last executing test programs: 6m22.360442698s ago: executing program 32 (id=1091): r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) 5m29.024061441s ago: executing program 5 (id=1585): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}}, 0x20000400) 5m28.832113312s ago: executing program 5 (id=1588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 5m28.744922328s ago: executing program 5 (id=1590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m28.377823829s ago: executing program 5 (id=1591): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000180)={[{@nomblk_io_submit}, {@mblk_io_submit}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 5m27.691733989s ago: executing program 5 (id=1597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 5m27.191450519s ago: executing program 3 (id=1603): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4b3ad981}, 0x10) write(r0, &(0x7f0000000880)="240000001a005f0400f9f407000904018000200000001700000000810000000040000028", 0x24) 5m27.140853882s ago: executing program 3 (id=1604): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x16) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f000000a040)=0x3) 5m26.979267562s ago: executing program 3 (id=1605): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = dup(r0) sendmsg$netlink(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}], 0x1}, 0x0) 5m26.603255884s ago: executing program 5 (id=1607): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 5m26.603097183s ago: executing program 3 (id=1608): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000180)={[{@nomblk_io_submit}, {@mblk_io_submit}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 5m26.182349268s ago: executing program 33 (id=1607): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 5m26.016572388s ago: executing program 3 (id=1612): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) 5m25.395769295s ago: executing program 3 (id=1613): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2c, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x5, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x0) 5m25.259615793s ago: executing program 34 (id=1613): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2c, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x5, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x0) 2m34.333679654s ago: executing program 0 (id=3341): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="fcffffff00000000899094fb9db1", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m34.122024317s ago: executing program 0 (id=3345): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82900, 0x0) sendfile(r0, r1, 0x0, 0x10ffff) 1m22.799403466s ago: executing program 36 (id=4095): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82900, 0x0) sendfile(r0, r1, 0x0, 0x10ffff) 52.372104653s ago: executing program 9 (id=4336): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 52.310935617s ago: executing program 9 (id=4338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000000000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 52.198118414s ago: executing program 9 (id=4339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 52.040007513s ago: executing program 9 (id=4341): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 51.91980363s ago: executing program 9 (id=4344): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 51.520337374s ago: executing program 9 (id=4352): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 51.014824483s ago: executing program 37 (id=4352): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.007853505s ago: executing program 6 (id=4794): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000406a05310300000000000109022400010000000009040000010300000009210000120122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 3.837776614s ago: executing program 4 (id=4805): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0) read$alg(r0, &(0x7f0000000240)=""/4096, 0xfffffdef) 3.013134663s ago: executing program 6 (id=4812): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) 2.788594426s ago: executing program 8 (id=4815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc53c06d2626cc3f0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.73159596s ago: executing program 6 (id=4816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e00002d5f003a0c0003"], 0x30}}, 0x0) 2.490980324s ago: executing program 6 (id=4818): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000002140)=ANY=[@ANYBLOB="02020c"], 0x0, 0x0, 0x0}, 0x0) 2.487332504s ago: executing program 4 (id=4819): timer_create(0x0, &(0x7f00000001c0)={0x0, 0x17, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000000)) 2.395148119s ago: executing program 8 (id=4820): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) 2.394641149s ago: executing program 2 (id=4821): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x48000) 2.250132677s ago: executing program 4 (id=4823): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x19) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000', @ANYRESDEC=0x0]) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000080)='trans=tcp,') 2.112040176s ago: executing program 1 (id=4824): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) 2.111635916s ago: executing program 2 (id=4825): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000440)=""/279, 0x117}, {&(0x7f0000000d00)=""/4056, 0xfd8}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f0000000680)=""/200, 0xc8}, {&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f0000000280)=""/187, 0xbb}, {&(0x7f00000000c0)=""/192, 0xc0}], 0x7}, 0x10182) 2.04634462s ago: executing program 4 (id=4826): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.938600966s ago: executing program 1 (id=4827): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x801, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6207, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0000, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) 1.855890161s ago: executing program 4 (id=4828): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f00000004c0)=ANY=[], 0x1, 0x0, &(0x7f0000000480)) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.797316094s ago: executing program 2 (id=4829): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800010003000000340004800500030001000000050003000000000005000333310738000500030000000000050003008000000005000300070000000800020002"], 0x58}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 1.439548045s ago: executing program 2 (id=4830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x2, 0x2, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r0}, 0x38) 1.112310595s ago: executing program 2 (id=4831): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07022c2277ae11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 1.080970166s ago: executing program 1 (id=4832): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 954.049423ms ago: executing program 8 (id=4833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x10, 0x40, 0x4, 0x0, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x21}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x20480d0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="e4ffffff000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0) 797.655503ms ago: executing program 1 (id=4834): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000340)='./file0\x00', 0x3800813, &(0x7f0000000680)={[{@iocharset={'iocharset', 0x3d, 'cp863'}}, {@map_acorn}, {@overriderock}, {@nojoliet}, {@nojoliet}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x3}}, {@dmode={'dmode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x80}}, {@hide}, {@nojoliet}, {@map_acorn}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@overriderock}, {@uid}, {@check_relaxed}, {@overriderock}, {@utf8}]}, 0x5, 0xa51, &(0x7f0000001240)="$eJzs3ctvXNd9B/DvHZISQ7u24qiuKzjiSK4UxmEpkqqlCl6kEjmSmPJRkBRgoYsojahCEFu3cQs4RoEoQNFVjBZo0UW7M7rqykA2TReFN0W7a1ZdFCj8LwRdqSsG986QHJIzHIrhy8rnQ8zMffzuOec+zj2cmTv3hC+WtVe3jK2tVY99jt/75yMoMSfYrenPP/n04/Lxw6c5lb68U/xLMpiknvQneSMZmJpeXJjrkdCT5EGSz5Iiyek0X/fkQYq/zsub45+l+Mcy365O7TVlelnjl9pxH38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHASFVPT4+MTxanMzN97r96U1HeYml5cKLK2tnPO+jJNP6l6/S5+0jPfpCgfGRxc7+r7jbObs19PUr+YN5tjb1YdkmcwH730+pl3v9JfW1++W2l+Iaf3nuwH3//oyXdWV1e+13FuURxgqU6Y5jFypzE/s7QwM3fzTqM+s7RQv3Ht2viVu7eX6rdnZhtL95eWG3P1qcXGzeWFxfrI1NfrEzduXK03xu4v3Ju/Mz0221ifeP03J8fHr9W/NfZ7jZuLSwvzV741tjR1d2Z2dmb+ThVTzi5jrpcH4u/OLNeXGzfn6vVHj1dXrm4rWV+2Hb9l0ESv9SmDJnsFTY5PTk5MTE5O/LDVe/bGhGvv3Hjn+vh4/3jTy2kNZEfEIR20nCxf6r6bD/4kDvtUa7b/yWxmMp97eS/1jn9Tmc5iFjLXZX7Levt/6Upj12zT1v63Wvn+tvnnyqeLOd8aHezS/ncpy9H9fZDv56M8yXeymtWs5HvHXqKj/buTRuYzk6UsZCZzuVlNqbem1HMj13It4/l27mY4S+nP7cxkNo0s5X6WspxGdURNZTGN3MxyFrKYekYyla+nnoncyI1cTT2NjOV+FnIv87mT6dysUnmUx9V2v7pLGTeCJvYSNLlL0I7GvFv7v2H7Io3t/5zwAqrtupcP4SwO+7PWav9P9Q4dmdoy2n94hQIAAAAO1K//Z145+9p//G9S5KvV9/K3Z2Yb48ddLAAAAOAAVZfrvVm+DJRDX03h/T8AAAC8aIrqN3ZFkqEMN4fWfwnlQwAAAAB4QVTf/59PMbw5wft/AAAAeMH0vsd+z4hidP32v/WHzdeHrYjmWDF0e2a2MTa1MPvuRC5XdxmofmmwI7W+pBiofn7wdi40oy4MNV+HNlMs8xwsoybG3p3I27nYWpGRt8qXt0Y6RE42I7/WjPxae2RftkReLSMB4EV3cZf2eK/t/9sZbUaMnqua/P5zW9rgvqplHdeyAsBJsdHHzv+3ujTr0P6fb94b4Hy39v+3dnn/X0a8lkfDzUsKxvLdvJ/VPMxoWlccDHdKdb03guZlCKM9Pg0Yal2y8NPrtYzu+DxgcGNd22NXMpnRjp8ItKVbrJfhajOu77D2AgAcrYu7tsPr7X/1IXnX9n909/f/bW2uSwoB4CTY6MH+eQeG9x583OsIAGyllQYAAAAAAAAAAAAAAAAAAAAAAAAAAICDt6cb+P/X5WR1dSXZb2cBHQZ++u//+itdY370UjL4PCXcfaCWAynz6SQHsu6HN9CX5Lhy/2aee6lyH5+UTfciDRRPqwr7C6VzzCcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjkSR9HWaXktOJxlPcuXoS3V4nh53AQ5KfX+LFc/yLB/mlYMuDgAAAAAAAAAAAAAAAAAAAAAAAAAAAADAL7vW/f9rab6+1JyU/lpyKcmDJL9/3GV8HoM95j87onKcPH9UPbfd/7+WDGStSH/W1tbWkmJganpxYa48FIrT5fzPP/n04/LRNckfrA/s7FWhTKDMYUvnEq0c2qYMbF3qy9VSQ9MrHzz5s/f/pD59qzowby3fnp2eu7P4O5uBrxc/bnaB0N4Nwnp5/+LSv/1N2+RTrcx/nP5uK7I939tVvtM78/21Tkt3yXcPHq+uTJY5LTfeW/7zP661z3otF5K3RpKRrTn9YfnoktOF7dtzq+JnxV8Vr+Tv86Da/+XWKNaKche9Wq3/lx49Xl0Z++77qw83yvSDxx+2JXAmw0kebq1lPco0XJ1POnqpynWgzHW8CiqfzvZIb1dtKU5sbtct6/Dl6pAZeq51qHdfh0qP7d4q0dXtJVorK8nf/ulXcnnXPX26Q4qXe+TYUfGz4n+Ku/nv/GVb/x+1cv9fSsfa2SGJKrLtSGmft6V61S5trvlk+4xvb0+za63kEPwof5Df3tj/ter8315vJrvUm43z0TfbJnapN+tVq0u9OL21pu6oFy296sXOmvpPr+5oUbbmmrPbWqTW2afbMq1ynm1GdSnnr+YbSf+55zqjfKPHGaXX8vut//9QjOT/8lT/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMlXJH2dpteSS0nOJHm1HK8na9tjnu4jv9pQsZ9iHpj9lPmLp+i6osWzPMuHeeWoSwQAAAAAAADA4bg1/fknn35cPqrv4/vyG7XWnHrSn+RM8XcDU9OLC3M9EhpIHqx/pT/YOaTL5Dwon17eHP+sHHujR37He/kAAHyh/TwAAP//FnluMg==") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 716.117888ms ago: executing program 2 (id=4835): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x19) 648.490722ms ago: executing program 8 (id=4836): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2503feffffff0000000016"], 0x28}}, 0x0) 486.682531ms ago: executing program 1 (id=4837): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 388.222707ms ago: executing program 6 (id=4838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 304.060572ms ago: executing program 8 (id=4839): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000027c0)={{{@in6=@private1, @in=@multicast2, 0x4e24, 0x6, 0x4e23, 0xfff7, 0x2, 0x0, 0x80}, {0xa, 0x8, 0x76b, 0x100000000, 0x5, 0x81, 0x4, 0xffffffffffffffff}, {0x3, 0x5, 0x9, 0x7}, 0x3d3a, 0x6e6bb7, 0x2, 0x1, 0x2, 0x3}, {{@in=@private=0xa010100, 0x4d6, 0x33}, 0x2, @in6=@private2, 0x0, 0x1, 0x3, 0x3, 0x2, 0x2, 0x6}}, 0xe8) 250.927215ms ago: executing program 1 (id=4840): sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000001}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020813050503"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 129.725142ms ago: executing program 8 (id=4841): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 49.667767ms ago: executing program 4 (id=4842): ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 0s ago: executing program 6 (id=4843): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) kernel console output (not intermixed with test programs): : ro->rw transition prohibited on norecovery mount [ 439.809632][ T8732] XFS (loop7): Unmounting Filesystem [ 439.845553][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.861554][T15180] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3831'. [ 440.657541][T15203] loop8: detected capacity change from 0 to 4096 [ 440.715906][T15203] ntfs: (device loop8): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 441.041210][T15203] ntfs: (device loop8): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 441.141483][T15203] ntfs: volume version 3.1. [ 441.166454][T15203] ntfs: (device loop8): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 441.190640][T15203] ntfs: (device loop8): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 441.221621][T15203] ntfs: (device loop8): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 441.728821][T15199] loop6: detected capacity change from 0 to 40427 [ 441.773174][T15199] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7 [ 441.781435][T15199] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff [ 441.835874][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3853'. [ 441.851336][T15199] F2FS-fs (loop6): invalid crc value [ 441.887848][T15199] F2FS-fs (loop6): Found nat_bits in checkpoint [ 442.022920][T15199] F2FS-fs (loop6): Start checkpoint disabled! [ 442.068389][T15199] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 442.195994][T15249] loop8: detected capacity change from 0 to 4096 [ 442.270001][T15249] EXT4-fs (loop8): Test dummy encryption mode enabled [ 442.310989][T15249] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 442.322760][T15249] System zones: 0-5 [ 442.341887][T15259] loop4: detected capacity change from 0 to 2048 [ 442.363845][T15249] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 442.403141][T15261] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 442.640036][T13827] EXT4-fs (loop8): unmounting filesystem. [ 442.787372][T15272] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3866'. [ 442.836475][T15272] netlink: zone id is out of range [ 442.859079][T15272] netlink: zone id is out of range [ 442.885186][T15272] netlink: zone id is out of range [ 442.912231][T15272] netlink: zone id is out of range [ 442.927824][T15272] netlink: zone id is out of range [ 442.933546][ T9244] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 442.947857][T15272] netlink: zone id is out of range [ 442.954324][T15272] netlink: zone id is out of range [ 443.161597][ T9244] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.189430][ T9244] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 443.207811][T15287] loop8: detected capacity change from 0 to 1024 [ 443.214606][ T9244] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.230719][ T9244] usb 7-1: config 0 descriptor?? [ 443.241537][T15287] EXT4-fs: Ignoring removed nobh option [ 443.281443][T15287] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 443.390261][T15287] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 443.419862][T15293] loop7: detected capacity change from 0 to 2048 [ 443.488314][T15293] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.498849][T13827] EXT4-fs (loop8): unmounting filesystem. [ 443.617025][T15282] loop4: detected capacity change from 0 to 32768 [ 443.685385][ T9244] lenovo 0003:17EF:6047.0041: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 443.718682][T15295] loop8: detected capacity change from 0 to 256 [ 443.796428][T15295] FAT-fs (loop8): Directory bread(block 64) failed [ 443.852139][T15295] FAT-fs (loop8): Directory bread(block 65) failed [ 443.868832][ T9244] lenovo 0003:17EF:6047.0041: Failed to switch F7/9/11 mode: -71 [ 443.880683][T15295] FAT-fs (loop8): Directory bread(block 66) failed [ 443.909053][ T9244] lenovo 0003:17EF:6047.0041: Failed to switch middle button: -71 [ 443.917585][T15295] FAT-fs (loop8): Directory bread(block 67) failed [ 443.927749][ T9244] lenovo 0003:17EF:6047.0041: Fn-lock setting failed: -71 [ 443.937874][T15295] FAT-fs (loop8): Directory bread(block 68) failed [ 443.945425][T15295] FAT-fs (loop8): Directory bread(block 69) failed [ 443.952434][ T9244] lenovo 0003:17EF:6047.0041: Sensitivity setting failed: -71 [ 443.966988][T15295] FAT-fs (loop8): Directory bread(block 70) failed [ 443.979319][ T9244] usb 7-1: USB disconnect, device number 13 [ 443.996112][T15295] FAT-fs (loop8): Directory bread(block 71) failed [ 444.017743][T15295] FAT-fs (loop8): Directory bread(block 72) failed [ 444.030713][T15295] FAT-fs (loop8): Directory bread(block 73) failed [ 444.208276][T15303] sg_write: data in/out 532239/1 bytes for SCSI command 0x1c-- guessing data in; [ 444.208276][T15303] program syz.4.3878 not setting count and/or reply_len properly [ 444.259314][T15301] fido_id[15301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 445.711793][T15350] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3902'. [ 445.737888][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3902'. [ 445.757427][T15354] ptrace attach of ""[15355] was attempted by "./syz-executor exec"[15354] [ 446.290193][T15369] xt_time: unknown flags 0xf4 [ 446.513275][T15378] loop4: detected capacity change from 0 to 256 [ 446.557883][T15378] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 446.599576][T15378] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 446.638574][T15378] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 447.229235][T15407] loop6: detected capacity change from 0 to 2048 [ 447.302321][T15407] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 447.334528][T15411] sp0: Synchronizing with TNC [ 447.350430][T15410] [U] è [ 447.387463][T15417] loop7: detected capacity change from 0 to 256 [ 447.437726][T15417] FAT-fs (loop7): Directory bread(block 64) failed [ 447.512368][T15417] FAT-fs (loop7): Directory bread(block 65) failed [ 447.542341][T15417] FAT-fs (loop7): Directory bread(block 66) failed [ 447.547270][T15419] loop6: detected capacity change from 0 to 64 [ 447.555250][T15417] FAT-fs (loop7): Directory bread(block 67) failed [ 447.582276][T15417] FAT-fs (loop7): Directory bread(block 68) failed [ 447.589407][T15417] FAT-fs (loop7): Directory bread(block 69) failed [ 447.649841][T15417] FAT-fs (loop7): Directory bread(block 70) failed [ 447.712519][T15417] FAT-fs (loop7): Directory bread(block 71) failed [ 447.740508][T15417] FAT-fs (loop7): Directory bread(block 72) failed [ 447.757484][T15417] FAT-fs (loop7): Directory bread(block 73) failed [ 447.981347][T15430] loop6: detected capacity change from 0 to 256 [ 448.046289][T15434] loop4: detected capacity change from 0 to 128 [ 448.367466][T15443] device macsec1 entered promiscuous mode [ 448.502903][T15445] loop6: detected capacity change from 0 to 4096 [ 448.635501][T15445] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 448.872209][ T5338] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 448.881110][ T8716] EXT4-fs (loop6): unmounting filesystem. [ 449.062334][ T5338] usb 2-1: Using ep0 maxpacket: 16 [ 449.070050][ T5338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.104951][ T5338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.151721][ T5338] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.165774][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3959'. [ 449.209031][ T5338] usb 2-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 449.248711][ T5338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.268769][ T5338] usb 2-1: config 0 descriptor?? [ 449.404173][T15462] loop7: detected capacity change from 0 to 32768 [ 449.710660][ T5338] apple 0003:05AC:027B.0042: hidraw0: USB HID v0.00 Device [HID 05ac:027b] on usb-dummy_hcd.1-1/input0 [ 449.905196][ T5338] usb 2-1: USB disconnect, device number 39 [ 450.033251][T15493] fido_id[15493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 450.252713][T15499] loop7: detected capacity change from 0 to 136 [ 450.266291][T15503] loop4: detected capacity change from 0 to 512 [ 450.371198][T15485] loop8: detected capacity change from 0 to 32768 [ 450.388516][T15503] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 450.495450][T15503] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 450.524489][T15503] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.3971: Corrupt directory, running e2fsck is recommended [ 450.578121][T15485] XFS (loop8): Mounting V5 Filesystem [ 450.579166][T15515] exfat: Deprecated parameter 'namecase' [ 450.589526][T15515] exfat: Deprecated parameter 'namecase' [ 450.595567][T15515] exfat: Deprecated parameter 'namecase' [ 450.608662][T15503] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 450.655022][T15515] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x079995a4, utbl_chksum : 0xe619d30d) [ 450.692757][T15503] EXT4-fs error (device loop4): ext4_iget_extra_inode:4756: inode #15: comm syz.4.3971: corrupted in-inode xattr [ 450.724832][T15485] XFS (loop8): Ending clean mount [ 450.749307][T15503] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3971: couldn't read orphan inode 15 (err -117) [ 450.774596][T15503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 450.883846][T13827] XFS (loop8): Unmounting Filesystem [ 450.971411][T15503] EXT4-fs error (device loop4): __ext4_remount:6644: comm syz.4.3971: Abort forced by user [ 451.039895][T15503] EXT4-fs (loop4): Remounting filesystem read-only [ 451.077679][T15503] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 451.254272][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 451.702335][ T5338] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 451.823126][T15553] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3990'. [ 451.894679][ T5338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.939404][ T5338] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 451.971339][ T5338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.022900][ T5338] usb 5-1: config 0 descriptor?? [ 452.036845][T15560] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 452.116897][ T27] audit: type=1800 audit(2000000160.150:276): pid=15557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3993" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 452.155739][T15562] netlink: 'syz.6.3994': attribute type 1 has an invalid length. [ 452.189600][T15562] nbd: error processing sock list [ 452.217084][T15560] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 452.262000][T15560] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 452.358351][T15560] Remounting filesystem read-only [ 452.455907][ T5338] logitech-djreceiver 0003:046D:C71F.0043: unbalanced collection at end of report description [ 452.477453][ T5338] logitech-djreceiver 0003:046D:C71F.0043: logi_dj_probe: parse failed [ 452.492013][ T5338] logitech-djreceiver: probe of 0003:046D:C71F.0043 failed with error -22 [ 452.523838][T13827] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 452.671582][ T5338] usb 5-1: USB disconnect, device number 22 [ 452.824669][T15576] sctp: [Deprecated]: syz.7.3999 (pid 15576) Use of int in maxseg socket option. [ 452.824669][T15576] Use struct sctp_assoc_value instead [ 453.286294][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4008'. [ 453.358762][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4009'. [ 453.410073][T15596] device erspan0 entered promiscuous mode [ 453.461803][T15596] device erspan0 left promiscuous mode [ 454.000569][T15627] IPVS: set_ctl: invalid protocol: 36 100.1.1.0:20003 [ 454.574550][ T6269] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 454.778339][ T6269] usb 9-1: Using ep0 maxpacket: 8 [ 454.788405][ T6269] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 454.837576][ T6269] usb 9-1: config 179 has no interface number 0 [ 454.849699][ T6269] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 454.878560][ T6269] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 454.909610][ T6269] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 454.941352][ T6269] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 454.964681][ T6269] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 454.990281][ T6269] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 455.014342][ T6269] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.032484][ T9244] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 455.040222][T15633] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 455.247333][ T9244] usb 2-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 455.270816][ T9244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.294539][ T9244] usb 2-1: config 0 descriptor?? [ 455.368351][T15667] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4040'. [ 455.409241][T15656] set_capacity_and_notify: 2 callbacks suppressed [ 455.409258][T15656] loop6: detected capacity change from 0 to 32768 [ 455.466216][T15656] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.4034 (15656) [ 455.495902][T15656] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 455.506697][T15656] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 455.516198][T15656] BTRFS info (device loop6): using free space tree [ 455.566749][T15656] BTRFS info (device loop6): enabling ssd optimizations [ 455.595174][ T6269] usb 9-1: USB disconnect, device number 5 [ 455.595230][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 455.609422][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 455.673196][ T8716] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 455.740285][ T9244] asus 0003:0B05:19B6.0044: unknown main item tag 0x0 [ 455.747825][ T9244] asus 0003:0B05:19B6.0044: item fetching failed at offset 3/5 [ 455.756035][ T9244] asus 0003:0B05:19B6.0044: Asus hid parse failed: -22 [ 455.763149][ T9244] asus: probe of 0003:0B05:19B6.0044 failed with error -22 [ 455.951710][ T9244] usb 2-1: USB disconnect, device number 40 [ 456.589091][T15709] loop8: detected capacity change from 0 to 512 [ 456.589115][T15708] fuse: Unexpected value for 'default_permissions' [ 456.615488][T15709] EXT4-fs: Ignoring removed mblk_io_submit option [ 456.672405][T15709] EXT4-fs: inline encryption not supported [ 456.696473][T15709] EXT4-fs (loop8): Test dummy encryption mode enabled [ 456.726204][T15709] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 456.790005][T15709] EXT4-fs (loop8): 1 truncate cleaned up [ 456.801972][T15709] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 456.899088][T13827] EXT4-fs (loop8): unmounting filesystem. [ 457.042144][ T9244] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 457.228499][ T6892] Process accounting resumed [ 457.244013][ T9244] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 457.262114][ T9244] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 457.284490][ T9244] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 457.302997][T15732] Process accounting resumed [ 457.310630][ T9244] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 457.330573][ T9244] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 457.377405][ T9244] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 457.388010][ T9244] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 457.402443][ T5337] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 457.410315][ T9244] usb 2-1: Product: syz [ 457.419074][ T9244] usb 2-1: Manufacturer: syz [ 457.452641][ T9244] cdc_wdm 2-1:1.0: skipping garbage [ 457.457913][ T9244] cdc_wdm 2-1:1.0: skipping garbage [ 457.488429][ T9244] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 457.495836][ T9244] cdc_wdm 2-1:1.0: Unknown control protocol [ 457.584154][ T5337] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 457.597417][ T5337] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 457.610192][ T5337] usb 5-1: config 0 interface 0 has no altsetting 0 [ 457.628993][ T5337] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 457.641273][ T5337] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=116 [ 457.660831][ T5337] usb 5-1: Product: syz [ 457.666151][ T5337] usb 5-1: Manufacturer: syz [ 457.670912][ T5337] usb 5-1: SerialNumber: syz [ 457.698527][ T5337] usb 5-1: config 0 descriptor?? [ 457.718769][ T5337] usb 5-1: selecting invalid altsetting 0 [ 457.753831][ T4337] usb 2-1: USB disconnect, device number 41 [ 457.955069][ T6268] usb 5-1: USB disconnect, device number 23 [ 458.207834][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4075'. [ 458.253538][T15765] loop6: detected capacity change from 0 to 512 [ 458.613345][ T27] audit: type=1326 audit(2000000166.650:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15774 comm="syz.1.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511519aeb9 code=0x7ffc0000 [ 458.718613][ T27] audit: type=1326 audit(2000000166.650:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15774 comm="syz.1.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f511519aeb9 code=0x7ffc0000 [ 458.778264][T15781] loop7: detected capacity change from 0 to 1024 [ 458.808901][ T27] audit: type=1326 audit(2000000166.650:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15774 comm="syz.1.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511519aeb9 code=0x7ffc0000 [ 458.852592][ T27] audit: type=1326 audit(2000000166.650:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15774 comm="syz.1.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511519aeb9 code=0x7ffc0000 [ 458.887256][T15785] tipc: Enabling of bearer rejected, failed to enable media [ 458.907518][T15781] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 458.921704][ T27] audit: type=1326 audit(2000000166.650:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15774 comm="syz.1.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f511519aeb9 code=0x7ffc0000 [ 458.980505][ T27] audit: type=1326 audit(2000000166.650:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15774 comm="syz.1.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511519aeb9 code=0x7ffc0000 [ 459.050566][ T27] audit: type=1326 audit(2000000166.650:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15774 comm="syz.1.