last executing test programs: 3m12.366702417s ago: executing program 0 (id=566): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiAwyo5k9m3M+kyAhSd+bv1eAHjHYM3bEMjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3cLB/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1t9BgaGDSDnulXOjbnrFi/ItUz9fN2bFwwHoz5PZGBkZGBgYmCYGbZzD7K/yhugkcHAzMDAoMIAUsTCkJaZk2rgwcDIwMzAws6ADGCqmRg4wKr0kvNzUtoZGMFJAKxtOQML3AzDxwys/CDlII7RYwZWuIyxRQPMyHYorQKlPaD0cij9GErLoyUbFrAJ/VCeRgMDAxtDReJ//iJDNgYGhorEkpIiQ4hYSUmREVzMSABuMxPU1rlMqJ47zsQwCkbBKBgFo2AUjIJRMApGwSgYBSMZAAIAAP//kpC1eQ==") lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 3m11.795696841s ago: executing program 0 (id=572): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) 3m11.514260077s ago: executing program 0 (id=576): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x54}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCOUTQ(r0, 0x4b4b, &(0x7f0000000000)) 3m11.28593649s ago: executing program 0 (id=580): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc0d6, &(0x7f00000000c0)={[{@noload}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x45b, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 3m10.453118948s ago: executing program 0 (id=591): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000021c0)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x57, 0x4, 0x9, 0x64e3, 0x5]}, &(0x7f0000002240)=0x78) 3m8.455072855s ago: executing program 0 (id=601): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0xd7c4, 0xfffffff9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214ffff1cfffffff80707177f889d0264ed000100080009000d000000", 0x24) 3m7.952759744s ago: executing program 32 (id=601): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0xd7c4, 0xfffffff9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214ffff1cfffffff80707177f889d0264ed000100080009000d000000", 0x24) 2m22.851570518s ago: executing program 1 (id=998): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x523e5324, 0x1, 0x4, 0x0, 0xa}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x7, 0xc, 0x4, {0x1, @raw_data="de16356387eddc256a189d2d011b044473ca2c257f60a14806fdf60983ab081383ecf98d18e5c6942ea0a0ef969c617274692f60841a2215c4048e4f4a5560718e3013e6a750e0b91f3e948643c28e8056ed069a4d638462a5dfcf5d6b35e1b94263fe728c8371054273c71042a244ff4c12f2ea4c819a7737ac63eba07b07a1b493d31194a08f1c063c696236d4a1543c5dffedb68583e1e30828f0aec11877a302b3a515e8d90da1202b0da7ddea2e3b54c4c7e7312dbf219ec4216212330e4cc38542a39fcea6"}, 0x9}) 2m22.566987965s ago: executing program 1 (id=999): r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10100) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2m22.047508825s ago: executing program 1 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r1, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@val={0x8, 0x12b, 0xffffffff}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x13}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) 2m21.61934553s ago: executing program 1 (id=1003): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc0d6, &(0x7f00000000c0)={[{@noload}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x45b, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 2m20.740794951s ago: executing program 1 (id=1006): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000100)={[{@grpquota}, {@bsdgroups}]}, 0xff, 0x9882, &(0x7f000001c800)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40085875, 0x0) 2m18.945425145s ago: executing program 1 (id=1013): unshare(0x480) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000005980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x3a) 2m17.976495052s ago: executing program 33 (id=1013): unshare(0x480) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000005980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x3a) 1m8.165961414s ago: executing program 4 (id=1556): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20041, 0x0) 1m7.921933228s ago: executing program 4 (id=1558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x28, r1, 0x1, 0xfffffffe, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x28}}, 0x0) 1m7.665401703s ago: executing program 4 (id=1561): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1m7.132346474s ago: executing program 4 (id=1566): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x0, 0x0, 0x0}) 1m6.903061387s ago: executing program 4 (id=1568): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$eJzskr9OAkEQxr+9O/5oFDWxooGC+KdQjkONnZbY29lI4ETiocKRKITijDEUFsbSJ+A1THwBLYwPQE1BrM2ZvZ3bLL6C+yvu2/l2ZnZ2c+d+208B+JkOajhEhIkMPhiDBSDHhDcxhD6TfpI+CcE75R2Rf0+a9Xv9JAC+nceKMC6qnud28gC+I09a/sGdgUnU6ms6qPHFKYAwDEPu1QGejgUlxwTQVnKyFrAaXSKUORYNsA6g2G1dF/1ef6vZqjbchnvpmOU9e8e2d53iWdNzbfFlyhF0FXDdBJBKQ8L3EwAeKJ7HLEwZjfbZHE5kbTJ+www9IExZayi1sTK8yrlSSsUx1sDHugmWFLcQdbEQXakCBpOCkqXMJ85KRxvbtSuvPgQDi8tGsGSP0hgJGThqUN4PsChaDallgbRCOiIdk+b+/DJWwL+PFG0EQBK31W63U+KPJFYsXjnSc5YD9cH4qS/G7OXeDGg0Go1Go9FoNBrNf+c3AAD//8PfdhM=") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 1m5.906510995s ago: executing program 4 (id=1574): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "1b05d78f"}, @global=@item_012={0x1, 0x1, 0x2, "a0"}]}}, 0x0}, 0x0) 50.095530935s ago: executing program 34 (id=1574): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "1b05d78f"}, @global=@item_012={0x1, 0x1, 0x2, "a0"}]}}, 0x0}, 0x0) 5.240780935s ago: executing program 7 (id=2059): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/166, 0xa6}], 0x1}, 0x40010103) 5.029247287s ago: executing program 2 (id=2062): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0], 0x1, 0xaeb, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 4.956337012s ago: executing program 7 (id=2063): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000380)=ANY=[@ANYRES8=0x0], 0x3, 0xa80, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x8, 0x7fffffff, 0xfd, 0x9, 0x75}}, 0x200000) 4.47570453s ago: executing program 7 (id=2065): timer_create(0x3, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000380)) 4.125838239s ago: executing program 7 (id=2068): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) 3.694900585s ago: executing program 7 (id=2071): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x8, &(0x7f00000002c0)={0x40, 0x23, 0xa0, {0xa0, 0xc, "82a0b506d18388d96a8860aad541520a4843319eabc3da3490ea5a227cf7ec2cea9a503e5d05b0775fd90119fd6c1a82a53552ac1d979939df30db2e596c69486dd650ef60ec5f4c8fc6dce9541d5fff27832e7ab4f8f940758f968e0adf2e647631969f52696b2633b31446e1f0f933bb5c7ad293068ccd90733cd032b878b9c017c67f7fe76826b4e7be5031d6961dd1809a28eba8d68c148302e435ae"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.513200623s ago: executing program 2 (id=2075): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 2.137062505s ago: executing program 2 (id=2079): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) getsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, &(0x7f0000000280)=0x4f) 2.124376836s ago: executing program 5 (id=2080): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf252400001d0a000100776c616e31"], 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x0) 1.87908791s ago: executing program 2 (id=2082): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f0000000040)="0202030786dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000}, 0x3a) 1.698002651s ago: executing program 3 (id=2083): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000008c0), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) 1.469230484s ago: executing program 2 (id=2084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000003c0)={0x0, 0x39, &(0x7f0000000380)={&(0x7f0000000040)={0x20, r1, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40000) 1.420670607s ago: executing program 6 (id=2085): mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 1.284614205s ago: executing program 5 (id=2086): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0xffffffffffffffc6, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000020008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}, @TCA_RED_MAX_P={0x8}]}}]}, 0x150}}, 0x0) 1.19676472s ago: executing program 3 (id=2087): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x1, 0xff}], 0xa8) 1.150390733s ago: executing program 2 (id=2088): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f00000004c0)=ANY=[], 0x1, 0x0, &(0x7f0000000480)) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a6a479, &(0x7f0000000040)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.063302278s ago: executing program 6 (id=2089): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0xc000000) 1.057940838s ago: executing program 5 (id=2090): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r1 = openat(r0, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', 0x242, 0x20262076a4e6d5e) write$cgroup_int(r1, &(0x7f0000000040)=0x9, 0x12) 934.045275ms ago: executing program 3 (id=2091): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32], 0x74}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 847.25148ms ago: executing program 6 (id=2092): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @multicast1}}}, 0x118) 807.232383ms ago: executing program 5 (id=2094): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x71f43, 0x20b}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 625.276183ms ago: executing program 6 (id=2095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r1, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) 600.439735ms ago: executing program 3 (id=2096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cce801000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r0}, 0x38) 431.258704ms ago: executing program 7 (id=2097): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 334.84188ms ago: executing program 3 (id=2098): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x6020400) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 258.651965ms ago: executing program 6 (id=2099): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 230.168426ms ago: executing program 5 (id=2100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.431859ms ago: executing program 6 (id=2101): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 601.98µs ago: executing program 5 (id=2102): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x200800, 0x8) fcntl$getflags(r0, 0x1) 0s ago: executing program 3 (id=2103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) kernel console output (not intermixed with test programs): promiscuous mode [ 200.867181][ T7473] EXT4-fs: Ignoring removed bh option [ 200.901153][ T7473] EXT4-fs: inline encryption not supported [ 200.956821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.976193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.990885][ T7452] loop4: detected capacity change from 0 to 32768 [ 201.013441][ T7452] XFS (loop4): Mounting V5 Filesystem [ 201.017829][ T7473] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.1123: lblock 2 mapped to illegal pblock 2 (length 1) [ 201.079142][ T7167] device veth1_vlan entered promiscuous mode [ 201.111126][ T7452] XFS (loop4): Ending clean mount [ 201.118082][ T7473] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 201.147447][ T7473] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.1123: lblock 0 mapped to illegal pblock 48 (length 1) [ 201.178181][ T7452] XFS (loop4): Quotacheck needed: Please wait. [ 201.207283][ T7473] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 201.289072][ T7473] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.1123: Failed to acquire dquot type 0 [ 201.350120][ T7473] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 201.360104][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.369008][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.379064][ T7473] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.1123: mark_inode_dirty error [ 201.392454][ T7452] XFS (loop4): Quotacheck: Done. [ 201.426031][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.443917][ T7487] loop5: detected capacity change from 0 to 256 [ 201.460620][ T7473] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 201.480227][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.525821][ T7167] device veth0_macvtap entered promiscuous mode [ 201.535770][ T7473] EXT4-fs (loop2): 1 orphan inode deleted [ 201.545449][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 201.567177][ T41] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 201.572066][ T7167] device veth1_macvtap entered promiscuous mode [ 201.609748][ T7473] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 201.616876][ T4272] XFS (loop4): Unmounting Filesystem [ 201.684461][ T41] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 201.734634][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.753369][ T41] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:2: Failed to release dquot type 0 [ 201.808437][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.862564][ T41] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm kworker/u4:2: lblock 2 mapped to illegal pblock 2 (length 1) [ 201.885374][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.925808][ T7491] loop3: detected capacity change from 0 to 256 [ 201.936676][ T41] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 201.945148][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.970382][ T41] EXT4-fs error (device loop2): ext4_write_dquot:6815: comm kworker/u4:2: Failed to commit dquot type 0 [ 201.983489][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.000866][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.011652][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.022588][ T41] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 202.047371][ T7491] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 202.049732][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.089123][ T7491] FAT-fs (loop3): Filesystem has been set read-only [ 202.098429][ T7491] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 202.112375][ T7167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.119933][ T7491] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 202.130902][ T26] audit: type=1800 audit(1769909456.618:46): pid=7491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1126" name="file1" dev="loop3" ino=1048697 res=0 errno=0 [ 202.200233][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 202.217990][ T4273] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 202.284938][ T7491] syz.3.1126 (7491) used greatest stack depth: 20504 bytes left [ 202.286805][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.312183][ T4273] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 202.343512][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.357799][ T4273] EXT4-fs error (device loop2): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 202.453749][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.491185][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.562149][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.599751][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.657096][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.687201][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.711403][ T7504] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1130'. [ 202.713921][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.808486][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.841509][ T7167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.862608][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.911028][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.952968][ T7167] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.993245][ T7167] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.028411][ T7167] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.060253][ T7167] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.349004][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.378647][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.446817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.476944][ T5917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.509513][ T5917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.563304][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.917365][ T5214] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 203.983708][ T5214] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 204.259749][ T7066] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 204.270323][ T7534] fido_id[7534]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 204.466517][ T7066] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 204.479906][ T7066] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 204.506456][ T5214] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 204.514633][ T7066] usb 4-1: config 0 has no interface number 0 [ 204.552403][ T7066] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 204.579334][ T7066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.599445][ T7066] usb 4-1: Product: syz [ 204.609612][ T7066] usb 4-1: Manufacturer: syz [ 204.619579][ T7066] usb 4-1: SerialNumber: syz [ 204.630431][ T7516] loop2: detected capacity change from 0 to 40427 [ 204.670957][ T7066] usb 4-1: config 0 descriptor?? [ 204.701393][ T7516] F2FS-fs (loop2): invalid crc value [ 204.714702][ T5214] usb 6-1: Using ep0 maxpacket: 32 [ 204.727080][ T5214] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.797647][ T5214] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 204.832273][ T7516] F2FS-fs (loop2): Found nat_bits in checkpoint [ 204.843673][ T5214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.920386][ T5214] usb 6-1: config 0 descriptor?? [ 205.093702][ T7516] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 205.125595][ T7066] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 205.142530][ T7066] usb 4-1: No valid video chain found. [ 205.348040][ T5214] cypress 0003:04B4:DE61.0010: item fetching failed at offset 0/2 [ 205.365025][ T5214] cypress 0003:04B4:DE61.0010: parse failed [ 205.377549][ T5214] cypress: probe of 0003:04B4:DE61.0010 failed with error -22 [ 205.430784][ T7066] usb 4-1: USB disconnect, device number 8 [ 205.490556][ T4273] syz-executor: attempt to access beyond end of device [ 205.490556][ T4273] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 205.608770][ T951] usb 6-1: USB disconnect, device number 6 [ 205.662920][ T7562] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1148'. [ 205.961028][ T7566] device batadv0 entered promiscuous mode [ 205.966983][ T7566] device macvtap1 entered promiscuous mode [ 205.994757][ T7566] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 206.052359][ T7566] device batadv0 left promiscuous mode [ 206.899400][ T6441] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 207.106530][ T6441] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 207.138903][ T6441] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 207.175905][ T6441] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.213787][ T6441] usb 6-1: config 0 descriptor?? [ 207.264503][ T7601] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1161'. [ 207.534603][ T7608] device batadv0 entered promiscuous mode [ 207.591617][ T7608] device macvtap1 entered promiscuous mode [ 207.648872][ T7608] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 207.652423][ T6441] logitech 0003:046D:C626.0011: item fetching failed at offset 8/11 [ 207.670037][ T951] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 207.680414][ T6441] logitech 0003:046D:C626.0011: parse failed [ 207.699470][ T6441] logitech: probe of 0003:046D:C626.0011 failed with error -22 [ 207.710256][ T7608] device batadv0 left promiscuous mode [ 207.859909][ T6441] usb 6-1: USB disconnect, device number 7 [ 207.886698][ T951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.939731][ T951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.994937][ T951] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 208.030932][ T951] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 208.063947][ T951] usb 7-1: Manufacturer: syz [ 208.090447][ T951] usb 7-1: config 0 descriptor?? [ 208.249827][ T7611] loop2: detected capacity change from 0 to 32768 [ 208.316003][ T7611] [ 208.316003][ T7611] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.316003][ T7611] [ 208.579084][ T4273] [ 208.579084][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.579084][ T4273] [ 208.601790][ T26] audit: type=1326 audit(1769909463.088:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7657b9aeb9 code=0x7ffc0000 [ 208.629092][ T4273] [ 208.629092][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.629092][ T4273] [ 208.697025][ T26] audit: type=1326 audit(1769909463.118:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7657b9aeb9 code=0x7ffc0000 [ 208.730674][ T951] uclogic 0003:256C:006D.0012: failed retrieving Huion firmware version: -71 [ 208.776078][ T951] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 208.799809][ T951] uclogic: probe of 0003:256C:006D.0012 failed with error -71 [ 208.839873][ T26] audit: type=1326 audit(1769909463.138:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7657b9aeb9 code=0x7ffc0000 [ 208.869934][ T951] usb 7-1: USB disconnect, device number 2 [ 208.990181][ T26] audit: type=1326 audit(1769909463.138:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7657b9aeb9 code=0x7ffc0000 [ 209.109497][ T26] audit: type=1326 audit(1769909463.168:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7657b9aeb9 code=0x7ffc0000 [ 209.218886][ T26] audit: type=1326 audit(1769909463.168:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7657b9aeb9 code=0x7ffc0000 [ 209.375644][ T26] audit: type=1326 audit(1769909463.168:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7657b9aeb9 code=0x7ffc0000 [ 209.456830][ T26] audit: type=1326 audit(1769909463.168:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7657b9aeb9 code=0x7ffc0000 [ 209.832540][ T7622] loop4: detected capacity change from 0 to 32768 [ 209.846042][ T7651] loop3: detected capacity change from 0 to 512 [ 210.025695][ T7651] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.103882][ T7651] EXT4-fs (loop3): Invalid default hash set in the superblock [ 210.367648][ T7663] loop2: detected capacity change from 0 to 256 [ 210.596852][ T7663] FAT-fs (loop2): Directory bread(block 64) failed [ 210.606903][ T7663] FAT-fs (loop2): Directory bread(block 65) failed [ 210.649952][ T7663] FAT-fs (loop2): Directory bread(block 66) failed [ 210.656652][ T7663] FAT-fs (loop2): Directory bread(block 67) failed [ 210.738878][ T7663] FAT-fs (loop2): Directory bread(block 68) failed [ 210.799837][ T7663] FAT-fs (loop2): Directory bread(block 69) failed [ 210.830022][ T7663] FAT-fs (loop2): Directory bread(block 70) failed [ 210.836626][ T7663] FAT-fs (loop2): Directory bread(block 71) failed [ 210.892505][ T7673] sp0: Synchronizing with TNC [ 210.915915][ T7663] FAT-fs (loop2): Directory bread(block 72) failed [ 210.941857][ T7672] [U] è [ 210.959954][ T7663] FAT-fs (loop2): Directory bread(block 73) failed [ 211.021294][ T7677] loop6: detected capacity change from 0 to 1764 [ 212.125439][ T7706] device batadv0 entered promiscuous mode [ 212.169986][ T7706] device macvtap1 entered promiscuous mode [ 212.217753][ T7706] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 212.297085][ T7706] device batadv0 left promiscuous mode [ 212.399813][ T6441] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 212.426057][ T7714] loop6: detected capacity change from 0 to 4096 [ 212.458537][ T7714] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 212.591818][ T6441] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 212.620050][ T6441] usb 6-1: config 0 has no interface number 0 [ 212.640622][ T6441] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 212.689920][ T6441] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 212.731225][ T6441] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.760928][ T6441] usb 6-1: config 0 descriptor?? [ 212.767970][ T7167] ntfs3: loop6: ntfs_sync_fs r=1a failed, -22. [ 212.796139][ T7167] ntfs3: loop6: ntfs_evict_inode r=1a failed, -22. [ 212.803788][ T6441] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input10 [ 212.844012][ T7167] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 213.074291][ T7700] loop2: detected capacity change from 0 to 32768 [ 213.085787][ T7068] usb 6-1: USB disconnect, device number 8 [ 213.085848][ C1] usbtouchscreen 6-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 213.253221][ T7700] XFS (loop2): Mounting V5 Filesystem [ 213.371041][ T7724] loop3: detected capacity change from 0 to 2048 [ 213.437144][ T7700] XFS (loop2): Ending clean mount [ 213.440243][ T7724] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 213.486448][ T7700] XFS (loop2): Quotacheck needed: Please wait. [ 213.644348][ T4394] udevd[4394]: incorrect nilfs2 checksum on /dev/loop3 [ 213.646631][ T7700] XFS (loop2): Quotacheck: Done. [ 213.686561][ T7740] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.974181][ T4273] XFS (loop2): Unmounting Filesystem [ 214.063334][ T7750] loop4: detected capacity change from 0 to 256 [ 214.207382][ T7750] FAT-fs (loop4): Directory bread(block 64) failed [ 214.229919][ T7750] FAT-fs (loop4): Directory bread(block 65) failed [ 214.236619][ T7750] FAT-fs (loop4): Directory bread(block 66) failed [ 214.330656][ T7750] FAT-fs (loop4): Directory bread(block 67) failed [ 214.337842][ T7750] FAT-fs (loop4): Directory bread(block 68) failed [ 214.365330][ T7757] loop6: detected capacity change from 0 to 1024 [ 214.399889][ T7750] FAT-fs (loop4): Directory bread(block 69) failed [ 214.410271][ T7750] FAT-fs (loop4): Directory bread(block 70) failed [ 214.457104][ T7750] FAT-fs (loop4): Directory bread(block 71) failed [ 214.494922][ T7750] FAT-fs (loop4): Directory bread(block 72) failed [ 214.507390][ T7757] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.1213: Invalid block bitmap block 0 in block_group 0 [ 214.562361][ T7750] FAT-fs (loop4): Directory bread(block 73) failed [ 214.636305][ T7757] Quota error (device loop6): write_blk: dquota write failed [ 214.677626][ T7757] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 214.722769][ T7757] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.1213: Failed to acquire dquot type 0 [ 214.783781][ T7757] EXT4-fs error (device loop6): ext4_free_blocks:6221: comm syz.6.1213: Freeing blocks not in datazone - block = 0, count = 4096 [ 214.896123][ T7757] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.1213: Invalid inode bitmap blk 0 in block_group 0 [ 214.950087][ T4481] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-7 [ 214.959219][ T4481] EXT4-fs error (device loop6): ext4_release_dquot:6871: comm kworker/u4:7: Failed to release dquot type 0 [ 214.990466][ T7757] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 215.078338][ T7757] EXT4-fs (loop6): 1 orphan inode deleted [ 215.101792][ T7757] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 215.395936][ T7167] EXT4-fs (loop6): unmounting filesystem. [ 216.041748][ T7068] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 216.075047][ T7787] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1224'. [ 216.165140][ T7766] loop5: detected capacity change from 0 to 32768 [ 216.266879][ T7068] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 216.325560][ T7068] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.391458][ T7068] usb 3-1: config 0 descriptor?? [ 216.436470][ T7766] XFS (loop5): Mounting V5 Filesystem [ 216.488356][ T7068] cp210x 3-1:0.0: cp210x converter detected [ 216.579667][ T7771] loop4: detected capacity change from 0 to 32768 [ 216.652591][ T7801] loop3: detected capacity change from 0 to 4096 [ 216.678685][ T7766] XFS (loop5): Ending clean mount [ 216.696846][ T7766] XFS (loop5): Quotacheck needed: Please wait. [ 216.804644][ T7809] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.845813][ T7766] XFS (loop5): Quotacheck: Done. [ 217.034416][ T7068] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 217.048182][ T7068] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 217.129500][ T7068] usb 3-1: cp210x converter now attached to ttyUSB0 [ 217.158954][ T7068] usb 3-1: USB disconnect, device number 5 [ 217.208934][ T7068] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 217.278552][ T7068] cp210x 3-1:0.0: device disconnected [ 217.331592][ T5871] XFS (loop5): Unmounting Filesystem [ 218.205909][ T7843] loop2: detected capacity change from 0 to 256 [ 218.276725][ T7843] FAT-fs (loop2): Directory bread(block 64) failed [ 218.304521][ T7843] FAT-fs (loop2): Directory bread(block 65) failed [ 218.343068][ T7843] FAT-fs (loop2): Directory bread(block 66) failed [ 218.414411][ T7843] FAT-fs (loop2): Directory bread(block 67) failed [ 218.461655][ T7843] FAT-fs (loop2): Directory bread(block 68) failed [ 218.468284][ T7843] FAT-fs (loop2): Directory bread(block 69) failed [ 218.535117][ T7843] FAT-fs (loop2): Directory bread(block 70) failed [ 218.572680][ T7850] loop6: detected capacity change from 0 to 64 [ 218.581263][ T7843] FAT-fs (loop2): Directory bread(block 71) failed [ 218.587971][ T7843] FAT-fs (loop2): Directory bread(block 72) failed [ 218.620959][ T7843] FAT-fs (loop2): Directory bread(block 73) failed [ 219.079162][ T7859] loop6: detected capacity change from 0 to 1024 [ 219.199218][ T7855] loop5: detected capacity change from 0 to 4096 [ 219.270529][ T7855] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 219.279964][ T7857] loop3: detected capacity change from 0 to 4096 [ 219.296075][ T7857] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 219.724879][ T4271] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 219.741844][ T7868] loop6: detected capacity change from 0 to 256 [ 219.782325][ T4271] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 219.788944][ T4271] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 219.860933][ T7868] FAT-fs (loop6): Directory bread(block 64) failed [ 219.879880][ T7868] FAT-fs (loop6): Directory bread(block 65) failed [ 219.929983][ T7868] FAT-fs (loop6): Directory bread(block 66) failed [ 219.969967][ T7868] FAT-fs (loop6): Directory bread(block 67) failed [ 219.990573][ T7868] FAT-fs (loop6): Directory bread(block 68) failed [ 219.997220][ T7868] FAT-fs (loop6): Directory bread(block 69) failed [ 220.050018][ T7868] FAT-fs (loop6): Directory bread(block 70) failed [ 220.087448][ T7868] FAT-fs (loop6): Directory bread(block 71) failed [ 220.115835][ T7868] FAT-fs (loop6): Directory bread(block 72) failed [ 220.170049][ T6441] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 220.171692][ T7868] FAT-fs (loop6): Directory bread(block 73) failed [ 220.360019][ T6441] usb 6-1: Using ep0 maxpacket: 32 [ 220.367820][ T6441] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 220.417541][ T6441] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 220.451745][ T6441] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 220.507992][ T6441] usb 6-1: config 1 has no interface number 0 [ 220.529890][ T6441] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.571413][ T6441] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 220.599863][ T6441] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 220.619762][ T6441] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.682372][ T6441] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 220.870606][ T6441] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 221.158158][ T7866] loop2: detected capacity change from 0 to 32768 [ 221.224354][ T7866] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 221.240261][ T6441] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 221.289241][ T7896] loop6: detected capacity change from 0 to 512 [ 221.311125][ T7866] JBD2: Ignoring recovery information on journal [ 221.328947][ T7068] usb 6-1: USB disconnect, device number 9 [ 221.354258][ T7068] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 221.363586][ T7896] FAT-fs (loop6): Directory bread(block 199916) failed [ 221.385021][ T7896] FAT-fs (loop6): Directory bread(block 199917) failed [ 221.393044][ T7896] FAT-fs (loop6): Directory bread(block 199918) failed [ 221.400781][ T7896] FAT-fs (loop6): Directory bread(block 199919) failed [ 221.407967][ T7896] FAT-fs (loop6): Directory bread(block 199920) failed [ 221.430940][ T6441] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 221.439195][ T7896] FAT-fs (loop6): Directory bread(block 199921) failed [ 221.458786][ T6441] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 221.481409][ T7866] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 221.502182][ T7896] FAT-fs (loop6): Directory bread(block 199922) failed [ 221.509237][ T7896] FAT-fs (loop6): Directory bread(block 199923) failed [ 221.511075][ T6441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.517969][ T6441] usb 4-1: Product: syz [ 221.517991][ T6441] usb 4-1: Manufacturer: syz [ 221.518014][ T6441] usb 4-1: SerialNumber: syz [ 221.600492][ T6441] usb 4-1: config 0 descriptor?? [ 221.642965][ T6441] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 221.684255][ T6441] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 221.703931][ T7866] (syz.2.1249,7866,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 221.712455][ T6441] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 221.712504][ T6441] usb 4-1: media controller created [ 221.748296][ T6441] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.805877][ T7866] (syz.2.1249,7866,0):ocfs2_group_extend:318 ERROR: status = -12 [ 222.048161][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 222.162922][ T6441] DVB: Unable to find symbol mt352_attach() [ 222.498072][ T6441] DVB: Unable to find symbol nxt6000_attach() [ 222.520290][ T6441] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 222.526875][ T951] kernel write not supported for file /amidi2 (pid: 951 comm: kworker/0:2) [ 222.567106][ T6441] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 222.628128][ T6441] dvb-usb: schedule remote query interval to 1000 msecs. [ 222.639757][ T7925] loop3: detected capacity change from 0 to 64 [ 222.668663][ T6441] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 222.790092][ T6441] dvb-usb: bulk message failed: -22 (7/0) [ 222.808681][ T6441] dvb-usb: bulk message failed: -22 (7/0) [ 222.837724][ T6441] usb 4-1: USB disconnect, device number 9 [ 222.948393][ T6441] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 223.010934][ T7929] loop2: detected capacity change from 0 to 4096 [ 223.037245][ T7929] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 223.169937][ T4333] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 223.279953][ T7934] loop3: detected capacity change from 0 to 512 [ 223.327917][ T7934] FAT-fs (loop3): Directory bread(block 199916) failed [ 223.355073][ T7934] FAT-fs (loop3): Directory bread(block 199917) failed [ 223.369965][ T4333] usb 7-1: Using ep0 maxpacket: 16 [ 223.377160][ T4333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.383556][ T7934] FAT-fs (loop3): Directory bread(block 199918) failed [ 223.408098][ T4273] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 223.432650][ T4273] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 223.440059][ T4333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.440110][ T4333] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 223.475634][ T7934] FAT-fs (loop3): Directory bread(block 199919) failed [ 223.508316][ T7934] FAT-fs (loop3): Directory bread(block 199920) failed [ 223.531891][ T4333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.532209][ T4273] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 223.554949][ T7934] FAT-fs (loop3): Directory bread(block 199921) failed [ 223.571253][ T4333] usb 7-1: config 0 descriptor?? [ 223.590879][ T7934] FAT-fs (loop3): Directory bread(block 199922) failed [ 223.631712][ T7934] FAT-fs (loop3): Directory bread(block 199923) failed [ 224.020251][ T4333] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 224.044824][ T4333] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 224.057496][ T4333] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 224.067185][ T7923] loop4: detected capacity change from 0 to 40427 [ 224.083064][ T7923] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 224.084949][ T4333] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 224.100763][ T4333] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 224.116132][ T4333] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 224.127934][ T7923] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 224.148786][ T7923] F2FS-fs (loop4): invalid crc value [ 224.165072][ T7923] F2FS-fs (loop4): Found nat_bits in checkpoint [ 224.210130][ T4333] hid-picolcd 0003:04D8:F002.0013: No report with id 0xf3 found [ 224.220328][ T7946] loop2: detected capacity change from 0 to 8192 [ 224.241718][ T4333] hid-picolcd 0003:04D8:F002.0013: No report with id 0xf4 found [ 224.288254][ T7946] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 224.293871][ T4333] usb 7-1: USB disconnect, device number 3 [ 224.310650][ T7946] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 224.372347][ T7946] REISERFS (device loop2): using ordered data mode [ 224.381199][ T7946] reiserfs: using flush barriers [ 224.392439][ T7923] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 224.401540][ T7946] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 224.430124][ T7946] REISERFS (device loop2): checking transaction log (loop2) [ 224.575321][ T4272] syz-executor: attempt to access beyond end of device [ 224.575321][ T4272] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 224.749754][ T7946] REISERFS (device loop2): Using tea hash to sort names [ 224.758481][ T7946] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 225.455911][ T7969] loop3: detected capacity change from 0 to 256 [ 225.591977][ T7969] FAT-fs (loop3): Directory bread(block 64) failed [ 225.598635][ T7969] FAT-fs (loop3): Directory bread(block 65) failed [ 225.614484][ T7968] loop4: detected capacity change from 0 to 4096 [ 225.661082][ T7969] FAT-fs (loop3): Directory bread(block 66) failed [ 225.704399][ T7969] FAT-fs (loop3): Directory bread(block 67) failed [ 225.720036][ T7977] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.722050][ T7969] FAT-fs (loop3): Directory bread(block 68) failed [ 225.756113][ T7975] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 225.799560][ T7969] FAT-fs (loop3): Directory bread(block 69) failed [ 225.814634][ T7969] FAT-fs (loop3): Directory bread(block 70) failed [ 225.836681][ T7969] FAT-fs (loop3): Directory bread(block 71) failed [ 225.872421][ T7969] FAT-fs (loop3): Directory bread(block 72) failed [ 225.898160][ T7969] FAT-fs (loop3): Directory bread(block 73) failed [ 226.041291][ T7957] loop5: detected capacity change from 0 to 32768 [ 226.087287][ T7957] JBD2: Ignoring recovery information on journal [ 226.274289][ T7957] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 226.432615][ T7990] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1294'. [ 226.445630][ T7990] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 226.610371][ T5871] ocfs2: Unmounting device (7,5) on (node local) [ 226.801378][ T7996] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1299'. [ 226.832851][ T7996] device gretap0 entered promiscuous mode [ 226.872465][ T8003] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1299'. [ 226.921491][ T8003] 0ªî{X¹¦: renamed from gretap0 [ 226.978944][ T8003] device 30ªî{X¹¦ left promiscuous mode [ 227.019215][ T8003] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 227.049825][ T4333] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 227.075567][ T8000] loop5: detected capacity change from 0 to 8192 [ 227.123687][ T8000] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 227.217025][ T8000] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 227.260006][ T4333] usb 4-1: Using ep0 maxpacket: 8 [ 227.271340][ T4333] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 227.310015][ T8000] REISERFS (device loop5): using ordered data mode [ 227.316608][ T8000] reiserfs: using flush barriers [ 227.324408][ T4333] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 227.343423][ T8000] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 227.363836][ T4333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.412615][ T4333] usb 4-1: Product: syz [ 227.419202][ T8000] REISERFS (device loop5): checking transaction log (loop5) [ 227.428178][ T4333] usb 4-1: Manufacturer: syz [ 227.460449][ T4333] usb 4-1: SerialNumber: syz [ 227.494237][ T4333] usb 4-1: config 0 descriptor?? [ 227.525620][ T4333] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 227.579785][ T4333] usb 4-1: setting power ON [ 227.594862][ T4333] dvb-usb: bulk message failed: -22 (2/0) [ 227.621539][ T4333] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.655219][ T4333] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 227.693085][ T4333] usb 4-1: media controller created [ 227.722904][ T7999] dvb-usb: bulk message failed: -22 (3/0) [ 227.725645][ T8000] REISERFS (device loop5): Using tea hash to sort names [ 227.761722][ T8000] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 227.771320][ T4333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.831242][ T4333] usb 4-1: selecting invalid altsetting 6 [ 227.837149][ T4333] usb 4-1: digital interface selection failed (-22) [ 227.874483][ T4333] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 227.909944][ T4333] usb 4-1: setting power OFF [ 227.914637][ T4333] dvb-usb: bulk message failed: -22 (2/0) [ 227.942653][ T4333] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 227.973241][ T4333] (NULL device *): no alternate interface [ 228.054375][ T4333] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 228.136024][ T4333] usb 4-1: USB disconnect, device number 10 [ 228.638713][ T8029] loop5: detected capacity change from 0 to 256 [ 228.657564][ T8029] exfat: Deprecated parameter 'utf8' [ 228.683178][ T8029] exfat: Deprecated parameter 'utf8' [ 228.743036][ T8029] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 229.818261][ T8035] loop3: detected capacity change from 0 to 32768 [ 229.879073][ T8035] (syz.3.1312,8035,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 229.912877][ T8058] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1324'. [ 229.946720][ T8035] (syz.3.1312,8035,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 230.072924][ T8035] JBD2: Ignoring recovery information on journal [ 230.174277][ T8037] loop4: detected capacity change from 0 to 32768 [ 230.224302][ T8035] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 230.332218][ T8037] jfs_create: dtInsert returned -EIO [ 230.357995][ T8037] ERROR: (device loop4): jfs_create: [ 230.357995][ T8037] [ 230.415423][ T8037] ERROR: (device loop4): remounting filesystem as read-only [ 230.544098][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 230.996690][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 231.303949][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1336'. [ 231.766058][ T8111] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1343'. [ 231.831896][ T8111] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1343'. [ 231.869787][ T8111] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1343'. [ 231.878843][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1343'. [ 232.003972][ T8119] loop2: detected capacity change from 0 to 512 [ 232.150140][ T8119] EXT4-fs (loop2): 1 truncate cleaned up [ 232.169810][ T8119] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 232.269092][ T26] audit: type=1326 audit(1769909486.748:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.5.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5359aeb9 code=0x7ffc0000 [ 232.401332][ T26] audit: type=1326 audit(1769909486.748:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.5.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5359aeb9 code=0x7ffc0000 [ 232.428508][ T8134] [U]  [ 232.471036][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 232.505723][ T26] audit: type=1326 audit(1769909486.778:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.5.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f1c5359aeb9 code=0x7ffc0000 [ 232.600216][ T26] audit: type=1326 audit(1769909486.778:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.5.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5359aeb9 code=0x7ffc0000 [ 232.685947][ T26] audit: type=1326 audit(1769909486.778:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.5.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5359aeb9 code=0x7ffc0000 [ 232.786636][ T26] audit: type=1326 audit(1769909486.778:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.5.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f1c5359aeb9 code=0x7ffc0000 [ 232.839843][ T26] audit: type=1326 audit(1769909486.838:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.5.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5359aeb9 code=0x7ffc0000 [ 232.977480][ T26] audit: type=1326 audit(1769909486.838:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.5.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5359aeb9 code=0x7ffc0000 [ 233.249093][ T5220] kernel write not supported for file /243/net/rt_cache (pid: 5220 comm: kworker/0:14) [ 233.558607][ T8135] loop3: detected capacity change from 0 to 32768 [ 233.681392][ T8135] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 233.681392][ T8135] [ 233.750833][ T8173] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1365'. [ 233.986448][ T8177] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1367'. [ 234.061578][ T8177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.366744][ T8190] mkiss: ax0: crc mode is auto. [ 234.633478][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1374'. [ 234.695913][ T8201] loop6: detected capacity change from 0 to 1024 [ 234.956947][ T4365] hfsplus: b-tree write err: -5, ino 4 [ 235.520587][ T8227] sch_fq: defrate 0 ignored. [ 235.605464][ T8229] loop5: detected capacity change from 0 to 256 [ 235.643979][ T8229] exfat: Deprecated parameter 'namecase' [ 235.662423][ T8229] exfat: Deprecated parameter 'utf8' [ 235.695585][ T8229] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 236.711258][ T8263] tipc: Started in network mode [ 236.727574][ T8263] tipc: Node identity ac14140f, cluster identity 4711 [ 236.752080][ T8263] tipc: New replicast peer: 255.255.255.255 [ 236.781351][ T8263] tipc: Enabled bearer , priority 10 [ 236.789855][ T26] audit: type=1326 audit(1769909491.268:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.4.