last executing test programs: 3m6.290006977s ago: executing program 2 (id=5117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1cb32e359a574834, 0x54018}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x2400c080) 3m6.148516095s ago: executing program 2 (id=5118): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002140)=ANY=[@ANYBLOB="f81000004000070100000000fcdbdf25047c0000d810e8801400c400000000000000000000000000000000010c006000070000000000000022001d800b5c12707e7574b34c0cae6066ca1a42a54f0f03532702a24d356f5fd79600008f1009803ec786812c223474a8974a3ab08010716586804697c6dc287ed90536a6266174f88a5f650152ec0dac3c0f07464fd89dca44627adddae1a175744862d320b42535001a22c630d62e94a7484f94006f57be465799fcdf2845ff3582cdba6a0c4a3a90b55f18a55f550042eef99d7025fe67993bd4485e2923d329aa42379c0023c81fcbd9c1fa0286caf071526eb2786fa6e820a32f39f3094cf794f7d49f259ebd2fe0ae7d00842f09a29e78033da42ae0f4160bcf1f12802816a46b0d516c92c968cefdc4396cdf2294d3ef8462af889448fc136f946c6f38433b22a4fce32af85528c91314bf90786ef7c79bef1adfc4be37afc7086cd60e04c240df73329e5aed3b7ba44e3827d2cf11cd16c5f26eea9e60591b93a3ca92aef65130499e8a29fe351a33886f0e00f04851031ba192cee54f5f73a36990ee0068e500acae297492e2e6778990f0b3be5e4e3189be224010a9780273a37860f990b59ce375e80454906e4147e97e94a3dc4c857bcb552b912829912c5a6c0f5a30d7977ba94c4d82358a8ab70c1f1c3805b75eb77061f224f7fa4e9f22a549a22e6db56fd6752aeabf8e51732dcce8f21313b2b9c2c0453afc983a876ae415b5154812ae1078097195d3cd6f133941014f69a747457fc31b0b95c493916cb976ba846ae291b156024dee4234c1231ada7ef8c47b9cf94d01b4a0b793fd39f264f8fcd16f1025fd6986b815f9e6ef6aa3748e00cd1a65171f74aa446c239c7531874db0ba402acb3cb3b25611916272664ee2efa4f7bcc18c1d417646f8ee8474a3955db27c085ce828f5af83a7bdb8f0a3b51b700c86bf5167e4b0fc29f4fbf35e5c7b80b7fdeac692d59b36e74c10aa334135ad55da6e849b28351e7068579ad98272e7f0c4df8af62a7b7d3a06a91e6276276f187491affc12646b588294649bd9d712dda5620d47bd2b25cdb64c91f2c36d25c695bb8184bb6e79b92c016ac0cd7dbe04fd50fb9a153d99dc6a2604afb2b838ad78114446de31f792e663ec448705a86b0e9f8ff5cd90c7195c5d2bc82836e251379a76a57c27353d0d1bafd15398ea195a292eb031a03cc307dc90ddfb397699f11a147456d728790f060f0e81e06c60e3cee51d39e3b04c453149200baf6043d473c74f2347c281c9a5ad88f2dfd3cfef12e955315636d6715c7b3c3f85789140c69498effd1b5ab5c17b3182294d0e6674facc0b33e924fbc40cc174226eefa19c4b1fad683e017afa06fb648ad4377fd8a49fcfb1a52c7158a0ebdc9d1479beaa2fea6acee50e280712046223d6988d067496749bf55c0c41f2b2cc6296351db60b854a31ce9d2dafdd468ea7e30dcbea4cf0c60258f84ecfddb645494814308f79242c419706ecc556dc472d6184fbfa46cfd1963d16af1f69a3a23f76095e32968a446cb26d63ff8c997e980d587b225905f6ef550125ff2fc2840d5aaa5f9525c6eab80b21d9bdf2d8efaa49eea262afe741c5eb61bb105678b6c925eb24ffda7be2cc751d06bbebcd8bee401299d7c0b6915708e69ba424a54c6d7bcc1df0c68a0dc45370c9d654770dae969d8fa94d4caee9e40bc4593509315043b32686e8a510785685992c4b5a712f6298bbde50fe76bff9a173e048e9eb098190f80bf6e51515aa93b0e5fc36498f1a1cd6a7d22499ed75a2c719aac820d22f5c58de6d584771c4e957ff9f4f2e4d1a9320e449e02081191baed7e31e7c3cfdbd7c50867525e472c04fe8a960292c3a0cf3ba86a3a0a97c9eb00b27cd03b746d616abf758343deec0aa13bb427bb41c1c6b6b7954b5693969baf4f15006a45ea313fda6147470a981038fbffd3f421158fb5a2f3a0484957647dd6ca4912857c2ffe7a98e193958d1c5a755de7e5e35348ab3f5a70ba9e6d27a318414046e3f78ac107d3cddc79415024a76773e3687d5f54ba0f72a4a875a4c59b34fb1844887b7a41ea324d663f312d467b7ea0500000000000000c1c49bb6e34d570ad272370c832d73453840c34721683bc8bed871a2e261273b4bec1bef2c223bbbc1215ae36a40c222b5482a64424a2df16de196d052ab798c3095c0ad64c014719c3dbc2f6b03f7495f829315b5d347a850737c9620ef5526cb11e319f0d486fe3ea6f8b623a5f07185b8a4a5c2108af1d94fd4dc8a416cf42999fa019dc687a511ea3ad276f1c48584076619973b7ff7eab22a8d5fed6c16cc68f751e1450546885742e7747e5b7c9c8a813b9eb9b4d2f3ad52bc46b67a25574f07f12e4bf71df4679366213e3913be1649d107ca03ac12c6bb9b0516742c33c9b915310dfa8599e1e66a1b128bb0366b61173f32a3f9fb72ebea678b60690f381e04694d1e81108ad4275c8886eefedeca57a1b0d8454be40b0ecc39bfca4e1fdc676bc6b5a8448af562696c6feb8ebbb5f243a430ea515fb00430b7eeab06c10d83994c7c7d3521081db9f8bcf1e2b62fedf9be3243d335f89a7f697ab64300f6735e9ebe512ae16c878c06046bd05ec2c915261d15185a7ca089483fdee7277fbd508a305d2136a8b34ae389ddb913f1faa0ecf5d5bfa50a1e1c5711459e9fb53efdb5b8bbf4a82e7a13d41351898db8e0fa416e3281944afd6d171f05f83a3b8d636cbc6b18c9c3fdb49eeab71317fa1bac70c7ac3910d3ffe075f3a24d27d13ec257d1a70bb5d9b841198ae4d6b4cc48d52e4d3c97f1dc419a56170f45acb33e84e3c3cc50bd72d293f6a599c2e1fdc65947cb7cb64415881c039330d4d059fcdcb5b54684c3901c8b0917865e642127dee305ec2f1a8041036197ba73e9080fa69356b432d9165522d4dbc50ef9d4e1eb51361a2e5da415c1da817eb67e6c123a50c904b50a417bc7f3afb2f7074717dc99677c299b844ee9b3424f57ec4eefeb50e2df36723ee6e04b6af526118bc2087d7c9e3fb807fb5ec36fb97379c155bbb45e91127cd5752213a171c731b56a12455e092f703e4f6969fbde626ca7a9b48040acd8794b6ea25d89a4bd9ce0fd9dee5e96bbeda64e3f219314500e1897e13416d99673e34af0a4fa78a9b441687a424ebb59354339a5ae30574dce05ae8eda75d593d9d850c0f6d2b39ac7e852f738b5b779a37ab9890e1bfce9cad32c125164c0e449aa36c7551752471ea260c6df62c70c3f5e9632ff364a4f18795235d8689ecd16859c548e11cd26d4004741498c51271ec37ee1833eebfe2dfe3d2e09d246a40285019d48c87f5c80d60ec3139514e8c1190eb487bdfdd2d46fb3de9242ac071ffeedbb589fd10b0dde92931b3b343ee7776f9ecff670b73395250e85fbb2c047d5c0f31bb4526fa366ba14edf831c70b1655de9ccae472bea51409d19689ea9cf8cb556dd4cb3d2536bccfd1955807551ad4b6e23c70cc3d5a3188cd4b7fcd63a0f031c8fe4c274109b884d60ad67ea09200a101e999175ff23e1e32fe436388af570eb9ffb9e506aefff0fd0df66aded64668dffccbeed5544bbeb4a3ce803da12f5874c52f13e3e5809cd9fd9dd1b7488babbaf8647a185d64b798876d7de6f8a0b0bde40cfe1c614f818215ff8faa5720f26b9d577ad913842a0516dd0f99f15774861d01ccfbf45784f986888bb98ba10531799d50b67db2c4795a1ad779dda418cb0d1c61f3fc4d96e37e72c68860014f521313ba131c8425e9d06d0d543c9a447994056a8b148177459f2910645c979a74996ad0dcb6a10addf1ae3c0986de488d4fc1ecbad581ae714ebf256feae17f98bd2cb88c14220db1b0cccb463cfb1f20d8628258ff63af056c8a38d45effb3a08272c5e897c46de2681d525416b4134373b1cbcdca05837d3b2eb3a2d718c0099862268caf628030aae670b64d79a3f284ba68cfd3f2391c4b5ebb268be050eb88163d2b7bc7b5b3b39311b4013930a632a219bb81d7a60654e0a2c01f9e4ee01432da04caef29f657a9d968fa1816c51f381e622b0bbde0bc8f8189537a65908206cba02806a9e9b96ad236f052f61c83c0bcf216449126406759361010a44e165d34db463125ff814c894c24b58f602039e8bb5a5eceb23bf78cd0d31d1d8265933368c8428b498c442c9565fae063f4f6eba7ea7ab4a0f1da6f55183b65058b21965b6db314f01d55df235da63a1e69c839971ea83e48e5efb343b5daca16918f95177e0ee8aab82cd10e94511a68f2f1162ca3acb26614302868a9f551dd28e57070e1d3d6190626caac6d2d8695d5d5875d487f341589b13b8a8a035bdf6250f7c3005cc0859c19c15c16bca94f37b05846e4009dbf893234a4b5a33a1a404a010cfa9f09a549b86952172e574e9af9388904baed36edc187afae63f713900e0d73aeeac060af3dcc22b8abef2abf95eab020c4e0a6878a211bc19b0def81fed91957cedc1893bd4d51d7c0cd895b1479952ac8b33aff11f6e16c16202db79a12fb408563e48f4a917d2847a33a84328e27c04d3c11d217feb8364c2b590145ac6859aef30ebac9544dfa30077221ec1592a804979363e4dd4024acf84d3123dc561c43920eb6f344f0ddf9545f1cfb1aaa99f55388d4c8902ea52fc6b4d3c3cecccdae8aa4145039af47f283a19f149f45f2904424d92b95b58eedc643c28d619c7f5630e5e255f87886aa233342e4a8f726af612c0fd4ed205bca5d2bc1fd99ef0b52e306dcdc864a58c8e6adcc0b17cb117e1c45d3fd5a416ad837efb1c186e8eb84eb971d5d77d42852557bcdf8dde065e8060bbf6b63570308967840fdc16677d578933a983f2254f14240919ab95af0fed431f9367d6df026a1e2bb3619448554bf0ae3d879f1f982db4065d6fc3e06fd66207410d3e4f88dd826414fd2b72e6936f67ba54dee0a2d87af1abd37c3acebd533761400645e9e7f1dd056c85cc3cd0318dfec3001f5b40d188719df36b4eaf5cd0542c3170dfa7cbaf25064e2ec243fdfcd005df6298693baaabf6ab846814e7c7e84a651eaacf80ec3356f0cf90680627ab84ef25bc90b2f0cfc248044bd9f16d49598ad5250c1b5c3d7fc27060f5a1958e1e382717533501dd7293c9cbdb8f73605443040aaa60e933c7bf99fe798236c9da9c86ff16e0cc5381ecf67209a754958e802d88432b8ccc5bbde3c266da32481c77a14ac57cd289944a566159502c56f3cf4c68f0c828b93a6b4fafaa31de96289959c47743cdbf4bf1dfe728baccc6b872755f0966b4e7349aa28c65e155d40338c8fe7b797bb2cfff27b0e10bd819dc10e8a181c08adf4d68f92890469f1c366d7252b28db3249ebf22476070229d6cd9c1815e1c5b299151fbc18cf851796c0ec5fb13500ec8177252f293512f6cbb8946155df94ff5728c46739900946d3d2a082f11f1afbd8c717119099e44657f8739f53173d53e85240c3d6cc5609188575a7a7b0deb0dd81951d59972ee2e91089b2372a0714eba4f6eb2661cd4770b48c22c34b452232816e89e40c714f015237b53535309a26d49e2598057cca41d16fadfcb8749c75bde28d9e527c7812a1224572d819cac2884ff8491b72de4cba95bdac3dd88ea35fb7321740761b44a4f36dd33625fd61dcaba2ea09a80a4440b079aa6c63642b53af932ed21d80c0983695255ff8947c9277c8f4a24a55c0c01600cc59aea3674fc68d66bafe9f6f3156fdc70ee3114b8d7146e381ebdba2c8c61ff355479bafd71c1c22384496eb7bb87937d77750be38a68f661fb1b843b9c3c2e904fa52371ad4af3c6d061d4638303f010eef70c3358be515a879d07659ee27ac6c9e57321f072bb9a3d198cd2f9370240c005b000700000000000000a4eb7839a3e052eec29e381bd10e7b923f7b740a46862a9ef4ae01c164412dbea6195cc4afda1262ee23c06eb17b4c999cc3f1e8b8ab5e5b95139878c3f5f1f4fe250db1415277237cfa4064bad0140a9cfe9fca3bac14c40c13e5dce0fc5e1c3044cb3c5f5201f3471834ab623828200990d500d2f79e473bade3ecf38891000c0001"], 0x10f8}, 0x1, 0x0, 0x0, 0x48800}, 0x10) 3m5.778336117s ago: executing program 2 (id=5121): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000002600)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000000), 0x0) 3m4.78945622s ago: executing program 2 (id=5132): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f00000010c0)=ANY=[@ANYBLOB='nls=cp863,decompose,umask=00000000000000000010000,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f6465636f6d706f73652c00acdb50a352b211e5ceaed3e7a8c1731ef4c9512076cc4d573109eadda119088c8af27fda66847216b40d34ab7a25771158753d5ee6febab0d623e193a2f58059d92935253b97ee99dd"], 0x1, 0x6b9, &(0x7f0000000a00)="$eJzs3U1sHGcZB/D/bJx1Nkip26ZtQEi1GqmCRiR2ViVBQmpACOUQoQguvVqJ01jZpJXtorRCZAMUJE6cUA8cilA49IQQQionRDkjIXHh5BuHSNw45AAYzezsem1vHDuOvab9/aTJvLPv1zOP52N37GgDfGpdfD2Huyly8dSl2+X2yr12Z+Ve+2a/nGQySSOZ6K1StJLi4+RCeks+W75YD1c8bJ5X739UTLz/Ybu3NVEvVfvGVv02GdmymxwZbBxKMt0r/nvbw24ar1qqca6sjfeYikHcZcJO9hMH47a6SXetsvHI7ts/b4ED607vvrnJVHI0vbtr+T4g9dXh0VeG8dvy2tTdvzgAAABgr4z8LD/sqQd5kNs5tj/hAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCdD0fvOwKJeGv3ydIr+9/83h75TvznmcHfpvWvV6ttPjTsQAAAAAAAAANiVFx/kQW7nWH97tah+5/9StXG8+vczeTtLmc9iTud25rKc5SxmNsnU0EDN23PLy4uzwz2rPxJY+nnKnqurq3fqnmdH9jy7Pq7uxkBH/aXBpkYAAAAAAAAA8Kn1g1xc+/0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcBEVyqLeqluP98lQaE0mOJGkW04PmzbEG+wT8cdwBAAAAwN5r1etjxX97hdWi+sz/fPW5/0jezq0sZyHL6WQ+V6tnAb1P/Y2/dtudlXvtm+WyeeCv/XNHcVQjpvfsYfTMM1WL5wY9Luab+U5OZTqXs5iFfDdzWc58pvONqjSXIlP104uplXut9GPdHO+FdVuXN8b24lC5jO9EFUkr17JQxXY6V5r90Bt1uxNDs/2+mWyY8W6ZneK12jZzdLVel3v0s3p9MExVe354kJGZOvdlNp4ezvvm3O/wONk402wag2dQx9dmKTc3zvRYOT9ar8tc/3hvc77DR2nrM9H9abnVP/qe3zrnyRf/9qfL1xu3bly/tnTq4BxGj2njMdEeysQL28pEp8xEdxeZOLKb+J+cZp2N3lV0Z1fLl6q+x7KQb+XNXM18zmUmszmfmXwlZ9PO2aG8Prd1XqtzrbGzc+3kF+pCeU/6ydC9ad9MPqyizOvTQ3kdvtJNVXXDr6xl6ZltZKloZnSW/j4ylInP1YVyjh8O3XHGb5CJxtq1uR/ds1tn4pf/WU2y1Ll1Y/H63FvbnO/lel2etu+tvzb/6ons0M7Vu1seL8+UP6z0bhvDR0dZ92y/bt2RM1vVHR/Urb/PNZupzude3aPO1HKk5++OGqlX98LIWdpV3YmhunXvcvJmOoN3IQAcYEdfOdps3W/9pfVB60et661LR74+eX7y880c/vPEHw79pvHrxleLV/JBvp9j444UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CZbeeffGXKczv3gAC2k84QHvjqzqp6L3SvNg7PtWhcP7O+mhnTSe3OqI+m2SLbo3x5HMVpID8DOd62RiH+aazIiqS4NXWkljEE+SGwfkC+6AvXBm+eZbZ5beefdLCzfn3ph/Y/7W2fPnXjvX/vLsnTPXFjrzM71/xx0lsBfW3gaMOxIAAAAAAAAAAABgu3bz3wn+cWl7jUdMW3THsK8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/6eLr+dwN0VmZ07PlNsr99qdcumX11pOJGkkKb6XFB8nF9JbMjU0XPGweV69/9EvXn7/w/baWBP99o0N/X73r9XVHe5Ft14yneRQvX60yW2Nd2VovO4OA+spBntYJuxkP3Ewbv8LAAD///zfBvQ=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 3m4.502305083s ago: executing program 2 (id=5135): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x7, 0x0, &(0x7f00000000c0)) 3m3.734126121s ago: executing program 2 (id=5148): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0xffffffff}, 0x40000000}) 3m3.047287356s ago: executing program 32 (id=5148): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0xffffffff}, 0x40000000}) 2.950500649s ago: executing program 1 (id=7905): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0xe00) 2.803189915s ago: executing program 1 (id=7908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c0000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="7b8b0100000000005c0012800b00010062726964676500004c00028005002500010000000c001f00fcfffffbffffffff05001800010000000500260001000000050029000100000008001c000500000005001600010000000c002e"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 2.531772039s ago: executing program 1 (id=7913): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x270, 0x5c, 0x160, 0x160, 0x3e0, 0x270, 0x228, 0x25a, 0x270, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x2a}, [], [0xffffffff, 0x0, 0xff000000], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0x118, 0x160, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x5}}, @common=@dst={{0x48}, {0x2, 0x0, 0x1, [0x0, 0x9, 0x9, 0x8001, 0x40, 0x1f, 0x6, 0x4f, 0x101, 0x6, 0x6, 0x7, 0x401, 0x7, 0xd0, 0x2], 0x9}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'veth1_to_hsr\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x3a0) 2.337975591s ago: executing program 1 (id=7917): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x10}}, {@acl}, {@dax_inode}]}, 0x1, 0x78e, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 2.221359977s ago: executing program 4 (id=7919): r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) 1.926578772s ago: executing program 4 (id=7922): r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x914f989e7507b04d) 1.903798868s ago: executing program 1 (id=7924): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x3, @pix={0x3, 0x7, 0x32315659, 0x5, 0x2, 0x6, 0x9, 0xff, 0x0, 0x1, 0x1, 0x5}}) 1.730265204s ago: executing program 4 (id=7926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x28, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.607876652s ago: executing program 1 (id=7929): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000140)=ANY=[@ANYBLOB="120100003be004209904a2a9e8c4011903010902230001046b40090904e44401ffe7bf0408240218918eed100905072a"], 0x0) syz_usb_ep_read(r0, 0x7, 0x13, &(0x7f0000000000)=""/19) 1.607337699s ago: executing program 4 (id=7930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) 1.519440589s ago: executing program 4 (id=7932): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1000400, &(0x7f0000000a00)={[{@discard}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@uid}, {@errors_continue}, {@discard}, {@usrquota}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x20, 0x61b6, &(0x7f00000075c0)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 1.354370265s ago: executing program 0 (id=7935): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x1c0, 0xffffff7a, 0xffffffff, 0x1c0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'pimreg0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x11, 0x0, 0x8}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x1, 0x8, 'snmp\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'team_slave_1\x00', {0x7ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x268) 1.283975569s ago: executing program 3 (id=7936): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x6, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000100)={"311ac4693ae1fd1704a5b993467106a63ce2123573a36be24a58707e86d5", 0xfff, 0x0, 0x9, [0x9, 0x5, 0x8, 0x714, 0x2, 0x4, 0x1, 0xfffffff6, 0x9, 0x9, 0xffffffff, 0x32, 0x0, 0x7, 0x3, 0x81, 0x1, 0x5]}) 1.263130494s ago: executing program 0 (id=7937): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x1f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x3fff, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f17"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x20008080) 1.14297197s ago: executing program 3 (id=7940): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) 945.702795ms ago: executing program 3 (id=7942): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) 945.210583ms ago: executing program 0 (id=7943): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, 0xc}) 845.791085ms ago: executing program 5 (id=7944): r0 = fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 798.633114ms ago: executing program 3 (id=7945): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, &(0x7f00000000c0)) 775.726554ms ago: executing program 0 (id=7946): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$P9_RREADDIR(r0, 0x0, 0x0) 687.113172ms ago: executing program 5 (id=7947): r0 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3013, 0x0, 0x0, 0xfffffffd}) 548.734153ms ago: executing program 0 (id=7948): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x11000000, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 548.587811ms ago: executing program 5 (id=7949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) 547.310009ms ago: executing program 3 (id=7950): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x1a0}}, 0x0) 519.00855ms ago: executing program 4 (id=7951): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="700100001a00390c2dbd7000fddbdf25fe880000000000000000000000000001ffffffff000000000000000000000000000040004e2480010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000fc00000000000000000000000000000023030000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000d91d00000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e22000000000a0101010000000000000000000000001c0004"], 0x170}}, 0x24044050) 426.680026ms ago: executing program 5 (id=7952): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 322.710636ms ago: executing program 0 (id=7953): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000009c0)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@discard}]}, 0x1, 0x515, &(0x7f00000010c0)="$eJzs3U9sHFcZAPBv1vHfuHVaegAEbWgLAUVZ25s2qnqAckIIVUL0CFJq7I1leddredelNjk4Z65IROIER44cOOfEnQuCG5dwQOKPFRQjcRg0s7Nhbe8mq8T2ut7fTxrNm3mT+b4XZ97zvs3uC2BkXY2IvYiYiIiPI2KuOJ8UW3zQ3rLrHu/fXT7Yv7ucRJp+9M8kr8/ORdefyVwu7jkVET/4TsSPk+Nxmzu760u1WnWrOJ5v1Tfnmzu7N9bqS6vV1epGpXJr8dbCezffrZxYW9+oTxSlLz/8w943fpqlNVuc6W7HSWo3ffxJnMyliPjeaQQbgrGiPRPDToTnUoqIVyPizfz5n4ux/KcJAFxkaToX6Vz3MQBw0ZXyObCkVC7mAmajVCqX23N4r8VMqdZotq7faWxvrLTnyq7EeOnOWq26UMwVXoqI7Hgxr8vrk+y4cuT4ZkS8EhE/n5zOj8vLjdrKMH/xAYARdvnI+P/vyfb4DwBccFPDTgAAOHPGfwAYPcZ/ABg9xn8AGD3t8X962GkAAGfI638AGD3GfwAYKd//8MNsSw+K779e+WRne73xyY2VanO9XN9eLi83tjbLq43Gav6dPfVn3a/WaGwuvhPbn1755mazNd/c2b1db2xvtG7n3+t9uzqeX7V3Bi0DAPp55Y0Hf06yEfn96XyLrrUcxoeaGXDaSsNOABiasWEnAAyN1b5gdL3Aa3zTA3BB9Fii95CpXh8QStM0Pb2UgFN27QuDzP8nA/QQwGdN1/y//wUMI8b8P4wu8/8wutI0GXTN/xj0QgDgfPP7P9Dn3b1Xi/1vijcHfrRy9Ir7p5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnG+d9X/LxVrgs1EqlcsRL0XElRhP7qzVqgsR8XJE/GlyfDI7XhxyzgDAiyr9LSnW/7o29/bsoarXLz8pTkTET3750S8+XWq1tv4YMZH8a7JzvnW/OF/pHeC0WwAAPF1nnM73XS/kH+/fXe5sZ5nP378dEVPt+Af7E3FQxN951FmbeCrGI2LmURLdaxUnXXMXL2LvXkR8vlf7k5jN50DaK58ejZ/FfulM45cOxS/lde199nfxuRPIBUbNg6z/+aDX81eKq/m+9/OfnT2JtdOL/i+71fJB3gf+P36n/xvr0/9dHTTGO7//brs0fbzuXsQXL0V0Yh909T+d+Emf+G8PGP8vX3r9zX516a8irkXv+N2x5lv1zfnmzu6NtfrSanW1ulGpjMWthfduvluZz+eo5/uPBv94//rL/eqy9s/0iT/1jPZ/dcD2//q/H//wK0+J//W3esUvxWtPiZ+NiV8bMP7SzO+m+tVl8Vf6tP9ZP//r/W6aHF5Q/OFfd48tGw4ADE9zZ3d9qVarbiko5IXfxrlIo3ch+yd7DtLoWfjWqdw5nTtWNRG9L/7ZW+1n+khVmj5X9H49xknMugHnwZOHPiL+M+xkAAAAAAAAAAAAAACAns7i01HDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX1/8CAAD//3ZK0g4=") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 266.272162ms ago: executing program 5 (id=7954): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdcedd9467f5cd2d6c4e8b3043614238ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESDEC=0x0], 0x11, 0x31b, &(0x7f0000000240)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) 145.445081ms ago: executing program 3 (id=7955): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000540), 0x0}, 0x20) 0s ago: executing program 5 (id=7956): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x4, 0x200, "05f6ff", 0xfd, 0xfd}) kernel console output (not intermixed with test programs): 26 audit(1788295887.302:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.3.6306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 684.207045][ T30] audit: type=1326 audit(1788295887.302:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.3.6306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 684.252485][T20705] bond2: Removing last ns target with arp_interval on [ 684.363827][ T30] audit: type=1326 audit(1788295887.302:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.3.6306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 684.479492][T20718] loop5: detected capacity change from 0 to 64 [ 684.532078][T20718] syz.5.6315: attempt to access beyond end of device [ 684.532078][T20718] loop5: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 684.590163][T20723] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6317'. [ 685.314317][T20759] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.357956][ T5999] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 685.528819][ T5999] usb 2-1: Using ep0 maxpacket: 32 [ 685.536533][ T5999] usb 2-1: unable to get BOS descriptor or descriptor too short [ 685.557725][ T5999] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 685.580807][T20774] netlink: 'syz.3.6337': attribute type 9 has an invalid length. [ 685.589634][ T5999] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 685.623601][T20774] netlink: 'syz.3.6337': attribute type 7 has an invalid length. [ 685.632029][ T5999] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 685.667391][T20774] netlink: 'syz.3.6337': attribute type 8 has an invalid length. [ 685.678511][ T5999] usb 2-1: config 128 has no interface number 0 [ 685.684932][ T5999] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 685.727423][ T5999] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 685.766443][ T5999] usb 2-1: config 128 interface 127 has no altsetting 0 [ 685.780251][T20773] loop5: detected capacity change from 0 to 4096 [ 685.787112][ T5999] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 685.787149][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.787172][ T5999] usb 2-1: Product: syz [ 685.787190][ T5999] usb 2-1: Manufacturer: syz [ 685.787208][ T5999] usb 2-1: SerialNumber: syz [ 685.851764][T20773] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 686.009722][T17633] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 686.169911][T17633] usb 5-1: Using ep0 maxpacket: 32 [ 686.204038][T17633] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 686.212225][T17633] usb 5-1: config 0 has no interface number 0 [ 686.225902][T17633] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 686.235278][T17633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.243359][T17633] usb 5-1: Product: syz [ 686.295303][T17633] usb 5-1: Manufacturer: syz [ 686.302150][ T5999] usb 2-1: USB disconnect, device number 109 [ 686.311682][T17633] usb 5-1: SerialNumber: syz [ 686.368682][T17633] usb 5-1: config 0 descriptor?? [ 686.402803][T17633] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 686.411773][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.437784][T17633] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 686.622502][T17633] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 686.842465][T17633] radio-raremono 5-1:0.35: raremono_cmd_main failed (-71) [ 686.866444][T17633] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 686.908528][T17633] usb 5-1: USB disconnect, device number 81 [ 686.915282][T17633] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 687.035422][T20791] loop5: detected capacity change from 0 to 32768 [ 687.128019][T20791] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 687.128019][T20791] [ 687.162272][T20791] ERROR: (device loop5): remounting filesystem as read-only [ 687.182069][T20791] ialloc: diAlloc returned -5! [ 687.572195][ T5919] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 687.639683][T20834] tmpfs: Group quota block hardlimit too large. [ 687.762909][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 687.781212][ T5919] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 687.823282][ T5919] usb 2-1: config 0 has no interface number 0 [ 687.835934][ T5919] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 687.871703][ T5919] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 687.884350][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 687.899876][ T5919] usb 2-1: Product: syz [ 687.906239][ T5919] usb 2-1: SerialNumber: syz [ 687.924332][ T5919] usb 2-1: config 0 descriptor?? [ 687.939169][ T5919] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 687.967681][ T5919] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input54 [ 688.406531][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 688.414144][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 688.422569][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 688.429923][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 688.437199][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 688.444317][ T10] usb 2-1: USB disconnect, device number 110 [ 688.450443][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 688.450472][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 688.480370][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032660000 (14)(syz1) rdma_ndev=ffff8880379fa000 (16)(bond_slave_0) cookie=ffff88805bed8000 (7)(bridge2) start [ 688.510399][ T10] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 688.538707][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032660000 (14)(syz1) rdma_ndev=ffff8880379fa000 (16)(bond_slave_0) cookie=ffff88805bed8000 (7)(bridge2) end [ 688.664593][T20847] loop5: detected capacity change from 0 to 32768 [ 688.679428][T20847] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6370 (20847) [ 688.711526][T20847] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 688.753626][T20847] BTRFS info (device loop5): using sha256 checksum algorithm [ 688.894908][T20848] loop4: detected capacity change from 0 to 32768 [ 688.920465][T20848] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6372 (20848) [ 688.964593][T20848] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 688.977488][T20847] BTRFS info (device loop5): enabling ssd optimizations [ 689.011978][T20847] BTRFS info (device loop5): turning on async discard [ 689.037303][T20848] BTRFS info (device loop4): using xxhash64 checksum algorithm [ 689.044979][T20848] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 689.091099][T20847] BTRFS info (device loop5): enabling free space tree [ 689.252036][T17980] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 689.350159][T20848] BTRFS info (device loop4): rebuilding free space tree [ 689.437355][T20848] BTRFS info (device loop4): disabling free space tree [ 689.483949][T20848] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 689.540344][T20848] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 689.642458][T20848] BTRFS info (device loop4): allowing degraded mounts [ 689.675108][T20848] BTRFS info (device loop4): enabling ssd optimizations [ 689.698138][T20848] BTRFS info (device loop4): turning on async discard [ 689.715872][T20848] BTRFS info (device loop4): enabling disk space caching [ 689.754115][T20848] BTRFS info (device loop4): force clearing of disk cache [ 689.803487][T20848] BTRFS info (device loop4): use zlib compression, level 3 [ 689.958080][T20919] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6393'. [ 689.982432][T20848] BTRFS info (device loop4): balance: start -f -susage=0..2,drange=11..18446744073709551614,limit=67076096..0 [ 690.085121][T20848] BTRFS info (device loop4): balance: ended with status: 0 [ 690.301144][ T5834] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 690.762001][T20950] loop0: detected capacity change from 0 to 512 [ 690.807098][T20950] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.6407: corrupted in-inode xattr: bad e_name length [ 690.841032][T20950] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 690.852201][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 690.867897][ C0] EXT4-fs (loop0): initial error at time 1788295893: ext4_iget_extra_inode:5025: inode 15 [ 690.877916][ C0] EXT4-fs (loop0): last error at time 1788295893: ext4_iget_extra_inode:5025: inode 15 [ 690.888756][T20950] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.6407: couldn't read orphan inode 15 (err -117) [ 690.900852][T20950] loop0: lost filesystem error report for type 5 error -117 [ 690.914761][T20950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.919052][T20956] loop5: detected capacity change from 0 to 64 [ 690.947650][T20950] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.6407: dx entry: limit 0 != root limit 125 [ 691.031067][T20950] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.6407: Corrupt directory, running e2fsck is recommended [ 691.237157][T20950] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.6407: dx entry: limit 0 != root limit 125 [ 691.275446][T20950] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.6407: Corrupt directory, running e2fsck is recommended [ 691.312127][T20950] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 3: comm syz.0.6407: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 691.321348][T20966] overlayfs: workdir and upperdir must be separate subtrees [ 691.494452][T20970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6416'. [ 691.562701][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.627621][T20970] bond1: entered promiscuous mode [ 691.747575][T20979] loop0: detected capacity change from 0 to 128 [ 691.829681][T20960] loop4: detected capacity change from 0 to 32768 [ 691.866704][T20960] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6411 (20960) [ 691.926019][ T3562] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032660000 (14)(syz1) rdma_ndev=ffff8880379fa000 (16)(bond_slave_0) cookie=ffff88807b5e8000 (12)(bridge4) start [ 691.985517][T20960] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 691.989899][ T3562] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032660000 (14)(syz1) rdma_ndev=ffff8880379fa000 (16)(bond_slave_0) cookie=ffff88807b5e8000 (7)(bridge4) end [ 691.995716][T20960] BTRFS info (device loop4): using sha256 checksum algorithm [ 692.066881][T20960] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 692.200579][T20960] BTRFS info (device loop4): rebuilding free space tree [ 692.250059][T20987] loop0: detected capacity change from 0 to 4096 [ 692.263613][T20960] BTRFS info (device loop4): disabling free space tree [ 692.270733][T20960] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 692.283094][T20960] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 692.309350][T20960] BTRFS info (device loop4): enabling ssd optimizations [ 692.316391][T20960] BTRFS info (device loop4): turning on async discard [ 692.378745][T20960] BTRFS info (device loop4): enabling disk space caching [ 692.396373][T20987] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 692.424554][T20960] BTRFS info (device loop4): force clearing of disk cache [ 692.447180][T21008] loop5: detected capacity change from 0 to 256 [ 692.519111][T21008] FAT-fs (loop5): Directory bread(block 64) failed [ 692.550830][T21008] FAT-fs (loop5): Directory bread(block 65) failed [ 692.566796][T20987] ntfs3(loop0): ino=1a, mi_enum_attr [ 692.595338][T21008] FAT-fs (loop5): Directory bread(block 66) failed [ 692.599442][T20987] ntfs3(loop0): ino=1a, mi_enum_attr [ 692.602047][T21008] FAT-fs (loop5): Directory bread(block 67) failed [ 692.648602][T20987] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 692.651750][T21008] FAT-fs (loop5): Directory bread(block 68) failed [ 692.697988][T21008] FAT-fs (loop5): Directory bread(block 69) failed [ 692.748124][T21008] FAT-fs (loop5): Directory bread(block 70) failed [ 692.754740][T21008] FAT-fs (loop5): Directory bread(block 71) failed [ 692.816388][T21008] FAT-fs (loop5): Directory bread(block 72) failed [ 692.847240][T21008] FAT-fs (loop5): Directory bread(block 73) failed [ 692.854110][T21017] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6431'. [ 692.936608][ T5834] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 693.229968][T21027] netlink: 'syz.3.6437': attribute type 1 has an invalid length. [ 693.280886][T21027] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6437'. [ 693.719876][T21047] overlayfs: failed to resolve 'w5T)`)YFnA@T<3ڂ$rcnHwC" -8/': -2 [ 694.063250][T21062] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.6453'. [ 694.149440][T21068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6456'. [ 694.259256][T21072] netlink: 'syz.5.6458': attribute type 8 has an invalid length. [ 694.369783][T21076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6460'. [ 694.643653][T21090] loop1: detected capacity change from 0 to 24 [ 694.662637][T21090] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 694.677416][T21090] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 694.726304][T21090] VFS: Lookup of 'file0' in romfs loop1 would have caused loop [ 694.875380][T21100] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 694.941204][T21100] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 694.970074][T21100] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 695.000476][T21100] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 695.043359][T21100] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 695.085971][T21100] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 695.110327][T21100] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 695.149814][T21100] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 695.171603][T21100] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 695.237580][T21100] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 696.084861][T21132] loop4: detected capacity change from 0 to 64 [ 696.244198][T21139] loop0: detected capacity change from 0 to 1764 [ 696.287167][T21141] binder: 21140:21141 ioctl c0306201 200000000300 returned -22 [ 696.499064][T21106] loop5: detected capacity change from 0 to 32768 [ 696.543682][T21147] IPv6: sit1: Disabled Multicast RS [ 696.552860][T21147] sit1: entered allmulticast mode [ 696.589641][T21106] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 696.650359][T21106] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 696.757393][T21106] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 696.944691][T21171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6506'. [ 696.989498][T21106] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 697.138422][ T10] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 697.333325][ T10] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 697.343387][T17633] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 697.367650][T21183] : renamed from veth0_to_bond (while UP) [ 697.388114][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 697.408666][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 697.439635][ T10] usb 2-1: Product: syz [ 697.443891][ T10] usb 2-1: Manufacturer: syz [ 697.465597][ T10] usb 2-1: SerialNumber: syz [ 697.493416][ T10] usb 2-1: config 0 descriptor?? [ 697.523297][T17633] usb 5-1: Using ep0 maxpacket: 16 [ 697.537127][T17633] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 697.559026][T17633] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.592897][T17633] usb 5-1: config 0 has no interface number 0 [ 697.602203][T17633] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 697.614984][T17633] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 697.627236][T17633] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 697.638888][T17633] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 697.648999][T17633] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 697.672225][T17633] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 697.712802][T17633] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 697.745101][T17633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.760008][ T804] usb 2-1: USB disconnect, device number 111 [ 697.783420][T17633] usb 5-1: config 0 descriptor?? [ 697.802287][T21173] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 697.847863][T17633] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 698.074170][ T30] audit: type=1326 audit(1788295900.510:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21202 comm="syz.0.6522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80399c629 code=0x7ffc0000 [ 698.128341][T17633] snd-usb-audio 5-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 698.175401][ T30] audit: type=1326 audit(1788295900.557:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21202 comm="syz.0.6522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80399c629 code=0x7ffc0000 [ 698.186627][T17633] usb 5-1: USB disconnect, device number 82 [ 698.219550][ T30] audit: type=1326 audit(1788295900.557:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21202 comm="syz.0.6522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7ff80399c629 code=0x7ffc0000 [ 698.248501][ T30] audit: type=1326 audit(1788295900.557:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21202 comm="syz.0.6522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80399c629 code=0x7ffc0000 [ 698.291429][ T30] audit: type=1326 audit(1788295900.557:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21202 comm="syz.0.6522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80399c629 code=0x7ffc0000 [ 698.380894][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032660000 (14)(syz1) rdma_ndev=ffff8880379fa000 (16)(bond_slave_0) cookie=ffff888052e2c000 (38)(bond1) start [ 698.398667][T21207] bond1 (unregistering): Released all slaves [ 698.438570][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032660000 (14)(syz1) rdma_ndev=ffff8880379fa000 (16)(bond_slave_0) cookie=ffff888052e2c000 (19)(bond1) end [ 698.625821][T21193] loop5: detected capacity change from 0 to 32768 [ 698.666390][T21193] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 698.817010][T21224] SET target dimension over the limit! [ 698.864917][T21193] XFS (loop5): Ending clean mount [ 699.000335][T17980] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 699.241675][T21244] loop1: detected capacity change from 0 to 2048 [ 699.360309][T21244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.390140][T21244] EXT4-fs error (device loop1): ext4_find_extent:941: inode #2: comm syz.1.6538: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 699.429457][T21244] EXT4-fs (loop1): Remounting filesystem read-only [ 699.526103][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.691887][T21262] netlink: 'syz.5.6536': attribute type 39 has an invalid length. [ 700.283317][T21285] bond2: entered promiscuous mode [ 700.316992][T21285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 700.483148][T21298] loop0: detected capacity change from 0 to 256 [ 700.575507][T21301] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 700.710102][T21305] loop1: detected capacity change from 0 to 764 [ 700.776154][T21305] rock: directory entry would overflow storage [ 700.782394][T21305] rock: sig=0x4654, size=5, remaining=4 [ 701.142630][T21325] comedi comedi3: aio_iiro_16: I/O port conflict (0xffffffffffffffff,8) [ 701.158087][ T10] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 701.292725][T21331] net_ratelimit: 4419 callbacks suppressed [ 701.292751][T21331] netlink: zone id is out of range [ 701.297981][T21329] netlink: 'syz.4.6577': attribute type 4 has an invalid length. [ 701.300920][T21331] netlink: zone id is out of range [ 701.303769][T21329] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6577'. [ 701.329371][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 701.343736][ T10] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 701.371903][ T10] usb 1-1: config 0 has no interface number 0 [ 701.395378][ T10] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 701.405602][T21329] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 701.432042][ T10] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 701.466468][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 701.479204][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.494003][T21336] netlink: 'syz.5.6580': attribute type 30 has an invalid length. [ 701.502808][ T10] usb 1-1: Product: syz [ 701.507037][ T10] usb 1-1: Manufacturer: syz [ 701.515074][ T10] usb 1-1: SerialNumber: syz [ 701.533713][ T10] usb 1-1: config 0 descriptor?? [ 701.782217][T21345] loop5: detected capacity change from 0 to 256 [ 701.894915][T21345] FAT-fs (loop5): Directory bread(block 64) failed [ 701.894957][T21345] FAT-fs (loop5): Directory bread(block 65) failed [ 701.895043][T21345] FAT-fs (loop5): Directory bread(block 66) failed [ 701.895070][T21345] FAT-fs (loop5): Directory bread(block 67) failed [ 701.895150][T21345] FAT-fs (loop5): Directory bread(block 68) failed [ 701.895177][T21345] FAT-fs (loop5): Directory bread(block 69) failed [ 701.895262][T21345] FAT-fs (loop5): Directory bread(block 70) failed [ 701.895290][T21345] FAT-fs (loop5): Directory bread(block 71) failed [ 701.895386][T21345] FAT-fs (loop5): Directory bread(block 72) failed [ 701.895414][T21345] FAT-fs (loop5): Directory bread(block 73) failed [ 701.993608][ T10] radio-si470x 1-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 701.993913][ T10] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 702.006125][ T30] audit: type=1800 audit(1788295904.196:81): pid=21345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6584" name="file1" dev="loop5" ino=1048660 res=0 errno=0 [ 702.040340][ T10] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 702.082535][ T10] usb 1-1: USB disconnect, device number 109 [ 702.437008][ T30] audit: type=1326 audit(1788295904.607:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27999c629 code=0x7ffc0000 [ 702.523054][ T30] audit: type=1326 audit(1788295904.645:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27999c629 code=0x7ffc0000 [ 702.592424][ T30] audit: type=1326 audit(1788295904.645:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd27999c629 code=0x7ffc0000 [ 702.678823][ T30] audit: type=1326 audit(1788295904.645:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.4.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27999c629 code=0x7ffc0000 [ 702.728965][T21376] loop1: detected capacity change from 0 to 128 [ 702.740475][T21377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6597'. [ 702.765788][T21377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6597'. [ 702.800807][T21377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6597'. [ 702.840850][T21377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6597'. [ 702.876279][T21377] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6597'. [ 702.901006][T17633] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 703.011434][T21385] xt_limit: Overflow, try lower: 31324/2147483648 [ 703.073332][T17633] usb 5-1: Using ep0 maxpacket: 16 [ 703.110640][T17633] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9 [ 703.130843][T17633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.161524][T17633] usb 5-1: Product: syz [ 703.165763][T17633] usb 5-1: Manufacturer: syz [ 703.197635][T17633] usb 5-1: SerialNumber: syz [ 703.229523][T17633] usb 5-1: config 0 descriptor?? [ 703.471282][T17633] speedtch 5-1:0.0: speedtch_bind: wrong device class 141 [ 703.494859][T17633] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 703.705846][ T5964] usb 5-1: USB disconnect, device number 83 [ 703.855585][T21425] Cannot find add_set index 2 as target [ 704.013103][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6625'. [ 704.096136][T21437] loop5: detected capacity change from 0 to 256 [ 704.234479][T21443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.347052][T21447] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6633'. [ 704.609511][T21461] loop4: detected capacity change from 0 to 1764 [ 704.616342][T21462] netlink: 'syz.1.6639': attribute type 21 has an invalid length. [ 704.624513][T21462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6639'. [ 704.645289][T21461] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 704.782836][ T5919] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 704.832635][T21469] netlink: 'syz.4.6644': attribute type 10 has an invalid length. [ 704.875662][T21469] batman_adv: batadv0: Adding interface: netdevsim0 [ 704.902811][T21469] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.933952][T21469] batman_adv: batadv0: Interface activated: netdevsim0 [ 705.000759][ T5919] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 705.014240][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.049653][ T5919] usb 1-1: Product: syz [ 705.053899][ T5919] usb 1-1: Manufacturer: syz [ 705.058526][ T5919] usb 1-1: SerialNumber: syz [ 705.099994][ T5919] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 705.141413][ T5906] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 705.544537][ T5964] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 705.589843][T17633] usb 1-1: USB disconnect, device number 110 [ 705.724946][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 705.736697][ T5964] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 705.745209][ T5964] usb 5-1: config 0 has no interface number 0 [ 705.751358][ T5964] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 705.767656][T21474] loop5: detected capacity change from 0 to 32768 [ 705.797926][ T5964] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 705.803803][T21474] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6645 (21474) [ 705.835761][ T5964] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 705.868953][ T5964] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 705.899828][T21474] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 705.902309][ T5964] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 705.932450][T21474] BTRFS info (device loop5): using sha256 checksum algorithm [ 705.971034][ T5964] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 706.001894][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.031601][ T5964] usb 5-1: config 0 descriptor?? [ 706.065400][ T5964] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 706.106093][T21474] BTRFS info (device loop5): enabling ssd optimizations [ 706.115044][T21474] BTRFS info (device loop5): turning on async discard [ 706.123115][T21474] BTRFS info (device loop5): enabling free space tree [ 706.217857][T21474] BTRFS info (device loop5): balance: start -f [ 706.224217][T21474] BTRFS info (device loop5): balance: ended with status: 0 [ 706.278610][T21486] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 706.300422][ T10] usb 5-1: USB disconnect, device number 84 [ 706.312792][ T5906] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 706.335577][ T5906] ath9k_htc: Failed to initialize the device [ 706.352727][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 706.378927][T17633] usb 1-1: ath9k_htc: USB layer deinitialized [ 706.431887][T17980] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 707.085093][T21547] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6673'. [ 707.145818][T21547] netlink: 'syz.4.6673': attribute type 1 has an invalid length. [ 707.461693][T21557] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6679'. [ 708.032394][T21578] netlink: 'syz.0.6688': attribute type 5 has an invalid length. [ 708.386338][T21597] netlink: 'syz.4.6698': attribute type 1 has an invalid length. [ 708.416122][T21596] loop0: detected capacity change from 0 to 1024 [ 708.526913][T21602] netlink: 208 bytes leftover after parsing attributes in process `syz.5.6700'. [ 708.554625][ T1015] hfsplus: b-tree write err: -5, ino 25 [ 708.572754][ T1015] hfsplus: b-tree write err: -5, ino 4 [ 708.597585][ T1015] hfsplus: b-tree write err: -5, ino 2 [ 709.801317][T21621] loop4: detected capacity change from 0 to 40427 [ 709.834064][T21621] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 709.870571][T21621] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 709.898289][T21621] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 710.290804][T21621] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 710.308186][T21621] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 710.316254][T21621] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 710.756208][T21703] netlink: 'syz.3.6749': attribute type 1 has an invalid length. [ 710.786218][T21703] netlink: 'syz.3.6749': attribute type 2 has an invalid length. [ 710.812232][T21703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6749'. [ 711.001531][T21709] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6752'. [ 711.129751][T21716] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6754'. [ 711.227360][T21721] netlink: 65173 bytes leftover after parsing attributes in process `syz.5.6756'. [ 711.314383][ T5906] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 711.475003][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 711.482753][ T5906] usb 5-1: config index 0 descriptor too short (expected 64967, got 165) [ 711.497309][ T5906] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.511310][ T5906] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 711.523400][ T5906] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 711.533574][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.552734][ T5906] usb 5-1: Product: syz [ 711.581798][ T5906] usb 5-1: Manufacturer: syz [ 711.586499][ T5906] usb 5-1: SerialNumber: syz [ 711.760333][T21743] random: crng reseeded on system resumption [ 712.046981][ T5906] usb 5-1: cannot find UAC_HEADER [ 712.097242][T21755] loop1: detected capacity change from 0 to 2048 [ 712.164969][T21762] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 712.179238][T21761] nbd: must specify at least one socket [ 712.225997][T21764] netlink: 'syz.3.6776': attribute type 21 has an invalid length. [ 712.247307][T21755] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 712.282076][ T5906] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 712.313247][ T5906] usb 5-1: USB disconnect, device number 85 [ 712.326187][T21755] Remounting filesystem read-only [ 712.383419][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 712.832335][T21787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6787'. [ 712.860901][T21787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6787'. [ 713.148712][T21805] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6795'. [ 713.222060][T21805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6795'. [ 713.232139][T21807] random: crng reseeded on system resumption [ 713.298038][T21805] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 713.320077][T21805] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 713.637011][T21827] binder: binder_mmap: 21824 2000004cd000-2000004ce000 bad vm_flags failed -1 [ 714.004287][T21845] loop1: detected capacity change from 0 to 8 [ 714.059663][T21845] SQUASHFS error: Failed to read