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511519aeb9 code=0x7ffc0000 [ 459.080068][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.137826][ T8732] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 459.138636][ T8732] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 459.212295][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.444730][ T8732] EXT4-fs (loop7): unmounting filesystem. [ 459.641901][ T33] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.765470][T15784] loop8: detected capacity change from 0 to 40427 [ 459.801186][T15784] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x3ffff [ 459.823777][T15784] F2FS-fs (loop8): invalid crc value [ 459.838748][ T33] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.857914][T15784] F2FS-fs (loop8): Found nat_bits in checkpoint [ 459.911472][T15784] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 460.083099][ T33] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.099572][T13827] syz-executor: attempt to access beyond end of device [ 460.099572][T13827] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 460.123456][T15811] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 460.131744][T15811] tipc: Enabled bearer , priority 10 [ 460.266718][ T33] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.788393][T15828] loop1: detected capacity change from 0 to 256 [ 460.818704][ T4278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 460.833104][ T4278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 460.842974][ T4278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 460.850680][ T4278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 460.858379][ T4278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 460.870344][ T4278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 460.974744][T15824] loop6: detected capacity change from 0 to 4096 [ 460.975283][T15828] FAT-fs (loop1): Directory bread(block 64) failed [ 461.035457][T15824] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 461.052526][T15828] FAT-fs (loop1): Directory bread(block 65) failed [ 461.059255][T15828] FAT-fs (loop1): Directory bread(block 66) failed [ 461.102417][T15828] FAT-fs (loop1): Directory bread(block 67) failed [ 461.109480][T15828] FAT-fs (loop1): Directory bread(block 68) failed [ 461.180157][T15828] FAT-fs (loop1): Directory bread(block 69) failed [ 461.192404][T15828] FAT-fs (loop1): Directory bread(block 70) failed [ 461.234746][T15828] FAT-fs (loop1): Directory bread(block 71) failed [ 461.241605][T15824] ntfs3: loop6: failed to convert "c46c" to iso8859-14 [ 461.293407][T15828] FAT-fs (loop1): Directory bread(block 72) failed [ 461.353611][T15828] FAT-fs (loop1): Directory bread(block 73) failed [ 461.622245][ T6892] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 461.842587][ T6892] usb 9-1: Using ep0 maxpacket: 32 [ 461.849577][ T6892] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.864429][ T6892] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.874545][ T6892] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 461.883911][ T6892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.893860][ T6892] usb 9-1: config 0 descriptor?? [ 462.025063][T15825] chnl_net:caif_netlink_parms(): no params data found [ 462.307388][ T6892] kone 0003:1E7D:2CED.0045: unknown main item tag 0x0 [ 462.322142][ T6892] kone 0003:1E7D:2CED.0045: unknown main item tag 0x0 [ 462.349335][ T6892] kone 0003:1E7D:2CED.0045: unknown main item tag 0x0 [ 462.369570][ T6892] kone 0003:1E7D:2CED.0045: unknown main item tag 0x0 [ 462.392435][ T6892] kone 0003:1E7D:2CED.0045: unknown main item tag 0x0 [ 462.409576][ T6892] kone 0003:1E7D:2CED.0045: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.8-1/input0 [ 462.515492][ T6892] kone 0003:1E7D:2CED.0045: couldn't init struct kone_device [ 462.523223][ T6892] kone 0003:1E7D:2CED.0045: couldn't install mouse [ 462.542567][ T6892] kone: probe of 0003:1E7D:2CED.0045 failed with error -5 [ 462.580827][ T6892] usb 9-1: USB disconnect, device number 6 [ 462.731855][T15877] fido_id[15877]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 462.894113][T15825] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.901355][T15825] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.918916][T15884] loop6: detected capacity change from 0 to 64 [ 462.925538][T15825] device bridge_slave_0 entered promiscuous mode [ 462.940574][T15825] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.951230][T15825] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.962222][ T4275] Bluetooth: hci4: command 0x0409 tx timeout [ 462.996675][T15884] Trying to free block not in datazone [ 463.003741][T15825] device bridge_slave_1 entered promiscuous mode [ 463.008766][T15862] loop1: detected capacity change from 0 to 32768 [ 463.010357][T15884] Trying to free block not in datazone [ 463.038837][T15884] Trying to free block not in datazone [ 463.136768][T15825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.208940][T15825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.392802][ T33] IPVS: stopping backup sync thread 13499 ... [ 463.443375][T15825] team0: Port device team_slave_0 added [ 463.784272][T15825] team0: Port device team_slave_1 added [ 463.876032][T15825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.947943][T15825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.032207][T15825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.246644][T15888] loop8: detected capacity change from 0 to 32768 [ 464.293249][T15888] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.4125 (15888) [ 464.298237][T15913] loop6: detected capacity change from 0 to 8 [ 464.421635][T15888] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 464.476639][T15888] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 464.501717][T15825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.507138][T15888] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 464.529458][T15825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.539101][T15888] BTRFS info (device loop8): use zstd compression, level 3 [ 464.650249][T15888] BTRFS info (device loop8): using free space tree [ 464.670484][T15825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.750801][T15898] loop1: detected capacity change from 0 to 32768 [ 464.860991][ T33] device hsr_slave_0 left promiscuous mode [ 464.887437][T15898] XFS (loop1): Mounting V5 Filesystem [ 464.893579][ T33] device hsr_slave_1 left promiscuous mode [ 464.927428][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.942538][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.961226][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.969065][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.969084][T15898] XFS (loop1): Ending clean mount [ 464.998866][T15888] BTRFS info (device loop8): enabling ssd optimizations [ 465.014970][ T33] device bridge_slave_1 left promiscuous mode [ 465.021279][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.033551][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 465.044515][T15898] XFS (loop1): Quotacheck needed: Please wait. [ 465.122921][ T33] device bridge_slave_0 left promiscuous mode [ 465.130411][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.163938][T15898] XFS (loop1): Quotacheck: Done. [ 465.379977][ T33] device veth1_macvtap left promiscuous mode [ 465.408851][ T33] device veth0_macvtap left promiscuous mode [ 465.443260][T13827] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 465.453972][ T33] device veth1_vlan left promiscuous mode [ 465.466850][ T8657] XFS (loop1): Unmounting Filesystem [ 465.503751][ T33] device veth0_vlan left promiscuous mode [ 465.596009][ T4462] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop8 scanned by udevd (4462) [ 465.626155][T15960] loop4: detected capacity change from 0 to 128 [ 465.694698][T15960] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 465.953955][ T4272] sysv_free_block: trying to free block not in datazone [ 465.977118][ T4272] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 466.561215][ T6888] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 466.666751][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.825201][ T6888] usb 9-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 466.859406][ T6888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.872380][ T6888] usb 9-1: config 0 descriptor?? [ 467.014144][ T27] audit: type=1326 audit(2000000175.040:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15971 comm="syz.4.4147" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b5a59aeb9 code=0x0 [ 467.112186][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 467.302478][ T6888] hid-alps 0003:044E:120C.0046: hidraw0: USB HID v0.06 Device [HID 044e:120c] on usb-dummy_hcd.8-1/input0 [ 467.501216][ T6888] usb 9-1: USB disconnect, device number 7 [ 467.695840][ T33] team0 (unregistering): Port device team_slave_1 removed [ 467.715810][T15984] loop1: detected capacity change from 0 to 4096 [ 467.773913][T15984] ntfs: volume version 3.1. [ 467.824185][ T33] team0 (unregistering): Port device team_slave_0 removed [ 467.987875][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.136599][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.488707][T15988] loop4: detected capacity change from 0 to 40427 [ 468.536369][T15988] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 468.548292][T15988] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 468.560921][T15988] F2FS-fs (loop4): invalid crc value [ 468.596516][T15988] F2FS-fs (loop4): Found nat_bits in checkpoint [ 468.659708][T15988] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 468.667048][T15988] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 469.082214][ T6888] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 469.191129][ T33] bond0 (unregistering): Released all slaves [ 469.197248][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 469.202379][ T6886] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 469.282570][ T6888] usb 9-1: Using ep0 maxpacket: 16 [ 469.290753][ T6888] usb 9-1: unable to get BOS descriptor or descriptor too short [ 469.300147][ T6888] usb 9-1: config 13 has an invalid interface number: 50 but max is 0 [ 469.309921][ T6888] usb 9-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 469.320513][ T6888] usb 9-1: config 13 has no interface number 0 [ 469.327012][ T6888] usb 9-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 469.337580][ T6888] usb 9-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0 [ 469.348089][ T6888] usb 9-1: config 13 interface 50 has no altsetting 0 [ 469.357663][ T6888] usb 9-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 469.369332][ T6888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.377448][T15925] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4138'. [ 469.386529][ T6886] usb 5-1: Using ep0 maxpacket: 8 [ 469.402976][ T6886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 469.422159][ T6888] usb 9-1: Product: syz [ 469.442651][ T6886] usb 5-1: config index 0 descriptor too short (expected 51, got 18) [ 469.455598][T15825] device hsr_slave_0 entered promiscuous mode [ 469.461371][ T6888] usb 9-1: Manufacturer: syz [ 469.471539][ T6888] usb 9-1: SerialNumber: syz [ 469.476422][ T6886] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 469.494920][T15825] device hsr_slave_1 entered promiscuous mode [ 469.506194][T16000] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 469.517075][ T6886] usb 5-1: config 4 has no interface number 0 [ 469.542788][ T6886] usb 5-1: config 4 interface 30 has no altsetting 0 [ 469.575748][ T6886] usb 5-1: string descriptor 0 read error: -22 [ 469.587556][T15825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.598554][ T6886] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 469.610716][T15825] Cannot create hsr debugfs directory [ 469.621104][T16005] loop1: detected capacity change from 0 to 64 [ 469.636414][ T6886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.681660][ T6886] dw2102: su3000_identify_state [ 469.721978][ T6886] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 469.779412][ T6886] dw2102: su3000_power_ctrl: 1, initialized 0 [ 469.792889][ T6886] dvb-usb: bulk message failed: -22 (2/0) [ 469.802278][ T6888] usb 9-1: MIDIStreaming interface descriptor not found [ 469.851150][ T6886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 469.885620][T16002] dvb-usb: bulk message failed: -22 (3/0) [ 469.894425][ T6888] usb 9-1: USB disconnect, device number 8 [ 469.920478][ T6886] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 469.942257][T16002] dw2102: i2c transfer failed. [ 469.957135][ T6886] usb 5-1: media controller created [ 469.995633][ T6886] dvb-usb: bulk message failed: -22 (6/0) [ 470.005699][ T6886] dw2102: i2c transfer failed. [ 470.015663][ T6886] dvb-usb: bulk message failed: -22 (6/0) [ 470.025763][ T6886] dw2102: i2c transfer failed. [ 470.054643][ T6886] dvb-usb: bulk message failed: -22 (6/0) [ 470.064072][ T6886] dw2102: i2c transfer failed. [ 470.068916][ T6886] dvb-usb: bulk message failed: -22 (6/0) [ 470.081694][ T6886] dw2102: i2c transfer failed. [ 470.092616][ T6886] dvb-usb: bulk message failed: -22 (6/0) [ 470.098399][ T6886] dw2102: i2c transfer failed. [ 470.122100][ T6886] dvb-usb: bulk message failed: -22 (6/0) [ 470.128135][ T6886] dw2102: i2c transfer failed. [ 470.143254][ T6886] dvb-usb: MAC address: 02:02:02:02:02:02 [ 470.185769][ T6886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 470.261400][T15825] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 470.266586][ T6886] dvb-usb: bulk message failed: -22 (3/0) [ 470.301930][ T6886] dw2102: command 0x0e transfer failed. [ 470.340116][T15825] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 470.352763][ T6886] dvb-usb: bulk message failed: -22 (3/0) [ 470.376895][ T6886] dw2102: command 0x0e transfer failed. [ 470.401367][T15825] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 470.498838][T15825] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 470.732083][ T6886] dvb-usb: bulk message failed: -22 (3/0) [ 470.737892][ T6886] dw2102: command 0x0e transfer failed. [ 470.762954][ T6886] dvb-usb: bulk message failed: -22 (3/0) [ 470.788365][ T6886] dw2102: command 0x0e transfer failed. [ 470.807755][ T6886] dvb-usb: bulk message failed: -22 (1/0) [ 470.826586][ T6886] dw2102: command 0x51 transfer failed. [ 470.867205][ T6886] dvb-usb: bulk message failed: -22 (5/0) [ 470.912806][ T6886] dw2102: i2c probe for address 0x68 failed. [ 470.934750][ T6886] dvb-usb: bulk message failed: -22 (5/0) [ 470.940555][ T6886] dw2102: i2c probe for address 0x69 failed. [ 471.037256][ T6886] dvb-usb: bulk message failed: -22 (5/0) [ 471.037625][T15825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.069669][ T6886] dw2102: i2c probe for address 0x6a failed. [ 471.095753][ T6886] dw2102: probing for demodulator failed. Is the external power switched on? [ 471.113917][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 471.121238][T16048] loop1: detected capacity change from 0 to 128 [ 471.138435][ T6886] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 471.143179][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 471.177288][T15825] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.214423][T16048] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 471.238437][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 471.293728][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 471.299684][T16048] hpfs: filesystem error: improperly stopped [ 471.324080][T16048] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 471.328791][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.339099][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.358253][T16048] hpfs: You really don't want any checks? You are crazy... [ 471.406710][T16048] hpfs: hpfs_map_sector(): read error [ 471.423105][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 471.449275][T16048] hpfs: code page support is disabled [ 471.454672][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 471.465227][T16048] hpfs: hpfs_map_4sectors(): unaligned read [ 471.471256][T16048] hpfs: hpfs_map_4sectors(): unaligned read [ 471.480023][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 471.492373][ T6886] rc_core: IR keymap rc-tt-1500 not found [ 471.498163][ T6886] Registered IR keymap rc-empty [ 471.512773][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.519913][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.528643][T16048] hpfs: filesystem error: unable to find root dir [ 471.539202][ T6886] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 471.579010][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 471.602981][ T6886] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input45 [ 471.603355][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 471.650521][ T6886] dvb-usb: schedule remote query interval to 250 msecs. [ 471.701330][T16023] loop8: detected capacity change from 0 to 32768 [ 471.702090][ T6886] dw2102: su3000_power_ctrl: 0, initialized 1 [ 471.710319][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 471.764714][ T6886] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 471.768754][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 471.807006][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 471.830224][ T6886] usb 5-1: USB disconnect, device number 24 [ 471.854773][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 471.907089][T16023] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode. [ 471.950926][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 472.030245][ T6886] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 472.052837][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.121141][T15825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.172664][T15825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 472.201217][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 472.210922][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 472.245371][T13827] ocfs2: Unmounting device (7,8) on (node local) [ 472.266789][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.446812][T16075] loop1: detected capacity change from 0 to 2048 [ 472.484852][T16080] loop4: detected capacity change from 0 to 256 [ 472.527252][T16075] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 472.607164][T16080] FAT-fs (loop4): Directory bread(block 64) failed [ 472.662255][T16080] FAT-fs (loop4): Directory bread(block 65) failed [ 472.668934][T16080] FAT-fs (loop4): Directory bread(block 66) failed [ 472.745013][T16080] FAT-fs (loop4): Directory bread(block 67) failed [ 472.751697][T16080] FAT-fs (loop4): Directory bread(block 68) failed [ 472.814732][T16080] FAT-fs (loop4): Directory bread(block 69) failed [ 472.821434][T16080] FAT-fs (loop4): Directory bread(block 70) failed [ 472.872259][T16080] FAT-fs (loop4): Directory bread(block 71) failed [ 472.896637][T16080] FAT-fs (loop4): Directory bread(block 72) failed [ 472.942538][T16080] FAT-fs (loop4): Directory bread(block 73) failed [ 473.394538][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 473.433292][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 473.482834][T15825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.881012][T16117] loop1: detected capacity change from 0 to 1024 [ 473.925972][T16117] hfsplus: invalid secondary volume header [ 473.962962][T16117] hfsplus: unable to find HFS+ superblock [ 474.246999][T16125] loop8: detected capacity change from 0 to 2048 [ 474.253560][T11127] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 474.312801][T16130] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 474.445894][T16133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4200'. [ 474.445920][T11127] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 474.460559][T16133] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4200'. [ 474.509500][T11127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.538633][T11127] usb 2-1: Product: syz [ 474.563757][T11127] usb 2-1: Manufacturer: syz [ 474.568418][T11127] usb 2-1: SerialNumber: syz [ 474.596184][T16109] loop6: detected capacity change from 0 to 32768 [ 474.617871][T11127] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 474.665650][T16136] device ip6gretap0 entered promiscuous mode [ 474.676652][T16136] device macsec1 entered promiscuous mode [ 474.724077][T11127] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 474.737676][T16109] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 474.756906][T16109] JBD2: Ignoring recovery information on journal [ 474.771911][T16136] device ip6gretap0 left promiscuous mode [ 474.897095][T16109] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 474.978144][T16109] (syz.6.4192,16109,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 475.030814][T16109] (syz.6.4192,16109,0):ocfs2_group_extend:318 ERROR: status = -12 [ 475.064311][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 475.078079][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 475.097010][T16117] random: crng reseeded on system resumption [ 475.119820][T15825] device veth0_vlan entered promiscuous mode [ 475.144749][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 475.154911][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 475.175697][T15825] device veth1_vlan entered promiscuous mode [ 475.184318][ T8716] ocfs2: Unmounting device (7,6) on (node local) [ 475.252482][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 475.270577][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 475.321386][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 475.353410][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 475.413581][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 475.430830][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 475.466243][T16150] 9pnet_fd: Insufficient options for proto=fd [ 475.479951][T15825] device veth0_macvtap entered promiscuous mode [ 475.521676][T15825] device veth1_macvtap entered promiscuous mode [ 475.590466][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.650712][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.699557][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.731048][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.772153][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.801105][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.832913][T11127] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 475.840158][T11127] ath9k_htc: Failed to initialize the device [ 475.849875][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.878904][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.883914][T11127] usb 2-1: ath9k_htc: USB layer deinitialized [ 475.908553][T15825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.936498][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 475.948799][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 475.970311][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 476.027671][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 476.055198][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.074346][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.145737][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.164422][ T6886] usb 2-1: USB disconnect, device number 42 [ 476.200868][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.221362][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.271283][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.292290][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.312612][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.328451][T15825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.349124][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 476.367134][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 476.396661][T15825] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.422287][T15825] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.431129][T15825] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.462387][T15825] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.669759][ T8114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.718587][ T8114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.777620][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 476.874756][ T8114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.896262][ T8114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.939997][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 477.122809][T16161] loop6: detected capacity change from 0 to 40427 [ 477.248548][T16161] F2FS-fs (loop6): Found nat_bits in checkpoint [ 477.475872][T16161] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 477.500533][T16200] netlink: 'syz.8.4220': attribute type 21 has an invalid length. [ 477.623674][ T27] audit: type=1800 audit(2000000185.660:285): pid=16161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4208" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 477.705484][T16206] loop1: detected capacity change from 0 to 512 [ 477.795294][ T8716] syz-executor: attempt to access beyond end of device [ 477.795294][ T8716] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 477.827496][T16206] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 477.871456][T16214] loop9: detected capacity change from 0 to 256 [ 478.009927][T16214] FAT-fs (loop9): Directory bread(block 64) failed [ 478.030506][T16214] FAT-fs (loop9): Directory bread(block 65) failed [ 478.048138][ T8657] EXT4-fs (loop1): unmounting filesystem. [ 478.048170][T16180] loop4: detected capacity change from 0 to 32768 [ 478.086539][T16214] FAT-fs (loop9): Directory bread(block 66) failed [ 478.137790][T16214] FAT-fs (loop9): Directory bread(block 67) failed [ 478.160922][T16180] JBD2: Ignoring recovery information on journal [ 478.176606][T16214] FAT-fs (loop9): Directory bread(block 68) failed [ 478.204843][T16214] FAT-fs (loop9): Directory bread(block 69) failed [ 478.226977][T16214] FAT-fs (loop9): Directory bread(block 70) failed [ 478.285669][T16180] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 478.332210][T16214] FAT-fs (loop9): Directory bread(block 71) failed [ 478.383956][T16214] FAT-fs (loop9): Directory bread(block 72) failed [ 478.390644][T16214] FAT-fs (loop9): Directory bread(block 73) failed [ 478.691220][ T4272] ocfs2: Unmounting device (7,4) on (node local) [ 478.854933][T16235] loop8: detected capacity change from 0 to 64 [ 478.959626][T16235] syz.8.4231: attempt to access beyond end of device [ 478.959626][T16235] loop8: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 479.041020][T16235] Buffer I/O error on dev loop8, logical block 134217734, async page read [ 479.041111][T16240] loop6: detected capacity change from 0 to 1024 [ 479.147954][T16240] hfsplus: invalid secondary volume header [ 479.169066][T16235] syz.8.4231: attempt to access beyond end of device [ 479.169066][T16235] loop8: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 479.182101][T16240] hfsplus: unable to find HFS+ superblock [ 479.214790][T16235] Buffer I/O error on dev loop8, logical block 134217734, async page read [ 479.502142][ T6886] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 479.578258][T16254] loop4: detected capacity change from 0 to 256 [ 479.631968][T16251] loop8: detected capacity change from 0 to 4096 [ 479.674815][T16254] FAT-fs (loop4): Directory bread(block 64) failed [ 479.695836][T16251] ntfs: (device loop8): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 479.697140][ T6886] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 479.724736][T16257] loop1: detected capacity change from 0 to 256 [ 479.732564][T16254] FAT-fs (loop4): Directory bread(block 65) failed [ 479.739205][T16254] FAT-fs (loop4): Directory bread(block 66) failed [ 479.755488][T16251] ntfs: (device loop8): ntfs_read_locked_inode(): $DATA attribute is missing. [ 479.765291][ T6886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.805690][T16251] ntfs: (device loop8): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 479.811935][T16254] FAT-fs (loop4): Directory bread(block 67) failed [ 479.829472][ T6886] usb 7-1: Product: syz [ 479.839433][T16257] FAT-fs (loop1): Directory bread(block 64) failed [ 479.842688][ T6886] usb 7-1: Manufacturer: syz [ 479.861096][ T6886] usb 7-1: SerialNumber: syz [ 479.862179][T16257] FAT-fs (loop1): Directory bread(block 65) failed [ 479.866594][T16254] FAT-fs (loop4): Directory bread(block 68) failed [ 479.903296][ T6886] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 479.922829][T16254] FAT-fs (loop4): Directory bread(block 69) failed [ 479.924689][T16251] ntfs: (device loop8): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 479.951804][T16254] FAT-fs (loop4): Directory bread(block 70) failed [ 479.952320][ T6886] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 479.952603][T16257] FAT-fs (loop1): Directory bread(block 66) failed [ 479.968424][T16254] FAT-fs (loop4): Directory bread(block 71) failed [ 479.968520][T16254] FAT-fs (loop4): Directory bread(block 72) failed [ 479.968547][T16254] FAT-fs (loop4): Directory bread(block 73) failed [ 480.088667][T16251] ntfs: volume version 3.1. [ 480.156643][T16257] FAT-fs (loop1): Directory bread(block 67) failed [ 480.222398][T16257] FAT-fs (loop1): Directory bread(block 68) failed [ 480.253615][T16251] ntfs: (device loop8): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1255. You might want to try to use the mount option nls=utf8. [ 480.272395][T16240] random: crng reseeded on system resumption [ 480.280679][T16257] FAT-fs (loop1): Directory bread(block 69) failed [ 480.330701][T16257] FAT-fs (loop1): Directory bread(block 70) failed [ 480.347310][T16251] ntfs: (device loop8): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 480.384724][T16257] FAT-fs (loop1): Directory bread(block 71) failed [ 480.387280][T16251] ntfs: (device loop8): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1255. You might want to try to use the mount option nls=utf8. [ 480.391489][T16257] FAT-fs (loop1): Directory bread(block 72) failed [ 480.481846][T16251] ntfs: (device loop8): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 480.593383][T16257] FAT-fs (loop1): Directory bread(block 73) failed [ 481.032271][ T6886] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 481.039324][ T6886] ath9k_htc: Failed to initialize the device [ 481.121439][ T6886] usb 7-1: ath9k_htc: USB layer deinitialized [ 481.365851][T16281] loop1: detected capacity change from 0 to 256 [ 481.387619][T16277] loop9: detected capacity change from 0 to 4096 [ 481.506447][T16277] ntfs: volume version 3.1. [ 481.509806][T16281] FAT-fs (loop1): Directory bread(block 64) failed [ 481.552406][T16281] FAT-fs (loop1): Directory bread(block 65) failed [ 481.560108][T16281] FAT-fs (loop1): Directory bread(block 66) failed [ 481.590339][T16281] FAT-fs (loop1): Directory bread(block 67) failed [ 481.621313][ T6888] usb 7-1: USB disconnect, device number 14 [ 481.632801][T16281] FAT-fs (loop1): Directory bread(block 68) failed [ 481.679016][T16281] FAT-fs (loop1): Directory bread(block 69) failed [ 481.712564][T16281] FAT-fs (loop1): Directory bread(block 70) failed [ 481.719161][T16281] FAT-fs (loop1): Directory bread(block 71) failed [ 481.771466][T16281] FAT-fs (loop1): Directory bread(block 72) failed [ 481.798709][T16281] FAT-fs (loop1): Directory bread(block 73) failed [ 481.821530][T16262] loop4: detected capacity change from 0 to 40427 [ 481.920885][T16262] F2FS-fs (loop4): invalid crc value [ 481.961666][T16262] F2FS-fs (loop4): Found nat_bits in checkpoint [ 482.047516][T16294] loop8: detected capacity change from 0 to 512 [ 482.121390][T16262] F2FS-fs (loop4): Start checkpoint disabled! [ 482.176617][T16262] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 482.200831][T16294] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 482.338983][T16294] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.646039][ T11] kworker/u4:1: attempt to access beyond end of device [ 482.646039][ T11] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 482.676532][T13827] EXT4-fs (loop8): unmounting filesystem. [ 482.755801][T16291] loop9: detected capacity change from 0 to 40427 [ 482.842888][T16291] F2FS-fs (loop9): invalid crc value [ 482.868553][T16291] F2FS-fs (loop9): Found nat_bits in checkpoint [ 482.922109][ T6888] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 483.077174][T16291] F2FS-fs (loop9): Start checkpoint disabled! [ 483.133875][ T6888] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 483.140518][T16291] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 483.182078][ T6888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 483.252144][ T6888] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 483.309633][ T6888] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 483.334647][ T6888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.370614][ T6888] usb 2-1: config 0 descriptor?? [ 483.670734][ T8114] kworker/u4:8: attempt to access beyond end of device [ 483.670734][ T8114] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 483.712645][T16335] loop8: detected capacity change from 0 to 1024 [ 483.772440][T16335] hfsplus: invalid secondary volume header [ 483.778363][T16335] hfsplus: unable to find HFS+ superblock [ 483.807454][ T6888] holtek_kbd 0003:04D9:A055.0047: item fetching failed at offset 5/7 [ 483.826677][ T6888] holtek_kbd: probe of 0003:04D9:A055.0047 failed with error -22 [ 484.009944][ T6886] usb 