last executing test programs: 2m11.418360893s ago: executing program 2 (id=11): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000700001002abd7000fbdbdf2507000000", @ANYRES32=r1, @ANYBLOB="0c00018008000300000003000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) 2m11.232543277s ago: executing program 2 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2m11.12999734s ago: executing program 2 (id=14): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 2m10.632539292s ago: executing program 2 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 2m10.199019063s ago: executing program 2 (id=20): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@oldalloc}, {@jqfmt_vfsv0}, {@i_version}]}, 0xff, 0x523, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000020000000b00"], 0x0) 2m9.756391684s ago: executing program 2 (id=24): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x2, 0x7253, 0x8, 0x8, 0x9, 0x6, 0x52e6ac5d, 0x7ff, 0xc, 0x0, 0x0, 0x82a, 0x6, 0x8000000b, 0x2, 0x6, 0xfffffffffffffffd, 0x200000000000008d, 0x7f, 0x200000008000000, 0x5, 0x3, 0xffffffff, 0xfffffffffffffffb, 0x9dc6, 0xa}) 2m9.487418361s ago: executing program 32 (id=24): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x2, 0x7253, 0x8, 0x8, 0x9, 0x6, 0x52e6ac5d, 0x7ff, 0xc, 0x0, 0x0, 0x82a, 0x6, 0x8000000b, 0x2, 0x6, 0xfffffffffffffffd, 0x200000000000008d, 0x7f, 0x200000008000000, 0x5, 0x3, 0xffffffff, 0xfffffffffffffffb, 0x9dc6, 0xa}) 2m7.163652298s ago: executing program 1 (id=56): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwrite64(r0, 0x0, 0x0, 0x6) 2m6.987641943s ago: executing program 1 (id=58): r0 = inotify_init() close_range(r0, r0, 0x2) readv(r0, 0x0, 0x0) 2m6.783655068s ago: executing program 1 (id=61): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000d00)='n\\ 127.0.0.102\\00000t\n', 0x18) 2m6.665016611s ago: executing program 1 (id=62): syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000300)={[{@utf8}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@allow_utime={'allow_utime', 0x3d, 0xeb8}}, {@allow_utime={'allow_utime', 0x3d, 0x2}}, {@utf8}, {@namecase}, {@errors_remount}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x7}}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) 2m6.201429303s ago: executing program 1 (id=64): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) getdents(r0, &(0x7f0000000000)=""/37, 0x3f) 2m5.067293581s ago: executing program 1 (id=74): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000ff070000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m4.775382058s ago: executing program 33 (id=74): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000ff070000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m46.758726558s ago: executing program 4 (id=252): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000400)="240000001e005f0214f9f4e6ff0804000a000000fc0000000000aa0008000f00fd000000", 0x24) readv(r0, &(0x7f0000001540)=[{&(0x7f0000000000)=""/167, 0xfd29}], 0x1) 1m46.554378743s ago: executing program 4 (id=253): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0xc0245720, &(0x7f0000000180)) 1m46.318400829s ago: executing program 4 (id=256): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000240)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)=""/84, 0x54}], 0x2) 1m46.100403065s ago: executing program 4 (id=259): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000680)={[{@umask={'umask', 0x3d, 0x81}}, {@utf8}, {@utf8}, {@namecase}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@discard}, {@errors_continue}, {@namecase}]}, 0x1, 0x1555, &(0x7f0000002140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) 1m45.614455107s ago: executing program 4 (id=265): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x4}, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 1m45.108317259s ago: executing program 4 (id=269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_TO_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1m44.895106105s ago: executing program 34 (id=269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_TO_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1m43.921551629s ago: executing program 3 (id=286): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4000fffffff3) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x1000000, 0x4001011, r0, 0xfffff000) 1m43.792377773s ago: executing program 3 (id=289): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000540)={{0x1, 0x0, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x8f11, 0x200, 0x0, 0x6472a8e96cb70e5e}) 1m43.651542716s ago: executing program 3 (id=290): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x12, 0x43, 0x0, @loopback}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1m43.412743101s ago: executing program 3 (id=292): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1333406, 0x0) 1m43.126423428s ago: executing program 3 (id=297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffa}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x6, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x0, 0x9, 0x1}]}]}]}, 0x38}}, 0x0) 1m42.416378875s ago: executing program 3 (id=303): r0 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip6_mr_cache\x00') read(r0, &(0x7f0000000000)=""/28, 0x1c) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xac) 1m42.22185578s ago: executing program 35 (id=303): r0 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip6_mr_cache\x00') read(r0, &(0x7f0000000000)=""/28, 0x1c) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xac) 2.712261584s ago: executing program 5 (id=1540): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000064c0)='./bus\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x6180, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) 2.306048754s ago: executing program 5 (id=1542): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000980)={[{@codepage={'codepage', 0x3d, 'iso8859-7'}}, {@umask={'umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@dir_umask={'dir_umask', 0x3d, 0xdc36}}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@creator={'creator', 0x3d, "2b6dafde"}}, {@uid}]}, 0x41, 0x32e, &(0x7f00000002c0)="$eJzs3U1r1E4cB/DvZLPb3XbpP/+2UvBYLXgqbT0oXixSBPENeJBibVcojRW0ggri6lmKngTBoze9ir4FvYhvQE89iCe9FA9GZiazSbaZ7ENj02W/H+g2D/Pwm0weZlZqQERD68Ly19end+WPKAMoATgHOACqgAvgGKard7e2N7b9xnpWQSWVQ/4I6JxiX5q1rUZaVplP5Qh5cs1FHe7OpRyaSJmC4FvHND8PJRIqjtDX/j4OMBJenWp/9dAj+zeaul3DJdbDYg97uIfxIsMhIqLihc9/J3xK1MPxu+MAs+HYfNCf/4nxzV5xcRwJree/o9cDIY/Pf2pXNN9TUzjZ+46ZJaaVpc+JenJjEB3uCvSZlegA0WlWqWJxajc2/MZcUxXwBOdDsWRT6nMdpiGKLdqK/jWTMjfNkNX2bGOqDWXZhkVL/JM91/jhO16kV7fyqYuYxEfxWawIDy+x3hr/uYGQB0cdH6+tp3T88/YSVSs9nSrRymhO/7+q5LjpgfdvolbWbMe1ipKMJY0sRbSP3z0T57OKPRcmEl81mNYt2Funck2m5lpsrf9OzTXVnqvmlv3G3NotP/OrlNykzujEjrgiZvAD77AcG/87MvUs7Fdm4s4vVMrwzMhsj6tSWvoxQV3AN1OuTKeLzEPtYmpHZ3uK6ziL8Tv3H2yu+n7jdk4Lz9/q4vvIbi6VXOPpf0GfiCJqjvwdS4OqXCgDyK3SP0EQ+L6pM7bLxWE0uayqPfMq0YOiqVcPVgWa+06JJXtiAEsAwi3mjtBP7Y9auUaiArvK/kv2gNqSfkKaqHLsgrpll6kqsauEka6ulFof8Vx+uLnq935LocETdTqmrxYdDBVBDq+Env/F5ivz6q4jP7yM2UjQqfBYiQuWGdCE+hztbgbXKtY6gxszCx3mXCdOASfbanRganzcXqwXxtk2pD8aev+nDLGML7jG7/+JiIiIiIiIiIiIiIiIiIiIiIiIiAZNr3+o0M+fEyRr3B3C/3iDiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOhgYu//BUrqjTGVwt//WzLv/w03jKZkMu+lIKK+/Q0AAP//oLJZGA==") r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) 2.203586356s ago: executing program 5 (id=1543): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.018145311s ago: executing program 5 (id=1545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.833187165s ago: executing program 5 (id=1546): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3) 1.784840987s ago: executing program 5 (id=1547): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0498c200100000000109022d00010000500409040008820300030009210000ff0922180009058103000400"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) 1.309387088s ago: executing program 0 (id=1549): capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9, 0x4}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x3b000000, @rand_addr=' \x01\x00', 0x5}}}, 0x88) 1.273899199s ago: executing program 6 (id=1552): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x11c) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000080)={0x8, 0x3, 0x3, 0x6}) 1.253555049s ago: executing program 0 (id=1553): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000001600)=0xfffffffc, 0x48) 1.22197334s ago: executing program 0 (id=1554): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x233000, 0x1000}, 0x20) mbind(&(0x7f00001b9000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x10000000003) 903.628378ms ago: executing program 0 (id=1557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x8000) 843.262429ms ago: executing program 0 (id=1558): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) write$sndseq(r0, &(0x7f0000000440)=[{0xe, 0x1, 0x0, 0xfd, @tick, {}, {0xe}, @addr={0x1, 0xbf}}], 0x1c) 841.477269ms ago: executing program 7 (id=1559): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000100)={0x38, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x0) 732.924772ms ago: executing program 7 (id=1561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000005000000080000000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 732.365062ms ago: executing program 0 (id=1562): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cfe300401c1b271b00000000000109022d00010000100909040000010300000009210000ff0122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0x2, "901af3e1"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x5, "04"}, @local=@item_012={0x1, 0x2, 0x2, "d0"}, @local=@item_012={0x1, 0x2, 0x0, '\x00'}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @main=@item_4={0x3, 0x0, 0xb, '\t\x00'}, @local=@item_012={0x1, 0x2, 0x2, 'K'}]}}, 0x0}, 0x0) 644.396484ms ago: executing program 8 (id=1563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4880}, 0x2404c810) 644.247574ms ago: executing program 7 (id=1564): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"a2e3ad2109c752f91b5d470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6ddc4d06e00000000f9db2a7869d85864056526f889af3760fd1980572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988077b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19c51432c6f14c27693102a4ed84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdbfa629e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x1000}}, 0x1060) 597.810505ms ago: executing program 8 (id=1565): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x6, 0x4) recvfrom(r0, 0x0, 0x32, 0x1, 0x0, 0x21) 544.452447ms ago: executing program 6 (id=1566): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a42c5c3e0b0d5e9876a2e1318738468cb0ffaeec555a228e611addbaf967aee82d0acebe9d4121947d7173b0982fae0357bc383062c0a053c458a54a10a30ff98396cd78e20692aca5224e0028321dd5196afd73f68a8d01b8dc694b5c7055ea6b7ea93127abc51df2a21e424deaec8761348ae049"], &(0x7f0000000140)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000400)=@generic={0x0, r0}, 0x18) 472.316778ms ago: executing program 8 (id=1567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x54, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}}, 0x0) 472.130118ms ago: executing program 7 (id=1568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5c050000", @ANYRES16=r1, @ANYBLOB="010028bd700000000000010000002c0508803000008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c06000500f9ff00004c00008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff24000200491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675cac0400800600050003000000200004000a000009000000070000000000000000000000000000000003000000b8030980ac000080060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200e000000105000300030000000600010002000000080002000a0101020500030002000000060001000200000008000200e0000001050003000200000001000080060001000a00000014000200fe8800000000000000000000000001010500030003000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200000000000000000000000000000000000500030000000000060001000a000000140002000000000000000000000000000000000005000300010000000600010002000000080002000000000005000300020000003c010080060001000a0000001400020000000000000000000000ffffe00000010500030003000000060001000200000008000200ac1e00010500030000000000060001000200000008000200ac1414bb0500030001000000060001000a00000014000200200100000000000000000000000000000500030003000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000200000008000200e00000020500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200640101000500030001000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000400008028000080060001000a0000001400020020010000000000000000000000000001050003000000000040000080060001000200000008000200000000000500030001000000060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200000008000200ac1e00010500030002000000a0000080060001000a00000014000200fc02000000000000000000000000000005000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a000000140002000000000000000000000000000000000105000300010000000600010002000000080002000a01010105000300030000001400040002004e227f000001000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002000c000227734136bbd051f5248b73349484079ac37330b66c8c2d38b23324019124000200f1448a8e528a999aa0105b52a5c9c4640383354baf19b5f39af29b59422afd5524000200e7ff7701b926810da1b5902e7a364627b7e5194a545926646ae03e188b880fed2400020067145cfa4d7b699c1e0846a50afd9ba74e30480f6df0e68218cc108c2128c513060006004e21000014000200776730"], 0x55c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) 447.236549ms ago: executing program 6 (id=1569): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setuid(0xee01) ioctl$sock_inet_SIOCSARP(r0, 0x8917, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 398.29426ms ago: executing program 8 (id=1570): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000080)='trans=tcp,') 396.51409ms ago: executing program 7 (id=1571): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x207, &(0x7f0000000080)={[{@bsdgroups}, {@jqfmt_vfsv1}, {@noinit_itable}, {@nodiscard}, {@noquota}]}, 0x5, 0x481, &(0x7f0000000880)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x208c828, 0x0) 277.882933ms ago: executing program 6 (id=1572): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 275.386283ms ago: executing program 8 (id=1573): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000600)={&(0x7f0000000140), 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x4, 0x0, 0x25ce1832, {}, {}, {0x2, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x2, 0x3, 0x0, 0x0, "125f627744144f70"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x4048840) 112.383947ms ago: executing program 6 (id=1574): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x1}) 106.575137ms ago: executing program 6 (id=1575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323900080003400000000720000480060001000002000005000200110000000c000300080001000000001e14000000110001"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 23.348889ms ago: executing program 8 (id=1576): syz_mount_image$ext4(&(0x7f0000002d80)='ext4\x00', &(0x7f0000002dc0)='./file1\x00', 0x21081e, &(0x7f0000002e00)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000002e40)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHFZDkj8iEAbJA5TzXiS9WbtTbRJ7Cj+fKTRzJvnne97a817mW9ivwBG1s2I2I+IiYj4MCJm8/OFfIv3Olv6ukcHD1YODx6sFCJJPvhXIatPz0XXv0ndyK9ZjogffS/ip4Wn47Z29zaW6/Xadl6ebze25lu7e3fWG8trtbXaZrW6tLi08M7dt6sX1tfXGhP50Vcf/nH/Wz9PmzWTn+nux0XqdL10HCc1HhE/uIxgQzCW92di2A3huRQj4uWIeD27/2djLHs3AYDrLElmI5ntLgMA110xy4EVipU8FzATxWKl0snhvRLTxXqz1b59v7mzudrJlc1FqXh/vV5byHOFc1EqpOXF7PhxuXqifDciXoqIX05OZeXKSrO+OswffABghN04Mf//d7Iz/wMA11x52A0AAAbO/A8Ao8f8DwCjx/wPAKOnM/9PDbsZAMAAef4HgNFj/geAkfLD999Pt+Qw//7r1Y92dzaaH91ZrbU2Ko2dlcpKc3urstZsrmXf2dM47Xr1ZnNr8a3Y+Xju21ut9nxrd+9eo7mz2b6Xfa/3vVope9X+AHoGAPTz0muf/aWQzsjvTmVbdK3lUBpqy4DLVhx2A4ChGRt2A4ChsdoXjK5zPONLD8A10WOJ3ieUe31AKEmS5PKaBFyyW1+S/4dR1ZX/91fAMGLk/2F0yf/D6EqSwlnX/I+zvhAAuNrk+IE+v/9/Od//Lv/lwE9WT77i09Ov7TMGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXFdH6/9W8nU6ZqJYrFQiXoiIuSgV7q/XawsR8WJE/HmyNJmWF4fcZgDgvIp/L+Trf92afXPmiapXbxwfTkTEz379wa8+Xm63t/8UMVH49+TR+fan+fnq4FsPAJzuaJ7O9l0P8o8OHqwcbYNszz++GxHlTvzDg4k4PI4/HuPZvhyliJj+TyEvdxS6chfnsf9JRHyxV/8LMZPlQDorn56Mn8Z+YaDxi0/EL2Z1nX36f/GFC2gLjJrP0vHnvV73XzFuZvve9385G6HOLx//0kutHGZj4OP4R+PfWJ/x7+ZZY7z1h+93jqaervsk4svjEUexD7vGn6P4hT7x3zxj/L9+5dXX+9Ulv4m4Fb3jd8eabze25lu7e3fWG8trtbXaZrW6tLi08M7dt6vzWY56vjMbJD0mhX++e/vFfvHT/k/3iV8+pf9fP2P/f/v/D3/8tWfE/+YbveIX45VnxE+fzL9xxvjL078v96tL46/26f9p7//tM8RO56eHf9t7atlwAGB4Wrt7G8v1em37Gh+kP6tcgWY4OP9BXOG38juDijURvat+8Ubnnj5RlSTPFavfiHERWTfgKji+6SPif8NuDAAAAAAAAAAAAAAA0NMgPrE07D4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwfX0eAAD//yjlzow=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000003380)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000033c0)={0x2, 