last executing test programs: 5m15.769777529s ago: executing program 3 (id=3102): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x800, 0x140, 0x0, 0x4df, 0x8, 0x0, {0x4, 0x3e}, {0x2, 0x20000004}, {}, {0x1, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffc00, 0x0, 0x3fd, 0x0, 0x0, 0x21, 0x200, 0x2, 0x7}) 5m15.481966248s ago: executing program 3 (id=3106): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 5m14.480868831s ago: executing program 3 (id=3118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) 5m14.154161912s ago: executing program 3 (id=3122): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x1400c, &(0x7f00000003c0)={[{@orlov}, {@nodioread_nolock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}]}, 0x1, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5m13.605575489s ago: executing program 3 (id=3130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r1, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 5m13.095084216s ago: executing program 3 (id=3138): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) 5m12.754807827s ago: executing program 32 (id=3138): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) 59.059817756s ago: executing program 1 (id=6063): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0x0, 0x6, 0x1000002, 0xffff, 0xffffffff, 0x6}) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 58.520011843s ago: executing program 1 (id=6070): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@cswp={0x58, 0x114, 0x7, {{0x8c, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x8002, 0x1, 0x4, 0x21, 0x9}}, @cswp={0x58, 0x114, 0x7, {{0x0, 0x81}, 0x0, 0x0, 0x4, 0x8803, 0x30000000000000, 0x0, 0x50, 0x2}}], 0xb0, 0x8004}, 0x0) 58.108676107s ago: executing program 1 (id=6075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004084) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x800) 57.786743257s ago: executing program 1 (id=6077): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="67727071756f74612c646973636172642c696f636861727365743d63703836362c6572726f72733d636f6e74696e75652c696f636861727365743d6575632d6a702c75737271756f74612c6572726f72733d636f6e74696e75652c6e6f71756f74612c696e746567726974792c00f131f25105cba36253eb2d9e2b27575db3fdcb68dc71d8dc4dd8c3e0124649016264f4b3440455a5f90f59676481654fdb0f8957cf46066ddd2a7856bd69366970901d6639ec3f1cc6ab2c20d6ea2bfd1b8ea2608abaf94039f6e1f8c90aac21bf20a1f877f904db7380e7dffea078b8b29c76f648f348df048a3bf3201e410e35e2e28b22e27762c73146ff94177eb6fa15b25527bb2a6041b3b22d0dbf5aa71910cfc11e403f"], 0x21, 0x61b6, &(0x7f00000075c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001dc0)=""/4113, 0x523) 56.546664658s ago: executing program 1 (id=6090): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 55.965493917s ago: executing program 1 (id=6097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5c, r1, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local={0xfe, 0xfc}}]}, 0x5c}}, 0x0) 40.676710607s ago: executing program 33 (id=6097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5c, r1, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local={0xfe, 0xfc}}]}, 0x5c}}, 0x0) 8.355035136s ago: executing program 4 (id=6377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000018030403000700c50010"], 0xfb) 8.110602804s ago: executing program 5 (id=6379): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "7aaf9d18"}]}}, 0x0}, 0x0) 7.686754268s ago: executing program 4 (id=6381): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x22, {[@local=@item_012={0x2, 0x2, 0x0, "d2ca"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, '\x00\x00'}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @global=@item_4={0x3, 0x1, 0x6, "a69665d6"}, @local=@item_4={0x3, 0x2, 0x1, "f5236000"}, @local=@item_4={0x3, 0x2, 0x9, "868e9e8f"}, @main=@item_4={0x3, 0x0, 0x9, "49d203c6"}]}}, 0x0}, 0x0) 5.462419491s ago: executing program 5 (id=6391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r1, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x38}}, 0x0) 5.020370725s ago: executing program 5 (id=6395): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x20, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) 4.87395351s ago: executing program 4 (id=6397): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000640), 0x2d00, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000500)=0x42268597) 4.224294481s ago: executing program 0 (id=6400): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x4, 0x0, 0x0, 0x6, 0x4, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x5, [{@multicast2, 0x4e20ffff}]}, @timestamp_addr={0x44, 0x3c, 0xed, 0x1, 0x0, [{@multicast1, 0x4}, {}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010101, 0xffff4af6}, {@multicast2}, {@dev, 0x4}]}]}}}}}}}, 0x0) 4.204934482s ago: executing program 4 (id=6401): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x57, 0xfff, 0xd2, {0xffff, 0x1}, {0x49, 0x2}, @const={0x5, {0xa, 0xb177, 0x1, 0x9}}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 3.923871261s ago: executing program 5 (id=6402): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 3.915022551s ago: executing program 2 (id=6403): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, &(0x7f0000000700)=""/129, 0x81, &(0x7f0000000240)={&(0x7f0000000140)={'sha512-avx\x00'}}) 3.622073161s ago: executing program 4 (id=6404): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000001780)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8=0x0, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="e8a091ef1905f9488bb83b5ff5819f176270b4d57bf467b22712a297a2c9724589572090361a31"], 0x0, 0x0, &(0x7f0000001780)) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 3.551106113s ago: executing program 0 (id=6405): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000057c0)={0x0, 0x0, &(0x7f0000005780)={&(0x7f0000005740)={0x30, r0, 0xe5e51999abc681f, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x17, {0x20, 0x6, @l2={'eth', 0x3a, '\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 3.515769165s ago: executing program 6 (id=6406): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0xff, 0x7}, {0x20, 0x7f, 0x1, 0xfffff00c}, {0x6, 0x0, 0xff, 0x7}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 3.390729049s ago: executing program 2 (id=6407): r0 = eventfd2(0x8, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r0, &(0x7f0000000480)=""/70, 0x46) 3.315239051s ago: executing program 5 (id=6408): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000), 0x1, 0x514, &(0x7f0000002080)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) 3.065676659s ago: executing program 0 (id=6409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) 2.893186965s ago: executing program 2 (id=6410): r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) 2.597040985s ago: executing program 0 (id=6411): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0xa, 0x801, 0x0, 0x0, 0xfffffffc) 2.579151545s ago: executing program 6 (id=6412): r0 = socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x24020400) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) 2.338601963s ago: executing program 2 (id=6413): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x71, 0x1, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x62, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) 2.13140802s ago: executing program 6 (id=6414): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000200001002dbd7000fcdbdf250a008000090000031e80020014000200fc0200000000000000000000000000000800180000024e22a2"], 0x40}}, 0x480d0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.867554598s ago: executing program 2 (id=6415): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010102, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@multicast2, 0xfffffffc, 0x33}, 0x2, @in=@multicast2, 0x3507, 0x4, 0x3, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x20048001, &(0x7f00000006c0)={0xa, 0x4e22, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, 0x400}, 0x1c) 1.585030828s ago: executing program 6 (id=6416): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42040, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r0, 0xc76ed000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) 1.439044693s ago: executing program 2 (id=6417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x17, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.19557484s ago: executing program 0 (id=6418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x1, 0xa, 0x301}, 0x14}}, 0x0) 1.156123502s ago: executing program 6 (id=6419): unshare(0x6020400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, 0x0) 582.457771ms ago: executing program 5 (id=6420): r0 = eventfd2(0x8, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r0, &(0x7f0000000480)=""/70, 0x46) 420.236776ms ago: executing program 6 (id=6421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) 171.213124ms ago: executing program 0 (id=6422): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x2808082, &(0x7f00000001c0)={[{@force}, {@type={'type', 0x3d, "70c33eb6"}}, {@nls={'nls', 0x3d, 'cp932'}}, {@part={'part', 0x3d, 0x7fff}}, {@uid}, {@nodecompose}, {@barrier}, {}, {@part={'part', 0x3d, 0x4}}]}, 0x1, 0x6e8, &(0x7f0000001f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) 0s ago: executing program 4 (id=6423): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x4044802) kernel console output (not intermixed with test programs): 8 bytes leftover after parsing attributes in process `syz.2.5005'. [ 476.414332][T15837] netlink: 'syz.1.5021': attribute type 1 has an invalid length. [ 476.566601][T12365] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 476.691942][T15809] loop4: detected capacity change from 0 to 40427 [ 476.709657][T15813] loop2: detected capacity change from 0 to 32768 [ 476.756613][T12365] usb 6-1: Using ep0 maxpacket: 8 [ 476.763811][T12365] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.786634][T15813] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.5011 (15813) [ 476.813512][T12365] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 476.839853][T12365] usb 6-1: config 0 interface 0 has no altsetting 0 [ 476.854395][T12365] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 476.864648][T12365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.884671][T12365] usb 6-1: config 0 descriptor?? [ 476.902164][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5025'. [ 476.935170][T15813] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 476.978615][T15813] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 477.036454][T15813] BTRFS info (device loop2): turning on async discard [ 477.072319][T15813] BTRFS info (device loop2): metadata ratio 0 [ 477.116545][T15813] BTRFS info (device loop2): setting nodatasum [ 477.122832][T15813] BTRFS info (device loop2): using free space tree [ 477.301505][T12365] logitech 0003:046D:C626.0040: unknown main item tag 0x0 [ 477.346166][T12365] logitech 0003:046D:C626.0040: unknown main item tag 0x0 [ 477.353826][T12365] logitech 0003:046D:C626.0040: unknown main item tag 0x0 [ 477.391196][T12365] logitech 0003:046D:C626.0040: unknown main item tag 0x0 [ 477.404460][T15813] BTRFS info (device loop2): enabling ssd optimizations [ 477.411268][T12365] logitech 0003:046D:C626.0040: unknown main item tag 0x0 [ 477.419471][T12365] logitech 0003:046D:C626.0040: unknown main item tag 0x0 [ 477.427783][T12365] logitech 0003:046D:C626.0040: unknown main item tag 0x0 [ 477.437589][T12365] logitech 0003:046D:C626.0040: hidraw0: USB HID v0.0a Device [HID 046d:c626] on usb-dummy_hcd.5-1/input0 [ 477.513772][T12365] usb 6-1: USB disconnect, device number 13 [ 477.652246][ T4281] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 477.812356][T15885] fido_id[15885]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 478.154775][T15899] loop4: detected capacity change from 0 to 1024 [ 478.300170][T15899] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 478.381843][T15901] loop5: detected capacity change from 0 to 8192 [ 478.431649][T15901] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 478.473089][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 478.995535][T15927] tipc: Started in network mode [ 479.005861][T15927] tipc: Node identity 0000000000003a000000000000000001, cluster identity 4711 [ 479.024835][T15926] option changes via remount are deprecated (pid=15925 comm=syz.1.5048) [ 479.052365][T15927] tipc: Enabling of bearer rejected, failed to enable media [ 479.315743][T15936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5053'. [ 479.718432][T15951] loop2: detected capacity change from 0 to 2048 [ 479.805716][T15951] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 479.864602][T15951] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 481.065263][T15990] loop5: detected capacity change from 0 to 128 [ 481.101981][T15990] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 481.171900][T15990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 481.240741][ T26] audit: type=1800 audit(1780490866.234:372): pid=15990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5079" name="file2" dev="loop5" ino=105 res=0 errno=0 [ 481.315874][T15985] loop4: detected capacity change from 0 to 8192 [ 482.034886][T16016] vim2m vim2m.0: vidioc_s_fmt queue busy [ 482.190666][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5095'. [ 482.590484][T16038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5102'. [ 482.593805][T16034] loop5: detected capacity change from 0 to 8192 [ 482.651543][T16034] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 482.685699][T12658] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 482.701599][T16034] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 482.712066][T16034] REISERFS (device loop5): using ordered data mode [ 482.719689][T16034] reiserfs: using flush barriers [ 482.726511][T16034] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 482.746351][T16034] REISERFS (device loop5): checking transaction log (loop5) [ 482.875834][T12658] usb 2-1: Using ep0 maxpacket: 16 [ 482.890428][T12658] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.915814][T16034] REISERFS (device loop5): Using r5 hash to sort names [ 482.939246][T16034] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 482.956809][T12658] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 482.974073][T12658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.992666][T12658] usb 2-1: Product: syz [ 482.997032][T12658] usb 2-1: Manufacturer: syz [ 483.001720][T12658] usb 2-1: SerialNumber: syz [ 483.036674][T12658] usb 2-1: config 0 descriptor?? [ 483.094099][T12658] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 483.262504][ T4298] usb 2-1: Failed to submit usb control message: -71 [ 483.262702][T12658] usb 2-1: USB disconnect, device number 37 [ 483.285648][ T4298] usb 2-1: unable to send the bmi data to the device: -71 [ 483.293242][ T4298] usb 2-1: unable to get target info from device [ 483.331414][ T4298] usb 2-1: could not get target info (-71) [ 483.340939][ T4298] usb 2-1: could not probe fw (-71) [ 483.496909][T16058] nbd: couldn't find a device at index 2 [ 483.564226][T16060] loop5: detected capacity change from 0 to 64 [ 483.642996][T16060] hfs: request for non-existent node 131072 in