2-1: USB disconnect, device number 43 [ 484.135895][T16345] loop4: detected capacity change from 0 to 128 [ 484.142350][ T6269] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 484.335855][ T6269] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 484.358162][ T6269] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.396298][ T6269] usb 9-1: Product: syz [ 484.410120][ T6269] usb 9-1: Manufacturer: syz [ 484.435549][ T6269] usb 9-1: SerialNumber: syz [ 484.461202][ T6269] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 484.531769][ T6269] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 484.770021][T16335] random: crng reseeded on system resumption [ 485.057766][T16374] loop6: detected capacity change from 0 to 8 [ 485.112954][T16374] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 485.122649][ T4462] udevd[4462]: incorrect cramfs checksum on /dev/loop6 [ 485.592251][ T6269] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 485.599285][ T6269] ath9k_htc: Failed to initialize the device [ 485.667420][ T6269] usb 9-1: ath9k_htc: USB layer deinitialized [ 486.094402][ T4316] usb 9-1: USB disconnect, device number 9 [ 486.164942][T16400] loop4: detected capacity change from 0 to 256 [ 486.254888][T16400] exfat: Deprecated parameter 'utf8' [ 486.262435][T16400] exfat: Deprecated parameter 'namecase' [ 486.268647][T16400] exfat: Deprecated parameter 'utf8' [ 486.279488][T16372] loop1: detected capacity change from 0 to 40427 [ 486.297699][T16400] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4b823b56, utbl_chksum : 0xe619d30d) [ 486.329206][T16372] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 486.373168][T16372] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 486.413919][T16372] F2FS-fs (loop1): invalid crc value [ 486.490658][T16372] F2FS-fs (loop1): Found nat_bits in checkpoint [ 486.616625][T16372] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 486.642096][T16372] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 487.347612][T16441] loop4: detected capacity change from 0 to 512 [ 487.403267][T16441] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 487.536243][T16441] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 487.568099][T16441] ext4 filesystem being mounted at /914/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.843901][T16455] tipc: Started in network mode [ 487.848839][T16455] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 487.899837][T16455] tipc: Enabled bearer , priority 18 [ 487.916523][T16458] loop1: detected capacity change from 0 to 512 [ 487.924264][T16460] loop6: detected capacity change from 0 to 128 [ 487.976699][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 487.980398][T16460] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 488.078959][T16458] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 488.079051][T16458] ext4 filesystem being mounted at /525/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 488.271112][T16469] loop9: detected capacity change from 0 to 8 [ 488.428691][ T8657] EXT4-fs (loop1): unmounting filesystem. [ 488.496224][T16469] SQUASHFS error: xz decompression failed, data probably corrupt [ 488.562211][T16469] SQUASHFS error: Failed to read block 0x108: -5 [ 488.575045][T16469] SQUASHFS error: Unable to read metadata cache entry [106] [ 488.633404][T16469] SQUASHFS error: Unable to read inode 0x11f [ 488.664470][T16481] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4312'. [ 489.012137][ T9244] tipc: Node number set to 10463914 [ 489.222415][ T4374] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 489.323096][T16504] netlink: 'syz.1.4323': attribute type 5 has an invalid length. [ 489.438748][ T4374] usb 7-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.451677][T16483] loop4: detected capacity change from 0 to 32768 [ 489.467974][ T4374] usb 7-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.495263][ T4374] usb 7-1: config 0 interface 0 has no altsetting 0 [ 489.516717][ T4374] usb 7-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 489.529663][ T4374] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.547759][ T4374] usb 7-1: config 0 descriptor?? [ 489.965459][ T4374] a4tech 0003:09DA:000A.0048: item fetching failed at offset 0/3 [ 489.965926][ T4374] a4tech 0003:09DA:000A.0048: parse failed [ 489.965986][ T4374] a4tech: probe of 0003:09DA:000A.0048 failed with error -22 [ 490.178720][T11127] usb 7-1: USB disconnect, device number 15 [ 490.691030][T16541] loop1: detected capacity change from 0 to 256 [ 490.718703][T16541] exfat: Deprecated parameter 'namecase' [ 490.756612][T16541] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 491.333687][T16564] syz.6.4351 uses old SIOCAX25GETINFO [ 491.370615][T16561] loop1: detected capacity change from 0 to 2048 [ 491.439421][T16561] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 491.536866][T16565] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 491.570731][ T33] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.814663][ T33] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.960713][ T33] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.131729][ T33] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.355466][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 492.374686][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 492.385513][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 492.399789][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 492.407610][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 492.418772][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 492.552336][ T6886] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 492.758449][ T6886] usb 7-1: Using ep0 maxpacket: 32 [ 492.765635][ T6886] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.783719][ T6886] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.796148][ T6886] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 492.805437][ T6886] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 492.813904][ T6886] usb 7-1: Product: syz [ 492.818368][ T6886] usb 7-1: Manufacturer: syz [ 492.826881][ T6886] hub 7-1:4.0: USB hub found [ 493.030688][ T6886] hub 7-1:4.0: 2 ports detected [ 493.179125][T16582] loop8: detected capacity change from 0 to 32768 [ 493.252402][ T6886] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 493.260110][ T6886] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 493.333362][ T6886] usb 7-1: USB disconnect, device number 16 [ 493.375053][T16587] chnl_net:caif_netlink_parms(): no params data found [ 493.729123][T16587] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.739777][T16587] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.748218][T16587] device bridge_slave_0 entered promiscuous mode [ 493.759302][T16587] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.782226][T16587] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.797961][T16587] device bridge_slave_1 entered promiscuous mode [ 494.103987][T16587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.122853][T16627] loop1: detected capacity change from 0 to 512 [ 494.250617][T16587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.268211][T16627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 494.284664][T16587] team0: Port device team_slave_0 added [ 494.333425][T16627] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.341935][T16639] loop6: detected capacity change from 0 to 1024 [ 494.387187][T16587] team0: Port device team_slave_1 added [ 494.393689][T16639] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 2: comm syz.6.4374: lblock 2 mapped to illegal pblock 2 (length 1) [ 494.442508][T16639] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 494.450677][T16639] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 48: comm syz.6.4374: lblock 0 mapped to illegal pblock 48 (length 1) [ 494.472414][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 494.484047][T16639] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 494.539629][T16639] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.4374: Failed to acquire dquot type 0 [ 494.721293][T16639] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 494.760635][T16587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.767780][T16639] EXT4-fs error (device loop6): ext4_evict_inode:279: inode #11: comm syz.6.4374: mark_inode_dirty error [ 494.771705][T16587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.794309][T16639] EXT4-fs warning (device loop6): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 494.822075][ T6888] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 494.831212][ T8657] EXT4-fs (loop1): unmounting filesystem. [ 494.836647][T16639] EXT4-fs (loop6): 1 orphan inode deleted [ 494.853851][T16587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.859748][ T9] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 494.901592][T16639] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 494.912658][ T9] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 494.970799][ T9] EXT4-fs error (device loop6): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 495.007135][T16587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.022373][ T6888] usb 9-1: Using ep0 maxpacket: 16 [ 495.029116][ T6888] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 495.047100][T16587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.073042][ T6888] usb 9-1: config 0 has no interface number 0 [ 495.073520][ T6888] usb 9-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.148481][ T6888] usb 9-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.181268][T16587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.183881][ T6888] usb 9-1: config 0 interface 8 has no altsetting 0 [ 495.244810][ T6888] usb 9-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 495.260304][ T6888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.289000][ T8716] EXT4-fs (loop6): unmounting filesystem. [ 495.305742][T13903] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 495.323079][ T6888] usb 9-1: config 0 descriptor?? [ 495.383972][T13903] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 495.440386][T13903] EXT4-fs error (device loop6): ext4_release_dquot:6871: comm kworker/u4:9: Failed to release dquot type 0 [ 495.504494][ T8716] EXT4-fs error (device loop6): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 495.555483][ T8716] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 495.571163][ T8716] EXT4-fs error (device loop6): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 495.627540][T16587] device hsr_slave_0 entered promiscuous mode [ 495.655066][T16587] device hsr_slave_1 entered promiscuous mode [ 495.675334][T16587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.698504][T16587] Cannot create hsr debugfs directory [ 495.760837][ T6888] uclogic 0003:5543:0522.0049: unknown main item tag 0x0 [ 495.798542][ T6888] uclogic 0003:5543:0522.0049: unknown main item tag 0x0 [ 495.844826][ T6888] uclogic 0003:5543:0522.0049: unknown main item tag 0x0 [ 495.851988][ T6888] uclogic 0003:5543:0522.0049: unknown main item tag 0x0 [ 495.884704][ T6888] uclogic 0003:5543:0522.0049: unknown main item tag 0x0 [ 495.892676][ T6888] uclogic 0003:5543:0522.0049: No inputs registered, leaving [ 495.932637][ T6888] uclogic 0003:5543:0522.0049: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.8-1/input8 [ 495.990834][ T6888] usb 9-1: USB disconnect, device number 10 [ 496.094091][T16678] fido_id[16678]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 496.284868][ T33] device hsr_slave_0 left promiscuous mode [ 496.301098][ T33] device hsr_slave_1 left promiscuous mode [ 496.325678][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.345898][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.369839][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.389317][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.434916][ T33] device bridge_slave_1 left promiscuous mode [ 496.441350][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.471688][ T33] device bridge_slave_0 left promiscuous mode [ 496.490674][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.552219][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 496.594590][ T33] device veth1_macvtap left promiscuous mode [ 496.601107][ T33] device veth0_macvtap left promiscuous mode [ 496.608164][ T33] device veth1_vlan left promiscuous mode [ 496.614289][ T33] device veth0_vlan left promiscuous mode [ 496.754077][ T6888] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 496.966761][ T6888] usb 7-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 496.990278][ T6888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.025550][ T6888] usb 7-1: Product: syz [ 497.042033][ T6888] usb 7-1: Manufacturer: syz [ 497.058692][ T6888] usb 7-1: SerialNumber: syz [ 497.088331][ T6888] usb 7-1: config 0 descriptor?? [ 497.462108][ T4308] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 497.662670][T16716] loop8: detected capacity change from 0 to 32768 [ 497.687418][ T4308] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.702418][ T4308] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.716075][ T4308] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 497.729498][ T4308] usb 5-1: config 0 interface 0 has no altsetting 0 [ 497.751931][ T4308] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 497.794421][ T4308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.823262][ T4308] usb 5-1: config 0 descriptor?? [ 498.243748][ T4308] uclogic 0003:5543:0004.004A: unknown main item tag 0x0 [ 498.258891][ T4308] uclogic 0003:5543:0004.004A: unknown main item tag 0x0 [ 498.273014][ T4308] uclogic 0003:5543:0004.004A: unknown main item tag 0x0 [ 498.281057][ T4308] uclogic 0003:5543:0004.004A: unknown main item tag 0x0 [ 498.293690][ T4308] uclogic 0003:5543:0004.004A: unknown main item tag 0x0 [ 498.315349][ T4308] uclogic 0003:5543:0004.004A: No inputs registered, leaving [ 498.342153][ T4308] uclogic 0003:5543:0004.004A: hidraw0: USB HID v0.09 Device [HID 5543:0004] on usb-dummy_hcd.4-1/input0 [ 498.377869][ T33] team0 (unregistering): Port device team_slave_1 removed [ 498.482497][ T33] team0 (unregistering): Port device team_slave_0 removed [ 498.510981][ T4374] usb 5-1: USB disconnect, device number 25 [ 498.579564][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.632422][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 498.656666][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.189154][ T33] bond0 (unregistering): Released all slaves [ 499.347791][ T6888] peak_usb 7-1:0.0: PEAK-System PCAN-USB FD v1 fw v2.3.1 (1 channels) [ 499.611396][ T6888] peak_usb 7-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 499.642530][ T6888] peak_usb 7-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 500.166242][ T6888] peak_usb: probe of 7-1:0.0 failed with error -71 [ 500.208360][ T6888] usb 7-1: USB disconnect, device number 17 [ 500.303582][ T4374] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 500.421444][T16743] device sit0 entered promiscuous mode [ 500.453671][T16743] netlink: 'syz.8.4407': attribute type 1 has an invalid length. [ 500.472397][T16743] netlink: 1 bytes leftover after parsing attributes in process `syz.8.4407'. [ 500.511983][ T4374] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 500.520820][ T4374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.571776][ T4374] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 500.594664][ T4374] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 500.617581][ T4374] usb 5-1: Manufacturer: syz [ 500.644778][ T4374] usb 5-1: config 0 descriptor?? [ 500.712495][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 500.932335][ T4374] rc_core: IR keymap rc-hauppauge not found [ 500.940323][ T4374] Registered IR keymap rc-empty [ 500.992924][ T4374] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 