block 0x2d7: -5 [ 714.095327][T21849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6816'. [ 714.110890][T21845] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 714.125382][T21852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6817'. [ 714.142178][T21852] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6817'. [ 714.586456][ T5999] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 714.717179][T21883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6834'. [ 714.746123][T21883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6834'. [ 714.778747][ T5999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.812824][ T5999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.851714][ T5999] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 714.888196][ T5999] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 714.921380][ T5999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.946920][ T5999] usb 2-1: config 0 descriptor?? [ 714.960859][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 714.960884][ T30] audit: type=1326 audit(1788295916.318:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21889 comm="syz.3.6839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 715.015089][ T5999] hub 2-1:0.0: USB hub found [ 715.064949][ T30] audit: type=1326 audit(1788295916.356:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21889 comm="syz.3.6839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 715.144166][ T30] audit: type=1326 audit(1788295916.356:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21889 comm="syz.3.6839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 715.188882][ T30] audit: type=1326 audit(1788295916.356:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21889 comm="syz.3.6839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 715.241780][ T5999] hub 2-1:0.0: 11 ports detected [ 715.247271][ T5999] hub 2-1:0.0: insufficient power available to use all downstream ports [ 715.457462][ T5999] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 715.482558][ T5999] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 715.548610][ T5999] usb 2-1: USB disconnect, device number 112 [ 716.008031][T21912] loop0: detected capacity change from 0 to 32768 [ 716.016272][T21912] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6847 (21912) [ 716.067144][T21907] loop5: detected capacity change from 0 to 32768 [ 716.095576][T21912] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 716.116080][T21907] BTRFS info: device /dev/loop5 (7:5) using temp-fsid 7203dc4a-c941-4ef2-b096-d4fc16d57315 [ 716.135740][T21907] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6846 (21907) [ 716.157204][T21912] BTRFS info (device loop0): using sha256 checksum algorithm [ 716.204203][T21907] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 716.232488][T21907] BTRFS info (device loop5): using sha256 checksum algorithm [ 716.312925][T21912] BTRFS info (device loop0): enabling ssd optimizations [ 716.340133][T21907] BTRFS info (device loop5): enabling ssd optimizations [ 716.349412][T21912] BTRFS info (device loop0): turning on async discard [ 716.364773][T21907] BTRFS info (device loop5): turning on async discard [ 716.379102][T21912] BTRFS info (device loop0): enabling free space tree [ 716.391058][T21907] BTRFS info (device loop5): enabling free space tree [ 716.435288][T21930] bond3: option ad_actor_sys_prio: invalid value (0) [ 716.475118][T21930] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 716.538321][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032660000 (14)(syz1) rdma_ndev=ffff8880379fa000 (17)(bond_slave_0) cookie=ffff88805bed8000 (38)(bond3) start [ 716.547849][T21930] bond3 (unregistering): Released all slaves [ 716.581009][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.587688][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.619452][T17980] BTRFS info (device loop5): last unmount of filesystem 7203dc4a-c941-4ef2-b096-d4fc16d57315 [ 716.629802][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032660000 (14)(syz1) rdma_ndev=ffff8880379fa000 (16)(bond_slave_0) cookie=ffff88805bed8000 (37)(bond3) end [ 716.685914][ T5840] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 717.017593][ T30] audit: type=1326 audit(1788295918.236:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21973 comm="syz.5.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd153f9c629 code=0x7ffc0000 [ 717.136920][ T30] audit: type=1326 audit(1788295918.236:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21973 comm="syz.5.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd153f9c629 code=0x7ffc0000 [ 717.217582][ T30] audit: type=1326 audit(1788295918.245:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21973 comm="syz.5.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fd153f9c629 code=0x7ffc0000 [ 717.322340][T21980] syz.5.6868 (21980): /proc/21979/oom_adj is deprecated, please use /proc/21979/oom_score_adj instead. [ 717.354800][ T30] audit: type=1326 audit(1788295918.245:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21973 comm="syz.5.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd153f9c629 code=0x7ffc0000 [ 717.413343][ T30] audit: type=1326 audit(1788295918.245:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21973 comm="syz.5.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd153f9c629 code=0x7ffc0000 [ 718.188928][T22014] netlink: 392 bytes leftover after parsing attributes in process `syz.1.6883'. [ 718.322714][ T5906] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 718.508952][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 718.544033][ T5906] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 718.563479][ T5906] usb 5-1: config 0 has no interface number 0 [ 718.582840][ T5906] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 718.648354][ T5906] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 718.682518][ T5906] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 718.703925][ T5906] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 718.749683][ T5906] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 718.767376][ T5906] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 718.776684][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.784732][ T5906] usb 5-1: Product: syz [ 718.789798][ T5906] usb 5-1: Manufacturer: syz [ 718.794447][ T5906] usb 5-1: SerialNumber: syz [ 718.810217][ T5906] usb 5-1: config 0 descriptor?? [ 718.843819][ T5906] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input55 [ 719.118907][ T5906] usb 5-1: USB disconnect, device number 86 [ 719.180207][T22049] kAFS: No cell specified [ 719.448000][T22029] loop5: detected capacity change from 0 to 32768 [ 719.519562][T22029] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 719.575043][T22066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 719.795717][T22071] loop0: detected capacity change from 0 to 4096 [ 719.829904][T22071] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 719.833698][T22077] netlink: 'syz.1.6910': attribute type 11 has an invalid length. [ 719.868372][T22029] XFS (loop5): Ending clean mount [ 719.888244][T22077] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6910'. [ 719.904575][T22071] ntfs3(loop0): ino=1a, mi_enum_attr [ 719.910366][T22071] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 720.038609][T22081] sctp: [Deprecated]: syz.3.6912 (pid 22081) Use of int in maxseg socket option. [ 720.038609][T22081] Use struct sctp_assoc_value instead [ 720.076482][T17980] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 720.506283][T22093] loop1: detected capacity change from 0 to 256 [ 720.598037][T22093] FAT-fs (loop1): Directory bread(block 64) failed [ 720.610907][T22093] FAT-fs (loop1): Directory bread(block 65) failed [ 720.634368][T22093] FAT-fs (loop1): Directory bread(block 66) failed [ 720.689093][T22093] FAT-fs (loop1): Directory bread(block 67) failed [ 720.707507][T22093] FAT-fs (loop1): Directory bread(block 68) failed [ 720.729072][T22093] FAT-fs (loop1): Directory bread(block 69) failed [ 720.743705][T22093] FAT-fs (loop1): Directory bread(block 70) failed [ 720.759856][T22093] FAT-fs (loop1): Directory bread(block 71) failed [ 720.793934][T22093] FAT-fs (loop1): Directory bread(block 72) failed [ 720.807487][T22093] FAT-fs (loop1): Directory bread(block 73) failed [ 720.829041][T22079] loop4: detected capacity change from 0 to 32768 [ 720.857617][T22079] (syz.4.6913,22079,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 720.903918][T22079] (syz.4.6913,22079,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 720.966059][T22105] netlink: 'syz.0.6924': attribute type 6 has an invalid length. [ 720.993264][T22105] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6924'. [ 721.029490][T22079] JBD2: Ignoring recovery information on journal [ 721.214085][T22079] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 721.432790][ T5834] ocfs2: Unmounting device (7,4) on (node local) [ 721.822405][T22133] netlink: 'syz.5.6936': attribute type 4 has an invalid length. [ 721.846602][T22133] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6936'. [ 721.885945][T22133] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 722.100708][T22141] libceph: resolve '0..' (ret=-3): failed [ 722.266773][T22148] loop4: detected capacity change from 0 to 256 [ 722.356637][T22148] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 722.409516][T22148] exFAT-fs (loop4): error, data size is invalid(150994954) [ 722.463440][T22148] exFAT-fs (loop4): Filesystem has been set read-only [ 722.557473][T22128] loop1: detected capacity change from 0 to 32768 [ 722.656029][T22128] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 722.670543][T22154] nvme_fabrics: missing parameter 'transport=%s' [ 722.677064][T22154] nvme_fabrics: missing parameter 'nqn=%s' [ 722.847750][T22128] XFS (loop1): Ending clean mount [ 722.988783][ T5831] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 723.434957][T22152] loop5: detected capacity change from 0 to 32768 [ 723.516572][T22190] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6952'. [ 723.549577][T22152] [ 723.549577][T22152] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 723.549577][T22152] [ 723.606599][T22152] ERROR: (device loop5): xtTruncate_pmap: xt_getpage: xtree page corrupt [ 723.606599][T22152] [ 723.671626][T22152] ERROR: (device loop5): jfs_unlink: [ 723.671626][T22152] [ 723.834059][T22201] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.6963'. [ 723.845335][T17980] ERROR: (device loop5): xtTruncate: xt_getpage: xtree page corrupt [ 723.845335][T17980] [ 723.875814][ T3562] ERROR: (device loop5): diWrite: ixpxd invalid [ 723.875814][ T3562] [ 723.884915][ T3562] ERROR: (device loop5): txCommit: [ 723.884915][ T3562] [ 723.931129][ T3562] jfs_write_inode: jfs_commit_inode failed! [ 723.963810][T17980] [ 723.963810][T17980] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 723.963810][T17980] [ 724.018156][T17980] [ 724.018156][T17980] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 724.018156][T17980] [ 724.085843][T22211] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6969'. [ 724.132188][T22211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6969'. [ 724.298578][T22219] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6972'. [ 724.783674][T22243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6984'. [ 724.808168][T22245] loop5: detected capacity change from 0 to 64 [ 724.836891][T22245] minix: block size(59136) > page size(4096) not supported by filesystem [ 724.983021][T22251] xt_hashlimit: size too large, truncated to 1048576 [ 725.030517][T22251] xt_hashlimit: max too large, truncated to 1048576 [ 725.178003][T22256] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 725.233994][T22256] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 725.509707][T22237] loop1: detected capacity change from 0 to 32768 [ 725.624311][T22237] JBD2: Ignoring recovery information on journal [ 725.752235][T22275] loop5: detected capacity change from 0 to 16 [ 725.773797][T22275] erofs (device loop5): mounted with root inode @ nid 36. [ 725.790077][T22237] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 725.805209][T22276] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 725.821839][T22253] loop0: detected capacity change from 0 to 32768 [ 725.871765][T22253] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 725.887247][T22253] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 725.896719][T22281] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 725.930167][T22253] JBD2: Ignoring recovery information on journal [ 726.065666][T22253] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 726.127041][ T5831] ocfs2: Unmounting device (7,1) on (node local) [ 726.328366][ T5840] ocfs2: Unmounting device (7,0) on (node local) [ 726.784549][T22309] openvswitch: netlink: IPv6 tunnel dst address is zero [ 726.913833][T22315] loop4: detected capacity change from 0 to 512 [ 726.987094][T22315] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (18771!=2687) [ 726.996685][T22315] EXT4-fs (loop4): group descriptors corrupted! [ 727.149034][T22325] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 727.188662][T22325] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 727.225854][T22325] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 727.264932][T22325] UDF-fs: Scanning with blocksize 512 failed [ 727.287020][T22325] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 727.317420][T22325] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 727.321271][ T30] audit: type=1326 audit(1788295927.880:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22332 comm="syz.3.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 727.339887][T22325] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 727.429940][ T30] audit: type=1326 audit(1788295927.936:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22332 comm="syz.3.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 727.435900][T22325] UDF-fs: Scanning with blocksize 1024 failed [ 727.490369][T22325] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 727.514396][T22325] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 727.542616][T22325] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 727.550635][ T30] audit: type=1326 audit(1788295927.936:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22332 comm="syz.3.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 727.602267][T22325] UDF-fs: Scanning with blocksize 2048 failed [ 727.620584][T22325] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 727.641742][T22305] loop1: detected capacity change from 0 to 32768 [ 727.648329][ T30] audit: type=1326 audit(1788295927.936:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22332 comm="syz.3.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 727.675653][T22325] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 727.689668][T22305] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7004 (22305) [ 727.704972][T22325] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 727.713176][T22325] UDF-fs: Scanning with blocksize 4096 failed [ 727.720300][ T30] audit: type=1326 audit(1788295927.936:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22332 comm="syz.3.