last executing test programs: 3m35.941979064s ago: executing program 32 (id=238): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./file1\x00', 0x4400, &(0x7f0000000480)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYRES8], 0x1, 0xa23, &(0x7f0000001b00)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000001f40)={'NETMAP\x00'}, &(0x7f0000006300)=0x1e) 3m3.034574449s ago: executing program 2 (id=620): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2, r1}) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) 3m2.649497767s ago: executing program 2 (id=624): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) keyctl$setperm(0x5, r0, 0x40008) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0) 3m2.473716412s ago: executing program 33 (id=624): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) keyctl$setperm(0x5, r0, 0x40008) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0) 2m35.147999942s ago: executing program 4 (id=919): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) lseek(r0, 0xffffffffffffffff, 0x2) 2m35.046409994s ago: executing program 4 (id=922): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x20031, 0x455965fb809f3fbf}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 2m34.789990851s ago: executing program 4 (id=926): syz_open_dev$video4linux(&(0x7f00000001c0), 0x1, 0x480803) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x80c4) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 2m34.694516993s ago: executing program 4 (id=937): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0xc0104d08, &(0x7f0000000900)="000001") 2m29.317252543s ago: executing program 34 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='5', 0x1) 2m29.295897334s ago: executing program 4 (id=931): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)="6d01", 0x2) 2m29.177230807s ago: executing program 4 (id=935): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f00000003c0)="92", 0xfffffffffffffea5, 0x44000044, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbff, {0x1, 0x2, 0x9, 0x10, {0x4e24, 0x4e22, [0x3, 0x7f, 0x1c000000, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) 2m24.252647775s ago: executing program 35 (id=966): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0805000000080017004e214e22080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) 2m13.898693885s ago: executing program 36 (id=935): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f00000003c0)="92", 0xfffffffffffffea5, 0x44000044, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbff, {0x1, 0x2, 0x9, 0x10, {0x4e24, 0x4e22, [0x3, 0x7f, 0x1c000000, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) 1m58.217007975s ago: executing program 7 (id=1194): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) 1m58.060014278s ago: executing program 7 (id=1195): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m58.038539949s ago: executing program 7 (id=1196): r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/206, 0xce}, 0x56b}], 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x1, 0x4) write(r0, &(0x7f0000000200)="240000001e005f0214e0ffda8250bb22fe54e592afe412cdf8bb048d8dd5d6d87c998fe8", 0x24) 1m57.883556982s ago: executing program 7 (id=1197): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1m56.931884586s ago: executing program 7 (id=1211): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m55.997253078s ago: executing program 7 (id=1231): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='0\n', 0x2) 1m40.9908561s ago: executing program 37 (id=1231): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='0\n', 0x2) 1m5.915887398s ago: executing program 0 (id=1803): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r2 = dup2(r1, r0) write$cgroup_pid(r2, 0x0, 0x0) 1m5.858265519s ago: executing program 0 (id=1804): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x280080) 1m5.730119922s ago: executing program 0 (id=1806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/cgroup.procs\x00', 0x8080, 0xe0) read(r1, &(0x7f0000000240)=""/92, 0x5c) close_range(r0, 0xffffffffffffffff, 0x0) 1m5.677213704s ago: executing program 0 (id=1808): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x274}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m5.588610876s ago: executing program 0 (id=1811): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000004000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x79cf, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 1m5.539935367s ago: executing program 0 (id=1813): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='tc', 0x2) 53.196973775s ago: executing program 9 (id=1961): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="5c41afe82f065523d45df0ccae1b1da1a4d3b4b6265afd3b2da33459a4dbe47792d48f51c105c8c005c957f9b3813840ec3b929f46b724ca594c7431b474b5db3ff536bf7465ce55c92dd9ee3de6a7467a76c7b512e7d386b3a4c2baf687be553db5d571c1568588dc0d97eee86b37aa4e33c69f4b815b285a67cd7493273b7717ded5a2ff6d995c6e09a703ece6237c5b387d2cea0a", 0x96) 53.099083198s ago: executing program 9 (id=1964): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) 52.757258016s ago: executing program 9 (id=1965): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd8c5a46fd7142ae7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x20008884, &(0x7f0000000080)={0x11, 0xd, 0x0, 0x1, 0xfd, 0x6, @multicast}, 0x14) 52.721643557s ago: executing program 9 (id=1966): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @private=0xa010100}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x8, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000540)={0x2, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e21, @remote}}}, 0x108) 52.655093339s ago: executing program 9 (id=1967): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)="6d01", 0x2) 52.57253643s ago: executing program 9 (id=1969): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$eJzsVUtrU0EU/s7NJLfRLAru3BpsN9rmFsS1G7vXH2BIr7WY+OhENKFgdNONgvgnCv4JXQi6dyEiuNGFgi4qrioSOTNnJpMH9ra+NvPB5XznPY87M1f0TZ0C+LG71cI8DAg1vCWCArBA1rZXsfKryKHgo7J6Q+xPRH4QqXv9Vw8s7V9tttv5pu79mqQgYJ+YcTJtOvf04bHi+RPk5f1xC6FIFqnD9Po90i3ZlZ12PRqzpLNiJBeTlRsX/vEsDk+qU4N35FsNCC2f/mD3Mq9mGTNjiA70r88gXMAQwLu+16a3aZK8eWw7z4wpSXoV48uyL+FT/L93mQnfRYYkB0rXkP3Q5+8l+EJAGa93t1psvSS3GLvX7OeOhMli5XkQc1wBA4BKGJqiXEdJ7AKApW7nxpLu9U9tdJrr+Xp+LctWziy/OCpHdHgX2Gjny2SGYdMTJgoefE6rgZ//tHcj/wABKBgaeF4jsy/pLufFE0FIFUiC3KCGFHjm+6diu6U7uIiTmANwe8DuTBaoDq6mcJmntgpCSZSGCgeEPSSYM47TrevttW0QyKXtQPkajfcoeyUThRvlK2f99LdF1kWuitwZ9TNwb5d7k5Sp8Fm0xQFQwZ1mt7tpHi/L2FbxFYwtm/edE+nqXkPXrJ6iII4UDYyIiIiIiIiI+Ev4GQAA//8sQT03") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/53, 0x35) getdents64(r0, 0xfffffffffffffffe, 0x29) 50.333933024s ago: executing program 38 (id=1813): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='tc', 0x2) 45.391251744s ago: executing program 2 (id=1976): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b3, 0x900) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8, 0x14, "339f020bbe82b398000100000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e8333c691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f044158d9744b66cc530000000400000001000000002200", [0x314d39d0, 0x245]}}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0x4c09, 0x0) 45.302793396s ago: executing program 2 (id=1994): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x101899, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x1) 45.176412339s ago: executing program 2 (id=1996): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x675}, {{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {&(0x7f0000000880)=""/148, 0x38}], 0x2}, 0x101}], 0x2, 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x2404c054) 42.844087385s ago: executing program 2 (id=2021): fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_format(r0, &(0x7f0000000180)='1\x00', 0x2) 42.728311068s ago: executing program 39 (id=2021): fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_format(r0, &(0x7f0000000180)='1\x00', 0x2) 37.417005096s ago: executing program 40 (id=1969): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/53, 0x35) getdents64(r0, 0xfffffffffffffffe, 0x29) 4.187996089s ago: executing program 5 (id=2390): r0 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000001c0)=0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"3370491d", 0x8, 0x5, 0x2, 0x0, 0xdf, "001a0000008400", "00010b00", "8000", '\x00', ["0600", "3549fff7ff0000001e0200", "006a9cc1f000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0x2, 0x6, 0x2, 0x401, 0x7, 0xa83c, "6c3677719085d7a8619ca3788f5ead5e", 0x8, 0x8, 0x4, 0x8, 0x6, 0x5b, 0x1}) 3.982685404s ago: executing program 5 (id=2393): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") write(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac3(0x0, 0xb1, &(0x7f0000000740)=ANY=[@ANYBLOB="12010002000000080c200b1040000102030109029f0003010d5000080b0102012130010904000000010130000a24010f3b00080000000d240706050a40000007000000132403020504020604810000007f008000ff0711240a05"], 0x0) 3.699607941s ago: executing program 1 (id=2399): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xcb}, 0x2d, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '\xa9\x06\x00\x00\x00\x00\x00\x00'}, 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 3.543774245s ago: executing program 1 (id=2402): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000340)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000240)={0x40, 0x15, 0x4, "1f5065fa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.202371203s ago: executing program 3 (id=2405): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="de49f241", @ANYRESHEX], 0xd) 3.110571345s ago: executing program 3 (id=2406): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="80010000291004001c001a8018000580140005800800020000000000080001"], 0x3c}}, 0x0) 3.033037417s ago: executing program 3 (id=2407): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x40, 0x3, 0x4, 0x5, 0x8, 0x101}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x200}, 0xe) connect$bt_rfcomm(r0, &(0x7f0000000e00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xa) 2.9224926s ago: executing program 3 (id=2408): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0\x00', 0x181d015, 0x0, 0x0, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./bus\x00') getdents(0xffffffffffffffff, 0x0, 0x58) 2.448922111s ago: executing program 8 (id=2411): io_uring_setup(0x177f, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(0x4) 2.286307105s ago: executing program 8 (id=2412): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 2.140466019s ago: executing program 8 (id=2416): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000000)=ANY=[], 0xfb, 0x6b2, &(0x7f0000000140)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) getdents64(r0, &(0x7f00000001c0)=""/163, 0xba974ed140df4995) 1.958996503s ago: executing program 6 (id=2417): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1.828050636s ago: executing program 5 (id=2418): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) 1.801866057s ago: executing program 8 (id=2419): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x7c, r2, 0x1, 0x70bd27, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x4e, 0x1, '\x03\xdf\xe4\xdd\x9en\xfa\x9er\xe4\x06^\x1d\xd0\xabL?\x17V\x84\x92\xfa\x01\x92%\xf4\xf5W$\xdb\xd9\xd7&H\x80\xef|\xefM\xa0\x8at\xe9G\xa3\x1c\xe6u\x0f\x9a\x05\xe4K\xd9]zn\xda\b;\xb4\x0e\xa3\xd6>\f\x00\x00\xdd\xd4\xa0\xc6\xf5\xe4'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.500652684s ago: executing program 3 (id=2420): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x8d0, &(0x7f0000000080)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c00a99176bffea999ec4947785a4b3392b470a878b010acc5fde3f7c39533b111d92aa1e3cd9504b4aec083a038cd1b944d504716e6b8463de9dc9743fbe9e0ef9396a932024b904283205650ea735ae7adac50b5efe5244d737dc9515a51775b2fafbc85c9c1c8f62872a466192aae714a90990e0b07aa2b92e463ad98"], 0x1, 0x25f, &(0x7f0000000840)="$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") syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc) 1.499863064s ago: executing program 8 (id=2421): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0x4}, {}, {0xd, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200410d0}, 0x0) 1.473020485s ago: executing program 6 (id=2422): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002640)=[{&(0x7f0000000080)=""/117, 0x75}], 0x1, 0x7fffffffffffffff, 0x0) 1.23992675s ago: executing program 8 (id=2423): syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file1\x00', 0x2200802, &(0x7f0000000040)={[{@ikeep}]}, 0x1, 0xbad7, &(0x7f000001c300)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}}) 1.233578361s ago: executing program 6 (id=2424): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet6(r1, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f00000086c0)=[{&(0x7f0000006240)="c1346f2d260685eb57d897465edd4823", 0x10}, {&(0x7f00000062c0)="2977c9c80000000000", 0x9}, {&(0x7f0000006300)="5c711d9c51a0", 0x6}], 0x3}}], 0x1, 0x44051) 1.135609523s ago: executing program 6 (id=2425): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x6}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 1.048126715s ago: executing program 5 (id=2426): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='profile\x00&', 0xfef) 984.388846ms ago: executing program 5 (id=2427): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x44, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x44}}, 0x0) 870.870019ms ago: executing program 3 (id=2428): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 771.958532ms ago: executing program 5 (id=2429): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x6349, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) getdents64(r0, &(0x7f0000000080)=""/109, 0x6d) 647.338895ms ago: executing program 1 (id=2430): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="3c2d5c3ecd45036a2762bb626c65640a", 0x10) 491.486168ms ago: executing program 1 (id=2431): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 419.86087ms ago: executing program 6 (id=2432): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x12000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x188c0}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) 395.681501ms ago: executing program 1 (id=2433): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2800480, &(0x7f00000002c0)={[], [{@euid_gt}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 188.638686ms ago: executing program 6 (id=2434): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x5, 0x8]}, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) 0s ago: executing program 1 (id=2435): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f00000001c0)=ANY=[], 0xff, 0x5eb2, &(0x7f0000007300)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20}}, 0x0) kernel console output (not intermixed with test programs): : pid=9906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1694" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 213.445677][ T7436] usb 7-1: Using ep0 maxpacket: 8 [ 213.515801][ T5061] usb 9-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=62.2a [ 213.535401][ T5061] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.543988][ T5061] usb 9-1: Product: syz [ 213.549246][ T5061] usb 9-1: Manufacturer: syz [ 213.553863][ T5061] usb 9-1: SerialNumber: syz [ 213.561177][ T5061] usb 9-1: config 0 descriptor?? [ 213.566111][ T7436] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 213.566144][ T7436] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.566166][ T7436] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 213.566190][ T7436] usb 7-1: config 0 interface 0 has no altsetting 0 [ 213.566246][ T7436] usb 7-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 213.566267][ T7436] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.599323][ T7436] usb 7-1: config 0 descriptor?? [ 213.675776][ T5066] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 213.695574][ T5066] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 213.714974][ T5066] usb 10-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 213.734849][ T5066] usb 10-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 213.753231][ T9910] loop0: detected capacity change from 0 to 32768 [ 213.766858][ T4232] wacom 0003:056A:030C.0015: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.3-1/input0 [ 213.857066][ T9910] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 213.857356][ T5066] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 213.877569][ T5066] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 213.890178][ T5066] usb 10-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 213.900409][ T5066] usb 10-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 213.980960][ T5061] usb 9-1: bad CDC descriptors [ 213.997925][ T5061] usb 9-1: bad CDC descriptors [ 214.007085][ T4232] usb 4-1: USB disconnect, device number 8 [ 214.016859][ T5061] usb 9-1: USB disconnect, device number 11 [ 214.106241][ T5066] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 214.109714][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 214.122792][ T5066] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.131649][ T5066] usb 10-1: Product: syz [ 214.136048][ T5066] usb 10-1: Manufacturer: syz [ 214.140755][ T5066] usb 10-1: SerialNumber: syz [ 214.179644][ T5066] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 214.191761][ T5066] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 214.217921][ T5066] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 214.325772][ T7436] hid-alps 0003:044E:120C.0016: failed to read command (-71) [ 214.335621][ T7436] hid-alps 0003:044E:120C.0016: failed T4_PRM_ID_CONFIG_3 (-71) [ 214.346702][ T7436] hid-alps 0003:044E:120C.0016: hidraw0: USB HID v0.00 Joystick [HID 044e:120c] on usb-dummy_hcd.6-1/input0 [ 214.367982][ T7436] usb 7-1: USB disconnect, device number 10 [ 214.408000][ T9900] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 214.427805][ T5061] usb 10-1: USB disconnect, device number 11 [ 214.453918][ T5061] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 214.471735][ T5061] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 214.507172][ T5061] ti_usb_3410_5052 10-1:2.0: device disconnected [ 214.541945][ T9920] loop8: detected capacity change from 0 to 2048 [ 214.864807][ T9930] loop3: detected capacity change from 0 to 512 [ 215.169493][ T9918] loop0: detected capacity change from 0 to 131072 [ 215.223775][ T9918] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 215.230674][ T9918] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 215.238481][ T9920] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.256699][ T9918] F2FS-fs (loop0): invalid crc value [ 215.276136][ T9930] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 215.306061][ T9930] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.333663][ T9920] overlayfs: upper fs needs to support d_type. [ 215.338099][ T9943] fido_id[9943]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 215.364501][ T9918] F2FS-fs (loop0): Found nat_bits in checkpoint [ 215.374210][ T9920] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 215.381573][ T9920] overlayfs: failed to set xattr on upper [ 215.387445][ T9920] overlayfs: conflicting lowerdir path [ 215.422532][ T9918] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 215.430061][ T9918] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 215.738489][ T9971] loop3: detected capacity change from 0 to 64 [ 215.768320][ T9967] ima: Unable to open file: /e (-2) [ 215.784998][ T9966] ima: policy update failed [ 215.802334][ T9969] loop8: detected capacity change from 0 to 4096 [ 215.809935][ T26] audit: type=1802 audit(1787619995.722:54): pid=9966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1720" res=0 errno=0 [ 215.918297][ T9974] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.028868][ T9978] db_root: cannot be changed: target drivers registered [ 216.491767][ T9996] loop6: detected capacity change from 0 to 1024 [ 216.535626][ T5061] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 216.618146][ T9996] EXT4-fs (loop6): Ignoring removed nobh option [ 216.667810][ T9996] EXT4-fs (loop6): Ignoring removed bh option [ 216.746170][ T4231] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 216.762194][ T9996] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 216.797888][ T9996] System zones: 0-1, 3-12 [ 216.839070][ T9996] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: none. [ 216.900442][T10008] netlink: 'syz.8.1736': attribute type 12 has an invalid length. [ 216.945699][T10008] netlink: 14548 bytes leftover after parsing attributes in process `syz.8.1736'. [ 216.956351][ T5061] usb 4-1: unable to get BOS descriptor or descriptor too short [ 217.006416][ T9996] EXT4-fs error (device loop6): ext4_check_all_de:667: inode #12: block 7: comm syz.6.1732: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 217.027653][ T4231] usb 10-1: Using ep0 maxpacket: 16 [ 217.068354][ T5061] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.093050][ T5061] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 217.112612][ T5061] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 217.135169][ T5061] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 217.165825][ T4231] usb 10-1: config index 0 descriptor too short (expected 51443, got 18) [ 217.190358][ T9996] EXT4-fs (loop6): Remounting filesystem read-only [ 217.197500][ T5061] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 217.219687][ T5061] usb 4-1: config 1 interface 1 has no altsetting 0 [ 217.355953][ T4231] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 217.390211][ T4231] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.399487][T10020] loop6: detected capacity change from 0 to 1024 [ 217.415417][ T4231] usb 10-1: Product: syz [ 217.434093][ T4231] usb 10-1: Manufacturer: syz [ 217.444228][ T4231] usb 10-1: SerialNumber: syz [ 217.452440][ T4231] r8152-cfgselector 10-1: config 0 descriptor?? [ 217.526102][ T5061] usb 4-1: string descriptor 0 read error: -22 [ 217.533398][ T5061] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 217.574317][T10026] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.578796][ T5061] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.647466][T10026] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 217.730848][T10026] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 217.744234][T10026] EXT4-fs (loop0): This should not happen!! Data will be lost [ 217.744234][T10026] [ 217.773074][T10026] EXT4-fs (loop0): Total free blocks count 0 [ 217.781843][T10026] EXT4-fs (loop0): Free/Dirty block details [ 217.785664][ T4231] r8152-cfgselector 10-1: Unknown version 0x0000 [ 217.788763][T10026] EXT4-fs (loop0): free_blocks=2415919504 [ 217.800835][T10026] EXT4-fs (loop0): dirty_blocks=16 [ 217.833109][T10034] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 217.856079][T10026] EXT4-fs (loop0): Block reservation details [ 217.890524][T10026] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 217.923035][T10034] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.943400][ T5061] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 217.957418][ T5061] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 218.075926][ T4231] r8152-cfgselector 10-1: Unknown version 0x0000 [ 218.103851][ T4231] r8152-cfgselector 10-1: USB disconnect, device number 12 [ 218.208876][T10042] netlink: 'syz.0.1748': attribute type 10 has an invalid length. [ 218.219278][T10042] device geneve0 entered promiscuous mode [ 218.277580][T10036] set_capacity_and_notify: 2 callbacks suppressed [ 218.277596][T10036] loop6: detected capacity change from 0 to 32768 [ 218.325899][ T5066] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 218.333919][T10036] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.1745 (10036) [ 218.378837][T10036] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 218.388929][T10046] loop0: detected capacity change from 0 to 128 [ 218.395050][T10036] BTRFS info (device loop6): using free space tree [ 218.403050][T10036] BTRFS info (device loop6): has skinny extents [ 218.445696][ T5061] usb 4-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4 [ 218.457333][T10046] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 218.485671][ T5061] usb 4-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4 [ 218.508567][T10046] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.509909][T10036] BTRFS info (device loop6): enabling ssd optimizations [ 218.540171][T10046] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 218.562057][ T5061] usb 4-1: USB disconnect, device number 9 [ 218.593423][ T5066] usb 9-1: Using ep0 maxpacket: 8 [ 218.724020][ T5066] usb 9-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 218.735171][ T5066] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.780628][T10070] loop9: detected capacity change from 0 to 4096 [ 218.949350][ T5066] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 218.971599][ T5066] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.011189][T10070] NILFS (loop9): invalid segment: Checksum error in segment payload [ 219.032155][ T5066] usb 9-1: Product: syz [ 219.039788][T10070] NILFS (loop9): trying rollback from an earlier position [ 219.051266][ T5066] usb 9-1: Manufacturer: syz [ 219.069472][ T5066] usb 9-1: SerialNumber: syz [ 219.125899][T10070] NILFS (loop9): recovery complete [ 219.155953][T10076] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.183269][T10078] loop0: detected capacity change from 0 to 1024 [ 219.320946][T10078] hfsplus: invalid length 32517 has been corrected to 255 [ 219.380882][T10078] hfsplus: invalid length 32517 has been corrected to 255 [ 219.415888][T10078] hfsplus: invalid length 32517 has been corrected to 255 [ 219.529265][ T5066] usb 9-1: USB disconnect, device number 12 [ 219.569216][ T4936] hfsplus: b-tree write err: -5, ino 2 [ 219.579681][ T4936] hfsplus: b-tree write err: -5, ino 4 [ 219.582143][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.982451][T10075] loop3: detected capacity change from 0 to 32768 [ 220.043701][T10105] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1766'. [ 220.067415][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'. [ 220.147830][T10113] loop9: detected capacity change from 0 to 1024 [ 220.181537][T10075] XFS (loop3): Mounting V5 Filesystem [ 220.198076][T10113] hfsplus: invalid length 32517 has been corrected to 255 [ 220.254228][T10113] hfsplus: invalid length 32517 has been corrected to 255 [ 220.306755][T10113] hfsplus: invalid length 32517 has been corrected to 255 [ 220.318125][T10075] XFS (loop3): Ending clean mount [ 220.328868][T10075] XFS (loop3): Quotacheck needed: Please wait. [ 220.344698][ T4243] hfsplus: b-tree write err: -5, ino 2 [ 220.351494][ T4243] hfsplus: b-tree write err: -5, ino 4 [ 220.405243][T10075] XFS (loop3): Quotacheck: Done. [ 220.436226][ T4453] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 220.443999][ T4232] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 220.514979][ T8939] XFS (loop3): Unmounting Filesystem [ 220.705556][ T4232] usb 9-1: Using ep0 maxpacket: 16 [ 220.740710][T10131] loop9: detected capacity change from 0 to 4096 [ 220.778849][T10131] ntfs3: loop9: Different NTFS' sector size (1024) and media sector size (512) [ 220.788666][ T5066] kernel read not supported for file /dsp (pid: 5066 comm: kworker/1:14) [ 220.834478][ T4232] usb 9-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.847791][ T4453] usb 7-1: config index 0 descriptor too short (expected 64998, got 72) [ 220.893828][ T4232] usb 9-1: config 0 interface 0 has no altsetting 0 [ 220.907245][ T4232] usb 9-1: New USB device found, idVendor=056a, idProduct=08b1, bcdDevice= 0.00 [ 220.933380][ T4232] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.994075][ T4232] usb 9-1: config 0 descriptor?? [ 221.036132][ T4453] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 221.045217][ T4453] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.057925][ T4232] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 221.094904][ T4453] usb 7-1: Product: syz [ 221.102177][ T4453] usb 7-1: Manufacturer: syz [ 221.124763][ T4453] usb 7-1: SerialNumber: syz [ 221.284607][T10139] device erspan0 entered promiscuous mode [ 221.293196][ T4454] usb 9-1: USB disconnect, device number 13 [ 221.442169][T10133] loop0: detected capacity change from 0 to 40427 [ 221.478845][T10144] loop3: detected capacity change from 0 to 2048 [ 221.486483][T10133] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x1ffff [ 221.496167][T10133] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xe4 [ 221.565955][T10144] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 221.574822][T10144] UDF-fs: Scanning with blocksize 512 failed [ 221.584279][T10133] F2FS-fs (loop0): invalid crc value [ 221.606581][T10133] F2FS-fs (loop0): Found nat_bits in checkpoint [ 221.617154][T10144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.653926][T10133] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 221.711249][T10133] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 221.742235][T10133] F2FS-fs (loop0) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 221.756251][ T4453] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 221.771572][T10151] loop3: detected capacity change from 0 to 512 [ 221.845613][ T4454] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 221.878510][T10151] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 221.921534][T10151] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 221.981832][T10151] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1782: Corrupt directory, running e2fsck is recommended [ 222.052163][T10151] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 222.079128][T10151] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.1782: corrupted in-inode xattr [ 222.095732][ T4454] usb 10-1: Using ep0 maxpacket: 8 [ 222.132930][T10151] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1782: couldn't read orphan inode 15 (err -117) [ 222.149468][T10151] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.sb=0x0000000000000001,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 222.192155][T10151] EXT4-fs (loop3): shut down requested (1) [ 222.361244][T10155] XFS (loop8): Mounting V5 Filesystem [ 222.386001][ T4454] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 222.395423][ T4454] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.403686][ T4454] usb 10-1: Product: syz [ 222.408545][ T4454] usb 10-1: Manufacturer: syz [ 222.409197][T10162] EXT4-fs (loop3): Test dummy encryption mode enabled [ 222.413294][ T4454] usb 10-1: SerialNumber: syz [ 222.427168][ T4454] usb 10-1: config 0 descriptor?? [ 222.476187][ T4454] gspca_main: se401-2.14.0 probing 047d:5003 [ 