501.014075][ T4374] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input46 [ 501.239222][T16764] rc rc0: two consecutive events of type space [ 501.275337][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.379705][T16751] loop1: detected capacity change from 0 to 40427 [ 501.440114][T16751] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 501.473618][ T6269] usb 5-1: USB disconnect, device number 26 [ 501.534018][T16751] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 501.605246][T16751] F2FS-fs (loop1): invalid crc value [ 501.606617][T16587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 501.638434][T16751] F2FS-fs (loop1): Found nat_bits in checkpoint [ 501.678374][T16587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 501.730084][T16587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 501.810767][T16587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 501.841360][T16751] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 501.858402][T16751] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 502.046452][T16796] loop8: detected capacity change from 0 to 1024 [ 502.153265][T16796] hfsplus: bad catalog entry type [ 502.156471][T16800] loop6: detected capacity change from 0 to 512 [ 502.162868][T16587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.245145][T13903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 502.281045][ T8114] hfsplus: b-tree write err: -5, ino 4 [ 502.293178][T13903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 502.320149][T16800] EXT4-fs (loop6): orphan cleanup on readonly fs [ 502.343006][T16800] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.4421: invalid indirect mapped block 28777 (level 2) [ 502.423255][T16587] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.452575][T16800] EXT4-fs (loop6): 1 truncate cleaned up [ 502.458314][T16800] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 502.506201][T16808] syz.1.4423 (16808) used obsolete PPPIOCDETACH ioctl [ 502.516634][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 502.544676][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 502.579135][ T8114] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.586371][ T8114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.636124][T16800] EXT4-fs: Ignoring removed bh option [ 502.641667][T16800] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 502.728739][T16800] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 502.744263][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 502.767880][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 502.818690][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 502.847759][ T8114] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.854945][ T8114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.919572][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 502.947534][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 502.979862][ T8716] EXT4-fs (loop6): unmounting filesystem. [ 503.087096][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 503.109154][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 503.143264][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 503.202917][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 503.234582][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 503.250529][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 503.280193][T16832] netlink: 'syz.1.4432': attribute type 1 has an invalid length. [ 503.316353][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 503.339181][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 503.371159][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 503.416340][T16587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 503.523513][T16843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4436'. [ 503.998723][T16858] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4441'. [ 504.024696][T16856] loop8: detected capacity change from 0 to 2048 [ 504.116348][T16856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 504.224750][T16863] loop4: detected capacity change from 0 to 512 [ 504.276872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 504.294882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 504.369283][T16587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.398562][T16863] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 504.424502][T16837] loop6: detected capacity change from 0 to 32768 [ 504.442679][T16863] ext4 filesystem being mounted at /950/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.496609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 504.509587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 504.518966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 504.528235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 504.534107][T16837] XFS (loop6): Mounting V5 Filesystem [ 504.539072][T16587] device veth0_vlan entered promiscuous mode [ 504.564114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 504.694415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 504.753582][T16837] XFS (loop6): Ending clean mount [ 504.762384][T16587] device veth1_vlan entered promiscuous mode [ 504.794826][T16837] XFS (loop6): Quotacheck needed: Please wait. [ 504.802731][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 504.973704][T13903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 505.003187][T13903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 505.048163][T16837] XFS (loop6): Quotacheck: Done. [ 505.050353][T16587] device veth0_macvtap entered promiscuous mode [ 505.109060][T16587] device veth1_macvtap entered promiscuous mode [ 505.190226][ T8716] XFS (loop6): Unmounting Filesystem [ 505.193709][T16587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.212316][ T6269] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 505.282397][T16587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.319581][T16587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.353909][T16587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.382091][T16587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.402403][T16587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.424385][T16587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.445413][ T6269] usb 9-1: Using ep0 maxpacket: 32 [ 505.459958][ T6269] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.481902][T16587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.498114][ T6269] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.514110][T16587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.521535][ T6269] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 505.538234][T16587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.549500][ T6269] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.559146][T16587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.585058][ T6269] usb 9-1: config 0 descriptor?? [ 505.597356][T16587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.608038][T16587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.618272][T16587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.628918][T16587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.638904][T16587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.651056][T16587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.714238][T16587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.723710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 505.732697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 505.741068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 505.770939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 505.787339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 505.788002][T16889] loop1: detected capacity change from 0 to 40427 [ 505.864014][T16889] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 505.865817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 505.885308][T16587] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.901984][T16889] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 505.937268][T16587] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.959536][T16889] F2FS-fs (loop1): invalid crc value [ 505.975615][T16587] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.015612][ T6269] savu 0003:1E7D:2D5A.004B: bogus close delimiter [ 506.020280][T16587] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.033484][ T6269] savu 0003:1E7D:2D5A.004B: item 0 4 2 10 parsing failed [ 506.049562][T16889] F2FS-fs (loop1): Found nat_bits in checkpoint [ 506.071530][ T6269] savu 0003:1E7D:2D5A.004B: parse failed [ 506.089553][ T6269] savu: probe of 0003:1E7D:2D5A.004B failed with error -22 [ 506.271086][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.271557][T11127] usb 9-1: USB disconnect, device number 11 [ 506.313434][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.352194][T16889] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 506.365192][T16909] loop4: detected capacity change from 0 to 256 [ 506.380307][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 506.416169][ T8114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.457337][ T8114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.513563][ T27] audit: type=1800 audit(2000000214.550:286): pid=16889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4449" name="file2" dev="loop1" ino=10 res=0 errno=0 [ 506.529372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 506.556326][T16909] FAT-fs (loop4): Directory bread(block 64) failed [ 506.573391][T16909] FAT-fs (loop4): Directory bread(block 65) failed [ 506.629479][T16909] FAT-fs (loop4): Directory bread(block 66) failed [ 506.697403][T16909] FAT-fs (loop4): Directory bread(block 67) failed [ 506.708905][ T8657] syz-executor: attempt to access beyond end of device [ 506.708905][ T8657] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 506.752835][T16909] FAT-fs (loop4): Directory bread(block 68) failed [ 506.759469][T16909] FAT-fs (loop4): Directory bread(block 69) failed [ 506.823199][T16909] FAT-fs (loop4): Directory bread(block 70) failed [ 506.872680][T16909] FAT-fs (loop4): Directory bread(block 71) failed [ 506.900589][T16909] FAT-fs (loop4): Directory bread(block 72) failed [ 506.932173][T16909] FAT-fs (loop4): Directory bread(block 73) failed [ 507.931658][T16950] loop2: detected capacity change from 0 to 1024 [ 508.059959][T16950] hfsplus: bad catalog entry type [ 508.283226][ T11] hfsplus: b-tree write err: -5, ino 4 [ 508.397307][T16964] loop6: detected capacity change from 0 to 512 [ 508.502214][T16964] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 508.557428][T16964] EXT4-fs (loop6): 1 truncate cleaned up [ 508.600153][T16964] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 508.669253][T16964] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.6.4472: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 508.775910][T16964] EXT4-fs error (device loop6) in ext4_delete_entry:2800: Corrupt filesystem [ 508.933072][ T8716] EXT4-fs (loop6): unmounting filesystem. [ 509.817103][T16985] loop1: detected capacity change from 0 to 32768 [ 509.873710][T17014] loop4: detected capacity change from 0 to 2048 [ 509.951631][T16985] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 510.058982][T16985] (syz.1.4479,16985,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 510.087905][T16999] loop2: detected capacity change from 0 to 32768 [ 510.203636][T17021] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 510.217289][ T8657] (syz-executor,8657,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 510.264109][ T8657] ocfs2: Unmounting device (7,1) on (node local) [ 510.500098][T17025] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 1970324836974592 [ 510.579589][T17025] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 510.722138][T17025] Remounting filesystem read-only [ 510.743341][T17025] NILFS (loop4): error -5 truncating bmap (ino=15) [ 510.757253][T17011] loop6: detected capacity change from 0 to 32768 [ 510.777219][T17025] syz.4.4489: attempt to access beyond end of device [ 510.777219][T17025] loop4: rw=0, sector=2199023255622, nr_sectors = 2 limit=2048 [ 510.863092][T17025] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=0) [ 511.024914][T17011] XFS (loop6): Mounting V5 Filesystem [ 511.109891][T17011] XFS (loop6): Ending clean mount [ 511.133181][ T4272] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 511.138999][T17011] XFS (loop6): Quotacheck needed: Please wait. [ 511.203384][T17054] loop1: detected capacity change from 0 to 512 [ 511.253793][T17054] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 511.270973][T17054] ext4 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.437676][T17054] EXT4-fs error (device loop1): ext4_group_add:1746: inode #7: comm syz.1.4499: iget: checksum invalid [ 511.472478][T17054] EXT4-fs warning (device loop1): ext4_group_add:1748: Error opening resize inode [ 511.488040][T17011] XFS (loop6): Quotacheck: Done. [ 511.654658][ T8657] EXT4-fs (loop1): unmounting filesystem. [ 511.718793][ T8716] XFS (loop6): Unmounting Filesystem [ 511.869150][T17077] nbd: must specify a device to reconfigure [ 512.153218][ T4278] Bluetooth: hci4: command 0x0405 tx timeout [ 512.249269][T17091] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 512.249269][T17091] program syz.8.4513 not setting count and/or reply_len properly [ 512.276314][T17095] loop2: detected capacity change from 0 to 256 [ 512.597905][T17108] loop1: detected capacity change from 0 to 512 [ 512.683588][T17108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 512.741356][T17108] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 512.864576][T17108] EXT4-fs (loop1): 1 truncate cleaned up [ 512.880571][T17108] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 513.140401][ T8657] EXT4-fs (loop1): unmounting filesystem. [ 513.528614][T17138] IPv6: NLM_F_CREATE should be specified when creating new route [ 513.819423][T17153] loop4: detected capacity change from 0 to 1024 [ 514.012876][ T33] hfsplus: b-tree write err: -5, ino 4 [ 514.136532][T17164] loop8: detected capacity change from 0 to 256 [ 514.231102][T17164] FAT-fs (loop8): Directory bread(block 64) failed [ 514.241710][T17172] loop6: detected capacity change from 0 to 128 [ 514.248372][T17164] FAT-fs (loop8): Directory bread(block 65) failed [ 514.285921][T17164] FAT-fs (loop8): Directory bread(block 66) failed [ 514.303243][T17164] FAT-fs (loop8): Directory bread(block 67) failed [ 514.307231][T17172] EXT4-fs (loop6): Test dummy encryption mode enabled [ 514.335733][T17164] FAT-fs (loop8): Directory bread(block 68) failed [ 514.354958][T17164] FAT-fs (loop8): Directory bread(block 69) failed [ 514.373241][T17164] FAT-fs (loop8): Directory bread(block 70) failed [ 514.376731][T17172] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 514.399389][T17172] ext4 filesystem being mounted at /598/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 514.433237][T17164] FAT-fs (loop8): Directory bread(block 71) failed [ 514.439961][T17164] FAT-fs (loop8): Directory bread(block 72) failed [ 514.462779][T17164] FAT-fs (loop8): Directory bread(block 73) failed [ 514.841151][T17172] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 514.933548][T17190] device bridge0 entered promiscuous mode [ 515.004939][ T8716] EXT4-fs (loop6): unmounting filesystem. [ 515.147540][T17195] loop4: detected capacity change from 0 to 512 [ 515.236136][T17195] EXT4-fs (loop4): 1 truncate cleaned up [ 515.241844][T17195] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 515.481809][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 515.714554][T17181] loop2: detected capacity change from 0 to 32768 [ 515.802851][T17181] jfs_lookup: dtSearch returned -5 [ 516.208503][T17232] loop8: detected capacity change from 0 to 4096 [ 516.289626][T17232] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 516.332844][T17232] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 4096) [ 516.522557][T17242] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 516.603561][T17244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4568'. [ 516.830237][T17219] loop1: detected capacity change from 0 to 32768 [ 517.036509][T17219] XFS (loop1): Mounting V5 Filesystem [ 517.110552][T17219] XFS (loop1): Ending clean mount [ 517.126114][T17219] XFS (loop1): Quotacheck needed: Please wait. [ 517.216869][ T27] audit: type=1326 audit(2000000225.230:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.2.