0x2, 0x246, 0x10007, 0x5, 0xfffffbfffffffff8, 0x1, 0x9, 0xf6b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./debug\x00', 0x1ff) 0s ago: executing program 7 (id=1577): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x5, 0x0, &(0x7f0000000140)) kernel console output (not intermixed with test programs): 50:50:50:50 [ 107.834824][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.932566][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.940483][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.017893][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.122008][ T5501] sp0: Synchronizing with TNC [ 108.499885][ T144] device hsr_slave_0 left promiscuous mode [ 108.507253][ T5486] loop0: detected capacity change from 0 to 32768 [ 108.523265][ T144] device hsr_slave_1 left promiscuous mode [ 108.539142][ T5521] loop8: detected capacity change from 0 to 128 [ 108.550085][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.577070][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.627675][ T5521] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.628242][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.665044][ T5486] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 108.669200][ T5521] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.709789][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.755521][ T144] device bridge_slave_1 left promiscuous mode [ 108.778910][ T5493] loop7: detected capacity change from 0 to 32768 [ 108.786026][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.822966][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 108.845898][ T144] device bridge_slave_0 left promiscuous mode [ 108.866263][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.908828][ T5538] capability: warning: `syz.5.360' uses deprecated v2 capabilities in a way that may be insecure [ 108.928218][ T5493] JBD2: Ignoring recovery information on journal [ 109.029985][ T144] device veth1_macvtap left promiscuous mode [ 109.058744][ T144] device veth0_macvtap left promiscuous mode [ 109.065077][ T144] device veth1_vlan left promiscuous mode [ 109.071041][ T144] device veth0_vlan left promiscuous mode [ 109.081595][ T5493] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 109.255444][ T5545] netlink: 36 bytes leftover after parsing attributes in process `syz.8.361'. [ 109.312683][ T5545] netlink: 176 bytes leftover after parsing attributes in process `syz.8.361'. [ 109.359282][ T5197] ocfs2: Unmounting device (7,7) on (node local) [ 109.557003][ T5558] loop5: detected capacity change from 0 to 512 [ 109.686979][ T5558] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.726761][ T144] team0 (unregistering): Port device team_slave_1 removed [ 109.748159][ T5558] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 109.756999][ T144] team0 (unregistering): Port device team_slave_0 removed [ 109.801806][ T5558] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3894: comm syz.5.367: Allocating blocks 42-43 which overlap fs metadata [ 109.821788][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.878399][ T5558] Quota error (device loop5): write_blk: dquota write failed [ 109.890177][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.908892][ T5558] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 109.953542][ T5558] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.367: Failed to acquire dquot type 0 [ 109.997021][ T5558] EXT4-fs (loop5): 1 truncate cleaned up [ 109.998366][ T5568] loop7: detected capacity change from 0 to 32768 [ 110.010337][ T5558] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,norecovery,acl,resgid=0x000000000000ee01,norecovery,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 110.071452][ T5568] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.364 (5568) [ 110.119964][ T5568] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 110.137992][ T144] bond0 (unregistering): Released all slaves [ 110.138902][ T5568] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 110.245977][ T5568] BTRFS info (device loop7): use zstd compression, level 3 [ 110.271502][ T5568] BTRFS info (device loop7): using free space tree [ 110.304887][ T5568] BTRFS info (device loop7): has skinny extents [ 110.380895][ T5575] netlink: 36 bytes leftover after parsing attributes in process `syz.6.371'. [ 110.411125][ T5575] netlink: 36 bytes leftover after parsing attributes in process `syz.6.371'. [ 110.573259][ T5590] loop5: detected capacity change from 0 to 1024 [ 110.617958][ T5590] hfsplus: catalog record size mismatch (type 1, got 46, expected 88) [ 110.681422][ T5568] BTRFS info (device loop7): enabling ssd optimizations [ 111.095759][ T5568] BTRFS warning (device loop7): failed to trim 1 device(s), last error -512 [ 111.286988][ T5630] loop6: detected capacity change from 0 to 512 [ 111.370778][ T5630] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 111.458645][ T5630] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 111.521487][ T5630] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 111.577454][ T5630] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 111.664160][ T5630] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 111.687137][ T5630] EXT4-fs (loop6): orphan cleanup on readonly fs [ 111.753166][ T5630] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.386: bg 0: block 34: padding at end of block bitmap is not set [ 111.822815][ T5630] Quota error (device loop6): write_blk: dquota write failed [ 111.832113][ T5644] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes [ 111.950787][ T5630] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 111.980660][ T5630] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.386: Failed to acquire dquot type 1 [ 112.017367][ T5601] loop0: detected capacity change from 0 to 32768 [ 112.048019][ T5630] EXT4-fs (loop6): 1 truncate cleaned up [ 112.059557][ T5648] loop5: detected capacity change from 0 to 1024 [ 112.088488][ T5630] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,bsddf,nodiscard,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,errors=continue,nouid32,nodiscard,abort,usrjquota=,lazytime,,errors=continue. Quota mode: writeback. [ 112.117448][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.164555][ T5648] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 112.289503][ T5601] XFS (loop0): Mounting V5 Filesystem [ 112.444270][ T5601] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 112.524742][ T5601] XFS (loop0): Tail block (0x29) overwrite detected. Updated to 0x30 [ 112.629767][ T5601] XFS (loop0): Ending clean mount [ 112.678198][ T5632] loop8: detected capacity change from 0 to 32768 [ 112.776645][ T5632] JBD2: Ignoring recovery information on journal [ 112.888761][ T4187] XFS (loop0): Unmounting Filesystem [ 112.935542][ T5683] loop6: detected capacity change from 0 to 512 [ 112.992578][ T5632] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 113.170872][ T4192] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 113.327908][ T5276] ocfs2: Unmounting device (7,8) on (node local) [ 113.610895][ T4192] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.650664][ T4192] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.716308][ T4192] usb 8-1: config 0 interface 0 has no altsetting 0 [ 113.738575][ T4192] usb 8-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 113.784766][ T4192] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.844262][ T4192] usb 8-1: config 0 descriptor?? [ 114.065289][ T5724] loop8: detected capacity change from 0 to 64 [ 114.303615][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 114.331799][ T4192] hid (null): nested delimiters [ 114.339583][ T4192] hid-multitouch 0003:0EEF:72C4.0005: nested delimiters [ 114.370570][ T4192] hid-multitouch 0003:0EEF:72C4.0005: item 0 1 2 10 parsing failed [ 114.408579][ T4192] hid-multitouch: probe of 0003:0EEF:72C4.0005 failed with error -22 [ 114.436652][ T5728] loop6: detected capacity change from 0 to 4096 [ 114.581899][ T4192] usb 8-1: USB disconnect, device number 2 [ 114.638703][ T5728] ntfs: volume version 3.1. [ 114.757474][ T5747] netlink: 'syz.0.420': attribute type 24 has an invalid length. [ 114.762682][ T5728] ntfs: (device loop6): ntfs_read_locked_inode(): Inode is not in use! [ 114.801156][ T5728] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x20 as bad. Run chkdsk. [ 114.933404][ T4541] ntfs: (device loop6): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 115.105176][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.152931][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.222266][ T5731] comedi comedi1: reset error (fatal) [ 115.224248][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.448623][ T5740] loop8: detected capacity change from 0 to 32768 [ 115.712200][ T5740] XFS (loop8): Mounting V5 Filesystem [ 115.944251][ T5740] XFS (loop8): Ending clean mount [ 116.169941][ T5276] XFS (loop8): Unmounting Filesystem [ 116.291316][ T5768] loop7: detected capacity change from 0 to 40427 [ 116.361170][ T5768] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x4 [ 116.402192][ T5768] F2FS-fs (loop7): invalid crc value [ 116.475234][ T5768] F2FS-fs (loop7): Found nat_bits in checkpoint [ 116.594157][ T5820] netlink: 104 bytes leftover after parsing attributes in process `syz.5.443'. [ 116.693867][ T5768] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 116.733853][ T5768] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 116.844468][ T5834] loop5: detected capacity change from 0 to 64 [ 116.864825][ T5768] attempt to access beyond end of device [ 116.864825][ T5768] loop7: rw=2049, want=45104, limit=40427 [ 116.912003][ T5837] loop0: detected capacity change from 0 to 256 [ 117.042220][ T5837] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 117.049768][ T5843] loop6: detected capacity change from 0 to 1024 [ 117.387049][ T4192] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 117.433934][ T5856] usb usb7: usbfs: process 5856 (syz.6.455) did not claim interface 0 before use [ 117.508736][ T5861] capability: warning: `syz.5.457' uses 32-bit capabilities (legacy support in use) [ 117.658825][ T5868] loop6: detected capacity change from 0 to 8 [ 117.810246][ T5868] SQUASHFS error: lzo decompression failed, data probably corrupt [ 117.838573][ T5868] SQUASHFS error: Failed to read block 0x1c0: -5 [ 117.856025][ T5868] SQUASHFS error: Unable to read metadata cache entry [1be] [ 118.000843][ T4192] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 118.029003][ T4192] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.065606][ T4192] usb 9-1: Product: syz [ 118.090392][ T4192] usb 9-1: Manufacturer: syz [ 118.101330][ T4192] usb 9-1: SerialNumber: syz [ 118.133824][ T4192] usb 9-1: config 0 descriptor?? [ 118.152774][ T5884] loop5: detected capacity change from 0 to 4096 [ 118.203073][ T4192] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 118.225110][ T5897] Zero length message leads to an empty skb [ 118.254268][ T5898] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.366726][ T5884] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 118.417282][ T5884] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12) [ 118.476836][ T5884] Remounting filesystem read-only [ 118.501105][ T5884] NILFS (loop5): error -5 truncating bmap (ino=12) [ 118.589765][ T4372] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 118.648583][ T4192] gspca_stk1135: reg_w 0x0 err -71 [ 118.656639][ T4192] gspca_stk1135: serial bus timeout: status=0x00 [ 118.704337][ T4192] gspca_stk1135: Sensor write failed [ 118.709698][ T4192] gspca_stk1135: serial bus timeout: status=0x00 [ 118.746829][ T4192] gspca_stk1135: Sensor write failed [ 118.759473][ T4192] gspca_stk1135: serial bus timeout: status=0x00 [ 118.803240][ T4192] gspca_stk1135: Sensor read failed [ 118.840134][ T4192] gspca_stk1135: serial bus timeout: status=0x00 [ 118.856125][ T4192] gspca_stk1135: Sensor read failed [ 118.873755][ T4192] gspca_stk1135: Detected sensor type unknown (0x0) [ 118.887832][ T4192] gspca_stk1135: serial bus timeout: status=0x00 [ 118.895197][ T4192] gspca_stk1135: Sensor read failed [ 118.900654][ T4192] gspca_stk1135: serial bus timeout: status=0x00 [ 118.907141][ T4192] gspca_stk1135: Sensor read failed [ 118.919050][ T4192] gspca_stk1135: serial bus timeout: status=0x00 [ 118.925584][ T4192] gspca_stk1135: Sensor write failed [ 118.939054][ T4192] gspca_stk1135: serial bus timeout: status=0x00 [ 118.945612][ T4192] gspca_stk1135: Sensor write failed [ 118.957571][ T4192] stk1135: probe of 9-1:0.0 failed with error -71 [ 118.975131][ T4192] usb 9-1: USB disconnect, device number 2 [ 119.204339][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.480'. [ 119.378246][ T5916] loop7: detected capacity change from 0 to 32768 [ 119.394047][ T5909] loop6: detected capacity change from 0 to 32768 [ 119.471218][ T5909] XFS: ikeep mount option is deprecated. [ 119.546896][ T5916] XFS (loop7): Mounting V5 Filesystem [ 119.609940][ T5909] XFS (loop6): Mounting V5 Filesystem [ 119.682983][ T5975] loop5: detected capacity change from 0 to 256 [ 119.797814][ T5909] XFS (loop6): Ending clean mount [ 119.800051][ T5916] XFS (loop7): Ending clean mount [ 119.816557][ T5909] XFS (loop6): Quotacheck needed: Please wait. [ 119.846263][ T5979] loop8: detected capacity change from 0 to 512 [ 119.974671][ T5909] XFS (loop6): Quotacheck: Done. [ 119.991183][ T5979] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,barrier=0x0000000000000004,max_batch_time=0x0000000000000d73,nombcache,,errors=continue. Quota mode: none. [ 120.160960][ T5985] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.184124][ T4541] XFS (loop6): Unmounting Filesystem [ 120.199753][ T5985] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.262050][ T5197] XFS (loop7): Unmounting Filesystem [ 120.317969][ T5992] netlink: 'syz.8.496': attribute type 12 has an invalid length. [ 120.559347][ T5996] FAT-fs (loop5): Directory bread(block 64) failed [ 120.578569][ T5996] FAT-fs (loop5): Directory bread(block 65) failed [ 120.603187][ T5996] FAT-fs (loop5): Directory bread(block 66) failed [ 120.639410][ T5996] FAT-fs (loop5): Directory bread(block 67) failed [ 120.669834][ T5996] FAT-fs (loop5): Directory bread(block 68) failed [ 120.678427][ T5996] FAT-fs (loop5): Directory bread(block 69) failed [ 120.687255][ T5996] FAT-fs (loop5): Directory bread(block 70) failed [ 120.698121][ T5996] FAT-fs (loop5): Directory bread(block 71) failed [ 120.737593][ T5996] FAT-fs (loop5): Directory bread(block 72) failed [ 120.762612][ T5996] FAT-fs (loop5): Directory bread(block 73) failed [ 120.820784][ T6006] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 121.216207][ T6022] EXT4-fs (loop5): inline encryption not supported [ 121.223043][ T6022] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.249206][ T6020] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.260629][ T4192] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 121.278685][ T6022] EXT4-fs (loop5): orphan cleanup on readonly fs [ 121.280261][ T6024] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 121.290158][ T6022] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3894: comm syz.5.507: Allocating blocks 41-42 which overlap fs metadata [ 121.318678][ T6022] Quota error (device loop5): write_blk: dquota write failed [ 121.326289][ T6022] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 121.336333][ T6022] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.507: Failed to acquire dquot type 0 [ 121.350059][ T6022] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 121.367284][ T6022] EXT4-fs (loop5): 1 truncate cleaned up [ 121.373202][ T6022] EXT4-fs (loop5): pa ffff8880268fbd20: logic 1, phys. 41, len 23 [ 121.381516][ T6022] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 121.392724][ T6022] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,noblock_validity,noquota,nolazytime,nodelalloc,errors=continue,inlinecrypt,i_version,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 121.521107][ T4192] usb 1-1: Using ep0 maxpacket: 32 [ 121.563179][ T6032] set_capacity_and_notify: 5 callbacks suppressed [ 121.563196][ T6032] loop8: detected capacity change from 0 to 16 [ 121.653717][ T6032] erofs: (device loop8): mounted with root inode @ nid 36. [ 121.686625][ T6037] loop6: detected capacity change from 0 to 512 [ 121.800924][ T6037] EXT4-fs (loop6): Test dummy encryption mode enabled [ 121.819399][ T6035] loop7: detected capacity change from 0 to 4096 [ 121.827492][ T6037] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 121.840357][ T4192] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 121.920052][ T6044] loop5: detected capacity change from 0 to 128 [ 121.920543][ T4192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.936043][ T6037] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 