222.511354][T10162] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.1785: inode has both inline data and extents flags [ 222.529818][T10162] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1785: couldn't read orphan inode 15 (err -117) [ 222.548128][T10155] XFS (loop8): Ending clean mount [ 222.555129][T10162] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 222.557807][T10155] XFS (loop8): Quotacheck needed: Please wait. [ 222.588343][ T4232] usb 7-1: USB disconnect, device number 11 [ 222.679960][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1784'. [ 222.743782][T10155] XFS (loop8): Quotacheck: Done. [ 222.749206][T10162] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 222.888722][ T7434] XFS (loop8): Unmounting Filesystem [ 222.907172][ T4454] gspca_se401: ExtraFeatures: 64 [ 223.129883][ T4454] input: se401 as /devices/platform/dummy_hcd.9/usb10/10-1/input/input30 [ 223.225873][ T4453] usb 7-1: Service connection timeout for: 257 [ 223.232113][ T4453] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 223.256604][ T4454] usb 10-1: USB disconnect, device number 13 [ 223.305982][ T5070] Bluetooth: hci1: command 0x0c24 tx timeout [ 223.306601][ T4453] ath9k_htc: Failed to initialize the device [ 223.339895][ T4232] usb 7-1: ath9k_htc: USB layer deinitialized [ 223.494401][T10180] set_capacity_and_notify: 2 callbacks suppressed [ 223.494417][T10180] loop0: detected capacity change from 0 to 32768 [ 223.662420][T10191] loop8: detected capacity change from 0 to 256 [ 224.192274][T10205] loop8: detected capacity change from 0 to 64 [ 224.458480][ T4454] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 224.559073][T10213] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.702945][T10207] loop6: detected capacity change from 0 to 32768 [ 224.825977][ T4454] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 224.829012][T10217] loop9: detected capacity change from 0 to 8192 [ 224.843932][ T4454] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 224.872554][ T4454] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.894016][T10207] XFS (loop6): Mounting V5 Filesystem [ 224.944822][T10217] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.965114][T10241] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 225.003154][T10207] XFS (loop6): Ending clean mount [ 225.023167][T10207] XFS (loop6): Quotacheck needed: Please wait. [ 225.085841][ T4454] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 225.103275][ T4454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 225.123343][ T4454] usb 4-1: Product: syz [ 225.128710][ T4454] usb 4-1: Manufacturer: syz [ 225.133723][ T4454] usb 4-1: SerialNumber: syz [ 225.182205][T10243] 9p: Unknown uid 18446744073709551615 [ 225.183552][T10207] XFS (loop6): Quotacheck: Done. [ 225.305691][ T4232] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 225.362365][ T6238] XFS (loop6): Unmounting Filesystem [ 225.473007][ T4454] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 225.615589][ T5070] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 225.653203][ T4454] usb 4-1: USB disconnect, device number 10 [ 225.676779][ T4454] usblp0: removed [ 225.688384][T10247] loop6: detected capacity change from 0 to 8 [ 225.695770][ T4232] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 225.705935][ T4232] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 52272, setting to 64 [ 225.719280][ T4232] usb 10-1: config 0 interface 0 has no altsetting 0 [ 225.745639][T10247] SQUASHFS error: Unable to read inode 0x11f [ 225.821714][ T4232] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 225.837616][ T4232] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 225.852176][ T4232] usb 10-1: SerialNumber: syz [ 225.891258][ T4232] usb 10-1: config 0 descriptor?? [ 225.916044][T10217] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 225.951031][T10253] loop6: detected capacity change from 0 to 256 [ 225.985864][ T5070] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 225.994948][ T5070] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.005734][ T5070] usb 9-1: config 0 descriptor?? [ 226.047116][ T5070] cp210x 9-1:0.0: cp210x converter detected [ 226.145374][T10217] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 226.178353][ T4232] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input31 [ 226.395066][ T4232] usb 10-1: USB disconnect, device number 14 [ 226.478630][ T5070] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 226.550726][ T5070] usb 9-1: cp210x converter now attached to ttyUSB0 [ 226.754137][ T5070] usb 9-1: USB disconnect, device number 14 [ 226.764814][ T5070] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 226.780859][ T5070] cp210x 9-1:0.0: device disconnected [ 226.787208][ T5061] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 226.989542][T10272] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1829'. [ 227.035722][ T5061] usb 4-1: Using ep0 maxpacket: 32 [ 227.171351][ T5061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.194004][ T5061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.203420][T10280] loop6: detected capacity change from 0 to 256 [ 227.210296][ T5061] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 227.234297][ T5061] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.243373][T10280] exfat: Deprecated parameter 'utf8' [ 227.259237][ T5061] usb 4-1: config 0 descriptor?? [ 227.267239][T10280] exfat: Deprecated parameter 'namecase' [ 227.296964][ T5061] hub 4-1:0.0: USB hub found [ 227.310734][T10280] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 227.369721][T10282] loop8: detected capacity change from 0 to 512 [ 227.425303][T10274] loop9: detected capacity change from 0 to 32768 [ 227.487375][T10282] EXT4-fs (loop8): Ignoring removed bh option [ 227.513088][ T5061] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 227.540767][T10282] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 227.557992][T10282] EXT4-fs (loop8): 1 truncate cleaned up [ 227.564170][T10282] EXT4-fs (loop8): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 227.590434][T10284] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 227.631866][T10274] XFS (loop9): Mounting V5 Filesystem [ 227.664594][ T26] audit: type=1800 audit(1787620007.572:55): pid=10282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1833" name="file0" dev="loop8" ino=13 res=0 errno=0 [ 227.874995][T10274] XFS (loop9): Ending clean mount [ 227.891281][T10274] XFS (loop9): Quotacheck needed: Please wait. [ 227.938462][ T5061] hid-generic 0003:046D:C31C.0017: item fetching failed at offset 0/1 [ 227.960314][ T5061] hid-generic: probe of 0003:046D:C31C.0017 failed with error -22 [ 228.097885][T10274] XFS (loop9): Quotacheck: Done. [ 228.185902][ T7730] XFS (loop9): Unmounting Filesystem [ 228.285131][ T5065] usb 4-1: USB disconnect, device number 11 [ 228.467094][T10325] netlink: 165 bytes leftover after parsing attributes in process `syz.8.1848'. [ 229.253120][T10358] set_capacity_and_notify: 1 callbacks suppressed [ 229.253135][T10358] loop3: detected capacity change from 0 to 1024 [ 229.470223][T10337] loop6: detected capacity change from 0 to 32768 [ 229.492808][T10344] loop8: detected capacity change from 0 to 32768 [ 229.760393][T10337] XFS (loop6): Mounting V5 Filesystem [ 229.977259][T10337] XFS (loop6): Ending clean mount [ 229.995034][T10337] XFS (loop6): Quotacheck needed: Please wait. [ 230.118814][T10381] loop3: detected capacity change from 0 to 32768 [ 230.126562][T10337] XFS (loop6): Quotacheck: Done. [ 230.282841][ T6238] XFS (loop6): Unmounting Filesystem [ 230.305099][T10381] XFS (loop3): Mounting V5 Filesystem [ 230.552762][T10410] loop8: detected capacity change from 0 to 256 [ 230.557373][T10381] XFS (loop3): Ending clean mount [ 230.611821][T10410] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.656079][ T26] audit: type=1800 audit(1787620010.572:56): pid=10381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1872" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 230.738749][ T8939] XFS (loop3): Unmounting Filesystem [ 230.815743][ T5061] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 230.867592][T10419] loop8: detected capacity change from 0 to 1024 [ 231.043748][T10424] loop6: detected capacity change from 0 to 64 [ 231.079769][ T5061] usb 10-1: Using ep0 maxpacket: 8 [ 231.207519][T10428] loop8: detected capacity change from 0 to 8 [ 231.246274][ T5061] usb 10-1: config 0 interface 0 has no altsetting 0 [ 231.263497][ T5061] usb 10-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 231.296706][T10422] Trying to free block not in datazone [ 231.313086][ T5061] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.346978][ T5061] usb 10-1: config 0 descriptor?? [ 231.354504][T10428] SQUASHFS error: Failed to read block 0x6e6: -5 [ 231.373883][T10428] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 231.406030][T10428] SQUASHFS error: Unable to read directory block [6e4:0] [ 231.480002][T10434] loop6: detected capacity change from 0 to 64 [ 231.646260][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1882'. [ 231.819360][ T5061] logitech-djreceiver 0003:046D:C534.0018: unknown main item tag 0x0 [ 231.854148][ T5061] logitech-djreceiver 0003:046D:C534.0018: unknown main item tag 0x1 [ 231.885830][T10454] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 231.890264][ T5061] logitech-djreceiver 0003:046D:C534.0018: ignoring exceeding usage max [ 231.933792][ T5061] logitech-djreceiver 0003:046D:C534.0018: unknown main item tag 0x4 [ 231.989917][ T5061] logitech-djreceiver 0003:046D:C534.0018: hidraw0: USB HID v0.81 Device [HID 046d:c534] on usb-dummy_hcd.9-1/input0 [ 232.104696][ T5061] usb 10-1: USB disconnect, device number 15 [ 232.245011][T10461] fido_id[10461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 232.341929][T10467] print_req_error: 74 callbacks suppressed [ 232.341945][T10467] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.375033][T10467] exFAT-fs (loop3): unable to read boot sector [ 232.382712][T10467] exFAT-fs (loop3): failed to read boot sector [ 232.399418][T10467] exFAT-fs (loop3): failed to recognize exfat type [ 232.602272][T10457] loop6: detected capacity change from 0 to 32768 [ 232.783949][T10457] XFS (loop6): Mounting V5 Filesystem [ 233.002939][T10457] XFS (loop6): Ending clean mount [ 233.064772][T10457] XFS (loop6): Quotacheck needed: Please wait. [ 233.206983][T10457] XFS (loop6): Quotacheck: Done. [ 233.310739][T10510] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 233.329539][ T6238] XFS (loop6): Unmounting Filesystem [ 233.355640][T10510] exFAT-fs (loop9): unable to read boot sector [ 233.361839][T10510] exFAT-fs (loop9): failed to read boot sector [ 233.416167][T10510] exFAT-fs (loop9): failed to recognize exfat type [ 233.544049][T10516] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 233.599446][T10512] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 233.749054][ T8939] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 234.238360][T10539] Attempt to read inode for relocated directory [ 234.709202][T10525] set_capacity_and_notify: 5 callbacks suppressed [ 234.709217][T10525] loop8: detected capacity change from 0 to 32768 [ 234.748035][T10558] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.759286][T10558] exFAT-fs (loop6): unable to read boot sector [ 234.770870][T10558] exFAT-fs (loop6): failed to read boot sector [ 234.803207][T10558] exFAT-fs (loop6): failed to recognize exfat type [ 234.876026][T10525] XFS (loop8): Mounting V5 Filesystem [ 234.978816][T10579] loop9: detected capacity change from 0 to 8 [ 234.989451][T10525] XFS (loop8): Ending clean mount [ 235.094665][ T7434] XFS (loop8): Unmounting Filesystem [ 235.275293][T10589] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 235.281879][T10589] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 235.445536][T10589] vhci_hcd vhci_hcd.0: Device attached [ 235.540336][T10597] loop6: detected capacity change from 0 to 4096 [ 235.575607][ T5061] vhci_hcd: vhci_device speed not set [ 235.611042][T10597] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 235.653773][ T5061] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 235.665790][ T5065] usb 10-1: new low-speed USB device number 16 using dummy_hcd [ 235.762565][ T6238] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 235.774348][T10604] device bridge_slave_0 left promiscuous mode [ 235.781439][T10604] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.953137][T10612] loop3: detected capacity change from 0 to 1024 [ 236.031221][T10612] hfsplus: xattr searching failed [ 236.043586][T10615] loop8: detected capacity change from 0 to 4096 [ 236.085819][ T5065] usb 10-1: config 0 has no interfaces? [ 236.091444][ T5065] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 236.106498][T10615] ntfs: (device loop8): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 236.107691][ T9] hfsplus: b-tree write err: -5, ino 3 [ 236.125876][ T5065] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.134341][T10615] ntfs: (device loop8): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 236.152162][ T5065] usb 10-1: config 0 descriptor?? [ 236.195324][T10615] ntfs: volume version 3.1. [ 236.432309][T10592] usbip_core: unknown command [ 236.438409][T10592] vhci_hcd: unknown pdu 0 [ 236.442758][T10592] usbip_core: unknown command [ 236.452801][T10617] loop6: detected capacity change from 0 to 32768 [ 236.453000][ T5070] usb 10-1: USB disconnect, device number 16 [ 236.478744][T10621] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.493887][ T144] vhci_hcd: stop threads [ 236.502483][T10623] loop3: detected capacity change from 0 to 1024 [ 236.504014][ T144] vhci_hcd: release socket [ 236.515117][ T144] vhci_hcd: disconnect device [ 236.521553][ T5061] vhci_hcd: vhci_device speed not set [ 236.574910][ T9] Bluetooth: hci7: Frame reassembly failed (-84) [ 236.592939][T10623] EXT4-fs (loop3): Ignoring removed orlov option [ 236.618998][T10617] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 236.704306][T10623] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,minixdf,norecovery,,errors=continue. Quota mode: none. [ 236.803049][ T6238] ocfs2: Unmounting device (7,6) on (node local) [ 236.957352][T10634] netem: change failed [ 237.054474][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1958'. [ 237.138965][T10642] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1960'. [ 237.204747][T10646] bond0: option arp_interval: invalid value (\A¯è/U#Ô]ðÌ®¡¤Ó´¶&Zý;-£4Y¤Ûäw’ÔQÁÈÀÉWù³8@ì;’ŸF·$ÊYLt1´tµÛ?