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42199aeb9 code=0x7fc00000 [ 237.650098][ T4283] Bluetooth: hci0: command 0x0405 tx timeout [ 237.748464][ T8296] loop6: detected capacity change from 0 to 256 [ 237.905347][ T6441] tipc: Node number set to 2886997007 [ 238.481507][ T8311] loop6: detected capacity change from 0 to 16 [ 238.507733][ T8273] loop2: detected capacity change from 0 to 32768 [ 238.602293][ T8311] erofs: (device loop6): mounted with root inode @ nid 36. [ 238.675935][ T26] audit: type=1800 audit(1769909493.158:64): pid=8311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1413" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 239.411990][ T8315] loop4: detected capacity change from 0 to 4096 [ 239.537199][ T8315] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 239.962838][ T8315] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 240.172011][ T8315] ntfs3: loop4: ino=0, attr_set_size [ 240.231139][ T8315] ntfs3: loop4: ino=0, attr_set_size [ 241.041643][ T8367] loop4: detected capacity change from 0 to 16 [ 241.065630][ T8361] loop5: detected capacity change from 0 to 4096 [ 241.101727][ T8367] erofs: (device loop4): mounted with root inode @ nid 36. [ 241.139794][ T8361] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 241.266658][ T26] audit: type=1800 audit(1769909495.748:65): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1434" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 241.294980][ T8361] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 241.386757][ T8361] ntfs3: loop5: ino=0, attr_set_size [ 241.435530][ T8361] ntfs3: loop5: ino=0, attr_set_size [ 243.220192][ T951] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 243.419847][ T951] usb 3-1: Using ep0 maxpacket: 16 [ 243.427138][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.516269][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.559820][ T951] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 243.619793][ T951] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 243.628921][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.714283][ T951] usb 3-1: config 0 descriptor?? [ 243.898777][ T8432] loop3: detected capacity change from 0 to 1024 [ 244.160964][ T8436] loop4: detected capacity change from 0 to 64 [ 244.222740][ T4481] hfsplus: b-tree write err: -5, ino 4 [ 244.282029][ T951] microsoft 0003:045E:07DA.0014: No inputs registered, leaving [ 244.318019][ T951] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 244.370159][ T951] microsoft 0003:045E:07DA.0014: no inputs found [ 244.389837][ T951] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway [ 244.523273][ T4333] usb 3-1: USB disconnect, device number 6 [ 244.711362][ T8440] fido_id[8440]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 245.175928][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1470'. [ 245.790200][ T8470] netlink: 'syz.3.1467': attribute type 1 has an invalid length. [ 248.062713][ T8496] loop3: detected capacity change from 0 to 32768 [ 248.183718][ T8523] loop2: detected capacity change from 0 to 8192 [ 248.206667][ T8496] XFS (loop3): Mounting V5 Filesystem [ 248.269387][ T7068] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 248.360775][ T8523] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.384151][ T8496] XFS (loop3): Ending clean mount [ 248.426022][ T8496] XFS (loop3): Quotacheck needed: Please wait. [ 248.481862][ T7068] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 248.524927][ T7068] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.555220][ T8496] XFS (loop3): Quotacheck: Done. [ 248.613968][ T7068] usb 7-1: config 0 interface 0 has no altsetting 0 [ 248.659397][ T7068] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 248.709938][ T7068] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.752118][ T7068] usb 7-1: config 0 descriptor?? [ 248.903151][ T4271] XFS (loop3): Unmounting Filesystem [ 249.084226][ T8555] loop4: detected capacity change from 0 to 128 [ 249.206050][ T7068] holtek 0003:1241:5015.0015: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.6-1/input0 [ 249.259189][ T7068] holtek 0003:1241:5015.0015: no inputs found [ 249.334492][ T8555] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 249.418556][ T7068] usb 7-1: USB disconnect, device number 4 [ 249.441065][ T8555] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.735947][ T8567] fido_id[8567]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 249.783290][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 250.050725][ T8577] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1488'. [ 250.291408][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1499'. [ 250.473947][ T8585] loop2: detected capacity change from 0 to 2048 [ 250.478640][ T8587] loop6: detected capacity change from 0 to 256 [ 250.535314][ T8587] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 250.574084][ T8585] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 250.600611][ T8591] sctp: [Deprecated]: syz.3.1502 (pid 8591) Use of int in maxseg socket option. [ 250.600611][ T8591] Use struct sctp_assoc_value instead [ 250.618114][ T8590] loop4: detected capacity change from 0 to 1024 [ 250.690792][ T8585] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 250.830547][ T8585] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 250.910444][ T8585] UDF-fs: Scanning with blocksize 512 failed [ 250.951358][ T5917] hfsplus: b-tree write err: -5, ino 4 [ 250.994758][ T8585] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.101217][ T8571] loop5: detected capacity change from 0 to 32768 [ 251.491370][ T8595] loop6: detected capacity change from 0 to 8192 [ 251.568140][ T8603] loop3: detected capacity change from 0 to 64 [ 252.741578][ T8632] loop6: detected capacity change from 0 to 256 [ 252.811384][ T8632] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 252.875960][ T8601] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1508 (8601) [ 252.943890][ T8632] exFAT-fs (loop6): hint_cluster is invalid (17) [ 252.996614][ T8601] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 253.045056][ T8601] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 253.101305][ T8601] BTRFS info (device loop5): setting nodatacow, compression disabled [ 253.148586][ T8601] BTRFS info (device loop5): force clearing of disk cache [ 253.202957][ T8601] BTRFS info (device loop5): enabling ssd optimizations [ 253.228281][ T8601] BTRFS info (device loop5): using spread ssd allocation scheme [ 253.332617][ T8601] BTRFS info (device loop5): disabling free space tree [ 253.382673][ T8649] vivid-003: disconnect [ 253.385693][ T8601] BTRFS info (device loop5): not using ssd optimizations [ 253.396785][ T8601] BTRFS info (device loop5): not using spread ssd allocation scheme [ 253.413839][ T8646] vivid-003: reconnect [ 253.543354][ T8645] set_capacity_and_notify: 1 callbacks suppressed [ 253.543370][ T8645] loop2: detected capacity change from 0 to 4096 [ 253.672680][ T8645] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 253.706534][ T8645] ntfs3: loop2: Failed to load $Extend. [ 253.783092][ T8601] BTRFS info (device loop5): rebuilding free space tree [ 253.839811][ T7068] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 253.858790][ T8601] BTRFS info (device loop5): disabling free space tree [ 253.931494][ T8601] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 254.000076][ T8601] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 254.059451][ T7068] usb 4-1: Using ep0 maxpacket: 32 [ 254.076985][ T26] audit: type=1800 audit(1769909508.558:66): pid=8601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1508" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 254.098762][ T7068] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.161969][ T7068] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.212600][ T7068] usb 4-1: config 0 interface 0 has no altsetting 0 [ 254.232753][ T5871] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 254.239319][ T7068] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 254.268902][ T7068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.357355][ T7068] usb 4-1: config 0 descriptor?? [ 254.804929][ T7068] pantherlord 0003:0F30:0111.0016: item fetching failed at offset 0/3 [ 254.814354][ T4333] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 254.841314][ T7068] pantherlord 0003:0F30:0111.0016: parse failed [ 254.847674][ T7068] pantherlord: probe of 0003:0F30:0111.0016 failed with error -22 [ 254.970546][ T8693] loop6: detected capacity change from 0 to 2048 [ 255.012080][ T4333] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 255.016819][ T5214] usb 4-1: USB disconnect, device number 11 [ 255.054486][ T4333] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 255.087901][ T8693] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 255.099217][ T4333] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 255.110108][ T4333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.225932][ T7167] EXT4-fs (loop6): unmounting filesystem. [ 255.733054][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.740083][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.832124][ T8716] loop3: detected capacity change from 0 to 4096 [ 255.892259][ T8721] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.921545][ T8723] loop5: detected capacity change from 0 to 256 [ 255.963709][ T4333] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 255.985426][ T4333] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input13 [ 256.020362][ T4333] input: failed to attach handler kbd to device input13, error: -5 [ 256.027619][ T8723] FAT-fs (loop5): Directory bread(block 64) failed [ 256.050060][ T5214] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 256.073512][ T8723] FAT-fs (loop5): Directory bread(block 65) failed [ 256.077726][ T4333] usb 3-1: USB disconnect, device number 7 [ 256.112940][ T8723] FAT-fs (loop5): Directory bread(block 66) failed [ 256.163459][ T8723] FAT-fs (loop5): Directory bread(block 67) failed [ 256.208919][ T8723] FAT-fs (loop5): Directory bread(block 68) failed [ 256.220389][ T8723] FAT-fs (loop5): Directory bread(block 69) failed [ 256.227320][ T8723] FAT-fs (loop5): Directory bread(block 70) failed [ 256.242936][ T5214] usb 7-1: Using ep0 maxpacket: 8 [ 256.252239][ T8727] tipc: New replicast peer: 172.30.1.4 [ 256.258331][ T5214] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 256.266043][ T8723] FAT-fs (loop5): Directory bread(block 71) failed [ 256.289707][ T8723] FAT-fs (loop5): Directory bread(block 72) failed [ 256.303991][ T5214] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.319889][ T8723] FAT-fs (loop5): Directory bread(block 73) failed [ 256.353077][ T5214] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.407979][ T5214] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 256.480204][ T5214] usb 7-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 256.531363][ T5214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.556483][ T8734] loop4: detected capacity change from 0 to 256 [ 256.587965][ T5214] usb 7-1: config 0 descriptor?? [ 256.632074][ T8734] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 256.720816][ T8734] FAT-fs (loop4): Filesystem has been set read-only [ 256.778489][ T8734] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 256.819215][ T8734] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 256.871501][ T26] audit: type=1800 audit(1769909511.358:67): pid=8734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1561" name="file1" dev="loop4" ino=1048781 res=0 errno=0 [ 257.047332][ T5214] hid (null): report_id 0 is invalid [ 257.068804][ T5214] redragon 0003:0C45:760B.0017: report_id 0 is invalid [ 257.110069][ T5214] redragon 0003:0C45:760B.0017: item 0 1 1 8 parsing failed [ 257.118060][ T5214] redragon: probe of 0003:0C45:760B.0017 failed with error -22 [ 257.130121][ T4333] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 257.262396][ T8748] loop4: detected capacity change from 0 to 8 [ 257.296866][ T951] usb 7-1: USB disconnect, device number 5 [ 257.329918][ T4333] usb 4-1: Using ep0 maxpacket: 8 [ 257.338760][ T4333] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.390034][ T4333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 257.419508][ T4333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.435465][ T4333] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 257.456342][ T4333] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.489321][ T4333] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 257.509799][ T4333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.527035][ T4333] usb 4-1: config 0 descriptor?? [ 257.622508][ T8738] loop5: detected capacity change from 0 to 40427 [ 257.645829][ T8738] F2FS-fs (loop5): invalid crc value [ 257.666892][ T8738] F2FS-fs (loop5): Found nat_bits in checkpoint [ 257.678787][ T8756] loop2: detected capacity change from 0 to 256 [ 257.736383][ T8738] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 257.820315][ T5214] usb 4-1: USB disconnect, device number 12 [ 258.889442][ T951] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 258.907627][ T8761] loop6: detected capacity change from 0 to 32768 [ 259.081250][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 259.095065][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.124176][ T951] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 259.175929][ T951] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 259.187240][ T951] usb 3-1: Manufacturer: syz [ 259.213183][ T951] usb 3-1: config 0 descriptor?? [ 259.436325][ T8795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1587'. [ 259.654585][ T951] cougar 0003:060B:700A.0018: unknown main item tag 0x0 [ 259.691035][ T951] cougar 0003:060B:700A.0018: unknown main item tag 0x0 [ 259.698122][ T951] cougar 0003:060B:700A.0018: unknown main item tag 0x0 [ 259.727668][ T951] cougar 0003:060B:700A.0018: unknown main item tag 0x0 [ 259.755702][ T951] cougar 0003:060B:700A.0018: unknown main item tag 0x0 [ 259.784110][ T951] cougar 0003:060B:700A.0018: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 259.877683][ T4333] usb 3-1: USB disconnect, device number 8 [ 260.021815][ T8805] fido_id[8805]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 260.085445][ T8808] device geneve2 entered promiscuous mode [ 260.308830][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1594'. [ 260.694789][ T8826] loop3: detected capacity change from 0 to 1024 [ 260.788686][ T8826] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 260.841465][ T8826] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #12: block 7: comm syz.3.1601: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 261.021073][ T8835] device team_slave_0 entered promiscuous mode [ 261.027325][ T8835] device team_slave_1 entered promiscuous mode [ 261.064554][ T8835] device macvtap1 entered promiscuous mode [ 261.075734][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 261.096029][ T8835] device team0 entered promiscuous mode [ 261.121238][ T8835] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 261.156013][ T8835] team0: Device macvtap1 is already an upper device of the team interface [ 261.197712][ T8841] loop3: detected capacity change from 0 to 256 [ 261.197941][ T8835] device team0 left promiscuous mode [ 261.227759][ T8835] device team_slave_0 left promiscuous mode [ 261.233953][ T8835] device team_slave_1 left promiscuous mode [ 261.280571][ T8841] FAT-fs (loop3): Directory bread(block 64) failed [ 261.324864][ T8841] FAT-fs (loop3): Directory bread(block 65) failed [ 261.363689][ T8841] FAT-fs (loop3): Directory bread(block 66) failed [ 261.401690][ T8841] FAT-fs (loop3): Directory bread(block 67) failed [ 261.416876][ T8841] FAT-fs (loop3): Directory bread(block 68) failed [ 261.424391][ T8841] FAT-fs (loop3): Directory bread(block 69) failed [ 261.431969][ T8841] FAT-fs (loop3): Directory bread(block 70) failed [ 261.438852][ T8841] FAT-fs (loop3): Directory bread(block 71) failed [ 261.455616][ T8822] loop2: detected capacity change from 0 to 32768 [ 261.462288][ T8841] FAT-fs (loop3): Directory bread(block 72) failed [ 261.462328][ T8841] FAT-fs (loop3): Directory bread(block 73) failed [ 261.621299][ T8822] XFS (loop2): Mounting V5 Filesystem [ 261.759813][ T8822] XFS (loop2): Ending clean mount [ 261.783024][ T8822] XFS (loop2): Quotacheck needed: Please wait. [ 261.904677][ T8822] XFS (loop2): Quotacheck: Done. [ 262.142678][ T4273] XFS (loop2): Unmounting Filesystem [ 262.310149][ T7065] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 262.522451][ T7065] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 262.549984][ T7065] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 262.582636][ T7065] usb 4-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 262.600195][ T7065] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.628475][ T7065] usb 4-1: config 0 descriptor?? [ 262.930072][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 262.956771][ T26] audit: type=1326 audit(1769909517.428:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8865 comm="syz.5.