121.943830][ T6037] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,barrier=0x0000000000000005,noauto_da_alloc,barrier=0x000000000000007f,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 121.965210][ T6043] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.994134][ T6035] NILFS (loop7): nilfs_palloc_freev (ino=3): entry number 127 already freed [ 122.026890][ T6044] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.027845][ T6035] NILFS (loop7): nilfs_sufile_do_free: segment 9 is already clean [ 122.066154][ T4192] usb 1-1: Product: syz [ 122.070350][ T6044] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.157365][ T4192] usb 1-1: Manufacturer: syz [ 122.180691][ T4192] usb 1-1: SerialNumber: syz [ 122.192585][ T6044] EXT4-fs (loop5): re-mounted. Opts: . Quota mode: none. [ 122.212262][ T6052] loop8: detected capacity change from 0 to 512 [ 122.227648][ T4192] usb 1-1: config 0 descriptor?? [ 122.247592][ T6052] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 122.270292][ T6044] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: none. [ 122.356912][ T6037] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 122.594827][ T6069] ip_tables: iptables: counters copy to user failed while replacing table [ 122.680975][ T4329] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 122.760740][ T4192] airspy 1-1:0.0: Board ID: 00 [ 122.765726][ T4192] airspy 1-1:0.0: Firmware version: [ 122.981067][ T4192] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 123.019878][ T4192] airspy 1-1:0.0: Registered as swradio24 [ 123.039499][ T4192] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 123.047901][ T6102] loop6: detected capacity change from 0 to 8 [ 123.062916][ T6098] loop5: detected capacity change from 0 to 2048 [ 123.071142][ T4192] usb 1-1: USB disconnect, device number 6 [ 123.120788][ T4329] usb 8-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 123.191252][ T6098] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.209126][ T6102] SQUASHFS error: Failed to read block 0x285: -5 [ 123.256123][ T6102] SQUASHFS error: Unable to read metadata cache entry [283] [ 123.263759][ T6102] SQUASHFS error: Unable to read directory block [283:0] [ 123.309587][ T6098] EXT4-fs error (device loop5): ext4_search_dir:1551: inode #12: block 9: comm syz.5.534: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 123.350827][ T4329] usb 8-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 123.373791][ T4329] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.410580][ T4329] usb 8-1: Product: syz [ 123.415856][ T4329] usb 8-1: Manufacturer: syz [ 123.434392][ T4329] usb 8-1: SerialNumber: syz [ 123.434958][ T6114] syz.8.538[6114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.473982][ T6114] syz.8.538[6114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.543031][ T4329] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 123.613681][ T4329] dvb-usb: bulk message failed: -22 (3/0) [ 123.673628][ T4329] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.721448][ T4329] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 123.762363][ T6059] dvb-usb: bulk message failed: -22 (2/0) [ 123.768592][ T6059] dvb-usb: bulk message failed: -22 (4/0) [ 123.781164][ T4329] usb 8-1: media controller created [ 123.824653][ T4329] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.825448][ T6131] loop0: detected capacity change from 0 to 2048 [ 123.911357][ T6131] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 123.958274][ T4329] DVB: Unable to find symbol mt352_attach() [ 123.970457][ T6139] loop5: detected capacity change from 0 to 1024 [ 123.978558][ T6131] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.978812][ T4329] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 124.011022][ T6139] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 124.091183][ T4329] dvb-usb: bulk message failed: -22 (3/0) [ 124.130592][ T4329] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 124.161892][ T4329] usb 8-1: USB disconnect, device number 3 [ 124.210776][ T4192] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 124.333145][ T4329] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 124.340452][ T6153] loop0: detected capacity change from 0 to 512 [ 124.456572][ T6153] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 124.506251][ T6153] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.642017][ T6153] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 124.650865][ T4192] usb 7-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.676678][ T4192] usb 7-1: config 0 interface 0 has no altsetting 0 [ 124.685781][ T4192] usb 7-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 124.695200][ T4192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.717912][ T6176] erofs: (device loop7): mounted with root inode @ nid 36. [ 124.720348][ T4192] usb 7-1: config 0 descriptor?? [ 124.741692][ T6175] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 125.126214][ T6191] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.168236][ T6193] tipc: Started in network mode [ 125.172997][ T6191] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.214538][ T6193] tipc: Node identity 2e7766554433221100ffeeddccbbaa99, cluster identity 4711 [ 125.269302][ T6191] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: none. [ 125.297153][ T4192] wacom 0003:056A:0016.0006: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 125.322307][ T4192] wacom 0003:056A:0016.0006: hidraw0: USB HID v10.01 Device [HID 056a:0016] on usb-dummy_hcd.6-1/input0 [ 125.345641][ T4192] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0016.0006/input/input6 [ 125.350935][ T6203] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.424746][ T6203] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.457912][ T6191] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none. [ 125.622871][ T7] usb 7-1: USB disconnect, device number 2 [ 125.697450][ T6213] fido_id[6213]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 126.296917][ T6244] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.351184][ T6244] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.470611][ T6251] EXT4-fs (loop6): Ignoring removed oldalloc option [ 126.477330][ T6251] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 126.517134][ T6251] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.589: invalid indirect mapped block 4294967295 (level 1) [ 126.662411][ T6251] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.589: invalid indirect mapped block 4294967295 (level 1) [ 126.666372][ T6245] set_capacity_and_notify: 8 callbacks suppressed [ 126.666386][ T6245] loop7: detected capacity change from 0 to 40427 [ 126.717060][ T6251] EXT4-fs (loop6): 2 truncates cleaned up [ 126.726763][ T6251] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=,oldalloc,jqfmt=vfsv0,i_version,,errors=continue. Quota mode: writeback. [ 126.756171][ T6251] EXT4-fs error (device loop6): __ext4_iget:4919: inode #13: block 32768: comm syz.6.589: invalid block [ 126.774817][ T6245] F2FS-fs (loop7): build fault injection attr: rate: 14, type: 0x1ffff [ 126.810899][ T6245] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x30e4 [ 126.841551][ T6245] F2FS-fs (loop7): invalid crc value [ 126.971450][ T6245] F2FS-fs (loop7): Found nat_bits in checkpoint [ 126.998706][ T6272] netlink: 32 bytes leftover after parsing attributes in process `syz.8.596'. [ 127.091822][ T6245] F2FS-fs (loop7) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 127.170857][ T6283] netlink: 16 bytes leftover after parsing attributes in process `syz.5.608'. [ 127.176790][ T6245] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 127.190666][ T6283] netlink: 'syz.5.608': attribute type 1 has an invalid length. [ 127.350051][ T6297] loop5: detected capacity change from 0 to 1024 [ 127.406378][ T6297] EXT4-fs (loop5): Ignoring removed bh option [ 127.426362][ T6300] loop0: detected capacity change from 0 to 64 [ 127.433534][ T6297] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.587362][ T6297] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 127.881178][ T4372] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 127.954807][ T6319] loop7: detected capacity change from 0 to 256 [ 128.091270][ T6319] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x596330fe, utbl_chksum : 0xe619d30d) [ 128.127977][ T6326] netlink: 80 bytes leftover after parsing attributes in process `syz.0.624'. [ 128.643393][ T6360] tipc: Failed to obtain node identity [ 128.648931][ T6360] tipc: Enabling of bearer rejected, failed to enable media [ 128.870808][ T6375] netlink: 'syz.6.631': attribute type 4 has an invalid length. [ 129.069021][ T6390] loop0: detected capacity change from 0 to 256 [ 129.130365][ T6390] exfat: Deprecated parameter 'namecase' [ 129.158820][ T6390] exfat: Deprecated parameter 'namecase' [ 129.226849][ T6390] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 129.329304][ T6343] loop8: detected capacity change from 0 to 40427 [ 129.361427][ T6343] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x1ffff [ 129.443887][ T6343] F2FS-fs (loop8): invalid crc value [ 129.521870][ T6343] F2FS-fs (loop8): Found nat_bits in checkpoint [ 129.663502][ T6426] netlink: 'syz.0.662': attribute type 4 has an invalid length. [ 129.685953][ T6343] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 129.878840][ T5276] attempt to access beyond end of device [ 129.878840][ T5276] loop8: rw=2049, want=45104, limit=40427 [ 130.113852][ T6454] loop6: detected capacity change from 0 to 2048 [ 130.128918][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 130.170180][ T6454] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 130.217228][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop6 [ 130.234979][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 130.244397][ T6462] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.306339][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 130.459135][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 130.488094][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 130.507780][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 130.565255][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 130.833635][ T6482] ip_tables: iptables: counters copy to user failed while replacing table [ 130.931111][ T6450] loop0: detected capacity change from 0 to 32768 [ 131.018579][ T26] audit: type=1800 audit(1791879466.795:6): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.660" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 131.263791][ T6510] loop6: detected capacity change from 0 to 256 [ 131.329299][ T6510] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 131.469392][ T26] audit: type=1800 audit(1791879467.245:7): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.685" name="file1" dev="loop6" ino=1048719 res=0 errno=0 [ 131.562124][ T6528] tipc: Started in network mode [ 131.570940][ T6528] tipc: Node identity , cluster identity 4711 [ 131.577096][ T6528] tipc: Failed to set node id, please configure manually [ 131.641642][ T6528] tipc: Enabling of bearer rejected, failed to enable media [ 131.835004][ T6542] loop5: detected capacity change from 0 to 1024 [ 131.986193][ T6547] loop0: detected capacity change from 0 to 512 [ 132.094894][ T6547] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 132.146648][ T6547] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 132.237987][ T6547] EXT4-fs (loop0): 1 truncate cleaned up [ 132.279977][ T6547] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 132.472009][ T6566] loop5: detected capacity change from 0 to 256 [ 132.599233][ T6566] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 132.705806][ T26] audit: type=1800 audit(1791879468.485:8): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.704" name="file1" dev="loop5" ino=1048720 res=0 errno=0 [ 132.727602][ T6538] loop6: detected capacity change from 0 to 32768 [ 132.765987][ T6578] loop7: detected capacity change from 0 to 256 [ 132.838700][ T6578] exfat: Deprecated parameter 'utf8' [ 132.873573][ T26] audit: type=1800 audit(1791879468.655:9): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.696" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 132.898695][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.905784][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.906408][ T6582] tipc: Enabling of bearer rejected, failed to enable media [ 132.915891][ T6578] exfat: Deprecated parameter 'namecase' [ 132.938247][ T6578] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 133.064221][ T26] audit: type=1804 audit(1791879468.845:10): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.707" name=2F6E6577726F6F742F35342FE91F7189591E9233614B2F66696C6530 dev="loop7" ino=1048721 res=1 errno=0 [ 133.088265][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.251310][ T6543] loop8: detected capacity change from 0 to 40427 [ 133.365750][ T6543] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x4 [ 133.402655][ T6543] F2FS-fs (loop8): invalid crc value [ 133.423595][ T6543] F2FS-fs (loop8): Found nat_bits in checkpoint [ 133.435467][ T6603] device batadv0 entered promiscuous mode [ 133.500939][ T6603] device macvlan2 entered promiscuous mode [ 133.507914][ T6603] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 133.531667][ T6608] loop6: detected capacity change from 0 to 512 [ 133.560894][ T6603] device batadv0 left promiscuous mode [ 133.598596][ T6608] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 133.623169][ T6543] F2FS-fs (loop8): Cannot turn on quotas: -2 on 1 [ 133.645567][ T6608] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 133.667938][ T6543] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 133.687075][ T6608] EXT4-fs (loop6): 1 truncate cleaned up [ 133.694120][ T6608] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 133.752905][ T6617] netlink: 52 bytes leftover after parsing attributes in process `syz.5.718'. [ 133.760603][ T4231] Bluetooth: hci0: command 0x0411 tx timeout [ 133.938880][ T6543] attempt to access beyond end of device [ 133.938880][ T6543] loop8: rw=2049, want=45104, limit=40427 [ 133.973480][ T6619] loop5: detected capacity change from 0 to 4096 [ 134.080955][ T6619] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 134.157431][ T6619] ntfs3: loop5: failed to convert "0000" to cp949 [ 134.191561][ T6619] ntfs3: loop5: failed to convert name for inode 1e. [ 134.544881][ T6652] netlink: 52 bytes leftover after parsing attributes in process `syz.7.730'. [ 134.744005][ T6665] CUSE: DEVNAME unspecified [ 134.854425][ T6674] CUSE: DEVNAME unspecified [ 135.091980][ T6693] netlink: 184 bytes leftover after parsing attributes in process `syz.0.757'. [ 135.554104][ T6724] loop7: detected capacity change from 0 to 256 [ 135.611987][ T6724] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 135.987341][ T6757] netlink: 184 bytes leftover after parsing attributes in process `syz.7.764'. [ 137.067096][ T6790] loop6: detected capacity change from 0 to 32768 [ 137.133886][ T6790] XFS (loop6): Mounting V5 Filesystem [ 137.231837][ T6790] XFS (loop6): Ending clean mount [ 137.263724][ T6800] loop0: detected capacity change from 0 to 32768 [ 137.267560][ T6790] XFS (loop6): Quotacheck needed: Please wait. [ 137.318679][ T6790] XFS (loop6): Quotacheck: Done. [ 137.431673][ T4541] XFS (loop6): Unmounting Filesystem [ 137.585905][ T6832] loop8: detected capacity change from 0 to 4096 [ 137.666476][ T6839] loop7: detected capacity change from 0 to 64 [ 137.749429][ T6841] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 137.764249][ T6832] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 137.840464][ T6841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.942756][ T6832] ntfs3: loop8: failed to convert "0000" to cp949 [ 137.983087][ T6832] ntfs3: loop8: failed to convert name for inode 1e. [ 138.075747][ T6846] loop7: detected capacity change from 0 to 2048 [ 138.174627][ T6846] loop7: p1 < > p2 p3 < > p4 < p5 > [ 138.190712][ T6846] loop7: partition table partially beyond EOD, truncated [ 138.212740][ T6846] loop7: p1 start 3405774849 is beyond EOD, truncated [ 138.251743][ T6846] loop7: p3 start 4225 is beyond EOD, truncated [ 138.525076][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 138.540675][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 138.590703][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 138.594796][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.6.800'. [ 138.680247][ T6880] loop5: detected capacity change from 0 to 64 [ 138.688493][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.6.800'. [ 138.722104][ T6874] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 138.765124][ T6872] loop8: detected capacity change from 0 to 4096 [ 138.827528][ T6872] ntfs3: Invalid value for uid. [ 139.011315][ T6896] netlink: 'syz.7.807': attribute type 12 has an invalid length. [ 139.146509][ T6903] netlink: 'syz.6.822': attribute type 12 has an invalid length. [ 139.232391][ T6901] loop5: detected capacity change from 0 to 2048 [ 139.239730][ T6908] loop0: detected capacity change from 0 to 1024 [ 139.309421][ T6913] loop6: detected capacity change from 0 to 2048 [ 139.318758][ T4178] loop5: p1 < > p2 p3 < > p4 < p5 > [ 139.333454][ T4178] loop5: partition table partially beyond EOD, truncated [ 139.360932][ T4178] loop5: p1 start 3405774849 is beyond EOD, truncated [ 139.388537][ T4178] loop5: p3 start 4225 is beyond EOD, truncated [ 139.445217][ T6901] loop5: p1 < > p2 p3 < > p4 < p5 > [ 139.480728][ T6901] loop5: partition table partially beyond EOD, truncated [ 139.502256][ T6913] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 139.531289][ T6901] loop5: p1 start 3405774849 is beyond EOD, truncated [ 139.556617][ T6901] loop5: p3 start 4225 is beyond EOD, truncated [ 139.616494][ T6913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.699861][ T6917] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 139.892789][ T6917] ntfs3: loop8: failed to convert "0080" to koi8-ru [ 139.912044][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 139.912166][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 139.948869][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 139.991117][ T6917] ntfs3: loop8: failed to convert name for inode 1e. [ 140.609498][ T6972] loop6: p1 < > p2 p3 < > p4 < p5 > [ 140.615812][ T6972] loop6: partition table partially beyond EOD, truncated [ 140.648744][ T6972] loop6: p1 start 3405774849 is beyond EOD, truncated [ 140.680661][ T6972] loop6: p3 start 4225 is beyond EOD, truncated [ 142.008039][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.851'. [ 142.093874][ T6974] set_capacity_and_notify: 2 callbacks suppressed [ 142.093894][ T6974] loop0: detected capacity change from 0 to 32768 [ 142.151286][ T7022] loop8: detected capacity change from 0 to 131072 [ 142.246692][ T7022] F2FS-fs (loop8): Wrong SIT boundary, start(1536) end(2560) blocks(2048512) [ 142.255662][ T7022] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 142.267273][ T7022] F2FS-fs (loop8): invalid crc value [ 142.302959][ T7022] F2FS-fs (loop8): Mismatch valid blocks 5 vs. 11 [ 142.309521][ T7022] F2FS-fs (loop8): Failed to initialize F2FS segment manager (-117) [ 142.396499][ T6974] XFS (loop0): Mounting V5 Filesystem [ 142.495128][ T7060] loop5: detected capacity change from 0 to 164 [ 142.606804][ T6974] XFS (loop0): Ending clean mount [ 142.640431][ T7007] loop6: detected capacity change from 0 to 40427 [ 142.656330][ T6974] XFS (loop0): Quotacheck needed: Please wait. [ 142.742941][ T7007] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x1ffff [ 142.751499][ T6974] XFS (loop0): Quotacheck: Done. [ 142.786605][ T7007] F2FS-fs (loop6): invalid crc value [ 142.819790][ T4372] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 142.821032][ T4230] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 142.834249][ T7007] F2FS-fs (loop6): Found nat_bits in checkpoint [ 142.892087][ T4372] ISOFS: unable to read i-node block [ 142.897674][ T4372] ISOFS: unable to read i-node block [ 142.933112][ T4187] XFS (loop0): Unmounting Filesystem [ 143.056591][ T7007] F2FS-fs (loop6): Start checkpoint disabled! [ 143.161079][ T7007] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 143.230775][ T4230] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.250805][ T4230] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.273949][ T4230] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.317791][ T4230] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.347518][ T4230] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.385271][ T4230] usb 9-1: config 0 descriptor?? [ 143.494719][ T7075] block nbd7: NBD_DISCONNECT [ 143.526211][ T144] attempt to access beyond end of device [ 143.526211][ T144] loop6: rw=2049, want=40976, limit=40427 [ 143.750309][ T4392] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.882878][ T4230] plantronics 0003:047F:FFFF.0007: unbalanced delimiter at end of report description [ 143.903478][ T4230] plantronics 0003:047F:FFFF.0007: parse failed [ 143.928900][ T4230] plantronics: probe of 0003:047F:FFFF.0007 failed with error -22 [ 143.992714][ T4392] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.154054][ T13] usb 9-1: USB disconnect, device number 3 [ 144.160342][ T4392] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.303443][ T4392] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.424382][ T7088] loop6: detected capacity change from 0 to 4096 [ 144.453109][ T7088] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 144.618855][ T7088] ntfs3: loop6: failed to convert "c46c" to cp860 [ 145.083639][ T7085] chnl_net:caif_netlink_parms(): no params data found [ 145.094102][ T5643] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 145.511331][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.519365][ T7091] loop0: detected capacity change from 0 to 32768 [ 145.550988][ T7091] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 145.560958][ T5643] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.601200][ T5643] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.616843][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.650537][ T7091] JBD2: Ignoring recovery information on journal [ 145.652568][ T7085] device bridge_slave_0 entered promiscuous mode [ 145.673440][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.691787][ T5643] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 145.723193][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.746795][ T7085] device bridge_slave_1 entered promiscuous mode [ 145.747683][ T5643] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.778419][ T7118] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 145.786615][ T7093] loop8: detected capacity change from 0 to 40427 [ 145.822679][ T7118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.861341][ T5643] usb 7-1: config 0 descriptor?? [ 145.884008][ T7091] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 145.896525][ T7093] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 145.942018][ T7093] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 145.955888][ T7085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.990148][ T7093] F2FS-fs (loop8): invalid crc value [ 146.025601][ T7085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.079333][ T7093] F2FS-fs (loop8): Found nat_bits in checkpoint [ 146.164572][ T7085] team0: Port device team_slave_0 added [ 146.185308][ T7085] team0: Port device team_slave_1 added [ 146.228255][ T7093] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 146.240612][ T7093] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 146.263671][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.297129][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.324730][ T4230] Bluetooth: hci3: command 0x0409 tx timeout [ 146.351008][ T7085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.354311][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 146.379927][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.397269][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.541151][ T7085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.552386][ T5643] hid-led: probe of 0003:27B8:01ED.0008 failed with error -71 [ 146.570973][ T5643] usb 7-1: USB disconnect, device number 3 [ 146.738043][ T7085] device hsr_slave_0 entered promiscuous mode [ 146.759293][ T7085] device hsr_slave_1 entered promiscuous mode [ 146.776134][ T7085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.803435][ T7085] Cannot create hsr debugfs directory [ 146.824391][ T7150] loop0: detected capacity change from 0 to 64 [ 147.446269][ T7161] loop8: detected capacity change from 0 to 32768 [ 147.497953][ T7161] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.878 (7161) [ 147.517177][ T7161] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 147.526783][ T7161] BTRFS info (device loop8): use zlib compression, level 3 [ 147.534117][ T7161] BTRFS info (device loop8): turning on sync discard [ 147.542099][ T7161] BTRFS info (device loop8): using free space tree [ 147.548672][ T7161] BTRFS info (device loop8): has skinny extents [ 147.704039][ T4392] device hsr_slave_0 left promiscuous mode [ 147.710970][ T7161] BTRFS info (device loop8): enabling ssd optimizations [ 147.727070][ T4392] device hsr_slave_1 left promiscuous mode [ 147.806428][ T4178] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop8 scanned by udevd (4178) [ 148.160778][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.168290][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.217258][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.240745][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.264328][ T4392] device bridge_slave_1 left promiscuous mode [ 148.301311][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.310186][ T4392] device bridge_slave_0 left promiscuous mode [ 148.331056][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.352679][ T7195] loop7: detected capacity change from 0 to 8192 [ 148.374350][ T4392] device veth1_macvtap left promiscuous mode [ 148.391017][ T4392] device veth0_macvtap left promiscuous mode [ 148.400828][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 148.420724][ T4392] device veth1_vlan left promiscuous mode [ 148.426570][ T4392] device veth0_vlan left promiscuous mode [ 148.455933][ T7195] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 148.475818][ T7195] REISERFS (device loop7): using ordered data mode [ 148.494542][ T7195] reiserfs: using flush barriers [ 148.505718][ T7195] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.568886][ T7195] REISERFS (device loop7): checking transaction log (loop7) [ 148.594778][ T7195] REISERFS (device loop7): Using rupasov hash to sort names [ 148.609277][ T7195] REISERFS (device loop7): using 3.5.x disk format [ 148.642793][ T7195] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 148.661188][ T7195] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 148.675899][ T7195] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 148.687336][ T7195] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 148.701613][ T7195] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 148.843365][ T4392] team0 (unregistering): Port device team_slave_1 removed [ 148.879293][ T4392] team0 (unregistering): Port device team_slave_0 removed [ 148.895810][ T4392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.917629][ T4392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.989738][ T4392] bond0 (unregistering): Released all slaves [ 149.011849][ T7209] netdevsim netdevsim6: Firmware load for '../file0/file0' refused, path contains '..' component [ 149.150622][ T13] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 149.446490][ T7085] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.459668][ T7085] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.487873][ T7085] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.510467][ T7085] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.530902][ T13] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.555010][ T13] usb 8-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 149.743777][ T13] usb 8-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 149.780578][ T7252] sp0: Synchronizing with TNC [ 149.785474][ T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.811502][ T13] usb 8-1: Product: syz [ 149.815721][ T13] usb 8-1: Manufacturer: syz [ 149.820343][ T13] usb 8-1: SerialNumber: syz [ 149.902365][ T7085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.923333][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.923881][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.934621][ T7085] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.953970][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.954510][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.955379][ T3050] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.955450][ T3050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.957417][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.967130][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.967718][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.968163][ T3050] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.968202][ T3050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.000652][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.004520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.031455][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.032754][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.033841][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.043953][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.044676][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.050824][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.051354][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.058976][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.059502][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.080328][ T7261] netem: change failed [ 150.090242][ T7085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.154771][ T7230] loop0: detected capacity change from 0 to 40427 [ 150.208983][ T7230] F2FS-fs (loop0): invalid crc value [ 150.245306][ T7230] F2FS-fs (loop0): Found nat_bits in checkpoint [ 150.350797][ T13] usb 8-1: unable to init card! (ret=-110) [ 150.351121][ T13] snd-usb-caiaq: probe of 8-1:1.0 failed with error -110 [ 150.420428][ T7230] F2FS-fs (loop0): Start checkpoint disabled! [ 150.481030][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 150.481372][ T7230] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 150.549539][ T13] usb 8-1: USB disconnect, device number 4 [ 150.606905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.607054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.633119][ T7085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.666161][ T7281] loop8: detected capacity change from 0 to 256 [ 151.382613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.409525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.441451][ T7203] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 151.488412][ T7305] netlink: 36 bytes leftover after parsing attributes in process `syz.0.904'. [ 151.493291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.516227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.539108][ T7085] device veth0_vlan entered promiscuous mode [ 151.549908][ T7305] netlink: 36 bytes leftover after parsing attributes in process `syz.0.904'. [ 151.566600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.585127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.628888][ T7085] device veth1_vlan entered promiscuous mode [ 151.690585][ T7203] usb 9-1: Using ep0 maxpacket: 8 [ 151.726796][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.751470][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.783206][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.819411][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.851492][ T7203] usb 9-1: unable to get BOS descriptor or descriptor too short [ 151.854788][ T7085] device veth0_macvtap entered promiscuous mode [ 151.892103][ T7085] device veth1_macvtap entered promiscuous mode [ 151.930817][ T7203] usb 9-1: config 1 has an invalid interface number: 211 but max is 0 [ 151.949316][ T7203] usb 9-1: config 1 has no interface number 0 [ 151.950014][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.979719][ T7203] usb 9-1: too many endpoints for config 1 interface 211 altsetting 3: 250, using maximum allowed: 30 [ 152.010675][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.014168][ T7203] usb 9-1: config 1 interface 211 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 250 [ 152.029044][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.090653][ T7203] usb 9-1: config 1 interface 211 has no altsetting 0 [ 152.091105][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.098232][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.176225][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.210986][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.241970][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.272339][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.280846][ T7203] usb 9-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=5a.54 [ 152.281641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.293267][ T7287] loop6: detected capacity change from 0 to 40427 [ 152.314296][ T7203] usb 9-1: New USB device strings: Mfr=7, Product=0, SerialNumber=3 [ 152.333394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.358646][ T7299] loop7: detected capacity change from 0 to 32768 [ 152.361997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.365734][ T7203] usb 9-1: Manufacturer: syz [ 152.388233][ T7203] usb 9-1: SerialNumber: syz [ 152.399166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.426206][ T7287] F2FS-fs (loop6): invalid crc value [ 152.434531][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.455550][ T7325] vivid-000: disconnect [ 152.472394][ T7323] vivid-000: reconnect [ 152.477098][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.509594][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.529017][ T7287] F2FS-fs (loop6): Found nat_bits in checkpoint [ 152.557779][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.560920][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 152.604109][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.634446][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.668539][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.674408][ T7203] usb 9-1: USB disconnect, device number 4 [ 152.681431][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.699023][ T7287] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 152.729784][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.740713][ T7331] netlink: 'syz.0.908': attribute type 2 has an invalid length. [ 152.756105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.776300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.881171][ T7085] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.889933][ T7085] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.953737][ T7085] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.001649][ T7085] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.022696][ T4541] attempt to access beyond end of device [ 153.022696][ T4541] loop6: rw=2049, want=45104, limit=40427 [ 153.140282][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.169241][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.237188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.323415][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.342155][ T7349] loop7: detected capacity change from 0 to 1024 [ 153.351373][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.392302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.481725][ T7349] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,init_itable=0x00000000000000c5,,errors=continue. Quota mode: none. [ 154.236820][ T7377] loop7: detected capacity change from 0 to 4096 [ 154.279364][ T7347] loop8: detected capacity change from 0 to 32768 [ 154.418214][ T7347] jfs_lookup: iget failed on inum 4 [ 155.620655][ T7203] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 155.708657][ T7474] loop7: detected capacity change from 0 to 256 [ 155.801366][ T7474] exfat: Deprecated parameter 'utf8' [ 155.863735][ T7474] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 155.990864][ T7203] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.024718][ T7203] usb 6-1: config 0 interface 0 has no altsetting 0 [ 156.039320][ T7436] loop0: detected capacity change from 0 to 32768 [ 156.047995][ T7492] loop7: detected capacity change from 0 to 64 [ 156.054728][ T7203] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 156.091396][ T7203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.133287][ T7203] usb 6-1: config 0 descriptor?? [ 156.308071][ T7436] XFS (loop0): Mounting V5 Filesystem [ 156.686214][ T7493] loop8: detected capacity change from 0 to 32768 [ 156.751962][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.7.971'. [ 156.774433][ T7436] XFS (loop0): Ending clean mount [ 156.774787][ T7203] input: HID 13ec:0006 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:13EC:0006.0009/input/input9 [ 156.848118][ T7203] zydacron 0003:13EC:0006.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.5-1/input0 [ 156.961992][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.8.974'. [ 157.037527][ T7203] usb 6-1: USB disconnect, device number 3 [ 157.133589][ T7527] fido_id[7527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 157.159928][ T4187] XFS (loop0): Unmounting Filesystem [ 157.282529][ T7537] loop7: detected capacity change from 0 to 2048 [ 157.460031][ T7548] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.538791][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.8.983'. [ 157.738335][ T7565] netlink: 'syz.5.986': attribute type 29 has an invalid length. [ 157.771336][ T7565] netlink: 'syz.5.986': attribute type 29 has an invalid length. [ 157.820962][ T7567] netlink: 'syz.5.986': attribute type 29 has an invalid length. [ 157.884969][ T7572] loop7: detected capacity change from 0 to 512 [ 158.068507][ T7572] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 158.122866][ T7572] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.189183][ T7588] device hsr0 entered promiscuous mode [ 158.228667][ T7588] device macvtap1 entered promiscuous mode [ 158.594523][ T7609] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1001'. [ 158.622116][ T7610] loop0: detected capacity change from 0 to 1024 [ 158.758419][ T7610] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.999: Invalid block bitmap block 0 in block_group 0 [ 158.784574][ T7610] Quota error (device loop0): write_blk: dquota write failed [ 158.812676][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1005'. [ 158.820351][ T7610] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 158.878026][ T7610] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.999: Failed to acquire dquot type 0 [ 158.891388][ T7610] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.999: Freeing blocks not in datazone - block = 0, count = 4096 [ 158.949218][ T7610] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.999: Invalid inode bitmap blk 0 in block_group 0 [ 158.979998][ T4392] Quota error (device loop0): remove_tree: Getting block too big (0 >= 8) [ 158.987344][ T7610] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 158.998098][ T7610] EXT4-fs (loop0): 1 orphan inode deleted [ 159.012948][ T4392] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 159.026127][ T7610] EXT4-fs (loop0): mounted filesystem without journal. Opts: АБ; max_dir_size_kb=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 159.523716][ T7645] loop7: detected capacity change from 0 to 1024 [ 159.582609][ T7645] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 159.860664][ T1108] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 160.008890][ T7631] loop5: detected capacity change from 0 to 32768 [ 160.139430][ T7631] XFS (loop5): Mounting V5 Filesystem [ 160.252776][ T7631] XFS (loop5): Ending clean mount [ 160.280780][ T1108] usb 1-1: unable to get BOS descriptor or descriptor too short [ 160.341979][ T7085] XFS (loop5): Unmounting Filesystem [ 160.391492][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.410381][ T1108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.457536][ T7688] loop6: detected capacity change from 0 to 1024 [ 160.703297][ T1108] usb 1-1: string descriptor 0 read error: -22 [ 160.710329][ T1108] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 160.743769][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.817078][ T1108] usb 1-1: selecting invalid altsetting 1 [ 160.826125][ T1108] usb 1-1: unit 3 not found! [ 160.832901][ T7705] syz.8.1028 (7705): /proc/7704/oom_adj is deprecated, please use /proc/7704/oom_score_adj instead. [ 161.041210][ T13] Bluetooth: hci3: command 0x0411 tx timeout [ 161.047478][ T1108] usb 1-1: unit 0 not found! [ 161.148879][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.309953][ T1108] usb 1-1: USB disconnect, device number 7 [ 161.374160][ T7736] loop8: detected capacity change from 0 to 64 [ 161.402639][ T7736] MINIX-fs: mounting file system with errors, running fsck is recommended [ 161.568057][ T7746] loop6: detected capacity change from 0 to 512 [ 161.647992][ T7746] EXT4-fs (loop6): inline encryption not supported [ 161.727135][ T7746] EXT4-fs (loop6): 1 orphan inode deleted [ 161.735384][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1044'. [ 161.754901][ T7746] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,journal_dev=0x0000000000000008,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 161.811173][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1044'. [ 161.856511][ T7758] loop7: detected capacity change from 0 to 256 [ 161.870706][ T7752] netlink: 'syz.5.1044': attribute type 14 has an invalid length. [ 161.911913][ T7752] netlink: 'syz.5.1044': attribute type 11 has an invalid length. [ 162.058025][ T7764] jffs2: notice: (7764) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 162.080663][ T1108] Bluetooth: hci0: command 0x0c20 tx timeout [ 162.218955][ T4273] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 162.281631][ T7777] netlink: 'syz.6.1051': attribute type 17 has an invalid length. [ 162.442716][ T7788] loop6: detected capacity change from 0 to 128 [ 162.544149][ T7788] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 162.587556][ T7796] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 162.593308][ T7788] hpfs: filesystem error: improperly stopped [ 162.641154][ T7788] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 162.648950][ T7788] hpfs: You really don't want any checks? You are crazy... [ 162.682795][ T7796] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 162.714300][ T7788] hpfs: Code page index out of array [ 162.719880][ T7788] hpfs: code page support is disabled [ 162.720820][ T4273] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.733764][ T7788] hpfs: hpfs_map_4sectors(): unaligned read [ 162.745627][ T4273] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.746353][ T7788] hpfs: hpfs_map_4sectors(): unaligned read [ 162.770451][ T7788] hpfs: filesystem error: unable to find root dir [ 162.776845][ T4273] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 162.807286][ T4273] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.872144][ T4273] hub 8-1:4.0: USB hub found [ 162.970689][ T1108] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 163.085407][ T7813] program syz.5.1063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.101477][ T4273] hub 8-1:4.0: 2 ports detected [ 163.106432][ T4273] usb 8-1: selecting invalid altsetting 1 [ 163.121357][ T4273] hub 8-1:4.0: Using single TT (err -22) [ 163.331124][ T4273] hub 8-1:4.0: hub_hub_status failed (err = -71) [ 163.338142][ T4273] hub 8-1:4.0: config failed, can't get hub status (err -71) [ 163.340821][ T1108] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.399981][ T1108] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.411886][ T4273] usb 8-1: USB disconnect, device number 5 [ 163.427932][ T1108] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.479367][ T1108] usb 9-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 163.522930][ T1108] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.566601][ T1108] usb 9-1: config 0 descriptor?? [ 163.974166][ T7856] netem: change failed [ 164.063501][ T1108] hid-generic 0003:093A:8002.000A: unbalanced collection at end of report description [ 164.100796][ T7] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 164.110206][ T7860] syz.7.1077 (7860) used greatest stack depth: 20144 bytes left [ 164.126320][ T1108] hid-generic: probe of 0003:093A:8002.000A failed with error -22 [ 164.307969][ T1108] usb 9-1: USB disconnect, device number 5 [ 164.461048][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.490854][ T7] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 164.520658][ T7] usb 7-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 164.567777][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.870864][ T7] dvbdev: DVB: registering new adapter (DEC2000-t) [ 164.899316][ T7] usb 7-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 165.060739][ T7] ttusb_dec_send_command: command bulk message failed: error -71 [ 165.112157][ T7] usb 7-1: USB disconnect, device number 4 [ 165.187251][ T7920] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1097'. [ 165.191240][ T7917] ip_tables: iptables: counters copy to user failed while replacing table [ 165.591092][ T4233] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 165.631213][ T4273] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 165.704107][ T7950] block nbd8: NBD_DISCONNECT [ 165.728909][ T7952] loop6: detected capacity change from 0 to 128 [ 165.811804][ T7952] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.835005][ T7952] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.871133][ T4233] usb 6-1: Using ep0 maxpacket: 16 [ 165.900950][ T4273] usb 1-1: Using ep0 maxpacket: 32 [ 166.004017][ T4233] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 166.018677][ T4233] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.029908][ T4273] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.055752][ T4273] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.067668][ T4233] usb 6-1: config 0 has no interface number 0 [ 166.196096][ T7972] loop8: detected capacity change from 0 to 512 [ 166.221413][ T4273] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 166.237456][ T4273] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 166.257102][ T4273] usb 1-1: Product: syz [ 166.262307][ T4233] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 166.280539][ T4273] usb 1-1: Manufacturer: syz [ 166.285448][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.311986][ T4233] usb 6-1: Product: syz [ 166.326603][ T4233] usb 6-1: Manufacturer: syz [ 166.333120][ T4273] hub 1-1:4.0: USB hub found [ 166.347621][ T7972] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 166.380988][ T4233] usb 6-1: SerialNumber: syz [ 166.386926][ T7972] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.392612][ T4233] usb 6-1: config 0 descriptor?? [ 166.443381][ T4233] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 166.452436][ T4233] usb 6-1: No valid video chain found. [ 166.517910][ T7972] EXT4-fs (loop8): re-mounted. Opts: (null). Quota mode: writeback. [ 166.551090][ T4273] hub 1-1:4.0: 2 ports detected [ 166.597779][ T7986] loop6: detected capacity change from 0 to 1024 [ 166.710940][ T7986] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 166.747135][ T5643] usb 6-1: USB disconnect, device number 4 [ 167.007627][ T4273] hub 1-1:4.0: set hub depth failed [ 167.061277][ T4273] usb 1-1: USB disconnect, device number 8 [ 167.110164][ T7956] loop7: detected capacity change from 0 to 32768 [ 167.420086][ T7956] XFS (loop7): Mounting V5 Filesystem [ 167.479771][ T8012] loop6: detected capacity change from 0 to 4096 [ 167.508371][ T7956] XFS (loop7): Ending clean mount [ 167.579997][ T8012] ntfs3: Invalid value for uid. [ 167.594608][ T7956] XFS (loop7): Quotacheck needed: Please wait. [ 167.726666][ T7956] XFS (loop7): Quotacheck: Done. [ 167.952606][ T5197] XFS (loop7): Unmounting Filesystem [ 167.967062][ T8033] loop0: detected capacity change from 0 to 4096 [ 168.165154][ T8033] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 168.281402][ T8033] ntfs3: loop0: failed to convert "0080" to koi8-ru [ 168.338975][ T8033] ntfs3: loop0: failed to convert name for inode 1e. [ 168.611109][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 168.631107][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 168.640022][ T8056] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 168.891621][ T8070] sp0: Synchronizing with TNC [ 169.351869][ T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 169.442118][ T8064] loop6: detected capacity change from 0 to 32768 [ 169.481279][ T5645] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 169.492532][ T8064] (syz.6.1131,8064,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 169.549908][ T8064] (syz.6.1131,8064,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 169.593291][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 169.664360][ T8064] JBD2: Ignoring recovery information on journal [ 169.710889][ T13] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 169.720851][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.731706][ T13] usb 1-1: config 0 has no interface number 0 [ 169.739017][ T13] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.805998][ T8064] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 169.882011][ T5645] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.900602][ T5645] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.911827][ T13] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 169.929284][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.937804][ T5645] usb 8-1: config 0 interface 0 has no altsetting 0 [ 169.940001][ T13] usb 1-1: Product: syz [ 169.949401][ T13] usb 1-1: Manufacturer: syz [ 169.961704][ T13] usb 1-1: SerialNumber: syz [ 169.966953][ T5645] usb 