B*Tree [ 483.660291][T16060] hfs: request for non-existent node 131072 in B*Tree [ 484.003050][T16052] loop4: detected capacity change from 0 to 40427 [ 484.033025][T16052] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x3ffff [ 484.066274][T16052] F2FS-fs (loop4): invalid crc value [ 484.088578][T16052] F2FS-fs (loop4): Found nat_bits in checkpoint [ 484.253084][T16052] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 484.440371][T16062] loop2: detected capacity change from 0 to 32768 [ 484.506891][T16062] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.5111 (16062) [ 484.599908][T16062] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 484.635938][T16062] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 484.666008][T16062] BTRFS info (device loop2): enabling auto defrag [ 484.674038][T16062] BTRFS info (device loop2): use no compression [ 484.711175][T16062] BTRFS info (device loop2): max_inline at 4096 [ 484.734942][T16062] BTRFS info (device loop2): using free space tree [ 485.141036][T16062] BTRFS info (device loop2): enabling ssd optimizations [ 486.026713][T16134] tipc: Started in network mode [ 486.031693][T16134] tipc: Node identity , cluster identity 4711 [ 486.049262][ T4281] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 486.250098][ T4267] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop2 scanned by udevd (4267) [ 486.274889][T16138] loop5: detected capacity change from 0 to 4096 [ 486.320858][T16142] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5141'. [ 486.533293][T16138] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 486.647981][T16138] ntfs3: loop5: failed to convert "0000" to iso8859-7 [ 486.692516][T16138] ntfs3: loop5: failed to convert name for inode 1e. [ 488.022393][T16186] loop4: detected capacity change from 0 to 128 [ 488.098648][T16186] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 488.253651][T16186] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 488.514164][ T11] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 488.698106][T16197] netlink: 'syz.5.5167': attribute type 3 has an invalid length. [ 488.961704][T16209] loop2: detected capacity change from 0 to 256 [ 488.995745][T16210] netlink: 'syz.4.5172': attribute type 3 has an invalid length. [ 489.003556][T16210] netlink: 'syz.4.5172': attribute type 1 has an invalid length. [ 489.015001][T16210] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.5172'. [ 489.015768][T16209] exfat: Deprecated parameter 'namecase' [ 489.129042][T16209] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 489.559287][T16219] usb usb9: usbfs: process 16219 (syz.4.5177) did not claim interface 0 before use [ 490.127589][T16213] loop5: detected capacity change from 0 to 32768 [ 490.240862][T16213] XFS (loop5): Mounting V5 Filesystem [ 490.347820][T16213] XFS (loop5): Ending clean mount [ 490.374359][T16213] XFS (loop5): Quotacheck needed: Please wait. [ 490.421148][ T4322] XFS (loop5): Metadata corruption detected at xfs_dinode_verify+0x2d5/0x1110, inode 0x1807 dinode [ 490.486070][ T4322] XFS (loop5): Unmount and run xfs_repair [ 490.492600][ T4322] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 490.553770][ T4322] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 490.587947][ T4322] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 490.629411][ T4322] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 490.659298][ T4322] 00000030: 34 f7 58 68 a5 a5 b6 11 7c 0b 00 00 00 00 00 00 4.Xh....|....... [ 490.689657][ T4322] 00000040: 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 01 ................ [ 490.728972][ T4322] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 bb 36 00 a5 .............6.. [ 490.764684][ T4322] 00000060: ff ff ff ff 8c da 54 79 00 00 00 00 00 00 00 06 ......Ty........ [ 490.791198][ T4322] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 490.882504][T16213] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 491.085002][T11403] XFS (loop5): Unmounting Filesystem [ 491.706967][ T26] audit: type=1326 audit(1780490876.705:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.0.5201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa461d9ce59 code=0x7ffc0000 [ 491.750959][T16277] loop4: detected capacity change from 0 to 512 [ 491.785699][ T26] audit: type=1326 audit(1780490876.735:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.0.5201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa461d9ce59 code=0x7ffc0000 [ 491.840494][ T26] audit: type=1326 audit(1780490876.755:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.0.5201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fa461d9ce59 code=0x7ffc0000 [ 491.866079][T16277] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.5202: Directory hole found for htree index block 0 [ 491.904533][T16277] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 491.913069][T16277] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 491.935136][ T26] audit: type=1326 audit(1780490876.755:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.0.5201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa461d9ce59 code=0x7ffc0000 [ 492.008198][ T26] audit: type=1326 audit(1780490876.755:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.0.5201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa461d9ce59 code=0x7ffc0000 [ 492.083203][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 492.085214][T12364] kernel write not supported for file /dsp1 (pid: 12364 comm: kworker/0:11) [ 492.438030][ T26] audit: type=1326 audit(1780490877.435:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.0.5205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa461d9ce59 code=0x7ffc0000 [ 492.537970][ T26] audit: type=1326 audit(1780490877.435:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.0.5205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa461d9ce59 code=0x7ffc0000 [ 492.545316][T16267] loop2: detected capacity change from 0 to 40427 [ 492.651429][ T26] audit: type=1326 audit(1780490877.435:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.0.5205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa461d9ce59 code=0x7ffc0000 [ 492.694550][T16267] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 492.703322][T16267] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 492.741382][ T26] audit: type=1326 audit(1780490877.435:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.0.5205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa461d9ce59 code=0x7ffc0000 [ 492.754775][T16267] F2FS-fs (loop2): invalid crc value [ 492.817197][T16267] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 492.844520][ T26] audit: type=1326 audit(1780490877.435:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.0.5205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fa461d9ce59 code=0x7ffc0000 [ 493.050449][T16295] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.060501][T16295] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.069364][T16295] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.078163][T16295] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.155198][T16267] F2FS-fs (loop2): Start checkpoint disabled! [ 493.211177][T16267] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 493.225148][T16267] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 493.685427][ T46] kworker/u4:3: attempt to access beyond end of device [ 493.685427][ T46] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 494.314375][ T6881] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 494.516421][ T6881] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 494.549815][ T6881] usb 5-1: config 0 has no interface number 0 [ 494.582128][ T6881] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 494.627847][T16312] loop5: detected capacity change from 0 to 4096 [ 494.669440][ T6881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.723065][ T6881] usb 5-1: Product: syz [ 494.756414][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5214'. [ 494.771404][T16312] ntfs: volume version 3.1. [ 494.776525][ T6881] usb 5-1: Manufacturer: syz [ 494.781198][ T6881] usb 5-1: SerialNumber: syz [ 494.858492][ T6881] usb 5-1: config 0 descriptor?? [ 494.880898][ T6881] usb 5-1: selecting invalid altsetting 1 [ 494.907393][ T6881] dvb_ttusb_budget: ttusb_init_controller: error [ 494.926209][ T6881] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 495.261060][ T6881] DVB: Unable to find symbol stv0299_attach() [ 495.443814][ T6881] DVB: Unable to find symbol tda8083_attach() [ 495.464167][ T6881] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 495.521420][ T6881] usb 5-1: USB disconnect, device number 34 [ 496.405325][T16350] tipc: Cannot configure node identity twice [ 496.701367][T16356] loop5: detected capacity change from 0 to 1024 [ 496.952935][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5238'. [ 497.631801][T16386] loop4: detected capacity change from 0 to 64 [ 497.644263][T16387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5248'. [ 497.684420][T16387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5248'. [ 497.698927][T16387] netlink: 'syz.5.5248': attribute type 14 has an invalid length. [ 497.714453][T16387] netlink: 'syz.5.5248': attribute type 12 has an invalid length. [ 497.733089][T16386] overlayfs: upper fs needs to support d_type. [ 497.775125][T16386] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 497.810139][T16389] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5249'. [ 497.833196][T16386] overlayfs: failed to set xattr on upper [ 497.849672][T16386] overlayfs: ...falling back to index=off,metacopy=off. [ 498.013363][T16395] loop5: detected capacity change from 0 to 256 [ 498.059568][T16395] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 498.062905][ T4280] Trying to free block not in datazone [ 498.118688][ T4280] Trying to free block not in datazone [ 498.716021][T16420] loop4: detected capacity change from 0 to 4096 [ 498.760626][T16418] loop2: detected capacity change from 0 to 4096 [ 498.844158][T16425] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 498.844768][T16420] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 498.854864][T16418] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 498.899879][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 498.899897][ T26] audit: type=1326 audit(1780490883.886:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.5.5267" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770359ce59 code=0x7ffc0000 [ 498.946737][T16420] NILFS (loop4): mounting fs with errors [ 498.995531][ T26] audit: type=1326 audit(1780490883.886:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.5.5267" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770359ce59 code=0x7ffc0000 [ 499.009267][T16418] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 499.153177][ T26] audit: type=1326 audit(1780490883.886:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.5.5267" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770359ce59 code=0x7ffc0000 [ 499.281395][ T26] audit: type=1326 audit(1780490883.886:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.5.5267" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f770359ce59 code=0x7ffc0000 [ 499.387853][ T26] audit: type=1326 audit(1780490883.886:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.5.5267" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770359ce59 code=0x7ffc0000 [ 499.509700][ T26] audit: type=1326 audit(1780490883.886:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.5.5267" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f770359ce59 code=0x7ffc0000 [ 499.587639][ T26] audit: type=1326 audit(1780490883.886:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.5.5267" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f770359ce59 code=0x7ffc0000 [ 500.152439][T16454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5278'. [ 500.177637][T16456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5280'. [ 500.193686][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5280'. [ 500.216967][T16456] netlink: 'syz.4.5280': attribute type 14 has an invalid length. [ 500.343919][ T4728] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 500.546369][ T4728] usb 6-1: unable to get BOS descriptor or descriptor too short [ 500.568818][ T4728] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.607249][ T4728] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 500.637339][ T4728] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 500.673791][ T4728] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 500.709507][T16468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5286'. [ 500.719145][ T4728] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 500.761304][ T4728] usb 6-1: config 1 interface 1 has no altsetting 0 [ 500.805628][ T4728] usb 6-1: string descriptor 0 read error: -22 [ 500.837339][ T4728] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 500.853581][ T4728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.093853][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5293'. [ 501.120783][ T4728] usb 6-1: 2:0: failed to get current value for ch 0 (-32) [ 501.156942][T16482] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 501.344548][ T4728] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 501.371755][ T4728] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 501.390957][ T4728] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 501.416224][ T4728] usb 6-1: USB disconnect, device number 14 [ 501.553579][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.559991][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.685128][ T4267] udevd[4267]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.947055][T16511] hugetlbfs: Bad value for 'size' [ 502.089681][T16517] loop5: detected capacity change from 0 to 16 [ 502.098838][T16517] erofs: (device loop5): mounted with root inode @ nid 36. [ 502.134798][T16517] syz.5.5310: attempt to access beyond end of device [ 502.134798][T16517] loop5: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 502.162226][T16517] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 502.700888][T16531] loop2: detected capacity change from 0 to 4096 [ 502.706131][T16530] loop4: detected capacity change from 0 to 8192 [ 502.763972][T16530] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 502.783694][T16530] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 502.816350][T16531] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 502.844186][T16530] REISERFS (device loop4): using ordered data mode [ 502.850766][T16530] reiserfs: using flush barriers [ 502.899029][T16530] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 502.932812][T16531] ntfs3: loop2: Failed to load $Extend. [ 502.933619][T16530] REISERFS (device loop4): checking transaction log (loop4) [ 502.991310][T16530] REISERFS (device loop4): Using r5 hash to sort names [ 503.053513][T16530] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 503.131279][T16530] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 503.248907][T16550] loop5: detected capacity change from 0 to 128 [ 503.329528][T16550] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 503.364052][T16550] hpfs: filesystem error: improperly stopped [ 