last executing test programs: 4m8.253303224s ago: executing program 4 (id=1567): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0x10, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080), 0x1}, 0x20) 4m8.158036921s ago: executing program 4 (id=1568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 4m7.948161528s ago: executing program 4 (id=1573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m7.843585976s ago: executing program 4 (id=1576): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fusectl\x00', 0x8014, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, 0x0) 4m7.533438341s ago: executing program 4 (id=1581): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 4m5.715497327s ago: executing program 4 (id=1600): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, &(0x7f0000000040)) 4m5.533357702s ago: executing program 32 (id=1600): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, &(0x7f0000000040)) 1m44.713065058s ago: executing program 5 (id=3125): syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f00000000c0)='./file0\x00', 0x40, &(0x7f0000000780)=ANY=[], 0x1, 0x1f3, &(0x7f0000000a80)="$eJzs3cFqE1EUANCbmiYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadGNMYBjKj9ZxN78x9r+/dGTLJJjcpCl9vf44s68TOQRzEtBN7sRNz5wEAXCfTlOJbKrS9FwCgGRu8/39veEsAwJa9fvP25dPh8PAoz7OIi/PJaDIq/hb55y+Gh4/ynzrVrIvJZHTjMv84X/7sMMvvxs0y/6SYn1+mexEx6sXD+0V+lnv2apj/Or8f77dcOwAAAAAAAAAAAAAAAAAAAAAAtOVu5HN71dmqv8/+/nJ+UOaLo4X+QEv9e7pxp1seVu2B0lkTRQEAAAAAAAAAAAAAAAAAAMA/5uT008d34/GH4yroR8Time6KMVcHnfIfbzS4/WAn6k0flGXWWLRTXqLtFjhYfXM3CaL7t9ydukHewFqDtZc3pVmw+lUwb4tx5fReRKxf/cFR3c1PU0rjL/eOT04jrR1cPSP6jT6RAAAAAAAAAAAAAAAAAADg/7Xwre/fZG1sCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABaUP3+f43gLCJuxR8Hz9fajazdYgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi2fgQAAP//+EUj2A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x10) fallocate(r0, 0x0, 0x0, 0x1000005) 1m42.835556778s ago: executing program 5 (id=3142): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x2, 0x0, 0x15, 0x0, "598ae7732e1e01bd124d7e8050b93adc9cb9750e8a2f49c5d1c23b9e3d2da68e96372b74ee2bf69384a09be4758a9bae36a3a4c787d1ed4c8d252f5cfe3dbbc953336a19efb30bb00f43bcb2f201c655"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x7fffffff, @loopback, 0x9}, 0x1c) 1m41.374439795s ago: executing program 5 (id=3149): mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x4, 0x2) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1m41.305913231s ago: executing program 5 (id=3150): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m40.717290938s ago: executing program 5 (id=3154): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m35.769200385s ago: executing program 5 (id=3188): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 1m35.348136988s ago: executing program 33 (id=3188): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 36.455302988s ago: executing program 1 (id=3671): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1200001, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x42, 0x33c, &(0x7f0000001f80)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) 34.886814924s ago: executing program 1 (id=3687): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 30.545769802s ago: executing program 1 (id=3709): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 27.741615887s ago: executing program 1 (id=3715): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 25.700223491s ago: executing program 1 (id=3723): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000100)={[{@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0xffff) unlink(&(0x7f0000000040)='./file1\x00') 12.871116549s ago: executing program 1 (id=3759): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000100)='./file1\x00', 0xa08800, &(0x7f0000000040)=ANY=[], 0x4, 0x67b, &(0x7f00000010c0)="$eJzs3c1rHOcdB/DvrFay5IKjJHbilkBFDGmpqa0XlFalELeHokMowT2EQi/ClmPhtRIkpSihFPX92kP+gPSgQ6GnQu+GFHpqe8tVp5JS6CUnneoys7PSyvLKu7JerPbzMaN9Zp7X+c3Mszu7mAnwf2v+apoPUmT+6pvr5frW5kxra3PmXJ3dSlKmG0mz/ZJiOSk+SW6kveSL5ca6fNGrn4+W5m5++vnWZ+21Zr1U5RsH1evPRr1kIslQ/brf8KHau9WzvYMt7KSKnT0sA3alEzg4bQ/32Rik+lNet8CzoGi/b+4znpxPMlp/Dkg9OzROdnRHb6BZDgAAAM6o57aznfVcOO1xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFlSP/+/qJdGJz2RovP8/5F6W+r0zcYpj/lpPDjtAQAAAAAAAADAEfjydrazngud9YfVL/v/ebVauVj9/ULez2oWs5JrWc9C1rKWlUwlGe9qaGR9YW1tZSpPrjn92JrTJ7K7AAAAAAAAAPC/6ueZ3/39HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAngVFMtR+qZaLnfR4Gs0ko0lGynIbyd876TOieNzGByc/DgAAAHgqo4eo89x2trOeC531h0V1z/9Sdb88mveznLUsZS2tLOZ2fQ9d