8-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 169.972973][ T13] usb 1-1: config 0 descriptor?? [ 169.989798][ T5645] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.017156][ T4541] ocfs2: Unmounting device (7,6) on (node local) [ 170.030297][ T5645] usb 8-1: config 0 descriptor?? [ 170.032609][ T13] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 170.036239][ T4329] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 170.071798][ T13] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 170.241012][ T13] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 170.441304][ T4329] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.460929][ T4329] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.466036][ T13] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 170.492049][ T4329] usb 6-1: config 0 interface 0 has no altsetting 0 [ 170.519169][ T4329] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 170.543149][ T5645] sony 0003:054C:0268.000B: unbalanced collection at end of report description [ 170.560530][ T4329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.569260][ T5645] sony 0003:054C:0268.000B: parse failed [ 170.594836][ T4329] usb 6-1: config 0 descriptor?? [ 170.600054][ T5645] sony: probe of 0003:054C:0268.000B failed with error -22 [ 170.750635][ T13] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 170.768083][ T5645] usb 8-1: USB disconnect, device number 6 [ 170.864212][ T7203] usb 1-1: USB disconnect, device number 9 [ 170.877246][ T7203] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 171.059817][ T7996] Set syz0 is full, maxelem 65536 reached [ 171.121651][ T4329] hid-multitouch 0003:0EEF:72C4.000C: ignoring exceeding usage max [ 171.141770][ T4329] hid-multitouch 0003:0EEF:72C4.000C: No inputs registered, leaving [ 171.148964][ T8135] binder: 8134:8135 ioctl c0306201 200000000000 returned -14 [ 171.160881][ T13] usb 7-1: unable to get BOS descriptor or descriptor too short [ 171.174739][ T4329] hid-multitouch 0003:0EEF:72C4.000C: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.5-1/input0 [ 171.223266][ T8138] option changes via remount are deprecated (pid=8137 comm=syz.8.1144) [ 171.240401][ T8138] cgroup: option or name mismatch, new: 0x0 "func", old: 0x0 "" [ 171.255090][ T13] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.269368][ T13] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 171.291619][ T13] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 171.319257][ T13] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 171.382188][ T13] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 171.417629][ T4329] usb 6-1: USB disconnect, device number 5 [ 171.417789][ T13] usb 7-1: config 1 interface 1 has no altsetting 0 [ 171.536333][ T8151] loop7: detected capacity change from 0 to 512 [ 171.651587][ T8151] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 171.686487][ T13] usb 7-1: string descriptor 0 read error: -22 [ 171.693301][ T8151] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 171.710704][ T13] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 171.787942][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1151'. [ 171.830549][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.830738][ T8151] EXT4-fs (loop7): can't change dax mount option while remounting [ 171.851031][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1151'. [ 171.877489][ T8167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1151'. [ 172.018443][ T8170] loop7: detected capacity change from 0 to 128 [ 172.097484][ T8170] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 172.105758][ T8172] loop0: detected capacity change from 0 to 256 [ 172.213075][ T8170] hpfs: filesystem error: improperly stopped [ 172.260018][ T8170] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 172.286454][ T8170] hpfs: You really don't want any checks? You are crazy... [ 172.316892][ T8170] hpfs: hpfs_map_sector(): read error [ 172.361673][ T8170] hpfs: code page support is disabled [ 172.414256][ T8170] hpfs: hpfs_map_4sectors(): unaligned read [ 172.420273][ T8170] hpfs: hpfs_map_4sectors(): unaligned read [ 172.439097][ T8170] hpfs: filesystem error: unable to find root dir [ 172.489925][ T8147] loop8: detected capacity change from 0 to 40427 [ 172.581680][ T13] usb 7-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4 [ 172.598083][ T8147] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 172.614391][ T8147] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 172.635064][ T13] usb 7-1: USB disconnect, device number 5 [ 172.682061][ T8147] F2FS-fs (loop8): invalid crc value [ 172.717662][ T8147] F2FS-fs (loop8): Found nat_bits in checkpoint [ 172.866803][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.905706][ T8147] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 172.920628][ T8147] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 172.959563][ T8215] loop7: detected capacity change from 0 to 2048 [ 173.043871][ T8215] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.141132][ T8215] fscrypt (loop7, inode 12): Error -61 getting encryption context [ 173.150287][ T8215] fscrypt (loop7, inode 12): Error -61 getting encryption context [ 173.577424][ T8247] loop0: detected capacity change from 0 to 256 [ 173.681512][ T8247] exfat: Deprecated parameter 'utf8' [ 173.686892][ T8247] exfat: Deprecated parameter 'namecase' [ 173.719124][ T8247] exfat: Deprecated parameter 'namecase' [ 173.726148][ T8255] loop6: detected capacity change from 0 to 128 [ 173.728716][ T8247] exfat: Deprecated parameter 'utf8' [ 173.801602][ T8247] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 173.815699][ T8257] loop5: detected capacity change from 0 to 1024 [ 173.849318][ T8255] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 173.932479][ T8260] loop7: detected capacity change from 0 to 512 [ 173.942452][ T8257] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,nolazytime,nogrpid,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: none. [ 173.969678][ T8255] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.019834][ T8260] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.118688][ T8260] FAT-fs (loop7): Directory bread(block 1056) failed [ 174.174429][ T8260] FAT-fs (loop7): Directory bread(block 1057) failed [ 174.190105][ T8260] FAT-fs (loop7): Directory bread(block 1058) failed [ 174.197634][ T8260] FAT-fs (loop7): Directory bread(block 1059) failed [ 174.205289][ T8260] FAT-fs (loop7): Directory bread(block 1060) failed [ 174.215249][ T8269] trusted_key: encrypted_key: hex blob is missing [ 174.216698][ T8260] FAT-fs (loop7): Directory bread(block 1061) failed [ 174.230353][ T8260] FAT-fs (loop7): Directory bread(block 1062) failed [ 174.237818][ T8260] FAT-fs (loop7): Directory bread(block 1063) failed [ 174.270796][ T8260] FAT-fs (loop7): Directory bread(block 1064) failed [ 174.277913][ T8260] FAT-fs (loop7): Directory bread(block 1065) failed [ 174.381049][ T4329] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 174.630073][ T8277] loop5: detected capacity change from 0 to 32768 [ 174.932008][ T4329] usb 9-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 174.946366][ T4329] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.965365][ T4329] usb 9-1: Product: syz [ 174.969584][ T4329] usb 9-1: Manufacturer: syz [ 174.986021][ T4329] usb 9-1: SerialNumber: syz [ 174.999248][ T4329] usb 9-1: config 0 descriptor?? [ 175.083945][ T4329] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 175.335541][ T8321] tipc: Enabling of bearer rejected, failed to enable media [ 175.451431][ T8328] IPVS: Error connecting to the multicast addr [ 175.592816][ T8339] comedi comedi3: s526: I/O port conflict (0x3,64) [ 175.721138][ T4329] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 175.728726][ T4329] sq905c: probe of 9-1:0.0 failed with error -71 [ 175.758482][ T4329] usb 9-1: USB disconnect, device number 6 [ 175.881717][ T26] audit: type=1800 audit(1791879511.665:11): pid=8350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1216" name="file2" dev="loop7" ino=21 res=0 errno=0 [ 176.289537][ T26] audit: type=1800 audit(1791879512.065:12): pid=8354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.1220" name="/newroot/218/bus/#1147//deleted" dev="tmpfs" ino=1147 res=0 errno=0 [ 176.311547][ T8376] exfat: Deprecated parameter 'utf8' [ 176.337074][ T8379] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1227'. [ 176.346459][ T8376] exfat: Deprecated parameter 'utf8' [ 176.445395][ T8376] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 176.551245][ T8393] erofs: (device loop8): mounted with root inode @ nid 36. [ 177.338152][ T8449] set_capacity_and_notify: 5 callbacks suppressed [ 177.338171][ T8449] loop0: detected capacity change from 0 to 1024 [ 177.787870][ T8464] loop0: detected capacity change from 0 to 2048 [ 177.827726][ T8464] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=4096, location=4096 [ 177.863656][ T8464] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 177.915041][ T8464] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 177.943057][ T8464] UDF-fs: Scanning with blocksize 512 failed [ 178.028682][ T8464] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 178.037042][ T8464] UDF-fs: Scanning with blocksize 1024 failed [ 178.074864][ T8464] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 178.083558][ T8431] loop7: detected capacity change from 0 to 32768 [ 178.120118][ T8464] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 178.150101][ T8464] UDF-fs: Scanning with blocksize 2048 failed [ 178.197139][ T8464] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 178.222516][ T8464] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 178.267733][ T8464] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 178.276599][ T8431] XFS (loop7): Mounting V5 Filesystem [ 178.291077][ T8464] UDF-fs: Scanning with blocksize 4096 failed [ 178.300801][ T8464] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 178.342060][ T13] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 178.376099][ T8496] loop6: detected capacity change from 0 to 1024 [ 178.409478][ T8431] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 178.458162][ T8496] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 178.497000][ T8431] XFS (loop7): Tail block (0x29) overwrite detected. Updated to 0x30 [ 178.639044][ T8431] XFS (loop7): Ending clean mount [ 178.706884][ T13] usb 9-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 178.726906][ T13] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.788125][ T8513] loop5: detected capacity change from 0 to 1024 [ 178.857511][ T8513] hfsplus: request for non-existent node 100663296 in B*Tree [ 178.873691][ T5197] XFS (loop7): Unmounting Filesystem [ 178.923872][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 178.944876][ T8513] hfsplus: request for non-existent node 100663296 in B*Tree [ 178.959886][ T8513] hfsplus: failed to load root directory [ 178.989906][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 179.097388][ T13] msi2500 9-1:1.0: Registered as swradio24 [ 179.114823][ T13] msi2500 9-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 179.192094][ T13] usb 9-1: USB disconnect, device number 7 [ 179.480160][ T8550] loop6: detected capacity change from 0 to 256 [ 179.622338][ T8554] mmap: syz.0.1287 (8554) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 180.048696][ T8589] device bridge0 entered promiscuous mode [ 180.290654][ T13] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 180.452987][ T8624] loop6: detected capacity change from 0 to 128 [ 180.490786][ T7] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 180.558434][ T8624] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 180.593630][ T8624] hpfs: filesystem error: improperly stopped [ 180.600815][ T8624] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 180.624358][ T8624] hpfs: You really don't want any checks? You are crazy... [ 180.650949][ T13] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.667479][ T8624] hpfs: Code page index out of array [ 180.674134][ T8624] hpfs: code page support is disabled [ 180.679671][ T13] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 180.679711][ T13] usb 6-1: config 0 interface 0 has no altsetting 0 [ 180.679744][ T13] usb 6-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 180.679770][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.689238][ T13] usb 6-1: config 0 descriptor?? [ 180.704529][ T8624] hpfs: hpfs_map_4sectors(): unaligned read [ 180.732783][ T8636] loop7: detected capacity change from 0 to 2048 [ 180.749835][ T8624] hpfs: hpfs_map_4sectors(): unaligned read [ 180.756546][ T8588] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 180.771371][ T8624] hpfs: filesystem error: unable to find root dir [ 180.787781][ T8636] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.860948][ T7] usb 1-1: config 8 has an invalid interface number: 20 but max is 0 [ 180.869091][ T7] usb 1-1: config 8 has no interface number 0 [ 180.909449][ T7] usb 1-1: config 8 interface 20 has no altsetting 0 [ 181.078158][ T8648] netlink: 'syz.6.1318': attribute type 2 has an invalid length. [ 181.083439][ T7] usb 1-1: New USB device found, idVendor=19d2, idProduct=1255, bcdDevice=3b.e9 [ 181.091874][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1318'. [ 181.103940][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.117490][ T7] usb 1-1: Product: syz [ 181.121922][ T8648] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 181.132988][ T7] usb 1-1: Manufacturer: чам [ 181.153928][ T7] usb 1-1: SerialNumber: syz [ 181.264673][ T13] wacom 0003:056A:032B.000D: hidraw0: USB HID v0.08 Device [HID 056a:032b] on usb-dummy_hcd.5-1/input0 [ 181.295679][ T8660] loop7: detected capacity change from 0 to 64 [ 181.492171][ T7] option 1-1:8.20: GSM modem (1-port) converter detected [ 181.510096][ T13] usb 6-1: USB disconnect, device number 6 [ 181.537546][ T7] usb 1-1: USB disconnect, device number 10 [ 181.553860][ T7] option 1-1:8.20: device disconnected [ 181.809546][ T8655] loop8: detected capacity change from 0 to 32768 [ 182.299526][ T8676] EXT4-fs error (device loop8): __ext4_iget:4919: inode #11: block 1: comm syz.8.1328: invalid block [ 182.314602][ T8676] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.1328: couldn't read orphan inode 11 (err -117) [ 182.328398][ T8676] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 182.372382][ T5643] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 182.390722][ T8662] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 182.394291][ T8674] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 182.400205][ T8662] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 182.426015][ T8662] F2FS-fs (loop6): invalid crc value [ 182.481923][ T8674] ntfs3: loop5: Failed to load $Extend. [ 182.501006][ T8662] F2FS-fs (loop6): Found nat_bits in checkpoint [ 182.761405][ T8662] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 182.778258][ T8662] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 182.831776][ T8667] set_capacity_and_notify: 4 callbacks suppressed [ 182.831793][ T8667] loop7: detected capacity change from 0 to 64 [ 182.847522][ T5643] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.866198][ T5643] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 182.880331][ T5643] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.892502][ T5643] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 182.904295][ T5643] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 182.918829][ T5643] usb 1-1: config 0 interface 0 has no altsetting 0 [ 182.933146][ T5643] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice=10.00 [ 182.946364][ T5643] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.983319][ T5643] usb 1-1: config 0 descriptor?? [ 183.032423][ T8671] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 183.053640][ T5643] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 183.131393][ T5645] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 183.156251][ T8697] IPVS: set_ctl: invalid protocol: 135 172.30.0.8:20002 [ 183.526583][ T8718] loop8: detected capacity change from 0 to 512 [ 183.535733][ T5643] logitech 0003:046D:C298.000E: unknown main item tag 0x2 [ 183.544446][ T5645] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 183.559288][ T5643] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 183.567171][ T5645] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.578751][ T8723] loop6: detected capacity change from 0 to 64 [ 183.586921][ T5643] logitech 0003:046D:C298.000E: unknown main item tag 0x0 [ 183.594557][ T5645] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.610923][ T5643] input: HID 046d:c298 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C298.000E/input/input13 [ 183.623560][ T5645] usb 6-1: config 0 interface 0 has no altsetting 0 [ 183.629212][ T8721] loop7: detected capacity change from 0 to 4096 [ 183.630198][ T5645] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 183.649738][ T5645] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.662672][ T5645] usb 6-1: config 0 descriptor?? [ 183.667300][ T8723] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 183.744729][ T8718] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 183.755846][ T8718] FAT-fs (loop8): Filesystem has been set read-only [ 183.809394][ T5643] logitech 0003:046D:C298.