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5359aeb9 code=0x7fc00000 [ 263.018891][ T26] audit: type=1326 audit(1769909517.438:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8865 comm="syz.5.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f1c5359aeb9 code=0x7fc00000 [ 263.068224][ T7065] wacom 0003:056A:0043.0019: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 263.086455][ T7065] wacom 0003:056A:0043.0019: hidraw0: USB HID v0.06 Device [HID 056a:0043] on usb-dummy_hcd.3-1/input0 [ 263.101027][ T26] audit: type=1326 audit(1769909517.438:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8865 comm="syz.5.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5359aeb9 code=0x7fc00000 [ 263.110806][ T7065] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0043.0019/input/input14 [ 263.145615][ T8881] loop6: detected capacity change from 0 to 32768 [ 263.161030][ T26] audit: type=1326 audit(1769909517.438:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8865 comm="syz.5.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5359aeb9 code=0x7fc00000 [ 263.189214][ T8881] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop6 scanned by syz.6.1622 (8881) [ 263.195955][ T26] audit: type=1326 audit(1769909517.438:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8865 comm="syz.5.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5359aeb9 code=0x7fc00000 [ 263.229213][ T26] audit: type=1326 audit(1769909517.438:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8865 comm="syz.5.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5359aeb9 code=0x7fc00000 [ 263.234865][ T8881] BTRFS info (device loop6): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 263.281423][ T26] audit: type=1326 audit(1769909517.438:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8865 comm="syz.5.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5359aeb9 code=0x7fc00000 [ 263.294191][ T4333] usb 4-1: USB disconnect, device number 13 [ 263.374070][ T26] audit: type=1326 audit(1769909517.438:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8865 comm="syz.5.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5359aeb9 code=0x7fc00000 [ 263.375854][ T8881] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 263.445127][ T26] audit: type=1326 audit(1769909517.438:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8865 comm="syz.5.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5359aeb9 code=0x7fc00000 [ 263.470770][ T8881] BTRFS info (device loop6): using free space tree [ 263.519676][ T8881] BTRFS info (device loop6): enabling ssd optimizations [ 263.520762][ T26] audit: type=1326 audit(1769909517.438:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8865 comm="syz.5.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5359aeb9 code=0x7fc00000 [ 263.565714][ T8885] fido_id[8885]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 263.697076][ T7167] BTRFS info (device loop6): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 264.036211][ T8909] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 264.036211][ T8909] program syz.5.1636 not setting count and/or reply_len properly [ 264.594674][ T8928] device team_slave_0 entered promiscuous mode [ 264.601152][ T8928] device team_slave_1 entered promiscuous mode [ 264.620905][ T8928] device macvtap1 entered promiscuous mode [ 264.630014][ T4333] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 264.637756][ T8928] device team0 entered promiscuous mode [ 264.667260][ T8928] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 264.687827][ T8928] team0: Device macvtap1 is already an upper device of the team interface [ 264.725908][ T8928] device team0 left promiscuous mode [ 264.745118][ T8928] device team_slave_0 left promiscuous mode [ 264.751195][ T8928] device team_slave_1 left promiscuous mode [ 264.850124][ T4333] usb 4-1: Using ep0 maxpacket: 32 [ 264.857793][ T4333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.870842][ T4333] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 264.886163][ T4333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.908046][ T4333] usb 4-1: config 0 descriptor?? [ 265.328747][ T4333] cypress 0003:04B4:DE61.001A: item fetching failed at offset 0/2 [ 265.357547][ T8937] loop2: detected capacity change from 0 to 32768 [ 265.372652][ T4333] cypress 0003:04B4:DE61.001A: parse failed [ 265.379057][ T4333] cypress: probe of 0003:04B4:DE61.001A failed with error -22 [ 265.556966][ T6441] usb 4-1: USB disconnect, device number 14 [ 265.557230][ T8939] loop6: detected capacity change from 0 to 32768 [ 265.600628][ T8941] loop5: detected capacity change from 0 to 1024 [ 265.642092][ T8943] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 265.642092][ T8943] program syz.2.1640 not setting count and/or reply_len properly [ 265.661143][ T8939] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1639 (8939) [ 265.692565][ T8939] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 265.704141][ T8941] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 265.709633][ T8939] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 265.721504][ T8939] BTRFS info (device loop6): setting nodatacow, compression disabled [ 265.731809][ T8939] BTRFS info (device loop6): force clearing of disk cache [ 265.739087][ T8939] BTRFS info (device loop6): enabling ssd optimizations [ 265.746541][ T8939] BTRFS info (device loop6): using spread ssd allocation scheme [ 265.754785][ T8939] BTRFS info (device loop6): disabling free space tree [ 265.762132][ T8939] BTRFS info (device loop6): not using ssd optimizations [ 265.769207][ T8939] BTRFS info (device loop6): not using spread ssd allocation scheme [ 265.774082][ T8941] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #12: block 7: comm syz.5.1641: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 266.011765][ T8939] BTRFS info (device loop6): rebuilding free space tree [ 266.040082][ T8963] autofs4:pid:8963:autofs_fill_super: called with bogus options [ 266.075156][ T8939] BTRFS info (device loop6): disabling free space tree [ 266.085929][ T8939] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 266.118385][ T8939] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 266.180334][ T5871] EXT4-fs (loop5): unmounting filesystem. [ 266.386271][ T8968] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1645'. [ 266.444962][ T8968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1645'. [ 266.445206][ T8972] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1643'. [ 266.468920][ T7167] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 266.530088][ T8968] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1645'. [ 266.965769][ T4394] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop6 scanned by udevd (4394) [ 267.236203][ T8987] loop2: detected capacity change from 0 to 512 [ 267.307473][ T8987] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 267.349904][ T8987] EXT4-fs (loop2): Invalid default hash set in the superblock [ 267.671778][ T8995] loop5: detected capacity change from 0 to 256 [ 267.751764][ T8995] FAT-fs (loop5): Directory bread(block 64) failed [ 267.758414][ T8995] FAT-fs (loop5): Directory bread(block 65) failed [ 267.786894][ T8995] FAT-fs (loop5): Directory bread(block 66) failed [ 267.809165][ T8995] FAT-fs (loop5): Directory bread(block 67) failed [ 267.829962][ T7065] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 267.840797][ T8995] FAT-fs (loop5): Directory bread(block 68) failed [ 267.847441][ T8995] FAT-fs (loop5): Directory bread(block 69) failed [ 267.875180][ T8995] FAT-fs (loop5): Directory bread(block 70) failed [ 267.899964][ T8995] FAT-fs (loop5): Directory bread(block 71) failed [ 267.906747][ T8995] FAT-fs (loop5): Directory bread(block 72) failed [ 267.930315][ T8995] FAT-fs (loop5): Directory bread(block 73) failed [ 268.038711][ T7065] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 268.061349][ T7065] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 268.080849][ T7065] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.095322][ T7065] usb 4-1: config 0 descriptor?? [ 268.512563][ T7065] logitech 0003:046D:C626.001B: item fetching failed at offset 8/11 [ 268.521687][ T7065] logitech 0003:046D:C626.001B: parse failed [ 268.527792][ T7065] logitech: probe of 0003:046D:C626.001B failed with error -22 [ 268.722118][ T4277] usb 4-1: USB disconnect, device number 15 [ 269.392811][ T9007] device team_slave_0 entered promiscuous mode [ 269.399082][ T9007] device team_slave_1 entered promiscuous mode [ 269.484977][ T9007] device macvtap1 entered promiscuous mode [ 269.495963][ T9011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1662'. [ 269.509862][ T9007] device team0 entered promiscuous mode [ 269.530229][ T9007] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 269.538568][ T9007] team0: Device macvtap1 is already an upper device of the team interface [ 269.577198][ T9007] device team0 left promiscuous mode [ 269.596796][ T9007] device team_slave_0 left promiscuous mode [ 269.602914][ T9007] device team_slave_1 left promiscuous mode [ 270.180752][ T9004] loop6: detected capacity change from 0 to 32768 [ 270.300145][ T9004] XFS (loop6): Mounting V5 Filesystem [ 270.448918][ T9010] loop5: detected capacity change from 0 to 40427 [ 270.511024][ T9004] XFS (loop6): Ending clean mount [ 270.550403][ T9010] F2FS-fs (loop5): invalid crc value [ 270.578750][ T9010] F2FS-fs (loop5): Found nat_bits in checkpoint [ 270.719202][ T7167] XFS (loop6): Unmounting Filesystem [ 270.760599][ T9010] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 271.063213][ T5871] syz-executor: attempt to access beyond end of device [ 271.063213][ T5871] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 271.296860][ T9044] tipc: Started in network mode [ 271.302421][ T9044] tipc: Node identity ac14140f, cluster identity 4711 [ 271.311149][ T9035] loop3: detected capacity change from 0 to 32768 [ 271.337841][ T9044] tipc: New replicast peer: 255.255.255.255 [ 271.363886][ T9044] tipc: Enabled bearer , priority 10 [ 271.540051][ T9035] XFS (loop3): Mounting V5 Filesystem [ 271.682444][ T9035] XFS (loop3): Ending clean mount [ 271.718685][ T9035] XFS (loop3): Quotacheck needed: Please wait. [ 271.807798][ T9035] XFS (loop3): Quotacheck: Done. [ 271.938444][ T4271] XFS (loop3): Unmounting Filesystem [ 272.489580][ T6441] tipc: Node number set to 2886997007 [ 274.184626][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.196490][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.205146][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.213331][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.221151][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.228414][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.372068][ T9060] chnl_net:caif_netlink_parms(): no params data found [ 274.424876][ T9060] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.432387][ T9060] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.441445][ T9060] device bridge_slave_0 entered promiscuous mode [ 274.449815][ T9060] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.456959][ T9060] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.466362][ T9060] device bridge_slave_1 entered promiscuous mode [ 274.556870][ T9060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.562274][ T9074] loop3: detected capacity change from 0 to 64 [ 274.573457][ T9060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.704874][ T9060] team0: Port device team_slave_0 added [ 274.788308][ T9060] team0: Port device team_slave_1 added [ 274.917022][ T9060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.959794][ T9060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.016565][ T9060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.059170][ T9060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.083666][ T9060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.166696][ T9060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.350580][ T9060] device hsr_slave_0 entered promiscuous mode [ 275.361950][ T9060] device hsr_slave_1 entered promiscuous mode [ 275.379909][ T9060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.397725][ T9060] Cannot create hsr debugfs directory [ 275.521974][ T9068] loop2: detected capacity change from 0 to 32768 [ 275.660097][ T4277] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 275.846453][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 275.846470][ T26] audit: type=1326 audit(1769909530.328:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9093 comm="syz.2.1693" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2fb99aeb9 code=0x0 [ 275.875578][ T4277] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 275.907371][ T4277] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 275.923549][ T4277] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.940986][ T4277] usb 7-1: Product: syz [ 275.950301][ T4277] usb 7-1: Manufacturer: syz [ 275.960035][ T4277] usb 7-1: SerialNumber: syz [ 275.974572][ T4277] usb 7-1: config 0 descriptor?? [ 275.991171][ T4277] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 276.001483][ T9086] loop3: detected capacity