4200] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 131.307646][ T6910] erofs: (device loop7): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 131.319051][ T6910] attempt to access beyond end of device [ 131.319051][ T6910] loop7: rw=524288, want=56, limit=16 [ 131.343860][ T6910] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 131.396789][ T26] audit: type=1800 audit(1771300007.506:99): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.827" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 131.435495][ T6868] F2FS-fs (loop2): Start checkpoint disabled! [ 131.464426][ T6868] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 131.581320][ T6912] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 132.007525][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.7.836'. [ 132.034442][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.7.836'. [ 132.075434][ T6934] netlink: 'syz.7.836': attribute type 18 has an invalid length. [ 132.216674][ T5299] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 132.318294][ T6946] sg_write: data in/out 262114/14 bytes for SCSI command 0x2-- guessing data in; [ 132.318294][ T6946] program syz.2.831 not setting count and/or reply_len properly [ 132.496380][ T6957] set_capacity_and_notify: 5 callbacks suppressed [ 132.496395][ T6957] loop4: detected capacity change from 0 to 2048 [ 132.597528][ T6957] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.626792][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.644612][ T5299] usb 1-1: New USB device found, idVendor=056a, idProduct=012c, bcdDevice= 0.00 [ 132.676347][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.696632][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.697548][ T5299] usb 1-1: config 0 descriptor?? [ 132.702954][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.723793][ T6968] loop7: detected capacity change from 0 to 4096 [ 132.845988][ T6968] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 132.907707][ T6974] loop2: detected capacity change from 0 to 512 [ 132.935996][ T6977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.848'. [ 132.994327][ T6981] netlink: 201392 bytes leftover after parsing attributes in process `syz.6.852'. [ 133.023982][ T6114] ntfs3: loop7: ntfs_sync_fs r=9 failed, -22. [ 133.059068][ T6974] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.064145][ T6114] ntfs3: loop7: ntfs_evict_inode r=9 failed, -22. [ 133.112761][ T6974] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.199339][ T5299] wacom 0003:056A:012C.000A: unknown main item tag 0x0 [ 133.220405][ T5299] wacom 0003:056A:012C.000A: hidraw0: USB HID v0.00 Device [HID 056a:012c] on usb-dummy_hcd.0-1/input0 [ 133.299140][ T6991] vim2m vim2m.0: vidioc_s_fmt queue busy [ 133.417198][ T4242] usb 1-1: USB disconnect, device number 6 [ 133.438697][ T6999] mkiss: ax0: crc mode is auto. [ 133.473911][ T6996] fido_id[6996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 133.740959][ T7021] comedi comedi3: dt2817: I/O port conflict (0x1,5) [ 133.810996][ T4250] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 134.247247][ T4250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 134.276457][ T4250] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 134.343733][ T4250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.395263][ T4250] usb 3-1: config 0 descriptor?? [ 134.412121][ T7069] loop4: detected capacity change from 0 to 1024 [ 134.427885][ T7008] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 134.558714][ T26] audit: type=1800 audit(1771300010.666:100): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.882" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 134.672721][ T743] hfsplus: b-tree write err: -5, ino 4 [ 134.781475][ T4250] usbhid 3-1:0.0: can't add hid device: -71 [ 134.797762][ T4250] usbhid: probe of 3-1:0.0 failed with error -71 [ 134.832882][ T4250] usb 3-1: USB disconnect, device number 8 [ 134.896577][ T7093] nbd: must specify an index to disconnect [ 135.329835][ T7112] loop6: detected capacity change from 0 to 8192 [ 135.404046][ T7112] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 135.451116][ T7112] REISERFS (device loop6): using ordered data mode [ 135.460392][ T7112] reiserfs: using flush barriers [ 135.468038][ T7112] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.484979][ T7112] REISERFS (device loop6): checking transaction log (loop6) [ 135.495761][ T7112] REISERFS (device loop6): Using r5 hash to sort names [ 135.515314][ T7112] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 135.559955][ T4332] udevd[4332]: symlink '../../loop6' '/dev/disk/by-diskseq/351.tmp-b7:6' failed: Read-only file system [ 135.655466][ T4332] udevd[4332]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 135.674871][ T7131] loop0: detected capacity change from 0 to 8 [ 135.700535][ T4332] udevd[4332]: symlink '../../loop6' '/dev/disk/by-uuid/12312308-1233-1233-1231-1234134124cd.tmp-b7:6' failed: Read-only file system [ 135.770093][ T4663] udevd[4663]: symlink '../../loop0' '/dev/disk/by-diskseq/352.tmp-b7:0' failed: Read-only file system [ 135.780166][ T7089] loop7: detected capacity change from 0 to 32768 [ 135.854509][ T4663] udevd[4663]: symlink '../../loop0' '/dev/disk/by-diskseq/352.tmp-b7:0' failed: Read-only file system [ 135.928182][ T4332] udevd[4332]: symlink '../../loop0' '/dev/disk/by-diskseq/352.tmp-b7:0' failed: Read-only file system [ 135.931981][ T4663] udevd[4663]: symlink '../../loop6' '/dev/disk/by-diskseq/351.tmp-b7:6' failed: Read-only file system [ 136.054879][ T7089] XFS (loop7): Mounting V5 Filesystem [ 136.079272][ T4332] udevd[4332]: symlink '../../loop0' '/dev/disk/by-diskseq/353.tmp-b7:0' failed: Read-only file system [ 136.113676][ T7101] loop4: detected capacity change from 0 to 40427 [ 136.124794][ T4663] udevd[4663]: symlink '../../loop6' '/dev/disk/by-diskseq/351.tmp-b7:6' failed: Read-only file system [ 136.232148][ T4332] udevd[4332]: symlink '../../loop6' '/dev/disk/by-diskseq/355.tmp-b7:6' failed: Read-only file system [ 136.281751][ T7089] XFS (loop7): Starting recovery (logdev: internal) [ 136.301044][ T7101] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 136.313586][ T7101] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 136.325110][ T7170] tipc: Started in network mode [ 136.361556][ T7089] XFS (loop7): Ending recovery (logdev: internal) [ 136.367977][ T7170] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 136.398105][ T7170] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 136.417247][ T7101] F2FS-fs (loop4): invalid crc value [ 136.489473][ T7170] tipc: Enabled bearer , priority 10 [ 136.491092][ T7101] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 136.545630][ T6114] XFS (loop7): Unmounting Filesystem [ 136.667835][ T7101] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 136.667863][ T7101] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.755783][ T26] audit: type=1800 audit(1771300012.856:101): pid=7101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.895" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 136.844298][ T4190] attempt to access beyond end of device [ 136.844298][ T4190] loop4: rw=2049, want=45104, limit=40427 [ 136.967475][ T7155] loop6: detected capacity change from 0 to 32768 [ 137.160736][ T7155] XFS (loop6): Mounting V5 Filesystem [ 137.327815][ T7155] XFS (loop6): Ending clean mount [ 137.421053][ T7155] XFS (loop6): Quotacheck needed: Please wait. [ 137.548838][ T7219] sg_write: data in/out 262114/14 bytes for SCSI command 0x2-- guessing data in; [ 137.548838][ T7219] program syz.0.921 not setting count and/or reply_len properly [ 137.591443][ T7155] XFS (loop6): Quotacheck: Done. [ 137.596466][ T4968] tipc: Node number set to 1 [ 137.628429][ T7225] netlink: 160 bytes leftover after parsing attributes in process `syz.7.925'. [ 137.775038][ T5783] XFS (loop6): Unmounting Filesystem [ 137.966190][ T7233] loop0: detected capacity change from 0 to 8192 [ 138.023086][ T7243] loop7: detected capacity change from 0 to 256 [ 138.074903][ T7233] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 138.090777][ T7233] REISERFS (device loop0): using ordered data mode [ 138.102147][ T7233] reiserfs: using flush barriers [ 138.112186][ T7249] netlink: 'syz.4.933': attribute type 298 has an invalid length. [ 