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 727.745198][T22325] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 727.761693][T22305] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 727.780261][T22305] BTRFS info (device loop1): using sha256 checksum algorithm [ 727.936572][ T5919] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 727.962837][T22305] BTRFS info (device loop1): enabling ssd optimizations [ 728.002553][T22305] BTRFS info (device loop1): turning on async discard [ 728.009771][T22305] BTRFS info (device loop1): enabling free space tree [ 728.135713][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 728.148241][T22367] loop4: detected capacity change from 0 to 256 [ 728.162547][ T5919] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 728.172360][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 728.207781][ T5919] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 728.250615][ T5919] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 728.275326][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.296407][ T5919] usb 1-1: Product: syz [ 728.301114][ T5831] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 728.312549][ T5919] usb 1-1: Manufacturer: syz [ 728.317209][ T5919] usb 1-1: SerialNumber: syz [ 728.342057][ T5919] usb 1-1: config 0 descriptor?? [ 728.379784][ T5919] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 728.726659][ T5919] ums-isd200 1-1:0.0: probe with driver ums-isd200 failed with error -22 [ 728.897955][ T5906] usb 1-1: USB disconnect, device number 111 [ 729.585118][ T5906] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 729.778628][ T5906] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 729.798851][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 729.819612][ T5906] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 729.855314][ T5906] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 729.873912][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.888514][ T5906] usb 4-1: Product: syz [ 729.892768][ T5906] usb 4-1: Manufacturer: syz [ 729.909026][ T5906] usb 4-1: SerialNumber: syz [ 729.927590][ T5906] usb 4-1: config 0 descriptor?? [ 729.944372][T22410] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 729.952339][T22410] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 729.959702][ T10] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 729.982001][ T5906] usb 4-1: ucan: probing device on interface #0 [ 730.124525][T22418] loop5: detected capacity change from 0 to 32768 [ 730.144423][T22418] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7057 (22418) [ 730.174746][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 730.194695][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 730.218862][T22418] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 730.230102][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 730.256984][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 730.258306][T22418] BTRFS info (device loop5): using xxhash64 checksum algorithm [ 730.275593][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 730.302221][T22432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7065'. [ 730.311326][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.330320][T22432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7065'. [ 730.339588][T22418] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 730.356909][ T10] usb 2-1: config 0 descriptor?? [ 730.370495][T22422] loop4: detected capacity change from 0 to 32768 [ 730.423385][T22422] BTRFS info: device /dev/loop4 (7:4) using temp-fsid e4e86e5c-31bc-4b8a-a38a-ca9c6d3f044a [ 730.445245][ T5906] usb 4-1: ucan: failed to retrieve device info [ 730.461046][ T5906] usb 4-1: ucan: probe failed; try to update the device firmware [ 730.493974][T22422] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7060 (22422) [ 730.508965][ T5906] usb 4-1: USB disconnect, device number 110 [ 730.594366][ T10] hdpvr 2-1:0.0: firmware version 0x19 dated :*]quIcV2%\=>_F [ 730.594366][ T10] I6~㹙c [ 730.622595][T22447] netlink: 'syz.0.7066': attribute type 11 has an invalid length. [ 730.637291][T22447] netlink: 'syz.0.7066': attribute type 23 has an invalid length. [ 730.647603][T22422] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 730.650781][ T10] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 730.660370][T22447] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7066'. [ 730.676169][T22422] BTRFS info (device loop4): using xxhash64 checksum algorithm [ 730.676843][T22418] BTRFS info (device loop5): rebuilding free space tree [ 730.683896][T22422] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 730.757024][T22418] BTRFS info (device loop5): disabling free space tree [ 730.781773][T22418] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 730.827302][T22418] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 730.868982][ T10] hdpvr 2-1:0.0: device init failed [ 730.884757][ T10] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 730.918381][T22418] BTRFS info (device loop5): setting nodatasum [ 730.933429][ T10] usb 2-1: USB disconnect, device number 113 [ 730.939663][T22418] BTRFS info (device loop5): allowing degraded mounts [ 730.948883][T22418] BTRFS info (device loop5): turning on async discard [ 730.971862][T22418] BTRFS info (device loop5): enabling disk space caching [ 731.007369][T22418] BTRFS info (device loop5): force clearing of disk cache [ 731.051890][T22418] BTRFS info (device loop5): force zlib compression, level 3 [ 731.088846][T22422] BTRFS info (device loop4): rebuilding free space tree [ 731.156110][T22422] BTRFS info (device loop4): disabling free space tree [ 731.163101][T22422] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 731.198795][T22422] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 731.233145][T22422] BTRFS info (device loop4): allowing degraded mounts [ 731.265247][T22422] BTRFS info (device loop4): enabling ssd optimizations [ 731.272826][T22422] BTRFS info (device loop4): turning on async discard [ 731.281001][T22418] BTRFS info (device loop5): balance: start -sdevid=0,drange=6..6,limit=1..0 [ 731.297226][T22422] BTRFS info (device loop4): enabling disk space caching [ 731.315411][T22418] BTRFS info (device loop5): balance: ended with status: 0 [ 731.322964][T22422] BTRFS info (device loop4): force clearing of disk cache [ 731.336994][T22422] BTRFS info (device loop4): use zlib compression, level 3 [ 731.477178][T17980] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 731.549277][T22422] BTRFS info (device loop4): balance: start -sprofiles=data|system|metadata|metadata-remap|remapped|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffeffffffffe000,usage=4,usage=4..0,devid=0,drange=9223372036854776319..10 [ 731.580219][T22478] bridge2: entered promiscuous mode [ 731.605478][T22422] BTRFS info (device loop4): balance: ended with status: 0 [ 731.779169][ T5834] BTRFS info (device loop4): last unmount of filesystem e4e86e5c-31bc-4b8a-a38a-ca9c6d3f044a [ 732.048236][ T30] audit: type=1326 audit(1788295932.267:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22494 comm="syz.1.7081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b1b9c629 code=0x7ffc0000 [ 732.158386][ T30] audit: type=1326 audit(1788295932.286:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22494 comm="syz.1.7081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b1b9c629 code=0x7ffc0000 [ 732.269354][ T30] audit: type=1326 audit(1788295932.295:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22494 comm="syz.1.7081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b1b9c629 code=0x7ffc0000 [ 732.347746][T22503] loop0: detected capacity change from 0 to 1024 [ 732.375410][ T30] audit: type=1326 audit(1788295932.295:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22494 comm="syz.1.7081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b1b9c629 code=0x7ffc0000 [ 732.487400][T22503] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 732.488588][ T30] audit: type=1326 audit(1788295932.323:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22494 comm="syz.1.7081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd6b1b9c629 code=0x7ffc0000 [ 732.734041][T22509] loop1: detected capacity change from 0 to 4096 [ 732.756972][T22509] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 732.845749][T22509] ntfs3(loop1): ino=19, mi_enum_attr [ 732.851139][T22509] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 732.922735][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 732.922756][ T30] audit: type=1326 audit(1788295933.128:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22518 comm="syz.3.7092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 733.053444][ T30] audit: type=1326 audit(1788295933.146:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22518 comm="syz.3.7092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 733.128907][T22522] loop4: detected capacity change from 0 to 2048 [ 733.159969][ T30] audit: type=1326 audit(1788295933.165:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22518 comm="syz.3.7092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 733.196847][T22522] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 733.264680][ T30] audit: type=1326 audit(1788295933.165:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22518 comm="syz.3.7092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 733.399088][ T30] audit: type=1326 audit(1788295933.165:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22518 comm="syz.3.7092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 733.980586][T22553] xt_connbytes: Forcing CT accounting to be enabled [ 733.987566][T22553] set match dimension is over the limit! [ 734.284182][T22566] loop0: detected capacity change from 0 to 256 [ 734.505225][T22565] loop1: detected capacity change from 0 to 4096 [ 734.515975][T22565] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 734.563412][T22577] erspan0: entered promiscuous mode [ 734.594734][T22565] ntfs3(loop1): ino=19, mi_enum_attr [ 734.662074][T22565] ntfs3(loop1): failed to convert "c46c" to iso8859-9 [ 734.673721][T22565] ntfs3(loop1): ino=20, mi_enum_attr [ 735.020306][T22593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7129'. [ 735.267229][T22607] netlink: 'syz.0.7136': attribute type 20 has an invalid length. [ 735.325258][T22607] IPv6: NLM_F_CREATE should be specified when creating new route [ 735.893079][ T30] audit: type=1326 audit(1788295935.896:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22630 comm="syz.5.7148" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd153f9c629 code=0x0 [ 736.069623][T22641] ip6t_REJECT: ECHOREPLY is not supported [ 736.081353][T22633] loop4: detected capacity change from 0 to 4096 [ 736.128829][T22633] ntfs3(loop4): ino=0, mi_enum_attr [ 736.153128][T22612] loop1: detected capacity change from 0 to 32768 [ 736.169935][T22612] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7137 (22612) [ 736.187969][T22612] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 736.223697][T22633] ntfs3(loop4): ino=0, mi_enum_attr [ 736.228989][T22633] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 736.267186][T22612] BTRFS info (device loop1): using sha256 checksum algorithm [ 736.291837][T22639] bond4: entered allmulticast mode [ 736.457219][T22612] BTRFS info (device loop1): enabling ssd optimizations [ 736.494428][T22612] BTRFS info (device loop1): turning on async discard [ 736.593447][T22612] BTRFS info (device loop1): enabling free space tree [ 736.761583][ T5831] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 736.768159][T22671] netlink: 'syz.4.7160': attribute type 3 has an invalid length. [ 737.210560][T22687] xt_connbytes: Forcing CT accounting to be enabled [ 737.835106][T22717] netlink: 'syz.4.7182': attribute type 2 has an invalid length. [ 737.893028][T22717] hmac(sha224: entered promiscuous mode [ 737.909758][T22719] netlink: 'syz.1.7184': attribute type 39 has an invalid length. [ 738.095881][T22727] random: crng reseeded on system resumption [ 738.453792][T22741] loop0: detected capacity change from 0 to 164 [ 738.528484][T22741] Unable to read rock-ridge attributes [ 738.581616][T22741] Unable to read rock-ridge attributes [ 738.608401][T22741] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 738.675581][T22716] loop5: detected capacity change from 0 to 32768 [ 738.743058][T22716] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 738.885264][ T5906] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 738.950401][T22716] XFS (loop5): Ending clean mount [ 739.109742][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 739.121252][T17980] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 739.143226][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 739.175525][ T5906] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 739.195235][ T5906] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 739.210958][ T5906] usb 4-1: Product: syz [ 739.215213][ T5906] usb 4-1: Manufacturer: syz [ 739.223625][ T5906] usb 4-1: SerialNumber: syz [ 739.259136][T22771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7207'. [ 739.464055][ T5906] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 739.472409][ T5906] usb 4-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 739.517662][ T5906] usb 4-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 739.539103][ T5906] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 739.680865][ T5906] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 739.693254][ T5906] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 739.740037][ T5906] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 739.773683][ T5906] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 739.806141][ T5906] usb 4-1: USB disconnect, device number 111 [ 739.839691][ T5906] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 739.876484][T22761] loop1: detected capacity change from 0 to 32768 [ 739.920460][T22761] JFS: metapage_get_blocks failed [ 739.924916][ T5906] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 739.949595][T22761] ERROR: (device loop1): release_metapage: metapage_write_one() failed [ 739.949595][T22761] [ 739.964674][ T5906] visor 4-1:1.0: device disconnected [ 740.031070][T22761] ERROR: (device loop1): remounting filesystem as read-only [ 740.199238][ T118] blkno = 5002c, nblocks = 1 [ 740.204087][ T118] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 740.204087][ T118] [ 740.236910][ T118] blkno = 5002d, nblocks = 1 [ 740.241578][ T118] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 740.241578][ T118] [ 740.444571][T22807] bond0: (slave bond_slave_1): Releasing backup interface [ 740.547934][ T5831] JFS: metapage_get_blocks failed [ 740.697900][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 740.856567][T22820] loop0: detected capacity change from 0 to 1764 [ 740.966132][T22820] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 741.209676][T22826] loop1: detected capacity change from 0 to 256 [ 741.251932][T22826] exfat: Deprecated parameter 'utf8' [ 741.288765][T22826] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 741.327606][T22808] loop4: detected capacity change from 0 to 32768 [ 741.356730][T22808] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7223 (22808) [ 741.409102][T22808] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 741.445887][T22808] BTRFS info (device loop4): using sha256 checksum algorithm [ 741.800230][T22808] BTRFS info (device loop4): enabling ssd optimizations [ 741.846629][T22808] BTRFS info (device loop4): turning on async discard [ 741.864453][T22808] BTRFS info (device loop4): enabling free space tree [ 741.991907][T22864] loop0: detected capacity change from 0 to 512 [ 742.067514][ T5834] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 742.112042][T22864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.145305][T22864] ext4 filesystem being mounted at /1551/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.405809][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.926564][T22902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7260'. [ 743.510101][T22923] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 743.715096][T22928] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7273'. [ 743.794312][T22932] netlink: 'syz.1.7275': attribute type 1 has an invalid length. [ 743.823915][T22932] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7275'. [ 743.988950][T22937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7277'. [ 744.025458][T22937] bridge2: entered allmulticast mode [ 744.209331][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 744.222426][T22917] loop0: detected capacity change from 0 to 32768 [ 744.272467][T22917] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7268 (22917) [ 744.325301][T22917] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 744.353508][T22917] BTRFS info (device loop0): using xxhash64 checksum algorithm [ 744.373621][T22946] /dev/loop0: Can't open blockdev [ 744.394499][T22917] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 744.414883][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 744.440258][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.480016][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 744.581720][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 744.602666][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.630376][ T10] usb 5-1: Product: syz [ 744.639368][ T10] usb 5-1: Manufacturer: syz [ 744.644044][ T10] usb 5-1: SerialNumber: syz [ 744.662051][T22917] BTRFS info (device loop0): rebuilding free space tree [ 744.706210][T22917] BTRFS info (device loop0): disabling free space tree [ 744.727099][T22917] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 744.749297][T22917] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 744.809291][T22917] BTRFS info (device loop0): allowing degraded mounts [ 744.816186][T22917] BTRFS info (device loop0): enabling ssd optimizations [ 744.852658][T22917] BTRFS info (device loop0): turning on async discard [ 744.859543][T22917] BTRFS info (device loop0): enabling disk space caching [ 744.869255][T22973] loop1: detected capacity change from 0 to 64 [ 744.925469][T22917] BTRFS info (device loop0): force clearing of disk cache [ 744.943611][T22917] BTRFS info (device loop0): use zlib compression, level 3 [ 744.974858][ T10] usb 5-1: 0:2 : does not exist [ 744.986101][ T10] usb 5-1: unit 9 not found! [ 745.005857][ T10] usb 5-1: 4:0: cannot get min/max values for control 4 (id 4) [ 745.132127][T22917] BTRFS info (device loop0): balance: start -sprofiles=data|system|metadata|metadata-remap|remapped|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffeffffffffe000,usage=4,usage=4..0,devid=0,drange=9223372036854776319..10 [ 745.189935][ T10] usb 5-1: USB disconnect, device number 87 [ 745.219341][T22917] BTRFS info (device loop0): balance: ended with status: 0 [ 745.254858][T22979] loop1: detected capacity change from 0 to 1024 [ 745.342972][T22979] hfsplus: b-tree write err: -5, ino 2 [ 745.357523][T22977] loop5: detected capacity change from 0 to 4096 [ 745.406663][T22977] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 745.447509][ T5840] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 745.462902][ T12] hfsplus: b-tree write err: -5, ino 25 [ 745.468679][ T12] hfsplus: b-tree write err: -5, ino 4 [ 745.547348][ T12] hfsplus: b-tree write err: -5, ino 2 [ 745.552973][ T12] hfsplus: b-tree write err: -5, ino 26 [ 745.631622][T22977] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 745.673981][T22977] ntfs3(loop5): ino=19, mi_enum_attr [ 745.922366][T22977] ntfs3(loop5): failed to convert "c46c" to iso8859-7 [ 745.951888][T22977] ntfs3(loop5): ino=20, mi_enum_attr [ 746.098037][T22995] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 746.272709][T22999] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7301'. [ 746.302785][T22997] loop0: detected capacity change from 0 to 4096 [ 746.323850][T22999] netlink: 'syz.3.7301': attribute type 1 has an invalid length. [ 746.355964][T22997] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 747.012863][T23019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 747.023609][T22997] ntfs3(loop0): ino=1d, mi_enum_attr [ 747.052944][T22997] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 747.161308][T22997] ntfs3(loop0): ino=1d, mi_enum_attr [ 747.282893][ T5840] ntfs3(loop0): ino=1d, mi_enum_attr [ 747.343119][T23029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7315'. [ 747.781865][T23048] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 747.961289][T23057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7329'. [ 747.992089][T23057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7329'. [ 748.015027][ T5906] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 748.042793][T23057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7329'. [ 748.067915][T23057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7329'. [ 748.081190][T23057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 748.196768][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 748.206038][ T5906] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 748.216497][ T5906] usb 2-1: config 0 has no interface number 0 [ 748.234750][ T5906] usb 2-1: config 0 interface 244 has no altsetting 0 [ 748.262668][ T5906] usb 2-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 748.281781][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.309695][ T5906] usb 2-1: Product: syz [ 748.325262][ T5906] usb 2-1: Manufacturer: syz [ 748.345160][ T5906] usb 2-1: SerialNumber: syz [ 748.374056][ T5906] usb 2-1: config 0 descriptor?? [ 748.381499][T23068] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 748.402121][ T5906] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort found [ 748.502198][T23072] netlink: 830 bytes leftover after parsing attributes in process `syz.5.7336'. [ 748.588425][T23035] loop0: detected capacity change from 0 to 32768 [ 748.619140][ T5906] snd_usb_toneport 2-1:0.244: cannot get proper max packet size [ 748.637101][T23035] gfs2: fsid=batadv_slave_1: Trying to join cluster "lock_nolock", "batadv_slave_1" [ 748.642128][ T5906] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort now disconnected [ 748.670100][ T5906] snd_usb_toneport 2-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 748.693416][T23035] gfs2: fsid=batadv_slave_1: Now mounting FS (format 1801)... [ 748.747370][T23035] gfs2: fsid=batadv_slave_1.s: journal 0 mapped with 5 extents in 0ms [ 748.856256][ T5906] usb 2-1: USB disconnect, device number 114 [ 748.958014][T23035] gfs2: fsid=batadv_slave_1.s: first mount done, others may mount [ 749.451579][T23082] loop5: detected capacity change from 0 to 32768 [ 749.494411][T23082] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7340 (23082) [ 749.580336][T23101] netlink: 'syz.1.7348': attribute type 1 has an invalid length. [ 749.651856][T23082] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 749.704142][T23082] BTRFS info (device loop5): using sha256 checksum algorithm [ 749.787003][T23116] netlink: 'syz.4.7353': attribute type 1 has an invalid length. [ 749.889525][T23082] BTRFS info (device loop5): enabling ssd optimizations [ 749.911662][T23082] BTRFS info (device loop5): turning on async discard [ 749.945568][T23082] BTRFS info (device loop5): enabling free space tree [ 750.171334][T17980] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 750.196840][T23140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7360'. [ 750.422890][T23147] Unknown options in mask b7f2 [ 750.585078][T23152] ip6erspan0: entered allmulticast mode [ 750.720463][T23160] cifs: Unknown parameter '2Q [ 750.720463][T23160] @"2ach}#`[T&:"1:ӭ'4,Zz-#F<]%gC [ 750.720463][T23160] S' [ 750.934051][T23167] netlink: 'syz.0.7372': attribute type 2 has an invalid length. [ 751.147403][ T5999] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 751.329390][ T5999] usb 5-1: Using ep0 maxpacket: 32 [ 751.350867][T23184] loop1: detected capacity change from 0 to 128 [ 751.352360][ T5999] usb 5-1: config 4 has an invalid interface number: 228 but max is 0 [ 751.371987][T23184] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 751.382739][ T5999] usb 5-1: config 4 has no interface number 0 [ 751.388924][ T5999] usb 5-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 751.433787][ T5999] usb 5-1: config 4 interface 228 altsetting 12 bulk endpoint 0x7 has invalid maxpacket 132 [ 751.449570][T23184] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 751.482371][ T5999] usb 5-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 751.513752][ T5999] usb 5-1: config 4 interface 228 has no altsetting 0 [ 751.523329][T23186] loop0: detected capacity change from 0 to 2048 [ 751.532066][ T5999] usb 5-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 751.560347][T23186] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 751.570387][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.604429][ T5999] usb 5-1: Product: syz [ 751.623753][ T5999] usb 5-1: Manufacturer: syz [ 751.638797][ T5999] usb 5-1: SerialNumber: syz [ 751.664171][T23164] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 751.936664][ T5999] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 751.962144][T23199] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7388'. [ 752.034889][T23199] unsupported nlmsg_type 40 [ 752.056460][ T5999] usb 5-1: USB disconnect, device number 88 [ 752.208684][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 752.415997][T23215] netlink: 'syz.5.7396': attribute type 3 has an invalid length. [ 752.487265][T23217] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 752.705218][T23226] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 753.193611][T23251] loop4: detected capacity change from 0 to 2048 [ 753.240542][T23258] program syz.1.7417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 753.250359][T23251] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 753.371370][T23262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7419'. [ 753.810136][T23286] loop1: detected capacity change from 0 to 1024 [ 754.525912][ T5964] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 754.532442][T23322] netlink: 512 bytes leftover after parsing attributes in process `syz.4.7449'. [ 754.699514][ T5964] usb 1-1: Using ep0 maxpacket: 16 [ 754.730961][ T5964] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 754.739393][ T5919] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 754.761967][ T5964] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.782733][ T5964] usb 1-1: config 0 has no interface number 0 [ 754.803964][ T5964] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 754.826873][ T5964] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 754.847053][ T5964] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 754.858942][ T5964] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26624, setting to 1024 [ 754.876718][ T5964] usb 1-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 754.888391][ T5964] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 754.908522][ T5964] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 754.924688][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.936143][ T5964] usb 1-1: config 0 descriptor?? [ 754.941995][T23310] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 754.943697][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 754.956411][ T5919] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 754.969437][ T5919] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 754.978832][ T5906] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 754.987082][ T5919] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 754.995531][ T5919] usb 2-1: Product: syz [ 755.002844][ T5964] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 755.010365][ T5919] usb 2-1: Manufacturer: syz [ 755.031973][ T5919] usb 2-1: SerialNumber: syz [ 755.157048][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 755.177948][ T5906] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 755.208920][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.211708][ T5964] usb 1-1: USB disconnect, device number 112 [ 755.252327][ T5906] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 755.283305][ T5919] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 755.293061][ T5919] usb 2-1: Handspring Visor / Palm OS: port 208, is for unknown use [ 755.301715][ T5919] usb 2-1: Handspring Visor / Palm OS: port 187, is for Console use [ 755.310010][ T5919] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 755.508028][ T5919] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 755.526961][ T5919] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 755.538659][T23352] loop4: detected capacity change from 0 to 4096 [ 755.545858][ T5919] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 755.559747][T23352] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 755.586469][ T5919] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 755.599532][ T5919] usb 2-1: USB disconnect, device number 115 [ 755.616621][ T5999] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 755.639929][ T5919] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 755.665472][ T5919] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 755.671065][T23352] ntfs3(loop4): ino=19, mi_enum_attr [ 755.681504][ T5919] visor 2-1:1.0: device disconnected [ 755.692392][T23352] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 755.694083][ T5906] gspca_nw80x: reg_r err -71 [ 755.715000][ T5906] nw80x 6-1:3.0: probe with driver nw80x failed with error -71 [ 755.745500][ T5906] usb 6-1: USB disconnect, device number 5 [ 755.773229][T23352] ntfs3(loop4): failed to convert "c46c" to iso8859-4 [ 755.784833][T23352] ntfs3(loop4): ino=20, mi_enum_attr [ 755.820260][ T5999] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 755.828588][ T5999] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 755.864032][ T5999] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 755.900871][ T5999] usb 4-1: config 220 has no interface number 2 [ 755.911112][T23354] Scaler: ================= START STATUS ================= [ 755.923032][T23354] Scaler: ================== END STATUS ================== [ 755.933175][ T5999] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 755.968841][ T5999] usb 4-1: config 220 interface 0 has no altsetting 0 [ 755.975717][ T5999] usb 4-1: config 220 interface 76 has no altsetting 0 [ 756.003799][ T5999] usb 4-1: config 220 interface 1 has no altsetting 0 [ 756.025829][ T5999] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 756.054687][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.062858][ T5999] usb 4-1: Product: syz [ 756.086578][ T5999] usb 4-1: Manufacturer: syz [ 756.091296][ T5999] usb 4-1: SerialNumber: syz [ 756.344052][ T5999] usb 4-1: selecting invalid altsetting 0 [ 756.372244][ T5999] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 756.408400][ T5999] uvcvideo 4-1:220.0: No valid video chain found. [ 756.450820][ T5999] usb 4-1: selecting invalid altsetting 0 [ 756.480676][ T5999] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 756.511770][ T5999] usb 4-1: USB disconnect, device number 112 [ 756.718426][ T5919] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 756.920372][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 756.949677][ T5919] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 40 [ 756.963965][T23388] loop4: detected capacity change from 0 to 512 [ 756.995150][ T5919] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 757.018085][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 757.032982][T23388] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 757.063597][ T5919] usb 6-1: Product: syz [ 757.067877][ T5919] usb 6-1: Manufacturer: syz [ 757.091425][T23388] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 757.118621][ T5919] usb 6-1: SerialNumber: syz [ 757.131009][T23388] EXT4-fs (loop4): 1 truncate cleaned up [ 757.158390][T23376] loop1: detected capacity change from 0 to 40427 [ 757.160024][ T5919] usb 6-1: config 0 descriptor?? [ 757.171520][T23388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.195410][T23376] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 757.201997][T23376] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 757.218495][T23372] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 757.228919][ T5919] hub 6-1:0.0: bad descriptor, ignoring hub [ 757.245619][T23376] F2FS-fs (loop1): invalid crc value [ 757.247548][ T5919] hub 6-1:0.0: probe with driver hub failed with error -5 [ 757.358676][T23395] usb usb7: usbfs: process 23395 (syz.3.7484) did not claim interface 0 before use [ 757.447337][T23382] loop0: detected capacity change from 0 to 32768 [ 757.464095][T23376] F2FS-fs (loop1): sanity_check_inode: inode (ino=3) is with extra_attr, but extra_attr feature is off [ 757.489446][T23376] F2FS-fs (loop1): Failed to read root inode [ 757.495923][T23382] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 757.535439][T23402] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 757.548932][ T5919] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 757.586074][T23382] XFS (loop0): Ending clean mount [ 757.617484][T23382] XFS (loop0): Quotacheck needed: Please wait. [ 757.662735][ T5906] usb 6-1: USB disconnect, device number 6 [ 757.732834][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 757.741647][T23382] XFS (loop0): Quotacheck: Done. [ 757.773096][ T5919] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 757.787879][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.805560][ T5919] usb 5-1: Product: syz [ 757.818338][ T5919] usb 5-1: Manufacturer: syz [ 757.823134][ T5919] usb 5-1: SerialNumber: syz [ 757.845405][ T5919] usb 5-1: config 0 descriptor?? [ 757.900842][ T5840] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 758.116898][ T5919] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 758.132848][T23413] loop1: detected capacity change from 0 to 256 [ 758.263757][ T5919] usb 5-1: USB disconnect, device number 89 [ 758.296840][T23413] FAT-fs (loop1): Directory bread(block 64) failed [ 758.336484][T23413] FAT-fs (loop1): Directory bread(block 65) failed [ 758.347388][T23413] FAT-fs (loop1): Directory bread(block 66) failed [ 758.369590][T23413] FAT-fs (loop1): Directory bread(block 67) failed [ 758.412920][T23413] FAT-fs (loop1): Directory bread(block 68) failed [ 758.438431][T23413] FAT-fs (loop1): Directory bread(block 69) failed [ 758.449177][T23413] FAT-fs (loop1): Directory bread(block 70) failed [ 758.456079][T23413] FAT-fs (loop1): Directory bread(block 71) failed [ 758.477692][T23413] FAT-fs (loop1): Directory bread(block 72) failed [ 758.492495][T23390] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 758.496527][T23413] FAT-fs (loop1): Directory bread(block 73) failed [ 758.531855][T23390] EXT4-fs (loop4): Remounting filesystem read-only [ 758.749757][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.922915][T23437] No such timeout policy "syz1" [ 759.199364][T23421] loop5: detected capacity change from 0 to 32768 [ 759.268484][T23421] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 759.379561][T23421] XFS (loop5): Ending clean mount [ 759.407313][T23459] netlink: 'syz.4.7506': attribute type 27 has an invalid length. [ 759.446222][T23421] XFS (loop5): Quotacheck needed: Please wait. [ 759.475671][T23459] netlink: 'syz.4.7506': attribute type 3 has an invalid length. [ 759.505248][T23459] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7506'. [ 759.556194][T23463] tmpfs: Bad value for 'mpol' [ 