503.393326][T16550] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 503.434736][T16550] hpfs: You really don't want any checks? You are crazy... [ 503.442277][T16550] hpfs: Code page index out of array [ 503.493120][T16550] hpfs: code page support is disabled [ 503.498742][T16550] hpfs: hpfs_map_4sectors(): unaligned read [ 503.545843][T16550] hpfs: hpfs_map_4sectors(): unaligned read [ 503.551825][T16550] hpfs: filesystem error: unable to find root dir [ 503.580056][T16556] netlink: 'syz.2.5329': attribute type 2 has an invalid length. [ 504.465182][T16579] loop2: detected capacity change from 0 to 4096 [ 504.475481][T16586] loop5: detected capacity change from 0 to 512 [ 504.501795][T16586] EXT4-fs: Ignoring removed nobh option [ 504.524765][T16586] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 504.532785][T16579] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 504.572108][T16586] EXT4-fs (loop5): 1 truncate cleaned up [ 504.591091][T16586] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 504.711431][T16579] ntfs3: loop2: ino=1c, "file0" attr_set_size [ 504.733142][T16579] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 504.754268][T11403] EXT4-fs (loop5): unmounting filesystem. [ 504.873120][ T4281] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 504.913659][ T4281] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 505.324987][T16603] loop2: detected capacity change from 0 to 256 [ 505.717739][ T4283] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 506.573389][T16649] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 509.402451][T16739] loop5: detected capacity change from 0 to 512 [ 509.428075][T16739] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 509.473727][T16739] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 509.562432][T16739] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 509.612223][T16739] System zones: 0-1, 15-15, 18-18, 34-34 [ 509.655973][T16739] EXT4-fs (loop5): orphan cleanup on readonly fs [ 509.677950][T16748] netlink: 79 bytes leftover after parsing attributes in process `syz.1.5419'. [ 509.695993][T16739] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 509.724023][T16739] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 509.812517][T16739] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 509.834304][T16739] EXT4-fs (loop5): 1 truncate cleaned up [ 509.883761][T16739] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 509.944600][T16739] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 509.970251][T16739] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 510.000872][T16735] loop2: detected capacity change from 0 to 32768 [ 510.061450][T11403] EXT4-fs (loop5): unmounting filesystem. [ 510.104884][ T26] audit: type=1800 audit(1780490895.108:395): pid=16735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5410" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 510.455359][T16760] genirq: Flags mismatch irq 31. 00000000 (pcmmio) vs. 00000000 (virtio1-input.0) [ 510.553524][T16762] loop5: detected capacity change from 0 to 256 [ 510.605117][T16762] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 511.134283][T16775] loop4: detected capacity change from 0 to 1024 [ 511.176131][T16778] loop2: detected capacity change from 0 to 256 [ 511.267514][T16778] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x397ce3e3, utbl_chksum : 0xe619d30d) [ 512.001428][T16809] vivid-004: disconnect [ 512.030076][T16808] vivid-004: reconnect [ 512.348767][T16821] tmpfs: Cannot retroactively limit inodes [ 512.783091][T12364] kernel write not supported for file /snd/midiC2D0 (pid: 12364 comm: kworker/0:11) [ 512.796656][T16841] loop5: detected capacity change from 0 to 2048 [ 512.868889][T16841] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 513.092289][ T4728] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 513.099183][T16851] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.109128][T16851] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.118812][T16851] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.128021][T16851] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.303190][ T4728] usb 5-1: Using ep0 maxpacket: 8 [ 513.310986][ T4728] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 513.356332][ T4728] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 513.375898][ T4728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.388814][T16864] loop2: detected capacity change from 0 to 128 [ 513.397477][ T4728] usb 5-1: Product: syz [ 513.417993][ T4728] usb 5-1: Manufacturer: syz [ 513.430203][ T4728] usb 5-1: SerialNumber: syz [ 513.446457][ T4728] usb 5-1: config 0 descriptor?? [ 513.490743][ T4728] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 513.509790][ T4728] usb 5-1: setting power ON [ 513.518327][T16864] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 513.532470][T16864] ext4 filesystem being mounted at /1106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.538133][ T4728] dvb-usb: bulk message failed: -22 (2/0) [ 513.572477][ T4728] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 513.592621][ T4728] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 513.601146][ T4728] usb 5-1: media controller created [ 513.625077][ T4728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 513.644011][ T4728] usb 5-1: selecting invalid altsetting 6 [ 513.650119][ T4728] usb 5-1: digital interface selection failed (-22) [ 513.657202][ T4728] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 513.680266][T16845] dvb-usb: bulk message failed: -22 (3/0) [ 513.696904][ T4728] usb 5-1: setting power OFF [ 513.704439][T16845] cxusb: i2c wr: len=79 is too big! [ 513.704439][T16845] [ 513.722070][ T4728] dvb-usb: bulk message failed: -22 (2/0) [ 513.728327][ T4728] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 513.765289][ T4728] (NULL device *): no alternate interface [ 513.825702][ T4728] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 513.853224][ T4728] usb 5-1: USB disconnect, device number 35 [ 513.890782][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 514.321828][T12364] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 514.399005][T12658] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 514.459263][T16898] netlink: 'syz.1.5491': attribute type 29 has an invalid length. [ 514.484383][T16898] netlink: 'syz.1.5491': attribute type 29 has an invalid length. [ 514.495459][T16895] netlink: 'syz.1.5491': attribute type 29 has an invalid length. [ 514.523993][T12364] usb 3-1: config 131 has an invalid interface number: 68 but max is 1 [ 514.541869][T12364] usb 3-1: config 131 has an invalid interface number: 125 but max is 1 [ 514.559707][T12364] usb 3-1: config 131 has no interface number 0 [ 514.571790][T12364] usb 3-1: config 131 has no interface number 1 [ 514.588991][T12364] usb 3-1: config 131 interface 68 has no altsetting 0 [ 514.596052][T12658] usb 6-1: Using ep0 maxpacket: 8 [ 514.603770][T12658] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 514.616329][T12364] usb 3-1: config 131 interface 125 has no altsetting 0 [ 514.625029][T12658] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 514.639341][T12658] usb 6-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 514.672035][T12364] usb 3-1: New USB device found, idVendor=0846, idProduct=9040, bcdDevice=54.7c [ 514.681148][T12364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.697513][T12658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.706790][T12364] usb 3-1: Product: syz [ 514.720882][T12658] usb 6-1: config 0 descriptor?? [ 514.734085][T12364] usb 3-1: Manufacturer: syz [ 514.738824][T12364] usb 3-1: SerialNumber: syz [ 515.165797][T12658] wacom 0003:056A:00F0.0041: ignoring exceeding usage max [ 515.205870][T12658] wacom 0003:056A:00F0.0041: unknown main item tag 0x2 [ 515.235350][T12658] wacom 0003:056A:00F0.0041: hidraw0: USB HID v0.05 Device [HID 056a:00f0] on usb-dummy_hcd.5-1/input0 [ 515.454813][T12658] usb 6-1: USB disconnect, device number 15 [ 515.490182][T16922] fido_id[16922]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 515.648386][T12364] carl9170: probe of 3-1:131.125 failed with error -22 [ 515.672241][T12364] usb 3-1: USB disconnect, device number 34 [ 515.796854][T16932] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5507'. [ 515.836596][T12364] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 515.930578][T16936] loop4: detected capacity change from 0 to 128 [ 515.994365][T16936] syz.4.5509: attempt to access beyond end of device [ 515.994365][T16936] loop4: rw=2051, sector=128, nr_sectors = 913 limit=128 [ 516.021665][T12364] usb 3-1: Using ep0 maxpacket: 32 [ 516.028831][T12364] usb 3-1: config 131 has an invalid interface number: 68 but max is 1 [ 516.073997][T12364] usb 3-1: config 131 has an invalid interface number: 125 but max is 1 [ 516.095191][T12364] usb 3-1: config 131 has no interface number 0 [ 516.107507][T12364] usb 3-1: config 131 has no interface number 1 [ 516.117247][T12364] usb 3-1: config 131 interface 68 has no altsetting 0 [ 516.134599][T12364] usb 3-1: config 131 interface 125 has no altsetting 0 [ 516.168963][T12364] usb 3-1: New USB device found, idVendor=0846, idProduct=9040, bcdDevice=54.7c [ 516.199094][T12364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.248104][T12364] usb 3-1: Product: syz [ 516.252970][T12364] usb 3-1: Manufacturer: syz [ 516.257608][T12364] usb 3-1: SerialNumber: syz [ 517.040503][T16954] loop5: detected capacity change from 0 to 32768 [ 517.342049][T12364] carl9170: probe of 3-1:131.125 failed with error -22 [ 517.388127][T12364] usb 3-1: USB disconnect, device number 35 [ 519.098534][T16997] loop5: detected capacity change from 0 to 32768 [ 519.178468][ T26] audit: type=1800 audit(1780490904.179:396): pid=16997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5539" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 519.290496][T16995] loop2: detected capacity change from 0 to 40427 [ 519.348052][T16995] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 519.382060][T16995] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 519.445508][T16995] F2FS-fs (loop2): invalid crc value [ 519.533657][T16995] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 519.806447][T16995] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 519.823706][T16995] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 519.845189][T12364] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 519.931397][T12362] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 519.945331][T16995] F2FS-fs (loop2): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem [ 520.024906][T17029] netlink: 'syz.0.5553': attribute type 3 has an invalid length. [ 520.041129][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5553'. [ 520.061159][T12364] usb 6-1: Using ep0 maxpacket: 8 [ 520.068119][T12364] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 520.106799][T12364] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 520.121071][T12362] usb 2-1: Using ep0 maxpacket: 32 [ 520.126660][T12364] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 520.138877][T12362] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 520.155816][T12362] usb 2-1: config 0 has no interface number 0 [ 520.162571][T12364] usb 6-1: config 250 has no interface number 0 [ 520.169006][T12364] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 520.182428][T12362] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 520.193688][T12364] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 520.205523][T12364] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 520.217820][T12364] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 520.229332][T12362] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 520.238901][T12362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.247622][T12364] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 520.261717][T12362] usb 2-1: Product: syz [ 520.266029][T12362] usb 2-1: Manufacturer: syz [ 520.270711][T12362] usb 2-1: SerialNumber: syz [ 520.275914][T12364] usb 6-1: config 250 interface 228 has no altsetting 0 [ 520.290641][T12362] usb 2-1: config 0 descriptor?? [ 520.298080][ T4281] syz-executor: attempt to access beyond end of device [ 520.298080][ T4281] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 520.313599][T17020] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 520.331141][T12364] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 520.347359][T12364] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 520.371429][T12364] usb 6-1: Product: syz [ 520.375716][T12364] usb 6-1: SerialNumber: syz [ 520.409542][T12364] hub 6-1:250.228: bad descriptor, ignoring hub [ 520.431809][T12364] hub: probe of 6-1:250.228 failed with error -5 [ 520.622110][T12364] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 520.914393][T17042] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 520.966292][T17046] loop2: detected capacity change from 0 to 256 [ 520.987091][T17046] FAT-fs (loop2): Directory bread(block 64) failed [ 520.994095][T17046] FAT-fs (loop2): Directory bread(block 65) failed [ 521.009590][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5561'. [ 521.029582][T17046] FAT-fs (loop2): Directory bread(block 66) failed [ 521.047761][T12364] usb 6-1: USB disconnect, device number 16 [ 521.070239][T17046] FAT-fs (loop2): Directory bread(block 67) failed [ 521.074924][T12364] usblp0: removed [ 521.100823][T17046] FAT-fs (loop2): Directory bread(block 68) failed [ 521.131422][T17046] FAT-fs (loop2): Directory bread(block 69) failed [ 521.138415][T17046] FAT-fs (loop2): Directory bread(block 70) failed [ 521.168580][T17046] FAT-fs (loop2): Directory bread(block 71) failed [ 521.196839][T17046] FAT-fs (loop2): Directory bread(block 72) failed [ 521.210554][T17046] FAT-fs (loop2): Directory bread(block 73) failed [ 521.326829][T17048] loop4: detected capacity change from 0 to 1024 [ 521.362426][T17048] EXT4-fs: Ignoring removed bh option [ 521.442485][T17048] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 521.780325][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 521.871522][T17057] loop2: detected capacity change from 0 to 512 [ 521.922268][T17057] EXT4-fs: inline encryption not supported [ 521.956684][T17059] loop4: detected capacity change from 0 to 256 [ 521.970153][T17057] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 522.054223][T17057] EXT4-fs (loop2): orphan cleanup on readonly fs [ 522.060731][T17057] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.5564: inode #15: comm syz.2.5564: iget: illegal inode # [ 522.168036][T17057] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.5564: couldn't read orphan inode 15 (err -117) [ 522.190511][T17057] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 522.377432][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 522.732602][T12362] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 522.774988][T12362] asix: probe of 2-1:0.188 failed with error -71 [ 522.800446][T12362] usb 2-1: USB disconnect, device number 38 [ 523.204240][T17100] loop2: detected capacity change from 0 to 64 [ 523.484076][T17112] loop4: detected capacity change from 0 to 736 [ 523.617033][T17116] loop2: detected capacity change from 0 to 512 [ 