õ6¿teÎUÉ-Ùî=æ§FzvǵçÓ†³¤Âºö‡¾U=µÕqÁV…ˆÜ—îèk7ªN3ÆŸK[(ZgÍt“';wÞÕ¢ÿm™\n §ìæ#|[8},ê) [ 237.235857][T10646] bond0: option arp_interval: allowed values 0 - 2147483647 [ 237.335776][ T4455] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 237.706514][ T4455] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00 [ 237.723462][ T4455] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.808125][ T4455] usb 4-1: skipping empty audio interface (v1) [ 237.825196][T10663] loop6: detected capacity change from 0 to 1024 [ 237.853736][ T4455] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 237.888040][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.595657][ T5070] Bluetooth: hci7: command 0x1003 tx timeout [ 238.602416][ T4202] Bluetooth: hci7: sending frame failed (-49) [ 239.024464][ T4455] usb 4-1: USB disconnect, device number 12 [ 239.817923][T10672] loop3: detected capacity change from 0 to 40427 [ 239.876103][T10672] F2FS-fs (loop3): invalid crc value [ 239.884426][T10672] F2FS-fs (loop3): Found nat_bits in checkpoint [ 239.929454][T10672] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 239.956526][T10672] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 240.007976][ T8939] attempt to access beyond end of device [ 240.007976][ T8939] loop3: rw=2049, want=45104, limit=40427 [ 240.103413][T10679] sctp: [Deprecated]: syz.6.1978 (pid 10679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.103413][T10679] Use struct sctp_sack_info instead [ 240.665638][ T5070] Bluetooth: hci7: command 0x1001 tx timeout [ 240.671749][ T4199] Bluetooth: hci7: sending frame failed (-49) [ 240.684642][T10684] loop6: detected capacity change from 0 to 32768 [ 240.777095][T10682] chnl_net:caif_netlink_parms(): no params data found [ 240.825363][T10684] XFS (loop6): Mounting V5 Filesystem [ 240.841500][T10689] loop3: detected capacity change from 0 to 32768 [ 240.899097][T10682] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.907421][T10682] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.918965][T10689] XFS (loop3): Mounting V5 Filesystem [ 240.921638][T10684] XFS (loop6): Ending clean mount [ 240.925207][T10682] device bridge_slave_0 entered promiscuous mode [ 240.938695][T10682] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.946220][T10682] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.972519][T10682] device bridge_slave_1 entered promiscuous mode [ 241.007401][T10682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.021145][T10682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.026468][T10689] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 241.052478][T10682] team0: Port device team_slave_0 added [ 241.064388][T10682] team0: Port device team_slave_1 added [ 241.084722][T10682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.091896][T10682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.120475][T10682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.133071][T10689] XFS (loop3): Starting recovery (logdev: internal) [ 241.138506][T10682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.147292][T10682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.173719][T10682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.217656][T10689] XFS (loop3): Ending recovery (logdev: internal) [ 241.230121][ T6238] XFS (loop6): Unmounting Filesystem [ 241.238381][T10682] device hsr_slave_0 entered promiscuous mode [ 241.250854][T10682] device hsr_slave_1 entered promiscuous mode [ 241.258747][T10682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.285603][T10682] Cannot create hsr debugfs directory [ 241.337593][T10689] XFS (loop3): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8 [ 241.349292][T10689] XFS (loop3): Unmount and run xfs_repair [ 241.393828][ T8939] XFS (loop3): Unmounting Filesystem [ 241.831445][T10721] netlink: 'syz.6.1983': attribute type 5 has an invalid length. [ 242.086853][T10730] loop6: detected capacity change from 0 to 512 [ 242.122150][T10730] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 242.199962][T10730] EXT4-fs (loop6): 1 truncate cleaned up [ 242.210839][T10730] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 242.332646][T10682] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 242.342764][T10682] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 242.350443][ T5070] Bluetooth: hci4: command 0x0406 tx timeout [ 242.369191][T10682] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 242.381228][T10682] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 242.425828][ T5066] Bluetooth: hci9: command 0x0409 tx timeout [ 242.536118][T10682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.554388][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.570395][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.588377][T10682] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.608113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.624707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.635178][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.642350][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.650789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.668551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.677564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.687530][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.694682][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.711926][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.727934][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.739319][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.747652][ T5070] Bluetooth: hci7: command 0x1009 tx timeout [ 242.776815][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.805098][T10682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.816398][T10682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.836111][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.850988][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.861956][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.873988][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.893109][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.904544][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.925549][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.961922][T10758] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1986'. [ 242.967005][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.006530][T10764] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1986'. [ 243.266044][T10778] zram: Cannot change disksize for initialized device [ 243.294719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.330105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.367307][T10682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.427689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.453389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.510015][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.522385][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.550030][T10682] device veth0_vlan entered promiscuous mode [ 243.560150][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.569384][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.593483][T10682] device veth1_vlan entered promiscuous mode [ 243.642244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 243.654821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 243.681184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.685615][ T4455] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 243.706978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.721802][T10682] device veth0_macvtap entered promiscuous mode [ 243.734322][T10774] loop6: detected capacity change from 0 to 32768 [ 243.735064][T10682] device veth1_macvtap entered promiscuous mode [ 243.770537][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.794545][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.805170][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.817255][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.827828][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.838342][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.848428][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.859559][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.866491][T10774] XFS (loop6): Mounting V5 Filesystem [ 243.870417][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.886395][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.896370][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.920523][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.931343][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.951434][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.961379][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.973927][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.999576][T10774] XFS (loop6): Ending clean mount [ 244.005011][T10682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.019950][T10774] XFS (loop6): Quotacheck needed: Please wait. [ 244.029926][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.048572][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.061366][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.072509][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.087182][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.103711][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.129410][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.140264][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.145840][ T4455] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 244.150301][T10774] XFS (loop6): Quotacheck: Done. [ 244.158690][ T4455] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 244.172557][ T4455] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 244.182938][ T4455] usb 4-1: config 8 has no interface number 0 [ 244.189129][ T4455] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 244.192149][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.244975][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.271149][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.282327][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.292511][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.303872][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.313910][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.324385][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.338471][ T6238] XFS (loop6): Unmounting Filesystem [ 244.339509][T10682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.359188][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.378032][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.419596][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.426915][ T4455] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 244.433356][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.437406][ T4455] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.446720][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.453566][ T4455] usb 4-1: Product: syz [ 244.465411][ T4455] usb 4-1: Manufacturer: syz [ 244.470104][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.470592][ T4455] usb 4-1: SerialNumber: syz [ 244.487598][T10682] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.506117][ T5065] Bluetooth: hci9: command 0x041b tx timeout [ 244.519131][T10682] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.529088][T10682] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.541716][T10682] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.735225][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.770590][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.796323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 244.818462][ T4455] usb 4-1: USB disconnect, device number 13 [ 244.866476][ T304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.895612][ T304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.916602][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 244.997101][T10813] loop1: detected capacity change from 0 to 524287998 [ 245.395762][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 246.184675][T10857] loop3: detected capacity change from 0 to 32768 [ 246.250555][T10857] JBD2: Ignoring recovery information on journal [ 246.306702][T10857] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 246.436881][ T8939] ocfs2: Unmounting device (7,3) on (node local) [ 246.727306][T10890] loop3: detected capacity change from 0 to 4096 [ 246.817149][T10890] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 246.861278][T10890] ntfs: volume version 3.1. [ 246.943140][T10890] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp866. You might want to try to use the mount option nls=utf8. [ 247.007537][T10890] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 247.149418][T10907] Context (ID=0x0) not attached to queue pair (handle=0x0:0x2) [ 247.520863][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.561948][ T5065] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 247.806539][T10941] netlink: 984 bytes leftover after parsing attributes in process `syz.8.2025'. [ 247.815781][ T5065] usb 7-1: Using ep0 maxpacket: 16 [ 247.938078][ T5065] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.957673][ T5065] usb 7-1: config 0 interface 0 has no altsetting 0 [ 247.964345][ T5065] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 247.973905][ T5065] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.010194][ T5065] usb 7-1: config 0 descriptor?? [ 248.081053][T10952] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 248.491385][ T5065] mcp2221 0003:04D8:00DD.0019: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 248.512145][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.665141][T10946] chnl_net:caif_netlink_parms(): no params data found [ 248.727566][T10980] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 248.769885][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.907481][T10982] loop3: detected capacity change from 0 to 4096 [ 248.923694][ T5567] usb 7-1: USB disconnect, device number 12 [ 248.948171][T10982] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 248.948171][T10982] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 248.948171][T10982] [ 248.971473][T10982] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 248.998213][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.014351][T10946] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.022064][T10946] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.031745][T10982] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000026d9bdcd,init_itable=0x0000000000000007,noacl,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,delalloc,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 249.063843][T10946] device bridge_slave_0 entered promiscuous mode [ 249.073079][T10946] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.080379][T10946] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.088617][T10946] device bridge_slave_1 entered promiscuous mode [ 249.114675][T10946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.126802][T10946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.150193][ T26] audit: type=1800 audit(1787620029.062:57): pid=10982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2034" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 249.182373][T10946] team0: Port device team_slave_0 added [ 249.191140][T10982] fs-verity (loop3, inode 15): fs-verity keyring is empty, rejecting signed file! [ 249.191717][T10946] team0: Port device team_slave_1 added [ 249.289007][T10946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.296808][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.339291][T10946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.359425][T10946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.387028][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.417496][T10946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.486077][T10946] device hsr_slave_0 entered promiscuous mode [ 249.518906][T10946] device hsr_slave_1 entered promiscuous mode [ 249.525735][ T5061] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 249.534080][T10946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.542026][T10946] Cannot create hsr debugfs directory [ 249.655695][ T5065] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 249.774077][ T5061] usb 9-1: Using ep0 maxpacket: 16 [ 249.831234][T10946] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.902396][ T5061] usb 9-1: config 4 has an invalid interface number: 51 but max is 0 [ 249.910712][ T5065] usb 4-1: Using ep0 maxpacket: 32 [ 249.924900][ T5061] usb 9-1: config 4 has no interface number 0 [ 249.934166][T10946] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.934177][ T5061] usb 9-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 249.934203][ T5061] usb 9-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 249.975933][ T5061] usb 9-1: config 4 interface 51 has no altsetting 0 [ 250.026001][ T5060] Bluetooth: hci7: command 0x0409 tx timeout [ 250.055941][ T5065] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.075552][ T5065] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 250.077218][T10946] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.095636][ T5065] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.145809][ T5061] usb 9-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 250.171210][ T5061] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.184039][ T5061] usb 9-1: Product: syz [ 250.196814][ T5061] usb 9-1: Manufacturer: syz [ 250.201566][ T5061] usb 9-1: SerialNumber: syz [ 250.236403][T10995] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 250.250315][T10995] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 250.263829][T10946] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.276669][ T5065] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 250.286146][ T5065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.294156][ T5065] usb 4-1: Product: syz [ 250.301713][ T5065] usb 4-1: Manufacturer: syz [ 250.306663][ T5065] usb 4-1: SerialNumber: syz [ 250.321827][ T5065] usb 4-1: config 0 descriptor?? [ 250.367657][ T5065] usb 4-1: no audio or video endpoints found [ 250.459769][T10946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 250.488687][T10946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 250.510707][T10946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 250.529219][T10946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 250.558268][ T5061] cdc_eem: probe of 9-1:4.51 failed with error -71 [ 250.602491][ T5061] usb 9-1: USB disconnect, device number 15 [ 250.618430][ T4232] usb 4-1: USB disconnect, device number 14 [ 250.763485][T10946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.780884][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.796020][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.808344][T10946] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.845127][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.865204][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.877644][ T1527] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.884745][ T1527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.909827][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.926962][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.945879][ T1527] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.953049][ T1527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.972842][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.012963][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.046731][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.058668][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.073044][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.083264][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.092631][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.112938][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.122968][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.189553][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.220957][T11062] rnbd_client L125: Can't parse path ip:1: -22 [ 251.270252][T10946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.306699][T10946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.349223][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.374679][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.513974][ T26] audit: type=1800 audit(1787620031.422:58): pid=11077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2043" name="addr_trsvcid" dev="configfs" ino=57582 res=0 errno=0 [ 251.867193][T11094] loop8: detected capacity change from 0 to 512 [ 251.885288][T10946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.963984][ T144] device hsr_slave_0 left promiscuous mode [ 251.980098][T11099] loop3: detected capacity change from 0 to 4096 [ 251.996132][T11094] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 252.016132][T11094] ext4 filesystem being mounted at /232/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.027711][ T144] device hsr_slave_1 left promiscuous mode [ 252.040483][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.055122][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.105796][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.113308][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.125103][ T5070] Bluetooth: hci7: command 0x041b tx timeout [ 252.149438][T11099] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 252.180506][ T144] device bridge_slave_1 left promiscuous mode [ 252.187206][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.206615][ T144] device bridge_slave_0 left promiscuous mode [ 252.212882][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.237821][ T144] device veth1_macvtap left promiscuous mode [ 252.243899][ T144] device veth0_macvtap left promiscuous mode [ 252.262994][ T144] device veth1_vlan left promiscuous mode [ 252.269312][ T144] device veth0_vlan left promiscuous mode [ 252.313263][ T8939] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 252.622010][ T144] team0 (unregistering): Port device team_slave_1 removed [ 252.638716][ T144] team0 (unregistering): Port device team_slave_0 removed [ 252.652620][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.670527][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.753769][ T144] bond0 (unregistering): Released all slaves [ 252.816625][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.824196][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.886492][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.907013][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.985825][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.996982][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.039189][T10946] device veth0_vlan entered promiscuous mode [ 253.066667][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.092626][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.137313][T10946] device veth1_vlan entered promiscuous mode [ 253.253998][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 253.333269][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 253.348832][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.369830][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.422536][T10946] device veth0_macvtap entered promiscuous mode [ 253.555838][T10946] device veth1_macvtap entered promiscuous mode [ 253.645139][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.678326][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.730081][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.766733][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.797255][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.832775][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.869323][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.912844][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.975196][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.009130][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.085416][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.116840][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.148659][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.181240][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.191515][ T5065] Bluetooth: hci7: command 0x040f tx timeout [ 254.205825][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.235584][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.259143][T10946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.283595][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 254.299806][T11146] loop3: detected capacity change from 0 to 32768 [ 254.303985][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 254.319058][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.336696][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.360387][T11146] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2065 (11146) [ 254.380601][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.391550][ T4454] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 254.399858][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.421897][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.436697][T11146] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 254.443446][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.445365][T11146] BTRFS info (device loop3): enabling auto defrag [ 254.470264][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.491277][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.517374][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.526881][T11146] BTRFS info (device loop3): max_inline at 4096 [ 254.536031][T11146] BTRFS info (device loop3): using free space tree [ 254.542580][T11146] BTRFS info (device loop3): has skinny extents [ 254.558540][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.595516][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.626564][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.655319][T11146] BTRFS info (device loop3): enabling ssd optimizations [ 254.663072][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.696054][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.756304][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.775609][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.785719][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.786304][ T4454] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.796635][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.818988][T10946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.830489][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.844346][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.875637][ T4454] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.970913][T10946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.996268][T10946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.025495][T10946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.034232][T10946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.075826][ T4454] usb 7-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 255.095148][ T4454] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.120923][T11197] netlink: 'syz.8.2077': attribute type 39 has an invalid length. [ 255.135714][ T4454] usb 7-1: Product: syz [ 255.139921][ T4454] usb 7-1: Manufacturer: syz [ 255.167049][ T4454] usb 7-1: SerialNumber: syz [ 255.269483][ T4454] usb 7-1: Found UVC 1.00 device syz (046d:0821) [ 255.280550][ T4454] usb 7-1: No streaming interface found for terminal 2. [ 255.301394][ T4454] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input32 [ 255.546140][ T5070] Bluetooth: hci9: command 0x0409 tx timeout [ 255.630320][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.636978][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.916708][ T4456] usb 7-1: USB disconnect, device number 13 [ 256.276983][ T4232] Bluetooth: hci7: command 0x0419 tx timeout [ 256.389480][T11140] chnl_net:caif_netlink_parms(): no params data found [ 256.433176][T11227] xt_connbytes: Forcing CT accounting to be enabled [ 256.483952][T11231] loop3: detected capacity change from 0 to 256 [ 256.490228][T11232] loop8: detected capacity change from 0 to 128 [ 256.491075][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.515616][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.550600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 256.579419][T11231] exfat: Deprecated parameter 'utf8' [ 256.607931][T11232] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 256.625693][T11231] exfat: Deprecated parameter 'utf8' [ 256.630989][T11232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.650431][ T304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.683074][ T304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.700194][T11231] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 256.767047][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 256.837239][T11140] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.852764][T11140] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.880188][T11140] device bridge_slave_0 entered promiscuous mode [ 256.933093][T11140] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.971589][T11140] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.020137][T11140] device bridge_slave_1 entered promiscuous mode [ 257.084077][T11252] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 257.165852][T11252] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.174290][T11252] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.290311][T11140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.386898][T11140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.567638][T11140] team0: Port device team_slave_0 added [ 257.578095][T11280] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2093'. [ 257.617837][T11140] team0: Port device team_slave_1 added [ 257.626037][ T5065] Bluetooth: hci9: command 0x041b tx timeout [ 257.730601][T11140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.755644][ T5060] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 257.773415][T11140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.847525][T11140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.879436][T11140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.904901][T11140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.951657][T11140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.055707][ T5060] usb 9-1: Using ep0 maxpacket: 8 [ 258.112017][T11303] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2097'. [ 258.203975][T11140] device hsr_slave_0 entered promiscuous mode [ 258.258110][T11140] device hsr_slave_1 entered promiscuous mode [ 258.318026][T11140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.335783][ T5060] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 258.366038][T11140] Cannot create hsr debugfs directory [ 258.375726][ T5060] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 258.402965][ T5060] usb 9-1: Product: syz [ 258.421066][ T5060] usb 9-1: Manufacturer: syz [ 258.445559][ T5060] usb 9-1: SerialNumber: syz [ 258.461083][ T5060] usb 9-1: config 0 descriptor?? [ 258.513320][ T5060] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 258.765598][ T5060] gspca_zc3xx: reg_w_i err -71 [ 258.770551][ T5060] gspca_zc3xx: probe of 9-1:0.0 failed with error -71 [ 258.811300][ T5060] usb 9-1: USB disconnect, device number 16 [ 258.819311][T11328] loop1: detected capacity change from 0 to 1024 [ 258.927023][T11328] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 258.996661][T11328] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 