759.632091][T23421] XFS (loop5): Quotacheck: Done. [ 759.636399][T23431] loop0: detected capacity change from 0 to 32768 [ 759.658141][T23431] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7497 (23431) [ 759.687198][T23431] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 759.723146][T23431] BTRFS info (device loop0): using xxhash64 checksum algorithm [ 759.752400][T23431] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 759.874325][T17980] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 759.972212][T23431] BTRFS info (device loop0): rebuilding free space tree [ 760.052020][T23431] BTRFS info (device loop0): disabling free space tree [ 760.082791][T23431] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 760.127584][T23431] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 760.188559][T23431] BTRFS info (device loop0): setting nodatasum [ 760.209435][T23431] BTRFS info (device loop0): allowing degraded mounts [ 760.221275][T23490] openvswitch: netlink: Unknown key attributes 2 [ 760.236955][T23431] BTRFS info (device loop0): turning on async discard [ 760.243853][T23431] BTRFS info (device loop0): enabling disk space caching [ 760.375414][T23431] BTRFS info (device loop0): force clearing of disk cache [ 760.390771][T23477] loop4: detected capacity change from 0 to 32768 [ 760.416165][T23431] BTRFS info (device loop0): force zlib compression, level 3 [ 760.469682][ T5995] loop4: p1 p3 < p5 p6 > [ 760.474195][ T5995] loop4: partition table partially beyond EOD, truncated [ 760.517940][T23477] loop4: p1 p3 < p5 p6 > [ 760.522428][T23477] loop4: partition table partially beyond EOD, truncated [ 760.566584][T23431] BTRFS info (device loop0): balance: start -sdevid=0,drange=6..6,limit=1..0 [ 760.576611][T23431] BTRFS info (device loop0): balance: ended with status: 0 [ 760.632668][T23493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7517'. [ 760.656066][T23493] netlink: 'syz.3.7517': attribute type 1 has an invalid length. [ 760.686037][ T5840] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 761.161281][T23488] loop1: detected capacity change from 0 to 32768 [ 761.254205][T23488] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 761.462826][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 761.476818][T11034] udevd[11034]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 761.493324][ T5949] udevd[5949]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 761.523160][T10397] udevd[10397]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 761.532879][T23488] XFS (loop1): Ending clean mount [ 761.811774][ T5831] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 762.339134][T23533] loop4: detected capacity change from 0 to 128 [ 762.366520][T23533] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 762.517265][T23533] ext4 filesystem being mounted at /1334/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 762.635516][ T5834] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 762.809329][T23553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 762.824335][T23551] SET target dimension over the limit! [ 763.068982][T23562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.076179][T23562] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 763.118122][T23562] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 763.151418][T23570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7547'. [ 763.817266][T23605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7562'. [ 763.961193][ T58] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032660000 (14)(syz1) rdma_ndev=ffff8880379fa000 (16)(bond_slave_0) cookie=ffff8880592bc000 (6)(bridge3) start [ 763.978570][ T804] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 763.999672][ T58] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032660000 (14)(syz1) rdma_ndev=ffff8880379fa000 (16)(bond_slave_0) cookie=ffff8880592bc000 (6)(bridge3) end [ 764.168799][ T804] usb 5-1: Using ep0 maxpacket: 32 [ 764.224416][ T804] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 764.239335][ T804] usb 5-1: config 0 has no interface number 0 [ 764.276550][ T804] usb 5-1: config 0 interface 12 has no altsetting 0 [ 764.300173][ T804] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 764.322143][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.340404][ T804] usb 5-1: Product: syz [ 764.344664][ T804] usb 5-1: Manufacturer: syz [ 764.353154][ T804] usb 5-1: SerialNumber: syz [ 764.385138][ T804] usb 5-1: config 0 descriptor?? [ 764.852486][ T804] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 764.881728][ T804] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 764.890799][ T804] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 764.902686][ T804] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 764.924979][ T804] usb 5-1: USB disconnect, device number 90 [ 765.663549][T23649] loop0: detected capacity change from 0 to 32768 [ 765.726286][T23649] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 765.860569][T23649] XFS (loop0): Ending clean mount [ 765.896729][T23649] XFS (loop0): Quotacheck needed: Please wait. [ 765.940357][T23682] loop5: detected capacity change from 0 to 2048 [ 766.005039][T23682] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 766.032843][T23682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 766.085657][T23649] XFS (loop0): Quotacheck: Done. [ 766.213939][ T5840] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 766.242742][T23689] openvswitch: netlink: IP tunnel TTL not specified. [ 766.578311][T23699] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 766.793275][T23709] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 766.809255][T23709] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 766.983581][T23715] delete_channel: no stack [ 766.990465][T23718] loop4: detected capacity change from 0 to 1024 [ 767.022991][ T5999] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 767.078163][T17633] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 767.115142][ T12] hfsplus: b-tree write err: -5, ino 25 [ 767.129556][ T12] hfsplus: b-tree write err: -5, ino 4 [ 767.135721][ T12] hfsplus: b-tree write err: -5, ino 2 [ 767.141877][ T12] hfsplus: b-tree write err: -5, ino 20 [ 767.183778][ T5999] usb 2-1: Using ep0 maxpacket: 8 [ 767.201665][ T5999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 767.236071][ T5999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 767.253029][T17633] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.263899][ T5999] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 767.273552][ T804] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 767.290994][T17633] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 767.300234][ T5999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 767.323149][T17633] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 767.332282][T17633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 767.346164][ T5999] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 767.365021][T17633] usb 4-1: SerialNumber: syz [ 767.373039][ T5999] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 767.383745][ T5999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.410240][ T5999] usb 2-1: config 0 descriptor?? [ 767.432841][ T804] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 767.443634][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.453823][T23728] loop5: detected capacity change from 0 to 256 [ 767.473626][T23728] exfat: Deprecated parameter 'namecase' [ 767.481170][T23707] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 767.491696][ T804] usb 1-1: config 0 descriptor?? [ 767.514099][ T804] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 767.582063][T23728] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 767.660809][T17633] usb 4-1: invalid UAC_HEADER (v1) [ 767.764956][ T804] gp8psk: usb in 128 operation failed. [ 767.777729][ T804] gp8psk: usb in 137 operation failed. [ 767.791573][T17633] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 767.804994][ T804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 767.818182][T17633] usb 4-1: USB disconnect, device number 113 [ 767.828047][ T804] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 767.839806][ T804] usb 1-1: media controller created [ 767.873661][ T804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 767.949915][ T5999] usb 2-1: USB disconnect, device number 116 [ 767.958970][T15674] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 767.968238][ T804] gp8psk_fe: Frontend attached [ 767.973115][ T804] usb 1-1: DVB: registering adapter 4 frontend 0 (Genpix DVB-S)... [ 767.981334][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 768.036546][ T804] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 768.256686][ T804] gp8psk: usb in 138 operation failed. [ 768.262247][ T804] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 768.282808][ T804] gp8psk: found Genpix USB device pID = 203 (hex) [ 768.327445][ T804] usb 1-1: USB disconnect, device number 113 [ 768.617596][ T804] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 768.901372][T23764] loop4: detected capacity change from 0 to 4096 [ 769.029446][T23764] ntfs3(loop4): ino=19, mi_enum_attr [ 769.045048][T23764] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 769.490395][T23786] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7633'. [ 769.660790][T23793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7635'. [ 769.671788][T23792] 8021q: VLANs not supported on lo [ 769.681781][T23759] loop1: detected capacity change from 0 to 32768 [ 769.731441][T23759] ERROR: (device loop1): diAllocAG: error reading iag [ 769.731441][T23759] [ 769.783886][T23759] ERROR: (device loop1): remounting filesystem as read-only [ 769.814435][T23759] ialloc: diAlloc returned -5! [ 770.235338][T23810] loop0: detected capacity change from 0 to 4096 [ 770.302074][ T30] audit: type=1326 audit(1788295968.074:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23817 comm="syz.1.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b1b9c629 code=0x7ffc0000 [ 770.390712][ T30] audit: type=1326 audit(1788295968.074:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23817 comm="syz.1.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b1b9c629 code=0x7ffc0000 [ 770.419674][ T30] audit: type=1326 audit(1788295968.112:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23817 comm="syz.1.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fd6b1b9c629 code=0x7ffc0000 [ 770.527317][ T30] audit: type=1326 audit(1788295968.112:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23817 comm="syz.1.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b1b9c629 code=0x7ffc0000 [ 770.636332][ T30] audit: type=1326 audit(1788295968.112:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23817 comm="syz.1.7650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b1b9c629 code=0x7ffc0000 [ 770.847613][T23836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7658'. [ 770.874180][T23836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7658'. [ 771.003750][T23843] SET target dimension over the limit! [ 771.031775][T23845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7663'. [ 772.314792][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032660000 (14)(syz1) rdma_ndev=ffff8880379fa000 (16)(bond_slave_0) cookie=ffff88805a9e8000 (6)(bridge4) start [ 772.373661][T23889] loop4: detected capacity change from 0 to 4096 [ 772.383358][T23889] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 772.401352][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032660000 (14)(syz1) rdma_ndev=ffff8880379fa000 (16)(bond_slave_0) cookie=ffff88805a9e8000 (5)(bridge4) end [ 772.469068][T23887] bridge4: entered allmulticast mode [ 772.528717][T23889] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 772.615352][T23895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7686'. [ 772.797167][T23905] netlink: 'syz.4.7689': attribute type 4 has an invalid length. [ 772.939717][T23904] loop5: detected capacity change from 0 to 4096 [ 772.978478][T23904] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 773.073862][T23904] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 773.100803][T23904] ntfs3(loop5): ino=19, mi_enum_attr [ 773.137671][T23904] ntfs3(loop5): failed to convert "c46c" to iso8859-5 [ 773.174774][T23904] ntfs3(loop5): ino=20, mi_enum_attr [ 773.597243][T23929] kernel profiling enabled (shift: 63) [ 773.611637][T23931] loop5: detected capacity change from 0 to 512 [ 773.622783][T23929] profiling shift: 63 too large [ 773.631072][T23897] loop1: detected capacity change from 0 to 32768 [ 773.721470][T23897] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 773.804403][T23897] XFS (loop1): Ending clean mount [ 773.843912][T23938] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 773.908044][T23897] XFS (loop1): Quotacheck needed: Please wait. [ 773.994167][T23947] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 774.100114][T23897] XFS (loop1): Quotacheck: Done. [ 774.215518][T23956] netlink: 820 bytes leftover after parsing attributes in process `syz.3.7711'. [ 774.254536][T23956] netlink: 820 bytes leftover after parsing attributes in process `syz.3.7711'. [ 774.263911][ T5831] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 775.068441][ T30] audit: type=1326 audit(1788295972.545:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.4.7730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27999c629 code=0x7ffc0000 [ 775.184439][ T30] audit: type=1326 audit(1788295972.573:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.4.7730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27999c629 code=0x7ffc0000 [ 775.252264][ T30] audit: type=1326 audit(1788295972.573:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.4.7730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27999c629 code=0x7ffc0000 [ 775.253444][T23996] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7732'. [ 775.279280][ T30] audit: type=1326 audit(1788295972.573:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.4.7730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fd27999c629 code=0x7ffc0000 [ 775.314861][ T30] audit: type=1326 audit(1788295972.573:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.4.7730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27999c629 code=0x7ffc0000 [ 775.510637][T24010] x_tables: duplicate underflow at hook 4 [ 775.839534][T24029] loop0: detected capacity change from 0 to 256 [ 775.875216][T24026] loop5: detected capacity change from 0 to 512 [ 776.039306][T24026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.121737][T24026] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 776.208641][T24042] netlink: zone id is out of range [ 776.234903][T24026] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.7745: corrupted xattr block 6: invalid header [ 776.283981][T24044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7754'. [ 776.293293][T24044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7754'. [ 776.345188][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 776.345207][ T30] audit: type=1326 audit(1788295973.724:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24045 comm="syz.0.7755" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff80399c629 code=0x0 [ 776.467253][T17980] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.635485][T24058] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 776.833911][T24068] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7767'. [ 777.235658][ T30] audit: type=1326 audit(1788295974.575:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.3.7775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 777.284048][T24060] loop1: detected capacity change from 0 to 32768 [ 777.290766][T24089] loop0: detected capacity change from 0 to 512 [ 777.325610][ T30] audit: type=1326 audit(1788295974.594:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.3.7775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 777.336067][T24060] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 777.368470][ T30] audit: type=1326 audit(1788295974.603:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.3.7775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa1c99dec7 code=0x7ffc0000 [ 777.392216][ T30] audit: type=1326 audit(1788295974.603:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.3.7775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ffa1c95cece code=0x7ffc0000 [ 777.414977][ T30] audit: type=1326 audit(1788295974.603:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.3.7775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ffa1c95cece code=0x7ffc0000 [ 777.437366][ T30] audit: type=1326 audit(1788295974.603:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.3.7775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ffa1c95cece code=0x7ffc0000 [ 777.459862][ T30] audit: type=1326 audit(1788295974.603:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.3.7775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffa1c95cece