523.655444][T17116] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 523.700913][T17116] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 523.742537][T17116] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 523.825575][T17116] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 523.859150][T17116] System zones: 0-2, 18-18, 34-35 [ 523.903224][T17116] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 524.143159][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 524.334861][T17121] loop4: detected capacity change from 0 to 32768 [ 524.439975][T17121] XFS (loop4): Mounting V5 Filesystem [ 524.463071][T17137] loop2: detected capacity change from 0 to 4096 [ 524.500678][T12364] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 524.549382][T17144] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 524.593976][T17121] XFS (loop4): Ending clean mount [ 524.622383][T17137] NILFS (loop2): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 524.681893][ T26] audit: type=1800 audit(1780490909.689:397): pid=17121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5594" name="file2" dev="loop4" ino=9287 res=0 errno=0 [ 524.830403][ T4280] XFS (loop4): Unmounting Filesystem [ 525.881716][T17169] loop4: detected capacity change from 0 to 1024 [ 525.907388][T17169] EXT4-fs: Ignoring removed bh option [ 525.964507][T17169] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 526.064201][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 526.250787][T12364] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 526.314066][T17179] loop5: detected capacity change from 0 to 16 [ 526.352210][T17179] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 526.464080][T12364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 526.520394][T12364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.554844][T12364] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 526.573182][T17185] netlink: 'syz.5.5618': attribute type 2 has an invalid length. [ 526.585114][T12364] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 526.604645][T12364] usb 2-1: Manufacturer: syz [ 526.661236][T12364] usb 2-1: config 0 descriptor?? [ 527.091623][T12364] cougar 0003:060B:700A.0042: unknown main item tag 0x2 [ 527.106790][T12364] cougar 0003:060B:700A.0042: item fetching failed at offset 2/5 [ 527.125685][T12364] cougar 0003:060B:700A.0042: parse failed [ 527.145412][T12364] cougar: probe of 0003:060B:700A.0042 failed with error -22 [ 527.215108][T17207] loop5: detected capacity change from 0 to 256 [ 527.260644][T17207] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 527.321340][T12364] usb 2-1: USB disconnect, device number 39 [ 527.403805][ T26] audit: type=1326 audit(1780490912.410:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487e99ce59 code=0x7ffc0000 [ 527.487546][ T26] audit: type=1326 audit(1780490912.440:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487e99ce59 code=0x7ffc0000 [ 527.597920][ T26] audit: type=1326 audit(1780490912.440:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487e99ce59 code=0x7ffc0000 [ 527.704680][ T26] audit: type=1326 audit(1780490912.440:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f487e99ce59 code=0x7ffc0000 [ 527.785511][ T26] audit: type=1326 audit(1780490912.440:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f487e99cbc2 code=0x7ffc0000 [ 527.830888][T17226] hugetlbfs: Bad value 'ó' for mount option 'size' [ 527.830888][T17226] [ 527.847030][ T26] audit: type=1326 audit(1780490912.440:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f487e99cbc2 code=0x7ffc0000 [ 527.886128][ T26] audit: type=1326 audit(1780490912.440:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487e99ce59 code=0x7ffc0000 [ 527.920340][ T26] audit: type=1326 audit(1780490912.460:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487e99ce59 code=0x7ffc0000 [ 528.010216][ T26] audit: type=1326 audit(1780490912.460:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.4.5632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487e99ce59 code=0x7ffc0000 [ 528.067185][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5641'. [ 528.216838][T17238] netlink: 'syz.4.5644': attribute type 4 has an invalid length. [ 528.257380][T17238] netlink: 'syz.4.5644': attribute type 8 has an invalid length. [ 528.300152][T17238] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.5644'. [ 528.631743][T17251] loop5: detected capacity change from 0 to 2048 [ 528.718973][T17256] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 528.788049][T17259] loop4: detected capacity change from 0 to 256 [ 528.860555][T17259] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 530.697960][T17329] loop4: detected capacity change from 0 to 8 [ 530.796785][ T6881] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 530.830368][T12364] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 530.994747][ T6881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.015679][ T6881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.034266][ T6881] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 531.037710][T12364] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 531.044044][ T6881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.096536][T12364] usb 6-1: config 0 has no interface number 0 [ 531.119416][T12364] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 531.122356][ T6881] usb 3-1: config 0 descriptor?? [ 531.160660][T12364] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.188740][T12364] usb 6-1: Product: syz [ 531.199752][T12364] usb 6-1: Manufacturer: syz [ 531.210062][T12364] usb 6-1: SerialNumber: syz [ 531.210714][T17338] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5693'. [ 531.239705][T17338] tipc: Invalid UDP bearer configuration [ 531.239798][T17338] tipc: Enabling of bearer rejected, failed to enable media [ 531.241155][T12364] usb 6-1: config 0 descriptor?? [ 531.287696][T12364] usb 6-1: selecting invalid altsetting 1 [ 531.302802][T12364] dvb_ttusb_budget: ttusb_init_controller: error [ 531.319988][T12364] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 531.578889][T12364] DVB: Unable to find symbol stv0299_attach() [ 531.785958][ T6881] hid-led: probe of 0003:1D34:000A.0043 failed with error -71 [ 531.792679][T12364] DVB: Unable to find symbol tda8083_attach() [ 531.808972][T12364] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 531.828015][ T6881] usb 3-1: USB disconnect, device number 36 [ 531.837530][T17354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5700'. [ 531.859929][T12364] usb 6-1: USB disconnect, device number 18 [ 532.312758][T17369] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 532.555955][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 532.555971][ T26] audit: type=1326 audit(1780490917.560:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17378 comm="syz.4.5711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487e99ce59 code=0x7ffc0000 [ 532.651838][ T26] audit: type=1326 audit(1780490917.600:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17378 comm="syz.4.5711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487e99ce59 code=0x7ffc0000 [ 532.676822][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.779840][ T26] audit: type=1326 audit(1780490917.600:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17378 comm="syz.4.5711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487e99ce59 code=0x7ffc0000 [ 532.804646][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.878044][ T26] audit: type=1326 audit(1780490917.600:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17378 comm="syz.4.5711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f487e99ce59 code=0x7ffc0000 [ 532.965516][ T26] audit: type=1326 audit(1780490917.600:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17378 comm="syz.4.5711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487e99ce59 code=0x7ffc0000 [ 532.990937][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.109773][ T26] audit: type=1326 audit(1780490917.600:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17378 comm="syz.4.5711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487e99ce59 code=0x7ffc0000 [ 533.199698][ T26] audit: type=1326 audit(1780490917.600:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17378 comm="syz.4.5711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487e99ce59 code=0x7ffc0000 [ 533.225218][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.317741][ T26] audit: type=1326 audit(1780490917.600:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17378 comm="syz.4.5711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487e99ce59 code=0x7ffc0000 [ 533.342718][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.454937][ T26] audit: type=1326 audit(1780490917.600:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17378 comm="syz.4.5711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f487e99ce59 code=0x7ffc0000 [ 533.599559][ T26] audit: type=1326 audit(1780490917.600:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17378 comm="syz.4.5711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487e99ce59 code=0x7ffc0000 [ 533.951010][T17382] loop2: detected capacity change from 0 to 40427 [ 533.984031][T17382] F2FS-fs (loop2): Invalid log blocks per segment (1) [ 533.997712][T17382] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 534.026703][T17382] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 534.069649][T17382] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 534.133124][T17382] F2FS-fs (loop2): invalid crc value [ 534.178574][T17382] F2FS-fs (loop2): Found nat_bits in checkpoint [ 534.321866][T17382] F2FS-fs (loop2): Start checkpoint disabled! [ 534.413545][T17382] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 534.427147][T17382] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 534.785480][ T46] kworker/u4:3: attempt to access beyond end of device [ 534.785480][ T46] loop2: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 534.843955][ T46] kworker/u4:3: attempt to access beyond end of device [ 534.843955][ T46] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 535.318106][T17452] loop5: detected capacity change from 0 to 16 [ 535.364168][T17452] erofs: (device loop5): mounted with root inode @ nid 36. [ 535.429903][ T4283] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 535.455899][T17452] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 535.611776][T17462] batman_adv: batadv0: Adding interface: gretap1 [ 535.618439][T17462] batman_adv: batadv0: Interface activated: gretap1 [ 535.659442][T12364] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 535.849211][T12364] usb 5-1: Using ep0 maxpacket: 8 [ 535.856476][T12364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.890256][T12364] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 535.935773][T12364] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 535.954311][T12364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.978654][T12364] usb 5-1: config 0 descriptor?? [ 536.396456][T12364] logitech 0003:046D:C50C.0044: unknown main item tag 0x3 [ 536.415235][T12364] logitech 0003:046D:C50C.0044: unknown main item tag 0x0 [ 536.444841][T12364] logitech 0003:046D:C50C.0044: unknown main item tag 0x0 [ 536.469174][T12364] logitech 0003:046D:C50C.0044: unknown main item tag 0x0 [ 536.487099][T12364] logitech 0003:046D:C50C.0044: unknown main item tag 0x0 [ 536.507443][T12364] logitech 0003:046D:C50C.0044: item fetching failed at offset 16/43 [ 536.544889][T12364] logitech 0003:046D:C50C.0044: parse failed [ 536.570285][T17496] loop5: detected capacity change from 0 to 128 [ 536.576840][T12364] logitech: probe of 0003:046D:C50C.0044 failed with error -22 [ 536.618734][T12364] usb 5-1: USB disconnect, device number 36 [ 536.843789][T17475] loop2: detected capacity change from 0 to 32768 [ 536.846289][T17501] loop5: detected capacity change from 0 to 128 [ 536.949720][T17501] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 536.966626][T17501] ext4 filesystem being mounted at /570/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 536.977769][T17475] XFS (loop2): Mounting V5 Filesystem [ 537.101594][T11403] EXT4-fs (loop5): unmounting filesystem. [ 537.246748][T17475] XFS (loop2): Ending clean mount [ 537.317464][T17521] loop5: detected capacity change from 0 to 64 [ 537.412830][ T4281] XFS (loop2): Unmounting Filesystem [ 537.903699][T17536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5782'. [ 538.557944][T17555] loop4: detected capacity change from 0 to 512 [ 538.599215][T17555] EXT4-fs (loop4): Test dummy encryption mode enabled [ 538.704515][T17555] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.5790: inode #1: comm syz.4.5790: iget: illegal inode # [ 538.785273][T17563] loop5: detected capacity change from 0 to 512 [ 538.804855][T17563] EXT4-fs (loop5): Test dummy encryption mode enabled [ 538.816749][T17555] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.5790: error while reading EA inode 1 err=-117 [ 538.858937][T17555] EXT4-fs (loop4): 1 orphan inode deleted [ 538.866409][T17563] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 538.884546][T17555] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 538.929111][T17563] CIFS: iocharset name too long [ 539.096766][T11403] EXT4-fs (loop5): unmounting filesystem. [ 539.191394][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 539.337353][T17574] loop5: detected capacity change from 0 to 8 [ 539.377388][T17574] SQUASHFS error: zlib decompression failed, data probably corrupt [ 539.396607][T17574] SQUASHFS error: Failed to read block 0x9b: -5 [ 539.413283][T17574] SQUASHFS error: Unable to read metadata cache entry [99] [ 539.423751][T17574] SQUASHFS error: Unable to read inode 0x127 [ 539.577594][T17574] loop5: detected capacity change from 0 to 2048 [ 539.657988][T17574] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 539.681695][T17574] ext4 filesystem being mounted at /578/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.728595][T17574] /dev/loop5: Can't open blockdev [ 539.851531][T11403] EXT4-fs (loop5): unmounting filesystem. [ 540.208112][T17595] loop4: detected capacity change from 0 to 2048 [ 540.231737][T17595] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 540.286243][T17595] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.249976][T17632] mkiss: ax0: crc mode is auto. [ 541.465874][T17638] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5828'. [ 541.598889][T17640] block device autoloading is deprecated and will be removed. [ 541.618971][ T4276] block device autoloading is deprecated and will be removed. [ 542.636024][T17682] loop2: detected capacity change from 0 to 512 [ 542.676132][T12371] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 542.746297][T17682] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 542.790365][T17682] ext4 filesystem being mounted at /1164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.870527][T12371] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 542.892816][T12371] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 542.918404][T12371] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 542.939216][T12371] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 