3vU3tjZnWlubM/e3Nmeqjn/0sK3dznf+PdAwqhbT/u7h8T1frkqM5U6Wqi3XcqsazO00qpqly/V4dpa9nfysHNPYG7U+R3a7fi07+22vbxGOQmPQCuNVpeGdiEzWYysbev7gSDzx6DQP7GkqjZ1vfi4e0FNnl4oBY36+Uy/Jrx+J+Rv/+P0P+2zmGOxEopEqEtNdZ99LB8c8+cqf/vD23dbyvbt3Vq8e22l0Uh49J2a6IvHymY5Ec8Dyk1UkLu2sz+d7+UGuZiJvZSVL+XEWspbF1DNjFurzufw73hWlZF+kbuxZe+tJIxmpj0t7Fu1nTBM5V6UW8mpV90KWUuTd3M5iXq/+TWcq38hsZjPXdYQv9TzC1b5VM21jsKv+yleze6n/ppyp+6uX/KXfgoNrv6WWcX2+K67dc+54lde9ZTdKL/TxfjTg3Nj8Up0o+/jFYd42js2jkZjqisSLB0fid9W1sdpavrdyd+G9Hu1vPLL+2vBu+lfH+c48sPJ8eSGj9Uyy9+wo817cmWX2xmuk/sWlndfYl3epyiuKzpX6/Z5X6kj9GW5/S9NV3sv784Y6I7/clbfn81be/evpxBOAAZ3/2vmRsX+N/W3s47Ffjt0de3P0u+e+ee6VkQz/efhbzcmh1xqvFH/Mx/np7v0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweKsffHhvodVaXHl8otE762gTRf0gn15lmhnLCQzjJBNFsnHkLedIGxw+pn3vPETwadt5+8azcSjPcmIoSWfLUHaz6kN0mIeLAmfC9bX7711f/eDDry/dX3hn8Z3F5eHZ2bnJudnXZ67fWWotTrb/nvYogeOw+3ngtEcCAAAAAAAAAAAA9OsI/hfBt//Zbqpnma7uJk5rPwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICza/5qmsMpMjV5bbJc39qcaZVLJ71bspmk0UiKnyTFJ8mNtJeMdzVX9Orno6W5m59+vvXZblvNTvnGQfX6s1EvmUgyVL/uM3K49m71aq9vxc4elgG70gkcnLb/BgAA///sygN+") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fsync(r0) 12.556205724s ago: executing program 34 (id=3759): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000100)='./file1\x00', 0xa08800, &(0x7f0000000040)=ANY=[], 0x4, 0x67b, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fsync(r0) 4.016668509s ago: executing program 6 (id=3865): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0xfffb, @local}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x480, 0x0, 0x0) 3.928340916s ago: executing program 6 (id=3867): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x141b82, 0x180) write$cgroup_int(r0, &(0x7f0000000040)=0x9, 0x12) write$cgroup_int(r0, &(0x7f0000000000)=0x4, 0x12) 3.139455589s ago: executing program 6 (id=3871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000dd000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x14, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x10, 0x1, "e7a6f6264faa34a2dcafa76d"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x452369c81ff10127}}}, 0x8c}}, 0x0) 3.016222308s ago: executing program 6 (id=3872): landlock_create_ruleset(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa6, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x5, 0xa0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x3, 0x3, 0xb}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x82, 0x4, 0x9, 0x10, "", "ca"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x7, 0x6, "f7e04239"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x1, "3a3882"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xc0, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x41, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 1.597517652s ago: executing program 3 (id=3887): r0 = io_uring_setup(0xf74, &(0x7f0000000180)={0x0, 0x4431, 0x8, 0xffffffff}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.336603343s ago: executing program 2 (id=3892): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x4000000, {0x2, 0x4e24}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x201, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x10000000000003}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast2=0xac14140a}}) 1.267678639s ago: executing program 7 (id=3893): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @info_reply={0x10, 0x0, 0x0, 0x9, 0x6}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.185124905s ago: executing program 2 (id=3895): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8) 1.153707888s ago: executing program 7 (id=3896): syz_mount_image$nilfs2(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000001500)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRES8, @ANYBLOB="d1794da8c0ccda034276e28b25c45c8ecf80555ea3080000000000000050941d2cbb0d8dc95608de15d87a0de3148f930047c436236251d86334f10000ccae88", @ANYRES32, @ANYRES64, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRES16, @ANYRES64], 0xfe, 