last executing test programs: 53.180325737s ago: executing program 1 (id=159): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="2c005a80280000800500060000000000140005"], 0x48}, 0x1, 0x0, 0x0, 0x24040040}, 0x24000) 52.485340731s ago: executing program 1 (id=167): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 52.287174212s ago: executing program 1 (id=171): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000700)="9964", &(0x7f0000000000)=""/4, 0x2}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(r2, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) 51.795393913s ago: executing program 1 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0/file0\x00') 51.543531605s ago: executing program 1 (id=179): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) socket$inet6(0xa, 0x2, 0x0) 50.762028577s ago: executing program 1 (id=187): r0 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, r0, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) socket$xdp(0x2c, 0x3, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="05", 0x1, 0x0, 0x0, 0x2}]) 50.395145172s ago: executing program 32 (id=187): r0 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, r0, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) socket$xdp(0x2c, 0x3, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="05", 0x1, 0x0, 0x0, 0x2}]) 3.995971625s ago: executing program 0 (id=546): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x104d0, &(0x7f0000000000)=ANY=[], 0xf9, 0x2c0, &(0x7f0000000100)="$eJzs3U9rE08cx/HPbLZN+of+tr9WBOmpWvAkbT0oXgrSg3cvnkRtIhRDBVtBPUXP4gPw3qfgA/DoSTwLvXnyARQ8VGZ21kyS3SYtG7et7xc0bLLz3ZnJzDr73RAjAP+su5sH+zd/2D8j1VSTdEeKJDWkWNIlXW683Nnb3mu3mscdqOYi7J9RGmkGymzttPJCbZyL8BL7LNat8DWMR+O7OkszVbcCVXNnf45Iqvuz0+1vpC//Okr93UaWqFN1AypmDnWoV5qruh0AgOp0uut/5Nf5WX/9HkXSil/20/XfBEHn2GHVDRizz0P2B+u/y7KOjB3f/9yubr7nBjvWxImrv7cbPJlUOrN6LjDNsKzStSWaerrdbt3Yet5uRnqnDS9o0KJ7bKZTN3Owb1xOa7ffTg8cetnnpiPml1mGPFrpkEusognbh/Ww/UGRhXJrHM58MV/NQ5Poo5p/rv/iI2OHyY1U0jdSaftXi4/oejkpV6qgl/Oukiu+Bu/YXtZUkJEom1HzfQOYFLQz7omS6Y1Ke7dW3DsXtaC8qPVgzk3lRC32R3Vnc3F942Y+mAdmWT/1SZvB9X9k3+0VjXJm2jKupJ8Zx/YndiUT98b7taOzlFsyOm2PcArv9US3Nbf7+s2zx+1268VF2/A3KrRrz8QyDjihM9GvUjaySXBW2uM36na8SjhOtshU3y/bikpqz9adkQo3jTSwq/ifDm7LXxzdQT9hIJPgorDXXSbN/4J8ZdVdrNmHpPc6vR7GDv0AIDjiWkFu8L97nO7P4ApyA+NuPczkfLo4WGOQc/WksC7nunpdujZKjanEt/Ps2ThNkNnUNz3i/j8AAAAAAAAAAAAAAAAAAMB5U95XDhqFX7eouo8AAAAAAAAAAAAAAAAAAAAAAJx3Ob//W6/093/vK30Wa5b/Yx4Yr98BAAD//xUUb4I=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x82042, 0x1d8) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8242, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 3.380455542s ago: executing program 0 (id=552): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="1c005e800800020001000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 3.350513569s ago: executing program 3 (id=553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, 0x0) 3.092505142s ago: executing program 0 (id=557): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.039066403s ago: executing program 5 (id=558): openat(0xffffffffffffff9c, 0x0, 0x42, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x2000040) 2.993635502s ago: executing program 3 (id=559): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x57c, &(0x7f0000000380)="$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") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) 2.937201614s ago: executing program 4 (id=560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000071, 0x0, 0x3ce}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x4f}) 2.873077227s ago: executing program 5 (id=561): syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) syz_emit_ethernet(0x44, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @esp={0x8, 0x6, "b5b945", 0xe, 0x32, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, @dev={0xfe, 0x80, '\x00', 0x13}, {[], {0x4d2, 0x2}}}}}}, 0x0) 2.801460562s ago: executing program 0 (id=562): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004000)={0x2020}, 0x2020) 2.641420775s ago: executing program 0 (id=563): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x1000, r0, 0x0, 0x0, 0x8}]) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.605452442s ago: executing program 4 (id=564): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 2.460431972s ago: executing program 5 (id=566): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000480)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000280)={r3, 0x3, 0x7, 0x0, 0x0}) 2.429468519s ago: executing program 2 (id=567): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002400010027bd7000fcdbdf250800000006000700"], 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x400c000) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 2.368488261s ago: executing program 4 (id=568): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x104d0, &(0x7f0000000000)=ANY=[], 0xf9, 0x2c0, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x82042, 0x1d8) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8242, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.316301402s ago: executing program 2 (id=569): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000040)={[{@nobarrier}, {@discard_async}, {@ref_verify}]}, 0x1, 0x559d, &(0x7f000000ac40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x24) chdir(&(0x7f00000003c0)='./bus\x00') symlinkat(&(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000001300)=""/4096, 0x1000) 2.264452423s ago: executing program 0 (id=570): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x9cc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x362c, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200119"], 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x40, 0x6, 0x4, "ac8fd07b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.202313945s ago: executing program 5 (id=571): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@migrate={0xa0, 0x21, 0x1, 0x70bd25, 0x25dfdbfb, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x4e22, 0x7, 0x4e20, 0x0, 0x2, 0x40, 0x80, 0xff}, 0x0, 0x1}, [@migrate={0x50, 0x11, [{@in6=@private1, @in6=@private0, @in6=@loopback, @in=@local, 0x3c, 0x1, 0x0, 0x3500, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040010}, 0x8000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xc, 0x1000, 0x4, "5a1c966bcd4b7448"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) 2.051354317s ago: executing program 3 (id=572): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000000000000000002000000000d00000000720007000000ee000000000000000d00000000002e305f2e2e2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 2.010122825s ago: executing program 4 (id=573): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2ac0ff00000000180200000a0000010000000000000000180200000a0000010000000000000000180100002020733500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013da0000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.84361333s ago: executing program 3 (id=574): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b80)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) 1.590380372s ago: executing program 5 (id=575): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040), 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x100}, 0x4) sendto$inet6(r0, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) 1.478859495s ago: executing program 5 (id=576): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000023c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20110406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.025438809s ago: executing program 3 (id=577): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 983.209028ms ago: executing program 4 (id=578): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) close(0x3) close(0x4) 936.350427ms ago: executing program 4 (id=579): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000001c0)={0x2, 0x1, 0x3, 0x4, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xd71, 0x0, 0x1, 0x10, 0x4}) 896.603865ms ago: executing program 2 (id=580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "a0"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) 551.090427ms ago: executing program 3 (id=581): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x8) sendfile(r0, r1, 0x0, 0x20fffe82) 310.379207ms ago: executing program 2 (id=582): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000080)='%+9llu \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341220007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 205.524948ms ago: executing program 2 (id=583): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x7, 0x6, 0x31, 0x5, 0x83, 0x9, 0x42, 0x23, 0xb, 0x3, 0x8, 0x8, 0xf9, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff7, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r1, 0x7}, &(0x7f0000000080)=0x8) 0s ago: executing program 2 (id=584): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x104d0, &(0x7f0000000000)=ANY=[], 0xf9, 0x2c0, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x82042, 0x1d8) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8242, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) kernel console output (not intermixed with test programs): TDEV_CHANGE): vlan0: link becomes ready [ 68.820093][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.838967][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.848528][ T4194] device veth1_vlan entered promiscuous mode [ 68.864921][ T4190] device veth1_vlan entered promiscuous mode [ 68.876220][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.885622][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.901464][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.915405][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.924378][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.962738][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.977052][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.988164][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.000293][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.015305][ T4190] device veth0_macvtap entered promiscuous mode [ 69.042323][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.053122][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.070507][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.086790][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.101520][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.113034][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.122228][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.131986][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.141485][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.152291][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.162789][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.172159][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.181355][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.191921][ T4190] device veth1_macvtap entered promiscuous mode [ 69.206496][ T4194] device veth0_macvtap entered promiscuous mode [ 69.217691][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.226825][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.280017][ T4194] device veth1_macvtap entered promiscuous mode [ 69.311150][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.329738][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.347288][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.372051][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.381944][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.407337][ T4192] device veth0_vlan entered promiscuous mode [ 69.430028][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.441491][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.452940][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.465898][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.475542][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.485172][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.494489][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.508733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.517156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.526301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.535335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.544565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.552695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.573133][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.584970][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.596552][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.607415][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.621996][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.653668][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.663397][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.672441][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.681843][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.725316][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.736246][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.746775][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.759134][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.770866][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.780561][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.789528][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 69.795411][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.804699][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.814601][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.823990][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.832352][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.846913][ T4193] device veth0_vlan entered promiscuous mode [ 69.861912][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 69.873185][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.873711][ T4259] Bluetooth: hci4: command 0x040f tx timeout [ 69.886867][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.900596][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.909311][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.920376][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.929704][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.939512][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 69.945645][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 69.955771][ T4192] device veth1_vlan entered promiscuous mode [ 69.970105][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.983411][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.054720][ T4193] device veth1_vlan entered promiscuous mode [ 70.063522][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.073856][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.082888][ T1270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.098868][ T1270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.122436][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.133572][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.142253][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.150757][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.158899][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.188093][ T4192] device veth0_macvtap entered promiscuous mode [ 70.217954][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.234750][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.246219][ T4192] device veth1_macvtap entered promiscuous mode [ 70.299185][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.307394][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.357237][ T4193] device veth0_macvtap entered promiscuous mode [ 70.361888][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.372173][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.391128][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.401848][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.420711][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.436878][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.449066][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.460607][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.489026][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.500494][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.510703][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.522296][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.539923][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.551907][ T4193] device veth1_macvtap entered promiscuous mode [ 70.568958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.577347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.590553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.606889][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.625779][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.651919][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.664426][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.675883][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.686698][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.700950][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.722596][ T1241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.733691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.749817][ T1241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.760395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.801210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.814380][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.824608][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.833523][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.843700][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.901444][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.938944][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.959796][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.976329][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.994478][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.007051][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.023621][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.035299][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.053352][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.083385][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.097340][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.105762][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.116360][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.127005][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.138354][ T4274] netlink: 'syz.3.10': attribute type 14 has an invalid length. [ 71.146197][ T4274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 71.160537][ T4274] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.169838][ T4274] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.179043][ T4274] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.187856][ T4274] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.226232][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.238978][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.255890][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.266642][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.276727][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.287272][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.297405][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.314399][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.321105][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.335720][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.347683][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.361191][ T4275] netlink: 'syz.3.10': attribute type 14 has an invalid length. [ 71.375058][ T4275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 71.386098][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.399963][ T4275] Zero length message leads to an empty skb [ 71.406875][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.427282][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.449131][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.459853][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.468737][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.572880][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.618714][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.626605][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.677653][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.750524][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.778181][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.857474][ T1270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.868280][ T1109] Bluetooth: hci0: command 0x0419 tx timeout [ 71.874813][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.882372][ T1270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.906968][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.938882][ T4228] Bluetooth: hci4: command 0x0419 tx timeout [ 71.955999][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 71.962605][ T21] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 71.981156][ T21] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 72.011224][ T1241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.028381][ T1241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.036634][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.045743][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 72.104675][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 72.128789][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 72.179909][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 72.187622][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 72.297965][ T21] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.318311][ T21] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.326409][ T21] usb 1-1: Product: syz [ 72.377778][ T21] usb 1-1: Manufacturer: syz [ 72.450059][ T21] cdc_wdm 1-1:1.0: skipping garbage [ 72.476533][ T21] cdc_wdm 1-1:1.0: skipping garbage [ 72.507946][ T21] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 72.513935][ T21] cdc_wdm 1-1:1.0: Unknown control protocol [ 72.723722][ T4318] device veth0_macvtap left promiscuous mode [ 72.946619][ T4303] loop4: detected capacity change from 0 to 32768 [ 72.947342][ T4326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 72.992551][ T4303] [ 72.992551][ T4303] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 72.992551][ T4303] [ 73.029639][ T4303] ERROR: (device loop4): diWrite: ixpxd invalid [ 73.029639][ T4303] [ 73.044033][ T4303] ERROR: (device loop4): txCommit: [ 73.044033][ T4303] [ 73.095738][ T4329] loop1: detected capacity change from 0 to 512 [ 73.116234][ T4193] [ 73.116234][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 73.116234][ T4193] [ 73.136888][ T4193] [ 73.136888][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 73.136888][ T4193] [ 73.168596][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.188100][ T4329] EXT4-fs (loop1): Ignoring removed bh option [ 73.209562][ T4329] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 73.230124][ T4329] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 73.240915][ T4329] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.27: Corrupt directory, running e2fsck is recommended [ 73.257583][ T4333] loop4: detected capacity change from 0 to 512 [ 73.271767][ T4329] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 73.321286][ T4329] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.27: corrupted in-inode xattr [ 73.333592][ T4333] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 73.345248][ T4333] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 73.368006][ T4329] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.27: couldn't read orphan inode 15 (err -117) [ 73.397676][ T4333] EXT4-fs (loop4): 1 truncate cleaned up [ 73.403632][ T4333] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,nomblk_io_submit,,errors=continue. Quota mode: none. [ 73.404733][ T4329] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,jqfmt=vfsold,nolazytime,grpjquota=.nogrpid,resuid=0x0000000000000000,bh,noload,,,errors=continue. Quota mode: writeback. [ 73.500069][ T4329] EXT4-fs (loop1): shut down requested (2) [ 73.534723][ T4329] EXT4-fs warning (device loop1): ext4_empty_dir:3149: inode #2: comm syz.1.27: directory missing '.' [ 73.608139][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 73.644274][ T21] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 73.683217][ T4228] usb 1-1: USB disconnect, device number 2 [ 73.849257][ T21] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 73.883048][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.912357][ T21] usb 4-1: Product: syz [ 73.916599][ T21] usb 4-1: Manufacturer: syz [ 73.952645][ T21] usb 4-1: SerialNumber: syz [ 74.012751][ T4337] loop2: detected capacity change from 0 to 32768 [ 74.075698][ T4337] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.29 (4337) [ 74.114464][ T4337] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 74.125985][ T4337] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 74.152312][ T4337] BTRFS info (device loop2): use zstd compression, level 3 [ 74.166987][ T4337] BTRFS info (device loop2): using free space tree [ 74.178995][ T4337] BTRFS info (device loop2): has skinny extents [ 74.251044][ T21] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 74.324263][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.487536][ T4337] BTRFS info (device loop2): enabling ssd optimizations [ 74.493367][ T4340] loop4: detected capacity change from 0 to 32768 [ 74.507349][ T4340] ======================================================= [ 74.507349][ T4340] WARNING: The mand mount option has been deprecated and [ 74.507349][ T4340] and is ignored by this kernel. Remove the mand [ 74.507349][ T4340] option from the mount to silence this warning. [ 74.507349][ T4340] ======================================================= [ 74.545075][ T4340] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.30 (4340) [ 74.571364][ T4340] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 74.623502][ T4340] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 74.667963][ T4340] BTRFS info (device loop4): use zstd compression, level 3 [ 74.681773][ T4228] usb 4-1: USB disconnect, device number 2 [ 74.715861][ T4340] BTRFS info (device loop4): force clearing of disk cache [ 74.724235][ T4228] usblp0: removed [ 74.738520][ T4340] BTRFS info (device loop4): enabling disk space caching [ 74.763992][ T4340] BTRFS info (device loop4): disk space caching is enabled [ 74.781656][ T4340] BTRFS info (device loop4): has skinny extents [ 74.798729][ T1107] usb 2-1: unable to get BOS descriptor or descriptor too short [ 74.821104][ T4346] loop0: detected capacity change from 0 to 32768 [ 74.910058][ T1107] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 75.001959][ T4340] BTRFS info (device loop4): enabling ssd optimizations [ 75.018337][ T4346] XFS (loop0): Mounting V5 Filesystem [ 75.029667][ T4340] BTRFS info (device loop4): clearing free space tree [ 75.036829][ T4340] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 75.054268][ T4340] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 75.128073][ T1107] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 75.147407][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.157537][ T1107] usb 2-1: Product: syz [ 75.162460][ T1107] usb 2-1: Manufacturer: syz [ 75.167124][ T1107] usb 2-1: SerialNumber: syz [ 75.382152][ T4346] XFS (loop0): Ending clean mount [ 75.467372][ T4346] XFS (loop0): Quotacheck needed: Please wait. [ 75.479850][ T1107] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 75.582644][ T4346] XFS (loop0): Quotacheck: Done. [ 75.697999][ T1107] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 75.706501][ T1107] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 76.096971][ T4186] XFS (loop0): Unmounting Filesystem [ 76.109808][ T1107] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 76.138719][ T1107] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 76.318048][ T1107] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 76.482951][ T1107] usb 2-1: USB disconnect, device number 2 [ 76.642660][ T4455] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.823053][ T4451] udevd[4451]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.348627][ T4478] netlink: 'syz.2.57': attribute type 1 has an invalid length. [ 77.356852][ T4478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.364507][ T4478] IPv6: NLM_F_CREATE should be set when creating new route [ 77.570418][ T4486] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 77.614158][ T4488] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.60'. [ 77.820488][ T4501] loop4: detected capacity change from 0 to 128 [ 77.894892][ T4504] loop0: detected capacity change from 0 to 1024 [ 77.930796][ T4501] EXT4-fs (loop4): Test dummy encryption mode enabled [ 78.015416][ T4501] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_lock,,errors=continue. Quota mode: none. [ 78.030368][ T4501] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.326454][ T4501] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 78.420714][ T4501] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 79.157782][ T4410] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.365892][ T4571] loop4: detected capacity change from 0 to 8192 [ 79.400447][ T4410] usb 2-1: Using ep0 maxpacket: 8 [ 79.528062][ T4410] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 79.558173][ T4411] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.705811][ T4410] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 79.738070][ T4410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.797343][ T4410] usb 2-1: Product: syz [ 79.807479][ T4410] usb 2-1: Manufacturer: syz [ 79.817606][ T4411] usb 1-1: Using ep0 maxpacket: 8 [ 79.833834][ T4410] usb 2-1: SerialNumber: syz [ 79.871685][ T4410] usb 2-1: config 0 descriptor?? [ 79.909072][ T4410] cdc_ether 2-1:0.0: skipping garbage [ 79.914526][ T4410] usb 2-1: bad CDC descriptors [ 79.938416][ T4410] usb 2-1: unsupported MDLM descriptors [ 79.944555][ T4410] cdc_acm 2-1:0.0: skipping garbage [ 80.016955][ T26] audit: type=1326 audit(1790653224.308:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.3.