last executing test programs: 4m19.614316066s ago: executing program 3 (id=6427): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 4m19.260253278s ago: executing program 3 (id=6431): unshare(0x2040600) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 4m19.005310162s ago: executing program 3 (id=6434): syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000000)={'dt2814\x00', [0x260, 0xfffffff9, 0xf, 0x8, 0x9, 0x3, 0x6623, 0x6, 0x8b, 0xc, 0x7, 0x6, 0x2, 0x4, 0x4, 0x0, 0x1, 0x7, 0x10004, 0x7, 0x10, 0x5, 0x10000, 0x6, 0xfffffffd, 0x6, 0xffffffff, 0x3, 0x54, 0x8, 0x4]}) 4m17.34883825s ago: executing program 3 (id=6444): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@usrjquota}, {@abort}, {@nombcache}, {@noload}, {@jqfmt_vfsv0}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@bsdgroups}, {@bh}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 4m16.399766926s ago: executing program 3 (id=6454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000640)={[{@lazytime}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@barrier_val}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@dioread_lock}, {@data_err_ignore}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x9b, 0x4fc, &(0x7f0000000140)="$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") 4m14.178041387s ago: executing program 3 (id=6469): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f00000003c0)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) open(&(0x7f0000000140)='./file0/file1\x00', 0xa8440, 0x8) 4m13.536365014s ago: executing program 32 (id=6469): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f00000003c0)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) open(&(0x7f0000000140)='./file0/file1\x00', 0xa8440, 0x8) 1m26.0854759s ago: executing program 2 (id=7871): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001a40)={0x0, [{0x1, 0x0, 0x2, 0x0}, {0x1, 0x10, 0x2, &(0x7f0000000140)="4fae"}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0xfffffffffffffd29, 0x80, 0x0}, {0x2, 0x0, 0xf, 0x0}, {0x0, 0x0, 0x80000, 0x0}, {0x1, 0x0, 0x67, 0x0}, {0xbdc02d72442cdc3f, 0x0, 0x2, 0x0}, {0x0, 0x0, 0xd77e, 0x0}, {0x59d1733fe4b6d52a, 0x0, 0xba6f, 0x0}, {0x1, 0x0, 0x81, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x2, 0x0, 0xe5d5, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x3, 0x0, 0xa51, 0x0}]}) 1m25.659630454s ago: executing program 2 (id=7878): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYBLOB="1f44ae56bc3abe4161a7450af6800cbded5e4ba212034e21b8ad7fd74614c4051894c6596cdddbc445a4"], 0x1, 0x192, &(0x7f0000009480)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 1m25.321091244s ago: executing program 2 (id=7882): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x11a8, 0x11a8, 0x11a8, 0xffffffff, 0xffffffff, 0x1390, 0x1390, 0x1390, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000000c0), &(0x7f0000000680)=""/246}, 0x20) 1m25.174972903s ago: executing program 2 (id=7883): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@usrjquota}, {@abort}, {@nombcache}, {@noload}, {@jqfmt_vfsv0}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@bsdgroups}, {@bh}]}, 0xfa, 0x477, &(0x7f0000001380)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m24.934569427s ago: executing program 2 (id=7884): pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r0, 0x0, 0xffffff6a) write$binfmt_script(r0, &(0x7f0000001d80)={'#! ', './file0'}, 0xb) 1m23.956224304s ago: executing program 2 (id=7887): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@getlink={0x28, 0x12, 0x321, 0x70bd25, 0x8000, {0x7}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x10001}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000c1}, 0x20000050) 1m23.69200917s ago: executing program 33 (id=7887): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@getlink={0x28, 0x12, 0x321, 0x70bd25, 0x8000, {0x7}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x10001}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000c1}, 0x20000050) 3.144831935s ago: executing program 0 (id=8469): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 2.712704631s ago: executing program 4 (id=8473): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x200600, &(0x7f0000000680)=ANY=[], 0x1, 0x40d, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0xff80) 2.550561541s ago: executing program 0 (id=8474): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000740)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9d0000000094bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b28c52096d13d6b9aac338f27ca2d2108c51ad7bbbc6ec9d577b00c703c4ef2ee9f16febbb7afdafc59e817dc8edb56d445c74fa48cdccf79223640f685b92b26c62d7d65dd4fdd6f73c1d9c70f1bca7a7150f62de63f2f579f1fb2d10f3a770f2b9ce8cd8be9414e0444fd357b3fad5b16d91c91c0f1aa3e11d39426af77180bdb588060a2546b369655c02eb52709e0e03785f8010bfd1a72a817dad46c854ebb0a8aa5d59cae56089e2aac882b33018aa4006a44968a267cde827c86aa1abccb51cb152459f91a39a5cbbd8d218d37f4cf35d339694a379", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a1c6261571866a21a54d762495480"], 0xf, 0x2a4, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 2.404891179s ago: executing program 4 (id=8476): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000007f40)=ANY=[@ANYBLOB="00dab9ef0f812cef41d3cf9c8b7ff5124d6df16a47a96a22c0e21bd704acf07fbfc5993ca7175a983af6232955a984a377cade2dfd19d9d669cc165c39c07b811c740102acfa1ae7df9fcb074ab864eb1a6c917b5676e2b47fa6c79dd882264b691c890b0b4efd9a7639a6435baba8324b21b0f06e6ba64955f2a1084e52acc0f27c5ab037853682085f84dfa17afcfec6336d70bd652932611d6c3188424256089124f95dce7e2a71e63197c4bef6f5d4b807239fcfc183d00ae4c92ae0cfc3b8336397cb019a5f11"], 0x5, 0x483, &(0x7f0000000580)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.981865034s ago: executing program 4 (id=8478): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000002200)=[0x0], 0x0, 0x0, 0x0, 0x1}) 1.907326528s ago: executing program 5 (id=8479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.689876911s ago: executing program 4 (id=8480): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) 1.645544714s ago: executing program 1 (id=8481): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setresuid(0xee01, 0x0, 0x0) setuid(0x0) 1.614777675s ago: executing program 5 (id=8482): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a01020000000000000000010000000900020073797a320000000014000380100000800800034000000002040400800900010073797a30"], 0xe4}}, 0x0) 1.462086524s ago: executing program 4 (id=8483): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="eea73c3ca047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd75d3cfd10cce0c88ccff0ff447cd9caded4abf65767e9dbbd7b5841a8ce3eae5cb5abfd7d4fb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de134a696a731d20a9cf70009a31f83d4b774b0d99de69f14de9e655b84b646166d979b9cdbde38324510998bba500000000007cf791c3e2fc9c72f920a64e0000000000000000000000b5ff5bb6b1fa869800651587af", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.414112967s ago: executing program 1 (id=8484): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc9ffb}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x4) 1.335193511s ago: executing program 5 (id=8485): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4) 1.202752569s ago: executing program 0 (id=8486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000580)=0x4) close(r0) 1.163108692s ago: executing program 1 (id=8487): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 1.049646019s ago: executing program 5 (id=8488): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x80002, 0x0) fcntl$setflags(r0, 0x2, 0x0) 887.362338ms ago: executing program 5 (id=8489): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x41, 0xbcb, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) 776.960304ms ago: executing program 1 (id=8490): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 660.579911ms ago: executing program 0 (id=8491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 443.129924ms ago: executing program 1 (id=8492): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000440)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x3d8, r0, &(0x7f00000003c0)="ace6112e1122846d3f359998e2cfe920", 0x10, 0x4, 0x0, 0x0, r0}]) 360.179419ms ago: executing program 0 (id=8493): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./bus\x00', 0x18100d0, &(0x7f0000000200)={[{@uni_xlateno}, {@utf8}, {@shortname_mixed}, {@shortname_lower}, {@rodir}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@numtail}, {@uni_xlateno}, {@rodir}, {}, {@utf8no}, {@shortname_winnt}, {@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@utf8}, {@uni_xlate}]}, 0x3, 0x36b, &(0x7f0000000500)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jyasSTtdpMxPrbW/WtejwybF++FK9EK9bibMzFjYj8QqHzUOo+nr+wunK2Vqu145f5qEfEVC+wnl8pLGfd+GosxlzM9+J7Vxsppez8Z6sri7WuiNhtd+eP9dJWfTrO9Ob/8UysDS88+oN0nyIurK6cq/UGqK/349sRe8MbFTr5L8RcfP/iYJiU+ncwrq5cXuwnPYzfqlfj4mAvHPgJCAAAAAAAAAAAAAAAAAAAAAAA3JaF2sD8YP2c1HnOV8pZWJjQ3l0fJ4/vrQ+0l68PlKopUvrjjYfq72Sxb32g0fV5tiwkCAAAAAAAAAAAAAAAAAAAAAOb25VotFprG5vbO81iob2xuT0VEZ2aV7/95KvZGO9zk0I5n6IaMZii1pt2p9lIWb9zyiLGw7PO5P2ajz4fZFzsUx1sxcQ0qgc3tVp33Pfz+8Oae7P+yH8P+2QxeQOzQhqPjoy8fmee0q3sqEHhXLGmOj77lZRSoeatYvjl58cHjFJE+dYP3E5zKg7ukzqFb66+fHd/7ze+TLkHHpx7+sp7H/7WbLQ6M0f3CFY2Nm+kZqPU73yE2XvDpe4hGJ4bpcgLpeKZUD5swL39NY3sh9+fuefd7462E1Kx5vXO+TzSJ8s359PR8Epe6KQ50jQ7DJ/ubURrbXrCyX+zwm0c07s++OLjlH769chTDE2NvWyU/p1XHwAAAAAAAAAAAAAAAAAAoKjwXfHel67becP0YVEPP3FC6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiRj+//9CYW83RmqOUvirPSGquraxGVH5rzcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uX8CAAD//3wwZok=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) getdents(r0, &(0x7f0000000440)=""/4090, 0xffa) 317.678591ms ago: executing program 5 (id=8494): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c00f40e1400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab971573", 0x32}, {&(0x7f0000000180)="7cdb015fbb1990a28714976a2615837b64e032", 0x13}, {&(0x7f0000001980)="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", 0xece}], 0x3}, 0x24000008) 62.533936ms ago: executing program 4 (id=8495): futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04000b20"], 0x7) syz_usb_connect(0x1, 0x36, 0x0, 0x0) 21.182459ms ago: executing program 0 (id=8496): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x4200, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x3}) 0s ago: executing program 1 (id=8497): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) kernel console output (not intermixed with test programs): ast group not full [ 754.960896][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.207643][ T2771] loop4: detected capacity change from 0 to 32768 [ 755.285723][ T2771] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 755.331069][ T2771] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 755.433326][ T2771] XFS (loop4): Ending clean mount [ 755.455952][ T2771] XFS (loop4): Quotacheck needed: Please wait. [ 755.478826][ T2779] loop2: detected capacity change from 0 to 32768 [ 755.647124][ T2771] XFS (loop4): Quotacheck: Done. [ 755.737035][ T2846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7557'. [ 755.854073][T29833] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 756.386282][ T5838] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 756.499938][ T2873] netlink: 'syz.1.7574': attribute type 41 has an invalid length. [ 756.567588][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.579545][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.600595][ T5838] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 756.644511][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.690448][ T2880] netlink: 'syz.1.7566': attribute type 10 has an invalid length. [ 756.716280][ T5838] usb 1-1: config 0 descriptor?? [ 756.725650][ T2880] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7566'. [ 756.769058][ T2888] loop4: detected capacity change from 0 to 128 [ 756.797415][ T2889] netlink: 'syz.2.7568': attribute type 30 has an invalid length. [ 757.249113][ T2913] program syz.2.7575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 757.305752][T29037] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 757.360636][ T5838] hid-led: probe of 0003:1D34:000A.0031 failed with error -71 [ 757.387384][ T5838] usb 1-1: USB disconnect, device number 48 [ 757.521160][T29037] usb 5-1: Using ep0 maxpacket: 32 [ 757.561688][T29037] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 757.576173][T29037] usb 5-1: config 0 has no interface number 0 [ 757.597872][T29037] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 757.612712][T29037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.622404][T29037] usb 5-1: Product: syz [ 757.632801][T29037] usb 5-1: Manufacturer: syz [ 757.639349][T29037] usb 5-1: SerialNumber: syz [ 757.666889][T29037] usb 5-1: config 0 descriptor?? [ 757.681914][T29037] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 757.692608][T29037] usb 5-1: selecting invalid altsetting 1 [ 757.699411][T29037] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 757.720668][T29037] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 757.731513][T29037] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 757.744226][T29037] usb 5-1: media controller created [ 757.825228][T29037] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 757.964888][ T2952] 9p: Unknown Cache mode or invalid value m [ 758.195962][ T2963] delete_channel: no stack [ 758.523693][ T2977] loop2: detected capacity change from 0 to 1024 [ 758.533522][ T2977] EXT4-fs: Ignoring removed nomblk_io_submit option [ 758.576640][ T2977] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 758.626698][ T2977] EXT4-fs (loop2): can't mount with commit=4, fs mounted w/o journal [ 758.935984][T29037] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 758.943464][T29037] zl10353_read_register: readreg error (reg=127, ret==-110) [ 758.972556][T29037] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 758.995673][T25063] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 759.088956][T29037] usb 5-1: USB disconnect, device number 6 [ 759.200102][T25063] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 759.215951][T25063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.234607][T25063] usb 1-1: Product: syz [ 759.245637][T25063] usb 1-1: Manufacturer: syz [ 759.265707][T25063] usb 1-1: SerialNumber: syz [ 759.308058][T25063] usb 1-1: config 0 descriptor?? [ 759.536605][ T3036] sctp: [Deprecated]: syz.2.7601 (pid 3036) Use of int in maxseg socket option. [ 759.536605][ T3036] Use struct sctp_assoc_value instead [ 759.603320][T25063] usb 1-1: USB disconnect, device number 49 [ 760.109118][ T3073] loop4: detected capacity change from 0 to 64 [ 760.128437][ T3070] loop2: detected capacity change from 0 to 2048 [ 760.162572][ T3070] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 760.205189][ T3077] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 760.879937][ T3094] loop4: detected capacity change from 0 to 8192 [ 760.911126][ T3094] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 760.950037][ T3094] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 761.005774][ T3094] REISERFS (device loop4): using ordered data mode [ 761.012324][ T3094] reiserfs: using flush barriers [ 761.079806][ T3094] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 761.154476][ T3094] REISERFS (device loop4): checking transaction log (loop4) [ 761.194877][ T3094] REISERFS (device loop4): Using r5 hash to sort names [ 761.216040][ T3094] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 761.415894][ T970] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 761.518964][ T3123] netlink: 'syz.4.7623': attribute type 2 has an invalid length. [ 761.606877][ T970] usb 2-1: config 0 interface 0 altsetting 34 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.638645][ T970] usb 2-1: config 0 interface 0 altsetting 34 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.669517][ T970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 761.685918][ T970] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 761.702015][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.727826][ T970] usb 2-1: config 0 descriptor?? [ 761.777010][ T3099] loop2: detected capacity change from 0 to 32768 [ 761.786413][ T3099] XFS: ikeep mount option is deprecated. [ 761.864271][ T3099] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 762.002478][ T3147] bridge0: port 4(bond0) entered disabled state [ 762.009098][ T3147] bridge0: port 3(hsr0) entered disabled state [ 762.015586][ T3147] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.022972][ T3147] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.132860][ T3099] XFS (loop2): Ending clean mount [ 762.181567][ T3099] XFS (loop2): Quotacheck needed: Please wait. [ 762.198457][ T970] mcp2200 0003:04D8:00DF.0032: USB HID v0.08 Device [HID 04d8:00df] on usb-dummy_hcd.1-1/input0 [ 762.283339][ T3099] XFS (loop2): Quotacheck: Done. [ 762.284623][ T3154] ubi31: attaching mtd0 [ 762.293136][ T3154] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 762.484417][ T970] usb 2-1: USB disconnect, device number 44 [ 762.561838][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 763.128928][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 763.315810][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 763.323410][ T23] usb 5-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 763.346873][ T3207] netlink: 'syz.1.7635': attribute type 1 has an invalid length. [ 763.354773][ T3207] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.7635'. [ 763.355916][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 763.397379][ T23] usb 5-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00 [ 763.425109][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.452078][ T23] usb 5-1: config 0 descriptor?? [ 763.577661][ T3212] loop1: detected capacity change from 0 to 16 [ 763.635987][ T3212] erofs: (device loop1): mounted with root inode @ nid 36. [ 763.677352][ T3212] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 763.725782][ T3212] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 1 of nid 89 [ 763.755690][ T3212] erofs: (device loop1): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 763.788874][ T3212] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 763.816600][ T3212] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 763.846169][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 763.846185][ T28] audit: type=1800 audit(1770215661.921:6226): pid=3212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7637" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 763.923274][ T23] wacom 0003:056A:00D6.0033: Unknown device_type for 'HID 056a:00d6'. Assuming pen. [ 763.970816][ T23] wacom 0003:056A:00D6.0033: hidraw0: USB HID v0.07 Device [HID 056a:00d6] on usb-dummy_hcd.4-1/input0 [ 764.048725][ T23] input: Wacom BambooPT 2FG 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D6.0033/input/input48 [ 764.213032][ T23] usb 5-1: USB disconnect, device number 7 [ 764.253130][ T3218] fido_id[3218]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 764.549911][ T3205] loop2: detected capacity change from 0 to 40427 [ 764.583107][ T3205] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 764.605871][ T3205] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 764.629001][ T3205] F2FS-fs (loop2): build fault injection attr: rate: 18446, type: 0x7ffff [ 764.651753][ T3205] F2FS-fs (loop2): invalid crc value [ 764.663251][ T3205] F2FS-fs (loop2): Found nat_bits in checkpoint [ 764.744559][ T3205] F2FS-fs (loop2): Start checkpoint disabled! [ 764.785646][ T3205] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 764.792784][ T3205] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 765.010389][ T5780] Bluetooth: hci3: link tx timeout [ 765.021940][ T5780] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 766.202991][ T3308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7663'. [ 766.306828][ T3311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7662'. [ 766.402810][ T3316] tipc: MTU too low for tipc bearer [ 766.738591][ T3337] ipvlan2: entered promiscuous mode [ 766.756941][ T3337] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 767.103136][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 767.542814][ T3378] loop1: detected capacity change from 0 to 8192 [ 767.581751][ T3378] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 767.643365][ T3378] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 767.681958][ T3378] REISERFS (device loop1): using ordered data mode [ 767.709601][ T3378] reiserfs: using flush barriers [ 767.716627][T29037] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 767.754999][ T3378] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 767.802958][ T3378] REISERFS (device loop1): checking transaction log (loop1) [ 767.836753][ T3378] REISERFS (device loop1): Using r5 hash to sort names [ 767.844162][ T3378] REISERFS (device loop1): using 3.5.x disk format [ 767.855091][ T3378] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 767.925896][T29037] usb 3-1: Using ep0 maxpacket: 16 [ 767.943559][T29037] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 767.955672][T29037] usb 3-1: config 0 has no interface number 0 [ 767.961871][T29037] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 767.992194][T29037] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 768.027007][T29037] usb 3-1: config 0 interface 41 has no altsetting 0 [ 768.036931][T29037] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 768.047559][T29037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.074096][T29037] usb 3-1: Product: syz [ 768.083204][T29037] usb 3-1: Manufacturer: syz [ 768.100622][T29037] usb 3-1: SerialNumber: syz [ 768.152188][T29037] usb 3-1: config 0 descriptor?? [ 768.176857][ T3383] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 768.184312][ T3383] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 768.331214][ T3359] loop4: detected capacity change from 0 to 65536 [ 768.393886][ T3359] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 768.451997][ T3383] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 768.461668][ T3383] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 768.523014][ T3359] XFS (loop4): Ending clean mount [ 768.549687][ T3359] XFS (loop4): Quotacheck needed: Please wait. [ 768.674479][ T3359] XFS (loop4): Quotacheck: Done. [ 768.690928][T29037] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 768.720188][T29037] usb 3-1: USB disconnect, device number 46 [ 768.900163][T29833] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 768.947583][ T3424] tipc: Enabling of bearer rejected, failed to enable media [ 769.187358][ T3430] loop1: detected capacity change from 0 to 512 [ 769.200974][ T3430] EXT4-fs (loop1): Test dummy encryption mode enabled [ 769.264446][ T3430] EXT4-fs error (device loop1): __ext4_iget:5071: inode #11: block 1: comm syz.1.7690: invalid block [ 769.289289][ T3430] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.7690: couldn't read orphan inode 11 (err -117) [ 769.354227][ T3430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.440541][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.863376][ T28] audit: type=1326 audit(1770215667.931:6227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3460 comm="syz.0.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19eb19aeb9 code=0x7ffc0000 [ 769.916079][ T28] audit: type=1326 audit(1770215667.961:6228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3460 comm="syz.0.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19eb19aeb9 code=0x7ffc0000 [ 769.960559][ T28] audit: type=1326 audit(1770215667.961:6229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3460 comm="syz.0.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19eb19aeb9 code=0x7ffc0000 [ 770.002135][ T28] audit: type=1326 audit(1770215667.961:6230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3460 comm="syz.0.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19eb19aeb9 code=0x7ffc0000 [ 770.025187][ T28] audit: type=1326 audit(1770215667.961:6231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3460 comm="syz.0.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19eb19aeb9 code=0x7ffc0000 [ 770.064093][ T28] audit: type=1326 audit(1770215667.961:6232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3460 comm="syz.0.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f19eb19aeb9 code=0x7ffc0000 [ 770.087325][ T28] audit: type=1326 audit(1770215667.961:6233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3460 comm="syz.0.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19eb19aeb9 code=0x7ffc0000 [ 770.337182][T25063] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 770.465230][ T3480] can0: slcan on ptm0. [ 770.535817][T25063] usb 2-1: Using ep0 maxpacket: 32 [ 770.553435][T25063] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 770.574821][T25063] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 770.594997][T25063] usb 2-1: config 0 interface 0 has no altsetting 0 [ 770.601977][ T3480] can0 (unregistered): slcan off ptm0. [ 770.618339][T25063] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 770.646727][T25063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.667296][T25063] usb 2-1: config 0 descriptor?? [ 770.968112][ T3508] CIFS mount error: No usable UNC path provided in device string! [ 770.968112][ T3508] [ 770.986301][ T3508] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 771.005009][ T3507] can0: slcan on ptm0. [ 771.119316][ T3504] can0 (unregistered): slcan off ptm0. [ 771.131983][T25063] hid-thrustmaster 0003:044F:B65D.0034: unknown main item tag 0x4 [ 771.166170][T25063] hid-thrustmaster 0003:044F:B65D.0034: item fetching failed at offset 4/5 [ 771.189466][T25063] hid-thrustmaster 0003:044F:B65D.0034: parse failed with error -22 [ 771.220556][T25063] hid-thrustmaster: probe of 0003:044F:B65D.0034 failed with error -22 [ 771.334110][T25063] usb 2-1: USB disconnect, device number 45 [ 771.665921][T30384] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 771.705819][ T23] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 771.855826][T30384] usb 5-1: Using ep0 maxpacket: 32 [ 771.868897][T30384] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 771.885450][T30384] usb 5-1: config 0 has no interface number 0 [ 771.892799][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 771.908448][T30384] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 771.926147][T30384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.937835][ T23] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 771.965702][T30384] usb 5-1: Product: syz [ 771.969953][T30384] usb 5-1: Manufacturer: syz [ 771.974589][T30384] usb 5-1: SerialNumber: syz [ 771.979525][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.995600][ T23] usb 3-1: Product: syz [ 771.999841][ T23] usb 3-1: Manufacturer: syz [ 772.004477][ T23] usb 3-1: SerialNumber: syz [ 772.014265][T30384] usb 5-1: config 0 descriptor?? [ 772.050843][T30384] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 772.066081][ T23] usb 3-1: config 0 descriptor?? [ 772.088474][ T23] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 772.125640][T30384] usb 5-1: selecting invalid altsetting 1 [ 772.131538][T30384] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 772.162174][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 772.179341][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 772.190889][T30384] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 772.204637][ T23] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 772.216313][T30384] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 772.224685][T30384] usb 5-1: media controller created [ 772.231198][ T23] usb 3-1: media controller created [ 772.293135][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 772.376851][ T23] cxusb: set interface failed [ 772.384885][T30384] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 772.395265][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 772.431297][ T3595] program syz.1.7716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 772.481475][ T23] DVB: Unable to find symbol mt352_attach() [ 772.492286][ T23] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 772.502528][T30384] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 772.516046][T30384] zl10353_read_register: readreg error (reg=127, ret==-71) [ 772.527926][T30384] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 772.574744][ T3601] netlink: 54775 bytes leftover after parsing attributes in process `syz.0.7717'. [ 772.619036][T30384] usb 5-1: USB disconnect, device number 8 [ 772.775575][ T23] rc_core: IR keymap rc-dvico-portable not found [ 772.795624][ T23] Registered IR keymap rc-empty [ 772.804088][ T23] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 772.863385][ T23] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input51 [ 772.909620][ T23] dvb-usb: schedule remote query interval to 100 msecs. [ 772.938270][ T23] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 773.015951][ T23] usb 3-1: USB disconnect, device number 47 [ 773.225049][ T23] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 773.429245][ T3656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7727'. [ 773.605669][ T970] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 773.786103][ T970] usb 1-1: Using ep0 maxpacket: 32 [ 773.817639][ T970] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 773.846188][ T970] usb 1-1: config 0 interface 0 has no altsetting 0 [ 773.867414][ T970] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 773.885283][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.906055][ T970] usb 1-1: config 0 descriptor?? [ 774.059462][ T3689] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7736'. [ 774.220577][ T3695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7739'. [ 774.343511][ T970] elecom 0003:056E:00E6.0035: unknown main item tag 0x7 [ 774.382388][ T970] elecom 0003:056E:00E6.0035: hidraw0: USB HID v10.00 Device [HID 056e:00e6] on usb-dummy_hcd.0-1/input0 [ 774.570959][ T970] usb 1-1: USB disconnect, device number 50 [ 774.824506][ T3732] loop4: detected capacity change from 0 to 64 [ 775.353758][ T3762] loop4: detected capacity change from 0 to 2048 [ 775.418605][ T3764] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 775.495470][ T3764] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 775.507228][ T3764] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 