542.957065][T12371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.985767][T12371] usb 6-1: config 0 descriptor?? [ 543.011262][T17674] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 543.446121][T12371] hid-multitouch 0003:1FD2:6007.0045: ignoring exceeding usage max [ 543.469954][T12371] hid-multitouch 0003:1FD2:6007.0045: unknown main item tag 0x2 [ 543.513629][T12371] hid-multitouch 0003:1FD2:6007.0045: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 543.538908][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 543.647134][ T4318] usb 6-1: USB disconnect, device number 19 [ 543.708433][ T6881] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 543.737884][T17708] loop2: detected capacity change from 0 to 16 [ 543.774761][T17708] erofs: (device loop2): mounted with root inode @ nid 36. [ 543.814873][T17708] erofs: (device loop2): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 543.851037][T17706] fido_id[17706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 543.854411][T17708] erofs: (device loop2): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 543.900234][ T6881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 543.921766][ T6881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 543.964110][ T6881] usb 5-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 543.989625][ T6881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.994170][T17712] futex_wake_op: syz.1.5862 tries to shift op by 32; fix this program [ 544.012606][ T6881] usb 5-1: config 0 descriptor?? [ 544.018581][T17701] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 544.451998][ T6881] wacom 0003:056A:4001.0046: unknown main item tag 0x0 [ 544.478338][ T6881] wacom 0003:056A:4001.0046: ignoring exceeding usage max [ 544.487066][ T6881] wacom 0003:056A:4001.0046: unbalanced collection at end of report description [ 544.530343][T17724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5868'. [ 544.532990][ T6881] wacom 0003:056A:4001.0046: parse failed [ 544.566568][ T6881] wacom: probe of 0003:056A:4001.0046 failed with error -22 [ 544.668989][T12362] usb 5-1: USB disconnect, device number 37 [ 544.961196][T17703] binfmt_misc: register: failed to install interpreter file ./file1 [ 545.159144][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5873'. [ 546.158294][T17766] loop4: detected capacity change from 0 to 64 [ 546.228574][T17766] MINIX-fs: mounting file system with errors, running fsck is recommended [ 546.510155][T17776] loop4: detected capacity change from 0 to 8 [ 546.567207][T17776] SQUASHFS error: zlib decompression failed, data probably corrupt [ 546.627918][T17776] SQUASHFS error: Failed to read block 0x9b: -5 [ 546.634322][T17776] SQUASHFS error: Unable to read metadata cache entry [99] [ 546.677878][T17776] SQUASHFS error: Unable to read inode 0x127 [ 547.317000][T17773] loop2: detected capacity change from 0 to 32768 [ 547.453337][T17774] loop1: detected capacity change from 0 to 40427 [ 547.506116][T17774] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 547.528433][T17774] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 547.572506][T17774] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x3ffff [ 547.602990][T17774] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 547.630214][T17774] F2FS-fs (loop1): invalid crc value [ 547.673736][T17774] F2FS-fs (loop1): Found nat_bits in checkpoint [ 547.800811][T17774] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 547.817364][T17774] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 547.913501][T17782] loop5: detected capacity change from 0 to 32768 [ 548.048686][T17782] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 548.147265][ T4276] syz-executor: attempt to access beyond end of device [ 548.147265][ T4276] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 548.221195][T11403] ocfs2: Unmounting device (7,5) on (node local) [ 549.292398][T17824] loop5: detected capacity change from 0 to 4096 [ 549.515086][T11403] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 549.523397][T17826] loop1: detected capacity change from 0 to 4096 [ 549.547553][T11403] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 549.567709][T17826] ntfs3: loop1: ino=3, Correct links count -> 2. [ 549.704797][T17826] ntfs3: loop1: ino=5, "/" directory corrupted [ 549.945501][T17814] loop4: detected capacity change from 0 to 40427 [ 549.977722][T17814] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x3ffff [ 550.051979][T17814] F2FS-fs (loop4): invalid crc value [ 550.075886][T17814] F2FS-fs (loop4): Found nat_bits in checkpoint [ 550.298161][T17814] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 550.412309][T17814] F2FS-fs (loop4): Unrecognized mount option "nogrpid" or missing value [ 550.686004][T17854] loop5: detected capacity change from 0 to 4096 [ 550.748739][T17854] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 550.848434][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 550.848453][ T26] audit: type=1800 audit(1780490935.842:427): pid=17854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5925" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 550.849713][T17854] ntfs3: loop5: ino=1e, "file1" attr_set_size [ 551.374528][T17860] loop4: detected capacity change from 0 to 8 [ 551.951118][T17876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5935'. [ 552.284099][T17861] loop2: detected capacity change from 0 to 32768 [ 552.351582][T17861] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 552.405942][T17861] JBD2: Ignoring recovery information on journal [ 552.466153][T17861] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 552.542344][ T4281] ocfs2: Unmounting device (7,2) on (node local) [ 553.029439][T17905] loop2: detected capacity change from 0 to 256 [ 553.106650][T17902] loop5: detected capacity change from 0 to 4096 [ 553.184230][T17911] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 553.367099][ T4730] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 553.579315][ T4730] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 553.593042][ T4730] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 553.612754][ T4730] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 553.644740][ T4730] usb 5-1: config 220 has no interface number 2 [ 553.694796][ T4730] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 553.724274][ T4730] usb 5-1: config 220 interface 0 has no altsetting 0 [ 553.752534][ T4730] usb 5-1: config 220 interface 76 has no altsetting 0 [ 553.771369][ T4730] usb 5-1: config 220 interface 1 has no altsetting 0 [ 553.811251][ T4730] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 553.830151][ T4730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.833820][T17925] loop2: detected capacity change from 0 to 128 [ 553.841906][ T4730] usb 5-1: Product: syz [ 553.854376][ T4730] usb 5-1: Manufacturer: syz [ 553.872895][ T4730] usb 5-1: SerialNumber: syz [ 553.913935][T17925] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 553.936398][T17925] hpfs: filesystem error: improperly stopped [ 553.953887][T17925] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 553.987110][T17925] hpfs: You really don't want any checks? You are crazy... [ 554.017255][T17925] hpfs: hpfs_map_sector(): read error [ 554.022768][T17925] hpfs: code page support is disabled [ 554.037594][T17925] hpfs: hpfs_map_4sectors(): unaligned read [ 554.043684][T17925] hpfs: hpfs_map_4sectors(): unaligned read [ 554.077185][T17925] hpfs: filesystem error: unable to find root dir [ 554.103312][ T4730] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 554.123092][ T4730] usb 5-1: No valid video chain found. [ 554.137105][ T4730] usb 5-1: selecting invalid altsetting 0 [ 554.152040][T17929] loop1: detected capacity change from 0 to 64 [ 554.179296][ T4730] usb 5-1: selecting invalid altsetting 0 [ 554.204826][ T4730] usbtest: probe of 5-1:220.1 failed with error -22 [ 554.257798][ T4730] usb 5-1: USB disconnect, device number 38 [ 554.795598][T17942] syz.5.5964[17942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.795714][T17942] syz.5.5964[17942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.118867][T17950] loop5: detected capacity change from 0 to 4096 [ 555.226891][T17955] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 555.287651][T17957] program syz.4.5970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 555.821728][T17967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5975'. [ 556.463071][T17988] netlink: 'syz.2.5986': attribute type 5 has an invalid length. [ 556.486961][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5986'. [ 556.926717][T12362] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 557.106890][T12362] usb 5-1: Using ep0 maxpacket: 16 [ 557.125207][T12362] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 557.156692][T12362] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 557.203534][T12362] usb 5-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 557.246019][T12362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.292990][T12362] usb 5-1: config 0 descriptor?? [ 557.371109][T18005] loop5: detected capacity change from 0 to 1024 [ 557.442481][T17985] loop1: detected capacity change from 0 to 40427 [ 557.457068][T17985] F2FS-fs (loop1): invalid crc value [ 557.510144][T17985] F2FS-fs (loop1): Found nat_bits in checkpoint [ 557.698098][T17985] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 557.754313][T12362] wacom 0003:056A:00FA.0047: ignoring exceeding usage max [ 557.777829][T12362] wacom 0003:056A:00FA.0047: unknown main item tag 0x0 [ 557.805661][T12362] wacom 0003:056A:00FA.0047: hidraw0: USB HID v0.01 Device [HID 056a:00fa] on usb-dummy_hcd.4-1/input0 [ 557.995333][ T4276] syz-executor: attempt to access beyond end of device [ 557.995333][ T4276] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 558.011285][T12362] usb 5-1: USB disconnect, device number 39 [ 558.216140][T18018] fido_id[18018]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 558.749612][T18029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6004'. [ 559.035323][T18038] devtmpfs: Too few inodes for current use [ 559.191475][T18046] loop4: detected capacity change from 0 to 256 [ 559.294705][T18046] FAT-fs (loop4): Directory bread(block 64) failed [ 559.306659][T12371] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 559.334994][T18046] FAT-fs (loop4): Directory bread(block 65) failed [ 559.364779][T18046] FAT-fs (loop4): Directory bread(block 66) failed [ 559.374839][T18046] FAT-fs (loop4): Directory bread(block 67) failed [ 559.399107][T18046] FAT-fs (loop4): Directory bread(block 68) failed [ 559.416599][T18046] FAT-fs (loop4): Directory bread(block 69) failed [ 559.423385][T18046] FAT-fs (loop4): Directory bread(block 70) failed [ 559.450754][T18046] FAT-fs (loop4): Directory bread(block 71) failed [ 559.458097][T18046] FAT-fs (loop4): Directory bread(block 72) failed [ 559.475060][T18046] FAT-fs (loop4): Directory bread(block 73) failed [ 559.519260][T12371] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 559.561329][T12371] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 559.599749][T12371] usb 6-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 559.620584][T12371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.641960][T12371] usb 6-1: config 0 descriptor?? [ 559.993686][T18043] loop1: detected capacity change from 0 to 32768 [ 560.022995][T18057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6016'. [ 560.043470][T18043] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.6010 (18043) [ 560.090353][T12371] sigmamicro 0003:1C4F:0059.0048: unknown main item tag 0x3 [ 560.114877][T18043] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 560.125412][T12371] sigmamicro 0003:1C4F:0059.0048: unknown main item tag 0x0 [ 560.129926][T18060] netlink: 'syz.2.6017': attribute type 1 has an invalid length. [ 560.143238][T18043] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 560.152616][T12371] sigmamicro 0003:1C4F:0059.0048: unknown main item tag 0x0 [ 560.160648][T12371] sigmamicro 0003:1C4F:0059.0048: unknown main item tag 0x0 [ 560.170021][T18043] BTRFS info (device loop1): using free space tree [ 560.186715][T12371] sigmamicro 0003:1C4F:0059.0048: unknown main item tag 0x0 [ 560.210249][T12371] sigmamicro 0003:1C4F:0059.0048: unknown main item tag 0x0 [ 560.229324][T12371] sigmamicro 0003:1C4F:0059.0048: unknown main item tag 0x0 [ 560.246405][T12371] sigmamicro 0003:1C4F:0059.0048: unknown main item tag 0x0 [ 560.265804][T12371] sigmamicro 0003:1C4F:0059.0048: hidraw0: USB HID v0.04 Device [HID 1c4f:0059] on usb-dummy_hcd.5-1/input0 [ 560.305134][T12371] usb 6-1: USB disconnect, device number 20 [ 560.398702][T18066] fido_id[18066]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 560.439150][T18043] BTRFS info (device loop1): enabling ssd optimizations [ 560.554569][T18084] loop2: detected capacity change from 0 to 512 [ 560.637332][ T4276] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 560.668988][T18084] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.6020: invalid indirect mapped block 256 (level 2) [ 560.755671][T18084] EXT4-fs (loop2): Remounting filesystem read-only [ 560.777026][T18084] EXT4-fs (loop2): 2 truncates cleaned up [ 560.783173][T18084] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 560.849545][T18084] EXT4-fs warning (device loop2): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 561.131155][T18097] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6026'. [ 561.374222][T18104] loop5: detected capacity change from 0 to 512 [ 561.384140][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 561.399060][T18104] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 12 [ 562.832631][T18114] loop5: detected capacity change from 0 to 40427 [ 562.889003][T18123] loop1: detected capacity change from 0 to 32768 [ 562.919789][T18114] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 562.939109][T18114] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 562.973875][T18114] F2FS-fs (loop5): invalid crc value [ 562.991274][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.029555][T18123] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 563.102211][T18114] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 563.306957][ T4276] ocfs2: Unmounting device (7,1) on (node local) [ 563.314243][T18114] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 563.326697][T18114] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 563.537634][T18133] loop4: detected capacity change from 0 to 32768 [ 563.569528][T11403] syz-executor: attempt to access beyond end of device [ 563.569528][T11403] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 563.718981][T18133] JBD2: Ignoring recovery information on journal [ 563.784159][T18133] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 563.820772][T18133] JBD2: bad block at offset 32 [ 563.831408][T18133] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 564.076935][ T4280] ocfs2: Unmounting device (7,4) on (node local) [ 564.213137][T18171] loop2: detected capacity change from 0 to 1024 [ 564.473287][ T4322] hfsplus: b-tree write err: -5, ino 25 [ 564.520604][ T4322] hfsplus: b-tree write err: -5, ino 4 [ 564.563167][ T4322] hfsplus: b-tree write