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.0-1/input0 [ 183.828103][ T8721] ntfs3: loop7: failed to convert "0080" to cp869 [ 183.837169][ T5643] logitech 0003:046D:C298.000E: implement() called with too large value 245 (n: 0)! (kworker/1:11) [ 183.854770][ T8721] ntfs3: loop7: failed to convert name for inode 1e. [ 183.885180][ T5643] logitech 0003:046D:C298.000E: implement() called with too large value 248 (n: 0)! (kworker/1:11) [ 183.895929][ T5643] logitech 0003:046D:C298.000E: implement() called with too large value 3 (n: 0)! (kworker/1:11) [ 183.906550][ T5643] logitech 0003:046D:C298.000E: implement() called with too large value 129 (n: 0)! (kworker/1:11) [ 183.917266][ T5643] logitech 0003:046D:C298.000E: implement() called with too large value 11 (n: 0)! (kworker/1:11) [ 183.963436][ T5643] logitech 0003:046D:C298.000E: Force feedback support for Logitech Gaming Wheels [ 183.993574][ T5643] usb 1-1: USB disconnect, device number 11 [ 184.165267][ T5645] input: HID 18b1:0037 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:18B1:0037.000F/input/input14 [ 184.251502][ T8726] fido_id[8726]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 184.441511][ T5645] petalynx 0003:18B1:0037.000F: input,hidraw0: USB HID v0.00 Joystick [HID 18b1:0037] on usb-dummy_hcd.5-1/input0 [ 184.495873][ T5645] usb 6-1: USB disconnect, device number 7 [ 184.539152][ T8742] loop6: detected capacity change from 0 to 4096 [ 184.588011][ T8752] loop8: detected capacity change from 0 to 256 [ 184.656113][ T8754] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.697921][ T8742] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 127 already freed [ 184.729124][ T8742] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 184.804916][ T8752] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 184.851795][ T8759] loop7: detected capacity change from 0 to 512 [ 184.939326][ T8762] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1355'. [ 184.945351][ T8760] fido_id[8760]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 185.035086][ T8759] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 185.095200][ T8759] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.226521][ T8759] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: writeback. [ 185.423143][ T26] audit: type=1326 audit(1791879521.205:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.0.1361" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa8a058b2d9 code=0x0 [ 185.452151][ T8775] loop7: detected capacity change from 0 to 256 [ 185.480584][ T7] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 185.548198][ T8775] FAT-fs (loop7): Directory bread(block 64) failed [ 185.561074][ T8775] FAT-fs (loop7): Directory bread(block 65) failed [ 185.575627][ T8775] FAT-fs (loop7): Directory bread(block 66) failed [ 185.591760][ T8775] FAT-fs (loop7): Directory bread(block 67) failed [ 185.606625][ T8767] loop8: detected capacity change from 0 to 32768 [ 185.608625][ T8775] FAT-fs (loop7): Directory bread(block 68) failed [ 185.650241][ T8775] FAT-fs (loop7): Directory bread(block 69) failed [ 185.657289][ T8775] FAT-fs (loop7): Directory bread(block 70) failed [ 185.664211][ T8775] FAT-fs (loop7): Directory bread(block 71) failed [ 185.671986][ T8775] FAT-fs (loop7): Directory bread(block 72) failed [ 185.679580][ T8775] FAT-fs (loop7): Directory bread(block 73) failed [ 185.834631][ T8771] loop5: detected capacity change from 0 to 32768 [ 185.842590][ T7] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.940966][ T7] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 185.966082][ T8771] ERROR: (device loop5): dbAllocAG: unable to allocate blocks [ 185.966082][ T8771] [ 185.971945][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.020875][ T7] usb 7-1: SerialNumber: syz [ 186.035745][ T8771] ERROR: (device loop5): dbDiscardAG: -EIO [ 186.035745][ T8771] [ 186.049157][ T7] usb 7-1: config 0 descriptor?? [ 186.103877][ T7] usb 7-1: selecting invalid altsetting 1 [ 186.109664][ T7] usb 7-1: Can not set alternate setting to 1, error: -22 [ 186.138676][ T7] synaptics_usb: probe of 7-1:0.0 failed with error -22 [ 186.182521][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 186.290198][ T8788] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1368'. [ 186.371979][ T8788] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1368'. [ 186.376195][ T5645] usb 7-1: USB disconnect, device number 6 [ 186.415614][ T8790] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 186.441254][ T8790] FAT-fs (loop7): Filesystem has been set read-only [ 186.689214][ T8800] netlink: 'syz.0.1374': attribute type 30 has an invalid length. [ 186.889534][ T8794] hpfs: filesystem error: improperly stopped; already mounted read-only [ 186.918485][ T8794] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 186.937568][ T8794] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 00000000 [ 187.011694][ T8819] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 187.028781][ T8819] Error parsing options; rc = [-22] [ 187.123431][ T8822] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1386'. [ 187.595823][ T8839] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 187.622884][ T8839] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.775602][ T8851] netem: change failed [ 187.897960][ T8815] set_capacity_and_notify: 3 callbacks suppressed [ 187.897976][ T8815] loop0: detected capacity change from 0 to 32768 [ 187.912185][ T8828] loop6: detected capacity change from 0 to 32768 [ 188.020060][ T8855] loop7: detected capacity change from 0 to 8192 [ 188.026716][ T8857] loop5: detected capacity change from 0 to 2048 [ 188.037149][ T8815] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1381 (8815) [ 188.095143][ T8828] XFS (loop6): Mounting V5 Filesystem [ 188.101382][ T8794] loop8: detected capacity change from 0 to 32768 [ 188.146778][ T8815] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 188.165594][ T8815] BTRFS warning (device loop0): excessive commit interval 3581 [ 188.170901][ T8855] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 188.173783][ T8815] BTRFS info (device loop0): force zlib compression, level 3 [ 188.196825][ T8855] REISERFS (device loop7): using ordered data mode [ 188.205884][ T8855] reiserfs: using flush barriers [ 188.214412][ T8855] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 188.222219][ T8857] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.231459][ T8855] REISERFS (device loop7): checking transaction log (loop7) [ 188.260706][ T8815] BTRFS info (device loop0): metadata ratio 107050 [ 188.267311][ T8815] BTRFS info (device loop0): turning on flush-on-commit [ 188.274978][ T8815] BTRFS info (device loop0): max_inline at 4096 [ 188.281480][ T8815] BTRFS info (device loop0): using free space tree [ 188.282489][ T8857] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.288125][ T8815] BTRFS info (device loop0): has skinny extents [ 188.322025][ T8794] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 188.404367][ T8794] BTRFS info (device loop8): using free space tree [ 188.432179][ T8828] XFS (loop6): Ending clean mount [ 188.449274][ T8794] BTRFS info (device loop8): has skinny extents [ 188.490223][ T4541] XFS (loop6): Unmounting Filesystem [ 188.603579][ T8855] REISERFS (device loop7): Using tea hash to sort names [ 188.641427][ T8855] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 188.765284][ T8815] BTRFS info (device loop0): enabling ssd optimizations [ 188.888527][ T8794] BTRFS info (device loop8): enabling ssd optimizations [ 189.382340][ T8913] netlink: 134736 bytes leftover after parsing attributes in process `syz.6.1403'. [ 189.443894][ T8915] netlink: 'syz.7.1404': attribute type 3 has an invalid length. [ 190.231138][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1417'. [ 190.329035][ T8958] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1406'. [ 190.377996][ T8959] loop7: detected capacity change from 0 to 4096 [ 190.466180][ T8964] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.637301][ T8972] loop0: detected capacity change from 0 to 128 [ 190.678571][ T8974] loop8: detected capacity change from 0 to 8 [ 190.722395][ T8972] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 190.745429][ T8972] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.763256][ T8974] SQUASHFS error: lzo decompression failed, data probably corrupt [ 190.781262][ T8974] SQUASHFS error: Failed to read block 0x91: -5 [ 190.790951][ T8974] SQUASHFS error: Unable to read metadata cache entry [8f] [ 190.798349][ T8974] SQUASHFS error: Unable to read inode 0x11f [ 190.952147][ T3098] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.001670][ T8985] loop7: detected capacity change from 0 to 256 [ 191.003071][ T8983] loop6: detected capacity change from 0 to 128 [ 191.061695][ T8985] exfat: Deprecated parameter 'utf8' [ 191.067210][ T8985] exfat: Deprecated parameter 'namecase' [ 191.080728][ T8985] exfat: Deprecated parameter 'namecase' [ 191.103085][ T8985] exfat: Deprecated parameter 'utf8' [ 191.174977][ T8985] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 191.453339][ T8961] XFS (loop5): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 191.514809][ T8999] device macsec1 entered promiscuous mode [ 191.685531][ T7085] XFS (loop5): Unmounting Filesystem [ 191.957918][ T8989] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 191.957950][ T8989] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 191.961436][ T8989] F2FS-fs (loop8): build fault injection attr: rate: 2, type: 0x1ffff [ 191.961484][ T8989] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x1f8 [ 191.969819][ T8989] F2FS-fs (loop8): invalid crc value [ 192.029904][ T8989] F2FS-fs (loop8): Found nat_bits in checkpoint [ 192.118936][ T9038] trusted_key: encrypted_key: master key parameter is missing [ 192.222104][ T8989] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 192.222137][ T8989] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 192.337221][ T8989] F2FS-fs (loop8) : inject too big dir depth in f2fs_add_regular_entry of f2fs_do_add_link+0x344/0x640 [ 192.343461][ T8989] F2FS-fs (loop8) : inject too big dir depth in f2fs_add_regular_entry of f2fs_do_add_link+0x344/0x640 [ 192.586725][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1461'. [ 192.760668][ T7203] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 192.914981][ T9066] SQUASHFS error: xz decompression failed, data probably corrupt [ 192.941260][ T9066] SQUASHFS error: Failed to read block 0x108: -5 [ 192.949715][ T9066] SQUASHFS error: Unable to read metadata cache entry [106] [ 192.978685][ T9066] SQUASHFS error: Unable to read inode 0x11f [ 193.091541][ T7203] usb 7-1: not running at top speed; connect to a high speed hub [ 193.135924][ T9076] set_capacity_and_notify: 5 callbacks suppressed [ 193.135942][ T9076] loop5: detected capacity change from 0 to 4096 [ 193.207232][ T7203] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.226007][ T7203] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 193.252039][ T7203] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 193.260586][ T8921] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 193.285877][ T7203] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.314529][ T9064] loop0: detected capacity change from 0 to 32768 [ 193.314640][ T9076] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 193.345761][ T7203] usb 7-1: Found UVC 1.00 device (046d:0825) [ 193.365889][ T9064] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1465 (9064) [ 193.379975][ T7203] usb 7-1: Failed to create links for entity 1 [ 193.384652][ T9076] ntfs3: loop5: Failed to load $Extend. [ 193.386719][ T7203] usb 7-1: Failed to register entities (-22). [ 193.438602][ T9064] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 193.456930][ T9064] BTRFS info (device loop0): using free space tree [ 193.470699][ T9064] BTRFS info (device loop0): has skinny extents [ 193.559825][ T7203] usb 7-1: USB disconnect, device number 7 [ 193.743860][ T9064] BTRFS info (device loop0): enabling ssd optimizations [ 193.797905][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1473'. [ 193.876696][ T8921] usb 8-1: New USB device found, idVendor=3344, idProduct=1122, bcdDevice= 1.00 [ 193.886805][ T9107] loop8: detected capacity change from 0 to 2048 [ 193.894095][ T8921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.937596][ T8921] usb 8-1: Product: G [ 193.958041][ T8921] usb 8-1: SerialNumber: syz [ 194.021013][ T9107] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 194.223168][ T9115] loop5: detected capacity change from 0 to 64 [ 194.324946][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.338018][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.362112][ T8921] usb 8-1: selecting invalid altsetting 1 [ 194.483785][ T9121] loop0: detected capacity change from 0 to 512 [ 194.523855][ T9121] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 194.570668][ T8921] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 194.570756][ T8921] dvb_usb_lmedm04: probe of 8-1:1.0 failed with error -22 [ 194.624446][ T9121] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 194.664162][ T8921] usb 8-1: USB disconnect, device number 7 [ 194.670803][ T9121] System zones: 1-12 [ 194.685951][ T9121] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.1478: bad orphan inode 131072 [ 194.699612][ T9121] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none. [ 195.048820][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1491'. [ 195.097081][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1491'. [ 195.367398][ T9156] loop0: detected capacity change from 0 to 1024 [ 195.474575][ T9156] hfsplus: catalog record size mismatch (type 4, got 20, expected 10) [ 195.535637][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1501'. [ 195.670659][ T7] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 195.768606][ T9174] netlink: 'syz.8.1506': attribute type 3 has an invalid length. [ 195.778662][ T9174] netlink: 666 bytes leftover after parsing attributes in process `syz.8.1506'. [ 195.796634][ T9176] binder: 9175:9176 unknown command 0 [ 195.812943][ T9176] binder: 9175:9176 ioctl c0306201 2000000001c0 returned -22 [ 195.910792][ T7] usb 7-1: Using ep0 maxpacket: 16 [ 195.920729][ T8927] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 196.080941][ T7] usb 7-1: unable to get BOS descriptor or descriptor too short [ 196.091528][ T9192] loop5: detected capacity change from 0 to 4096 [ 196.162792][ T7] usb 7-1: config index 0 descriptor too short (expected 82, got 18) [ 196.177287][ T9200] loop8: detected capacity change from 0 to 256 [ 196.189865][ T9201] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.200810][ T8927] usb 8-1: Using ep0 maxpacket: 16 [ 196.234372][ T9192] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean [ 196.305378][ T9205] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1521'. [ 196.338719][ T9205] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1521'. [ 196.350835][ T8927] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 196.354995][ T7] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 196.359037][ T8927] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.359060][ T8927] usb 8-1: config 0 has no interface number 0 [ 196.386946][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.407456][ T7] usb 7-1: Product: syz [ 196.412346][ T7] usb 7-1: Manufacturer: syz [ 196.416967][ T7] usb 7-1: SerialNumber: syz [ 196.497593][ T9209] loop5: detected capacity change from 0 to 256 [ 196.550893][ T8927] usb 8-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 196.573757][ T8927] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.610572][ T8927] usb 8-1: Product: syz [ 196.625008][ T8927] usb 8-1: Manufacturer: syz [ 196.635223][ T8927] usb 8-1: SerialNumber: syz [ 196.652815][ T8927] usb 8-1: config 0 descriptor?? [ 196.926808][ T8927] usb 8-1: Found UVC 0.00 device syz (046d:08d3) [ 196.937356][ T8927] usb 8-1: No valid video chain found. [ 196.954823][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1534'. [ 197.053995][ T9217] loop8: detected capacity change from 0 to 32768 [ 197.070980][ T9235] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 