code=0x7ffc0000 [ 777.461875][T24060] JBD2: Ignoring recovery information on journal [ 777.524811][ T30] audit: type=1326 audit(1788295974.603:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.3.7775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 777.547529][ T30] audit: type=1326 audit(1788295974.603:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.3.7775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1c99c629 code=0x7ffc0000 [ 777.596133][T24089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.657911][T24089] ext4 filesystem being mounted at /1651/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 777.678983][T24060] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 777.749911][T24089] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 4: comm syz.0.7776: bad entry in directory: directory entry overrun - offset=108, inode=17, rec_len=253816, size=1024 fake=0 [ 777.813289][T24089] EXT4-fs (loop0): Remounting filesystem read-only [ 777.934507][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.004319][ T5831] ocfs2: Unmounting device (7,1) on (node local) [ 778.186809][T24118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7788'. [ 778.441362][T24128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7793'. [ 778.986123][T24154] xt_limit: Overflow, try lower: 268435456/134217728 [ 779.327556][T24169] loop1: detected capacity change from 0 to 1024 [ 779.366629][T24169] hfsplus: Filesystem is marked locked, mounting read-only. [ 779.399834][T24169] hfsplus: invalid catalog entry type in lookup [ 779.710580][T24142] loop4: detected capacity change from 0 to 32768 [ 779.824503][T24186] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7821'. [ 780.756931][T24213] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.7835'. [ 780.831052][T24182] loop0: detected capacity change from 0 to 32768 [ 780.888991][T24182] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 781.110858][T24234] [U] [ 781.114229][T24234] [U] [ 781.116987][T24234] [U] [ 781.119731][T24234] [U] [ 781.138901][T24234] [U] [ 781.141705][T24234] [U] [ 781.144473][T24234] [U] [ 781.147212][T24234] [U] [ 781.158863][T24182] XFS (loop0): Ending clean mount [ 781.168735][T24234] [U] [ 781.171535][T24234] [U] [ 781.174278][T24234] [U] [ 781.191261][T24233] [U] [ 781.207383][T24182] XFS (loop0): syz.0.7819 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 781.312029][ T5840] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 781.475491][T24249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7849'. [ 781.532602][ T5999] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 781.710105][T24255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7852'. [ 781.744642][ T5999] usb 2-1: Using ep0 maxpacket: 32 [ 781.757695][ T5999] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 781.771137][ T5999] usb 2-1: config 0 has no interface number 0 [ 781.790841][ T5999] usb 2-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 781.814847][T24259] qrtr: Invalid version 17 [ 781.822610][ T5999] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 781.841003][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.860055][ T5999] usb 2-1: Product: syz [ 781.864822][ T5999] usb 2-1: Manufacturer: syz [ 781.869468][ T5999] usb 2-1: SerialNumber: syz [ 781.894710][ T5999] usb 2-1: config 0 descriptor?? [ 781.900715][T24241] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 782.140162][T24241] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 782.233360][T24273] loop0: detected capacity change from 0 to 164 [ 782.258099][T24273] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 782.269181][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.276490][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.330180][T24273] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 782.367730][T24273] Symlink component flag not implemented [ 782.381888][T24273] Symlink component flag not implemented [ 782.399021][ T5999] asix 2-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 782.402834][T24273] Symlink component flag not implemented (7) [ 782.433906][ T5999] asix 2-1:0.191: probe with driver asix failed with error -71 [ 782.440522][T24273] Symlink component flag not implemented (116) [ 782.450759][T24258] loop5: detected capacity change from 0 to 32768 [ 782.473429][T24258] (syz.5.7853,24258,0):ocfs2_check_set_options:1259 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled. [ 782.500930][ T5999] usb 2-1: USB disconnect, device number 117 [ 782.528846][T24258] (syz.5.7853,24258,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 782.681507][T24281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7863'. [ 782.737028][T24281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7863'. [ 782.752140][T24283] loop4: detected capacity change from 0 to 64 [ 783.034218][T24287] bond1: option ad_select: invalid value (7) [ 783.080019][T24287] bond1 (unregistering): Released all slaves [ 783.087741][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032660000 (14)(syz1) rdma_ndev=ffff8880379fa000 (16)(bond_slave_0) cookie=ffff88805ac2c000 (37)(bond1) start [ 783.087815][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032660000 (14)(syz1) rdma_ndev=ffff8880379fa000 (16)(bond_slave_0) cookie=ffff88805ac2c000 (37)(bond1) end [ 783.318989][T24305] xt_CONNSECMARK: invalid mode: 0 [ 783.785365][T24326] sctp: [Deprecated]: syz.4.7884 (pid 24326) Use of int in max_burst socket option. [ 783.785365][T24326] Use struct sctp_assoc_value instead [ 784.250626][T24344] netlink: 'syz.1.7893': attribute type 2 has an invalid length. [ 784.552412][T24358] loop0: detected capacity change from 0 to 8 [ 784.586379][T24358] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 784.615170][T24358] cramfs: Error -3 while decompressing! [ 784.629935][ T5995] udevd[5995]: incorrect cramfs checksum on /dev/loop0 [ 784.630728][T24358] cramfs: ffffffff9a3b5c48(18)->ffff88806e43e000(4096) [ 784.691799][T24358] cramfs: Error -3 while decompressing! [ 784.717862][T24358] cramfs: ffffffff9a3b5c48(18)->ffff88806e43e000(4096) [ 784.746819][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 784.746839][ T30] audit: type=1800 audit(1788295981.591:157): pid=24358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7900" name="file1" dev="loop0" ino=324 res=0 errno=0 [ 784.776101][ T5995] udevd[5995]: incorrect cramfs checksum on /dev/loop0 [ 785.039604][ T804] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 785.142191][T24376] bridge5: entered promiscuous mode [ 785.150707][T24376] bridge5: entered allmulticast mode [ 785.221091][ T804] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 785.239727][ T804] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 785.260494][ T804] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 785.284679][ T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.309828][T24364] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 785.372455][ T804] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 785.569892][T24392] loop1: detected capacity change from 0 to 2048 [ 785.651335][ T30] audit: type=1400 audit(1788295982.442:158): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=24394 comm="syz.3.7918" [ 785.714498][T24392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.735113][T24392] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.7917: corrupted in-inode xattr: invalid ea_ino [ 785.886194][ T804] usb 6-1: USB disconnect, device number 7 [ 785.908489][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.331968][T24425] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 786.525106][ T804] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 786.629693][T24437] netlink: 'syz.0.7937': attribute type 1 has an invalid length. [ 786.658398][T24437] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7937'. [ 786.709770][ T804] usb 2-1: Using ep0 maxpacket: 32 [ 786.718537][ T804] usb 2-1: config 4 has an invalid interface number: 228 but max is 0 [ 786.727466][ T804] usb 2-1: config 4 has no interface number 0 [ 786.733898][ T804] usb 2-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0 [ 786.768516][ T804] usb 2-1: config 4 interface 228 altsetting 68 bulk endpoint 0x7 has invalid maxpacket 0 [ 786.800323][ T804] usb 2-1: config 4 interface 228 has no altsetting 0 [ 786.817672][ T804] usb 2-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 786.827774][ T804] usb 2-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 786.849378][ T804] usb 2-1: Product: syz [ 786.853632][ T804] usb 2-1: Manufacturer: syz [ 786.884103][ T804] usb 2-1: SerialNumber: syz [ 787.044945][T24423] loop4: detected capacity change from 0 to 32768 [ 787.362606][ T804] usb 2-1: USB disconnect, device number 118 [ 787.407828][T10397] udevd[10397]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 787.538036][T24467] loop0: detected capacity change from 0 to 512 [ 787.555537][T24467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 787.599814][T24467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.613329][T24467] ext4 filesystem being mounted at /1685/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 787.647276][T24471] loop5: detected capacity change from 0 to 64 [ 787.664729][T24471] hfs: unable to locate alternate MDB [ 787.677368][T24471] hfs: continuing without an alternate MDB [ 787.728978][T24467] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 787.747567][T24467] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 787.757500][T24467] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.7953: Failed to acquire dquot type 1 [ 787.788004][ T36] [ 787.790399][ T36] ====================================================== [ 787.797442][ T36] WARNING: possible circular locking dependency detected [ 787.804494][ T36] syzkaller #0 Not tainted [ 787.808924][ T36] ------------------------------------------------------ [ 787.815956][ T36] kworker/u8:2/36 is trying to acquire lock: [ 787.821961][ T36] ffff88807ebb00f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf2/0x15e0 [ 787.832786][ T36] [ 787.832786][ T36] but task is already holding lock: [ 787.840174][ T36] ffff88802ea360b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 787.849537][ T36] [ 787.849537][ T36] which lock already depends on the new lock. [ 787.849537][ T36] [ 787.859960][ T36] [ 787.859960][ T36] the existing dependency chain (in reverse order) is: [ 787.868984][ T36] [ 787.868984][ T36] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 787.876922][ T36] __mutex_lock+0x19f/0x1300 [ 787.882066][ T36] hfs_find_init+0x18e/0x300 [ 787.887194][ T36] hfs_get_block+0x556/0xc50 [ 787.892329][ T36] block_read_full_folio+0x29f/0x830 [ 787.898165][ T36] filemap_read_folio+0x137/0x3b0 [ 787.903732][ T36] do_read_cache_folio+0x358/0x590 [ 787.909385][ T36] read_cache_page+0x5d/0x170 [ 787.914605][ T36] __hfs_bnode_create+0x4b9/0x980 [ 787.920167][ T36] hfs_bnode_find+0x211/0xd40 [ 787.925384][ T36] hfs_brec_find+0x17b/0x510 [ 787.930511][ T36] hfs_brec_read+0x24/0x110 [ 787.935554][ T36] hfs_cat_find_brec+0x177/0x3f0 [ 787.941043][ T36] hfs_fill_super+0x4ff/0x770 [ 787.946269][ T36] get_tree_bdev_flags+0x431/0x4f0 [ 787.951922][ T36] vfs_get_tree+0x92/0x2a0 [ 787.956875][ T36] do_new_mount+0x341/0xd30 [ 787.962016][ T36] __se_sys_mount+0x31d/0x420 [ 787.967235][ T36] do_syscall_64+0x14d/0xf80 [ 787.972369][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.978800][ T36] [ 787.978800][ T36] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 787.988033][ T36] __lock_acquire+0x15a5/0x2cf0 [ 787.993430][ T36] lock_acquire+0xf0/0x2e0 [ 787.998394][ T36] __mutex_lock+0x19f/0x1300 [ 788.003530][ T36] hfs_extend_file+0xf2/0x15e0 [ 788.008845][ T36] hfs_bmap_reserve+0x107/0x430 [ 788.014238][ T36] __hfs_ext_write_extent+0x1fa/0x470 [ 788.020162][ T36] hfs_ext_write_extent+0x17e/0x210 [ 788.025909][ T36] hfs_write_inode+0x117/0x960 [ 788.031215][ T36] __writeback_single_inode+0x75a/0x11a0 [ 788.037391][ T36] writeback_sb_inodes+0x992/0x1a20 [ 788.043167][ T36] wb_writeback+0x456/0xb70 [ 788.048214][ T36] wb_workfn+0x414/0xf50 [ 788.052994][ T36] process_one_work+0x949/0x1650 [ 788.058503][ T36] worker_thread+0xb46/0x1140 [ 788.063725][ T36] kthread+0x388/0x470 [ 788.068336][ T36] ret_from_fork+0x51e/0xb90 [ 788.073468][ T36] ret_from_fork_asm+0x1a/0x30 [ 788.078771][ T36] [ 788.078771][ T36] other info that might help us debug this: [ 788.078771][ T36] [ 788.089024][ T36] Possible unsafe locking scenario: [ 788.089024][ T36] [ 788.096484][ T36] CPU0 CPU1 [ 788.101866][ T36] ---- ---- [ 788.107243][ T36] lock(&tree->tree_lock/1); [ 788.111952][ T36] lock(&HFS_I(tree->inode)->extents_lock); [ 788.120465][ T36] lock(&tree->tree_lock/1); [ 788.127690][ T36] lock(&HFS_I(tree->inode)->extents_lock); [ 788.133691][ T36] [ 788.133691][ T36] *** DEADLOCK *** [ 788.133691][ T36] [ 788.141845][ T36] 3 locks held by kworker/u8:2/36: [ 788.146969][ T36] #0: ffff88801fafe948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x855/0x1650 [ 788.157618][ T36] #1: ffffc90000ac7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 788.169512][ T36] #2: ffff88802ea360b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 788.179298][ T36] [ 788.179298][ T36] stack backtrace: [ 788.185202][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 788.185223][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 788.185235][ T36] Workqueue: writeback wb_workfn (flush-7:5) [ 788.185260][ T36] Call Trace: [ 788.185268][ T36] [ 788.185276][ T36] dump_stack_lvl+0xe8/0x150 [ 788.185301][ T36] print_circular_bug+0x2e1/0x300 [ 788.185330][ T36] check_noncircular+0x12e/0x150 [ 788.185359][ T36] __lock_acquire+0x15a5/0x2cf0 [ 788.185384][ T36] ? unwind_next_frame+0x1aaf/0x23c0 [ 788.185413][ T36] ? unwind_next_frame+0xa5/0x23c0 [ 788.185438][ T36] ? ret_from_fork_asm+0x1a/0x30 [ 788.185453][ T36] ? ret_from_fork_asm+0x1a/0x30 [ 788.185470][ T36] lock_acquire+0xf0/0x2e0 [ 788.185492][ T36] ? hfs_extend_file+0xf2/0x15e0 [ 788.185517][ T36] __mutex_lock+0x19f/0x1300 [ 788.185541][ T36] ? hfs_extend_file+0xf2/0x15e0 [ 788.185563][ T36] ? check_path+0x21/0x40 [ 788.185586][ T36] ? check_noncircular+0xda/0x150 [ 788.185612][ T36] ? add_lock_to_list+0xc7/0x100 [ 788.185636][ T36] ? hfs_extend_file+0xf2/0x15e0 [ 788.185659][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 788.185681][ T36] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 788.185708][ T36] hfs_extend_file+0xf2/0x15e0 [ 788.185731][ T36] ? __pfx___mutex_trylock_common+0x10/0x10 [ 788.185748][ T36] ? __pfx_hfs_extend_file+0x10/0x10 [ 788.185769][ T36] ? trace_contention_end+0x3d/0x150 [ 788.185786][ T36] ? __mutex_lock+0x319/0x1300 [ 788.185812][ T36] ? __asan_memset+0x22/0x50 [ 788.185827][ T36] ? hfs_brec_find+0x19a/0x510 [ 788.185845][ T36] hfs_bmap_reserve+0x107/0x430 [ 788.185871][ T36] __hfs_ext_write_extent+0x1fa/0x470 [ 788.185894][ T36] hfs_ext_write_extent+0x17e/0x210 [ 788.185917][ T36] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 788.185945][ T36] hfs_write_inode+0x117/0x960 [ 788.185970][ T36] ? __pfx_hfs_write_inode+0x10/0x10 [ 788.185995][ T36] ? __pfx_hfs_writepages+0x10/0x10 [ 788.186022][ T36] ? do_raw_spin_unlock+0xf5/0x210 [ 788.186042][ T36] __writeback_single_inode+0x75a/0x11a0 [ 788.186068][ T36] writeback_sb_inodes+0x992/0x1a20 [ 788.186100][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 788.186125][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 788.186158][ T36] ? rcu_is_watching+0x15/0xb0 [ 788.186185][ T36] wb_writeback+0x456/0xb70 [ 788.186207][ T36] ? queue_io+0x1e1/0x4a0 [ 788.186230][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 788.186250][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 788.186273][ T36] wb_workfn+0x414/0xf50 [ 788.186291][ T36] ? look_up_lock_class+0x57/0x110 [ 788.186319][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 788.186337][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 788.186355][ T36] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 788.186383][ T36] ? process_one_work+0x87c/0x1650 [ 788.186404][ T36] process_one_work+0x949/0x1650 [ 788.186430][ T36] ? trace_hardirqs_off_finish+0x30/0x30 [ 788.186450][ T36] ? __pfx_process_one_work+0x10/0x10 [ 788.186471][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 788.186495][ T36] worker_thread+0xb46/0x1140 [ 788.186522][ T36] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 788.186547][ T36] kthread+0x388/0x470 [ 788.186564][ T36] ? __pfx_worker_thread+0x10/0x10 [ 788.186586][ T36] ? __pfx_kthread+0x10/0x10 [ 788.186603][ T36] ret_from_fork+0x51e/0xb90 [ 788.186627][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 788.186648][ T36] ? __switch_to+0xc7d/0x1450 [ 788.186669][ T36] ? __pfx_kthread+0x10/0x10 [ 788.186685][ T36] ret_from_fork_asm+0x1a/0x30 [ 788.186707][ T36] [ 788.639858][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.658346][T24477] netlink: 'syz.4.7951': attribute type 32 has an invalid length.