775.517838][ T3764] Remounting filesystem read-only [ 775.526229][ T3762] overlay: filesystem on ./bus is read-only [ 775.554656][T29833] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 775.576406][T29833] NILFS (loop4): discard dirty page: offset=0, ino=18 [ 775.583357][T29833] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 775.591900][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.602322][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.611719][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.621338][T29833] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 775.628892][T29833] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 775.636749][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.648049][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.662703][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.672486][T29833] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 775.682365][T29833] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 775.692380][T29833] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 775.703857][T29833] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 775.719002][T30384] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 775.729060][T29833] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 775.737074][T29833] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 775.744159][T29833] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 775.764556][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.773770][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.783438][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.794147][T29833] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 775.800998][T29833] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 775.808544][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.845727][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.864842][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.884374][T29833] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 775.900242][T29833] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 775.920384][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.929651][T30384] usb 1-1: Using ep0 maxpacket: 16 [ 775.947440][T30384] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 775.964002][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.973291][T30384] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 775.987232][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 776.005442][T29833] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 776.012459][T30384] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 776.025622][T29833] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 776.032981][T29833] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 776.045658][T30384] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.062756][T29833] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 776.071410][T30384] usb 1-1: config 0 descriptor?? [ 776.080669][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 776.092317][T29833] NILFS (loop4): discard dirty page: offset=65536, ino=3 [ 776.099818][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 776.112895][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 776.143475][T29833] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 776.151209][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 776.169949][T29833] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 776.181396][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 776.192275][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 776.201802][T29833] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 776.209830][T29833] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 776.531685][T30384] lg-g15 0003:046D:C222.0036: hidraw0: USB HID v0.05 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 776.596906][ T3798] loop1: detected capacity change from 0 to 8 [ 776.637304][ T3798] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 776.798094][ T3773] loop2: detected capacity change from 0 to 40427 [ 776.821527][T30384] usb 1-1: USB disconnect, device number 51 [ 777.069266][ T3822] netlink: 'syz.1.7763': attribute type 10 has an invalid length. [ 777.126808][ T3822] team0: Port device netdevsim0 added [ 777.146011][ T3826] netlink: 'syz.1.7763': attribute type 10 has an invalid length. [ 777.289498][ T3826] team0: Port device netdevsim0 removed [ 777.905738][T30384] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 777.997203][ T5838] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 778.106396][T30384] usb 3-1: Using ep0 maxpacket: 32 [ 778.118633][T30384] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.144380][T30384] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.164844][T30384] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 778.195673][T30384] usb 3-1: config 0 interface 0 has no altsetting 0 [ 778.205636][T30384] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 778.225265][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.242879][T30384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.251084][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.279787][T30384] usb 3-1: config 0 descriptor?? [ 778.291426][ T5838] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 778.322182][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.350416][ T5838] usb 2-1: config 0 descriptor?? [ 778.746184][T30384] wacom 0003:056A:0094.0037: Using device in hidraw-only mode [ 778.762038][T30384] wacom 0003:056A:0094.0037: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 778.800107][ T5838] cp2112 0003:10C4:EA90.0038: item fetching failed at offset 3/7 [ 778.821344][ T5838] cp2112 0003:10C4:EA90.0038: parse failed [ 778.833812][ T5838] cp2112: probe of 0003:10C4:EA90.0038 failed with error -22 [ 778.984210][T25063] usb 3-1: USB disconnect, device number 48 [ 779.061408][ T5838] usb 2-1: USB disconnect, device number 46 [ 779.714955][ T3918] loop4: detected capacity change from 0 to 4096 [ 779.768883][ T3918] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 779.814370][ T3918] ntfs3: loop4: It is recommened to use chkdsk. [ 779.984227][ T3918] ntfs3: loop4: failed to convert "076c" to cp857 [ 779.996931][ T3918] ntfs3: loop4: ino=5, "/" directory corrupted [ 780.223577][ T3950] loop4: detected capacity change from 0 to 8 [ 780.236688][ T3939] loop2: detected capacity change from 0 to 8192 [ 780.289916][ T3939] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 780.321904][ T3939] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 780.332732][ T3939] REISERFS (device loop2): using ordered data mode [ 780.341103][ T3939] reiserfs: using flush barriers [ 780.351595][ T3939] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 780.369829][ T3939] REISERFS (device loop2): checking transaction log (loop2) [ 780.415046][ T3939] REISERFS (device loop2): Using rupasov hash to sort names [ 780.465650][ T3939] REISERFS (device loop2): using 3.5.x disk format [ 780.472568][ T3939] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 780.527055][ T3939] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 780.569944][ T3939] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 780.607969][ T3939] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 780.656414][ T3939] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 780.747442][ T3939] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 780.796780][ T3939] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 781.199239][ T3990] loop2: detected capacity change from 0 to 128 [ 781.243195][ T3990] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 781.917071][ T3986] loop1: detected capacity change from 0 to 40427 [ 781.938837][ T3986] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 781.946823][ T3986] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 781.973677][ T3986] F2FS-fs (loop1): Found nat_bits in checkpoint [ 782.100923][ T3986] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 782.109775][ T3986] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 782.302905][ T5776] syz-executor: attempt to access beyond end of device [ 782.302905][ T5776] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 782.340618][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 782.458533][ T4037] loop4: detected capacity change from 0 to 256 [ 782.476920][ T4037] exfat: Deprecated parameter 'namecase' [ 782.501028][ T4037] exfat: Deprecated parameter 'namecase' [ 782.551104][ T4037] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xa036dfdc, utbl_chksum : 0xe619d30d) [ 783.750997][ T4104] loop4: detected capacity change from 0 to 128 [ 783.773174][ T4105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7836'. [ 783.917655][ T4094] loop1: detected capacity change from 0 to 8192 [ 783.973829][ T4094] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 783.988117][ T4094] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 783.997940][ T4094] REISERFS (device loop1): using ordered data mode [ 784.004572][ T4094] reiserfs: using flush barriers [ 784.013301][ T4094] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 784.030894][ T4094] REISERFS (device loop1): checking transaction log (loop1) [ 784.042882][ T4094] REISERFS (device loop1): Using r5 hash to sort names [ 784.056182][ T4094] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 784.251180][ T4125] loop4: detected capacity change from 0 to 16 [ 784.299237][ T4125] erofs: (device loop4): mounted with root inode @ nid 36. [ 784.758017][ T4146] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 784.769640][ T4145] IPVS: stopping master sync thread 4146 ... [ 785.217761][ T970] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 785.225135][ T4171] netlink: 'syz.1.7852': attribute type 13 has an invalid length. [ 785.233588][ T4171] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7852'. [ 785.245875][ T5838] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 785.255808][ T4171] : renamed from syz_tun (while UP) [ 785.268066][ T4171] : refused to change device tx_queue_len [ 785.285769][ T4171] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 785.426930][ T5838] usb 5-1: Using ep0 maxpacket: 16 [ 785.434691][ T5838] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 785.441522][ T970] usb 3-1: config 4 has an invalid interface number: 28 but max is 0 [ 785.460576][ T5838] usb 5-1: config 0 has no interface number 0 [ 785.461679][ T970] usb 3-1: config 4 has no interface number 0 [ 785.494263][ T5838] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 785.513360][ T970] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 785.525629][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.530565][ T5838] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 785.545443][ T970] usb 3-1: Product: syz [ 785.566095][ T970] usb 3-1: Manufacturer: syz [ 785.570758][ T970] usb 3-1: SerialNumber: syz [ 785.588301][ T5838] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 785.614254][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 785.636416][ T5838] usb 5-1: Product: syz [ 785.640661][ T5838] usb 5-1: SerialNumber: syz [ 785.647883][ T970] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.28/input/input52 [ 785.708025][ T5838] usb 5-1: config 0 descriptor?? [ 785.733474][ T5838] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 785.771293][ T5838] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input53 [ 785.838000][ T5124] bcm5974 3-1:4.28: could not read from device [ 785.867786][ T4155] bcm5974 3-1:4.28: could not read from device [ 785.888377][ T970] usb 3-1: USB disconnect, device number 49 [ 785.999404][ T5775] udevd[5775]: Error opening device "/dev/input/event4": No such file or directory [ 786.048907][ T5775] udevd[5775]: Unable to EVIOCGABS device "/dev/input/event4" [ 786.067501][ T5775] udevd[5775]: Unable to EVIOCGABS device "/dev/input/event4" [ 786.082259][ T5775] udevd[5775]: Unable to EVIOCGABS device "/dev/input/event4" [ 786.091447][ T5775] udevd[5775]: Unable to EVIOCGABS device "/dev/input/event4" [ 786.114899][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 786.117312][T29037] usb 5-1: USB disconnect, device number 9 [ 786.121900][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 786.214182][T29037] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 786.403278][ T4229] usb usb8: usbfs: process 4229 (syz.1.7856) did not claim interface 0 before use [ 787.340584][ T4257] loop4: detected capacity change from 0 to 2048 [ 787.402928][ T4257] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 787.427541][ T4257] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 787.818814][ T4280] mkiss: ax0: crc mode is auto. [ 788.167726][ T4308] loop2: detected capacity change from 0 to 16 [ 788.230639][ T4308] erofs: (device loop2): mounted with root inode @ nid 36. [ 788.246954][ T4312] loop1: detected capacity change from 0 to 2048 [ 788.280271][ T4312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 788.597393][ T4333] loop2: detected capacity change from 0 to 512 [ 788.605924][T29037] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 788.610902][ T4333] EXT4-fs: Ignoring removed oldalloc option [ 788.625931][ T4333] EXT4-fs: Ignoring removed bh option [ 788.657093][ T4333] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.7883: corrupted in-inode xattr: e_value size too large [ 788.678408][ T4333] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.7883: couldn't read orphan inode 15 (err -117) [ 788.694240][ T4333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.743280][ T4333] overlayfs: upper fs needs to support d_type. [ 788.798015][T29037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.808496][T29037] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 788.817940][T29037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.837080][T29037] usb 5-1: config 0 descriptor?? [ 788.846467][ T5772] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 788.876931][ T5772] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 788.898326][ T5772] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 788.921235][ T5772] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 788.942573][ T5772] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 788.963988][ T5772] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 788.993952][ T5772] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 789.022882][ T5772] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 789.051352][ T5772] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 789.079652][ T5772] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 789.308152][T29037] lg-g15 0003:046D:C222.0039: unbalanced delimiter at end of report description [ 789.322677][T29037] lg-g15: probe of 0003:046D:C222.0039 failed with error -22 [ 789.382948][T26736] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.533252][T25063] usb 5-1: USB disconnect, device number 10 [ 789.820077][T17301] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.984293][T17301] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.148223][T17301] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.416215][T17301] bond0: (slave netdevsim0): Releasing backup interface [ 