0xa7a, &(0x7f0000000980)="$eJzs3UuMHEcZAODu3Z21nTh4HGxinJDYBJIIyG68a8zDgjiKL1gx4hYp4mI5TrBwDMKRIFEkbJ+4kcgyN8RDnHKJACGRC7Jy4hKJWOKSU+DAActIkThAgj1oZ6tmZ37PpGe9j97Z+T6ppqa7arqqZ3t6+1VVBTC2Jtqvjfbr5TcvHf3nQ//YtvD+8U6OZvt1qmtqIXeZpqfC8t6bXIxvvP/KyX5xWcy1X/P0ZNdn7yyK4nyxr7hSNIu9l6++9vbcU8cvHLu4/53XD19bg1UHAICx860rhw/u/ttf7t35wRv3Hym2dObn4/Nmmt6ejvuPpAP/hWiqzOcPS+cDZVfoNh3yTaUwEfJN9slXdOVr5Hxbez8Xy58Oy20MyLelovzJcI5ShvrAKMvbcbMoJ2Z6picmZmYWz8mL9nn9dDlz9vSZ587VVFFg1f37gaIo9gnCuIXWjs6PoPa61Be6vgWAWsX7hbc4H68srExnaVPDlX/9iYn+n+/VWM06Mj7We/tXflx+bz3Wu/yq9f/NhTVef8bK8FvT1jWtx2rL65V/R9vTdLyPEJ9fWu7+Jy9vMixv2AOAQfcRRuX+wqB6Tq5zPW7XoPrH7WKz+lqK8/fw9ZDe/fuJf9NR+RsD/f1nw13/37ZUudrrIgibO7Tq3PkA9ao4rY/PzbWSnB6f64vpWyrSt1akb6tIv6Mi/c6KdBhnv3/xp8WrZdG3PV6xeP7f/rEMez0sX2e7K8UfW2Z94vXI5V6Pi8/9LtdKy4/PE8NG9scTT5/68rPPXF18/r/sbP830/a+L00302/rSsqQrxfG6+qdZ/+bveVMDMh3d6jPXX3yt9/v6s1X7lpaTtG1n7mlHnt6P7djUL77evM1Q75tKcTDpXh8ckf4XD7+yPvV/H1NhfVthPWYDvXI+5WdKR6tuzFsVHl7HPT8f94+9xSN8rnTZ049lqbzdvrnycaWhfkH1rnewMoN2/5nT9Hb/md7Z35jonu/sGNpftm9X2iG+XMD5s+n6fx/7juT29rzZ05+78yzq73yMObOvfTyd0+cOXPqB9544403nTd175mAtTb74gvfnz330suPnn7hxPOnnj91dv7Qofm5uUNfmT842z6un+0+ugc2k6V/+nXXBAAAAAAAAAAAABjWD48dvfrXt7707mL7/6X2f7n9f37yN7f//0lo/x/byed28Lkd4M4+6e08oYPV6ZCvkcLHQ313hXJ2h899IsWdcfxS+/9cXOzXNdfnnjA/9t+b84XuBG7pL2U69EESxwv8dIovpvjXBdSo/Hn/2Smu6t86b+u5fwr9Uoym/HfL/Znkfkxy++9B/Trl/f/O/ov98WrXk9W1Hs0J615HoL9/bbj+v9ckLHX4WXtdus4Yaq+LsNHCjVartZ7ltVofNYqHsaaA9VP3+J/5umeOz/7pG1sXQs52/Yne/WXsvxRWou7xL2srP19YHNf1H7L81R7/szP+3dD7vzBiXvP2yv3vL66921VssXdg+VuKnvLj+ud+oHctr/wPUvl5bR4uBpXfu/6tX4Xy4w2hIX0Yyr9jyPLj+l9absGpwP+l8vPX9siDw5a/uIByorce8bpxvv8XrxtnN8L65749l7v+tztQ481UPoyzURlndrl6xv+90Fr/8X9XOMJQfA7ji2k67wjzcw5xvJPl1j8/X5H/D+wOyy8r/r8Z/3e0fTXFVb+HPP5v3h6bfaYnuqYbfb7bzbqvgVH13qrd/+t6Ym4D3EcRxieUtrnbDq1Wq9abfO4w1qvu77/u84S6y6/7+68Sx/+Nx/Bx/N+YHsf/jelx/N+Y3r6u+OHSoL3x+4rj/8b0OP5vTL8nlBvHB95Tkf7JivS9Fen3VqTfV5H+qYr0/RXp91ekP1CRfndF+oMV6Z8Jf/GY/tmKzz9Ukf7IR6fP/6ji85tdbo8yrusP4yy2z/P7h/GR7/8M+v3vqkgHRtfP3jjw5DO/+3Zzsf3/dOd6SL6PdyRNN9K5czxfitdPJlPaW2n67yF9o1/vgHES+8+I/98frkgHRld+zsvvG8ZQ2b/HnmH7rRp0nM9o+VyKP5/iL6T40RTPpHg2xQdSPLdO9WNtPPnbPxx+tVw6398R0od9njy2B4r9RM0PWZ94fWC5z7PHfvyWa6Xl32ZzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNpMtF8PHtxTFsXlNy8dffr46dmFOY93cjTbr1NdU43O54risRRPpviX6c2N91852R3fTHFZzBVlUXbmF9+83inpzqIozhf7iitFs9h7+eprb889dfzCsYv733n98LW1+wYAAABg8/t/AAAA//9N2hwq") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e8b, &(0x7f0000000080)={@desc={0x40002, 0x0, @desc1}}) 1.059816165s ago: executing program 0 (id=3897): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000002c0)={0x1, 0x1}) 1.012530319s ago: executing program 2 (id=3898): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x1080c, &(0x7f0000000180)=ANY=[], 0x3, 0xa77, &(0x7f00000010c0)="$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") r0 = open(&(0x7f0000000600)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, &(0x7f00000001c0)={0x6, 0x100000000, 0x2, 0x0, 0x0, 0xffff, 0x2401}) 911.345487ms ago: executing program 6 (id=3899): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}], 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x20) 866.294761ms ago: executing program 0 (id=3900): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) io_setup(0x5, &(0x7f0000000240)=0x0) io_destroy(r0) 771.831398ms ago: executing program 7 (id=3901): r0 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f0000001080)=""/4125, 0x80000000, 0x101d}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0)={0xb, 0x4}) 662.712317ms ago: executing program 3 (id=3902): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x4, 'lblcr\x00', 0x0, 0xfffffff8}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 659.638867ms ago: executing program 0 (id=3903): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000015c0), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd2d, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 531.702388ms ago: executing program 2 (id=3904): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) 531.428548ms ago: executing program 7 (id=3905): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x88, &(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES8=0x0, @ANYBLOB="5ef8d1e7b2d4b5e6abd9eae5912ca8100c8fd189972abd0c2dba6330ba9e7e957869d03217c8eacaa11d65e105b47336babc99e31600cfc04897c803a626fb987fe0e27f6e885396473b04a5d44aebc93db8163bd701cf4c60588319fbbd404dbdcad7aa2a39203b9b53af3cfd9a8f2a3d03bd5ec01822d83114235d206f113ccec0d9edd2a7d133f1209e07df41c296b7df91ae7e37f0fbf6430b15befacfeda8c7e600f9ecfe0939bbe97c637d7c7d0b2f92d10d88f70f0484f9013fb487eb9980f478daa69d24946a71cd2000a07e8cd0689f2355754ebf6eb7e5122408c4a8929254c62fa1cedf44338d9e90ee8c22", @ANYRESOCT, @ANYBLOB="7bede43ac6e1fb13c18e", @ANYRESHEX], 0x23, 0x203, &(0x7f0000000ec0)="$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") 500.64897ms ago: executing program 3 (id=3906): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00b99f000000000000000001"], 0x114}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 468.008443ms ago: executing program 0 (id=3907): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) fcntl$setownex(r0, 0xf, &(0x7f00000002c0)={0x1}) 321.357924ms ago: executing program 2 (id=3908): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000003c0)='./file1\x00', 0x8680, &(0x7f0000020b00)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES8], 0xfd, 0x2a1, &(0x7f0000000100)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 272.753108ms ago: executing program 3 (id=3909): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a80)=ANY=[@ANYBLOB="240000001a00210f29bd7000fadbdf251c000000ff000005000000000800", @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 264.105909ms ago: executing program 7 (id=3910): mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000100)=0x1, 0x4) 159.649067ms ago: executing program 0 (id=3911): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1a, 0xa01, 0x70bd29, 0x0, {0x81}}, 0x14}, 0x1, 0x0, 0x0, 0x40008d5}, 0x0) 159.384247ms ago: executing program 7 (id=3912): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="36f71f958cd1928222039f67cd94", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 147.422398ms ago: executing program 3 (id=3913): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x5c5d, 0x1, 0x2}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_enter(r0, 0x47be, 0x370b, 0x0, 0x0, 0x44) 101.541922ms ago: executing program 0 (id=3914): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, "e4ff14eca81f"}}, 0x0}, 0x0) 27.765958ms ago: executing program 2 (id=3915): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') exit(0x5) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) 321.41µs ago: executing program 6 (id=3916): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xda, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x0, 0x2, 0x16, {0x16, 0x3, "822500c302e9ce27a2bf6054c71da88a92047ef1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=3917): recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) syz_usb_connect(0x0, 0x2d, &(0x7f0000001c40)={{0x12, 0x1, 0x110, 0xa3, 0x5d, 0xa7, 0x20, 0xc72, 0x13, 0x116c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x28, 0x1, 0x80, 0x3, [{{0x9, 0x4, 0x5d, 0xc, 0x1, 0xff, 0xff, 0xff, 0x9, [], [{{0x9, 0x5, 0xe, 0x1, 0x200, 0x6, 0x9a, 0x3}}]}}]}}]}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) kernel console output (not intermixed with test programs): 2768 [ 262.377779][T11174] loop2: detected capacity change from 0 to 2048 [ 262.606451][T11151] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 262.607943][T11147] XFS (loop5): Mounting V5 Filesystem [ 263.699956][T11174] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.345065][T11147] XFS (loop5): Ending clean mount [ 264.383051][T11147] XFS (loop5): Quotacheck needed: Please wait. [ 264.532010][T11199] loop1: detected capacity change from 0 to 32768 [ 264.573183][T11147] XFS (loop5): Quotacheck: Done. [ 264.663678][ T8159] XFS (loop5): Unmounting Filesystem [ 265.183386][ T4567] udevd[4567]: symlink '../../loop2' '/dev/disk/by-diskseq/719.tmp-b7:2' failed: Read-only file system [ 265.242141][ T4541] udevd[4541]: symlink '../../loop3' '/dev/disk/by-diskseq/720.tmp-b7:3' failed: Read-only file system [ 265.366218][T11207] netem: change failed [ 265.483518][T11209] tipc: Enabling of bearer rejected, failed to enable media [ 265.826202][ T4541] udevd[4541]: symlink '../../loop3' '/dev/disk/by-diskseq/720.tmp-b7:3' failed: Read-only file system [ 265.872037][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/723.tmp-b7:2' failed: Read-only file system [ 265.959732][ T4541] udevd[4541]: symlink '../../loop3' '/dev/disk/by-diskseq/720.tmp-b7:3' failed: Read-only file system [ 266.029707][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/720.tmp-b7:3' failed: Read-only file system [ 266.041136][ T4541] udevd[4541]: symlink '../../loop2' '/dev/disk/by-diskseq/723.tmp-b7:2' failed: Read-only file system [ 266.122680][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/720.tmp-b7:3' failed: Read-only file system [ 266.196269][ T4541] udevd[4541]: symlink '../../loop2' '/dev/disk/by-diskseq/723.tmp-b7:2' failed: Read-only file system [ 266.290844][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/725.tmp-b7:3' failed: Read-only file system [ 266.303894][T11199] JBD2: Ignoring recovery information on journal [ 266.556818][T11211] loop3: detected capacity change from 0 to 32768 [ 266.620479][T11199] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 266.678405][T11235] openvswitch: netlink: Actions may not be safe