138.129588][ T7243] exfat: Deprecated parameter 'utf8' [ 138.157745][ T7243] exfat: Deprecated parameter 'namecase' [ 138.165334][ T7233] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.259024][ T7233] REISERFS (device loop0): checking transaction log (loop0) [ 138.314953][ T7233] REISERFS (device loop0): Using tea hash to sort names [ 138.322391][ T7243] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 138.349830][ T7233] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 138.674431][ T7274] netlink: 2 bytes leftover after parsing attributes in process `syz.4.938'. [ 138.988617][ T7239] loop2: detected capacity change from 0 to 40427 [ 139.062286][ T7239] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 139.085346][ T7239] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 139.127086][ T7239] F2FS-fs (loop2): invalid crc value [ 139.187035][ T7239] F2FS-fs (loop2): Found nat_bits in checkpoint [ 139.249916][ T7276] loop6: detected capacity change from 0 to 32768 [ 139.310049][ T7239] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 139.328431][ T7239] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 139.384431][ T7286] attempt to access beyond end of device [ 139.384431][ T7286] loop2: rw=2049, want=45104, limit=40427 [ 139.507462][ T7279] loop4: detected capacity change from 0 to 32768 [ 139.582149][ T7282] loop0: detected capacity change from 0 to 32768 [ 139.616647][ T7279] XFS (loop4): Mounting V5 Filesystem [ 139.767048][ T7279] XFS (loop4): Ending clean mount [ 139.915777][ T4190] XFS (loop4): Unmounting Filesystem [ 140.122299][ T7319] tipc: Started in network mode [ 140.137701][ T7319] tipc: Node identity ffffffffffff, cluster identity 4711 [ 140.157411][ T7319] tipc: Enabling of bearer rejected, failed to enable media [ 140.335778][ T7329] loop0: detected capacity change from 0 to 512 [ 140.463358][ T7329] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.519317][ T7329] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.575304][ T4332] udevd[4332]: symlink '../../loop0' '/dev/disk/by-diskseq/371.tmp-b7:0' failed: Read-only file system [ 140.639617][ T4663] udevd[4663]: symlink '../../loop4' '/dev/disk/by-diskseq/372.tmp-b7:4' failed: Read-only file system [ 140.659728][ T4332] udevd[4332]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 140.693248][ T4176] udevd[4176]: symlink '../../loop2' '/dev/disk/by-diskseq/370.tmp-b7:2' failed: Read-only file system [ 140.698833][ T7349] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.966: bg 0: block 145: padding at end of block bitmap is not set [ 140.758761][ T4663] udevd[4663]: symlink '../../loop4' '/dev/disk/by-diskseq/372.tmp-b7:4' failed: Read-only file system [ 140.780586][ T7358] netlink: 'syz.4.964': attribute type 2 has an invalid length. [ 140.802795][ T4332] udevd[4332]: symlink '../../loop0' '/dev/disk/by-diskseq/373.tmp-b7:0' failed: Read-only file system [ 140.835937][ T4663] udevd[4663]: symlink '../../loop2' '/dev/disk/by-diskseq/370.tmp-b7:2' failed: Read-only file system [ 140.850140][ T4332] udevd[4332]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 140.858679][ T5299] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 140.887075][ T4332] udevd[4332]: symlink '../../loop4' '/dev/disk/by-diskseq/372.tmp-b7:4' failed: Read-only file system [ 140.940076][ T7364] loop4: detected capacity change from 0 to 512 [ 140.984518][ T7370] comedi comedi3: pcl730: I/O port conflict (0xd,4) [ 141.023895][ T4663] udevd[4663]: symlink '../../loop0' '/dev/disk/by-diskseq/373.tmp-b7:0' failed: Read-only file system [ 141.186389][ T5299] usb 7-1: Using ep0 maxpacket: 32 [ 141.227023][ T7384] netlink: 404 bytes leftover after parsing attributes in process `syz.2.974'. [ 141.261282][ T7384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.974'. [ 141.290195][ T7384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.974'. [ 141.316202][ T7384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.974'. [ 141.391369][ T5299] usb 7-1: unable to get BOS descriptor or descriptor too short [ 141.516778][ T5299] usb 7-1: config 7 has an invalid interface number: 187 but max is 0 [ 141.524978][ T5299] usb 7-1: config 7 has no interface number 0 [ 141.557075][ T5299] usb 7-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 141.596739][ T5299] usb 7-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 141.646468][ T5299] usb 7-1: config 7 interface 187 has no altsetting 0 [ 141.808664][ T7415] loop0: detected capacity change from 0 to 1764 [ 141.876737][ T5299] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 141.885793][ T5299] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.888848][ T7415] isofs: isofs_export_get_parent(): child directory not normalized! [ 141.916827][ T5299] usb 7-1: Product: syz [ 141.937246][ T5299] usb 7-1: Manufacturer: syz [ 141.941868][ T5299] usb 7-1: SerialNumber: syz [ 142.109588][ T7390] loop4: detected capacity change from 0 to 40427 [ 142.184277][ T7432] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 142.195160][ T7390] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 142.221381][ T5299] usb 7-1: Unknown endpoint type found, address 0x07 [ 142.226488][ T7390] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 142.250897][ T5299] usb 7-1: Not enough endpoints found in device, aborting! [ 142.273616][ T7390] F2FS-fs (loop4): invalid crc value [ 142.341472][ T7390] F2FS-fs (loop4): Found nat_bits in checkpoint [ 142.491363][ T4712] usb 7-1: USB disconnect, device number 2 [ 142.517359][ T7390] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 142.526410][ T7390] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 142.622491][ T7456] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 142.688695][ T7456] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 142.915746][ T7470] program syz.2.1012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.086067][ T7479] set_capacity_and_notify: 2 callbacks suppressed [ 143.086081][ T7479] loop2: detected capacity change from 0 to 2048 [ 143.157574][ T7479] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.175865][ T7485] loop4: detected capacity change from 0 to 256 [ 143.248688][ T7485] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.379356][ T7488] loop7: detected capacity change from 0 to 4096 [ 143.424865][ T7493] loop4: detected capacity change from 0 to 512 [ 143.490181][ T7493] EXT4-fs (loop4): Ignoring removed oldalloc option [ 143.507400][ T7488] ntfs: (device loop7): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 143.552257][ T7488] ntfs: (device loop7): ntfs_read_locked_inode(): $DATA attribute is missing. [ 143.604403][ T7493] EXT4-fs (loop4): 1 truncate cleaned up [ 143.610520][ T7493] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 143.640660][ T7488] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 143.653860][ T7488] ntfs: (device loop7): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 143.723640][ T26] audit: type=1326 audit(1771300019.826:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz.0.1027" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f697fd31f79 code=0x0 [ 143.725297][ T7488] ntfs: volume version 3.1. [ 143.784691][ T7488] ntfs: (device loop7): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp850. You might want to try to use the mount option nls=utf8. [ 143.906549][ T7488] ntfs: (device loop7): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 143.946440][ T7488] ntfs: (device loop7): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp850. You might want to try to use the mount option nls=utf8. [ 144.055160][ T7488] ntfs: (device loop7): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 144.371411][ T7545] netlink: 'syz.2.1035': attribute type 6 has an invalid length. [ 144.482614][ T7552] loop4: detected capacity change from 0 to 256 [ 145.269400][ T7621] loop6: detected capacity change from 0 to 256 [ 145.326249][ T7614] loop2: detected capacity change from 0 to 4096 [ 145.427055][ T7614] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 145.513722][ T26] audit: type=1800 audit(1771300021.616:103): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1061" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 145.534147][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.597661][ T4332] udevd[4332]: symlink '../../loop6' '/dev/disk/by-diskseq/395.tmp-b7:6' failed: Read-only file system [ 145.620028][ T4176] udevd[4176]: symlink '../../loop4' '/dev/disk/by-diskseq/394.tmp-b7:4' failed: Read-only file system [ 145.653272][ T4663] udevd[4663]: symlink '../../loop2' '/dev/disk/by-diskseq/396.tmp-b7:2' failed: Read-only file system [ 145.684255][ T4177] udevd[4177]: symlink '../../loop0' '/dev/disk/by-diskseq/378.tmp-b7:0' failed: Read-only file system [ 145.685400][ T4332] udevd[4332]: symlink '../../loop6' '/dev/disk/by-diskseq/395.tmp-b7:6' failed: Read-only file system [ 145.714037][ T4663] udevd[4663]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 145.744893][ T4663] udevd[4663]: symlink '../../loop2' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:2' failed: Read-only file system [ 145.770526][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 145.787574][ T4332] udevd[4332]: symlink '../../loop6' '/dev/disk/by-diskseq/395.tmp-b7:6' failed: Read-only file system [ 145.817515][ T4176] udevd[4176]: symlink '../../loop0' '/dev/disk/by-diskseq/378.tmp-b7:0' failed: Read-only file system [ 145.868386][ T4177] udevd[4177]: symlink '../../loop4' '/dev/disk/by-diskseq/394.tmp-b7:4' failed: Read-only file system [ 146.034326][ T7665] loop4: detected capacity change from 0 to 256 [ 146.196208][ T7665] FAT-fs (loop4): Directory bread(block 64) failed [ 146.226472][ T7665] FAT-fs (loop4): Directory bread(block 65) failed [ 146.234898][ T7675] netlink: 'syz.0.1083': attribute type 1 has an invalid length. [ 146.247568][ T7665] FAT-fs (loop4): Directory bread(block 66) failed [ 146.254405][ T7665] FAT-fs (loop4): Directory bread(block 67) failed [ 146.261957][ T7675] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1083'. [ 146.272384][ T7665] FAT-fs (loop4): Directory bread(block 68) failed [ 146.279285][ T7665] FAT-fs (loop4): Directory bread(block 69) failed [ 146.286115][ T7665] FAT-fs (loop4): Directory bread(block 70) failed [ 146.293104][ T7675] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1083'. [ 146.303063][ T7665] FAT-fs (loop4): Directory bread(block 71) failed [ 146.310018][ T7665] FAT-fs (loop4): Directory bread(block 72) failed [ 146.317108][ T7665] FAT-fs (loop4): Directory bread(block 73) failed [ 146.577176][ T7673] loop6: detected capacity change from 0 to 32768 [ 146.585543][ T7683] loop4: detected capacity change from 0 to 1024 [ 146.607323][ T7683] hfsplus: bad catalog entry type [ 146.621408][ T144] hfsplus: b-tree write err: -5, ino 4 [ 146.723766][ T7673] JBD2: Ignoring recovery information on journal [ 146.779359][ T7673] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 146.786629][ T4299] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 146.811574][ T7673] (syz.6.1081,7673,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 146.830867][ T7673] (syz.6.1081,7673,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 146.831584][ T7689] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,jqfmt=vfsv1,dax=inode,dax=never,minixdf,,errors=continue. Quota mode: none. [ 146.839863][ T7673] (syz.6.1081,7673,1):ocfs2_mknod:298 ERROR: status = -2 [ 146.867858][ T7689] ext4 filesystem being mounted at /242/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.900186][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.931214][ T7673] (syz.6.1081,7673,1):ocfs2_mknod:502 ERROR: status = -2 [ 146.946530][ T7673] (syz.6.1081,7673,0):ocfs2_mkdir:659 ERROR: status = -2 [ 146.954435][ T7693] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1090'. [ 146.969362][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 147.044241][ T5783] ocfs2: Unmounting device (7,6) on (node local) [ 147.126887][ T4299] usb 1-1: Using ep0 maxpacket: 16 [ 147.246562][ T4299] usb 1-1: config 0 has an invalid interface number: 195 but max is 0 [ 147.254793][ T4299] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.285735][ T4299] usb 1-1: config 0 has no interface number 0 [ 147.466560][ T4299] usb 1-1: New USB device found, idVendor=1803, idProduct=5510, bcdDevice=7d.bf [ 147.477791][ T4299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.491061][ T4299] usb 1-1: Product: syz [ 147.495584][ T4299] usb 