err: -5, ino 2 [ 564.896097][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 564.902516][ T4283] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 565.014739][T18201] loop4: detected capacity change from 0 to 512 [ 565.023581][T18201] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 565.111776][T18201] EXT4-fs (loop4): 1 truncate cleaned up [ 565.148667][T18201] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 565.205693][ T4325] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 565.241377][T18201] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 565.274942][T18201] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 565.352237][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 565.424754][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 565.456125][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.497174][ T4325] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 565.522878][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.587375][ T4325] usb 3-1: config 0 descriptor?? [ 565.681210][T18210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.026133][ T4325] elan 0003:04F3:0755.0049: unknown main item tag 0x2 [ 566.033072][ T4325] elan 0003:04F3:0755.0049: item fetching failed at offset 3/5 [ 566.071410][ T4325] elan 0003:04F3:0755.0049: Hid Parse failed [ 566.085542][ T4325] elan: probe of 0003:04F3:0755.0049 failed with error -22 [ 566.204553][T18223] loop4: detected capacity change from 0 to 128 [ 566.252235][ T4730] usb 3-1: USB disconnect, device number 37 [ 566.267957][T18223] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 566.305841][T18223] sysv_free_block: flc_count > flc_size [ 566.356088][T18223] sysv_free_block: flc_count > flc_size [ 566.385985][T18223] sysv_free_block: flc_count > flc_size [ 566.391917][T18223] sysv_free_block: flc_count > flc_size [ 566.434564][T18223] sysv_free_block: flc_count > flc_size [ 566.466244][T18223] sysv_free_block: flc_count > flc_size [ 566.492508][T18223] sysv_free_block: flc_count > flc_size [ 566.525925][T18223] sysv_free_block: flc_count > flc_size [ 566.558957][T18223] sysv_free_block: flc_count > flc_size [ 566.587210][T18223] sysv_free_block: flc_count > flc_size [ 566.595235][T18223] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 566.640901][T18233] loop5: detected capacity change from 0 to 2048 [ 566.720225][T18233] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 566.730866][T18219] loop1: detected capacity change from 0 to 32768 [ 566.774695][T18233] ext4 filesystem being mounted at /645/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 566.808310][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.938220][T11403] EXT4-fs (loop5): unmounting filesystem. [ 567.494959][T18260] loop5: detected capacity change from 0 to 512 [ 567.685579][T18260] EXT4-fs error (device loop5): ext4_quota_enable:7049: comm syz.5.6094: inode #196608: comm syz.5.6094: iget: illegal inode # [ 567.782812][T18260] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.6094: Bad quota inode: 196608, type: 2 [ 567.821751][T18260] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=196608). Please run e2fsck to fix. [ 567.869919][T18260] EXT4-fs (loop5): mount failed [ 568.682734][T18290] netlink: 'syz.2.6108': attribute type 29 has an invalid length. [ 568.713140][T18290] netlink: 'syz.2.6108': attribute type 29 has an invalid length. [ 568.734199][T18291] netlink: 'syz.2.6108': attribute type 29 has an invalid length. [ 568.842607][ T4318] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 568.953577][T18274] loop4: detected capacity change from 0 to 32768 [ 569.027225][T18274] JBD2: Ignoring recovery information on journal [ 569.035300][ T4318] usb 6-1: Using ep0 maxpacket: 32 [ 569.047010][ T4318] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 569.098134][ T4318] usb 6-1: config 0 has no interface number 0 [ 569.142940][ T4318] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 569.217489][ T4318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.235444][ T4325] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 569.262127][ T4318] usb 6-1: Product: syz [ 569.269017][T18274] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 569.303603][ T4318] usb 6-1: Manufacturer: syz [ 569.314551][ T4318] usb 6-1: SerialNumber: syz [ 569.343968][ T4318] usb 6-1: config 0 descriptor?? [ 569.372595][ T4318] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 569.403524][ T4318] usb 6-1: selecting invalid altsetting 1 [ 569.439301][ T4318] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 569.465230][ T4325] usb 3-1: Using ep0 maxpacket: 8 [ 569.487291][ T4318] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 569.495164][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.514379][ T4318] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 569.565774][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.569589][ T4318] usb 6-1: media controller created [ 569.616748][ T4325] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 569.702254][ T4325] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 569.744324][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.766851][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 569.808593][ T4325] usb 3-1: config 0 descriptor?? [ 570.080182][ T4280] ocfs2: Unmounting device (7,4) on (node local) [ 570.226995][ T4325] dragonrise 0003:0079:0006.004A: hidraw0: USB HID v0.0b Device [HID 0079:0006] on usb-dummy_hcd.2-1/input0 [ 570.265260][ T4325] dragonrise 0003:0079:0006.004A: no inputs found [ 570.272903][T18308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6115'. [ 570.283635][ T4325] dragonrise 0003:0079:0006.004A: force feedback init failed [ 570.445090][ T4730] usb 3-1: USB disconnect, device number 38 [ 570.657624][T18286] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 570.679314][T18313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6118'. [ 570.724200][ T4318] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 570.736894][T18311] fido_id[18311]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 570.738799][T18315] loop4: detected capacity change from 0 to 1024 [ 570.768981][ T4318] zl10353_read_register: readreg error (reg=127, ret==-71) [ 570.794255][ T4318] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 570.830122][T18315] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 570.901838][T18315] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 570.965530][ T4318] usb 6-1: USB disconnect, device number 21 [ 571.019754][T18315] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 571.171864][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 571.574973][ T4318] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 571.695189][ T4730] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 571.775043][ T4318] usb 5-1: Using ep0 maxpacket: 16 [ 571.788980][ T4318] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 571.809251][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.838363][ T4318] usb 5-1: config 0 descriptor?? [ 571.870723][ T4318] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 571.897885][ T4730] usb 3-1: unable to get BOS descriptor or descriptor too short [ 571.928038][ T4730] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.962296][ T4730] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 572.026456][ T4730] usb 3-1: string descriptor 0 read error: -22 [ 572.036493][ T4730] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 572.059926][ T4730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.149908][ T4730] usb 3-1: selecting invalid altsetting 1 [ 572.169608][ T4730] usb 3-1: unit 3 not found! [ 572.284164][ T4318] gspca_sonixj: reg_r err -71 [ 572.300409][ T4318] sonixj: probe of 5-1:0.0 failed with error -71 [ 572.319773][T18337] block nbd5: NBD_DISCONNECT [ 572.343583][ T4318] usb 5-1: USB disconnect, device number 40 [ 572.353260][ T4730] usb 3-1: cannot request logical cluster ID: 0 (err: -5) [ 572.364103][ T4730] usb 3-1: invalid MIXER UNIT descriptor 6 [ 572.415039][ T4730] snd-usb-audio: probe of 3-1:1.0 failed with error -5 [ 572.550896][ T4267] udevd[4267]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 572.617862][T12371] usb 3-1: USB disconnect, device number 39 [ 573.222102][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 573.249382][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.549362][T18362] loop2: detected capacity change from 0 to 128 [ 574.095940][T18372] loop2: detected capacity change from 0 to 2048 [ 574.168196][T18372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 574.640715][T18385] loop2: detected capacity change from 0 to 1024 [ 574.715940][T18385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 575.475896][T18381] loop5: detected capacity change from 0 to 32768 [ 576.218888][T18408] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 576.284574][T18408] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 576.322148][T18408] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 577.030981][T18403] loop4: detected capacity change from 0 to 32768 [ 577.156601][T18403] ERROR: (device loop4): diWrite: ixpxd invalid [ 577.156601][T18403] [ 577.231869][T18403] ERROR: (device loop4): remounting filesystem as read-only [ 577.282927][T18403] ERROR: (device loop4): txCommit: [ 577.282927][T18403] [ 577.798088][T18428] loop2: detected capacity change from 0 to 1024 [ 578.000728][T18426] loop4: detected capacity change from 0 to 8192 [ 578.025467][T18431] syz.2.6171: attempt to access beyond end of device [ 578.025467][T18431] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 578.120498][T18431] Buffer I/O error on dev loop2, logical block 2889, async page read [ 578.142767][T18426] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 578.230946][T18431] syz.2.6171: attempt to access beyond end of device [ 578.230946][T18431] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 578.284478][T18426] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 578.389428][T18426] REISERFS (device loop4): using ordered data mode [ 578.404155][T18431] Buffer I/O error on dev loop2, logical block 2889, async page read [ 578.453321][T18426] reiserfs: using flush barriers [ 578.455076][ T26] audit: type=1800 audit(1780490963.466:428): pid=18431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6171" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=20 res=0 errno=0 [ 578.499976][T18426] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 578.907260][T18426] REISERFS (device loop4): checking transaction log (loop4) [ 578.907509][T18420] loop5: detected capacity change from 0 to 40427 [ 579.018256][T18420] F2FS-fs (loop5): invalid crc value [ 579.088126][T18420] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 579.434847][T18426] REISERFS (device loop4): Using tea hash to sort names [ 579.458295][T18426] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 579.544093][T18420] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 579.951563][T11403] syz-executor: attempt to access beyond end of device [ 579.951563][T11403] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 580.204084][T12371] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 580.423913][T12371] usb 3-1: Using ep0 maxpacket: 32 [ 580.441238][T12371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.517913][T12371] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 580.564396][T12371] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 580.607701][T12371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.664019][T12371] usb 3-1: config 0 descriptor?? [ 580.922964][T18450] loop5: detected capacity change from 0 to 128 [ 581.029025][T18453] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6180'. [ 581.084706][T18450] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 581.103501][T18450] ext4 filesystem being mounted at /662/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 581.115356][T18453] team0: Device vlan3 is already an upper device of the team interface [ 581.142975][T12371] pantherlord 0003:0810:0002.004B: unknown main item tag 0x3 [ 581.174407][T12371] pantherlord 0003:0810:0002.004B: unknown main item tag 0x0 [ 581.206861][T12371] pantherlord 0003:0810:0002.004B: unknown main item tag 0x0 [ 581.219910][T18450] EXT4-fs warning (device loop5): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 581.231967][T12371] pantherlord 0003:0810:0002.004B: unknown main item tag 0x0 [ 581.252737][T12371] pantherlord 0003:0810:0002.004B: unknown main item tag 0x0 [ 581.267802][T12371] pantherlord 0003:0810:0002.004B: unknown main item tag 0x0 [ 581.283988][T12371] pantherlord 0003:0810:0002.004B: unknown main item tag 0x0 [ 581.296263][T12371] pantherlord 0003:0810:0002.004B: unknown main item tag 0x0 [ 581.341329][T12371] pantherlord 0003:0810:0002.004B: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.2-1/input0 [ 581.391443][T12371] pantherlord 0003:0810:0002.004B: no output reports found [ 581.411273][T11403] EXT4-fs (loop5): unmounting filesystem. [ 581.517934][T12371] usb 3-1: USB disconnect, device number 40 [ 581.667189][T12361] Process accounting resumed [ 581.781400][T18459] Process accounting resumed [ 581.821791][T18457] fido_id[18457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 583.036520][T18491] netlink: 296 bytes leftover after parsing attributes in process `syz.5.6196'. [ 583.642428][T18471] loop2: detected capacity change from 0 to 32768 [ 583.817033][T18471] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 583.935252][T18471] XFS (loop2): Mounting V5 Filesystem [ 584.242650][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 584.273700][T18471] XFS (loop2): Ending clean mount [ 584.303948][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 584.319035][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 584.342578][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 584.358098][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 584.382969][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 584.401381][T18471] XFS (loop2): Quotacheck needed: Please wait. [ 584.457012][T18524] netlink: 'syz.5.6209': attribute type 29 has an invalid length. [ 584.470539][T18524] netlink: 'syz.5.6209': attribute type 29 has an invalid length. [ 584.490112][T18524] netlink: 'syz.5.6209': attribute type 29 has an invalid length. [ 584.585005][T18471] XFS (loop2): Quotacheck: Done. [ 584.730377][T18521] lo speed is unknown, defaulting to 1000 [ 584.789286][T18521] lo speed is unknown, defaulting to 1000 [ 584.822973][T18529] loop4: detected capacity change from 0 to 16 [ 584.891860][T18529] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature a50000, please upgrade kernel version [ 584.916938][ T4281] XFS (loop2): Unmounting Filesystem [ 585.424551][ T4322] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.731969][ T4322] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.010728][ T4322] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.240675][T18547] loop4: detected capacity change from 0 to 4096 [ 586.354636][T18547] NILFS (loop4): invalid segment: Checksum error in segment payload [ 586.394152][ T4322] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.403637][T18547] NILFS (loop4): trying rollback from an earlier position [ 