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe0d9aeb9 code=0x7ffc0000 [ 517.259340][T17219] XFS (loop1): Quotacheck: Done. [ 517.312457][ T27] audit: type=1326 audit(2000000225.230:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.2.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe0d9aeb9 code=0x7ffc0000 [ 517.417243][ T8657] XFS (loop1): Unmounting Filesystem [ 517.483694][ T27] audit: type=1326 audit(2000000225.250:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.2.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fdfe0d9aeb9 code=0x7ffc0000 [ 517.566982][ T27] audit: type=1326 audit(2000000225.270:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.2.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe0d9aeb9 code=0x7ffc0000 [ 517.621502][T17277] loop2: detected capacity change from 0 to 128 [ 517.692692][ T27] audit: type=1326 audit(2000000225.270:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.2.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fdfe0d9aeb9 code=0x7ffc0000 [ 517.715337][T17277] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 517.797761][ T6886] Process accounting resumed [ 517.806540][ T27] audit: type=1326 audit(2000000225.270:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.2.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe0d9aeb9 code=0x7ffc0000 [ 517.830130][ T6886] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 517.841662][ T6886] FAT-fs (loop2): Filesystem has been set read-only [ 517.989579][T16587] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 518.712228][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 518.741259][T17311] loop1: detected capacity change from 0 to 2048 [ 518.772378][T17311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 518.984224][ T27] audit: type=1326 audit(2000000227.020:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.8.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4719aeb9 code=0x7ffc0000 [ 519.082193][ T27] audit: type=1326 audit(2000000227.050:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.8.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7efe4719aeb9 code=0x7ffc0000 [ 519.191359][ T27] audit: type=1326 audit(2000000227.050:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.8.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4719aeb9 code=0x7ffc0000 [ 519.314888][ T27] audit: type=1326 audit(2000000227.050:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.8.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4719aeb9 code=0x7ffc0000 [ 519.404173][T17293] loop4: detected capacity change from 0 to 40427 [ 519.470616][T17293] F2FS-fs (loop4): invalid crc value [ 519.502094][T17293] F2FS-fs (loop4): Found nat_bits in checkpoint [ 519.720497][T17348] loop6: detected capacity change from 0 to 1024 [ 519.721335][T17293] F2FS-fs (loop4): Start checkpoint disabled! [ 519.786472][T17348] EXT4-fs: Ignoring removed mblk_io_submit option [ 519.811333][T17293] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 519.867436][T17348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 519.928679][T17348] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz.6.4599: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 519.953799][T17342] loop2: detected capacity change from 0 to 8192 [ 520.034852][T17342] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 520.082223][T17342] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 520.098263][T17348] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.4599: couldn't read orphan inode 11 (err -117) [ 520.109740][T17365] sp0: Synchronizing with TNC [ 520.120232][T17364] [U] è [ 520.142870][T17342] REISERFS (device loop2): using ordered data mode [ 520.149612][T17342] reiserfs: using flush barriers [ 520.152403][T17348] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 520.172343][T17342] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 520.216841][T17342] REISERFS (device loop2): checking transaction log (loop2) [ 520.249526][T17342] REISERFS (device loop2): Using r5 hash to sort names [ 520.282451][T17342] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 520.299572][T13903] kworker/u4:9: attempt to access beyond end of device [ 520.299572][T13903] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 520.342282][T17342] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 520.465853][ T8716] EXT4-fs (loop6): unmounting filesystem. [ 520.899258][T17384] loop6: detected capacity change from 0 to 64 [ 521.035687][T17384] syz.6.4611: attempt to access beyond end of device [ 521.035687][T17384] loop6: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 521.180201][T17384] Buffer I/O error on dev loop6, logical block 134217734, async page read [ 521.312432][T17384] syz.6.4611: attempt to access beyond end of device [ 521.312432][T17384] loop6: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 521.406145][T17384] Buffer I/O error on dev loop6, logical block 134217734, async page read [ 521.443164][T17399] loop4: detected capacity change from 0 to 512 [ 521.503534][T17399] EXT4-fs: Conflicting test_dummy_encryption options [ 521.726818][T17399] loop4: detected capacity change from 0 to 4096 [ 521.742450][ T5338] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 521.784523][T17399] EXT4-fs (loop4): Test dummy encryption mode enabled [ 521.835902][T17399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 521.910969][T17399] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 521.944951][ T5338] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 521.977178][ T5338] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 521.998755][ T5338] usb 9-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.045205][ T5338] usb 9-1: config 0 interface 0 has no altsetting 0 [ 522.072515][ T5338] usb 9-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 522.112125][ T5338] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.140329][ T5338] usb 9-1: config 0 descriptor?? [ 522.155133][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 522.166890][T17407] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 522.600118][ T5338] elecom 0003:056E:010D.004C: item fetching failed at offset 0/3 [ 522.635949][ T5338] elecom: probe of 0003:056E:010D.004C failed with error -22 [ 522.778600][T17434] loop4: detected capacity change from 0 to 128 [ 522.802149][ T6893] usb 9-1: USB disconnect, device number 12 [ 522.833495][T17412] loop1: detected capacity change from 0 to 32768 [ 522.867156][T17434] EXT4-fs (loop4): Test dummy encryption mode enabled [ 522.879144][T17413] loop2: detected capacity change from 0 to 40427 [ 522.916474][T17413] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 522.929385][T17434] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 522.947881][T17413] F2FS-fs (loop2): invalid crc value [ 522.978436][T17412] XFS (loop1): Mounting V5 Filesystem [ 522.986180][T17434] ext4 filesystem being mounted at /990/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 523.002268][T17413] F2FS-fs (loop2): Found nat_bits in checkpoint [ 523.101795][T17413] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 523.164433][T17412] XFS (loop1): Ending clean mount [ 523.228661][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 523.348985][T17455] loop6: detected capacity change from 0 to 2048 [ 523.401618][T17455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 523.454600][ T8657] XFS (loop1): Unmounting Filesystem [ 523.463141][T16587] syz-executor: attempt to access beyond end of device [ 523.463141][T16587] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 523.994257][T17472] netlink: 'syz.2.4635': attribute type 7 has an invalid length. [ 524.055026][T17472] netlink: 'syz.2.4635': attribute type 8 has an invalid length. [ 524.087274][T17475] loop4: detected capacity change from 0 to 256 [ 524.123083][T17475] exfat: Deprecated parameter 'namecase' [ 524.128799][T17475] exfat: Deprecated parameter 'namecase' [ 524.211116][T17481] loop8: detected capacity change from 0 to 128 [ 524.273268][T17475] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 525.028589][T17506] ptrace attach of "./syz-executor exec"[8657] was attempted by ""[17506] [ 525.247156][T17511] loop4: detected capacity change from 0 to 2048 [ 525.332426][T17515] sp0: Synchronizing with TNC [ 525.366882][T17511] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 525.447878][T17488] XFS (loop6): Mounting V5 Filesystem [ 525.483453][T17511] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #12: block 9: comm syz.4.4651: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 525.521882][T17513] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 525.644372][T17488] XFS (loop6): Ending clean mount [ 525.647877][T17488] XFS (loop6): Quotacheck needed: Please wait. [ 525.672630][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 525.912172][T17488] XFS (loop6): Quotacheck: Done. [ 525.951011][ T8657] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 525.955786][ T8657] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 525.955848][ T8657] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 526.211861][ T8716] XFS (loop6): Unmounting Filesystem [ 526.635903][T17557] set_capacity_and_notify: 2 callbacks suppressed [ 526.635922][T17557] loop4: detected capacity change from 0 to 256 [ 526.681500][T17557] exfat: Deprecated parameter 'namecase' [ 526.747845][T17557] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 527.207221][T17574] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4661'. [ 527.440939][T17543] loop1: detected capacity change from 0 to 40427 [ 527.516247][T17585] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 527.516247][T17585] The task syz.8.4673 (17585) triggered the difference, watch for misbehavior. [ 527.568209][T17588] netlink: 'syz.4.4675': attribute type 3 has an invalid length. [ 527.594322][T17543] F2FS-fs (loop1): Found nat_bits in checkpoint [ 527.751657][T17543] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 527.894890][ T8657] syz-executor: attempt to access beyond end of device [ 527.894890][ T8657] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 528.174799][T17602] netlink: 'syz.6.4680': attribute type 38 has an invalid length. [ 528.197803][T17604] loop4: detected capacity change from 0 to 256 [ 528.243107][T17604] exfat: Deprecated parameter 'namecase' [ 528.288405][T17604] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 528.289993][T17578] loop2: detected capacity change from 0 to 32768 [ 528.454776][T17578] [ 528.454776][T17578] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 528.454776][T17578] [ 528.617657][T17578] read_mapping_page failed! [ 528.656802][T17578] ERROR: (device loop2): txCommit: [ 528.656802][T17578] [ 528.711793][T17612] jfs_rmdir: dtDelete returned -2 [ 528.733819][T17615] loop1: detected capacity change from 0 to 1764 [ 528.882746][ T4359] ERROR: (device loop2): diWrite: ixpxd invalid [ 528.882746][ T4359] [ 528.924470][ T4359] ERROR: (device loop2): txCommit: [ 528.924470][ T4359] [ 528.946336][ T4359] jfs_write_inode: jfs_commit_inode failed! [ 528.993754][T16587] [ 528.993754][T16587] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 528.993754][T16587] [ 529.013794][T16587] [ 529.013794][T16587] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 529.013794][T16587] [ 529.655019][T17648] loop4: detected capacity change from 0 to 2048 [ 529.690430][T17648] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 529.803224][T17656] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 530.362167][ T4374] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 530.545417][T17682] device syz_tun entered promiscuous mode [ 530.562737][ T4374] usb 5-1: Using ep0 maxpacket: 32 [ 530.569639][ T4374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.592706][ T4374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.614914][ T4374] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 530.635569][ T4374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.674691][ T4374] usb 5-1: config 0 descriptor?? [ 530.687390][T17682] device syz_tun left promiscuous mode [ 530.787357][T17690] loop2: detected capacity change from 0 to 2048 [ 530.849048][T17690] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 530.917222][T17695] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 531.095944][ T4374] logitech 0003:046D:C29C.004D: unbalanced collection at end of report description [ 531.132787][ T4374] logitech 0003:046D:C29C.004D: parse failed [ 531.138908][ T4374] logitech: probe of 0003:046D:C29C.004D failed with error -22 [ 531.212278][ T4316] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 531.240936][T17661] loop8: detected capacity change from 0 to 40427 [ 531.337923][T17661] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x3ffff [ 531.356105][T11127] usb 5-1: USB disconnect, device number 27 [ 531.391279][T17661] F2FS-fs (loop8): invalid crc value [ 531.404404][ T4316] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 531.422510][ T4316] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 531.441829][T17661] F2FS-fs (loop8): Found nat_bits in checkpoint [ 531.456561][ T4316] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 531.492145][ T4316] usb 2-1: config 220 has no interface number 2 [ 531.498803][ T4316] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 531.545677][ T4316] usb 2-1: config 220 interface 0 has no altsetting 0 [ 531.560772][T17661] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 531.568451][ T4316] usb 2-1: config 220 interface 76 has no altsetting 0 [ 531.587427][ T4316] usb 2-1: config 220 interface 1 has no altsetting 0 [ 531.600592][T17712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4718'. [ 531.602699][ T4316] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 531.618703][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.627152][ T4316] usb 2-1: Product: syz [ 531.631345][ T4316] usb 2-1: Manufacturer: syz [ 531.636918][ T4316] usb 2-1: SerialNumber: syz [ 531.642306][T17712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4718'. [ 531.651193][T17712] netlink: 'syz.6.4718': attribute type 14 has an invalid length. [ 531.670683][T17712] netlink: 'syz.6.4718': attribute type 11 has an invalid length. [ 531.881632][ T4316] usb 2-1: selecting invalid altsetting 0 [ 531.905786][ T4316] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 531.929059][ T4316] usb 2-1: No valid video chain found. [ 531.982611][ T4316] usb 2-1: selecting invalid altsetting 0 [ 532.022320][ T4316] usbtest: probe of 2-1:220.1 failed with error -22 [ 532.060981][ T4316] usb 2-1: USB disconnect, device number 44 [ 532.662336][T11127] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 532.751803][T17715] loop2: detected capacity change from 0 to 32768 [ 532.792162][T17715] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.4719 (17715) [ 532.796349][T17749] devtmpfs: Too few inodes for current use [ 532.830413][T17715] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 532.853789][T11127] usb 9-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 532.893664][T17715] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 532.905564][T11127] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 532.942401][T17715] BTRFS info (device loop2): using