1-1: Manufacturer: syz [ 147.501585][ T4299] usb 1-1: SerialNumber: syz [ 147.519436][ T4299] usb 1-1: config 0 descriptor?? [ 147.659623][ T7719] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1103'. [ 147.743503][ T7707] read_mapping_page failed! [ 147.779618][ T4299] cxacru 1-1:0.195: usbatm_usb_probe: bind failed: -19! [ 147.789566][ T7707] ERROR: (device loop2): txCommit: [ 147.789566][ T7707] [ 147.868881][ T277] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 147.876245][ T277] ------------[ cut here ]------------ [ 147.886282][ T277] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 147.900436][ T277] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 147.906521][ T277] CPU: 0 PID: 277 Comm: jfsCommit Not tainted syzkaller #0 [ 147.913712][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.923773][ T277] RIP: 0010:txUnlock+0xc87/0xcb0 [ 147.928717][ T277] Code: 0f 69 de 06 0f 0b e8 78 19 a6 fe 48 c7 c7 40 6a 62 8a 48 c7 c6 39 66 62 8a ba a4 03 00 00 48 c7 c1 00 75 62 8a e8 e9 68 de 06 <0f> 0b e8 52 19 a6 fe 48 c7 c7 40 6a 62 8a 48 c7 c6 39 66 62 8a ba [ 147.948320][ T277] RSP: 0018:ffffc90002d5fd28 EFLAGS: 00010246 [ 147.954389][ T277] RAX: 0000000000000037 RBX: 0000000000001000 RCX: d00c1fc6798f1b00 [ 147.962355][ T277] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 147.970311][ T277] RBP: ffffc900028b21b0 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 147.978259][ T277] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88802bee75d0 [ 147.986206][ T277] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90002691220 [ 147.994249][ T277] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 148.003162][ T277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.009739][ T277] CR2: 00007f550791ddac CR3: 000000007d003000 CR4: 00000000003506f0 [ 148.017688][ T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 148.025634][ T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 148.033590][ T277] Call Trace: [ 148.036869][ T277] [ 148.039785][ T277] ? lockdep_hardirqs_on+0x94/0x140 [ 148.044961][ T277] jfs_lazycommit+0x581/0xb40 [ 148.049617][ T277] ? txFreelock+0x5a0/0x5a0 [ 148.054104][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 148.059975][ T277] ? sched_dynamic_update+0x210/0x210 [ 148.065326][ T277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 148.071195][ T277] ? __kthread_parkme+0x157/0x1b0 [ 148.076208][ T277] kthread+0x436/0x520 [ 148.080273][ T277] ? txFreelock+0x5a0/0x5a0 [ 148.084812][ T277] ? kthread_blkcg+0xd0/0xd0 [ 148.089399][ T277] ret_from_fork+0x1f/0x30 [ 148.093818][ T277] [ 148.096836][ T277] Modules linked in: [ 148.100768][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.116719][ T4716] usb 1-1: USB disconnect, device number 7 [ 148.140953][ T277] ---[ end trace 81146c701d5c4329 ]--- [ 148.146776][ T277] RIP: 0010:txUnlock+0xc87/0xcb0 [ 148.155317][ T277] Code: 0f 69 de 06 0f 0b e8 78 19 a6 fe 48 c7 c7 40 6a 62 8a 48 c7 c6 39 66 62 8a ba a4 03 00 00 48 c7 c1 00 75 62 8a e8 e9 68 de 06 <0f> 0b e8 52 19 a6 fe 48 c7 c7 40 6a 62 8a 48 c7 c6 39 66 62 8a ba [ 148.177770][ T4250] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 148.178949][ T277] RSP: 0018:ffffc90002d5fd28 EFLAGS: 00010246 [ 148.191677][ T277] RAX: 0000000000000037 RBX: 0000000000001000 RCX: d00c1fc6798f1b00 [ 148.199728][ T277] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 148.208667][ T277] RBP: ffffc900028b21b0 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 148.219759][ T277] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88802bee75d0 [ 148.228479][ T277] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90002691220 [ 148.239149][ T277] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 148.248263][ T277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.256325][ T277] CR2: 0000556147bd9950 CR3: 00000000612c8000 CR4: 00000000003506e0 [ 148.264344][ T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 148.285899][ T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 148.294092][ T277] Kernel panic - not syncing: Fatal exception [ 148.300430][ T277] Kernel Offset: disabled [ 148.304734][ T277] Rebooting in 86400 seconds..