change from 0 to 32768 [ 276.010061][ T6441] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 276.032387][ T4277] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 276.047368][ T4277] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 276.075587][ T9086] JBD2: Ignoring recovery information on journal [ 276.092176][ T9060] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 276.119215][ T4277] usb 7-1: media controller created [ 276.186244][ T4277] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.208857][ T9086] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 276.226666][ T9060] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 276.236867][ T6441] usb 6-1: Using ep0 maxpacket: 16 [ 276.246309][ T6441] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.280084][ T6441] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.290392][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 276.308557][ T6441] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 276.318728][ T6441] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.335242][ T9060] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 276.345660][ T6441] usb 6-1: config 0 descriptor?? [ 276.374739][ T9060] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 276.427073][ T4277] DVB: Unable to find symbol mt352_attach() [ 276.456223][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 276.534718][ T4277] DVB: Unable to find symbol nxt6000_attach() [ 276.542575][ T4277] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 276.574259][ T4277] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input17 [ 276.608318][ T4277] dvb-usb: schedule remote query interval to 1000 msecs. [ 276.627217][ T4277] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 276.666333][ T4277] dvb-usb: bulk message failed: -22 (7/0) [ 276.679924][ T4277] dvb-usb: bulk message failed: -22 (7/0) [ 276.737280][ T4277] usb 7-1: USB disconnect, device number 6 [ 276.777250][ T6441] hid-picolcd 0003:04D8:F002.001C: unknown main item tag 0x0 [ 276.806119][ T9060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.819821][ T6441] hid-picolcd 0003:04D8:F002.001C: unknown main item tag 0x0 [ 276.827305][ T6441] hid-picolcd 0003:04D8:F002.001C: unknown main item tag 0x0 [ 276.879383][ T6441] hid-picolcd 0003:04D8:F002.001C: unknown main item tag 0x0 [ 276.888304][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.896303][ T6441] hid-picolcd 0003:04D8:F002.001C: unknown main item tag 0x0 [ 276.896337][ T6441] hid-picolcd 0003:04D8:F002.001C: unknown main item tag 0x0 [ 276.923787][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.954006][ T9060] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.040034][ T6441] hid-picolcd 0003:04D8:F002.001C: No report with id 0xf3 found [ 277.045766][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.047774][ T6441] hid-picolcd 0003:04D8:F002.001C: No report with id 0xf4 found [ 277.051862][ T4277] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 277.104653][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.108460][ T6441] usb 6-1: USB disconnect, device number 10 [ 277.140675][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.147987][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.226612][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.260602][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.297904][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.305145][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.352873][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.364962][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.386270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.426393][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.488286][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.527537][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.537080][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.575151][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.586113][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.603592][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.621470][ T9060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.653265][ T9060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.668241][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.678869][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.230808][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.242709][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.258556][ T9060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.322476][ T9117] loop3: detected capacity change from 0 to 40427 [ 278.346680][ T9117] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 278.366738][ T9117] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 278.375091][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 278.411265][ T9117] F2FS-fs (loop3): invalid crc value [ 278.424859][ T9117] F2FS-fs (loop3): Found nat_bits in checkpoint [ 278.572282][ T9117] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 278.840771][ T4271] syz-executor: attempt to access beyond end of device [ 278.840771][ T4271] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 279.061351][ T9153] loop2: detected capacity change from 0 to 128 [ 279.068496][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1712'. [ 279.160379][ T9153] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 279.214475][ T9153] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.277573][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1715'. [ 279.344910][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1715'. [ 279.369932][ T9160] netlink: 'syz.5.1715': attribute type 6 has an invalid length. [ 279.441983][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 279.858509][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.881242][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.953978][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.969068][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.992804][ T9060] device veth0_vlan entered promiscuous mode [ 280.028473][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.051385][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.096766][ T9060] device veth1_vlan entered promiscuous mode [ 280.122307][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1720'. [ 280.205194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.218233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.238341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.270870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.294597][ T9060] device veth0_macvtap entered promiscuous mode [ 280.328622][ T9060] device veth1_macvtap entered promiscuous mode [ 280.376132][ T9177] loop2: detected capacity change from 0 to 4096 [ 280.392056][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.426815][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.438817][ T9177] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 280.459836][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 280.482105][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.526341][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.557423][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1724'. [ 280.583101][ T9177] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 280.602988][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.620191][ T9177] ntfs3: loop2: mft corrupted [ 280.636369][ T9177] ntfs3: loop2: Failed to load $Extend. [ 280.649751][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.668173][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.719555][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.748784][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.760472][ T9177] ntfs3: loop2: ino=5, "/" directory corrupted [ 280.783189][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.856414][ T9060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.897066][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.924430][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.958744][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.024796][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.069010][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.100914][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.124996][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.141826][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.158258][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.174380][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.188796][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.200958][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.211475][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.222942][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.235743][ T9060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.263100][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.293310][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.332188][ T9060] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.386858][ T9060] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.429772][ T9060] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.438552][ T9060] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.522544][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1735'. [ 281.533456][ T9207] loop5: detected capacity change from 0 to 256 [ 281.552166][ T9207] exfat: Deprecated parameter 'namecase' [ 281.558319][ T9207] exfat: Deprecated parameter 'utf8' [ 281.658814][ T9207] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 281.742122][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.759851][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.796055][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.875174][ T4481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.905242][ T4481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.946451][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.381467][ T9225] device team_slave_0 entered promiscuous mode [ 282.387749][ T9225] device team_slave_1 entered promiscuous mode [ 282.414871][ T9225] device macvtap1 entered promiscuous mode [ 282.453777][ T9225] device team0 entered promiscuous mode [ 282.476218][ T9225] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 282.511106][ T9225] team0: Device macvtap1 is already an upper device of the team interface [ 282.530088][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 282.578619][ T9225] device team0 left promiscuous mode [ 282.592219][ T9225] device team_slave_0 left promiscuous mode [ 282.598231][ T9225] device team_slave_1 left promiscuous mode [ 282.766558][ T9235] tipc: Enabling of bearer rejected, failed to enable media [ 282.833452][ T9237] loop2: detected capacity change from 0 to 256 [ 282.897418][ T9237] FAT-fs (loop2): Directory bread(block 64) failed [ 282.959906][ T9237] FAT-fs (loop2): Directory bread(block 65) failed [ 282.966649][ T9237] FAT-fs (loop2): Directory bread(block 66) failed [ 282.999901][ T9237] FAT-fs (loop2): Directory bread(block 67) failed [ 283.006785][ T9237] FAT-fs (loop2): Directory bread(block 68) failed [ 283.068761][ T9237] FAT-fs (loop2): Directory bread(block 69) failed [ 283.101201][ T9237] FAT-fs (loop2): Directory bread(block 70) failed [ 283.107824][ T9237] FAT-fs (loop2): Directory bread(block 71) failed [ 283.135537][ T9237] FAT-fs (loop2): Directory bread(block 72) failed [ 283.161362][ T9237] FAT-fs (loop2): Directory bread(block 73) failed [ 283.915767][ T9261] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1760'. [ 284.686907][ T9278] tipc: Enabling of bearer rejected, failed to enable media [ 284.993236][ T9257] loop2: detected capacity change from 0 to 32768 [ 285.216750][ T9257] XFS (loop2): Mounting V5 Filesystem [ 285.236958][ T9282] loop5: detected capacity change from 0 to 8192 [ 285.319141][ T9282] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 285.335427][ T9257] XFS (loop2): Ending clean mount [ 285.344919][ T9257] XFS (loop2): Quotacheck needed: Please wait. [ 285.394352][ T9282] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 285.471272][ T9282] REISERFS (device loop5): using journaled data mode [ 285.478044][ T9282] reiserfs: using flush barriers [ 285.523028][ T9257] XFS (loop2): Quotacheck: Done. [ 285.583810][ T9282] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 285.667796][ T9282] REISERFS (device loop5): checking transaction log (loop5) [ 285.718968][ T9282] REISERFS (device loop5): Using r5 hash to sort names [ 285.748816][ T9282] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 285.819600][ T9282] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 285.821268][ T4273] XFS (loop2): Unmounting Filesystem [ 285.939977][ T6441] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 286.150080][ T6441] usb 7-1: Using ep0 maxpacket: 32 [ 286.171384][ T6441] usb 7-1: config 0 has an invalid interface number: 76 but max is 0 [ 286.210156][ T6441] usb 7-1: config 0 has no interface number 0 [ 286.240774][ T6441] usb 7-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 286.279752][ T6441] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.319808][ T6441] usb 7-1: Product: syz [ 286.330328][ T6441] usb 7-1: Manufacturer: syz [ 286.349828][ T6441] usb 7-1: SerialNumber: syz [ 286.358786][ T6441] usb 7-1: config 0 descriptor?? [ 286.395118][ T6441] dw2102: su3000_identify_state [ 286.412289][ T6441] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 286.432639][ T6441] dw2102: su3000_power_ctrl: 1, initialized 0 [ 286.438878][ T6441] dvb-usb: bulk message failed: -22 (2/0) [ 286.463007][ T6441] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 286.484953][ T9311] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 286.510409][ T6441] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 286.530205][ T6441] usb 7-1: media controller created [ 286.572545][ T6441] dvb-usb: bulk message failed: -22 (6/0) [ 286.583040][ T9294] loop7: detected capacity change from 0 to 32768 [ 286.587391][ T6441] dw2102: i2c transfer failed. [ 286.668418][ T9306] dvb-usb: bulk message failed: -22 (3/0) [ 286.679032][ T9306] dw2102: i2c transfer failed. [ 286.694348][ T9306] dvb-usb: bulk message failed: -22 (4/0) [ 286.704764][ T9313] loop2: detected capacity change from 0 to 2048 [ 286.714240][ T9306] dw2102: i2c transfer failed. [ 286.724436][ T6441] dvb-usb: bulk message failed: -22 (6/0) [ 286.740743][ T6441] dw2102: i2c transfer failed. [ 286.745917][ T6441] dvb-usb: bulk message failed: -22 (6/0) [ 286.762753][ T6441] dw2102: i2c transfer failed. [ 286.782505][ T9294] ialloc: diAlloc returned -5! [ 286.790654][ T9316] ialloc: diAlloc returned -5! [ 286.803869][ T6441] dvb-usb: bulk message failed: -22 (6/0) [ 286.817823][ T9317] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.823882][ T6441] dw2102: i2c transfer failed. [ 286.892152][ T6441] dvb-usb: bulk message failed: -22 (6/0) [ 286.928692][ T6441] dw2102: i2c transfer failed. [ 286.949947][ T6441] dvb-usb: bulk message failed: -22 (6/0) [ 286.970085][ T6441] dw2102: i2c transfer failed. [ 286.974919][ T6441] dvb-usb: MAC address: 02:02:02:02:02:02 [ 287.069991][ T6441] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.122914][ T6441] dvb-usb: bulk message failed: -22 (3/0) [ 287.138200][ T6441] dw2102: command 0x0e transfer failed. [ 287.175494][ T6441] dvb-usb: bulk message failed: -22 (3/0) [ 287.205549][ T6441] dw2102: command 0x0e transfer failed. [ 287.539916][ T6441] dvb-usb: bulk message failed: -22 (3/0) [ 287.545826][ T6441] dw2102: command 0x0e transfer failed. [ 287.574015][ T6441] dvb-usb: bulk message failed: -22 (3/0) [ 287.606777][ T9330] netlink: 'syz.5.1788': attribute type 30 has an invalid length. [ 287.607107][ T6441] dw2102: command 0x0e transfer failed. [ 287.627257][ T6441] dvb-usb: bulk message failed: -22 (1/0) [ 287.634577][ T6441] dw2102: command 0x51 transfer failed. [ 287.667362][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1789'. [ 287.771482][ T6441] DVB: Unable to find symbol ds3000_attach() [ 287.778831][ T6441] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 287.813979][ T9338] loop5: detected capacity change from 0 to 512 [ 287.916648][ T9338] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1790: invalid indirect mapped block 256 (level 2) [ 287.972728][ T9338] EXT4-fs (loop5): 2 truncates cleaned up [ 287.999845][ T9338] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 288.179837][ T6441] rc_core: IR keymap rc-su3000 not found [ 288.185690][ T6441] Registered IR keymap rc-empty [ 288.196862][ T6441] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 288.197215][ T9] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm kworker/u4:0: bg 0: block 5: invalid block bitmap [ 288.211477][ T6441] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input18 [ 288.261171][ T9] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 288.286611][ T9] EXT4-fs (loop5): This should not happen!! Data will be lost [ 288.286611][ T9] [ 288.287064][ T6441] dvb-usb: schedule remote query interval to 150 msecs. [ 288.301690][ T9] EXT4-fs (loop5): Total free blocks count 0 [ 288.327817][ T9] EXT4-fs (loop5): Free/Dirty block details [ 288.339784][ T6441] dw2102: su3000_power_ctrl: 0, initialized 1 [ 288.359773][ T6441] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 288.368078][ T9] EXT4-fs (loop5): free_blocks=0 [ 288.405859][ T9] EXT4-fs (loop5): dirty_blocks=66 [ 288.427790][ T9] EXT4-fs (loop5): Block reservation details [ 288.469457][ T9] EXT4-fs (loop5): i_reserved_data_blocks=66 [ 288.486881][ T6441] usb 7-1: USB disconnect, device number 7 [ 288.489586][ T9] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 288.507667][ T7068] dvb-usb: bulk message failed: -22 (1/0) [ 288.527459][ T7068] dw2102: i2c transfer failed. [ 288.549035][ T9351] program syz.2.1796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.613271][ T6441] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 288.732738][ T9358] loop5: detected capacity change from 0 to 64 [ 289.373858][ T9372] loop2: detected capacity change from 0 to 1024 [ 289.442573][ T9372] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 289.578438][ T9374] loop6: detected capacity change from 0 to 8192 [ 289.652338][ T9374] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 289.783781][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 290.941489][ T9388] loop6: detected capacity change from 0 to 32768 [ 291.011491][ T9406] loop2: detected capacity change from 0 to 256 [ 291.074278][ T9406] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 291.168502][ T9406] exFAT-fs (loop2): hint_cluster is invalid (17) [ 291.371642][ T9413] vivid-000: disconnect [ 291.398972][ T9412] vivid-000: reconnect [ 291.660188][ T9399] loop5: detected capacity change from 0 to 32768 [ 291.701478][ T9399] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 292.125931][ T4890] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 292.197983][ T9427] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 292.197983][ T9427] The task syz.5.1828 (9427) triggered the difference, watch for misbehavior. [ 292.392556][ T9383] loop3: detected capacity change from 0 to 32768 [ 292.508055][ T9383] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 292.558575][ T9383] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 292.685918][ T9383] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 292.911146][ T9383] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 293.368739][ T9423] loop2: detected capacity change from 0 to 40427 [ 293.416176][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1836'. [ 293.437839][ T9423] F2FS-fs (loop2): invalid crc value [ 293.488042][ T9423] F2FS-fs (loop2): Found nat_bits in checkpoint [ 293.707441][ T9423] F2FS-fs (loop2): Start checkpoint disabled! [ 293.786669][ T9423] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 294.407838][ T9] kworker/u4:0: attempt to access beyond end of device [ 294.407838][ T9] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 295.365303][ T9482] loop2: detected capacity change from 0 to 2048 [ 295.444080][ T9482] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.739857][ T4311] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 295.788662][ T9491] loop7: detected capacity change from 0 to 1764 [ 295.861592][ T9491] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 295.905539][ T9462] loop5: detected capacity change from 0 to 32768 [ 295.939996][ T4311] usb 4-1: Using ep0 maxpacket: 32 [ 295.974295][ T4311] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 296.044466][ T4311] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 296.063262][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.072370][ T4311] usb 4-1: Product: syz [ 296.076597][ T4311] usb 4-1: Manufacturer: syz [ 296.082182][ T4311] usb 4-1: SerialNumber: syz [ 296.103541][ T9462] XFS (loop5): Mounting V5 Filesystem [ 296.117172][ T9469] loop6: detected capacity change from 0 to 32768 [ 296.195627][ T9469] [ 296.195627][ T9469] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.195627][ T9469] [ 296.378238][ T9462] XFS (loop5): Ending clean mount [ 296.419564][ T4311] usb 4-1: selecting invalid altsetting 1 [ 296.437716][ T9469] ERROR: (device loop6): diWrite: ixpxd invalid [ 296.437716][ T9469] [ 296.466989][ T9462] XFS (loop5): Quotacheck needed: Please wait. [ 296.601936][ T9462] XFS (loop5): Quotacheck: Done. [ 296.618690][ T9469] ERROR: (device loop6): txCommit: [ 296.618690][ T9469] [ 296.631289][ T4311] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 296.631376][ T4311] dvb_usb_lmedm04: probe of 4-1:2.0 failed with error -22 [ 296.730063][ T9509] ERROR: (device loop6): diWrite: ixpxd invalid [ 296.730063][ T9509] [ 296.756134][ T9516] netlink: 'syz.7.1857': attribute type 1 has an invalid length. [ 296.759984][ T9518] loop2: detected capacity change from 0 to 128 [ 296.771038][ T9509] ERROR: (device loop6): txCommit: [ 296.771038][ T9509] [ 296.834305][ T9518] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 296.859995][ T5871] XFS (loop5): Unmounting Filesystem [ 296.887078][ T7167] [ 296.887078][ T7167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.887078][ T7167] [ 296.931040][ T9518] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 296.945018][ T9518] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.1856: checksumming directory block 0 [ 296.946460][ T7167] [ 296.946460][ T7167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.946460][ T7167] [ 297.166139][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 297.867133][ T9547] netlink: 'syz.7.1867': attribute type 5 has an invalid length. [ 298.563629][ T5213] usb 4-1: USB disconnect, device number 16 [ 299.133757][ T9579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1879'. [ 299.407591][ T9589] loop3: detected capacity change from 0 to 736 [ 300.296855][ T9612] loop7: detected capacity change from 0 to 1024 [ 300.330971][ T9612] EXT4-fs: Ignoring removed orlov option [ 300.450807][ T9612] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 300.698600][ T9590] loop2: detected capacity change from 0 to 32768 [ 300.718485][ T9624] ALSA: mixer_oss: invalid index 100000 [ 300.795723][ T9060] EXT4-fs (loop7): unmounting filesystem. [ 300.904355][ T9590] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 301.016750][ T9628] loop6: detected capacity change from 0 to 4096 [ 301.057104][ T9628] EXT4-fs: Ignoring removed bh option [ 301.132966][ T4273] (syz-executor,4273,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 301.164081][ T9628] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 301.197820][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 301.258236][ T9638] loop5: detected capacity change from 0 to 128 [ 301.268535][ T9638] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 301.280881][ T9638] hpfs: filesystem error: improperly stopped [ 301.286933][ T9638] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 301.295210][ T9638] hpfs: You really don't want any checks? You are crazy... [ 301.309808][ T9638] hpfs: hpfs_map_sector(): read error [ 301.315268][ T9638] hpfs: code page support is disabled [ 301.330901][ T9638] hpfs: hpfs_map_4sectors(): unaligned read [ 301.338277][ T9638] hpfs: hpfs_map_4sectors(): unaligned read [ 301.383639][ T9638] hpfs: filesystem error: unable to find root dir [ 301.432129][ T9628] EXT4-fs error (device loop6): ext4_get_first_dir_block:3603: inode #12: block 80: comm syz.6.1899: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 301.562044][ T9607] loop3: detected capacity change from 0 to 32768 [ 301.579043][ T9638] hpfs: hpfs_map_4sectors(): unaligned read [ 301.608043][ T9638] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 301.620552][ T9607] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 301.658736][ T9628] EXT4-fs (loop6): Remounting filesystem read-only [ 301.694339][ T9628] EXT4-fs error (device loop6): ext4_get_first_dir_block:3605: inode #12: comm syz.6.1899: directory missing '..' [ 301.792738][ T9628] EXT4-fs (loop6): Remounting filesystem read-only [ 302.060656][ T7167] EXT4-fs (loop6): unmounting filesystem. [ 302.103129][ T4382] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 303.212302][ T9676] sp0: Synchronizing with TNC [ 303.247107][ T9642] loop7: detected capacity change from 0 to 40427 [ 303.285492][ T9675] [U] è [ 303.306557][ T9642] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 303.348821][ T9642] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 303.393948][ T9642] F2FS-fs (loop7): invalid crc value [ 303.498811][ T9642] F2FS-fs (loop7): Found nat_bits in checkpoint [ 303.807116][ T9642] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 303.826272][ T9642] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 303.831186][ T9688] loop2: detected capacity change from 0 to 4096 [ 303.974272][ T9688] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 304.431595][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 304.734747][ T9724] Bluetooth: MGMT ver 1.22 [ 305.084067][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1936'. [ 305.091430][ T9738] loop3: detected capacity change from 0 to 256 [ 305.161379][ T9738] exfat: Deprecated parameter 'namecase' [ 305.212764][ T9738] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 305.682466][ T9749] loop7: detected capacity change from 0 to 64 [ 305.804472][ T9749] minix_free_block (loop7:21): bit already cleared [ 305.849795][ T9749] Trying to free block not in datazone [ 305.956987][ T9753] loop3: detected capacity change from 0 to 1024 [ 306.081616][ T9753] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1942: Invalid block bitmap block 0 in block_group 0 [ 306.154716][ T9759] loop5: detected capacity change from 0 to 1764 [ 306.200284][ T9753] Quota error (device loop3): write_blk: dquota write failed [ 306.207790][ T9753] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 306.300369][ T9753] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.1942: Failed to acquire dquot type 0 [ 306.345496][ T9753] EXT4-fs error (device loop3): ext4_free_blocks:6221: comm syz.3.1942: Freeing blocks not in datazone - block = 0, count = 4096 [ 306.417476][ T9753] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1942: Invalid inode bitmap blk 0 in block_group 0 [ 306.431377][ T5917] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 306.449717][ T5917] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:8: Failed to release dquot type 0 [ 306.472532][ T9753] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 306.507731][ T9741] loop2: detected capacity change from 0 to 32768 [ 306.515804][ T9753] EXT4-fs (loop3): 1 orphan inode deleted [ 306.547553][ T9753] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 306.551626][ T9741] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 306.718177][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 306.860476][ T4890] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 307.087512][ T9771] sctp: [Deprecated]: syz.5.1949 (pid 9771) Use of int in maxseg socket option. [ 307.087512][ T9771] Use struct sctp_assoc_value instead [ 307.273070][ T9778] autofs4:pid:9778:autofs_fill_super: called with bogus options [ 307.710007][ T5220] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 307.936455][ T5220] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 307.954426][ T5220] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 307.973815][ T5220] usb 7-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 307.984261][ T5220] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.006208][ T5220] usb 7-1: config 0 descriptor?? [ 308.173343][ T9793] loop5: detected capacity change from 0 to 32768 [ 308.256582][ T9793] XFS (loop5): Mounting V5 Filesystem [ 308.335649][ T9793] XFS (loop5): Ending clean mount [ 308.345434][ T9793] XFS (loop5): Quotacheck needed: Please wait. [ 308.442011][ T5220] wacom 0003:056A:0043.001D: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 308.457566][ T9793] XFS (loop5): Quotacheck: Done. [ 308.491325][ T5220] wacom 0003:056A:0043.001D: hidraw0: USB HID v0.06 Device [HID 056a:0043] on usb-dummy_hcd.6-1/input0 [ 308.533682][ T5220] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0043.001D/input/input19 [ 308.659463][ T5220] usb 7-1: USB disconnect, device number 8 [ 308.689642][ T5871] XFS (loop5): Unmounting Filesystem [ 308.903240][ T9813] fido_id[9813]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 309.925646][ T9833] loop7: detected capacity change from 0 to 1024 [ 310.023899][ T9840] loop6: detected capacity change from 0 to 512 [ 310.032304][ T9841] loop5: detected capacity change from 0 to 256 [ 310.045548][ T9841] exfat: Deprecated parameter 'utf8' [ 310.061642][ T9841] exfat: Deprecated parameter 'utf8' [ 310.067033][ T9841] exfat: Deprecated parameter 'namecase' [ 310.080489][ T9840] EXT4-fs (loop6): 1 truncate cleaned up [ 310.086300][ T9840] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 310.102192][ T9841] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 310.355558][ T5917] hfsplus: b-tree write err: -5, ino 4 [ 310.386998][ T7167] EXT4-fs (loop6): unmounting filesystem. [ 310.819186][ T9859] loop7: detected capacity change from 0 to 256 [ 310.848844][ T9859] exFAT-fs (loop7): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 310.971520][ T26] audit: type=1800 audit(1769909565.458:127): pid=9859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1983" name="file1" dev="loop7" ino=1048837 res=0 errno=0 [ 311.070126][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1985'. [ 311.325204][ T9866] netlink: 1008 bytes leftover after parsing attributes in process `syz.7.1987'. [ 311.686158][ T9848] loop2: detected capacity change from 0 to 32768 [ 311.809871][ T9846] loop3: detected capacity change