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06fe159 code=0x7fc00000 [ 80.064108][ T26] audit: type=1326 audit(1790653224.348:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.3.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f36f06fe159 code=0x7fc00000 [ 80.098287][ T4411] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 80.122078][ T4411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.133952][ T26] audit: type=1326 audit(1790653224.348:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.3.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06fe159 code=0x7fc00000 [ 80.152942][ T4411] usb 1-1: Product: syz [ 80.193402][ T4411] usb 1-1: Manufacturer: syz [ 80.199721][ T26] audit: type=1326 audit(1790653224.348:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.3.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06fe159 code=0x7fc00000 [ 80.208039][ T4411] usb 1-1: SerialNumber: syz [ 80.257299][ T4410] usb 2-1: USB disconnect, device number 3 [ 80.259554][ T26] audit: type=1326 audit(1790653224.348:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.3.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06fe159 code=0x7fc00000 [ 80.288562][ T4411] usb 1-1: config 0 descriptor?? [ 80.330201][ T4411] gspca_main: sq930x-2.14.0 probing 2770:930c [ 80.334756][ T26] audit: type=1326 audit(1790653224.348:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.3.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06fe159 code=0x7fc00000 [ 80.406378][ T26] audit: type=1326 audit(1790653224.348:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.3.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06fe159 code=0x7fc00000 [ 80.455341][ T26] audit: type=1326 audit(1790653224.348:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.3.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06fe159 code=0x7fc00000 [ 80.497228][ T26] audit: type=1326 audit(1790653224.348:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.3.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06fe159 code=0x7fc00000 [ 80.522859][ T26] audit: type=1326 audit(1790653224.348:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.3.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06fe159 code=0x7fc00000 [ 80.934352][ T4602] loop2: detected capacity change from 0 to 128 [ 81.024298][ T4602] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 81.070493][ T4602] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.231145][ T4605] loop4: detected capacity change from 0 to 4096 [ 81.399910][ T4610] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.419337][ T4605] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 81.443347][ T4605] NILFS (loop4): mounting fs with errors [ 81.457976][ T4411] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 81.464481][ T4411] sq930x: probe of 1-1:0.0 failed with error -71 [ 81.502665][ T4411] usb 1-1: USB disconnect, device number 3 [ 81.717904][ T4612] FAULT_INJECTION: forcing a failure. [ 81.717904][ T4612] name failslab, interval 1, probability 0, space 0, times 1 [ 81.785307][ T4612] CPU: 0 PID: 4612 Comm: syz.1.110 Not tainted syzkaller #0 [ 81.792703][ T4612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 81.802832][ T4612] Call Trace: [ 81.806191][ T4612] [ 81.809169][ T4612] dump_stack_lvl+0x188/0x250 [ 81.813901][ T4612] ? show_regs_print_info+0x20/0x20 [ 81.819187][ T4612] ? load_image+0x410/0x410 [ 81.823747][ T4612] ? __might_sleep+0xf0/0xf0 [ 81.828368][ T4612] ? __lock_acquire+0x7b50/0x7b50 [ 81.833440][ T4612] should_fail+0x383/0x4b0 [ 81.837928][ T4612] should_failslab+0x5/0x20 [ 81.842482][ T4612] slab_pre_alloc_hook+0x51/0xc0 [ 81.847477][ T4612] __kmalloc+0x6b/0x340 [ 81.851686][ T4612] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 81.857487][ T4612] tomoyo_realpath_from_path+0xed/0x5e0 [ 81.863098][ T4612] ? user_path_at_empty+0x13e/0x190 [ 81.868350][ T4612] ? do_syscall_64+0x4c/0xa0 [ 81.873010][ T4612] tomoyo_path2_perm+0x27e/0x840 [ 81.878023][ T4612] ? tomoyo_check_mkdev_acl+0x490/0x490 [ 81.883634][ T4612] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.889719][ T4612] ? rcu_is_watching+0x11/0xa0 [ 81.894547][ T4612] ? kmem_cache_free+0x14c/0x210 [ 81.899543][ T4612] security_sb_pivotroot+0x67/0x90 [ 81.904729][ T4612] __se_sys_pivot_root+0x206/0xc00 [ 81.909908][ T4612] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.915951][ T4612] ? __x64_sys_pivot_root+0x60/0x60 [ 81.921203][ T4612] ? lock_chain_count+0x20/0x20 [ 81.926115][ T4612] ? lockdep_hardirqs_on+0x94/0x140 [ 81.931394][ T4612] do_syscall_64+0x4c/0xa0 [ 81.935862][ T4612] ? clear_bhb_loop+0x30/0x80 [ 81.940583][ T4612] ? clear_bhb_loop+0x30/0x80 [ 81.945314][ T4612] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.951271][ T4612] RIP: 0033:0x7f7440ba6159 [ 81.955745][ T4612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.975398][ T4612] RSP: 002b:00007f743edfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 81.983874][ T4612] RAX: ffffffffffffffda RBX: 00007f7440e2dfa0 RCX: 00007f7440ba6159 [ 81.991906][ T4612] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000040 [ 81.999929][ T4612] RBP: 00007f7440c3d06b R08: 0000000000000000 R09: 0000000000000000 [ 82.007956][ T4612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.015972][ T4612] R13: 00007f7440e2e038 R14: 00007f7440e2dfa0 R15: 00007ffdb3f52ca8 [ 82.024023][ T4612] [ 82.077154][ T4612] ERROR: Out of memory at tomoyo_realpath_from_path. [ 82.138866][ T4618] loop2: detected capacity change from 0 to 64 [ 82.161422][ T4616] bridge0: port 1(bond0) entered blocking state [ 82.174996][ T4616] bridge0: port 1(bond0) entered disabled state [ 82.191809][ T4616] device bond0 entered promiscuous mode [ 82.297067][ T4621] FAULT_INJECTION: forcing a failure. [ 82.297067][ T4621] name failslab, interval 1, probability 0, space 0, times 0 [ 82.357918][ T4433] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 82.424284][ T4621] CPU: 1 PID: 4621 Comm: syz.1.114 Not tainted syzkaller #0 [ 82.431673][ T4621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 82.441786][ T4621] Call Trace: [ 82.445120][ T4621] [ 82.448106][ T4621] dump_stack_lvl+0x188/0x250 [ 82.452835][ T4621] ? show_regs_print_info+0x20/0x20 [ 82.458095][ T4621] ? load_image+0x410/0x410 [ 82.462652][ T4621] ? __might_sleep+0xf0/0xf0 [ 82.467516][ T4621] ? __lock_acquire+0x7b50/0x7b50 [ 82.472608][ T4621] ? rcu_lock_release+0x5/0x20 [ 82.477439][ T4621] should_fail+0x383/0x4b0 [ 82.481924][ T4621] should_failslab+0x5/0x20 [ 82.486477][ T4621] slab_pre_alloc_hook+0x51/0xc0 [ 82.491466][ T4621] kmem_cache_alloc_trace+0x47/0x290 [ 82.496799][ T4621] ? proc_thread_self_get_link+0xf8/0x190 [ 82.502577][ T4621] proc_thread_self_get_link+0xf8/0x190 [ 82.508178][ T4621] ? proc_setup_thread_self+0x2d0/0x2d0 [ 82.513765][ T4621] pick_link+0x6ba/0xdc0 [ 82.518071][ T4621] step_into+0xac6/0xcd0 [ 82.522383][ T4621] ? set_root+0x3a0/0x3a0 [ 82.526772][ T4621] ? walk_component+0x1b6/0x460 [ 82.531688][ T4621] link_path_walk+0x688/0xde0 [ 82.536436][ T4621] ? handle_lookup_down+0x130/0x130 [ 82.541701][ T4621] path_openat+0x28e/0x2fb0 [ 82.546284][ T4621] ? __kasan_slab_alloc+0xa9/0xc0 [ 82.551404][ T4621] ? do_filp_open+0x400/0x400 [ 82.556191][ T4621] do_filp_open+0x1df/0x400 [ 82.560759][ T4621] ? vfs_tmpfile+0x300/0x300 [ 82.565431][ T4621] ? _raw_spin_unlock+0x24/0x40 [ 82.570337][ T4621] ? alloc_fd+0x59e/0x650 [ 82.574756][ T4621] do_sys_openat2+0x14b/0x500 [ 82.579484][ T4621] ? __lock_acquire+0x7b50/0x7b50 [ 82.584570][ T4621] ? do_sys_open+0xe0/0xe0 [ 82.589044][ T4621] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 82.595100][ T4621] ? lock_chain_count+0x20/0x20 [ 82.600019][ T4621] __x64_sys_openat+0x135/0x160 [ 82.604951][ T4621] do_syscall_64+0x4c/0xa0 [ 82.609417][ T4621] ? clear_bhb_loop+0x30/0x80 [ 82.614147][ T4621] ? clear_bhb_loop+0x30/0x80 [ 82.618871][ T4621] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.624819][ T4621] RIP: 0033:0x7f7440b6698e [ 82.629289][ T4621] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 82.649467][ T4621] RSP: 002b:00007f743edfdec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.657940][ T4621] RAX: ffffffffffffffda RBX: 00007f743edfe6c0 RCX: 00007f7440b6698e [ 82.665968][ T4621] RDX: 0000000000000002 RSI: 00007f743edfdf90 RDI: ffffffffffffff9c [ 82.674001][ T4621] RBP: 00007f7440c3d06b R08: 0000000000000000 R09: 0000000000000000 [ 82.682037][ T4621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.690067][ T4621] R13: 00007f7440e2e038 R14: 00007f7440e2dfa0 R15: 00007ffdb3f52ca8 [ 82.698127][ T4621] [ 82.708438][ T4625] netdevsim netdevsim0: Direct firmware load for .® failed with error -2 [ 82.716929][ T4625] netdevsim netdevsim0: Falling back to sysfs fallback for: .® [ 82.848033][ T4433] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 82.863869][ T4633] ip_tables: iptables: counters copy to user failed while replacing table [ 82.865282][ T4433] usb 5-1: config 0 has no interface number 0 [ 82.907577][ T4433] usb 5-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 83.068271][ T4433] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 83.085116][ T4433] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 83.119232][ T4433] usb 5-1: Product: syz [ 83.132590][ T4433] usb 5-1: SerialNumber: syz [ 83.155432][ T4433] usb 5-1: config 0 descriptor?? [ 83.218749][ T4433] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 83.756381][ T1107] usb 5-1: USB disconnect, device number 2 [ 84.305472][ T4700] 0x000000000010-0x000300000020 : "" [ 84.327202][ T4700] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1fff0 [ 84.477094][ T4700] ftl_cs: FTL header corrupt! [ 84.557446][ T4709] loop1: detected capacity change from 0 to 256 [ 84.709290][ T4677] loop2: detected capacity change from 0 to 32768 [ 84.788163][ T4713] loop4: detected capacity change from 0 to 1024 [ 84.988881][ T4677] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 85.191127][ T4729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 85.357586][ T4677] syz.2.133 (4677) used greatest stack depth: 18208 bytes left [ 85.427439][ T4717] loop3: detected capacity change from 0 to 32768 [ 85.566857][ T4717] JBD2: Ignoring recovery information on journal [ 85.585163][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 85.673616][ T4744] loop4: detected capacity change from 0 to 512 [ 85.772995][ T4744] EXT4-fs (loop4): Ignoring removed bh option [ 85.809535][ T4717] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 85.827396][ T4744] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 85.923618][ T4751] loop1: detected capacity change from 0 to 64 [ 85.960683][ T4744] EXT4-fs (loop4): 1 truncate cleaned up [ 85.966402][ T4744] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,abort,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 86.355674][ T4190] ocfs2: Unmounting device (7,3) on (node local) [ 86.669683][ T13] cfg80211: failed to load regulatory.db [ 86.880956][ T4752] loop0: detected capacity change from 0 to 131072 [ 86.938700][ T4752] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24) [ 86.953188][ T4752] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 86.962508][ T4752] F2FS-fs (loop0): Test dummy encryption mode enabled [ 86.981842][ T4752] F2FS-fs (loop0): invalid crc value [ 87.010737][ T4752] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.051874][ T4752] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 87.069195][ T4752] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 87.079968][ T4752] F2FS-fs (loop0): Start checkpoint disabled! [ 87.107011][ T4752] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 87.114476][ T4752] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 87.198465][ T4752] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 87.399184][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 87.545681][ T1241] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 87.750692][ T4785] loop2: detected capacity change from 0 to 1024 [ 87.789959][ T4785] hfsplus: unable to parse mount options [ 88.018788][ T4800] syz.3.172 uses obsolete (PF_INET,SOCK_PACKET) [ 88.183792][ T4804] loop4: detected capacity change from 0 to 512 [ 88.281961][ T4804] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.175: inode #1: comm syz.4.175: iget: illegal inode # [ 88.328076][ T4804] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.175: error while reading EA inode 1 err=-117 [ 88.343664][ T4804] EXT4-fs (loop4): 1 orphan inode deleted [ 88.349842][ T4804] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 88.958964][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.084169][ T4826] loop0: detected capacity change from 0 to 2048 [ 89.157067][ T4832] geneve1 speed is unknown, defaulting to 1000 [ 89.169220][ T4832] geneve1 speed is unknown, defaulting to 1000 [ 89.185117][ T4832] geneve1 speed is unknown, defaulting to 1000 [ 89.197066][ T4832] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 89.211891][ T4833] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.218931][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 89.257114][ T4832] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 89.375753][ T4837] Dev loop5: unable to read RDB block 7 [ 89.382955][ T4837] loop5: AHDI p1 p2 [ 89.387101][ T4837] loop5: partition table partially beyond EOD, truncated [ 89.395118][ T13] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 89.405747][ T13] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 89.416477][ T4722] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.424391][ T4837] loop5: p1 start 16777216 is beyond EOD, truncated [ 89.530519][ T4832] geneve1 speed is unknown, defaulting to 1000 [ 89.546891][ T4832] geneve1 speed is unknown, defaulting to 1000 [ 89.627360][ T4722] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.638253][ T13] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 89.658948][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.680540][ T13] usb 5-1: Product: syz [ 89.685090][ T13] usb 5-1: Manufacturer: syz [ 89.695197][ T4832] geneve1 speed is unknown, defaulting to 1000 [ 89.704730][ T13] usb 5-1: SerialNumber: syz [ 89.728076][ T4832] geneve1 speed is unknown, defaulting to 1000 [ 89.736971][ T4832] geneve1 speed is unknown, defaulting to 1000 [ 89.773343][ T4722] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.890096][ T4722] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.050952][ T4850] set_capacity_and_notify: 1 callbacks suppressed [ 90.050969][ T4850] loop3: detected capacity change from 0 to 512 [ 90.150598][ T4850] EXT4-fs (loop3): Ignoring removed bh option [ 90.156837][ T4850] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.238634][ T4850] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.323834][ T4850] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.193: invalid indirect mapped block 4294967295 (level 0) [ 90.344124][ T13] usb 5-1: USB disconnect, device number 3 [ 90.362351][ T4850] EXT4-fs (loop3): Remounting filesystem read-only [ 90.371340][ T4847] geneve1 speed is unknown, defaulting to 1000 [ 90.392677][ T4863] loop2: detected capacity change from 0 to 1024 [ 90.415234][ T4850] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.193: invalid indirect mapped block 4294967295 (level 1) [ 90.459463][ T4850] EXT4-fs (loop3): Remounting filesystem read-only [ 90.467284][ T4850] EXT4-fs (loop3): 1 orphan inode deleted [ 90.473537][ T4850] EXT4-fs (loop3): 1 truncate cleaned up [ 90.479831][ T4850] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,block_validity,block_validity,block_validity,quota,bh,. Quota mode: writeback. [ 90.501177][ T4863] EXT4-fs (loop2): Ignoring removed bh option [ 90.521336][ T4850] EXT4-fs (loop3): shut down requested (2) [ 90.531630][ T4850] EXT4-fs warning (device loop3): ext4_empty_dir:3158: inode #2: comm syz.3.193: directory missing '..' [ 90.570862][ T4863] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,mb_optimize_scan=0x0000000000000000,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 90.618446][ T4863] process 'syz.2.199' launched './file1' with NULL argv: empty string added [ 90.959808][ T4451] udevd[4451]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.147896][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.181836][ T4894] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.212724][ T4847] chnl_net:caif_netlink_parms(): no params data found [ 91.234338][ T4896] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 91.428105][ T21] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 91.518133][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.530131][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.541693][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 91.612074][ T4847] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.619624][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.628039][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.635408][ T4847] device bridge_slave_0 entered promiscuous mode [ 91.637516][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.654556][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 91.712080][ T4911] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.718873][ T4847] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.748180][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.763493][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.795297][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 91.813281][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.829695][ T4913] loop0: detected capacity change from 0 to 8 [ 91.851441][ T4847] device bridge_slave_1 entered promiscuous mode [ 91.900369][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.940342][ T4847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.949704][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.004539][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.076331][ T4847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.098308][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.107266][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.126380][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 92.126396][ T26] audit: type=1800 audit(1790653236.418:46): pid=4913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.213" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 92.173524][ T4923] loop3: detected capacity change from 0 to 256 [ 92.189003][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 92.196768][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.234185][ T4847] team0: Port device team_slave_0 added [ 92.261056][ T4847] team0: Port device team_slave_1 added [ 92.288671][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.306209][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.384252][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.488135][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.503839][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.524380][ T4930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 92.543068][ T4930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 92.545502][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.575859][ T4932] loop3: detected capacity change from 0 to 2048 [ 92.577638][ T4847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.608059][ T4847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.643657][ T4932] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 92.656116][ T4932] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.668241][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.681882][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.711381][ T4847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.740993][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.788590][ T4847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.795603][ T4847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.830154][ T4936] loop0: detected capacity change from 0 to 16 [ 92.896136][ T4847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.918642][ T21] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 92.928898][ T4936] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 92.942881][ T21] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 92.951975][ T21] usb 3-1: Product: syz [ 92.956264][ T21] usb 3-1: Manufacturer: syz [ 92.962171][ T21] usb 3-1: SerialNumber: syz [ 92.976149][ T21] usb 3-1: config 0 descriptor?? [ 93.045816][ T21] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 93.149592][ T4847] device hsr_slave_0 entered promiscuous mode [ 93.162870][ T4943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.221'. [ 93.195245][ T4847] device hsr_slave_1 entered promiscuous mode [ 93.245681][ T4847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.291289][ T4847] Cannot create hsr debugfs directory [ 93.405394][ T13] usb 3-1: USB disconnect, device number 2 [ 93.416367][ T4722] device hsr_slave_0 left promiscuous mode [ 93.426406][ T13] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 93.442096][ T4722] device hsr_slave_1 left promiscuous mode [ 93.489073][ T4722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.500335][ T4722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.525934][ T4957] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 93.538858][ T4722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.546361][ T4722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.575039][ T4722] device bridge_slave_1 left promiscuous mode [ 93.594046][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.670540][ T4722] device bridge_slave_0 left promiscuous mode [ 93.676923][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.725176][ T4722] device veth1_macvtap left promiscuous mode [ 93.733243][ T4722] device veth1_vlan left promiscuous mode [ 93.739596][ T4722] device veth0_vlan left promiscuous mode [ 94.055461][ T4969] nvmet: Invalid value 'ip' for adrfam [ 94.268120][ T4433] Bluetooth: hci4: command 0x041b tx timeout [ 94.315037][ T4722] team0 (unregistering): Port device team_slave_1 removed [ 94.378975][ T4722] team0 (unregistering): Port device team_slave_0 removed [ 94.408378][ T4722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.466294][ T4722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.701459][ T4986] loop3: detected capacity change from 0 to 256 [ 94.727534][ T4722] bond0 (unregistering): Released all slaves [ 95.659126][ T4847] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.705855][ T4847] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.748475][ T4847] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.773099][ T4984] loop4: detected capacity change from 0 to 32768 [ 95.796923][ T4847] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.805161][ T4990] loop0: detected capacity change from 0 to 131072 [ 95.838419][ T4990] XFS: ikeep mount option is deprecated. [ 95.921852][ T4847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.947161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.959782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.970577][ T4847] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.987350][ T4990] XFS (loop0): Mounting V5 Filesystem [ 96.015740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.079162][ T26] audit: type=1800 audit(1790653240.378:47): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.233" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 96.100739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.203207][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.210365][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.285185][ T4990] XFS (loop0): Starting recovery (logdev: internal) [ 96.321519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.336817][ T4990] XFS (loop0): Ending recovery (logdev: internal) [ 96.345705][ T1107] Bluetooth: hci4: command 0x040f tx timeout [ 96.350485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.468905][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.476043][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.555206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.610693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.644680][ T4186] XFS (loop0): Unmounting Filesystem [ 96.666592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.716981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.763825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.859498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.887984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.908484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.925939][ T5032] loop4: detected capacity change from 0 to 2048 [ 96.940370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.976814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.016974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.026076][ T5032] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 97.026593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.079276][ T5032] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.102467][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.316529][ T5042] loop2: detected capacity change from 0 to 256 [ 97.396048][ T5043] ip_tables: iptables: counters copy to user failed while replacing table [ 97.703747][ T5058] loop3: detected capacity change from 0 to 128 [ 97.770457][ T5060] netlink: 32 bytes leftover after parsing attributes in process `syz.4.253'. [ 97.798054][ T5058] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.845842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.854615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.895570][ T4847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.014884][ T5067] loop4: detected capacity change from 0 to 256 [ 98.125562][ T154] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.183362][ T5067] FAT-fs (loop4): Directory bread(block 64) failed [ 98.218904][ T5067] FAT-fs (loop4): Directory bread(block 65) failed [ 98.225574][ T5067] FAT-fs (loop4): Directory bread(block 66) failed [ 98.294810][ T5067] FAT-fs (loop4): Directory bread(block 67) failed [ 98.332152][ T5067] FAT-fs (loop4): Directory bread(block 68) failed [ 98.362099][ T5067] FAT-fs (loop4): Directory bread(block 69) failed [ 98.382667][ T5067] FAT-fs (loop4): Directory bread(block 70) failed [ 98.412990][ T5067] FAT-fs (loop4): Directory bread(block 71) failed [ 98.428933][ T4438] Bluetooth: hci4: command 0x0419 tx timeout [ 98.469130][ T5067] FAT-fs (loop4): Directory bread(block 72) failed [ 98.516113][ T5067] FAT-fs (loop4): Directory bread(block 73) failed [ 98.716800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.755973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.834961][ T5056] loop2: detected capacity change from 0 to 32768 [ 98.846487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.867155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.887323][ T5085] loop0: detected capacity change from 0 to 4096 [ 98.917475][ T5056] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.251 (5056) [ 98.954945][ T4847] device veth0_vlan entered promiscuous mode [ 98.973659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.988720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.033038][ T4847] device veth1_vlan entered promiscuous mode [ 99.039468][ T4410] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.050173][ T5056] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 99.093406][ T5056] BTRFS info (device loop2): setting nodatasum [ 99.131218][ T5056] BTRFS info (device loop2): force zlib compression, level 3 [ 99.139151][ T5085] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 99.168004][ T5056] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 99.194418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.233746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.248027][ T5056] BTRFS info (device loop2): use lzo compression, level 0 [ 99.277878][ T4410] usb 4-1: Using ep0 maxpacket: 16 [ 99.283918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.300872][ T5056] BTRFS info (device loop2): turning on flush-on-commit [ 99.327910][ T5056] BTRFS info (device loop2): enabling auto defrag [ 99.335331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.354838][ T5056] BTRFS info (device loop2): max_inline at 4096 [ 99.367400][ T4847] device veth0_macvtap entered promiscuous mode [ 99.405662][ T4410] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 165, changing to 11 [ 99.418818][ T4847] device veth1_macvtap entered promiscuous mode [ 99.427241][ T5056] BTRFS info (device loop2): using free space tree [ 99.443906][ T4410] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.475037][ T5056] BTRFS info (device loop2): has skinny extents [ 99.505418][ T4410] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.529349][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.559454][ T4410] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.566215][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.591775][ T4410] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 99.605845][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.616532][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.636499][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.647240][ T4410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.648034][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.672429][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.686621][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.703644][ T4847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.714319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.723304][ T4410] usb 4-1: config 0 descriptor?? [ 99.730277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.791224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.802213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.817612][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.884137][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.894466][ T5056] BTRFS info (device loop2): enabling ssd optimizations [ 99.917954][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.928724][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.938894][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.949764][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.960118][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.977793][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.999321][ T4847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.121249][ T26] audit: type=1800 audit(1790653244.418:48): pid=5056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.251" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 100.222107][ T4410] elecom 0003:056E:00FC.0001: unknown main item tag 0x0 [ 100.249864][ T4410] elecom 0003:056E:00FC.0001: unknown main item tag 0x0 [ 100.256905][ T4410] elecom 0003:056E:00FC.0001: unknown main item tag 0x7 [ 100.319607][ T4410] elecom 0003:056E:00FC.0001: bogus close delimiter [ 100.347794][ T4410] elecom 0003:056E:00FC.0001: item 0 1 2 10 parsing failed [ 100.376558][ T5134] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.385376][ T4410] elecom: probe of 0003:056E:00FC.0001 failed with error -22 [ 100.451231][ T4436] usb 4-1: USB disconnect, device number 3 [ 101.091508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.131884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.178800][ T4847] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.203506][ T4847] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.234261][ T4847] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.246652][ T4847] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.467938][ T4402] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.516730][ T1241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.546201][ T1241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.554881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.664589][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.673184][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.688917][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.885240][ T5158] loop0: detected capacity change from 0 to 32768 [ 101.938070][ T4402] usb 3-1: Using ep0 maxpacket: 8 [ 101.953120][ T5158] (syz.0.272,5158,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 101.968530][ T5158] (syz.0.272,5158,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.011673][ T5158] JBD2: Ignoring recovery information on journal [ 102.118143][ T5158] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 102.250361][ T4402] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 102.290354][ T4402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.336526][ T4402] usb 3-1: Product: syz [ 102.356810][ T4402] usb 3-1: Manufacturer: syz [ 102.409486][ T4402] usb 3-1: SerialNumber: syz [ 102.430998][ T4402] usb 3-1: config 0 descriptor?? [ 102.490060][ T4402] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 102.531015][ T5187] loop4: detected capacity change from 0 to 2048 [ 102.651123][ T5187] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 102.696909][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 103.134532][ T5209] netlink: 132 bytes leftover after parsing attributes in process `syz.5.285'. [ 103.186201][ T5212] netlink: 'syz.5.285': attribute type 12 has an invalid length. [ 103.257553][ T5212] netlink: 132 bytes leftover after parsing attributes in process `syz.5.285'. [ 103.267975][ T4411] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.549103][ T5235] loop0: detected capacity change from 0 to 512 [ 103.570153][ T4402] usb 3-1: USB disconnect, device number 3 [ 103.620894][ T5239] loop3: detected capacity change from 0 to 128 [ 103.638170][ T4411] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 103.643906][ T5232] loop5: detected capacity change from 0 to 4096 [ 103.647264][ T4411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.715418][ T5235] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.292: inode has both inline data and extents flags [ 103.738260][ T5232] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 103.793824][ T5235] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.292: couldn't read orphan inode 15 (err -117) [ 103.876976][ T5235] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.013734][ T5232] ntfs3: loop5: failed to convert "c46c" to iso8859-6 [ 104.060103][ T5232] ntfs3: loop5: failed to convert "0030" to iso8859-6 [ 104.088512][ T5232] ntfs3: loop5: failed to convert "0031" to iso8859-6 [ 104.143733][ T5232] ntfs3: loop5: failed to convert "0032" to iso8859-6 [ 104.224498][ T5232] ntfs3: loop5: failed to convert "0033" to iso8859-6 [ 104.571242][ T5269] loop2: detected capacity change from 0 to 512 [ 104.615540][ T5275] loop3: detected capacity change from 0 to 1024 [ 104.645782][ T5269] EXT4-fs (loop2): Test dummy encryption mode enabled [ 104.653062][ T5269] EXT4-fs (loop2): Ignoring removed oldalloc option [ 104.707393][ T4411] usb 5-1: NFC: Unable to get FW version [ 104.746219][ T4411] pn533_usb: probe of 5-1:1.0 failed with error -71 [ 104.764710][ T5269] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 104.786635][ T4411] usb 5-1: USB disconnect, device number 4 [ 104.815743][ T5275] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,max_dir_size_kb=0x0000000000000004,noquota,delalloc,noblock_validity,nodioread_nolock,errors=remount-ro,. Quota mode: none. [ 104.872379][ T5275] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.899721][ T5269] netlink: 36 bytes leftover after parsing attributes in process `syz.2.301'. [ 104.910561][ T5269] netlink: 68 bytes leftover after parsing attributes in process `syz.2.301'. [ 104.970757][ T5275] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm syz.3.302: lblock 0 mapped to illegal pblock 0 (length 6) [ 105.003918][ T5275] EXT4-fs (loop3): Remounting filesystem read-only [ 105.269328][ T5289] loop2: detected capacity change from 0 to 8192 [ 105.272795][ T4436] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 105.317430][ T5289] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff01777777777777777777777Z¤&ó¥.eÉäÃÅÓr¾»ÙêYÿ5ÙtƒjJ(þG$ð JAÆ´Î魊u»–¿*=–nÓÐÌ}ª¯)Ö{æWFfO"‘z‚dë\g•z¡–Í^ðœÄZ^I»-ízWäÛ×Ò&·%K [ 109.396291][ T5413] dump_stack_lvl+0x188/0x250 [ 109.401026][ T5413] ? show_regs_print_info+0x20/0x20 [ 109.406276][ T5413] ? load_image+0x410/0x410 [ 109.410829][ T5413] ? __might_sleep+0xf0/0xf0 [ 109.415461][ T5413] ? __lock_acquire+0x7b50/0x7b50 [ 109.420526][ T5413] ? do_futex+0xdc2/0x12b0 [ 109.424995][ T5413] should_fail+0x383/0x4b0 [ 109.429466][ T5413] should_failslab+0x5/0x20 [ 109.434004][ T5413] slab_pre_alloc_hook+0x51/0xc0 [ 109.439032][ T5413] ? copy_fs_struct+0x4b/0x270 [ 109.443845][ T5413] kmem_cache_alloc+0x3d/0x280 [ 109.448656][ T5413] copy_fs_struct+0x4b/0x270 [ 109.453314][ T5413] ksys_unshare+0x397/0x8e0 [ 109.457854][ T5413] ? __lock_acquire+0x7b50/0x7b50 [ 109.462928][ T5413] ? sighand_ctor+0x40/0x40 [ 109.467504][ T5413] ? lock_chain_count+0x20/0x20 [ 109.472508][ T5413] ? syscall_enter_from_user_mode+0x21/0x70 [ 109.478454][ T5413] __x64_sys_unshare+0x34/0x40 [ 109.483260][ T5413] do_syscall_64+0x4c/0xa0 [ 109.487717][ T5413] ? clear_bhb_loop+0x30/0x80 [ 109.492439][ T5413] ? clear_bhb_loop+0x30/0x80 [ 109.497190][ T5413] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.503174][ T5413] RIP: 0033:0x7f36f06fe159 [ 109.507676][ T5413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.527333][ T5413] RSP: 002b:00007f36ee956028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 109.535800][ T5413] RAX: ffffffffffffffda RBX: 00007f36f0985fa0 RCX: 00007f36f06fe159 [ 109.543831][ T5413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 109.551851][ T5413] RBP: 00007f36f079506b R08: 0000000000000000 R09: 0000000000000000 [ 109.559869][ T5413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.567887][ T5413] R13: 00007f36f0986038 R14: 00007f36f0985fa0 R15: 00007ffd70c452b8 [ 109.575948][ T5413] [ 109.623522][ T5385] loop5: detected capacity change from 0 to 32768 [ 109.711249][ T5385] JBD2: Ignoring recovery information on journal [ 109.871825][ T4193] XFS (loop4): Unmounting Filesystem [ 109.894941][ T5385] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 110.146907][ T4847] ocfs2: Unmounting device (7,5) on (node local) [ 110.256209][ T5421] loop2: detected capacity change from 0 to 32768 [ 110.375295][ T5428] loop3: detected capacity change from 0 to 64 [ 110.518305][ T5418] loop0: detected capacity change from 0 to 40427 [ 110.680998][ T5418] F2FS-fs (loop0): Invalid log_blocksize (64), supports only 12 [ 110.708438][ T5418] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 110.717348][ T5418] F2FS-fs (loop0): inline encryption not supported [ 110.812430][ T5418] F2FS-fs (loop0): invalid crc value [ 110.884095][ T5418] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 111.328061][ T4436] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 111.339859][ T5454] loop2: detected capacity change from 0 to 512 [ 111.350605][ T5418] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 111.367812][ T5418] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 111.455001][ T5454] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.343: inode has both inline data and extents flags [ 111.489385][ T5454] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.343: couldn't read orphan inode 15 (err -117) [ 111.558310][ T5454] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 111.758047][ T4436] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 111.779223][ T4436] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 111.849812][ T4436] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 111.869891][ T4436] usb 6-1: config 1 interface 0 has no altsetting 0 [ 111.896948][ T4436] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 111.936736][ T5469] loop2: detected capacity change from 0 to 2048 [ 111.938319][ T4436] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.995282][ T5469] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 112.054744][ T5469] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.079079][ T4436] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 112.107310][ T5479] netdevsim netdevsim3: Direct firmware load for .® failed with error -2 [ 112.212978][ T5449] loop4: detected capacity change from 0 to 32768 [ 112.229359][ T5479] netdevsim netdevsim3: Falling back to sysfs fallback for: .® [ 112.305596][ T4436] scsi host1: usb-storage 6-1:1.0 [ 112.409942][ T5449] XFS (loop4): Mounting V5 Filesystem [ 112.580791][ T5496] FAULT_INJECTION: forcing a failure. [ 112.580791][ T5496] name failslab, interval 1, probability 0, space 0, times 0 [ 112.631947][ T5449] XFS (loop4): Ending clean mount [ 112.644614][ T5449] XFS (loop4): Quotacheck needed: Please wait. [ 112.655604][ T5496] CPU: 0 PID: 5496 Comm: syz.2.348 Not tainted syzkaller #0 [ 112.662953][ T5496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 112.673049][ T5496] Call Trace: [ 112.676371][ T5496] [ 112.679346][ T5496] dump_stack_lvl+0x188/0x250 [ 112.684072][ T5496] ? show_regs_print_info+0x20/0x20 [ 112.689313][ T5496] ? load_image+0x410/0x410 [ 112.693863][ T5496] ? rcu_lock_release+0x5/0x20 [ 112.698762][ T5496] should_fail+0x383/0x4b0 [ 112.703250][ T5496] should_failslab+0x5/0x20 [ 112.707798][ T5496] slab_pre_alloc_hook+0x51/0xc0 [ 112.712925][ T5496] kmem_cache_alloc_trace+0x47/0x290 [ 112.718636][ T5496] ? proc_thread_self_get_link+0xf8/0x190 [ 112.724510][ T5496] proc_thread_self_get_link+0xf8/0x190 [ 112.730118][ T5496] ? proc_setup_thread_self+0x2d0/0x2d0 [ 112.735712][ T5496] pick_link+0x701/0xdc0 [ 112.740018][ T5496] step_into+0xac6/0xcd0 [ 112.744332][ T5496] ? set_root+0x3a0/0x3a0 [ 112.748754][ T5496] ? walk_component+0x1b6/0x460 [ 112.753663][ T5496] link_path_walk+0x688/0xde0 [ 112.758407][ T5496] ? handle_lookup_down+0x130/0x130 [ 112.763670][ T5496] path_openat+0x28e/0x2fb0 [ 112.768340][ T5496] ? __kasan_slab_alloc+0xa9/0xc0 [ 112.773435][ T5496] ? do_filp_open+0x400/0x400 [ 112.778342][ T5496] do_filp_open+0x1df/0x400 [ 112.782899][ T5496] ? vfs_tmpfile+0x300/0x300 [ 112.787566][ T5496] ? _raw_spin_unlock+0x24/0x40 [ 112.792464][ T5496] ? alloc_fd+0x59e/0x650 [ 112.796881][ T5496] do_sys_openat2+0x14b/0x500 [ 112.801599][ T5496] ? __lock_acquire+0x7b50/0x7b50 [ 112.806670][ T5496] ? do_sys_open+0xe0/0xe0 [ 112.811133][ T5496] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 112.817162][ T5496] ? lock_chain_count+0x20/0x20 [ 112.822073][ T5496] __x64_sys_openat+0x135/0x160 [ 112.826973][ T5496] do_syscall_64+0x4c/0xa0 [ 112.831443][ T5496] ? clear_bhb_loop+0x30/0x80 [ 112.836171][ T5496] ? clear_bhb_loop+0x30/0x80 [ 112.840908][ T5496] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.846849][ T5496] RIP: 0033:0x7fbb8700198e [ 112.851307][ T5496] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 112.870958][ T5496] RSP: 002b:00007fbb85298ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.879422][ T5496] RAX: ffffffffffffffda RBX: 00007fbb852996c0 RCX: 00007fbb8700198e [ 112.887453][ T5496] RDX: 0000000000000002 RSI: 00007fbb85298f90 RDI: ffffffffffffff9c [ 112.895475][ T5496] RBP: 00007fbb870d806b R08: 0000000000000000 R09: 0000000000000000 [ 112.903495][ T5496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.911561][ T5496] R13: 00007fbb872c9038 R14: 00007fbb872c8fa0 R15: 00007ffed166d0b8 [ 112.919593][ T5496] [ 113.007196][ T5504] loop0: detected capacity change from 0 to 1024 [ 113.040387][ T5449] XFS (loop4): Quotacheck: Done. [ 113.079389][ T5508] loop3: detected capacity change from 0 to 2048 [ 113.112452][ T5504] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.216674][ T5508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.238753][ T5504] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 113.323371][ T4193] XFS (loop4): Unmounting Filesystem [ 113.456134][ T1270] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 113.546316][ T1270] scsi 1:0:0:0: Resources present before probing [ 113.666688][ T1270] scsi 1:0:0:0: Attached scsi generic sg1 type 0 [ 113.885314][ T4401] usb 6-1: USB disconnect, device number 3 [ 114.549650][ T5524] loop3: detected capacity change from 0 to 131072 [ 114.702530][ T5524] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 114.711486][ T5524] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 114.744415][ T5524] F2FS-fs (loop3): invalid crc value [ 114.799415][ T5524] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.897267][ T5524] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 114.904695][ T5524] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 115.050030][ T5546] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 115.955798][ T5567] loop4: detected capacity change from 0 to 2048 [ 115.980079][ T5570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 116.121691][ T5567] NILFS (loop4): invalid segment: Magic number mismatch [ 116.169741][ T5567] NILFS (loop4): trying rollback from an earlier position [ 116.243165][ T5567] NILFS (loop4): recovery complete [ 116.252547][ T5544] loop0: detected capacity change from 0 to 40427 [ 116.281668][ T5578] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.372761][ T5567] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 116.394080][ T5544] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.575552][ T5544] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 116.962988][ T5595] loop5: detected capacity change from 0 to 164 [ 116.981454][ T4186] attempt to access beyond end of device [ 116.981454][ T4186] loop0: rw=2049, want=45104, limit=40427 [ 117.553113][ T5621] loop2: detected capacity change from 0 to 256 [ 117.696055][ T5621] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 117.869956][ T26] audit: type=1800 audit(35678988.169:49): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.384" name="file1" dev="loop2" ino=1048601 res=0 errno=0 [ 117.894573][ T5631] loop5: detected capacity change from 0 to 256 [ 117.914907][ T5621] attempt to access beyond end of device [ 117.914907][ T5621] loop2: rw=524288, want=34359738496, limit=256 [ 117.976203][ T5621] attempt to access beyond end of device [ 117.976203][ T5621] loop2: rw=0, want=34359738496, limit=256 [ 117.999066][ T5631] exfat: Deprecated parameter 'utf8' [ 118.004583][ T5631] exfat: Deprecated parameter 'namecase' [ 118.021868][ T5637] loop0: detected capacity change from 0 to 512 [ 118.032767][ T5621] attempt to access beyond end of device [ 118.032767][ T5621] loop2: rw=0, want=34359738496, limit=256 [ 118.060231][ T5631] exfat: Deprecated parameter 'namecase' [ 118.127249][ T5631] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 118.151446][ T5621] attempt to access beyond end of device [ 118.151446][ T5621] loop2: rw=524288, want=34359738496, limit=256 [ 118.185068][ T5636] loop3: detected capacity change from 0 to 4096 [ 118.293184][ T5640] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.308184][ T5621] attempt to access beyond end of device [ 118.308184][ T5621] loop2: rw=0, want=34359738496, limit=256 [ 118.471195][ T5602] loop4: detected capacity change from 0 to 40427 [ 118.565893][ T5602] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 118.605442][ T5602] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 118.671555][ T5602] F2FS-fs (loop4): Found nat_bits in checkpoint [ 118.911572][ T5602] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 118.925977][ T5602] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.089116][ T5670] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 119.089116][ T5670] The task syz.2.395 (5670) triggered the difference, watch for misbehavior. [ 119.227793][ T4401] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 119.742739][ T5664] udc-core: couldn't find an available UDC or it's busy [ 119.757879][ T5664] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 119.900011][ T5683] loop2: detected capacity change from 0 to 1024 [ 119.934209][ T5683] EXT4-fs (loop2): Ignoring removed bh option [ 120.026437][ T5683] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 120.160749][ T5690] loop0: detected capacity change from 0 to 128 [ 120.309092][ T5690] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.388716][ T5691] EXT4-fs error (device loop2): ext4_find_dest_de:2117: inode #12: block 7: comm syz.2.403: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 120.403106][ T5680] loop4: detected capacity change from 0 to 131072 [ 120.426236][ T5690] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.438531][ T5683] overlayfs: conflicting lowerdir path [ 120.448427][ T5680] XFS: ikeep mount option is deprecated. [ 120.493522][ T5691] EXT4-fs (loop2): Remounting filesystem read-only [ 120.503372][ T5691] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 120.520634][ T4401] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 120.551303][ T4401] usb 4-1: can't read configurations, error -71 [ 120.610526][ T5680] XFS (loop4): Mounting V5 Filesystem [ 120.906948][ T5680] XFS (loop4): Starting recovery (logdev: internal) [ 120.971454][ T5680] XFS (loop4): Ending recovery (logdev: internal) [ 121.224973][ T4193] XFS (loop4): Unmounting Filesystem [ 121.469214][ T5737] Illegal XDP return value 4294967274, expect packet loss! [ 121.703601][ T5749] loop5: detected capacity change from 0 to 1024 [ 121.823098][ T5749] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.948550][ T5749] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 122.940079][ T5793] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 123.095776][ T5802] syz.5.437 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 123.356281][ T5811] loop2: detected capacity change from 0 to 4096 [ 123.425722][ T5811] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 123.519422][ T4438] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.573471][ T5811] ntfs3: loop2: failed to convert "0080" to koi8-r [ 123.617888][ T5811] ntfs3: loop2: failed to convert name for inode 1e. [ 123.767755][ T4438] usb 1-1: Using ep0 maxpacket: 16 [ 123.888131][ T4438] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 123.933210][ T5829] geneve1 speed is unknown, defaulting to 1000 [ 124.063517][ T4438] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 124.083924][ T4438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.107262][ T4438] usb 1-1: Product: syz [ 124.117381][ T4438] usb 1-1: Manufacturer: syz [ 124.132206][ T4438] usb 1-1: SerialNumber: syz [ 124.165999][ T4438] r8152-cfgselector 1-1: config 0 descriptor?? [ 124.205696][ T5817] loop5: detected capacity change from 0 to 32768 [ 124.386329][ T5817] XFS (loop5): Mounting V5 Filesystem [ 124.437888][ T4438] r8152-cfgselector 1-1: Unknown version 0x0000 [ 124.494257][ T5817] XFS (loop5): Ending clean mount [ 124.547670][ T5817] XFS (loop5): Quotacheck needed: Please wait. [ 124.618295][ T5817] XFS (loop5): Quotacheck: Done. [ 124.708178][ T4438] r8152-cfgselector 1-1: Unknown version 0x0000 [ 124.728295][ T4438] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 124.827064][ T4847] XFS (loop5): Unmounting Filesystem [ 125.321915][ T5876] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 125.607905][ T4410] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.755509][ T5897] loop3: detected capacity change from 0 to 128 [ 125.792394][ T5897] FAT-fs (loop3): Directory bread(block 414) failed [ 125.798231][ T4401] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.836850][ T5897] FAT-fs (loop3): Directory bread(block 415) failed [ 125.857393][ T5897] FAT-fs (loop3): Directory bread(block 416) failed [ 125.870597][ T5897] FAT-fs (loop3): Directory bread(block 417) failed [ 125.877915][ T4410] usb 1-1: Using ep0 maxpacket: 16 [ 125.889885][ T5897] FAT-fs (loop3): Directory bread(block 418) failed [ 125.897028][ T5897] FAT-fs (loop3): Directory bread(block 419) failed [ 125.910976][ T5897] FAT-fs (loop3): Directory bread(block 420) failed [ 125.919987][ T5897] FAT-fs (loop3): Directory bread(block 421) failed [ 125.961456][ T5897] FAT-fs (loop3): Directory bread(block 414) failed [ 125.998157][ T5897] FAT-fs (loop3): Directory bread(block 415) failed [ 126.140678][ T5908] loop5: detected capacity change from 0 to 1024 [ 126.158301][ T4410] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 126.171202][ T4401] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 126.202596][ T4401] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.211302][ T4410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.229072][ T4410] usb 1-1: Product: syz [ 126.245208][ T4401] usb 3-1: config 0 descriptor?? [ 126.250950][ T4410] usb 1-1: Manufacturer: syz [ 126.286536][ T4410] usb 1-1: SerialNumber: syz [ 126.324687][ T4401] cp210x 3-1:0.0: cp210x converter detected [ 126.575904][ T5920] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.716792][ T5928] loop3: detected capacity change from 0 to 512 [ 126.748421][ T4401] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 126.824534][ T5928] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.470: inode has both inline data and extents flags [ 126.859066][ T5928] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.470: couldn't read orphan inode 15 (err -117) [ 126.875542][ T5928] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.895853][ T5935] loop4: detected capacity change from 0 to 2048 [ 127.005837][ T4401] usb 3-1: cp210x converter now attached to ttyUSB0 [ 127.030864][ T5935] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,errors=remount-ro,max_dir_size_kb=0x0000000000000004,grpjquota=,. Quota mode: none. [ 127.172355][ T5943] loop3: detected capacity change from 0 to 4096 [ 127.190856][ T5943] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 127.213773][ T4401] usb 3-1: USB disconnect, device number 4 [ 127.250054][ T4401] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 127.295706][ T4401] cp210x 3-1:0.0: device disconnected [ 127.424417][ T5943] ntfs3: loop3: failed to convert "c46c" to iso8859-6 [ 127.438004][ T4410] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 127.465936][ T4410] usb 1-1: USB disconnect, device number 6 [ 127.471936][ T5943] ntfs3: loop3: failed to convert "0030" to iso8859-6 [ 127.473260][ T5943] ntfs3: loop3: failed to convert "0031" to iso8859-6 [ 127.498339][ T5943] ntfs3: loop3: failed to convert "0032" to iso8859-6 [ 127.543474][ T5943] ntfs3: loop3: failed to convert "0033" to iso8859-6 [ 127.552024][ T5945] ip_tables: iptables: counters copy to user failed while replacing table [ 128.071330][ T5942] loop5: detected capacity change from 0 to 32768 [ 128.104719][ T5965] loop3: detected capacity change from 0 to 256 [ 128.189425][ T5942] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.474 (5942) [ 128.236451][ T5965] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 128.275963][ T5942] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 128.307474][ T5942] BTRFS info (device loop5): turning off barriers [ 128.327221][ T5942] BTRFS info (device loop5): turning on async discard [ 128.346828][ T5942] BTRFS info (device loop5): doing ref verification [ 128.353881][ T5942] BTRFS info (device loop5): using free space tree [ 128.373127][ T26] audit: type=1800 audit(35678998.669:50): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.485" name="file1" dev="loop3" ino=1048603 res=0 errno=0 [ 128.386448][ T5965] attempt to access beyond end of device [ 128.386448][ T5965] loop3: rw=524288, want=34359738496, limit=256 [ 128.427930][ T5942] BTRFS info (device loop5): has skinny extents [ 128.501296][ T5965] attempt to access beyond end of device [ 128.501296][ T5965] loop3: rw=0, want=34359738496, limit=256 [ 128.513676][ T5965] attempt to access beyond end of device [ 128.513676][ T5965] loop3: rw=0, want=34359738496, limit=256 [ 128.525401][ T5965] attempt to access beyond end of device [ 128.525401][ T5965] loop3: rw=0, want=34359738496, limit=256 [ 128.558620][ T5965] attempt to access beyond end of device [ 128.558620][ T5965] loop3: rw=0, want=34359738496, limit=256 [ 128.574101][ T5965] attempt to access beyond end of device [ 128.574101][ T5965] loop3: rw=0, want=34359738496, limit=256 [ 128.586546][ T5965] attempt to access beyond end of device [ 128.586546][ T5965] loop3: rw=0, want=34359738496, limit=256 [ 128.598286][ T5965] attempt to access beyond end of device [ 128.598286][ T5965] loop3: rw=0, want=34359738496, limit=256 [ 128.612230][ T5965] attempt to access beyond end of device [ 128.612230][ T5965] loop3: rw=0, want=34359738496, limit=256 [ 128.625052][ T5965] attempt to access beyond end of device [ 128.625052][ T5965] loop3: rw=0, want=34359738496, limit=256 [ 128.924966][ T5942] BTRFS info (device loop5): enabling ssd optimizations [ 129.379082][ T6016] loop4: detected capacity change from 0 to 1024 [ 129.663478][ T5977] loop2: detected capacity change from 0 to 32768 [ 129.716093][ T5977] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.490 (5977) [ 129.871954][ T5977] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 129.929922][ T5977] BTRFS info (device loop2): use zlib compression, level 3 [ 129.937210][ T5977] BTRFS info (device loop2): using free space tree [ 129.969986][ T5977] BTRFS info (device loop2): has skinny extents [ 130.063890][ T6028] bond0: option arp_interval: invalid value () [ 130.075183][ T6028] bond0: option arp_interval: allowed values 0 - 2147483647 [ 130.185612][ T5977] BTRFS info (device loop2): enabling ssd optimizations [ 130.237935][ T4431] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 130.357179][ T4402] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.607831][ T4402] usb 1-1: Using ep0 maxpacket: 8 [ 130.619934][ T6050] loop2: detected capacity change from 0 to 1024 [ 130.638795][ T6052] loop3: detected capacity change from 0 to 512 [ 130.648022][ T4431] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 130.658947][ T4431] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 130.669132][ T4431] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 130.683495][ T6052] EXT4-fs (loop3): Test dummy encryption mode enabled [ 130.697662][ T6052] EXT4-fs (loop3): Ignoring removed oldalloc option [ 130.730427][ T4402] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 130.732084][ T6050] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000010000,noquota,noquota,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 130.782503][ T6052] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 130.800998][ T4402] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.820232][ T4431] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 130.837730][ T4431] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 130.856604][ T4431] usb 6-1: Product: syz [ 130.860904][ T4431] usb 6-1: Manufacturer: syz [ 130.907850][ T4402] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.917659][ T4402] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.918588][ T6050] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.504: lblock 0 mapped to illegal pblock 0 (length 4) [ 130.978020][ T4402] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.012537][ T6050] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 131.038416][ T6052] netlink: 36 bytes leftover after parsing attributes in process `syz.3.505'. [ 131.049953][ T6063] loop4: detected capacity change from 0 to 512 [ 131.056624][ T6050] EXT4-fs (loop2): This should not happen!! Data will be lost [ 131.056624][ T6050] [ 131.066897][ T4402] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.071165][ T6052] netlink: 68 bytes leftover after parsing attributes in process `syz.3.505'. [ 131.086880][ T6050] EXT4-fs error (device loop2): ext4_ext_remove_space:2944: inode #15: comm syz.2.504: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 131.100709][ T4402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.124889][ T6024] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 131.152152][ T6024] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 131.175208][ T6063] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 131.183745][ T6063] System zones: 1-12 [ 131.206621][ T6063] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.508: missing EA_INODE flag [ 131.232302][ T4431] dvb_ttusb_budget: ttusb_init_controller: error [ 131.244184][ T5131] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 4: comm kworker/u4:8: lblock 4 mapped to illegal pblock 4 (length 2) [ 131.251094][ T4431] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 131.308826][ T5131] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 131.343525][ T6063] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.508: error while reading EA inode 12 err=-117 [ 131.369848][ T5131] EXT4-fs (loop2): This should not happen!! Data will be lost [ 131.369848][ T5131] [ 131.380325][ T4402] usb 1-1: usb_control_msg returned -32 [ 131.385943][ T4402] usbtmc 1-1:16.0: can't read capabilities [ 131.420332][ T6024] dvb_ttusb_budget: failed urb submission (0: err = -8)! [ 131.434886][ T5131] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 131.464014][ T4431] DVB: Unable to find symbol cx22700_attach() [ 131.479109][ T6063] EXT4-fs (loop4): 1 orphan inode deleted [ 131.484909][ T6063] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 131.514189][ T5131] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 131.541394][ T5131] EXT4-fs (loop2): This should not happen!! Data will be lost [ 131.541394][ T5131] [ 131.596358][ T4431] DVB: Unable to find symbol tda10046_attach() [ 131.611281][ T4431] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 131.623054][ T4431] usb 6-1: USB disconnect, device number 4 [ 131.788138][ T6070] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 131.809678][ T4402] usb 1-1: USB disconnect, device number 7 [ 131.943690][ T6080] loop4: detected capacity change from 0 to 256 [ 132.040127][ T6080] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 132.096683][ T26] audit: type=1800 audit(35679002.389:51): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.510" name="file1" dev="loop4" ino=1048604 res=0 errno=0 [ 132.287941][ T4431] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.437857][ T4402] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.507949][ T4411] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 132.567024][ T6096] ALSA: mixer_oss: invalid OSS volume '' [ 132.582930][ T6096] ALSA: mixer_oss: invalid OSS volume '1' [ 132.589086][ T4431] usb 3-1: Using ep0 maxpacket: 8 [ 132.596600][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 132.606527][ T6096] ALSA: mixer_oss: invalid OSS volume '2' [ 132.615042][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 132.625306][ T6096] ALSA: mixer_oss: invalid OSS volume '3' [ 132.633845][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 132.643840][ T6096] ALSA: mixer_oss: invalid OSS volume '4' [ 132.652327][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 132.664331][ T6096] ALSA: mixer_oss: invalid OSS volume '5' [ 132.673482][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 132.683468][ T6096] ALSA: mixer_oss: invalid OSS volume '6' [ 132.688054][ T4402] usb 4-1: Using ep0 maxpacket: 16 [ 132.695351][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 132.705173][ T6096] ALSA: mixer_oss: invalid OSS volume '7' [ 132.713648][ T4431] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.727537][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 132.736355][ T4431] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.758519][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.764862][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.768899][ T6096] ALSA: mixer_oss: invalid OSS volume '8' [ 132.783019][ T4431] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.788175][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 132.794102][ T4431] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.817923][ T4431] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.818643][ T4402] usb 4-1: config 0 has an invalid interface number: 7 but max is 0 [ 132.827488][ T4431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.840678][ T6096] ALSA: mixer_oss: invalid OSS volume '9' [ 132.859738][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 132.866231][ T4402] usb 4-1: config 0 has no interface number 0 [ 132.878019][ T4411] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.897482][ T4402] usb 4-1: config 0 interface 7 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.898231][ T6096] ALSA: mixer_oss: invalid OSS volume '10' [ 132.912014][ T4411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.934239][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 132.938955][ T4411] usb 6-1: config 0 descriptor?? [ 132.942409][ T6096] ALSA: mixer_oss: invalid OSS volume '11' [ 132.957292][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 132.965962][ T6096] ALSA: mixer_oss: invalid OSS volume '12' [ 132.976494][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 132.983543][ T6096] ALSA: mixer_oss: invalid OSS volume '13' [ 132.991639][ T4411] cp210x 6-1:0.0: cp210x converter detected [ 132.999953][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.006341][ T6096] ALSA: mixer_oss: invalid OSS volume '6A0000E0' [ 133.013039][ T6096] ALSA: mixer_oss: invalid OSS volume '15' [ 133.019168][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.025564][ T6096] ALSA: mixer_oss: invalid OSS volume '16' [ 133.031909][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.038353][ T6096] ALSA: mixer_oss: invalid OSS volume '17' [ 133.044188][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.050600][ T6096] ALSA: mixer_oss: invalid OSS volume '18' [ 133.056481][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.066973][ T6096] ALSA: mixer_oss: invalid OSS volume '20' [ 133.073777][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.080676][ T6096] ALSA: mixer_oss: invalid OSS volume '21' [ 133.086704][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.098231][ T4402] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 133.107378][ T4402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.119344][ T6096] ALSA: mixer_oss: invalid OSS volume '22' [ 133.125315][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.132311][ T4402] usb 4-1: Product: syz [ 133.136524][ T4402] usb 4-1: Manufacturer: syz [ 133.147920][ T4431] usb 3-1: GET_CAPABILITIES returned 0 [ 133.149002][ T6096] ALSA: mixer_oss: invalid OSS volume '23' [ 133.153455][ T4431] usbtmc 3-1:16.0: can't read capabilities [ 133.167857][ T4402] usb 4-1: SerialNumber: syz [ 133.175406][ T4402] r8152-cfgselector 4-1: config 0 descriptor?? [ 133.201453][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.216039][ T6096] ALSA: mixer_oss: invalid OSS volume '24' [ 133.231515][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.238738][ T6096] ALSA: mixer_oss: invalid OSS volume '25' [ 133.245241][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.253430][ T6096] ALSA: mixer_oss: invalid OSS volume '26' [ 133.259787][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.266605][ T6096] ALSA: mixer_oss: invalid OSS volume '27' [ 133.273060][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.280060][ T6096] ALSA: mixer_oss: invalid OSS volume '28' [ 133.286150][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.293178][ T6096] ALSA: mixer_oss: invalid OSS volume '29' [ 133.299828][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.307243][ T6096] ALSA: mixer_oss: invalid OSS volume '30' [ 133.327898][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.334302][ T6096] ALSA: mixer_oss: invalid OSS volume '31' [ 133.345912][ T6100] loop4: detected capacity change from 0 to 512 [ 133.353164][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.360593][ T6096] ALSA: mixer_oss: invalid OSS volume '32' [ 133.366753][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.373724][ T6096] ALSA: mixer_oss: invalid OSS volume '33' [ 133.390850][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.396117][ T6100] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.397447][ T6096] ALSA: mixer_oss: invalid OSS volume '34' [ 133.422590][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.429758][ T4411] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 133.445500][ T6096] ALSA: mixer_oss: invalid OSS volume '35' [ 133.456340][ T6087] udc-core: couldn't find an available UDC or it's busy [ 133.467889][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.474224][ T6087] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 133.479075][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.492929][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.494185][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.509444][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.517398][ T6096] ALSA: mixer_oss: invalid OSS volume '38' [ 133.518565][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.518656][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.527080][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.533554][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.533601][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.533641][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.533723][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.545005][ T4402] r8152 4-1:0.7: Expected endpoints are not found [ 133.549389][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.549476][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.584153][ T6096] ALSA: mixer_oss: invalid OSS volume '39' [ 133.586047][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.596675][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.601243][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.612165][ T6096] ALSA: mixer_oss: invalid OSS volume '40' [ 133.616393][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.630913][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.631764][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.656094][ T6096] ALSA: mixer_oss: invalid OSS volume '41' [ 133.691156][ T4411] usb 6-1: cp210x converter now attached to ttyUSB0 [ 133.702065][ T4429] usb 3-1: USB disconnect, device number 5 [ 133.731183][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.737577][ T6096] ALSA: mixer_oss: invalid OSS volume '42' [ 133.748018][ T4402] r8152-cfgselector 4-1: Unknown version 0x0000 [ 133.774548][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.781339][ T6096] ALSA: mixer_oss: invalid OSS volume '43' [ 133.787188][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.790339][ T4402] r8152-cfgselector 4-1: USB disconnect, device number 6 [ 133.793927][ T6096] ALSA: mixer_oss: invalid OSS volume '44' [ 133.806904][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.813490][ T6096] ALSA: mixer_oss: invalid OSS volume '45' [ 133.819389][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.825751][ T6096] ALSA: mixer_oss: invalid OSS volume '46' [ 133.831690][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.838263][ T6096] ALSA: mixer_oss: invalid OSS volume '47' [ 133.844214][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.850664][ T6096] ALSA: mixer_oss: invalid OSS volume '48' [ 133.856506][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.862918][ T6096] ALSA: mixer_oss: invalid OSS volume '49' [ 133.868783][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.875147][ T6096] ALSA: mixer_oss: invalid OSS volume '50' [ 133.883197][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.889917][ T6096] ALSA: mixer_oss: invalid OSS volume '51' [ 133.895846][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.903403][ T6096] ALSA: mixer_oss: invalid OSS volume '53' [ 133.909366][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.915760][ T6096] ALSA: mixer_oss: invalid OSS volume '54' [ 133.946712][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.956327][ T4411] usb 6-1: USB disconnect, device number 5 [ 133.964740][ T6096] ALSA: mixer_oss: invalid OSS volume '55' [ 133.975432][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 133.985281][ T4411] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 133.988121][ T6096] ALSA: mixer_oss: invalid OSS volume '56' [ 134.039162][ T4411] cp210x 6-1:0.0: device disconnected [ 134.051377][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 134.095063][ T6096] ALSA: mixer_oss: invalid OSS volume '57' [ 134.102216][ T6106] netlink: 'syz.4.524': attribute type 11 has an invalid length. [ 134.111060][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 134.117436][ T6096] ALSA: mixer_oss: invalid OSS volume '58' [ 134.124498][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 134.133117][ T6096] ALSA: mixer_oss: invalid OSS volume '61' [ 134.142603][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 134.151589][ T6096] ALSA: mixer_oss: invalid OSS volume '62' [ 134.157540][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 134.166481][ T6096] ALSA: mixer_oss: invalid OSS volume '63' [ 134.199425][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 134.206034][ T6096] ALSA: mixer_oss: invalid OSS volume '64' [ 134.216806][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 134.227103][ T6096] ALSA: mixer_oss: invalid OSS volume '65' [ 134.238459][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 134.244859][ T6096] ALSA: mixer_oss: invalid OSS volume '66' [ 134.257241][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 134.265231][ T6096] ALSA: mixer_oss: invalid OSS volume '67' [ 134.277384][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 134.284048][ T6096] ALSA: mixer_oss: invalid OSS volume '68' [ 134.295759][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 134.306041][ T6096] ALSA: mixer_oss: invalid OSS volume '69' [ 134.339372][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 134.345771][ T6096] ALSA: mixer_oss: invalid OSS volume '70' [ 134.391645][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 134.404148][ T6096] ALSA: mixer_oss: invalid OSS volume '' [ 