790.469948][T17301] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.975195][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 791.038800][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 791.049254][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 791.062506][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 791.071306][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 791.115763][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 791.222207][T17301] tipc: Disabling bearer [ 791.301549][ T4371] loop1: detected capacity change from 0 to 32768 [ 791.336181][T17301] tipc: Disabling bearer [ 791.353156][T17301] tipc: Left network mode [ 791.374643][ T4379] loop4: detected capacity change from 0 to 32768 [ 791.406954][ T4371] [ 791.406954][ T4371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 791.406954][ T4371] [ 791.648308][ T32] ERROR: (device loop1): diWrite: ixpxd invalid [ 791.648308][ T32] [ 791.802793][ T32] ERROR: (device loop1): txCommit: [ 791.802793][ T32] [ 791.815951][ T32] jfs_write_inode: jfs_commit_inode failed! [ 791.822051][ T5776] [ 791.822051][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 791.822051][ T5776] [ 791.872731][ T5776] [ 791.872731][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 791.872731][ T5776] [ 792.101114][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7904'. [ 793.266927][ T5780] Bluetooth: hci1: command tx timeout [ 793.394032][ T4391] chnl_net:caif_netlink_parms(): no params data found [ 793.478274][ T4517] loop4: detected capacity change from 0 to 8192 [ 793.557655][ T4517] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 793.576099][ T4517] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 793.610995][ T4517] REISERFS (device loop4): using ordered data mode [ 793.645720][ T4517] reiserfs: using flush barriers [ 793.684599][ T4517] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 793.725365][ T4576] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 793.779678][ T4517] REISERFS (device loop4): checking transaction log (loop4) [ 793.817803][ T4517] REISERFS (device loop4): Using r5 hash to sort names [ 793.844221][ T4517] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 794.346452][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.353673][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.413264][ T4391] bridge_slave_0: entered allmulticast mode [ 794.430797][ T4391] bridge_slave_0: entered promiscuous mode [ 794.450138][ T4622] loop4: detected capacity change from 0 to 256 [ 794.466856][ T4622] exfat: Deprecated parameter 'utf8' [ 794.525020][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.576104][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.583437][ T4391] bridge_slave_1: entered allmulticast mode [ 794.607094][ T4622] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 794.694307][ T4391] bridge_slave_1: entered promiscuous mode [ 794.912829][ T4391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.959066][ T4391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.045766][T17301] hsr_slave_0: left promiscuous mode [ 795.070576][T17301] hsr_slave_1: left promiscuous mode [ 795.094868][T17301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.118302][T17301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.146597][T17301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.154073][T17301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.176907][T17301] team0: left allmulticast mode [ 795.181844][T17301] team_slave_1: left allmulticast mode [ 795.182553][ T4662] loop4: detected capacity change from 0 to 64 [ 795.188988][T17301] bridge0: port 3(team0) entered disabled state [ 795.210274][T17301] bridge_slave_1: left allmulticast mode [ 795.216224][T17301] bridge_slave_1: left promiscuous mode [ 795.222015][T17301] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.283590][T17301] bridge_slave_0: left allmulticast mode [ 795.296856][T17301] bridge_slave_0: left promiscuous mode [ 795.305936][T17301] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.337093][ T5780] Bluetooth: hci1: command tx timeout [ 795.434898][T17301] batadv_slave_1: left promiscuous mode [ 795.461122][T17301] veth1_macvtap: left promiscuous mode [ 795.472129][T17301] veth0_macvtap: left promiscuous mode [ 795.485859][T17301] veth1_vlan: left promiscuous mode [ 795.491659][T17301] veth0_vlan: left promiscuous mode [ 795.713033][ T4675] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 795.913443][ T4663] loop1: detected capacity change from 0 to 32768 [ 795.933150][ T4663] [ 795.933150][ T4663] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 795.933150][ T4663] [ 795.991094][ T28] audit: type=1800 audit(1770215694.051:6234): pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7922" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 796.224906][T17301] bond5 (unregistering): Released all slaves [ 796.341641][ T4663] [ 796.341641][ T4663] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 796.341641][ T4663] [ 796.354972][ T4663] [ 796.354972][ T4663] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 796.354972][ T4663] [ 796.367640][ T4663] [ 796.367640][ T4663] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 796.367640][ T4663] [ 796.378861][ T4663] [ 796.378861][ T4663] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 796.378861][ T4663] [ 796.427290][ T4663] [ 796.427290][ T4663] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 796.427290][ T4663] [ 796.467420][ T5776] [ 796.467420][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 796.467420][ T5776] [ 796.481418][ T5776] [ 796.481418][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 796.481418][ T5776] [ 796.911912][T17301] bond4 (unregistering): Released all slaves [ 796.954282][T17301] bond3 (unregistering): Released all slaves [ 796.968649][T30384] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 797.008835][T17301] bond2 (unregistering): Released all slaves [ 797.054290][T17301] bond1 (unregistering): Released all slaves [ 797.201543][T30384] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 797.211834][T30384] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 797.243757][T30384] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 797.254393][T30384] usb 5-1: config 220 has no interface number 2 [ 797.289566][T30384] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 797.303328][T30384] usb 5-1: config 220 interface 0 has no altsetting 0 [ 797.347356][T30384] usb 5-1: config 220 interface 76 has no altsetting 0 [ 797.354327][T30384] usb 5-1: config 220 interface 1 has no altsetting 0 [ 797.392490][T30384] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 797.402158][T30384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.418874][ T5780] Bluetooth: hci1: command tx timeout [ 797.424544][T30384] usb 5-1: Product: syz [ 797.429211][T30384] usb 5-1: Manufacturer: syz [ 797.433868][T30384] usb 5-1: SerialNumber: syz [ 797.696015][T30384] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 797.702474][T30384] usb 5-1: No valid video chain found. [ 797.709257][T30384] usb 5-1: selecting invalid altsetting 0 [ 797.762857][T30384] usb 5-1: selecting invalid altsetting 0 [ 797.770845][T30384] usbtest: probe of 5-1:220.1 failed with error -22 [ 797.799852][T30384] usb 5-1: USB disconnect, device number 11 [ 798.285854][ T970] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 798.487793][ T970] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 798.505691][ T970] usb 2-1: config 0 has no interface number 0 [ 798.522634][ T970] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.545602][ T970] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.562716][ T970] usb 2-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 798.585556][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.614037][ T970] usb 2-1: config 0 descriptor?? [ 798.873562][T17301] team_slave_1 (unregistering): left promiscuous mode [ 798.902697][T17301] team0 (unregistering): Port device team_slave_1 removed [ 799.025457][T17301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.077363][ T970] uclogic 0003:28BD:0905.003A: Interface probing failed: -22 [ 799.105455][ T970] uclogic 0003:28BD:0905.003A: interface is invalid, ignoring [ 799.160188][T17301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.300959][ T970] usb 2-1: USB disconnect, device number 47 [ 799.519139][ T5780] Bluetooth: hci1: command tx timeout [ 800.182165][ T4742] loop1: detected capacity change from 0 to 8192 [ 800.257709][ T4742] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 800.285771][ T4742] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 800.295093][ T4742] REISERFS (device loop1): using ordered data mode [ 800.327971][ T4742] reiserfs: using flush barriers [ 800.372917][ T4742] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 800.436365][ T4742] REISERFS (device loop1): checking transaction log (loop1) [ 800.460595][ T4742] REISERFS (device loop1): Using r5 hash to sort names [ 800.476098][ T4742] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 800.489762][T17301] bond0 (unregistering): Released all slaves [ 800.860715][ T4740] loop4: detected capacity change from 0 to 32768 [ 800.915867][ T4740] [ 800.915867][ T4740] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 800.915867][ T4740] [ 800.945787][ T28] audit: type=1800 audit(1770215699.011:6235): pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7938" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 801.161241][ T4391] team0: Port device team_slave_0 added [ 801.220305][ T4391] team0: Port device team_slave_1 added [ 801.307263][ T4740] [ 801.307263][ T4740] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 801.307263][ T4740] [ 801.333234][ T4740] [ 801.333234][ T4740] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 801.333234][ T4740] [ 801.357592][ T4391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.364605][ T4391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.393163][ T4740] [ 801.393163][ T4740] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 801.393163][ T4740] [ 801.421717][ T4740] [ 801.421717][ T4740] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 801.421717][ T4740] [ 801.440891][ T4391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.468840][ T4740] [ 801.468840][ T4740] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 801.468840][ T4740] [ 801.511931][ T4391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.530472][ T4391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.580350][ T4391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.611554][T29833] [ 801.611554][T29833] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 801.611554][T29833] [ 801.672254][T29833] [ 801.672254][T29833] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 801.672254][T29833] [ 801.932238][ T4391] hsr_slave_0: entered promiscuous mode [ 801.976298][ T23] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 801.986141][ T4391] hsr_slave_1: entered promiscuous mode [ 802.183802][ T23] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 802.211418][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.236456][ T23] usb 2-1: Product: syz [ 802.257340][ T23] usb 2-1: Manufacturer: syz [ 802.274662][ T23] usb 2-1: SerialNumber: syz [ 802.294943][ T23] usb 2-1: config 0 descriptor?? [ 802.646369][ T23] usb 2-1: USB disconnect, device number 48 [ 802.871049][ T4391] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 802.894463][ T4391] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 802.923243][ T4391] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 802.944302][ T4391] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 803.171426][ T4391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.258944][ T4391] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.292774][T17286] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.300026][T17286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.342714][T17286] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.349995][T17286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.476033][T30384] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 803.501052][ T4391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 803.665709][T30384] usb 5-1: Using ep0 maxpacket: 32 [ 803.702771][T30384] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 803.718187][T30384] usb 5-1: config 0 has no interface number 0 [ 803.727834][T30384] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 803.745878][T30384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.764194][T30384] usb 5-1: Product: syz [ 803.774326][T30384] usb 5-1: Manufacturer: syz [ 803.784460][T30384] usb 5-1: SerialNumber: syz [ 803.810552][T30384] usb 5-1: config 0 descriptor?? [ 803.834780][T30384] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 803.942608][ T4391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.065547][T30384] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 804.102929][T30384] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 804.494530][ T4391] veth0_vlan: entered promiscuous mode [ 804.517636][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 804.525618][ T5838] usb 5-1: USB disconnect, device number 12 [ 804.529357][ T4391] veth1_vlan: entered promiscuous mode [ 804.568276][ T5838] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 804.603514][ T4391] veth0_macvtap: entered promiscuous mode [ 804.607984][ T5838] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 804.632047][ T5838] quatech2 5-1:0.51: device disconnected [ 804.663162][ T4391] veth1_macvtap: entered promiscuous mode [ 804.714362][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.730177][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.740726][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.752004][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.763150][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.775197][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.787502][ T4391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.805254][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.818916][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.833415][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.845213][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.856369][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.873409][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.893534][ T4391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.914728][ T4391] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.924999][ T4391] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.943567][ T4391] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.953861][ T4391] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.143187][T17291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.189170][T17291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.307116][T17291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.332635][T17291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.525809][T30384] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 805.547462][ T5061] netlink: 'syz.5.7890': attribute type 2 has an invalid length. [ 805.555269][ T5061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7890'. [ 