on all matching packets [ 266.984478][T11211] XFS (loop3): Mounting V5 Filesystem [ 267.021449][ T4182] ocfs2: Unmounting device (7,1) on (node local) [ 267.483811][T11261] loop5: detected capacity change from 0 to 256 [ 267.611801][T11253] loop2: detected capacity change from 0 to 8192 [ 267.741640][ T26] audit: type=1800 audit(1756227475.105:19): pid=11261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2807" name=F15BBA4E66BB75FBD5 dev="loop5" ino=1048698 res=0 errno=0 [ 267.950147][T11211] XFS (loop3): Ending clean mount [ 267.993358][T11211] XFS (loop3): Quotacheck needed: Please wait. [ 268.185372][T11211] XFS (loop3): Quotacheck: Done. [ 268.332328][ T4181] XFS (loop3): Unmounting Filesystem [ 269.200418][T11253] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 269.224793][T11253] REISERFS (device loop2): using ordered data mode [ 269.292783][T11253] reiserfs: using flush barriers [ 269.363877][T11253] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 269.419270][T11253] REISERFS (device loop2): checking transaction log (loop2) [ 269.834694][T11300] loop1: detected capacity change from 0 to 256 [ 270.024592][T11253] REISERFS (device loop2): Using tea hash to sort names [ 270.052385][T11253] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 270.146791][T11253] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 270.209818][ T4567] udevd[4567]: symlink '../../loop1' '/dev/disk/by-diskseq/730.tmp-b7:1' failed: Read-only file system [ 270.242383][ T4567] udevd[4567]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 270.269754][ T4541] udevd[4541]: symlink '../../loop3' '/dev/disk/by-diskseq/733.tmp-b7:3' failed: Read-only file system [ 270.318321][T11300] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 270.335695][ T4567] udevd[4567]: symlink '../../loop1' '/dev/disk/by-diskseq/730.tmp-b7:1' failed: Read-only file system [ 270.381491][ T4541] udevd[4541]: symlink '../../loop3' '/dev/disk/by-diskseq/733.tmp-b7:3' failed: Read-only file system [ 270.395775][ T4567] udevd[4567]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 270.517567][ T4567] udevd[4567]: symlink '../../loop1' '/dev/disk/by-diskseq/730.tmp-b7:1' failed: Read-only file system [ 270.566749][ T4567] udevd[4567]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 270.669636][ T4567] udevd[4567]: symlink '../../loop1' '/dev/disk/by-diskseq/730.tmp-b7:1' failed: Read-only file system [ 270.737304][ T4567] udevd[4567]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 273.233390][T11392] loop3: detected capacity change from 0 to 16 [ 273.287601][T11392] erofs: (device loop3): mounted with root inode @ nid 36. [ 273.333546][T11392] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 273.401870][T11392] attempt to access beyond end of device [ 273.401870][T11392] loop3: rw=0, want=64, limit=16 [ 273.415484][T11392] erofs: (device loop3): z_erofs_readpage: failed to read, err [-95] [ 273.517986][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2880'. [ 273.638873][ C1] sd 0:0:1:0: tag#2711 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 273.648900][ C1] sd 0:0:1:0: tag#2711 CDB: Read(6) 08 00 00 00 00 2c [ 273.842022][T11410] loop5: detected capacity change from 0 to 512 [ 274.183177][T11426] loop1: detected capacity change from 0 to 16 [ 274.310197][T11426] erofs: (device loop1): mounted with root inode @ nid 36. [ 274.351176][T11426] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 274.388658][T11426] attempt to access beyond end of device [ 274.388658][T11426] loop1: rw=0, want=64, limit=16 [ 274.456830][T11426] erofs: (device loop1): z_erofs_readpage: failed to read, err [-95] [ 274.517764][T11432] trusted_key: encrypted_key: key user:syz not found [ 274.966702][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2903'. [ 274.966727][T11444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2903'. [ 274.966746][T11444] netlink: 'syz.0.2903': attribute type 14 has an invalid length. [ 274.966760][T11444] netlink: 'syz.0.2903': attribute type 13 has an invalid length. [ 275.252743][ T4541] udevd[4541]: symlink '../../loop1' '/dev/disk/by-diskseq/740.tmp-b7:1' failed: Read-only file system [ 275.292418][T11410] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (33349!