134.765010][ T6127] loop5: detected capacity change from 0 to 256 [ 134.804774][ T6127] exfat: Deprecated parameter 'namecase' [ 134.804807][ T6127] exfat: Deprecated parameter 'utf8' [ 134.804866][ T6127] exfat: Deprecated parameter 'utf8' [ 134.804920][ T6127] exfat: Deprecated parameter 'namecase' [ 134.804965][ T6127] exfat: Deprecated parameter 'namecase' [ 134.840954][ T6127] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5dda0d1d, utbl_chksum : 0xe619d30d) [ 135.505130][ T6125] loop3: detected capacity change from 0 to 131072 [ 135.537011][ T6141] loop2: detected capacity change from 0 to 4096 [ 135.562451][ T6125] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 135.571100][ T6125] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 135.591790][ T6125] F2FS-fs (loop3): invalid crc value [ 135.614340][ T6125] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.675561][ T6125] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 135.683431][ T6125] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 135.732716][ T6141] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 135.934992][ T6151] loop5: detected capacity change from 0 to 4096 [ 136.020385][ T6151] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 136.095808][ T4192] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 136.129500][ T6159] loop0: detected capacity change from 0 to 64 [ 136.282589][ T6165] loop4: detected capacity change from 0 to 1024 [ 136.440309][ T6159] hfs: keylen 1794 too large [ 136.486152][ T6165] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.508956][ T6159] hfs: keylen 1794 too large [ 136.580636][ T4847] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 136.654822][ T4847] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 136.673140][ T4847] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 136.804141][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 137.146690][ T6197] loop3: detected capacity change from 0 to 1024 [ 137.228806][ T6197] EXT4-fs (loop3): Ignoring removed oldalloc option [ 137.256198][ T6197] EXT4-fs (loop3): Ignoring removed oldalloc option [ 137.307940][ T6197] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.401387][ T6197] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,barrier=0x0000000000000007,min_batch_time=0x0000000000000003,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 137.745489][ T6222] loop4: detected capacity change from 0 to 64 [ 137.876070][ T6222] hfs: keylen 1794 too large [ 137.900749][ T6222] hfs: keylen 1794 too large [ 137.923783][ T6228] hfs: keylen 1794 too large [ 137.943026][ T6228] hfs: keylen 1794 too large [ 138.036009][ T4920] hfs: keylen 1794 too large [ 138.085246][ T6231] loop3: detected capacity change from 0 to 256 [ 138.143632][ T4429] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 138.442997][ T6224] loop2: detected capacity change from 0 to 32768 [ 138.491387][ T6224] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.569 (6224) [ 138.525332][ T6224] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 138.549460][ T6224] BTRFS info (device loop2): turning off barriers [ 138.567942][ T4429] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.580358][ T6224] BTRFS info (device loop2): turning on async discard [ 138.587273][ T4429] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.600783][ T6224] BTRFS info (device loop2): doing ref verification [ 138.607505][ T4429] usb 1-1: config 0 interface 0 has no altsetting 0 [ 138.615575][ T6224] BTRFS info (device loop2): using free space tree [ 138.627445][ T4429] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 138.637012][ T6224] BTRFS info (device loop2): has skinny extents [ 138.656110][ T4429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.673440][ T4429] usb 1-1: config 0 descriptor?? [ 138.731058][ T6235] EXT4-fs (loop3): Ignoring removed nobh option [ 138.739974][ T6235] EXT4-fs (loop3): Test dummy encryption mode enabled [ 138.746830][ T6235] EXT4-fs (loop3): Ignoring removed bh option [ 138.795450][ T6235] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 138.873615][ T6224] BTRFS info (device loop2): enabling ssd optimizations [ 138.957808][ T4402] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 139.325231][ T4402] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 139.334741][ T4402] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.346621][ T4402] usb 6-1: config 0 descriptor?? [ 139.396075][ T4402] cp210x 6-1:0.0: cp210x converter detected [ 139.547782][ T4405] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 139.618146][ T4429] sony 0003:054C:09CC.0003: Retrying DualShock 4 get calibration report (0x02) request [ 139.762649][ T6271] capability: warning: `syz.2.582' uses deprecated v2 capabilities in a way that may be insecure [ 139.780456][ T6267] set_capacity_and_notify: 1 callbacks suppressed [ 139.780474][ T6267] loop3: detected capacity change from 0 to 32768 [ 139.797816][ T4405] usb 5-1: Using ep0 maxpacket: 32 [ 139.812883][ T6267] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.581 (6267) [ 139.837878][ T4402] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 139.838438][ T4429] sony 0003:054C:09CC.0003: Failed to get calibration data from Dualshock 4 [ 139.878043][ T4402] cp210x 6-1:0.0: GPIO initialisation failed: -524 [ 139.890869][ T4402] usb 6-1: cp210x converter now attached to ttyUSB0 [ 139.919131][ T4405] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 139.937808][ T4429] sony 0003:054C:09CC.0003: hidraw0: USB HID vb6.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.0-1/input0 [ 139.946471][ T4405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.977751][ T4429] sony 0003:054C:09CC.0003: failed to claim input [ 139.986168][ T4405] usb 5-1: config 0 descriptor?? [ 140.002524][ T6267] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 140.018897][ T6267] BTRFS info (device loop3): setting nodatasum [ 140.031033][ T6267] BTRFS info (device loop3): force zlib compression, level 3 [ 140.056470][ T4429] usb 1-1: USB disconnect, device number 8 [ 140.064697][ T4405] as10x_usb: device has been detected [ 140.071097][ T6267] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 140.086368][ T6276] loop2: detected capacity change from 0 to 64 [ 140.088895][ T4405] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 140.103007][ T6267] BTRFS info (device loop3): use lzo compression, level 0 [ 140.117857][ T6267] BTRFS info (device loop3): turning on flush-on-commit [ 140.125695][ T7] usb 6-1: USB disconnect, device number 6 [ 140.136518][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 140.154681][ T7] cp210x 6-1:0.0: device disconnected [ 140.164414][ T6267] BTRFS info (device loop3): enabling auto defrag [ 140.190867][ T6267] BTRFS info (device loop3): max_inline at 4096 [ 140.197195][ T6267] BTRFS info (device loop3): using free space tree [ 140.205201][ T4405] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 140.223734][ T6276] hfs: keylen 1794 too large [ 140.244407][ T6263] ------------[ cut here ]------------ [ 140.260895][ T6263] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 140.260990][ T6263] WARNING: CPU: 1 PID: 6263 at kernel/locking/mutex.c:575 __mutex_lock_common+0x193b/0x2400 [ 140.278005][ T6276] hfs: keylen 1794 too large [ 140.286994][ T6278] hfs: keylen 1794 too large [ 140.299776][ T4405] as10x_usb: error during firmware upload part1 [ 140.306756][ T4405] Registered device nBox DVB-T Dongle [ 140.318876][ T6277] fido_id[6277]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 140.320608][ T6278] hfs: keylen 1794 too large [ 140.340213][ T6263] Modules linked in: [ 140.363274][ T6267] BTRFS info (device loop3): has skinny extents [ 140.384162][ T6263] CPU: 1 PID: 6263 Comm: syz.4.579 Not tainted syzkaller #0 [ 140.394350][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.411636][ T6263] RIP: 0010:__mutex_lock_common+0x193b/0x2400 [ 140.418525][ T6263] Code: 00 00 83 3d 6e 8d c1 03 00 4c 8d b4 24 e0 00 00 00 0f 85 02 e8 ff ff 48 c7 c7 e0 1a 2b 8a 48 c7 c6 20 1b 2b 8a e8 95 84 ec ff <0f> 0b e9 e8 e7 ff ff e8 c9 b7 36 f7 e9 41 fb ff ff 0f 0b e9 63 f1 [ 140.450183][ T6263] RSP: 0018:ffffc9000138fa80 EFLAGS: 00010246 [ 140.457194][ T6263] RAX: bdf141bab1eeca00 RBX: ffff88802402ece0 RCX: 0000000000080000 [ 140.465355][ T6263] RDX: ffffc9000e6aa000 RSI: 000000000000170d RDI: 000000000000170e [ 140.475939][ T6263] RBP: ffffc9000138fc10 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 140.485496][ T6263] R10: dffffc0000000000 R11: ffffed1017224f2c R12: 0000000000000000 [ 140.495784][ T6263] R13: dffffc0000000000 R14: ffffc9000138fb60 R15: 0000000000000000 [ 140.513694][ T1166] hfs: keylen 1794 too large [ 140.524984][ T6263] FS: 00007f4c4db446c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 140.534607][ T6263] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.541742][ T6263] CR2: 00007fb970991e9c CR3: 0000000022525000 CR4: 00000000003506e0 [ 140.550239][ T6263] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.558705][ T6263] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.566741][ T6263] Call Trace: [ 140.569590][ T6267] BTRFS info (device loop3): enabling ssd optimizations [ 140.579376][ T6263] [ 140.589760][ T6263] ? __mutex_lock_common+0x435/0x2400 [ 140.598097][ T6263] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 140.604020][ T6263] ? mutex_lock_io_nested+0x60/0x60 [ 140.617724][ T6263] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 140.624429][ T6263] ? mutex_unlock+0x10/0x10 [ 140.631362][ T6263] ? mutex_lock_io_nested+0x60/0x60 [ 140.636715][ T6263] mutex_lock_interruptible_nested+0x17/0x20 [ 140.642876][ T6263] as102_dvb_dmx_start_feed+0x6c/0x280 [ 140.648464][ T6263] dmx_ts_feed_start_filtering+0x11c/0x210 [ 140.654317][ T6263] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 140.660841][ T6263] dvb_dmxdev_filter_start+0x422/0x1060 [ 140.666449][ T6263] dvb_demux_do_ioctl+0x47e/0x530 [ 140.671666][ T6263] dvb_usercopy+0x191/0x2b0 [ 140.676212][ T6263] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 140.682029][ T6263] ? dvb_generic_ioctl+0xb0/0xb0 [ 140.687025][ T6263] ? dvb_demux_poll+0x210/0x210 [ 140.691966][ T6263] dvb_demux_ioctl+0x25/0x30 [ 140.696657][ T6263] __se_sys_ioctl+0xfa/0x170 [ 140.701334][ T6263] do_syscall_64+0x4c/0xa0 [ 140.705817][ T6263] ? clear_bhb_loop+0x30/0x80 [ 140.710619][ T6263] ? clear_bhb_loop+0x30/0x80 [ 140.715345][ T6263] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.721554][ T6263] RIP: 0033:0x7f4c4f8ec159 [ 140.726012][ T6263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.748573][ T6263] RSP: 002b:00007f4c4db44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.757164][ T6263] RAX: ffffffffffffffda RBX: 00007f4c4fb73fa0 RCX: 00007f4c4f8ec159 [ 140.767413][ T6263] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000004 [ 140.776727][ T6263] RBP: 00007f4c4f98306b R08: 0000000000000000 R09: 0000000000000000 [ 140.786432][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.795729][ T6263] R13: 00007f4c4fb74038 R14: 00007f4c4fb73fa0 R15: 00007fff5e5c41e8 [ 140.804861][ T6263] [ 140.805528][ T26] audit: type=1800 audit(35679011.109:52): pid=6267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.581" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 140.813061][ T6263] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.835583][ T6263] CPU: 1 PID: 6263 Comm: syz.4.579 Not tainted syzkaller #0 [ 140.842936][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.853201][ T6263] Call Trace: [ 140.856512][ T6263] [ 140.859479][ T6263] dump_stack_lvl+0x188/0x250 [ 140.864207][ T6263] ? show_regs_print_info+0x20/0x20 [ 140.869450][ T6263] ? load_image+0x410/0x410 [ 140.874004][ T6263] panic+0x2f8/0x850 [ 140.877966][ T6263] ? bpf_jit_dump+0xd0/0xd0 [ 140.882517][ T6263] ? __mutex_lock_common+0x193b/0x2400 [ 140.888048][ T6263] __warn+0x248/0x2b0 [ 140.892091][ T6263] ? __mutex_lock_common+0x193b/0x2400 [ 140.897587][ T6263] report_bug+0x1b9/0x2e0 [ 140.901959][ T6263] handle_bug+0x3a/0x70 [ 140.906151][ T6263] exc_invalid_op+0x16/0x40 [ 140.910688][ T6263] asm_exc_invalid_op+0x16/0x20 [ 140.915577][ T6263] RIP: 0010:__mutex_lock_common+0x193b/0x2400 [ 140.921685][ T6263] Code: 00 00 83 3d 6e 8d c1 03 00 4c 8d b4 24 e0 00 00 00 0f 85 02 e8 ff ff 48 c7 c7 e0 1a 2b 8a 48 c7 c6 20 1b 2b 8a e8 95 84 ec ff <0f> 0b e9 e8 e7 ff ff e8 c9 b7 36 f7 e9 41 fb ff ff 0f 0b e9 63 f1 [ 140.941409][ T6263] RSP: 0018:ffffc9000138fa80 EFLAGS: 00010246 [ 140.947513][ T6263] RAX: bdf141bab1eeca00 RBX: ffff88802402ece0 RCX: 0000000000080000 [ 140.955526][ T6263] RDX: ffffc9000e6aa000 RSI: 000000000000170d RDI: 000000000000170e [ 140.963573][ T6263] RBP: ffffc9000138fc10 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 140.971584][ T6263] R10: dffffc0000000000 R11: ffffed1017224f2c R12: 0000000000000000 [ 140.979624][ T6263] R13: dffffc0000000000 R14: ffffc9000138fb60 R15: 0000000000000000 [ 140.987648][ T6263] ? __mutex_lock_common+0x435/0x2400 [ 140.993066][ T6263] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 140.998751][ T6263] ? mutex_lock_io_nested+0x60/0x60 [ 141.003989][ T6263] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 141.010043][ T6263] ? mutex_unlock+0x10/0x10 [ 141.014585][ T6263] ? mutex_lock_io_nested+0x60/0x60 [ 141.019841][ T6263] mutex_lock_interruptible_nested+0x17/0x20 [ 141.025861][ T6263] as102_dvb_dmx_start_feed+0x6c/0x280 [ 141.031364][ T6263] dmx_ts_feed_start_filtering+0x11c/0x210 [ 141.037223][ T6263] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 141.043161][ T6263] dvb_dmxdev_filter_start+0x422/0x1060 [ 141.048783][ T6263] dvb_demux_do_ioctl+0x47e/0x530 [ 141.053879][ T6263] dvb_usercopy+0x191/0x2b0 [ 141.058418][ T6263] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 141.064000][ T6263] ? dvb_generic_ioctl+0xb0/0xb0 [ 141.068984][ T6263] ? dvb_demux_poll+0x210/0x210 [ 141.073901][ T6263] dvb_demux_ioctl+0x25/0x30 [ 141.078530][ T6263] __se_sys_ioctl+0xfa/0x170 [ 141.083170][ T6263] do_syscall_64+0x4c/0xa0 [ 141.087622][ T6263] ? clear_bhb_loop+0x30/0x80 [ 141.092338][ T6263] ? clear_bhb_loop+0x30/0x80 [ 141.097062][ T6263] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.102993][ T6263] RIP: 0033:0x7f4c4f8ec159 [ 141.107448][ T6263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.127096][ T6263] RSP: 002b:00007f4c4db44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.135557][ T6263] RAX: ffffffffffffffda RBX: 00007f4c4fb73fa0 RCX: 00007f4c4f8ec159 [ 141.143588][ T6263] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000004 [ 141.151597][ T6263] RBP: 00007f4c4f98306b R08: 0000000000000000 R09: 0000000000000000 [ 141.159607][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.167643][ T6263] R13: 00007f4c4fb74038 R14: 00007f4c4fb73fa0 R15: 00007fff5e5c41e8 [ 141.175694][ T6263] [ 141.179103][ T6263] Kernel Offset: disabled [ 141.183524][ T6263] Rebooting in 86400 seconds..