free space tree [ 532.949472][T11127] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 532.972258][ T5338] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 533.062186][T11127] usb 9-1: config 0 interface 0 has no altsetting 0 [ 533.092484][T11127] usb 9-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 533.161098][T11127] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.194172][ T5338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 533.240700][T11127] usb 9-1: config 0 descriptor?? [ 533.243498][T17715] BTRFS info (device loop2): enabling ssd optimizations [ 533.254442][ T5338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.266260][ T5338] usb 2-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 533.276293][T17732] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 533.284108][ T5338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.303375][ T5338] usb 2-1: config 0 descriptor?? [ 533.706485][T11127] uclogic 0003:5543:0003.004E: unknown main item tag 0x0 [ 533.731941][ T5338] apple 0003:05AC:029F.004F: unknown main item tag 0x2 [ 533.749400][T11127] uclogic 0003:5543:0003.004E: unknown main item tag 0x0 [ 533.757254][ T5338] apple 0003:05AC:029F.004F: hidraw0: USB HID v0.00 Device [HID 05ac:029f] on usb-dummy_hcd.1-1/input0 [ 533.778914][T11127] uclogic 0003:5543:0003.004E: unknown main item tag 0x0 [ 533.802387][T11127] uclogic 0003:5543:0003.004E: unknown main item tag 0x0 [ 533.852240][T11127] uclogic 0003:5543:0003.004E: unknown main item tag 0x0 [ 533.859394][T11127] uclogic 0003:5543:0003.004E: unknown main item tag 0x0 [ 533.902604][T11127] uclogic 0003:5543:0003.004E: unknown main item tag 0x0 [ 533.940905][T11127] uclogic 0003:5543:0003.004E: unknown main item tag 0x0 [ 533.969376][T11127] uclogic 0003:5543:0003.004E: No inputs registered, leaving [ 534.000533][T11127] uclogic 0003:5543:0003.004E: hidraw1: USB HID v0.04 Device [HID 5543:0003] on usb-dummy_hcd.8-1/input0 [ 534.045613][T11127] usb 9-1: USB disconnect, device number 13 [ 534.060417][ T6269] usb 2-1: USB disconnect, device number 45 [ 534.092414][T16587] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 534.410136][T17800] fido_id[17800]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 534.814233][T17821] loop6: detected capacity change from 0 to 128 [ 534.885743][T17821] EXT4-fs (loop6): Test dummy encryption mode enabled [ 534.996126][T17821] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 535.031313][T17833] sctp: [Deprecated]: syz.1.4756 (pid 17833) Use of int in maxseg socket option. [ 535.031313][T17833] Use struct sctp_assoc_value instead [ 535.077491][T17821] ext4 filesystem being mounted at /652/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 535.611538][T17821] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 535.636029][T17847] loop4: detected capacity change from 0 to 4096 [ 535.672425][T17847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 535.711534][ T8716] EXT4-fs (loop6): unmounting filesystem. [ 535.930960][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 536.067741][T17867] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 536.169223][T17867] comedi comedi3: 8255: I/O port conflict (0x8000006,4) [ 536.188947][T17875] loop8: detected capacity change from 0 to 512 [ 536.216489][T17867] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 536.246473][T17867] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 536.280900][T17867] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 536.307176][T17875] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 536.315540][T17867] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 536.361078][T17875] EXT4-fs (loop8): 1 truncate cleaned up [ 536.393399][T17867] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 536.400648][T17867] comedi comedi3: 8255: I/O port conflict (0x3000000,4) [ 536.408275][T17875] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 536.726111][T17893] loop2: detected capacity change from 0 to 256 [ 536.762730][T17893] exfat: Deprecated parameter 'utf8' [ 536.778358][T17893] exfat: Deprecated parameter 'namecase' [ 536.850196][T17893] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 536.891154][T13827] EXT4-fs (loop8): unmounting filesystem. [ 537.369673][T17918] tipc: Enabled bearer , priority 10 [ 538.112192][T11127] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 538.184359][T17955] loop4: detected capacity change from 0 to 256 [ 538.195401][ T6886] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 538.257855][T17958] loop1: detected capacity change from 0 to 1024 [ 538.269465][T17955] FAT-fs (loop4): Directory bread(block 64) failed [ 538.298767][T11127] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.303125][T17955] FAT-fs (loop4): Directory bread(block 65) failed [ 538.333995][T17955] FAT-fs (loop4): Directory bread(block 66) failed [ 538.342133][T11127] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.361206][T17955] FAT-fs (loop4): Directory bread(block 67) failed [ 538.368398][T17955] FAT-fs (loop4): Directory bread(block 68) failed [ 538.375915][T17955] FAT-fs (loop4): Directory bread(block 69) failed [ 538.379636][T11127] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 538.383784][T17955] FAT-fs (loop4): Directory bread(block 70) failed [ 538.416308][ T6886] usb 3-1: unable to get BOS descriptor or descriptor too short [ 538.422387][T11127] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.431148][T17955] FAT-fs (loop4): Directory bread(block 71) failed [ 538.454014][T11127] usb 7-1: config 0 descriptor?? [ 538.472921][ T6886] usb 3-1: config 6 has an invalid interface number: 96 but max is 0 [ 538.473637][ T8114] hfsplus: b-tree write err: -5, ino 4 [ 538.481106][ T6886] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 538.492587][T17955] FAT-fs (loop4): Directory bread(block 72) failed [ 538.533626][ T6886] usb 3-1: config 6 has no interface number 0 [ 538.570466][ T6886] usb 3-1: config 6 interface 96 has no altsetting 0 [ 538.577453][T17955] FAT-fs (loop4): Directory bread(block 73) failed [ 538.600863][ T6886] usb 3-1: string descriptor 0 read error: -22 [ 538.631346][ T6886] usb 3-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=4f.2b [ 538.658381][ T6886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.876624][T11127] wacom 0003:056A:0331.0050: unknown main item tag 0x0 [ 538.902558][T11127] wacom 0003:056A:0331.0050: unknown main item tag 0x0 [ 538.938416][T11127] wacom 0003:056A:0331.0050: unknown main item tag 0x0 [ 538.956258][T11127] wacom 0003:056A:0331.0050: unknown main item tag 0x0 [ 538.988523][T11127] wacom 0003:056A:0331.0050: unknown main item tag 0x0 [ 539.009036][T11127] wacom 0003:056A:0331.0050: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.6-1/input0 [ 539.118204][T11127] usb 7-1: USB disconnect, device number 18 [ 539.267130][ T6886] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 539.375577][ T6886] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 539.400595][ T6886] dib0700: firmware download failed at 28 with -71 [ 539.425565][T17982] fido_id[17982]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 539.434009][ T6886] usb 3-1: USB disconnect, device number 18 [ 539.652281][T17988] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4809'. [ 540.662147][ T6893] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 540.719130][T18028] smc: net device bond0 applied user defined pnetid SYZ0 [ 540.723593][T18027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4825'. [ 540.762373][T18027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4825'. [ 540.808606][T18027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4825'. [ 540.853696][ T6893] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 540.864299][ T6893] usb 7-1: config 0 has no interface number 0 [ 540.902890][ T6893] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 540.942185][ T6893] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.989581][ T6893] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 541.019458][ T6893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.050306][ T6893] usb 7-1: config 0 descriptor?? [ 541.132532][T18034] loop4: detected capacity change from 0 to 8192 [ 541.180227][T18034] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 541.212135][T18034] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 541.221651][T18034] REISERFS (device loop4): using ordered data mode [ 541.326999][T18034] reiserfs: using flush barriers [ 541.366896][T18034] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 541.392617][T18034] REISERFS (device loop4): checking transaction log (loop4) [ 541.429032][T18034] REISERFS (device loop4): Using r5 hash to sort names [ 541.449430][T18032] loop1: detected capacity change from 0 to 32768 [ 541.475388][T18034] reiserfs: enabling write barrier flush mode [ 541.540988][T18034] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 541.612291][T18034] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 541.682913][ T6893] uclogic 0003:28BD:0094.0051: failed retrieving string descriptor #100: -71 [ 541.691783][ T6893] uclogic 0003:28BD:0094.0051: failed retrieving pen parameters: -71 [ 541.692188][T18034] REISERFS (device loop4): Remounting filesystem read-only [ 541.750263][ T6893] uclogic 0003:28BD:0094.0051: pen probing failed: -71 [ 541.769004][T18034] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 541.787575][ T6893] uclogic 0003:28BD:0094.0051: failed probing parameters: -71 [ 541.795847][T18048] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 541.795847][T18048] program syz.2.4831 not setting count and/or reply_len properly [ 541.822704][ T6893] uclogic: probe of 0003:28BD:0094.0051 failed with error -71 [ 541.843244][T18034] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 541.869222][ T6893] usb 7-1: USB disconnect, device number 19 [ 541.910530][T18034] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 541.946099][T18053] device ip6tnl1 entered promiscuous mode [ 541.992196][T18034] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error [ 542.042110][T18034] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 542.081448][T18055] loop1: detected capacity change from 0 to 1764 [ 542.161782][T18034] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 542.184698][T18063] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4836'. [ 542.207716][T18034] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 542.325651][T18034] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 542.522307][T18072] tipc: Bearer : already 2 bearers with priority 10 [ 542.529816][T18072] tipc: Bearer : trying with adjusted priority [ 542.536348][T18034] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 542.565970][T18072] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 542.695920][ T4272] ------------[ cut here ]------------ [ 542.701503][ T4272] kernel BUG at fs/reiserfs/journal.c:1916! [ 542.738052][ T4272] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 542.744169][ T4272] CPU: 1 PID: 4272 Comm: syz-executor Not tainted syzkaller #0 [ 542.751731][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 542.761799][ T4272] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 542.767636][ T4272] Code: b8 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 28 3a b8 ff e9 f9 fc ff ff e8 3e 4f 67 ff <0f> 0b e8 37 4f 67 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 542.787262][ T4272] RSP: 0018:ffffc90003ee7b00 EFLAGS: 00010293 [ 542.793360][ T4272] RAX: ffffffff821b2332 RBX: 1ffff920007dcf64 RCX: ffff88802aeb9dc0 [ 542.801340][ T4272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.809396][ T4272] RBP: ffffc90003ee7bf8 R08: ffffc90003ee7b77 R09: ffffc90003ee7b40 [ 542.817366][ T4272] R10: dffffc0000000000 R11: fffff520007dcf6f R12: ffffc9000615b000 [ 542.825327][ T4272] R13: dffffc0000000000 R14: ffff8880295bc678 R15: 0000000000000000 [ 542.833286][ T4272] FS: 000055557863a500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 542.842209][ T4272] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.848797][ T4272] CR2: 000055f745077008 CR3: 000000005bb81000 CR4: 00000000003506e0 [ 542.856780][ T4272] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 542.864747][ T4272] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 542.872712][ T4272] Call Trace: [ 542.875983][ T4272] [ 542.878992][ T4272] ? journal_release+0x30/0x30 [ 542.883763][ T4272] journal_release+0x1b/0x30 [ 542.888345][ T4272] reiserfs_put_super+0x267/0x510 [ 542.893372][ T4272] ? hook_inode_free_security+0xa0/0xa0 [ 542.898913][ T4272] ? evict_inodes+0x642/0x6a0 [ 542.903582][ T4272] ? reiserfs_dirty_inode+0x260/0x260 [ 542.908977][ T4272] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 542.914626][ T4272] ? reiserfs_dirty_inode+0x260/0x260 [ 542.920006][ T4272] generic_shutdown_super+0x130/0x340 [ 542.925375][ T4272] kill_block_super+0x7c/0xe0 [ 542.930070][ T4272] deactivate_locked_super+0x93/0xf0 [ 542.935344][ T4272] cleanup_mnt+0x42c/0x4b0 [ 542.939753][ T4272] ? lockdep_hardirqs_on+0x94/0x140 [ 542.944957][ T4272] task_work_run+0x1d0/0x260 [ 542.949541][ T4272] ? task_work_cancel+0x220/0x220 [ 542.954564][ T4272] ? exit_to_user_mode_loop+0x3b/0x110 [ 542.960018][ T4272] exit_to_user_mode_loop+0xe6/0x110 [ 542.965303][ T4272] exit_to_user_mode_prepare+0xee/0x180 [ 542.970935][ T4272] syscall_exit_to_user_mode+0x16/0x40 [ 542.976412][ T4272] do_syscall_64+0x58/0xa0 [ 542.980916][ T4272] ? clear_bhb_loop+0x60/0xb0 [ 542.985594][ T4272] ? clear_bhb_loop+0x60/0xb0 [ 542.990262][ T4272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.996236][ T4272] RIP: 0033:0x7f8b5a59c117 [ 543.000642][ T4272] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 543.020328][ T4272] RSP: 002b:00007fff61b56d28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 543.028749][ T4272] RAX: 0000000000000000 RBX: 00007f8b5a60471f RCX: 00007f8b5a59c117 [ 543.036712][ T4272] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff61b56de0 [ 543.044676][ T4272] RBP: 00007fff61b56de0 R08: 00007fff61b57de0 R09: 00000000ffffffff [ 543.052637][ T4272] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff61b57e70 [ 543.061047][ T4272] R13: 00007f8b5a60471f R14: 0000000000084764 R15: 00007fff61b57eb0 [ 543.069102][ T4272] [ 543.072126][ T4272] Modules linked in: [ 543.076122][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.150157][ T4272] ---[ end trace 0000000000000000 ]--- [ 543.156162][ T4272] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 543.168817][ T4272] Code: b8 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 28 3a b8 ff e9 f9 fc ff ff e8 3e 4f 67 ff <0f> 0b e8 37 4f 67 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 543.188467][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.200850][ T4272] RSP: 0018:ffffc90003ee7b00 EFLAGS: 00010293 [ 543.209102][ T4272] RAX: ffffffff821b2332 RBX: 1ffff920007dcf64 RCX: ffff88802aeb9dc0 [ 543.219362][ T4272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.228130][ T4272] RBP: ffffc90003ee7bf8 R08: ffffc90003ee7b77 R09: ffffc90003ee7b40 [ 543.242156][ T6893] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 543.243915][ T4272] R10: dffffc0000000000 R11: fffff520007dcf6f R12: ffffc9000615b000 [ 543.258725][ T4272] R13: dffffc0000000000 R14: ffff8880295bc678 R15: 0000000000000000 [ 543.270284][ T4272] FS: 000055557863a500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 543.280582][ T4272] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 543.287497][ T4272] CR2: 00007efe473de2f8 CR3: 000000005bb81000 CR4: 00000000003506e0 [ 543.296262][ T4272] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 543.306209][ T4272] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 543.316445][ T4272] Kernel panic - not syncing: Fatal exception [ 543.322998][ T4272] Kernel Offset: disabled [ 543.327316][ T4272] Rebooting in 86400 seconds..