805.743618][T30384] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 805.766925][T30384] usb 5-1: config 0 has no interface number 0 [ 805.786788][T30384] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.816345][T30384] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.856127][T30384] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 805.885697][T30384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.939128][T30384] usb 5-1: config 0 descriptor?? [ 806.395248][T30384] uclogic 0003:28BD:0905.003B: Interface probing failed: -22 [ 806.414387][T30384] uclogic 0003:28BD:0905.003B: interface is invalid, ignoring [ 806.536428][ T5065] loop5: detected capacity change from 0 to 32768 [ 806.611798][ T5065] [ 806.611798][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 806.611798][ T5065] [ 806.643817][T30384] usb 5-1: USB disconnect, device number 13 [ 806.698601][ T28] audit: type=1800 audit(1770215704.771:6236): pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7949" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 806.990719][ T5065] [ 806.990719][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 806.990719][ T5065] [ 807.003902][ T5065] [ 807.003902][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 807.003902][ T5065] [ 807.024782][ T5065] [ 807.024782][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 807.024782][ T5065] [ 807.036054][ T5065] [ 807.036054][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 807.036054][ T5065] [ 807.060653][ T113] ERROR: (device loop5): dbFree: error in block map [ 807.060653][ T113] [ 807.083280][ T113] ERROR: (device loop5): dbFree: error in block map [ 807.083280][ T113] [ 807.097367][ T5065] [ 807.097367][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 807.097367][ T5065] [ 807.257316][ T4391] [ 807.257316][ T4391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 807.257316][ T4391] [ 807.277350][ T4391] [ 807.277350][ T4391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 807.277350][ T4391] [ 807.425947][ T9] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 807.638598][ T9] usb 1-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 807.671111][ T9] usb 1-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 807.698785][ T5133] loop5: detected capacity change from 0 to 128 [ 807.705353][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 807.720683][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00 [ 807.752171][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.778336][ T9] usb 1-1: config 0 descriptor?? [ 807.784242][ T5108] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 808.254724][ T9] wacom 0003:056A:00D5.003C: Unknown device_type for 'HID 056a:00d5'. Assuming pen. [ 808.308218][ T9] wacom 0003:056A:00D5.003C: hidraw0: USB HID v0.04 Device [HID 056a:00d5] on usb-dummy_hcd.0-1/input0 [ 808.347966][ T9] input: Wacom Bamboo Pen 6x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D5.003C/input/input54 [ 808.514099][ T9] usb 1-1: USB disconnect, device number 52 [ 808.650293][ T5162] fido_id[5162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 808.909768][ T5197] loop4: detected capacity change from 0 to 128 [ 809.022027][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.035670][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.532521][ T5226] netlink: 'syz.4.7972': attribute type 3 has an invalid length. [ 809.602281][ T5229] loop5: detected capacity change from 0 to 512 [ 809.632338][ T5229] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 809.681937][ T5229] EXT4-fs (loop5): 1 truncate cleaned up [ 809.693319][ T5229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.721911][ T5229] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.5.7973: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 809.742792][ T5236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7974'. [ 809.750043][ T5229] EXT4-fs (loop5): Remounting filesystem read-only [ 809.779403][ T5229] EXT4-fs warning (device loop5): ext4_rename_delete:3778: inode #2: comm syz.5.7973: Deleting old file: nlink 5, error=-117 [ 809.912700][ T4391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.135723][ T23] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 810.272329][ T5254] loop5: detected capacity change from 0 to 4096 [ 810.284844][ T5256] loop1: detected capacity change from 0 to 8192 [ 810.302657][ T5254] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 810.355818][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 810.372088][ T23] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 810.396076][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.420515][ T23] usb 5-1: Product: syz [ 810.427215][ T23] usb 5-1: Manufacturer: syz [ 810.431876][ T23] usb 5-1: SerialNumber: syz [ 810.470921][ T5254] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 810.479356][ T23] usb 5-1: config 0 descriptor?? [ 810.517487][ T23] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 810.685271][ T4391] ntfs3: loop5: ino=1a, ntfs_sync_fs failed, -22. [ 810.901050][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7981'. [ 810.927068][ T23] usb 5-1: clie_3_5_startup: get interface number bad return length: 0 [ 810.966026][ T23] visor: probe of 5-1:0.0 failed with error -5 [ 811.153632][ T23] usb 5-1: USB disconnect, device number 14 [ 811.625664][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 811.831425][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 811.867846][ T9] usb 2-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 811.899709][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 811.935971][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00 [ 811.955651][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.977327][ T9] usb 2-1: config 0 descriptor?? [ 812.015137][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.022896][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.448022][ T9] wacom 0003:056A:00D6.003D: Unknown device_type for 'HID 056a:00d6'. Assuming pen. [ 812.506432][ T9] wacom 0003:056A:00D6.003D: hidraw0: USB HID v0.07 Device [HID 056a:00d6] on usb-dummy_hcd.1-1/input0 [ 812.527843][ T9] input: Wacom BambooPT 2FG 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D6.003D/input/input57 [ 812.665456][ T9] usb 2-1: USB disconnect, device number 49 [ 812.768647][ T5347] fido_id[5347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 812.871545][ T5342] loop5: detected capacity change from 0 to 8192 [ 812.930571][ T5342] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 812.963293][ T5342] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 812.973325][ T5342] REISERFS (device loop5): using ordered data mode [ 812.980005][ T5342] reiserfs: using flush barriers [ 812.995234][ T5342] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 813.020427][ T5342] REISERFS (device loop5): checking transaction log (loop5) [ 813.054378][ T5342] REISERFS (device loop5): Using r5 hash to sort names [ 813.082325][ T5342] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 813.186474][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7999'. [ 813.424889][ T5377] loop1: detected capacity change from 0 to 64 [ 813.941101][ T5394] loop5: detected capacity change from 0 to 8192 [ 813.976503][ T5394] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 814.035836][ T5394] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 814.045186][ T5394] REISERFS (device loop5): using ordered data mode [ 814.052901][ T5402] sctp: [Deprecated]: syz.1.8005 (pid 5402) Use of int in maxseg socket option. [ 814.052901][ T5402] Use struct sctp_assoc_value instead [ 814.134542][ T5394] reiserfs: using flush barriers [ 814.172701][ T5394] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 814.216571][ T5394] REISERFS (device loop5): checking transaction log (loop5) [ 814.279787][ T5394] REISERFS (device loop5): Using r5 hash to sort names [ 814.304171][ T5394] REISERFS (device loop5): using 3.5.x disk format [ 814.353870][ T5394] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 814.610132][ T5421] loop4: detected capacity change from 0 to 22 [ 814.656042][ T5421] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 814.685458][ T5421] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 814.874765][ T5437] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8011'. [ 814.912118][ T5441] loop1: detected capacity change from 0 to 64 [ 815.006814][ T5441] hfs: hfs: Invalid key length: 94 [ 815.236899][ T5457] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8018'. [ 815.373070][ T5461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8028'. [ 815.390395][ T5461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8028'. [ 816.019781][ T5467] loop4: detected capacity change from 0 to 32768 [ 816.045677][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 816.185812][ T970] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 816.250985][ T9] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 816.275244][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.296023][ T9] usb 6-1: Product: syz [ 816.300280][ T9] usb 6-1: Manufacturer: syz [ 816.304923][ T9] usb 6-1: SerialNumber: syz [ 816.329710][ T9] usb 6-1: config 0 descriptor?? [ 816.402868][ T970] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 816.415273][ T970] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 816.460239][ T970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 816.467471][ T970] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 816.477424][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.489617][ T970] usb 2-1: config 0 descriptor?? [ 816.495453][ T5487] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 816.655126][ T5517] loop4: detected capacity change from 0 to 128 [ 816.695390][ T9] usb 6-1: USB disconnect, device number 2 [ 816.978301][ T5542] loop4: detected capacity change from 0 to 16 [ 816.992396][ T5542] erofs: (device loop4): mounted with root inode @ nid 36. [ 817.003042][ T970] logitech 0003:046D:C24F.003E: unbalanced collection at end of report description [ 817.034430][ T970] logitech 0003:046D:C24F.003E: parse failed [ 817.042845][ T5542] syz.4.8033: attempt to access beyond end of device [ 817.042845][ T5542] loop4: rw=0, sector=48, nr_sectors = 16 limit=16 [ 817.064346][ T970] logitech: probe of 0003:046D:C24F.003E failed with error -22 [ 817.072611][ T5542] syz.4.8033: attempt to access beyond end of device [ 817.072611][ T5542] loop4: rw=0, sector=48, nr_sectors = 16 limit=16 [ 817.253826][ T970] usb 2-1: USB disconnect, device number 50 [ 817.386183][ T5567] loop5: detected capacity change from 0 to 8 [ 818.008529][ T5589] loop1: detected capacity change from 0 to 64 [ 818.144524][ T5589] hfs: request for non-existent node 3584 in B*Tree [ 818.146141][ T5565] loop4: detected capacity change from 0 to 32768 [ 818.165082][ T5589] hfs: request for non-existent node 3584 in B*Tree [ 818.190445][ T5589] hfs: request for non-existent node 1280 in B*Tree [ 818.208492][ T5565] [ 818.208492][ T5565] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 818.208492][ T5565] [ 818.228666][ T5589] hfs: request for non-existent node 1280 in B*Tree [ 818.266891][ T28] audit: type=1800 audit(1770215716.331:6237): pid=5565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8036" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 818.333296][T17286] hfs: request for non-existent node 1280 in B*Tree [ 818.351148][T17286] hfs: request for non-existent node 1280 in B*Tree [ 818.558992][ T5608] loop1: detected capacity change from 0 to 128 [ 818.594687][ T5565] [ 818.594687][ T5565] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 818.594687][ T5565] [ 818.666636][ T5565] [ 818.666636][ T5565] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 818.666636][ T5565] [ 818.690115][ T5565] [ 818.690115][ T5565] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 818.690115][ T5565] [ 818.706658][ T5565] [ 818.706658][ T5565] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 818.706658][ T5565] [ 818.719896][ T113] ERROR: (device loop4): dbFree: error in block map [ 818.719896][ T113] [ 818.737923][ T5565] [ 818.737923][ T5565] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 818.737923][ T5565] [ 818.756561][ T23] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 818.856610][T29833] [ 818.856610][T29833] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 818.856610][T29833] [ 818.880410][T29833] [ 818.880410][T29833] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 818.880410][T29833] [ 818.961986][ T5617] loop1: detected capacity change from 0 to 4096 [ 818.972413][ T23] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 818.994488][ T23] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 818.994501][ T5617] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 819.032809][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 819.044320][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 819.055798][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.104664][ T23] usb 1-1: config 0 descriptor?? [ 819.121828][ T5603] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 819.226592][ T5617] ntfs3: loop1: ino=5, "/" directory corrupted [ 819.574348][ T23] logitech 0003:046D:C24F.003F: unbalanced collection at end of report description [ 819.609742][ T23] logitech 0003:046D:C24F.003F: parse failed [ 819.627244][ T23] logitech: probe of 0003:046D:C24F.003F failed with error -22 [ 819.755841][ T5838] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 819.818444][ T23] usb 1-1: USB disconnect, device number 53 [ 819.950449][ T5838] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 819.965829][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.984615][ T5838] usb 5-1: Product: syz [ 819.989383][ T5838] usb 5-1: Manufacturer: syz [ 819.994028][ T5838] usb 5-1: SerialNumber: syz [ 820.016929][ T5838] usb 5-1: config 0 descriptor?? [ 820.199569][ T5650] loop5: detected capacity change from 0 to 32768 [ 820.238913][ T5650] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 820.360721][ T9] usb 5-1: USB disconnect, device number 15 [ 820.393095][ T4391] ocfs2: Unmounting device (7,5) on (node local) [ 820.582500][ T5693] loop5: detected capacity change from 0 to 64 [ 820.583612][ T5692] vcan0: MTU too low for tipc bearer [ 820.602255][ T5664] loop1: detected capacity change from 0 to 32768 [ 820.610378][ T5692] tipc: Enabling of bearer rejected, failed to enable media [ 820.636893][ T5664] [ 820.636893][ T5664] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 820.636893][ T5664] [ 820.694433][ T5693] hfs: request for non-existent node 3584 in B*Tree [ 820.725405][ T5693] hfs: request for non-existent node 3584 in B*Tree [ 820.741886][ T5693] hfs: request for non-existent node 1280 in B*Tree [ 820.750063][ T5664] ERROR: (device loop1): diWrite: ixpxd invalid [ 820.750063][ T5664] [ 820.771182][ T5664] ERROR: (device loop1): remounting filesystem as read-only [ 820.779852][ T5693] hfs: request for non-existent node 1280 in B*Tree [ 820.789955][ T5664] ERROR: (device loop1): txCommit: [ 820.789955][ T5664] [ 820.881502][T17299] hfs: request for non-existent node 1280 in B*Tree [ 820.912439][T17299] hfs: request for non-existent node 1280 in B*Tree [ 821.240949][ T5715] loop4: detected capacity change from 0 to 512 [ 821.266951][ T5715] EXT4-fs: Ignoring removed bh option [ 821.302181][ T5715] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 821.395855][ T5715] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.8060: corrupted in-inode xattr: e_value size too large [ 821.545703][ T5715] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.8060: couldn't read orphan inode 15 (err -117) [ 821.605172][ T5715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.754564][T29833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.037012][ T5738] loop5: detected capacity change from 0 to 4096 [ 822.074751][ T5738] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 822.266434][ T5738] ntfs3: loop5: ino=5, "/" directory corrupted [ 822.685949][ T970] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 822.876094][ T970] usb 6-1: Using ep0 maxpacket: 32 [ 822.892183][ T970] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 822.911089][ T970] usb 6-1: config 0 has no interface number 0 [ 822.932205][ T970] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 822.951948][ T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.975760][ T970] usb 6-1: Product: syz [ 822.979986][ T970] usb 6-1: Manufacturer: syz [ 823.003069][ T970] usb 6-1: SerialNumber: syz [ 823.026296][ T970] usb 6-1: config 0 descriptor?? [ 823.048116][ T970] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 823.293654][ T970] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 823.332968][ T970] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 823.537344][ T23] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 823.757641][ T23] usb 5-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 823.773887][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8080'. [ 823.794042][ T23] usb 5-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 823.803068][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 823.840636][ T970] usb 6-1: USB disconnect, device number 3 [ 823.849449][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 823.872460][ T970] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 823.897152][ T23] usb 5-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00 [ 823.919775][ T970] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 823.935073][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.958927][ T970] quatech2 6-1:0.51: device disconnected [ 823.994825][ T23] usb 5-1: config 0 descriptor?? [ 824.021626][ T5806] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 824.496045][ T23] wacom 0003:056A:00D5.0040: Unknown device_type for 'HID 056a:00d5'. Assuming pen. [ 824.566774][ T23] wacom 0003:056A:00D5.0040: hidraw0: USB HID v0.04 Device [HID 056a:00d5] on usb-dummy_hcd.4-1/input0 [ 824.652490][ T23] input: Wacom Bamboo Pen 6x8 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D5.0040/input/input60 [ 824.903387][ T23] usb 5-1: USB disconnect, device number 16 [ 825.725084][ T5919] loop4: detected capacity change from 0 to 4096 [ 825.796152][ T5919] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 825.919553][ T5928] devpts: called with bogus options [ 825.987200][ T5919] ntfs3: loop4: ino=5, "/" directory corrupted [ 826.116216][ T5896] loop5: detected capacity change from 0 to 32768 [ 826.162745][ T5896] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.8075 (5896) [ 826.225970][ T5896] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 826.276775][ T5896] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 826.299576][ T5896] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 826.359877][ T5896] BTRFS info (device loop5): trying to use backup root at mount time [ 826.398635][ T5896] BTRFS info (device loop5): max_inline at 0 [ 826.404717][ T5896] BTRFS info (device loop5): using free space tree [ 826.718401][ T5896] BTRFS info (device loop5): enabling ssd optimizations [ 826.725448][ T5896] BTRFS info (device loop5): auto enabling async discard [ 826.819302][T25063] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 826.992983][ T4391] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 827.055672][T25063] usb 2-1: Using ep0 maxpacket: 32 [ 827.070163][T25063] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 827.102890][T25063] usb 2-1: config 0 has no interface number 0 [ 827.119144][T25063] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 827.160560][T25063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.197700][T25063] usb 2-1: Product: syz [ 827.201947][T25063] usb 2-1: Manufacturer: syz [ 827.257635][T25063] usb 2-1: SerialNumber: syz [ 827.323011][T25063] usb 2-1: config 0 descriptor?? [ 827.361450][T25063] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 827.586218][T25063] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 827.636552][T25063] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 828.107036][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 828.125867][ T9] usb 2-1: USB disconnect, device number 51 [ 828.155066][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 828.202764][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 828.258160][ T9] quatech2 2-1:0.51: device disconnected [ 829.642498][ T6068] loop1: detected capacity change from 0 to 32768 [ 830.505639][ T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 830.698774][ T23] usb 6-1: config 0 interface 0 altsetting 34 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.730252][ T23] usb 6-1: config 0 interface 0 altsetting 34 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.775828][ T23] usb 6-1: config 0 interface 0 has no altsetting 0 [ 830.782541][ T23] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 830.837464][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.860857][ T23] usb 6-1: config 0 descriptor?? [ 830.880031][ T6150] netlink: 'syz.4.8119': attribute type 41 has an invalid length. [ 831.057981][ T6161] netlink: 'syz.4.8120': attribute type 10 has an invalid length. [ 831.079160][ T6161] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8120'. [ 831.109044][ T6161] bond0: entered promiscuous mode [ 831.127980][ T6161] bond_slave_0: entered promiscuous mode [ 831.136462][ T6161] bond_slave_1: entered promiscuous mode [ 831.153499][ T6161] bridge0: port 3(bond0) entered blocking state [ 831.167913][ T6161] bridge0: port 3(bond0) entered disabled state [ 831.189013][ T6161] bond0: entered allmulticast mode [ 831.194352][ T6161] bond_slave_0: entered allmulticast mode [ 831.201661][ T6161] bond_slave_1: entered allmulticast mode [ 831.212724][ T6161] bridge0: port 3(bond0) entered blocking state [ 831.219223][ T6161] bridge0: port 3(bond0) entered forwarding state [ 831.339952][ T23] mcp2200 0003:04D8:00DF.0041: USB HID v0.08 Device [HID 04d8:00df] on usb-dummy_hcd.5-1/input0 [ 831.454432][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8123'. [ 831.624715][T25063] usb 6-1: USB disconnect, device number 4 [ 831.855144][ T6198] loop4: detected capacity change from 0 to 4096 [ 832.010200][ T6198] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 832.166448][ T28] audit: type=1326 audit(1770215730.241:6238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.8127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2419aeb9 code=0x7ffc0000 [ 832.215727][ T28] audit: type=1326 audit(1770215730.271:6239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.8127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2419aeb9 code=0x7ffc0000 [ 832.305135][ T28] audit: type=1326 audit(1770215730.271:6240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.8127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2419aeb9 code=0x7ffc0000 [ 832.376494][ T28] audit: type=1326 audit(1770215730.271:6241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.8127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2419aeb9 code=0x7ffc0000 [ 832.454458][ T28] audit: type=1326 audit(1770215730.271:6242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.8127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f4e2419aeb9 code=0x7ffc0000 [ 832.477862][ T28] audit: type=1326 audit(1770215730.271:6243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.8127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2419aeb9 code=0x7ffc0000 [ 832.500849][ T28] audit: type=1326 audit(1770215730.271:6244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.8127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2419aeb9 code=0x7ffc0000 [ 832.536840][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8142'. [ 832.574674][ T28] audit: type=1326 audit(1770215730.321:6245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.8127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2419aeb9 code=0x7ffc0000 [ 832.657268][ T28] audit: type=1326 audit(1770215730.321:6246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.8127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2419aeb9 code=0x7ffc0000 [ 832.720829][ T28] audit: type=1326 audit(1770215730.331:6247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.8127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f4e2419aeb9 code=0x7ffc0000 [ 833.384060][ T6259] loop4: detected capacity change from 0 to 1024 [ 833.462288][ T6259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 833.749429][ T6246] loop5: detected capacity change from 0 to 32768 [ 833.824433][ T6246] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 834.067363][ T6246] XFS (loop5): Ending clean mount [ 834.276008][ T6291] loop1: detected capacity change from 0 to 4096 [ 834.284242][ T4391] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 834.357964][T29833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.403464][ T6297] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 835.049528][ T6320] loop1: detected capacity change from 0 to 1024 [ 835.208463][ T6320] hfsplus: xattr search failed [ 835.365870][ T23] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 835.571254][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 835.599743][ T23] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 835.636046][ T23] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 835.664627][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 835.681847][ T23] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 835.702068][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.731845][ T23] usb 5-1: config 0 descriptor?? [ 835.847096][ T6352] loop5: detected capacity change from 0 to 8192 [ 836.178388][ T23] hid-thrustmaster 0003:044F:B65D.0042: unknown main item tag 0x4 [ 836.208512][ T23] hid-thrustmaster 0003:044F:B65D.0042: item fetching failed at offset 4/5 [ 836.251898][ T23] hid-thrustmaster 0003:044F:B65D.0042: parse failed with error -22 [ 836.280408][ T23] hid-thrustmaster: probe of 0003:044F:B65D.0042 failed with error -22 [ 836.447671][ T6354] loop1: detected capacity change from 0 to 40427 [ 836.451069][ T23] usb 5-1: USB disconnect, device number 17 [ 836.489367][ T6354] F2FS-fs (loop1): invalid crc value [ 836.506632][ T6354] F2FS-fs (loop1): Found nat_bits in checkpoint [ 836.651922][ T6354] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 836.754908][ T5776] syz-executor: attempt to access beyond end of device [ 836.754908][ T5776] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 836.809496][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 837.333739][ T6398] loop4: detected capacity change from 0 to 4096 [ 837.354666][ T6398] __ntfs_warning: 4 callbacks suppressed [ 837.354683][ T6398] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid end of sector marker. [ 837.502109][ T6398] ntfs: volume version 3.1. [ 837.642812][ T6398] ntfs: (device loop4): parse_options(): Unrecognized mount option ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿ. [ 837.691773][ T6409] loop1: detected capacity change from 0 to 128 [ 837.721910][ T6409] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 837.752687][ T6409] hpfs: filesystem error: improperly stopped [ 837.759532][ T6398] ntfs: (device loop4): ntfs_remount(): Volume is dirty and read-only. Cannot remount read-write. [ 837.779927][ T6409] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 837.806869][ T6409] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 837.845259][ T6409] hpfs: You really don't want any checks? You are crazy... [ 837.866834][ T6409] hpfs: hpfs_map_sector(): read error [ 837.872320][ T6409] hpfs: code page support is disabled [ 837.888406][ T6409] hpfs: hpfs_map_4sectors(): unaligned read [ 837.894492][ T6409] hpfs: hpfs_map_4sectors(): unaligned read [ 837.920977][ T6409] hpfs: filesystem error: unable to find root dir [ 838.179866][ T6391] loop5: detected capacity change from 0 to 65536 [ 838.214216][ T6391] XFS (loop5): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 838.254541][ T6391] XFS (loop5): Ending clean mount [ 838.327337][ T4391] XFS (loop5): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 839.205719][ T1189] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 839.407799][ T1189] usb 6-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 839.429368][ T1189] usb 6-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 839.457332][ T1189] usb 6-1: config 0 interface 0 has no altsetting 0 [ 839.472770][ T1189] usb 6-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00 [ 839.482623][ T1189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.497700][ T1189] usb 6-1: config 0 descriptor?? [ 839.512480][ T6439] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 840.005340][ T1189] wacom 0003:056A:00D5.0043: Unknown device_type for 'HID 056a:00d5'. Assuming pen. [ 840.028169][ T1189] wacom 0003:056A:00D5.0043: hidraw0: USB HID v0.04 Device [HID 056a:00d5] on usb-dummy_hcd.5-1/input0 [ 840.078485][ T1189] input: Wacom Bamboo Pen 6x8 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00D5.0043/input/input63 [ 840.211311][ T1189] usb 6-1: USB disconnect, device number 5 [ 840.295317][ T6481] fido_id[6481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 841.515806][ T23] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 841.635854][ T6541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8207'. [ 841.724734][ T23] usb 5-1: config 4 has an invalid interface number: 28 but max is 0 [ 841.743580][ T23] usb 5-1: config 4 has no interface number 0 [ 841.764279][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 841.785692][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.805620][ T23] usb 5-1: Product: syz [ 841.809983][ T23] usb 5-1: Manufacturer: syz [ 841.814631][ T23] usb 5-1: SerialNumber: syz [ 841.833145][ T23] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.28/input/input66 [ 841.946698][ T6557] loop1: detected capacity change from 0 to 512 [ 841.969249][ T6557] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 842.016756][ T6557] EXT4-fs (loop1): orphan cleanup on readonly fs [ 842.044198][ T5124] bcm5974 5-1:4.28: could not read from device [ 842.044604][ T6557] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.8220: iget: bad i_size value: 360287970189639680 [ 842.069187][ T5124] bcm5974 5-1:4.28: could not read from device [ 842.105572][ T23] usb 5-1: USB disconnect, device number 18 [ 842.223835][ T6557] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.8220: couldn't read orphan inode 15 (err -117) [ 842.259088][ T6557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 