=33292) [ 275.380302][T11410] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x00000000000000a7,abort,noblock_validity,,errors=continue. Quota mode: none. [ 275.503951][T11410] EXT4-fs warning (device loop5): dx_probe:869: inode #2: comm syz.5.2886: Unimplemented hash flags: 0x0001 [ 275.517431][ T4567] udevd[4567]: symlink '../../loop5' '/dev/disk/by-diskseq/739.tmp-b7:5' failed: Read-only file system [ 275.537959][T11410] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.2886: Corrupt directory, running e2fsck is recommended [ 275.563323][ T4567] udevd[4567]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 275.588581][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 275.800323][ T4567] udevd[4567]: symlink '../../loop1' '/dev/disk/by-diskseq/740.tmp-b7:1' failed: Read-only file system [ 275.873593][T11463] loop2: detected capacity change from 0 to 4096 [ 275.975399][T11438] loop1: detected capacity change from 0 to 32768 [ 276.085489][T11438] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2900 (11438) [ 276.164665][T11438] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 276.194456][T11438] BTRFS info (device loop1): force zlib compression, level 3 [ 276.223278][T11438] BTRFS info (device loop1): force clearing of disk cache [ 276.245271][T11438] BTRFS info (device loop1): setting nodatasum [ 276.256646][T11438] BTRFS info (device loop1): enabling disk space caching [ 276.314623][T11438] BTRFS info (device loop1): disk space caching is enabled [ 276.360983][T11438] BTRFS info (device loop1): has skinny extents [ 276.878098][T11438] BTRFS info (device loop1): enabling ssd optimizations [ 276.935253][T11438] BTRFS info (device loop1): clearing free space tree [ 276.954749][T11438] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 276.972432][ T4567] udevd[4567]: symlink '../../loop1' '/dev/disk/by-diskseq/740.tmp-b7:1' failed: Read-only file system [ 277.002263][T11438] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 277.002454][T11515] loop3: detected capacity change from 0 to 64 [ 277.027585][ T4567] udevd[4567]: symlink '../../loop1' '/dev/disk/by-uuid/e417788f-7a09-42b2-9266-8ddc5d5d35d2.tmp-b7:1' failed: Read-only file system [ 277.268912][T11472] loop5: detected capacity change from 0 to 40427 [ 277.429067][T11472] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 277.436920][T11472] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 277.673644][T11472] F2FS-fs (loop5): Found nat_bits in checkpoint [ 277.875338][T11472] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 277.902685][T11472] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 277.919690][T11463] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 278.014006][T11472] fscrypt (loop5, inode 3): Error -61 getting encryption context [ 278.501109][T11463] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 278.681077][T11542] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 278.701691][T11542] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 278.739091][T11542] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 278.764201][T11542] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 278.794684][T11542] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 278.801328][T11542] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 278.917528][T11542] comedi comedi3: 8255: I/O port conflict (0x400000a,4) [ 278.956600][ T4541] udevd[4541]: symlink '../../loop3' '/dev/disk/by-diskseq/738.tmp-b7:3' failed: Read-only file system [ 278.969267][T11542] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 278.988101][T11542] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 279.002359][ T4541] udevd[4541]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 279.225987][T11556] loop3: detected capacity change from 0 to 1024 [ 279.374565][ T5785] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 279.446311][T11563] sp0: Synchronizing with TNC [ 279.488958][T11566] netlink: 'syz.1.2949': attribute type 2 has an invalid length. [ 279.740949][ T4567] udevd[4567]: symlink '../../loop3' '/dev/disk/by-diskseq/738.tmp-b7:3' failed: Read-only file system [ 279.806616][ T4567] udevd[4567]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 279.968209][ T5785] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.030435][ T5785] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 280.061346][ T5785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.103905][ T5785] usb 6-1: config 0 descriptor?? [ 280.347467][T11596] tipc: Enabled bearer , priority 10 [ 280.369204][T11595] loop3: detected capacity change from 0 to 1024 [ 280.641830][ T5785] lenovo 0003:17EF:6047.0019: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 280.838507][ T5785] lenovo 0003:17EF:6047.0019: Failed to switch F7/9/11 mode: -71 [ 280.848933][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'. [ 