from 0 to 40427 [ 311.842735][ T9846] F2FS-fs (loop3): invalid crc value [ 311.866094][ T9848] XFS (loop2): Mounting V5 Filesystem [ 311.983648][ T9848] XFS (loop2): Ending clean mount [ 311.992442][ T9848] XFS (loop2): Quotacheck needed: Please wait. [ 312.002677][ T9846] F2FS-fs (loop3): Found nat_bits in checkpoint [ 312.066931][ T9846] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 312.143097][ T9848] XFS (loop2): Quotacheck: Done. [ 312.340478][ T4271] syz-executor: attempt to access beyond end of device [ 312.340478][ T4271] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 312.368637][ T4273] XFS (loop2): Unmounting Filesystem [ 314.117302][ T9939] loop3: detected capacity change from 0 to 128 [ 314.129780][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 314.183087][ T9939] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 314.279870][ T9939] hpfs: filesystem error: improperly stopped [ 314.308291][ T9939] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 314.328025][ T9939] hpfs: You really don't want any checks? You are crazy... [ 314.374660][ T9939] hpfs: hpfs_map_sector(): read error [ 314.382565][ T9942] loop5: detected capacity change from 0 to 4096 [ 314.399799][ T9939] hpfs: code page support is disabled [ 314.405555][ T9939] hpfs: hpfs_map_4sectors(): unaligned read [ 314.419973][ T9939] hpfs: hpfs_map_4sectors(): unaligned read [ 314.427906][ T9942] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 314.455532][ T9939] hpfs: filesystem error: unable to find root dir [ 314.701645][ T5871] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22. [ 314.708277][ T5871] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 314.766605][ T5871] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 314.926244][ T9958] syz.5.2021 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 314.998259][ T9960] loop2: detected capacity change from 0 to 128 [ 315.254131][ T9964] loop5: detected capacity change from 0 to 2048 [ 315.291655][ T9967] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.321810][ T26] audit: type=1800 audit(1769909569.808:128): pid=9964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2025" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 315.418559][ T9972] loop3: detected capacity change from 0 to 256 [ 315.502931][ T9972] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 315.618893][ T9972] exFAT-fs (loop3): hint_cluster is invalid (17) [ 315.766998][ T9974] loop2: detected capacity change from 0 to 8192 [ 315.833432][ T9974] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 315.981962][ T9974] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 316.022547][ T9974] REISERFS (device loop2): using ordered data mode [ 316.029121][ T9974] reiserfs: using flush barriers [ 316.039768][ T9974] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 316.077979][ T9974] REISERFS (device loop2): checking transaction log (loop2) [ 316.127119][ T9974] REISERFS (device loop2): Using rupasov hash to sort names [ 316.159894][ T9974] REISERFS (device loop2): using 3.5.x disk format [ 316.170601][ T9974] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 316.204934][ T9974] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 316.244472][ T9974] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 316.266750][ T9974] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 316.378804][ T7068] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 316.568956][ T7068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 316.632994][ T7068] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 316.677245][ T7068] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 316.688643][ T7068] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.702528][ T9996] netlink: 'syz.2.2038': attribute type 6 has an invalid length. [ 316.719070][ T7068] usb 6-1: config 0 descriptor?? [ 316.734521][ T9986] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 316.826398][ T9984] loop3: detected capacity change from 0 to 40427 [ 316.851559][ T9984] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 316.869851][ T9984] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 316.901027][ T9984] F2FS-fs (loop3): invalid crc value [ 316.916343][ T9984] F2FS-fs (loop3): Found nat_bits in checkpoint [ 317.046703][ T9984] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 317.069835][ T9984] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 317.173311][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.180131][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.193759][ T7068] microsoft 0003:045E:009D.001E: hidraw0: USB HID vff.fa Device [HID 045e:009d] on usb-dummy_hcd.5-1/input0 [ 317.222067][ T7068] microsoft 0003:045E:009D.001E: no inputs found [ 317.246970][ T7068] microsoft 0003:045E:009D.001E: could not initialize ff, continuing anyway [ 317.450412][ T7068] usb 6-1: USB disconnect, device number 11 [ 317.501493][T10013] can0: slcan on ptm0. [ 317.636929][T10009] fido_id[10009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 317.671198][T10012] can0 (unregistered): slcan off ptm0. [ 318.506673][T10008] loop2: detected capacity change from 0 to 32768 [ 318.615986][T10008] XFS (loop2): Mounting V5 Filesystem [ 318.665303][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2055'. [ 318.786659][T10008] XFS (loop2): Ending clean mount [ 318.789033][T10008] XFS (loop2): Quotacheck needed: Please wait. [ 318.874144][T10008] XFS (loop2): Quotacheck: Done. [ 319.080100][ T4273] XFS (loop2): Unmounting Filesystem [ 319.130100][T10064] loop3: detected capacity change from 0 to 256 [ 319.156622][T10065] loop6: detected capacity change from 0 to 128 [ 319.218234][T10065] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 319.218790][T10065] ext4 filesystem being mounted at /225/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 319.287424][T10069] loop7: detected capacity change from 0 to 2048 [ 319.289521][T10064] FAT-fs (loop3): Directory bread(block 64) failed [ 319.441928][T10071] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.523338][T10064] FAT-fs (loop3): Directory bread(block 65) failed [ 319.553686][T10064] FAT-fs (loop3): Directory bread(block 66) failed [ 319.577590][ T7167] EXT4-fs (loop6): unmounting filesystem. [ 319.587697][T10064] FAT-fs (loop3): Directory bread(block 67) failed [ 319.600459][T10064] FAT-fs (loop3): Directory bread(block 68) failed [ 319.607196][T10064] FAT-fs (loop3): Directory bread(block 69) failed [ 319.638419][T10064] FAT-fs (loop3): Directory bread(block 70) failed [ 319.710492][T10064] FAT-fs (loop3): Directory bread(block 71) failed [ 319.717209][T10064] FAT-fs (loop3): Directory bread(block 72) failed [ 319.741213][T10064] FAT-fs (loop3): Directory bread(block 73) failed [ 320.140196][ T4311] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 320.361677][ T4311] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 320.384078][ T4311] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 320.415921][ T4311] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 320.463010][ T4311] usb 7-1: config 220 has no interface number 2 [ 320.495696][ T4311] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 320.540621][ T4311] usb 7-1: config 220 interface 0 has no altsetting 0 [ 320.547499][ T4311] usb 7-1: config 220 interface 76 has no altsetting 0 [ 320.564489][ T4311] usb 7-1: config 220 interface 1 has no altsetting 0 [ 320.611437][ T4311] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 320.638091][ T4311] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.656182][ T4311] usb 7-1: Product: syz [ 320.667195][ T4311] usb 7-1: Manufacturer: syz [ 320.687493][ T4311] usb 7-1: SerialNumber: syz [ 320.888239][T10082] loop5: detected capacity change from 0 to 32768 [ 320.952265][ T4311] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 320.989046][ T4311] usb 7-1: No valid video chain found. [ 321.055771][ T4311] usb 7-1: selecting invalid altsetting 0 [ 321.149096][ T4311] usb 7-1: selecting invalid altsetting 0 [ 321.166996][ T4311] usbtest: probe of 7-1:220.1 failed with error -22 [ 321.168776][T10108] loop2: detected capacity change from 0 to 2048 [ 321.213177][ T4311] usb 7-1: USB disconnect, device number 9 [ 321.261887][T10082] XFS (loop5): Mounting V5 Filesystem [ 321.339088][T10114] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.505983][T10082] XFS (loop5): Ending clean mount [ 321.534073][T10082] XFS (loop5): Quotacheck needed: Please wait. [ 321.773107][T10082] XFS (loop5): Quotacheck: Done. [ 322.001028][ T5871] XFS (loop5): Unmounting Filesystem [ 322.291725][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 322.493164][T10137] loop6: detected capacity change from 0 to 512 [ 322.797279][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 322.920239][T10148] netlink: 292 bytes leftover after parsing attributes in process `syz.5.2086'. [ 323.254028][T10152] loop2: detected capacity change from 0 to 8192 [ 323.272128][T10158] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2091'. [ 323.294651][T10152] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 323.324044][T10152] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 323.337490][T10152] REISERFS (device loop2): using ordered data mode [ 323.353117][T10152] reiserfs: using flush barriers [ 323.360180][T10152] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 323.377617][T10152] REISERFS (device loop2): checking transaction log (loop2) [ 323.388917][T10152] REISERFS (device loop2): Using r5 hash to sort names [ 323.403076][T10152] reiserfs: enabling write barrier flush mode [ 323.425751][T10152] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 323.451774][T10152] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 323.524728][T10152] REISERFS (device loop2): Remounting filesystem read-only [ 323.570603][T10152] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 323.636489][T10152] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 323.703291][T10152] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 323.770761][T10152] REISERFS error (device loop2): zam-7001 reiserfs_find_entry: io error [ 323.819781][T10152] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 323.893470][T10152] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 323.934165][T10152] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 323.996607][T10152] REISERFS warning (device loop2): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 324.224836][ T4273] ------------[ cut here ]------------ [ 324.231200][ T4273] kernel BUG at fs/reiserfs/journal.c:1916! [ 324.248029][ T4273] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 324.254189][ T4273] CPU: 0 PID: 4273 Comm: syz-executor Not tainted syzkaller #0 [ 324.261773][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.272126][ T4273] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 324.278002][ T4273] Code: b8 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 28 3a b8 ff e9 f9 fc ff ff e8 3e 4f 67 ff <0f> 0b e8 37 4f 67 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 324.297734][ T4273] RSP: 0018:ffffc90003e57b00 EFLAGS: 00010293 [ 324.304016][ T4273] RAX: ffffffff821b2332 RBX: 1ffff920007caf64 RCX: ffff88802f5c5940 [ 324.312037][ T4273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.320051][ T4273] RBP: ffffc90003e57bf8 R08: ffffc90003e57b77 R09: ffffc90003e57b40 [ 324.328066][ T4273] R10: dffffc0000000000 R11: fffff520007caf6f R12: ffffc9000d9a9000 [ 324.336077][ T4273] R13: dffffc0000000000 R14: ffff888029e7c678 R15: 0000000000000000 [ 324.344086][ T4273] FS: 0000555567bfc500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 324.353235][ T4273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.359862][ T4273] CR2: 00007f4ee1b2a180 CR3: 000000005c371000 CR4: 00000000003506f0 [ 324.367878][ T4273] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 324.375892][ T4273] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 324.383904][ T4273] Call Trace: [ 324.387205][ T4273] [ 324.390169][ T4273] ? journal_release+0x30/0x30 [ 324.394981][ T4273] journal_release+0x1b/0x30 [ 324.399701][ T4273] reiserfs_put_super+0x267/0x510 [ 324.404773][ T4273] ? hook_inode_free_security+0xa0/0xa0 [ 324.410448][ T4273] ? evict_inodes+0x642/0x6a0 [ 324.415161][ T4273] ? reiserfs_dirty_inode+0x260/0x260 [ 324.420582][ T4273] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 324.426256][ T4273] ? reiserfs_dirty_inode+0x260/0x260 [ 324.431667][ T4273] generic_shutdown_super+0x130/0x340 [ 324.437082][ T4273] kill_block_super+0x7c/0xe0 [ 324.441803][ T4273] deactivate_locked_super+0x93/0xf0 [ 324.447130][ T4273] cleanup_mnt+0x42c/0x4b0 [ 324.451591][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 324.456832][ T4273] task_work_run+0x1d0/0x260 [ 324.461461][ T4273] ? task_work_cancel+0x220/0x220 [ 324.466537][ T4273] ? exit_to_user_mode_loop+0x3b/0x110 [ 324.472143][ T4273] exit_to_user_mode_loop+0xe6/0x110 [ 324.478346][ T4273] exit_to_user_mode_prepare+0xee/0x180 [ 324.483955][ T4273] syscall_exit_to_user_mode+0x16/0x40 [ 324.489548][ T4273] do_syscall_64+0x58/0xa0 [ 324.494011][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 324.498739][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 324.503457][ T4273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.509394][ T4273] RIP: 0033:0x7ff2fb99c117 [ 324.513843][ T4273] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 324.533498][ T4273] RSP: 002b:00007ffc4c3881e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 324.541957][ T4273] RAX: 0000000000000000 RBX: 00007ff2fba0471f RCX: 00007ff2fb99c117 [ 324.549965][ T4273] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c3882a0 [ 324.557978][ T4273] RBP: 00007ffc4c3882a0 R08: 00007ffc4c3892a0 R09: 00000000ffffffff [ 324.562570][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2108'. [ 324.566057][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4c389330 [ 324.566077][ T4273] R13: 00007ff2fba0471f R14: 000000000004f1ec R15: 00007ffc4c389370 [ 324.566099][ T4273] [ 324.594105][ T4273] Modules linked in: [ 324.610004][ T4273] ---[ end trace 0000000000000000 ]--- [ 324.615546][ T4273] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 324.623744][ T4273] Code: b8 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 28 3a b8 ff e9 f9 fc ff ff e8 3e 4f 67 ff <0f> 0b e8 37 4f 67 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 324.646274][ T4273] RSP: 0018:ffffc90003e57b00 EFLAGS: 00010293 [ 324.655788][ T4273] RAX: ffffffff821b2332 RBX: 1ffff920007caf64 RCX: ffff88802f5c5940 [ 324.669775][ T4273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.688559][ T4273] RBP: ffffc90003e57bf8 R08: ffffc90003e57b77 R09: ffffc90003e57b40 [ 324.697611][ T4273] R10: dffffc0000000000 R11: fffff520007caf6f R12: ffffc9000d9a9000 [ 324.708229][ T4273] R13: dffffc0000000000 R14: ffff888029e7c678 R15: 0000000000000000 [ 324.727645][ T4273] FS: 0000555567bfc500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 324.737563][ T4273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.746708][ T4273] CR2: 00007f4775dde2f8 CR3: 000000005c371000 CR4: 00000000003506f0 [ 324.755394][ T4273] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 324.767857][ T4273] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 324.776432][ T4273] Kernel panic - not syncing: Fatal exception [ 324.782898][ T4273] Kernel Offset: disabled [ 324.787234][ T4273] Rebooting in 86400 seconds..