842.378450][ T6557] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #2: block 3: comm syz.1.8220: lblock 0 mapped to illegal pblock 3 (length 1) [ 842.433045][ T6586] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #2: block 3: comm syz.1.8220: lblock 0 mapped to illegal pblock 3 (length 1) [ 842.460071][ T6585] loop5: detected capacity change from 0 to 1024 [ 842.531984][ T6585] hfsplus: invalid xattr key length: 0 [ 842.608197][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.625238][T17286] hfsplus: b-tree write err: -5, ino 8 [ 842.976962][ T6597] loop1: detected capacity change from 0 to 8192 [ 843.019073][ T6597] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 843.047819][ T6597] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 843.103747][ T6597] REISERFS (device loop1): using ordered data mode [ 843.168458][ T6597] reiserfs: using flush barriers [ 843.255823][ T6597] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 843.314062][ T6597] REISERFS (device loop1): checking transaction log (loop1) [ 843.363822][ T6597] REISERFS (device loop1): Using r5 hash to sort names [ 843.391600][ T6597] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 843.433236][ T6597] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 843.885886][ T6625] Cannot find add_set index 46338 as target [ 844.395647][T30384] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 844.454567][ T6653] loop4: detected capacity change from 0 to 8192 [ 844.587575][T30384] usb 2-1: config 4 has an invalid interface number: 28 but max is 0 [ 844.603863][T30384] usb 2-1: config 4 has no interface number 0 [ 844.622046][T30384] usb 2-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 844.652567][T30384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.686557][T30384] usb 2-1: Product: syz [ 844.691013][T30384] usb 2-1: Manufacturer: syz [ 844.715643][T30384] usb 2-1: SerialNumber: syz [ 844.752467][T30384] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.28/input/input67 [ 844.954760][ T5124] bcm5974 2-1:4.28: could not read from device [ 845.007020][ T6642] bcm5974 2-1:4.28: could not read from device [ 845.043036][ T5124] bcm5974 2-1:4.28: could not read from device [ 845.055977][T30384] usb 2-1: USB disconnect, device number 52 [ 845.157489][ T6574] udevd[6574]: Error opening device "/dev/input/event4": No such file or directory [ 845.196539][ T6574] udevd[6574]: Unable to EVIOCGABS device "/dev/input/event4" [ 845.219968][ T6574] udevd[6574]: Unable to EVIOCGABS device "/dev/input/event4" [ 845.245219][ T6574] udevd[6574]: Unable to EVIOCGABS device "/dev/input/event4" [ 845.270029][ T6574] udevd[6574]: Unable to EVIOCGABS device "/dev/input/event4" [ 845.320201][ T6695] loop5: detected capacity change from 0 to 1024 [ 845.436541][ T6695] hfsplus: xattr search failed [ 845.616111][ T6708] netlink: 'syz.5.8245': attribute type 10 has an invalid length. [ 845.664903][ T6708] team0: Port device netdevsim0 added [ 845.694619][ T6713] netlink: 'syz.5.8245': attribute type 10 has an invalid length. [ 845.853206][ T6713] team0: Port device netdevsim0 removed [ 845.881024][ T6713] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 846.152413][ T6729] sctp: [Deprecated]: syz.0.8251 (pid 6729) Use of int in maxseg socket option. [ 846.152413][ T6729] Use struct sctp_assoc_value instead [ 846.180867][ T6730] loop5: detected capacity change from 0 to 128 [ 846.242475][ T6730] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 846.290246][ T6730] hpfs: filesystem error: improperly stopped [ 846.311241][ T6730] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 846.330502][ T6730] hpfs: You really don't want any checks? You are crazy... [ 846.358385][ T6730] hpfs: hpfs_map_sector(): read error [ 846.374118][ T6730] hpfs: code page support is disabled [ 846.399423][ T6730] hpfs: hpfs_map_4sectors(): unaligned read [ 846.415735][ T6730] hpfs: hpfs_map_4sectors(): unaligned read [ 846.438211][ T6730] hpfs: filesystem error: unable to find root dir [ 846.464931][ T6737] 8021q: VLANs not supported on bridge0 [ 846.518261][ T6740] ip6tnl3: entered allmulticast mode [ 846.759791][ T6752] loop5: detected capacity change from 0 to 512 [ 846.811338][ T6752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.855669][ T6752] ext4 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 846.973416][ T6765] netlink: 'syz.0.8259': attribute type 10 has an invalid length. [ 847.046630][ T6765] bond0: (slave netdevsim0): Releasing backup interface [ 847.075392][ T4391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.126946][ T6765] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 847.134232][ T6765] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 847.201329][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8262'. [ 847.233242][ T6765] team0: Port device netdevsim0 added [ 847.284094][ T6766] netlink: 'syz.0.8259': attribute type 10 has an invalid length. [ 847.361696][ T6766] team0: Port device netdevsim0 removed [ 847.378960][ T6766] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 847.387030][ T6766] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 847.397939][ T6766] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 847.414058][ T6777] loop4: detected capacity change from 0 to 4096 [ 847.631661][ T6786] tipc: Enabling of bearer rejected, failed to enable media [ 847.722080][ T6792] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 848.152525][ T6807] netlink: 'syz.1.8271': attribute type 1 has an invalid length. [ 848.171291][ T6807] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8271'. [ 848.191963][ T6807] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8271'. [ 848.579128][ T6824] Cannot find add_set index 46338 as target [ 849.235654][T25063] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 849.440404][T25063] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.454667][T25063] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 849.464015][T25063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.483002][T25063] usb 5-1: config 0 descriptor?? [ 849.942486][T25063] logitech-djreceiver 0003:046D:C71F.0044: unbalanced collection at end of report description [ 849.963098][T25063] logitech-djreceiver 0003:046D:C71F.0044: logi_dj_probe: parse failed [ 849.973184][T25063] logitech-djreceiver: probe of 0003:046D:C71F.0044 failed with error -22 [ 850.143529][T30384] usb 5-1: USB disconnect, device number 19 [ 850.774263][ T6874] loop5: detected capacity change from 0 to 512 [ 850.787742][ T6877] netlink: 'syz.4.8287': attribute type 10 has an invalid length. [ 850.809700][ T6874] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 850.859168][ T6874] EXT4-fs (loop5): orphan cleanup on readonly fs [ 850.888308][ T6874] EXT4-fs error (device loop5): ext4_orphan_get:1398: inode #15: comm syz.5.8288: iget: bad i_size value: 360287970189639680 [ 850.902739][ T6874] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.8288: couldn't read orphan inode 15 (err -117) [ 850.917268][ T6874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 850.930677][ T6877] team0: Port device netdevsim0 added [ 850.968102][ T6875] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 850.976278][ T6881] netlink: 'syz.4.8287': attribute type 10 has an invalid length. [ 850.995859][ T6874] EXT4-fs error (device loop5): ext4_map_blocks:608: inode #2: block 3: comm syz.5.8288: lblock 0 mapped to illegal pblock 3 (length 1) [ 851.041206][ T6874] EXT4-fs error (device loop5): ext4_map_blocks:608: inode #2: block 3: comm syz.5.8288: lblock 0 mapped to illegal pblock 3 (length 1) [ 851.150796][ T6881] team0: Port device netdevsim0 removed [ 851.162334][ T4391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.187154][ T6881] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 851.206504][ T6881] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 851.214735][ T6881] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 851.525671][ T6901] loop5: detected capacity change from 0 to 2048 [ 851.569329][ T6906] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 852.437076][ T6945] loop5: detected capacity change from 0 to 2048 [ 852.458242][ T6946] loop4: detected capacity change from 0 to 2048 [ 852.489841][ T6945] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 852.542216][ T6955] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 852.600735][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8318'. [ 853.334560][ T6967] loop5: detected capacity change from 0 to 32768 [ 853.400611][ T6967] JBD2: Ignoring recovery information on journal [ 853.468588][ T6967] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 853.480905][ T6972] loop4: detected capacity change from 0 to 32768 [ 853.523729][ T6972] (syz.4.8319,6972,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 853.553774][ T6972] (syz.4.8319,6972,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 853.625077][ T28] audit: type=1800 audit(1770215751.691:6252): pid=6967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8315" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 853.656243][ T6972] JBD2: Ignoring recovery information on journal [ 853.829176][ T6990] binder: 6989:6990 ioctl c0306201 0 returned -14 [ 853.838733][ T4391] ocfs2: Unmounting device (7,5) on (node local) [ 853.861452][ T6990] binder: 6989:6990 ioctl c00c6211 0 returned -14 [ 853.866912][ T6972] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 854.236426][T29833] ocfs2: Unmounting device (7,4) on (node local) [ 854.774279][ T6999] loop1: detected capacity change from 0 to 32768 [ 854.810357][ T6999] XFS: attr2 mount option is deprecated. [ 854.866970][ T6999] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 854.935780][T30384] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 854.972559][ T7036] loop5: detected capacity change from 0 to 512 [ 854.986278][ T7036] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 855.027608][ T6999] XFS (loop1): Ending clean mount [ 855.042646][ T7036] EXT4-fs (loop5): 1 truncate cleaned up [ 855.052946][ T6999] XFS (loop1): Quotacheck needed: Please wait. [ 855.060443][ T7036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 855.148994][ T28] audit: type=1800 audit(1770215753.201:6253): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8331" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 855.196418][T30384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.212773][ T6999] XFS (loop1): Quotacheck: Done. [ 855.254893][T30384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.308669][T30384] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 855.332197][ T4391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.360058][T30384] usb 5-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 855.398506][T30384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.437030][T30384] usb 5-1: config 0 descriptor?? [ 855.511038][ T5776] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 855.771616][ T7063] loop5: detected capacity change from 0 to 1024 [ 855.889095][T30384] wacom 0003:056A:00B5.0045: unbalanced delimiter at end of report description [ 855.906788][T30384] wacom 0003:056A:00B5.0045: parse failed [ 855.926375][T30384] wacom: probe of 0003:056A:00B5.0045 failed with error -22 [ 856.014470][T17299] hfsplus: b-tree write err: -5, ino 4 [ 856.116142][ T9] usb 5-1: USB disconnect, device number 20 [ 856.662424][ T7083] loop5: detected capacity change from 0 to 32768 [ 856.699889][ T7083] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 856.791252][ T7103] loop1: detected capacity change from 0 to 512 [ 856.806586][ T7103] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 856.826883][ T6986] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 856.848832][ T7103] EXT4-fs (loop1): 1 truncate cleaned up [ 856.889629][ T7103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 857.013663][ T28] audit: type=1800 audit(1770215755.081:6254): pid=7103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8344" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 857.162352][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.202653][ T7113] loop4: detected capacity change from 0 to 4096 [ 857.546523][ T7126] loop5: detected capacity change from 0 to 16 [ 857.628551][ T7126] erofs: (device loop5): mounted with root inode @ nid 36. [ 857.722324][ T28] audit: type=1800 audit(1770215755.791:6255): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8350" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 857.808503][ T28] audit: type=1326 audit(1770215755.881:6256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.1.8355" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5aff19aeb9 code=0x0 [ 858.006153][T25063] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 858.068353][T30384] IPVS: starting estimator thread 0... [ 858.185777][ T7155] IPVS: using max 27 ests per chain, 64800 per kthread [ 858.196567][T25063] usb 5-1: Using ep0 maxpacket: 16 [ 858.211663][T25063] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.229116][ T7162] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8362'. [ 858.233210][T25063] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.250883][ T7162] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 858.263382][T25063] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 858.269881][ T7162] openvswitch: netlink: Message has 1 unknown bytes. [ 858.289620][T25063] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 858.304425][T25063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.330590][T25063] usb 5-1: config 0 descriptor?? [ 858.771976][T25063] microsoft 0003:045E:07DA.0046: item fetching failed at offset 29/34 [ 858.804324][T25063] microsoft 0003:045E:07DA.0046: parse failed [ 858.825179][T25063] microsoft: probe of 0003:045E:07DA.0046 failed with error -22 [ 858.938215][ T7190] loop1: detected capacity change from 0 to 2048 [ 858.959135][ T7190] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 858.994527][ T7190] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 859.028039][ T7190] UDF-fs: Scanning with blocksize 512 failed [ 859.058778][ T9] usb 5-1: USB disconnect, device number 21 [ 859.111446][ T7190] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 859.964958][ T7215] loop1: detected capacity change from 0 to 32768 [ 859.998422][ T7230] binder: 7228:7230 ioctl c0306201 0 returned -14 [ 860.016708][ T7230] binder: 7228:7230 ioctl c00c6211 0 returned -14 [ 860.041727][ T7215] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 860.056233][ T1189] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 860.222863][ T7215] XFS (loop1): Ending clean mount [ 860.235727][ T1189] usb 5-1: Using ep0 maxpacket: 16 [ 860.242969][ T1189] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 860.252308][ T7215] XFS (loop1): Quotacheck needed: Please wait. [ 860.285772][ T1189] usb 5-1: config 1 has no interface number 0 [ 860.291952][ T1189] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 860.323048][ T1189] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 860.343300][ T1189] usb 5-1: config 1 interface 105 has no altsetting 0 [ 860.353701][ T1189] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 860.373803][ T1189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.412758][ T7215] XFS (loop1): Quotacheck: Done. [ 860.412764][ T1189] usb 5-1: Product: syz [ 860.412783][ T1189] usb 5-1: Manufacturer: syz [ 860.427377][ T1189] usb 5-1: SerialNumber: syz [ 860.445215][ T7221] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 860.452978][ T7221] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 860.592430][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 860.622027][ T7249] ieee802154 phy0 wpan0: encryption failed: -22 [ 860.883453][ T7221] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 860.901426][ T7221] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 861.129752][ T1189] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 861.156049][ T1189] aqc111: probe of 5-1:1.105 failed with error -71 [ 861.192403][ T1189] usb 5-1: USB disconnect, device number 22 [ 861.876066][ T7290] hugetlbfs: Bad value 'm' for mount option 'nr_inodes' [ 861.876066][ T7290] [ 862.067551][ T7294] hugetlbfs: Bad value for 'uid' [ 862.141268][ T7300] tipc: Started in network mode [ 862.147311][ T7300] tipc: Node identity 000000000000003a0000000000000001, cluster identity 4711 [ 862.165299][ T7300] tipc: Enabling of bearer rejected, failed to enable media [ 863.180214][ T7314] loop1: detected capacity change from 0 to 32768 [ 863.216008][ T7314] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 863.473343][ T6574] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 863.533033][ T7325] loop5: detected capacity change from 0 to 32768 [ 863.585643][ T5758] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 863.630134][ T7325] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 863.775917][ T5758] usb 5-1: Using ep0 maxpacket: 32 [ 863.862993][ T5758] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.897947][ T5758] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.926982][ T7371] loop1: detected capacity change from 0 to 256 [ 863.933551][ T5758] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 863.971974][ T5758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.022727][ T5758] usb 5-1: config 0 descriptor?? [ 864.062646][ T7325] XFS (loop5): Ending clean mount [ 864.079840][ T7325] XFS (loop5): Quotacheck needed: Please wait. [ 864.119594][ T7371] FAT-fs (loop1): Directory bread(block 64) failed [ 864.189716][ T7371] FAT-fs (loop1): Directory bread(block 65) failed [ 864.209796][ T7325] XFS (loop5): Quotacheck: Done. [ 864.215078][ T7371] FAT-fs (loop1): Directory bread(block 66) failed [ 864.265003][ T7371] FAT-fs (loop1): Directory bread(block 67) failed [ 864.296170][ T7371] FAT-fs (loop1): Directory bread(block 68) failed [ 864.302777][ T7371] FAT-fs (loop1): Directory bread(block 69) failed [ 864.387022][ T7371] FAT-fs (loop1): Directory bread(block 70) failed [ 864.393628][ T7371] FAT-fs (loop1): Directory bread(block 71) failed [ 864.445820][ T7371] FAT-fs (loop1): Directory bread(block 72) failed [ 864.452422][ T7371] FAT-fs (loop1): Directory bread(block 73) failed [ 864.492301][ T5758] kone 0003:1E7D:2CED.0047: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 864.579132][ T4391] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 864.689565][ T5758] kone 0003:1E7D:2CED.0047: couldn't init struct kone_device [ 864.723372][ T5758] kone 0003:1E7D:2CED.0047: couldn't install mouse [ 864.755113][ T5758] kone: probe of 0003:1E7D:2CED.0047 failed with error -5 [ 864.827091][ T5758] usb 5-1: USB disconnect, device number 23 [ 864.864137][ T7383] fido_id[7383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 865.438817][ T7420] loop1: detected capacity change from 0 to 64 [ 866.337894][ T7447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8432'. [ 866.385901][ T7451] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8432'. [ 866.643685][ T7436] loop5: detected capacity change from 0 to 32768 [ 866.705324][ T7436] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 866.883753][ T7436] XFS (loop5): Ending clean mount [ 866.913465][ T7436] XFS (loop5): Quotacheck needed: Please wait. [ 867.066455][ T7436] XFS (loop5): Quotacheck: Done. [ 867.194664][ T7482] loop4: detected capacity change from 0 to 1024 [ 867.269979][ T4391] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 867.338906][ T7482] hfsplus: bad catalog entry type [ 867.568481][T17291] hfsplus: b-tree write err: -5, ino 4 [ 867.783620][ T7504] loop4: detected capacity change from 0 to 128 [ 867.815795][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 867.964769][ T7504] syz.4.8446: attempt to access beyond end of device [ 867.964769][ T7504] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 868.026291][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 868.044848][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.082579][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.105890][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 868.139231][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 868.165235][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.199888][ T9] usb 2-1: config 0 descriptor?? [ 868.445605][T25063] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 868.669251][T25063] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 868.705657][T25063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.722483][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0048/input/input68 [ 868.781454][T25063] usb 1-1: config 0 descriptor?? [ 868.805911][ T9] microsoft 0003:045E:07DA.0048: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 868.889822][ T9] usb 2-1: USB disconnect, device number 53 [ 869.102709][ T7554] fido_id[7554]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 869.276512][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8457'. [ 869.295650][T25063] kye 0003:0458:0138.0049: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.0-1/input0 [ 869.383055][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8457'. [ 869.518722][ T1189] usb 1-1: USB disconnect, device number 54 [ 870.064846][ T7622] loop1: detected capacity change from 0 to 1024 [ 870.247274][ T7622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 870.359702][ T7622] ext4 filesystem being mounted at /2166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.473138][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.484484][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.626081][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 870.702620][ T7638] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 870.727431][ T7638] team0: Device macvtap1 is already an upper device of the team interface [ 870.846785][ T7645] overlayfs: workdir and upperdir must be separate subtrees [ 871.080468][ T7664] netlink: 'syz.5.8472': attribute type 6 has an invalid length. [ 871.138766][ T7668] loop4: detected capacity change from 0 to 136 [ 871.174726][ T7668] Attempt to read inode for relocated directory [ 871.480912][ T7681] loop4: detected capacity change from 0 to 128 [ 871.525789][ T7681] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 871.565974][ T7681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 872.227464][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8482'. [ 872.413521][ T28] audit: type=1326 audit(1770215770.481:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.8484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aff19aeb9 code=0x7ffc0000 [ 872.480103][ T28] audit: type=1326 audit(1770215770.511:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.8484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aff19aeb9 code=0x7ffc0000 [ 872.575542][ T28] audit: type=1326 audit(1770215770.521:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.8484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5aff19aeb9 code=0x7ffc0000 [ 872.635398][ T7709] loop4: detected capacity change from 0 to 8192 [ 872.645601][ T28] audit: type=1326 audit(1770215770.521:6260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.8484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aff19aeb9 code=0x7ffc0000 [ 872.743577][ T28] audit: type=1326 audit(1770215770.521:6261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.8484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aff19aeb9 code=0x7ffc0000 [ 872.767475][ T28] audit: type=1326 audit(1770215770.541:6262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.8484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f5aff19aeb9 code=0x7ffc0000 [ 872.782797][ T7709] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 872.846417][ T28] audit: type=1326 audit(1770215770.541:6263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.8484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aff19aeb9 code=0x7ffc0000 [ 872.905599][ T7709] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 872.914982][ T7709] REISERFS (device loop4): using ordered data mode [ 872.944136][ T7709] reiserfs: using flush barriers [ 873.009402][ T7709] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 873.048690][ T7709] REISERFS (device loop4): checking transaction log (loop4) [ 873.064516][ T7709] REISERFS (device loop4): Using r5 hash to sort names [ 873.091631][ T7709] reiserfs: enabling write barrier flush mode [ 873.102563][ T7709] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 873.130432][ T7709] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 873.149644][ T7709] REISERFS (device loop4): Remounting filesystem read-only [ 873.163609][ T7709] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 873.182733][ T7709] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 873.204806][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8491'. [ 873.219200][ T7709] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 873.230483][ T7727] loop5: detected capacity change from 0 to 4096 [ 873.235761][ T7709] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error [ 873.284042][ T7727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.327597][ T7709] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 873.402312][ T7709] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 873.414862][ T7709] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 873.430685][ T4391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.456337][ T7709] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 873.667681][T29833] ------------[ cut here ]------------ [ 873.673882][T29833] kernel BUG at fs/reiserfs/journal.c:1916! [ 873.725816][T29833] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 873.731969][T29833] CPU: 0 PID: 29833 Comm: syz-executor Not tainted syzkaller #0 [ 873.739647][T29833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 873.749831][T29833] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 873.755693][T29833] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 a4 e1 b5 ff e9 f9 fc ff ff e8 6a ba 5d ff <0f> 0b e8 63 ba 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 873.775354][T29833] RSP: 0018:ffffc9000355fb00 EFLAGS: 00010293 [ 873.781483][T29833] RAX: ffffffff82295a46 RBX: 1ffff920006abf64 RCX: ffff88801c3b0000 [ 873.789493][T29833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 873.797511][T29833] RBP: ffffc9000355fbf8 R08: ffffc9000355fb77 R09: 0000000000000000 [ 873.805514][T29833] R10: ffffc9000355fb40 R11: fffff520006abf6f R12: ffffc9000c5d9000 [ 873.813681][T29833] R13: dffffc0000000000 R14: ffff88807c7bc630 R15: 0000000000000000 [ 873.821701][T29833] FS: 00005555893dc500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 873.830677][T29833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 873.837301][T29833] CR2: 00007f5afff456b8 CR3: 000000007e755000 CR4: 00000000003506f0 [ 873.845319][T29833] Call Trace: [ 873.848642][T29833] [ 873.851611][T29833] ? journal_release+0x30/0x30 [ 873.856486][T29833] journal_release+0x1f/0x30 [ 873.861133][T29833] reiserfs_put_super+0x26b/0x510 [ 873.866222][T29833] ? hook_inode_free_security+0xb0/0xb0 [ 873.871814][T29833] ? evict_inodes+0x63c/0x6a0 [ 873.876551][T29833] ? reiserfs_dirty_inode+0x270/0x270 [ 873.881983][T29833] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 873.887686][T29833] ? reiserfs_dirty_inode+0x270/0x270 [ 873.893114][T29833] generic_shutdown_super+0x134/0x2b0 [ 873.898545][T29833] kill_block_super+0x44/0x90 [ 873.903293][T29833] deactivate_locked_super+0x97/0x100 [ 873.908721][T29833] cleanup_mnt+0x43b/0x4d0 [ 873.913193][T29833] task_work_run+0x1d4/0x260 [ 873.917846][T29833] ? task_work_cancel+0x220/0x220 [ 873.922932][T29833] ? exit_to_user_mode_loop+0x3b/0x110 [ 873.928466][T29833] exit_to_user_mode_loop+0xe6/0x110 [ 873.933810][T29833] exit_to_user_mode_prepare+0xee/0x180 [ 873.939415][T29833] syscall_exit_to_user_mode+0x1a/0x50 [ 873.944931][T29833] do_syscall_64+0x61/0xa0 [ 873.949405][T29833] ? clear_bhb_loop+0x40/0x90 [ 873.954120][T29833] ? clear_bhb_loop+0x40/0x90 [ 873.958856][T29833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.964791][T29833] RIP: 0033:0x7f4e2419c117 [ 873.969244][T29833] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 873.988893][T29833] RSP: 002b:00007ffdb862e258 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 873.995435][ T7751] base_sock_release(ffff888058afbc00) sk=ffff88805f390000 [ 873.997339][T29833] RAX: 0000000000000000 RBX: 00007f4e2420471f RCX: 00007f4e2419c117 [ 873.997359][T29833] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb862e310 [ 873.997372][T29833] RBP: 00007ffdb862e310 R08: 00007ffdb862f310 R09: 00000000ffffffff [ 874.028606][T29833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb862f3a0 [ 874.036631][T29833] R13: 00007f4e2420471f R14: 00000000000d541f R15: 00007ffdb862f3e0 [ 874.044674][T29833] [ 874.047740][T29833] Modules linked in: [ 874.051748][ C0] vkms_vblank_simulate: vblank timer overrun [ 874.101481][ T7757] loop5: detected capacity change from 0 to 4096 [ 874.108924][ T7757] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 874.140109][T29833] ---[ end trace 0000000000000000 ]--- [ 874.147927][ T7757] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 874.151312][T29833] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 874.163625][T29833] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 a4 e1 b5 ff e9 f9 fc ff ff e8 6a ba 5d ff <0f> 0b e8 63 ba 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 874.164220][ T7757] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 874.189345][ T1189] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 874.205706][T29833] RSP: 0018:ffffc9000355fb00 EFLAGS: 00010293 [ 874.212243][T29833] RAX: ffffffff82295a46 RBX: 1ffff920006abf64 RCX: ffff88801c3b0000 [ 874.223482][T29833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 874.231726][T29833] RBP: ffffc9000355fbf8 R08: ffffc9000355fb77 R09: 0000000000000000 [ 874.240100][T29833] R10: ffffc9000355fb40 R11: fffff520006abf6f R12: ffffc9000c5d9000 [ 874.248607][T29833] R13: dffffc0000000000 R14: ffff88807c7bc630 R15: 0000000000000000 [ 874.257825][T29833] FS: 00005555893dc500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 874.267051][T29833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 874.273767][T29833] CR2: 00007f5aff3de2f8 CR3: 000000007e755000 CR4: 00000000003506e0 [ 874.283462][ T7757] ntfs: volume version 3.1. [ 874.293062][T29833] Kernel panic - not syncing: Fatal exception [ 874.299752][T29833] Kernel Offset: disabled [ 874.304083][T29833] Rebooting in 86400 seconds..