259.102948][T11328] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc=0x0000000000000007,noblock_validity,delalloc,quota,errors=remount-ro,nomblk_io_submit,dioread_nolock,mb_optimize_scan=0x0000000000000000,. Quota mode: writeback. [ 259.143751][T11328] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.287306][T11328] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2103: bg 0: block 112: padding at end of block bitmap is not set [ 259.430913][T11358] loop3: detected capacity change from 0 to 16 [ 259.440376][T11328] EXT4-fs (loop1): Remounting filesystem read-only [ 259.607850][T11367] loop8: detected capacity change from 0 to 256 [ 259.617867][T11358] erofs: (device loop3): mounted with root inode @ nid 36. [ 259.671534][T11367] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.706379][ T5070] Bluetooth: hci9: command 0x040f tx timeout [ 259.715945][T11367] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 259.772698][T11367] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 259.818786][ T4199] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 259.863234][ T26] audit: type=1800 audit(1787620039.772:59): pid=11367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2116" name="bus" dev="loop8" ino=1048680 res=0 errno=0 [ 259.951482][T11358] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 260.013736][ T26] audit: type=1800 audit(1787620039.922:60): pid=11358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2113" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 260.366837][T11140] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 260.411669][T11140] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 260.457253][T11140] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 260.504554][T11140] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 260.579626][T11399] kAFS: bad VL server IP address [ 260.763453][T11140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.775383][T11410] loop6: detected capacity change from 0 to 16 [ 260.842791][T11410] erofs: (device loop6): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 260.885107][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.895807][T11410] erofs: (device loop6): mounted with root inode @ nid 36. [ 260.906793][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.950881][T11140] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.994545][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.013562][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.072528][T11107] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.079683][T11107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.196337][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.231052][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.258213][T11428] loop3: detected capacity change from 0 to 64 [ 261.281860][T11430] loop8: detected capacity change from 0 to 256 [ 261.300401][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.333030][T11107] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.340214][T11107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.416193][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.461037][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.500836][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.543520][T11441] loop6: detected capacity change from 0 to 256 [ 261.548062][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.589124][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.630866][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.656610][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.683255][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.692297][T11441] exfat: Deprecated parameter 'utf8' [ 261.711438][T11441] exfat: Deprecated parameter 'utf8' [ 261.765226][T11441] exfat: Deprecated parameter 'utf8' [ 261.785054][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.798275][ T5070] Bluetooth: hci9: command 0x0419 tx timeout [ 261.813985][T11441] exfat: Deprecated parameter 'namecase' [ 261.847350][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.857333][T11441] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 261.898338][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.217788][T11468] loop6: detected capacity change from 0 to 128 [ 262.356566][ T4273] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 262.414268][T11140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.459055][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.469968][ T4453] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 262.478576][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.655763][ T4273] usb 4-1: Using ep0 maxpacket: 16 [ 262.796155][ T4273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 262.906076][ T4453] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 262.915674][ T4453] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 262.942053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.966150][ T4453] usb 2-1: config 150 has no interface number 0 [ 262.977252][ T4453] usb 2-1: config 150 interface 204 has no altsetting 0 [ 262.995322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.010904][ T4273] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 263.025186][ T4273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.057303][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.065377][ T4273] usb 4-1: Product: syz [ 263.075508][ T4273] usb 4-1: Manufacturer: syz [ 263.080328][ T4273] usb 4-1: SerialNumber: syz [ 263.100041][ T4273] usb 4-1: config 0 descriptor?? [ 263.104777][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.174160][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.185943][ T4453] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 263.196605][ T4273] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 263.209906][T11507] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 263.212842][ T4453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.229157][T11107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.259386][T11140] device veth0_vlan entered promiscuous mode [ 263.272219][T11140] device veth1_vlan entered promiscuous mode [ 263.278806][ T4453] usb 2-1: Product: syz [ 263.283184][ T4453] usb 2-1: Manufacturer: syz [ 263.288137][ T4453] usb 2-1: SerialNumber: syz [ 263.319519][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.346716][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 263.373567][ T4232] usb 4-1: USB disconnect, device number 15 [ 263.375741][ T154] usb 4-1: Failed to submit usb control message: -71 [ 263.413212][ T154] usb 4-1: unable to send the bmi data to the device: -71 [ 263.426442][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.454779][ T154] usb 4-1: unable to get target info from device [ 263.462564][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.481247][ T154] usb 4-1: could not get target info (-71) [ 263.495076][ T154] usb 4-1: could not probe fw (-71) [ 263.502327][T11140] device veth0_macvtap entered promiscuous mode [ 263.533508][T11140] device veth1_macvtap entered promiscuous mode [ 263.596881][ T4453] xr_serial 2-1:150.204: skipping garbage [ 263.607147][ T4453] xr_serial 2-1:150.204: xr_serial converter detected [ 263.646126][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.691948][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.703869][T11525] block2mtd: illegal erase size [ 263.726235][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.742501][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.763029][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.790335][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.805722][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.820468][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.840660][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.858998][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.895096][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.940713][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.976892][T11536] loop8: detected capacity change from 0 to 512 [ 263.993555][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.009551][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.018319][T11538] loop3: detected capacity change from 0 to 8 [ 264.027574][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.042196][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.052248][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.064139][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.079503][T11140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.139981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.162410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.177044][T11536] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.185110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.197108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.209024][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.262900][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.281541][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.287547][T11542] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 67: padding at end of block bitmap is not set [ 264.292626][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.317428][T11536] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #12: comm syz.8.2162: corrupted xattr block 8 [ 264.317819][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.339944][ T4453] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 264.347266][ T4453] xr_serial: probe of ttyUSB0 failed with error -71 [ 264.356701][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.370241][ T4453] usb 2-1: USB disconnect, device number 9 [ 264.376347][T11536] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 264.393707][ T4453] xr_serial 2-1:150.204: device disconnected [ 264.401021][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.454568][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.477460][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.491129][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.501728][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.512875][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.523806][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.534665][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.545394][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.562644][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.574667][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.587193][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.599162][T11140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.612693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.631059][ T7434] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2925: inode #12: comm syz-executor: corrupted xattr block 8 [ 264.632566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.669348][T11140] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.679501][ T7434] EXT4-fs warning (device loop8): ext4_evict_inode:304: xattr delete (err -117) [ 264.715533][T11140] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.724268][T11140] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.725608][ T5060] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 264.743294][T11140] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.903765][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.922509][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.985418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.026088][ T304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.058106][ T304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.082357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 265.089864][T11546] loop3: detected capacity change from 0 to 32768 [ 265.115806][ T5060] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 265.124886][ T5060] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.318550][T11546] XFS (loop3): Mounting V5 Filesystem [ 265.505145][T11546] XFS (loop3): Ending clean mount [ 265.593322][ T8939] XFS (loop3): Unmounting Filesystem [ 265.717161][ T5060] input: HID 04d8:c002 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:04D8:C002.001A/input/input33 [ 265.875890][ T5060] rc_core: IR keymap rc-rc6-mce not found [ 265.881822][ T5060] Registered IR keymap rc-empty [ 265.903055][ T5060] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:04D8:C002.001A/rc/rc0 [ 265.929926][T11559] loop8: detected capacity change from 0 to 32768 [ 265.951370][ T5060] input: HID 04d8:c002 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:04D8:C002.001A/rc/rc0/input34 [ 266.140513][T11587] loop5: detected capacity change from 0 to 32768 [ 266.229836][ T5060] hid-picolcd 0003:04D8:C002.001A: Unexpected FLASH access reports, please submit rdesc for review [ 266.258170][ T26] audit: type=1800 audit(1787620046.172:61): pid=11587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2177" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 266.360655][T11559] XFS (loop8): Mounting V5 Filesystem [ 266.433737][T11606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2179'. [ 266.636763][T11559] XFS (loop8): Ending clean mount [ 266.657543][T11606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2179'. [ 266.911158][ T5567] usb 7-1: USB disconnect, device number 14 [ 266.915566][ C1] hid-picolcd 0003:04D8:C002.001A: usb_submit_urb(ctrl) failed: -19 [ 266.986188][ T7434] XFS (loop8): Unmounting Filesystem [ 267.185051][T11630] loop5: detected capacity change from 0 to 1024 [ 267.237697][T11632] loop3: detected capacity change from 0 to 256 [ 267.261944][T11630] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 267.318403][T11632] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 267.414682][T11630] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 267.449377][T11630] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 267.955648][ T5567] Bluetooth: hci5: command 0x0406 tx timeout [ 268.042484][ T26] audit: type=1326 audit(1787620047.952:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.3.2195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc94919e0d9 code=0x0 [ 268.226215][T11666] i2c i2c-0: delete_device: Can't find device in list [ 268.293592][T11671] netlink: 'syz.6.2208': attribute type 1 has an invalid length. [ 268.346187][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2208'. [ 268.404629][T11671] netlink: 'syz.6.2208': attribute type 1 has an invalid length. [ 268.437926][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2208'. [ 268.507118][T11671] iwpm_send_hello: Unable to send a nlmsg [ 268.594144][T11688] netlink: 209832 bytes leftover after parsing attributes in process `syz.5.2202'. [ 268.642775][T11690] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2214'. [ 268.731663][T11695] kAFS: bad VL server IP address [ 269.196356][T11714] loop5: detected capacity change from 0 to 2048 [ 269.272326][T11719] loop8: detected capacity change from 0 to 4096 [ 269.348828][T11714] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,errors=remount-ro,max_dir_size_kb=0x0000000000000004,grpjquota=,. Quota mode: none. [ 269.412408][T11719] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 269.565852][T11739] EXT4-fs error (device loop8): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.8.2215: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 269.691682][T11739] EXT4-fs error (device loop8): ext4_get_first_dir_block:3619: inode #12: comm syz.8.2215: directory missing '..' [ 269.699303][T11703] loop1: detected capacity change from 0 to 32768 [ 269.782571][T11719] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.2215: corrupted inode contents [ 269.850106][T11744] EXT4-fs error (device loop8): ext4_empty_dir:3154: inode #12: block 80: comm syz.8.2215: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 269.855706][T11719] EXT4-fs error (device loop8): ext4_dirty_inode:6077: inode #15: comm syz.8.2215: mark_inode_dirty error [ 269.953540][T11763] loop5: detected capacity change from 0 to 8 [ 269.979643][T11719] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.2215: corrupted inode contents [ 269.994805][T11703] XFS (loop1): Mounting V5 Filesystem [ 270.057543][T11744] EXT4-fs warning (device loop8): ext4_empty_dir:3156: inode #12: comm syz.8.2215: directory missing '..' [ 270.080539][ T5567] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 270.122741][T11767] rdma_rxe: rxe_register_device failed with error -23 [ 270.130904][T11767] rdma_rxe: failed to add syz_tun [ 270.158222][T11763] unable to read fragment index table [ 270.173241][T11703] XFS (loop1): Ending clean mount [ 270.195536][T11719] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #15: comm syz.8.2215: mark_inode_dirty error [ 270.217034][T11719] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.2215: corrupted inode contents [ 270.238908][T11719] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #15: comm syz.8.2215: mark_inode_dirty error [ 270.263167][T11763] Error parsing options; rc = [-22] [ 270.263906][T11719] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.2215: corrupted inode contents [ 270.309557][T11763] loop5: detected capacity change from 0 to 512 [ 270.364551][T10946] XFS (loop1): Unmounting Filesystem [ 270.365545][ T5567] usb 4-1: Using ep0 maxpacket: 32 [ 270.391907][T11763] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 270.416622][T11763] EXT4-fs (loop5): mount failed [ 270.525934][ T5567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.550428][ T5567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.597578][ T5567] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 270.627318][ T5567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.629027][ T5567] usb 4-1: config 0 descriptor?? [ 270.679832][ T5567] hub 4-1:0.0: USB hub found [ 270.895884][ T5567] hub 4-1:0.0: 1 port detected [ 270.916934][T11795] loop5: detected capacity change from 0 to 256 [ 271.022488][T11795] exfat: Deprecated parameter 'utf8' [ 271.099572][T11795] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 271.403895][ T5567] usb 4-1: USB disconnect, device number 16 [ 271.820465][T11839] netlink: 'syz.6.2248': attribute type 2 has an invalid length. [ 271.862173][T11839] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2248'. [ 272.125655][ T5070] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 272.495852][ T5070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.517375][ T5070] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.554667][T11880] loop8: detected capacity change from 0 to 16 [ 272.585966][ T5070] usb 2-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 272.615729][ T5070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.657374][ T5070] usb 2-1: config 0 descriptor?? [ 272.674510][T11880] erofs: (device loop8): mounted with root inode @ nid 36. [ 272.727848][T11880] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 272.809775][ T5567] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 272.850717][T11847] loop3: detected capacity change from 0 to 40427 [ 272.884422][T11847] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 272.923341][T11847] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 272.991098][T11847] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 273.065860][ T5061] Bluetooth: hci0: command 0x0406 tx timeout [ 273.095671][T11847] F2FS-fs (loop3): Found nat_bits in checkpoint [ 273.146767][ T5070] ortek 0003:05A4:8003.001B: item fetching failed at offset 4/6 [ 273.176475][ T5070] ortek: probe of 0003:05A4:8003.001B failed with error -22 [ 273.226048][ T5567] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.247246][T11847] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 273.254362][T11847] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 273.298178][ T5567] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 273.346022][ T5567] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.382431][ T5070] usb 2-1: USB disconnect, device number 10 [ 273.399528][ T5567] usb 7-1: config 0 descriptor?? [ 273.446004][T11847] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 273.776053][ T5567] usbhid 7-1:0.0: can't add hid device: -71 [ 273.795513][ T5567] usbhid: probe of 7-1:0.0 failed with error -71 [ 273.828610][ T5567] usb 7-1: USB disconnect, device number 15 [ 273.933557][T11916] loop5: detected capacity change from 0 to 32768 [ 274.118362][T11942] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 274.298555][ T5060] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 274.305644][ T5567] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 274.325788][T11951] loop3: detected capacity change from 0 to 64 [ 274.715866][ T5060] usb 9-1: unable to get BOS descriptor or descriptor too short [ 274.725679][ T5567] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.746165][ T5567] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 274.755287][ T5567] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.758391][T11973] loop3: detected capacity change from 0 to 8 [ 274.805807][ T5060] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.806635][ T5567] usb 7-1: config 0 descriptor?? [ 274.848085][ T5060] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.863596][T11976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2285'. [ 275.045875][ T5060] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 275.068450][ T5060] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.105302][ T5060] usb 9-1: Product: syz [ 275.110211][ T5060] usb 9-1: Manufacturer: syz [ 275.114875][ T5060] usb 9-1: SerialNumber: syz [ 275.168250][ T5060] usb 9-1: selecting invalid altsetting 1 [ 275.174429][ T5060] usb 9-1: unit 6 not found! [ 275.197991][T11995] loop3: detected capacity change from 0 to 512 [ 275.224202][T11997] block2mtd: illegal erase size [ 275.288421][T11995] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.2292: iget: bad i_size value: 38620345925642 [ 275.301839][T11995] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.2292: couldn't read orphan inode 15 (err -117) [ 275.325174][T11995] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 275.325762][ T5567] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 275.345773][ T4448] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 275.368345][ T5567] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input35 [ 275.398941][ T5567] usb 7-1: USB disconnect, device number 16 [ 275.405500][ C0] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 275.439485][ T26] audit: type=1800 audit(1787620055.352:63): pid=11995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2292" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 275.736048][ T4448] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.747274][ T4454] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 275.775671][ T4448] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.787467][ T4448] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 275.798081][ T4448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.808224][ T4448] usb 6-1: config 0 descriptor?? [ 275.945756][ T5061] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 276.055791][ T5060] usb 9-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 276.090512][ T5060] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 276.112345][ T5060] usb 9-1: USB disconnect, device number 17 [ 276.152903][ T4454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.172991][ T4454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.183403][ T4454] usb 2-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 276.203729][ T4454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.225759][ T4454] usb 2-1: config 0 descriptor?? [ 276.277575][ T4448] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0 [ 276.286866][ T4448] arvo 0003:1E7D:30D4.001C: unknown main item tag 0xe [ 276.293701][ T4448] arvo 0003:1E7D:30D4.001C: bogus close delimiter [ 276.306020][ T4448] arvo 0003:1E7D:30D4.001C: item 0 0 2 10 parsing failed [ 276.313867][ T4448] arvo 0003:1E7D:30D4.001C: parse failed [ 276.320055][ T4448] arvo: probe of 0003:1E7D:30D4.001C failed with error -22 [ 276.323560][ T5061] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 276.339319][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.381817][ T5061] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 276.402007][ T5061] usb 4-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 276.413479][ T5061] usb 4-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 276.505750][ T5061] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 276.508379][ T4448] usb 6-1: USB disconnect, device number 7 [ 276.525592][ T5061] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 276.545592][ T5061] usb 4-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 276.567934][ T5061] usb 4-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 276.721152][ T4454] wacom 0003:056A:030C.001D: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.1-1/input0 [ 276.952430][ T4454] usb 2-1: USB disconnect, device number 11 [ 277.183678][T12063] ima: Unable to open file: /e (-2) [ 277.183965][T12062] ima: policy update failed [ 277.225962][ T26] audit: type=1802 audit(1787620057.142:64): pid=12062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2300" res=0 errno=0 [ 277.341287][T12068] loop5: detected capacity change from 0 to 64 [ 277.462777][T12056] loop6: detected capacity change from 0 to 131072 [ 277.474327][ T5061] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 277.483936][ T5061] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.492074][ T5061] usb 4-1: Product: syz [ 277.496303][ T5061] usb 4-1: Manufacturer: syz [ 277.500916][ T5061] usb 4-1: SerialNumber: syz [ 277.531446][T12056] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 277.538296][T12056] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 277.559133][T12056] F2FS-fs (loop6): invalid crc value [ 277.566767][ T5061] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 277.591088][ T5061] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 277.610691][ T5061] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 277.625723][ T5060] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 277.639573][T12056] F2FS-fs (loop6): Found nat_bits in checkpoint [ 277.736236][T12056] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 277.743316][T12056] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 277.854136][T12015] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 277.890344][ T4448] usb 4-1: USB disconnect, device number 17 [ 277.895578][ T5060] usb 9-1: Using ep0 maxpacket: 8 [ 277.928261][ T4448] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 277.965494][ T4448] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 278.010786][ T4448] ti_usb_3410_5052 4-1:2.0: device disconnected [ 278.015712][ T5060] usb 9-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 278.063664][ T5060] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.075258][ T5060] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 278.093319][ T5060] usb 9-1: config 0 interface 0 has no altsetting 0 [ 278.110728][ T5060] usb 9-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 278.151151][ T5060] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.196494][ T5060] usb 9-1: config 0 descriptor?? [ 278.325680][ T5061] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 278.565761][ T5061] usb 6-1: Using ep0 maxpacket: 16 [ 278.690006][ T5061] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 278.871414][ T5061] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 278.894559][ T5061] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.903353][ T5060] hid-alps 0003:044E:120C.001E: failed to read command (-71) [ 278.915338][ T5060] hid-alps 0003:044E:120C.001E: failed T4_PRM_ID_CONFIG_3 (-71) [ 278.923835][ T5061] usb 6-1: Product: syz [ 278.928866][ T5061] usb 6-1: Manufacturer: syz [ 278.933595][ T5061] usb 6-1: SerialNumber: syz [ 278.942830][ T5061] r8152-cfgselector 6-1: config 0 descriptor?? [ 278.950772][ T5060] hid-alps 0003:044E:120C.001E: hidraw0: USB HID v0.00 Joystick [HID 044e:120c] on usb-dummy_hcd.8-1/input0 [ 278.979687][ T5060] usb 9-1: USB disconnect, device number 18 [ 279.034871][T12120] fido_id[12120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 279.225987][ T5061] r8152-cfgselector 6-1: Unknown version 0x0000 [ 279.388717][T12117] loop6: detected capacity change from 0 to 32768 [ 279.485802][ T5061] r8152-cfgselector 6-1: Unknown version 0x0000 [ 279.499271][ T5061] r8152-cfgselector 6-1: USB disconnect, device number 8 [ 279.923119][T12163] loop6: detected capacity change from 0 to 1024 [ 280.141536][T12176] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2325'. [ 280.475204][T12198] loop8: detected capacity change from 0 to 256 [ 280.481802][T12196] loop5: detected capacity change from 0 to 512 [ 280.539131][T12193] loop3: detected capacity change from 0 to 4096 [ 280.547662][T12198] exfat: Deprecated parameter 'utf8' [ 280.553095][T12198] exfat: Deprecated parameter 'namecase' [ 280.571919][T12196] EXT4-fs (loop5): Ignoring removed bh option [ 280.591783][T12193] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 280.624041][T12198] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 280.637575][T12196] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 280.763704][T12196] EXT4-fs (loop5): 1 truncate cleaned up [ 280.769594][ T5061] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 280.778213][T12196] EXT4-fs (loop5): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 280.856493][ T26] audit: type=1800 audit(1787620060.772:65): pid=12196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2333" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 281.155936][ T5061] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 281.187370][ T5061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.198374][T12213] loop6: detected capacity change from 0 to 8192 [ 281.243674][ T5061] usb 2-1: config 0 descriptor?? [ 281.296734][ T5061] cp210x 2-1:0.0: cp210x converter detected [ 281.342653][T12213] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.655554][ T5070] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 281.698365][T12248] loop3: detected capacity change from 0 to 256 [ 281.735630][ T5061] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 281.765692][ T4454] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 281.779004][ T5061] usb 2-1: cp210x converter now attached to ttyUSB0 [ 281.989755][T12260] loop3: detected capacity change from 0 to 8 [ 282.007349][ T4231] usb 2-1: USB disconnect, device number 12 [ 282.033953][ T4231] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 282.042430][ T5070] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 282.063949][T12260] SQUASHFS error: Unable to read inode 0x11f [ 282.085135][ T5070] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 