586.415692][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 586.648486][T18547] NILFS (loop4): recovery complete [ 586.710059][T18562] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 586.742584][T18563] loop2: detected capacity change from 0 to 164 [ 586.949037][T18521] chnl_net:caif_netlink_parms(): no params data found [ 587.589771][T18521] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.602653][T18584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6233'. [ 587.663673][T18521] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.718728][T18521] device bridge_slave_0 entered promiscuous mode [ 587.754430][T18521] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.823214][T18521] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.854159][T18521] device bridge_slave_1 entered promiscuous mode [ 588.049118][T18521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.057498][T18596] loop5: detected capacity change from 0 to 256 [ 588.146356][T18521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.493356][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 588.509600][T18604] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6242'. [ 589.149379][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.240236][T18621] loop2: detected capacity change from 0 to 1024 [ 589.395457][T18621] hfsplus: bad catalog entry type [ 589.574358][T18521] team0: Port device team_slave_0 added [ 589.666594][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.713656][ T6771] hfsplus: b-tree write err: -5, ino 25 [ 589.763617][ T6771] hfsplus: b-tree write err: -5, ino 4 [ 589.805519][ T6771] hfsplus: b-tree write err: -5, ino 2 [ 589.841507][T18521] team0: Port device team_slave_1 added [ 589.842130][T18633] loop4: detected capacity change from 0 to 2048 [ 590.043193][T18633] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 590.125983][T18633] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 590.237790][T18633] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 590.575299][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 590.618701][T18521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.668528][T18521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.714157][ C0] vkms_vblank_simulate: vblank timer overrun [ 590.810769][T18521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.831289][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.029300][T18521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.072642][T18521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.117461][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.151503][T18521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.703836][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.987673][T18521] device hsr_slave_0 entered promiscuous mode [ 592.037282][T18521] device hsr_slave_1 entered promiscuous mode [ 592.086794][T18521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 592.131420][T18521] Cannot create hsr debugfs directory [ 592.434678][ T4322] IPVS: stopping master sync thread 17369 ... [ 592.652661][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 593.000517][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.256673][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.719724][ C0] vkms_vblank_simulate: vblank timer overrun [ 594.184959][T18718] loop5: detected capacity change from 0 to 512 [ 594.320602][ C0] vkms_vblank_simulate: vblank timer overrun [ 594.403377][T18718] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.6287: bg 0: block 313: padding at end of block bitmap is not set [ 594.433139][ C0] vkms_vblank_simulate: vblank timer overrun [ 594.604276][T18718] EXT4-fs (loop5): Remounting filesystem read-only [ 594.662815][ C0] vkms_vblank_simulate: vblank timer overrun [ 594.686021][T18718] EXT4-fs (loop5): 1 truncate cleaned up [ 594.699154][T18718] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 595.096245][T11403] EXT4-fs (loop5): unmounting filesystem. [ 595.432085][ T4322] device hsr_slave_0 left promiscuous mode [ 595.471259][T18736] loop4: detected capacity change from 0 to 256 [ 595.490109][ T4322] device hsr_slave_1 left promiscuous mode [ 595.582496][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.591213][T18736] FAT-fs (loop4): Directory bread(block 64) failed [ 595.643569][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.665028][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.702904][T18736] FAT-fs (loop4): Directory bread(block 65) failed [ 595.744753][T18736] FAT-fs (loop4): Directory bread(block 66) failed [ 595.784634][T18736] FAT-fs (loop4): Directory bread(block 67) failed [ 595.805322][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.843329][T18736] FAT-fs (loop4): Directory bread(block 68) failed [ 595.858744][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.912907][T18736] FAT-fs (loop4): Directory bread(block 69) failed [ 595.939210][ T4322] device bridge_slave_1 left promiscuous mode [ 595.978274][T18736] FAT-fs (loop4): Directory bread(block 70) failed [ 595.994500][T18736] FAT-fs (loop4): Directory bread(block 71) failed [ 596.004716][T18736] FAT-fs (loop4): Directory bread(block 72) failed [ 596.029313][T18736] FAT-fs (loop4): Directory bread(block 73) failed [ 596.036765][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.092335][T18736] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 596.094300][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.112128][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.243555][ T4322] device bridge0 left promiscuous mode [ 596.278346][ T4322] device veth1_macvtap left promiscuous mode [ 596.290701][ T4322] device veth0_macvtap left promiscuous mode [ 596.322115][ T4322] device veth1_vlan left promiscuous mode [ 596.350981][ T4322] device veth0_vlan left promiscuous mode [ 596.938538][ T4322] bond1 (unregistering): Released all slaves [ 597.170558][T18749] loop5: detected capacity change from 0 to 32768 [ 597.969132][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.278956][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.885195][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.010174][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.788021][ T4322] bond0 (unregistering): Released all slaves [ 600.189202][T18521] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 600.308110][T18521] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 600.392422][T18521] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 600.458186][T18772] loop4: detected capacity change from 0 to 512 [ 600.475445][T18521] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 600.513616][T18772] EXT4-fs: Ignoring removed orlov option [ 600.700066][T18772] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 600.807312][T18772] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 600.876565][T18772] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.6310: corrupted in-inode xattr [ 600.909050][T18772] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.6310: couldn't read orphan inode 15 (err -117) [ 600.956392][T18772] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 601.309590][T18521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.326849][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 601.424028][T18787] loop5: detected capacity change from 0 to 512 [ 601.572095][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 601.622274][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 601.741848][T18521] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.011797][T18793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6316'. [ 602.101325][ T26] audit: type=1326 audit(1780490987.109:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18796 comm="syz.5.6317" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770359ce59 code=0x7ffc0000 [ 602.161880][T18793] device erspan0 entered promiscuous mode [ 602.253615][T18793] device erspan0 left promiscuous mode [ 602.324332][ T26] audit: type=1326 audit(1780490987.119:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18796 comm="syz.5.6317" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770359ce59 code=0x7ffc0000 [ 602.591464][ T26] audit: type=1326 audit(1780490987.119:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18796 comm="syz.5.6317" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770359ce59 code=0x7ffc0000 [ 602.683557][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 602.730728][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 602.738587][T18769] loop2: detected capacity change from 0 to 32768 [ 602.779973][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.791201][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.859444][ T26] audit: type=1326 audit(1780490987.119:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18796 comm="syz.5.6317" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770359ce59 code=0x7ffc0000 [ 602.928247][ T26] audit: type=1326 audit(1780490987.119:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18796 comm="syz.5.6317" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f770359ce59 code=0x7ffc0000 [ 602.982139][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 603.000683][T18769] XFS (loop2): Mounting V5 Filesystem [ 603.052052][ T26] audit: type=1326 audit(1780490987.119:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18796 comm="syz.5.6317" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770359ce59 code=0x7ffc0000 [ 603.058290][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 603.100448][ T26] audit: type=1326 audit(1780490987.119:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18796 comm="syz.5.6317" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770359ce59 code=0x7ffc0000 [ 603.100497][ T26] audit: type=1326 audit(1780490987.119:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18796 comm="syz.5.6317" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f770359ce59 code=0x7ffc0000 [ 603.100531][ T26] audit: type=1326 audit(1780490987.119:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18796 comm="syz.5.6317" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f770359ce59 code=0x7ffc0000 [ 603.257336][T18769] XFS (loop2): AIL initialisation failed: error -12 [ 603.718946][T18769] XFS (loop2): log mount failed [ 603.904162][T18825] loop4: detected capacity change from 0 to 512 [ 604.042165][T18825] EXT4-fs (loop4): Test dummy encryption mode enabled [ 604.103853][T18825] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 604.152643][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 604.231145][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.246349][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.249401][T18825] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.6324: bad orphan inode 131083 [ 604.266543][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 604.318108][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 604.431112][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 604.443201][T18825] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 604.515879][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 604.675900][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 604.696686][T18825] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.6324: path /1210/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1 [ 604.858849][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 604.907316][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 604.968861][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 605.006519][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 605.047243][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 605.181149][ T6771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 605.242202][ T6771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 605.320209][T18521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 606.206023][T18860] loop4: detected capacity change from 0 to 256 [ 607.183289][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 607.241687][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 607.382552][T18521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.566092][T18882] loop4: detected capacity change from 0 to 2048 [ 607.684742][T18882] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 607.789769][T18882] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 607.870165][T18882] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 2016: 0x14 != 0x1b [ 607.942242][T18882] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 608.180676][ T4315] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 608.200599][T12361] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 608.271830][T18900] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6347'. [ 608.410813][ T4315] usb 3-1: Using ep0 maxpacket: 8 [ 608.428603][ T4315] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 608.451925][T12361] usb 6-1: Using ep0 maxpacket: 16 [ 608.481339][T12361] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.498129][ T4315] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 608.568153][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.580702][T12361] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.614889][ T4315] usb 3-1: Product: syz [ 608.667645][T12361] usb 6-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 608.671725][ T4315] usb 3-1: Manufacturer: syz [ 608.711231][T12361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.724820][ T4315] usb 3-1: SerialNumber: syz [ 608.779342][ T4315] usb 3-1: config 0 descriptor?? [ 608.798644][T12361] usb 6-1: config 0 descriptor?? [ 608.841146][ T4315] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 608.884861][ T4315] usb 3-1: setting power ON [ 608.915986][ T4315] dvb-usb: bulk message failed: -22 (2/0) [ 609.039387][ T4315] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 609.043331][T18894] dvb-usb: bulk message failed: -22 (3/0) [ 609.124066][ T4315] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 609.170674][T18894] cxusb: i2c rd: len=80 is too big! [ 609.170674][T18894] [ 609.199015][ T4315] usb 3-1: media controller created [ 609.325374][T12361] razer 0003:1532:011B.004C: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.5-1/input0 [ 609.402381][ T4315] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 609.558326][ T4315] usb 3-1: selecting invalid altsetting 6 [ 609.619337][ T4315] usb 3-1: digital interface selection failed (-22) [ 609.713263][ T4315] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 609.782941][ T4315] usb 3-1: setting power OFF [ 609.803391][ T4318] usb 6-1: USB disconnect, device number 22 [ 609.820344][ T4315] dvb-usb: bulk message failed: -22 (2/0) [ 609.856222][ T4315] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 609.922182][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 609.932250][ T4315] (NULL device *): no alternate interface [ 609.975980][T18910] fido_id[18910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 609.976225][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 610.295287][ T4315] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 610.299567][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 610.412177][ T4315] usb 3-1: USB disconnect, device number 41 [ 610.441248][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 