197.084144][ T9235] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.090851][ T7203] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 197.126496][ T4230] usb 8-1: USB disconnect, device number 8 [ 197.172567][ T9217] XFS (loop8): Mounting V5 Filesystem [ 197.274893][ T9246] tipc: Started in network mode [ 197.280068][ T9246] tipc: Node identity 00000000000000000000000000000001, cluster identity 1 [ 197.294302][ T9217] XFS (loop8): Ending clean mount [ 197.297072][ T9246] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 197.309758][ T9246] tipc: Enabled bearer , priority 24 [ 197.318954][ T9217] XFS (loop8): Quotacheck needed: Please wait. [ 197.377358][ T9217] XFS (loop8): Quotacheck: Done. [ 197.421101][ T7] usb 7-1: reset high-speed USB device number 8 using dummy_hcd [ 197.461043][ T7203] usb 1-1: config 0 interface 0 altsetting 126 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.475460][ T7203] usb 1-1: config 0 interface 0 has no altsetting 0 [ 197.482552][ T7203] usb 1-1: New USB device found, idVendor=056a, idProduct=0716, bcdDevice= 0.00 [ 197.484338][ T5276] XFS (loop8): Unmounting Filesystem [ 197.492203][ T7203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.507651][ T7203] usb 1-1: config 0 descriptor?? [ 197.850846][ T7] usb 7-1: unable to get BOS descriptor or descriptor too short [ 197.970561][ T4175] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 197.996608][ T7203] wacom 0003:056A:0716.0010: unknown main item tag 0x1 [ 198.025045][ T9260] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.035027][ T7203] wacom 0003:056A:0716.0010: unknown main item tag 0x5 [ 198.071086][ T7203] wacom 0003:056A:0716.0010: unknown main item tag 0x6 [ 198.098912][ T7203] wacom 0003:056A:0716.0010: Unknown device_type for 'HID 056a:0716'. Ignoring. [ 198.274916][ T7] usb 1-1: USB disconnect, device number 12 [ 198.307493][ T8927] usb 7-1: USB disconnect, device number 8 [ 198.374229][ T9266] set_capacity_and_notify: 3 callbacks suppressed [ 198.374247][ T9266] loop8: detected capacity change from 0 to 8192 [ 198.400729][ T4175] usb 8-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 198.410592][ T4175] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.423422][ T4230] tipc: Node number set to 1 [ 198.501067][ T9266] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 198.517286][ T9266] REISERFS (device loop8): using ordered data mode [ 198.525772][ T9266] reiserfs: using flush barriers [ 198.525935][ T4175] msi2500 8-1:1.0: Registered as swradio24 [ 198.538154][ T4175] msi2500 8-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 198.538792][ T9266] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 198.571154][ T9266] REISERFS (device loop8): checking transaction log (loop8) [ 198.670663][ T7203] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 198.709837][ T9266] REISERFS (device loop8): Using tea hash to sort names [ 198.735227][ T9266] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 198.737703][ T4175] usb 8-1: USB disconnect, device number 9 [ 198.858312][ T9276] mmap: syz.6.1548 (9276): VmData 37462016 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 199.052020][ T7203] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.080770][ T7203] usb 6-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 199.102018][ T7203] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 199.130867][ T7203] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 199.150557][ T7203] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 199.180580][ T7203] usb 6-1: config 0 interface 0 has no altsetting 0 [ 199.190805][ T7203] usb 6-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice=10.00 [ 199.210329][ T7203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.244751][ T7203] usb 6-1: config 0 descriptor?? [ 199.270897][ T9270] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 199.293174][ T7203] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count [ 199.307902][ T9292] tipc: Enabling of bearer rejected, failed to enable media [ 199.455711][ T9280] loop6: detected capacity change from 0 to 32768 [ 199.537080][ T9280] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 199.646741][ T4541] ocfs2: Unmounting device (7,6) on (node local) [ 199.736938][ T7203] logitech 0003:046D:C298.0011: unknown main item tag 0x2 [ 199.746001][ T7203] logitech 0003:046D:C298.0011: unknown main item tag 0x0 [ 199.753796][ T13] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 199.762136][ T7203] logitech 0003:046D:C298.0011: unknown main item tag 0x0 [ 199.773254][ T7203] input: HID 046d:c298 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C298.0011/input/input18 [ 199.861833][ T9321] loop7: detected capacity change from 0 to 512 [ 199.929559][ T9321] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 199.941227][ T7203] logitech 0003:046D:C298.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.5-1/input0 [ 199.962358][ T9321] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 199.973488][ T9321] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (2000000) [ 199.984515][ T9321] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 199.993563][ T7203] logitech 0003:046D:C298.0011: implement() called with too large value 245 (n: 0)! (kworker/0:13) [ 199.995217][ T9321] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,noinit_itable,nodiscard,noquota,,errors=continue. Quota mode: none. [ 200.044107][ T7203] logitech 0003:046D:C298.0011: implement() called with too large value 248 (n: 0)! (kworker/0:13) [ 200.054858][ T7203] logitech 0003:046D:C298.0011: implement() called with too large value 3 (n: 0)! (kworker/0:13) [ 200.065601][ T7203] logitech 0003:046D:C298.0011: implement() called with too large value 129 (n: 0)! (kworker/0:13) [ 200.076321][ T7203] logitech 0003:046D:C298.0011: implement() called with too large value 11 (n: 0)! (kworker/0:13) [ 200.098351][ T7203] logitech 0003:046D:C298.0011: Force feedback support for Logitech Gaming Wheels [ 200.104235][ T9321] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (2000000) [ 200.160684][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.180677][ T7203] usb 6-1: USB disconnect, device number 8 [ 200.183960][ T5197] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /257/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0 [ 200.205679][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.217079][ T9333] loop8: detected capacity change from 0 to 512 [ 200.244262][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.285845][ T5197] EXT4-fs error (device loop7): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 11 [ 200.293737][ T13] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 200.300988][ T9334] fido_id[9334]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 200.324555][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.338899][ T13] usb 1-1: config 0 descriptor?? [ 200.340319][ T9333] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 200.354869][ T5197] EXT4-fs error (device loop7): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 11 [ 200.380334][ T9333] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.433742][ T9333] [ 200.436124][ T9333] ====================================================== [ 200.443158][ T9333] WARNING: possible circular locking dependency detected [ 200.450190][ T9333] syzkaller #0 Not tainted [ 200.454611][ T9333] ------------------------------------------------------ [ 200.461642][ T9333] syz.8.1576/9333 is trying to acquire lock: [ 200.467628][ T9333] ffff888060ae4428 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 200.476527][ T9333] [ 200.476527][ T9333] but task is already holding lock: [ 200.483909][ T9333] ffff888053c66628 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 200.493523][ T9333] [ 200.493523][ T9333] which lock already depends on the new lock. [ 200.493523][ T9333] [ 200.503948][ T9333] [ 200.503948][ T9333] the existing dependency chain (in reverse order) is: [ 200.512990][ T9333] [ 200.512990][ T9333] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 200.520845][ T9333] down_read+0x44/0x2e0 [ 200.525545][ T9333] ext4_map_blocks+0x350/0x1a50 [ 200.530937][ T9333] ext4_getblk+0x176/0x670 [ 200.535910][ T9333] ext4_bread+0x26/0x180 [ 200.540701][ T9333] ext4_quota_read+0x1ac/0x390 [ 200.546013][ T9333] find_tree_dqentry+0x187/0xb30 [ 200.551495][ T9333] find_tree_dqentry+0x3e8/0xb30 [ 200.556969][ T9333] qtree_read_dquot+0x122/0x690 [ 200.562363][ T9333] v2_read_dquot+0xc0/0x110 [ 200.567406][ T9333] dquot_acquire+0x152/0x520 [ 200.572535][ T9333] ext4_acquire_dquot+0x2e3/0x4a0 [ 200.578110][ T9333] dqget+0x713/0xbb0 [ 200.582544][ T9333] __dquot_initialize+0x324/0xd00 [ 200.588109][ T9333] ext4_process_orphan+0x4c/0x2e0 [ 200.593680][ T9333] ext4_orphan_cleanup+0xc96/0x14f0 [ 200.599423][ T9333] ext4_fill_super+0x8c65/0x93f0 [ 200.604908][ T9333] mount_bdev+0x28a/0x3c0 [ 200.609783][ T9333] legacy_get_tree+0xe6/0x180 [ 200.615002][ T9333] vfs_get_tree+0x88/0x270 [ 200.619958][ T9333] do_new_mount+0x247/0xa40 [ 200.625016][ T9333] __se_sys_mount+0x2e3/0x3d0 [ 200.630231][ T9333] do_syscall_64+0x4c/0xa0 [ 200.635207][ T9333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.641660][ T9333] [ 200.641660][ T9333] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 200.649772][ T9333] down_read+0x44/0x2e0 [ 200.654477][ T9333] v2_read_dquot+0x4a/0x110 [ 200.659525][ T9333] dquot_acquire+0x152/0x520 [ 200.664650][ T9333] ext4_acquire_dquot+0x2e3/0x4a0 [ 200.670233][ T9333] dqget+0x713/0xbb0 [ 200.674659][ T9333] __dquot_initialize+0x3a9/0xd00 [ 200.680214][ T9333] ext4_mkdir+0x198/0xc90 [ 200.685069][ T9333] vfs_mkdir+0x386/0x570 [ 200.689840][ T9333] do_mkdirat+0x1dd/0x5c0 [ 200.694699][ T9333] __x64_sys_mkdirat+0x85/0x90 [ 200.700005][ T9333] do_syscall_64+0x4c/0xa0 [ 200.704952][ T9333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.711378][ T9333] [ 200.711378][ T9333] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 200.719034][ T9333] __lock_acquire+0x38f7/0x7d40 [ 200.724419][ T9333] lock_acquire+0x19f/0x400 [ 200.729467][ T9333] __mutex_lock_common+0x1e5/0x2400 [ 200.735191][ T9333] mutex_lock_nested+0x17/0x20 [ 200.740483][ T9333] dquot_commit+0x5a/0x410 [ 200.745440][ T9333] ext4_write_dquot+0x1f0/0x360 [ 200.750831][ T9333] mark_all_dquot_dirty+0xf9/0x400 [ 200.756473][ T9333] __dquot_alloc_space+0x5cb/0xe10 [ 200.762116][ T9333] ext4_mb_new_blocks+0xf80/0x47c0 [ 200.767759][ T9333] ext4_ext_map_blocks+0x17d1/0x63d0 [ 200.773581][ T9333] ext4_map_blocks+0x97f/0x1a50 [ 200.778964][ T9333] ext4_getblk+0x176/0x670 [ 200.783908][ T9333] ext4_bread+0x26/0x180 [ 200.788682][ T9333] ext4_append+0x2bb/0x560 [ 200.793628][ T9333] ext4_init_new_dir+0x2a7/0x910 [ 200.799095][ T9333] ext4_mkdir+0x4c3/0xc90 [ 200.803952][ T9333] vfs_mkdir+0x386/0x570 [ 200.808732][ T9333] do_mkdirat+0x1dd/0x5c0 [ 200.813592][ T9333] __x64_sys_mkdirat+0x85/0x90 [ 200.818885][ T9333] do_syscall_64+0x4c/0xa0 [ 200.823829][ T9333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.830253][ T9333] [ 200.830253][ T9333] other info that might help us debug this: [ 200.830253][ T9333] [ 200.840487][ T9333] Chain exists of: [ 200.840487][ T9333] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 200.840487][ T9333] [ 200.854164][ T9333] Possible unsafe locking scenario: [ 200.854164][ T9333] [ 200.861625][ T9333] CPU0 CPU1 [ 200.867002][ T9333] ---- ---- [ 200.872376][ T9333] lock(&ei->i_data_sem/2); [ 200.876979][ T9333] lock(&s->s_dquot.dqio_sem); [ 200.884355][ T9333] lock(&ei->i_data_sem/2); [ 200.891476][ T9333] lock(&dquot->dq_lock); [ 200.895913][ T9333] [ 200.895913][ T9333] *** DEADLOCK *** [ 200.895913][ T9333] [ 200.904065][ T9333] 4 locks held by syz.8.1576/9333: [ 200.909181][ T9333] #0: ffff88805c5ae460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 200.918356][ T9333] #1: ffff888053c649b8 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 200.929015][ T9333] #2: ffff888053c66628 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 200.938966][ T9333] #3: ffffffff8d2416f8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 200.948040][ T9333] [ 200.948040][ T9333] stack backtrace: [ 200.953942][ T9333] CPU: 0 PID: 9333 Comm: syz.8.1576 Not tainted syzkaller #0 [ 200.961347][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 200.971434][ T9333] Call Trace: [ 200.974721][ T9333] [ 200.977659][ T9333] dump_stack_lvl+0x188/0x250 [ 200.982376][ T9333] ? load_image+0x410/0x410 [ 200.986894][ T9333] ? show_regs_print_info+0x20/0x20 [ 200.992216][ T9333] ? print_circular_bug+0x12b/0x1a0 [ 200.997440][ T9333] check_noncircular+0x2f8/0x400 [ 201.002395][ T9333] ? print_deadlock_bug+0x5d0/0x5d0 [ 201.007602][ T9333] ? lockdep_lock+0xf1/0x1f0 [ 201.012212][ T9333] ? mark_lock+0x94/0x320 [ 201.016558][ T9333] ? _find_first_zero_bit+0xd1/0xf0 [ 201.021781][ T9333] __lock_acquire+0x38f7/0x7d40 [ 201.026804][ T9333] ? hlock_conflict+0x59/0x1f0 [ 201.031606][ T9333] ? print_deadlock_bug+0x5d0/0x5d0 [ 201.036831][ T9333] ? lockdep_lock+0xf1/0x1f0 [ 201.041439][ T9333] ? verify_lock_unused+0x140/0x140 [ 201.046677][ T9333] ? lockdep_unlock+0x143/0x2e0 [ 201.051542][ T9333] ? mark_lock+0x94/0x320 [ 201.055881][ T9333] ? __lock_acquire+0x13b3/0x7d40 [ 201.060920][ T9333] lock_acquire+0x19f/0x400 [ 201.065435][ T9333] ? dquot_commit+0x5a/0x410 [ 201.070046][ T9333] ? __might_sleep+0xf0/0xf0 [ 201.074676][ T9333] ? read_lock_is_recursive+0x10/0x10 [ 201.080062][ T9333] ? verify_lock_unused+0x140/0x140 [ 201.085275][ T9333] __mutex_lock_common+0x1e5/0x2400 [ 201.090489][ T9333] ? dquot_commit+0x5a/0x410 [ 201.095095][ T9333] ? dquot_commit+0x5a/0x410 [ 201.099694][ T9333] ? __might_sleep+0xf0/0xf0 [ 201.104291][ T9333] ? mutex_lock_io_nested+0x60/0x60 [ 201.109512][ T9333] mutex_lock_nested+0x17/0x20 [ 201.114282][ T9333] dquot_commit+0x5a/0x410 [ 201.118707][ T9333] ext4_write_dquot+0x1f0/0x360 [ 201.123568][ T9333] mark_all_dquot_dirty+0xf9/0x400 [ 201.128712][ T9333] __dquot_alloc_space+0x5cb/0xe10 [ 201.133838][ T9333] ext4_mb_new_blocks+0xf80/0x47c0 [ 201.138966][ T9333] ? memset+0x1e/0x40 [ 201.142961][ T9333] ? ext4_mb_pa_callback+0xd0/0xd0 [ 201.148092][ T9333] ? ext4_inode_to_goal_block+0x313/0x450 [ 201.153828][ T9333] ext4_ext_map_blocks+0x17d1/0x63d0 [ 201.159146][ T9333] ? ext4_ext_release+0x10/0x10 [ 201.164103][ T9333] ? rwsem_write_trylock+0x135/0x1c0 [ 201.169405][ T9333] ? ext4_es_lookup_extent+0x5fd/0x9f0 [ 201.174883][ T9333] ext4_map_blocks+0x97f/0x1a50 [ 201.179747][ T9333] ? ext4_issue_zeroout+0x250/0x250 [ 201.184956][ T9333] ext4_getblk+0x176/0x670 [ 201.189380][ T9333] ? ext4_get_block_unwritten+0x30/0x30 [ 201.194936][ T9333] ? __brelse+0x55/0x90 [ 201.199100][ T9333] ext4_bread+0x26/0x180 [ 201.203348][ T9333] ext4_append+0x2bb/0x560 [ 201.207774][ T9333] ? ext4_init_new_dir+0x910/0x910 [ 201.212921][ T9333] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 201.218653][ T9333] ext4_init_new_dir+0x2a7/0x910 [ 201.223598][ T9333] ext4_mkdir+0x4c3/0xc90 [ 201.227940][ T9333] ? ext4_symlink+0xcd0/0xcd0 [ 201.232628][ T9333] ? inode_permission+0xef/0x480 [ 201.237574][ T9333] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 201.242607][ T9333] ? security_inode_mkdir+0xb3/0x100 [ 201.247911][ T9333] vfs_mkdir+0x386/0x570 [ 201.252169][ T9333] do_mkdirat+0x1dd/0x5c0 [ 201.256509][ T9333] ? vfs_mkdir+0x570/0x570 [ 201.260936][ T9333] __x64_sys_mkdirat+0x85/0x90 [ 201.265708][ T9333] do_syscall_64+0x4c/0xa0 [ 201.270140][ T9333] ? clear_bhb_loop+0x30/0x80 [ 201.274828][ T9333] ? clear_bhb_loop+0x30/0x80 [ 201.279514][ T9333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.285415][ T9333] RIP: 0033:0x7fcb47e812d9 [ 201.289841][ T9333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.309457][ T9333] RSP: 002b:00007fcb460d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 201.317891][ T9333] RAX: ffffffffffffffda RBX: 00007fcb48108fa0 RCX: 00007fcb47e812d9 [ 201.325869][ T9333] RDX: 00000000000001ff RSI: 0000200000000b40 RDI: ffffffffffffff9c [ 201.333845][ T9333] RBP: 00007fcb47f18888 R08: 0000000000000000 R09: 0000000000000000 [ 201.341818][ T9333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.349795][ T9333] R13: 00007fcb48109038 R14: 00007fcb48108fa0 R15: 00007ffc64c6cbf8 [ 201.357778][ T9333] [ 201.662141][ T13] hid (null): usage index exceeded [ 201.668122][ T13] hid (null): usage index exceeded [ 201.688904][ T13] hid-generic 0003:1B1C:1B27.0012: ignoring exceeding usage max [ 201.698051][ T13] hid-generic 0003:1B1C:1B27.0012: ignoring exceeding usage max [ 201.705988][ T13] hid-generic 0003:1B1C:1B27.0012: usage index exceeded [ 201.713368][ T13] hid-generic 0003:1B1C:1B27.0012: item 0 1 2 2 parsing failed [ 201.721752][ T13] hid-generic: probe of 0003:1B1C:1B27.0012 failed with error -22 [ 201.897342][ T8927] usb 1-1: USB disconnect, device number 13