52272, setting to 64 [ 282.126064][ T4231] cp210x 2-1:0.0: device disconnected [ 282.133508][ T5070] usb 7-1: config 0 interface 0 has no altsetting 0 [ 282.186016][ T4454] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 282.218235][ T4454] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 282.230008][T12266] 9p: Unknown uid 18446744073709551615 [ 282.255761][ T5070] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 282.260112][ T4454] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.264849][ T5070] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 282.355917][ T5070] usb 7-1: SerialNumber: syz [ 282.387983][ T5070] usb 7-1: config 0 descriptor?? [ 282.405923][T12213] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 282.515706][ T4454] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 282.535177][ T4454] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 282.565801][ T4454] usb 9-1: Product: syz [ 282.574559][ T4454] usb 9-1: Manufacturer: syz [ 282.594907][ T4454] usb 9-1: SerialNumber: syz [ 282.661552][T12213] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 282.671615][T12285] ieee802154 phy0 wpan0: encryption failed: -22 [ 282.698556][ T5070] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input40 [ 282.851635][T12296] loop1: detected capacity change from 0 to 64 [ 282.887565][ T4454] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 283.008342][ T4454] usb 7-1: USB disconnect, device number 17 [ 283.091628][T12307] loop3: detected capacity change from 0 to 256 [ 283.118911][ T5567] usb 9-1: USB disconnect, device number 19 [ 283.129803][ T5567] usblp0: removed [ 283.331316][ T5060] Bluetooth: hci6: command 0x0406 tx timeout [ 283.655540][ T5070] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 283.905683][ T5070] usb 4-1: Using ep0 maxpacket: 8 [ 284.066083][ T5060] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 284.136801][T12352] EXT4-fs (loop6): Test dummy encryption mode enabled [ 284.168914][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2375'. [ 284.188890][ T5070] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 284.200688][ T5070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.209290][ T5070] usb 4-1: Product: syz [ 284.210434][T12352] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.2373: inode has both inline data and extents flags [ 284.213466][ T5070] usb 4-1: Manufacturer: syz [ 284.232804][ T5070] usb 4-1: SerialNumber: syz [ 284.241550][ T5070] usb 4-1: config 0 descriptor?? [ 284.276117][T12352] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.2373: couldn't read orphan inode 15 (err -117) [ 284.300762][T12352] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 284.314135][ T5070] gspca_main: se401-2.14.0 probing 047d:5003 [ 284.428109][T12365] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 284.442010][T12327] set_capacity_and_notify: 2 callbacks suppressed [ 284.442024][T12327] loop5: detected capacity change from 0 to 32768 [ 284.480007][ T5060] usb 9-1: config index 0 descriptor too short (expected 64998, got 72) [ 284.488966][T12365] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 284.499934][T12365] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2376: Corrupt directory, running e2fsck is recommended [ 284.527891][T12365] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 284.577267][T12365] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.2376: corrupted in-inode xattr [ 284.643345][T12365] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.2376: couldn't read orphan inode 15 (err -117) [ 284.665948][ T5060] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 284.686250][ T5060] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.694284][ T5060] usb 9-1: Product: syz [ 284.719110][ T5060] usb 9-1: Manufacturer: syz [ 284.725681][ T5070] gspca_se401: ExtraFeatures: 64 [ 284.731119][T12365] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.sb=0x0000000000000001,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 284.741107][ T5060] usb 9-1: SerialNumber: syz [ 284.817011][T12375] loop5: detected capacity change from 0 to 2048 [ 284.906141][T12365] EXT4-fs (loop1): shut down requested (1) [ 284.915076][T12375] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 284.937118][ T5070] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input41 [ 284.955998][T12375] UDF-fs: Scanning with blocksize 512 failed [ 285.000413][T12375] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.012165][ T5070] usb 4-1: USB disconnect, device number 18 [ 285.199906][T12383] device erspan0 entered promiscuous mode [ 285.425972][ T5060] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 285.497911][T12371] loop6: detected capacity change from 0 to 40427 [ 285.510411][T12393] loop5: detected capacity change from 0 to 4096 [ 285.524096][T12393] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 285.645097][T12371] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x1ffff [ 285.666089][T12371] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0xe4 [ 285.745702][T12371] F2FS-fs (loop6): invalid crc value [ 285.791701][T12371] F2FS-fs (loop6): Found nat_bits in checkpoint [ 285.922486][T12371] F2FS-fs (loop6) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 286.010876][ T4454] kernel read not supported for file /dsp (pid: 4454 comm: kworker/0:15) [ 286.046419][T12371] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 286.085251][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2388'. [ 286.184391][T12418] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2389'. [ 286.214342][T12371] F2FS-fs (loop6) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 286.438873][ T4262] usb 9-1: USB disconnect, device number 20 [ 286.443892][T12430] loop5: detected capacity change from 0 to 512 [ 286.528603][T12430] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 286.541823][T12430] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 286.856648][ T4453] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 287.065707][ T5060] usb 9-1: Service connection timeout for: 257 [ 287.071916][ T5060] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 287.104505][ T5060] ath9k_htc: Failed to initialize the device [ 287.105532][ T4448] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 287.114474][ T4262] usb 9-1: ath9k_htc: USB layer deinitialized [ 287.118749][ T4453] usb 6-1: Using ep0 maxpacket: 8 [ 287.222020][T12468] loop8: detected capacity change from 0 to 4096 [ 287.285920][ T4453] usb 6-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 287.310412][ T4453] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.386531][T12477] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.525915][ T4453] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 287.541418][ T4453] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.570096][ T4453] usb 6-1: Product: syz [ 287.574348][ T4453] usb 6-1: Manufacturer: syz [ 287.593669][ T4448] usb 2-1: unable to get BOS descriptor or descriptor too short [ 287.636344][ T4453] usb 6-1: SerialNumber: syz [ 287.706831][ T4448] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.763015][ T4448] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 287.793960][T12483] loop6: detected capacity change from 0 to 4096 [ 287.800649][ T4448] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 287.833895][ T4448] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 287.885837][ T4448] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 287.913060][ T4448] usb 2-1: config 1 interface 1 has no altsetting 0 [ 287.939065][T12483] NILFS (loop6): invalid segment: Checksum error in segment payload [ 287.948670][T12483] NILFS (loop6): trying rollback from an earlier position [ 288.024092][T12483] NILFS (loop6): recovery complete [ 288.038014][ T4453] usb 6-1: USB disconnect, device number 9 [ 288.083543][T12500] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 288.195921][ T4448] usb 2-1: string descriptor 0 read error: -22 [ 288.202246][ T4448] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 288.230914][T12479] loop3: detected capacity change from 0 to 32768 [ 288.245522][ T4448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.292608][T12505] loop8: detected capacity change from 0 to 1024 [ 288.311126][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.492041][T12512] loop6: detected capacity change from 0 to 128 [ 288.513017][T12479] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 288.535842][ T4448] usb 2-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 288.554534][ T4448] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 288.580378][T12512] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 288.678910][T12512] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 288.783469][T12512] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 288.944388][ T8939] ocfs2: Unmounting device (7,3) on (node local) [ 289.125994][ T4448] usb 2-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4 [ 289.195739][ T4448] usb 2-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4 [ 289.242486][ T4448] usb 2-1: USB disconnect, device number 13 [ 289.468446][T12546] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 289.516586][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.637268][T12546] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000006,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 289.722637][T12546] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 290.000524][T12570] jffs2: notice: (12570) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 290.026304][ T4234] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 290.124775][T12572] set_capacity_and_notify: 2 callbacks suppressed [ 290.124792][T12572] loop1: detected capacity change from 0 to 2048 [ 290.244237][T12572] EXT4-fs (loop1): Unrecognized mount option "euid>00000000000000000000" or missing value [ 290.255164][T12556] loop5: detected capacity change from 0 to 32768 [ 290.312966][T10946] ------------[ cut here ]------------ [ 290.321575][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 290.331787][T10946] kernel BUG at fs/jffs2/nodelist.c:462! [ 290.421150][T10946] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 290.427383][T10946] CPU: 0 PID: 10946 Comm: syz-executor Not tainted syzkaller #0 [ 290.435021][T10946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.445087][T10946] RIP: 0010:jffs2_del_ino_cache+0x2a9/0x2b0 [ 290.451005][T10946] Code: 18 ff e9 60 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5a fe ff ff 4c 89 e7 e8 e1 fc 18 ff e9 4d fe ff ff e8 07 d4 d3 fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 [ 290.470624][T10946] RSP: 0000:ffffc900043dfb38 EFLAGS: 00010293 [ 290.475533][ T4262] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 290.476698][T10946] RAX: ffffffff82a52b99 RBX: ffff88804fd61040 RCX: ffff88802665d940 [ 290.476714][T10946] RDX: 0000000000000000 RSI: ffff88804fd61040 RDI: ffff888051ef0000 [ 290.476724][T10946] RBP: 0000000000000006 R08: ffff888051ef036b R09: 1ffff1100a3de06d [ 290.476734][T10946] R10: dffffc0000000000 R11: ffffed100a3de06e R12: ffff88804fd61040 [ 290.476744][T10946] R13: dffffc0000000000 R14: ffff88804fd61060 R15: ffff888051ef0000 [ 290.476756][T10946] FS: 000055557a85d500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 290.476769][T10946] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.476779][T10946] CR2: 0000001b33d23ffc CR3: 000000004c0c1000 CR4: 00000000003506f0 [ 290.476795][T10946] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 290.476803][T10946] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 290.476814][T10946] Call Trace: [ 290.476820][T10946] [ 290.476825][T10946] ? jffs2_do_clear_inode+0x310/0x390 [ 290.476851][T10946] jffs2_do_clear_inode+0x31b/0x390 [ 290.476869][T10946] ? jffs2_statfs+0x370/0x370 [ 290.476886][T10946] evict+0x4b6/0x8b0 [ 290.476903][T10946] ? evict_inodes+0x577/0x6e0 [ 290.476921][T10946] ? proc_nr_inodes+0x320/0x320 [ 290.476941][T10946] ? do_raw_spin_unlock+0x11d/0x230 [ 290.476959][T10946] evict_inodes+0x650/0x6e0 [ 290.476976][T10946] ? clear_inode+0x150/0x150 [ 290.476993][T10946] ? jffs2_sync_fs+0x93/0xa0 [ 290.477012][T10946] generic_shutdown_super+0x93/0x300 [ 290.477031][T10946] kill_mtd_super+0x1f/0x60 [ 290.477050][T10946] jffs2_kill_sb+0x92/0xb0 [ 290.477068][T10946] deactivate_locked_super+0x93/0xf0 [ 290.477085][T10946] cleanup_mnt+0x426/0x4d0 [ 290.477104][T10946] task_work_run+0x125/0x1a0 [ 290.477125][T10946] exit_to_user_mode_loop+0x10f/0x130 [ 290.477140][T10946] exit_to_user_mode_prepare+0xee/0x180 [ 290.477156][T10946] syscall_exit_to_user_mode+0x16/0x40 [ 290.477174][T10946] do_syscall_64+0x58/0xa0 [ 290.477189][T10946] ? clear_bhb_loop+0x30/0x80 [ 290.477205][T10946] ? clear_bhb_loop+0x30/0x80 [ 290.477220][T10946] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 290.477237][T10946] RIP: 0033:0x7f3c6b14b317 [ 290.477253][T10946] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 290.477266][T10946] RSP: 002b:00007ffdd06d4aa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 290.477285][T10946] RAX: 0000000000000000 RBX: 00007f3c6b1e0474 RCX: 00007f3c6b14b317 [ 290.477296][T10946] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd06d4b60 [ 290.477307][T10946] RBP: 00007ffdd06d4b60 R08: 00007ffdd06d5b60 R09: 00000000ffffffff [ 290.477319][T10946] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd06d5bf0 [ 290.477330][T10946] R13: 00007f3c6b1e0474 R14: 0000000000046dde R15: 00007ffdd06d5c30 [ 290.477347][T10946] [ 290.477370][T10946] Modules linked in: [ 290.501479][T10946] ---[ end trace 10d3e829ed45980c ]--- [ 290.648852][T12537] loop8: detected capacity change from 0 to 65536 [ 290.653803][ T4234] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 290.690529][T12537] XFS: ikeep mount option is deprecated. [ 290.709289][ T4234] usb 4-1: config 0 has no interface number 0 [ 290.778908][T10946] RIP: 0010:jffs2_del_ino_cache+0x2a9/0x2b0 [ 290.803840][ T4262] usb 7-1: Using ep0 maxpacket: 8 [ 290.812834][T10946] Code: 18 ff e9 60 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5a fe ff ff 4c 89 e7 e8 e1 fc 18 ff e9 4d fe ff ff e8 07 d4 d3 fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 [ 290.833460][T10946] RSP: 0000:ffffc900043dfb38 EFLAGS: 00010293 [ 290.841336][T10946] RAX: ffffffff82a52b99 RBX: ffff88804fd61040 RCX: ffff88802665d940 [ 290.849826][T10946] RDX: 0000000000000000 RSI: ffff88804fd61040 RDI: ffff888051ef0000 [ 290.859178][T10946] RBP: 0000000000000006 R08: ffff888051ef036b R09: 1ffff1100a3de06d [ 290.867410][T10946] R10: dffffc0000000000 R11: ffffed100a3de06e R12: ffff88804fd61040 [ 290.868483][T12537] XFS (loop8): Mounting V5 Filesystem [ 290.876186][T10946] R13: dffffc0000000000 R14: ffff88804fd61060 R15: ffff888051ef0000 [ 290.890581][T10946] FS: 000055557a85d500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 290.899590][T10946] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.906646][T10946] CR2: 00007f92e1dea286 CR3: 000000004c0c1000 CR4: 00000000003506f0 [ 290.914668][T10946] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 290.924832][T10946] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 290.927265][ T4262] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 290.933195][T10946] Kernel panic - not syncing: Fatal exception [ 290.950087][T10946] Kernel Offset: disabled [ 290.954412][T10946] Rebooting in 86400 seconds..