610.497153][T18521] device veth0_vlan entered promiscuous mode [ 610.538084][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 610.566221][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 610.604498][T18521] device veth1_vlan entered promiscuous mode [ 610.743661][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 610.753601][T18926] netlink: 'syz.0.6354': attribute type 29 has an invalid length. [ 610.768439][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 610.814440][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 610.877084][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 610.939714][T18521] device veth0_macvtap entered promiscuous mode [ 610.998341][T18926] netlink: 'syz.0.6354': attribute type 29 has an invalid length. [ 611.049244][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 611.105158][T18521] device veth1_macvtap entered promiscuous mode [ 611.154391][T18923] netlink: 'syz.0.6354': attribute type 29 has an invalid length. [ 611.271725][T18521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.371422][T18521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.451679][T18521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.544397][T18521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.639448][T18521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.708474][T18521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.789518][T18521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.824693][T18521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.874668][T18521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.878330][T18945] loop2: detected capacity change from 0 to 1024 [ 611.936370][T18521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.001121][T18521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.087923][ T6771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 612.128323][ T6771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 612.131106][T18945] EXT4-fs: Ignoring removed orlov option [ 612.224169][T18521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.310267][T18521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.320873][T18945] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 612.400063][T18521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.510904][T18521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.576157][T18521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.628391][T18521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.676373][T18521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.679873][T18945] EXT4-fs error (device loop2): __ext4_new_inode:1291: comm syz.2.6362: failed to insert inode 15: doubly allocated? [ 612.723453][T18521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.745672][T18521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.787844][T18521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.835782][T18945] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 612.867188][T18521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.906765][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 612.981126][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 613.042755][T18521] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.166956][T18521] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.217690][T18943] loop4: detected capacity change from 0 to 32768 [ 613.239158][T18521] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.263241][T18968] loop5: detected capacity change from 0 to 64 [ 613.282549][T18521] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.392393][T18943] JBD2: Ignoring recovery information on journal [ 613.408344][T18943] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 613.423745][T18943] JBD2: bad block at offset 32 [ 613.460660][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 613.517292][T18943] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 614.077558][ T4280] ocfs2: Unmounting device (7,4) on (node local) [ 614.231299][ T6771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.341324][ T6771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.452104][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 614.643230][T16239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.684915][T18978] loop5: detected capacity change from 0 to 4096 [ 614.717852][T16239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.723756][T18983] lo speed is unknown, defaulting to 1000 [ 614.799903][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 614.917368][T18983] lo speed is unknown, defaulting to 1000 [ 616.039917][ T4730] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 616.332405][ T4730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.433055][ T4730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.479621][ T4315] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 616.508310][ T4730] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 616.569821][ T4730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.611722][ T4730] usb 6-1: config 0 descriptor?? [ 616.735911][ T4315] usb 5-1: Using ep0 maxpacket: 16 [ 616.773944][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.839795][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.923440][ T4315] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 617.039724][ T4315] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 617.089954][ T4730] cm6533_jd 0003:0D8C:0022.004D: unbalanced delimiter at end of report description [ 617.109974][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.124778][ T4730] cm6533_jd 0003:0D8C:0022.004D: parse failed [ 617.160492][ T4730] cm6533_jd: probe of 0003:0D8C:0022.004D failed with error -22 [ 617.206947][ T4315] usb 5-1: config 0 descriptor?? [ 617.390161][ T4728] usb 6-1: USB disconnect, device number 23 [ 617.717766][ T4315] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0 [ 617.758331][ T4315] microsoft 0003:045E:07DA.004E: No inputs registered, leaving [ 617.804286][ T4315] microsoft 0003:045E:07DA.004E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 617.858865][ T4315] microsoft 0003:045E:07DA.004E: no inputs found [ 617.883255][ T4315] microsoft 0003:045E:07DA.004E: could not initialize ff, continuing anyway [ 617.956470][ T4315] usb 5-1: USB disconnect, device number 41 [ 618.618667][T19037] fido_id[19037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 618.684300][T19046] loop6: detected capacity change from 0 to 512 [ 618.859083][T19046] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 618.859343][T19046] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 619.257362][T18521] EXT4-fs (loop6): unmounting filesystem. [ 619.439096][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.523521][T19083] loop5: detected capacity change from 0 to 512 [ 620.722481][T19083] Quota error (device loop5): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 620.836165][T19073] loop4: detected capacity change from 0 to 8192 [ 620.853313][T19083] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 620.976990][T19083] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.6408: Failed to acquire dquot type 1 [ 620.999376][T19073] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 621.033799][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.203656][T19083] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.6408: corrupted inode contents [ 621.237979][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.243034][T19073] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 621.410482][T19073] REISERFS (device loop4): using ordered data mode [ 621.472499][T19073] reiserfs: using flush barriers [ 621.501263][T19073] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 621.524801][T19083] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #16: comm syz.5.6408: mark_inode_dirty error [ 621.597160][T19103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6414'. [ 621.622805][T19073] REISERFS (device loop4): checking transaction log (loop4) [ 621.638661][T19083] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.6408: corrupted inode contents [ 621.688769][T19083] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.6408: mark_inode_dirty error [ 621.734431][T19073] REISERFS (device loop4): Using r5 hash to sort names [ 621.789770][T19083] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.6408: corrupted inode contents [ 621.854775][T19073] reiserfs: enabling write barrier flush mode [ 621.889299][T19083] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 621.944068][T19073] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 621.979203][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.021207][T19083] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.6408: corrupted inode contents [ 622.079348][T19083] EXT4-fs error (device loop5): ext4_truncate:4325: inode #16: comm syz.5.6408: mark_inode_dirty error [ 622.116002][T19073] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 622.142535][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.191132][T19083] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 622.309521][T19083] EXT4-fs (loop5): 1 truncate cleaned up [ 622.338214][T19083] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 622.380302][T19073] REISERFS (device loop4): Remounting filesystem read-only [ 622.432652][T19073] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 622.460790][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.479655][T19083] ext4 filesystem being mounted at /724/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.629682][T19073] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 622.664260][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.722975][T19073] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 622.819268][T19073] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error [ 622.898546][T19073] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 622.988987][T19073] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 623.076580][T19073] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 623.155895][T11403] EXT4-fs (loop5): unmounting filesystem. [ 623.175214][T19073] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 623.206211][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.279077][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.567131][ T4280] ------------[ cut here ]------------ [ 623.575956][ T4280] kernel BUG at fs/reiserfs/journal.c:1916! [ 623.709675][ T4280] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 623.727102][ T4280] CPU: 0 PID: 4280 Comm: syz-executor Not tainted syzkaller #0 [ 623.746057][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 623.763756][ T4280] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 623.774063][ T4280] Code: b8 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 08 2d b8 ff e9 f9 fc ff ff e8 5e 25 67 ff <0f> 0b e8 57 25 67 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 623.815589][ T4280] RSP: 0018:ffffc90004187b00 EFLAGS: 00010293 [ 623.828356][ T4280] RAX: ffffffff821b5642 RBX: 1ffff92000830f64 RCX: ffff88807d111e00 [ 623.844765][ T4280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 623.861326][ T4280] RBP: ffffc90004187bf8 R08: ffffc90004187b77 R09: ffffc90004187b40 [ 623.879633][ T4280] R10: dffffc0000000000 R11: fffff52000830f6f R12: ffffc90004389000 [ 623.892860][ T4280] R13: dffffc0000000000 R14: ffff888046606678 R15: 0000000000000000 [ 623.909897][ T4280] FS: 0000555579b3e500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 623.928577][ T4280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 623.945228][ T4280] CR2: 00007f1758756000 CR3: 000000005ba2a000 CR4: 00000000003506f0 [ 623.969679][ T4280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 623.988758][ T4280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 624.003940][ T4280] Call Trace: [ 624.010346][ T4280] [ 624.014712][ T4280] ? journal_release+0x30/0x30 [ 624.023186][ T4280] journal_release+0x1b/0x30 [ 624.036170][ T4280] reiserfs_put_super+0x267/0x510 [ 624.043176][ T4280] ? hook_inode_free_security+0xa0/0xa0 [ 624.061919][ T4280] ? evict_inodes+0x642/0x6a0 [ 624.072859][ T4280] ? reiserfs_dirty_inode+0x260/0x260 [ 624.081953][ T4280] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 624.091243][ T4280] ? reiserfs_dirty_inode+0x260/0x260 [ 624.101263][ T4280] generic_shutdown_super+0x130/0x340 [ 624.110169][ T4280] kill_block_super+0x7c/0xe0 [ 624.118854][ T4280] deactivate_locked_super+0x93/0xf0 [ 624.129435][ T4280] cleanup_mnt+0x42c/0x4b0 [ 624.135816][ T4280] ? lockdep_hardirqs_on+0x94/0x140 [ 624.144375][ T4280] task_work_run+0x1d0/0x260 [ 624.154145][ T4280] ? task_work_cancel+0x220/0x220 [ 624.166443][ T4280] ? exit_to_user_mode_loop+0x3b/0x110 [ 624.174048][ T4280] exit_to_user_mode_loop+0xe6/0x110 [ 624.182830][ T4280] exit_to_user_mode_prepare+0xee/0x180 [ 624.191794][ T4280] syscall_exit_to_user_mode+0x16/0x40 [ 624.203330][ T4280] do_syscall_64+0x58/0xa0 [ 624.213524][ T4280] ? clear_bhb_loop+0x60/0xb0 [ 624.223513][ T4280] ? clear_bhb_loop+0x60/0xb0 [ 624.233226][ T4280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.247726][ T4280] RIP: 0033:0x7f487e99e097 [ 624.255285][ T4280] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 624.292346][ T4280] RSP: 002b:00007fffb8a1f458 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 624.307227][ T4280] RAX: 0000000000000000 RBX: 00007f487ea321ca RCX: 00007f487e99e097 [ 624.322041][ T4280] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb8a1f510 [ 624.338037][ T4280] RBP: 00007fffb8a1f510 R08: 00007fffb8a20510 R09: 00000000ffffffff [ 624.352962][ T4280] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb8a205a0 [ 624.366649][ T4280] R13: 00007f487ea321ca R14: 0000000000097d4c R15: 00007fffb8a205e0 [ 624.384178][ T4280] [ 624.390868][ T4280] Modules linked in: [ 624.404939][ T4280] ---[ end trace 0000000000000000 ]--- [ 624.424749][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.439504][ T4280] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 624.465746][ T4280] Code: b8 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 08 2d b8 ff e9 f9 fc ff ff e8 5e 25 67 ff <0f> 0b e8 57 25 67 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 624.503237][ T4280] RSP: 0018:ffffc90004187b00 EFLAGS: 00010293 [ 624.527884][ T4280] RAX: ffffffff821b5642 RBX: 1ffff92000830f64 RCX: ffff88807d111e00 [ 624.547040][ T4280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 624.562668][ T4280] RBP: ffffc90004187bf8 R08: ffffc90004187b77 R09: ffffc90004187b40 [ 624.575878][ T4280] R10: dffffc0000000000 R11: fffff52000830f6f R12: ffffc90004389000 [ 624.591894][ T4280] R13: dffffc0000000000 R14: ffff888046606678 R15: 0000000000000000 [ 624.606590][ T4280] FS: 0000555579b3e500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 624.623567][ T4280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 624.656334][ T4280] CR2: 00007fb3a11987d0 CR3: 000000005ba2a000 CR4: 00000000003506e0 [ 624.668105][ T4280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 624.691126][ T4280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 624.709230][ T4280] Kernel panic - not syncing: Fatal exception [ 624.722641][ T4280] Kernel Offset: disabled [ 624.731047][ T4280] Rebooting in 86400 seconds..