280.871548][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2967'. [ 280.880554][T11606] netlink: 'syz.2.2967': attribute type 7 has an invalid length. [ 280.886110][ T5785] lenovo 0003:17EF:6047.0019: Failed to switch middle button: -71 [ 280.965825][ T5785] lenovo 0003:17EF:6047.0019: Fn-lock setting failed: -71 [ 281.005921][ T5785] lenovo 0003:17EF:6047.0019: Sensitivity setting failed: -71 [ 281.050614][ T5785] usb 6-1: USB disconnect, device number 8 [ 281.334048][T11590] loop1: detected capacity change from 0 to 40427 [ 281.542523][T11590] F2FS-fs (loop1): invalid crc value [ 281.631684][T11590] F2FS-fs (loop1): Found nat_bits in checkpoint [ 281.768151][T11590] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 281.858868][T11590] F2FS-fs (loop1): access invalid blkaddr:2816 [ 281.877984][T11590] CPU: 1 PID: 11590 Comm: syz.1.2961 Not tainted 5.15.189-syzkaller #0 [ 281.886259][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.896427][T11590] Call Trace: [ 281.899714][T11590] [ 281.902648][T11590] dump_stack_lvl+0x168/0x230 [ 281.907345][T11590] ? show_regs_print_info+0x20/0x20 [ 281.912652][T11590] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 281.918479][T11590] ? unlock_page+0x17c/0x1f0 [ 281.923085][T11590] f2fs_is_valid_blkaddr+0xc7e/0x1250 [ 281.928471][T11590] f2fs_map_blocks+0xbd0/0x3310 [ 281.933365][T11590] ? f2fs_force_buffered_io+0x680/0x680 [ 281.938921][T11590] ? preempt_count_add+0x8d/0x190 [ 281.943970][T11590] ? clear_nonspinnable+0x60/0x60 [ 281.949001][T11590] ? kfree+0xef/0x2a0 [ 281.952986][T11590] ? stack_trace_snprint+0xf0/0xf0 [ 281.958099][T11590] ? slab_free_freelist_hook+0xea/0x170 [ 281.963735][T11590] ? fiemap_prep+0x1a8/0x240 [ 281.968337][T11590] f2fs_fiemap+0x93d/0x1990 [ 281.972869][T11590] ? f2fs_overwrite_io+0x1e0/0x1e0 [ 281.978021][T11590] ? __lock_acquire+0x7c60/0x7c60 [ 281.983058][T11590] ? __might_fault+0xb3/0x110 [ 281.987741][T11590] ? _copy_from_user+0x111/0x170 [ 281.992685][T11590] do_vfs_ioctl+0x1464/0x1de0 [ 281.997370][T11590] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 282.003024][T11590] ? rcu_lock_release+0x5/0x20 [ 282.007798][T11590] ? __lock_acquire+0x7c60/0x7c60 [ 282.012923][T11590] ? kfree+0xef/0x2a0 [ 282.016918][T11590] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 282.022564][T11590] ? verify_lock_unused+0x140/0x140 [ 282.027773][T11590] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 282.033283][T11590] ? bpf_lsm_file_ioctl+0x5/0x10 [ 282.038223][T11590] ? security_file_ioctl+0x7c/0xa0 [ 282.043428][T11590] __se_sys_ioctl+0x83/0x170 [ 282.048029][T11590] do_syscall_64+0x4c/0xa0 [ 282.052448][T11590] ? clear_bhb_loop+0x30/0x80 [ 282.057130][T11590] ? clear_bhb_loop+0x30/0x80 [ 282.061809][T11590] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 282.067718][T11590] RIP: 0033:0x7f6081352be9 [ 282.072134][T11590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.091744][T11590] RSP: 002b:00007f607f5ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.100181][T11590] RAX: ffffffffffffffda RBX: 00007f6081579fa0 RCX: 00007f6081352be9 [ 282.108160][T11590] RDX: 0000200000000300 RSI: 00000000c020660b RDI: 0000000000000004 [ 282.116142][T11590] RBP: 00007f60813d5e19 R08: 0000000000000000 R09: 0000000000000000 [ 282.124209][T11590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.132275][T11590] R13: 00007f608157a038 R14: 00007f6081579fa0 R15: 00007ffe99161cf8 [ 282.140270][T11590] [ 282.143358][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.375017][T11632] loop5: detected capacity change from 0 to 512 [ 282.485026][ T154] hfsplus: b-tree write err: -5, ino 4 [ 282.566897][T11632] EXT4-fs (loop5): Test dummy encryption mode enabled [ 282.580109][T11632] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 282.751453][T11632] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.2977: bad orphan inode 131083 [ 282.816553][T11632] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 283.014373][ T4173] udevd[4173]: symlink '../../loop3' '/dev/disk/by-diskseq/742.tmp-b7:3' failed: Read-only file system [ 283.043701][ T4541] udevd[4541]: symlink '../../loop2' '/dev/disk/by-diskseq/736.tmp-b7:2' failed: Read-only file system [ 283.074306][ T4173] udevd[4173]: symlink '../../loop3' '/dev/disk/by-diskseq/742.tmp-b7:3' failed: Read-only file system [ 283.134615][ T4173] udevd[4173]: symlink '../../loop3' '/dev/disk/by-diskseq/742.tmp-b7:3' failed: Read-only file system [ 283.175082][ T4541] udevd[4541]: symlink '../../loop2' '/dev/disk/by-diskseq/743.tmp-b7:2' failed: Read-only file system [ 283.205222][ T4201] udevd[4201]: symlink '../../loop5' '/dev/disk/by-diskseq/739.tmp-b7:5' failed: Read-only file system [ 283.221996][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2987'. [ 283.223219][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2986'. [ 283.244930][ T4173] udevd[4173]: symlink '../../loop3' '/dev/disk/by-diskseq/746.tmp-b7:3' failed: Read-only file system [ 283.277895][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2987'. [ 283.304741][ T4201] udevd[4201]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 283.333743][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/745.tmp-b7:1' failed: Read-only file system [ 283.368602][ T4541] udevd[4541]: symlink '../../loop2' '/dev/disk/by-diskseq/743.tmp-b7:2' failed: Read-only file system [ 283.379719][T11652] netlink: 'syz.3.2987': attribute type 12 has an invalid length. [ 283.429547][T11654] fido_id[11654]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 284.429063][T11668] loop3: detected capacity change from 0 to 8192 [ 284.575094][T11647] loop5: detected capacity change from 0 to 32768 [ 285.143869][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3005'. [ 285.701828][T11647] XFS: attr2 mount option is deprecated. [ 285.707534][T11647] XFS: ikeep mount option is deprecated. [ 285.830531][T11647] XFS (loop5): Mounting V5 Filesystem [ 286.121886][T11696] loop2: detected capacity change from 0 to 32768 [ 286.168955][T11727] smc: net device bond0 applied user defined pnetid SYZ0 [ 286.368452][T11696] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3006 (11696) [ 286.892890][ T4250] kernel write not supported for file /snd/seq (pid: 4250 comm: kworker/1:4) [ 287.249664][T11733] loop1: detected capacity change from 0 to 32768 [ 287.645906][T11733] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3020 (11733) [ 287.648411][T11696] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 287.702126][T11696] BTRFS info (device loop2): enabling auto defrag [ 287.729041][T11696] BTRFS info (device loop2): max_inline at 0 [ 287.735090][T11696] BTRFS info (device loop2): force clearing of disk cache [ 287.793685][T11696] BTRFS info (device loop2): turning on sync discard [ 287.835652][T11696] BTRFS info (device loop2): using free space tree [ 287.847687][T11696] BTRFS info (device loop2): has skinny extents [ 288.117374][T11647] XFS (loop5): Ending clean mount [ 288.208639][T11647] XFS (loop5): Quotacheck needed: Please wait. [ 288.424921][T11647] XFS (loop5): Quotacheck: Done. [ 288.491890][ T8159] XFS (loop5): Unmounting Filesystem [ 288.934026][T11733] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 288.951291][T11733] BTRFS info (device loop1): using free space tree [ 288.991430][T11733] BTRFS info (device loop1): has skinny extents [ 289.068428][T11758] loop3: detected capacity change from 0 to 32768 [ 289.167691][ T4541] udevd[4541]: symlink '../../loop5' '/dev/disk/by-diskseq/756.tmp-b7:5' failed: Read-only file system [ 289.541817][T11795] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3034'. [ 289.611629][T11696] BTRFS error (device loop2): open_ctree failed: -22 [ 289.735204][T11799] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3036'. [ 290.775501][T11822] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3046'. [ 290.775604][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3046'. [ 291.158916][T11828] loop5: detected capacity change from 0 to 16 [ 291.161394][T11830] hub 1-0:1.0: USB hub found [ 291.193157][T11830] hub 1-0:1.0: 1 port detected [ 291.230758][T11828] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 291.265094][T11828] erofs: (device loop5): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 291.559713][T11733] BTRFS error (device loop1): open_ctree failed: -22 [ 291.566694][ T4173] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4173) [ 291.605846][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/762.tmp-b7:2' failed: Read-only file system [ 291.622257][T11834] loop5: detected capacity change from 0 to 2048 [ 291.643576][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:2' failed: Read-only file system [ 291.803995][T11834] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 291.907226][T11838] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.522936][T11852] loop1: detected capacity change from 0 to 1024 [ 293.547590][ T4541] udevd[4541]: symlink '../../loop5' '/dev/disk/by-diskseq/756.tmp-b7:5' failed: Read-only file system [ 294.050993][ T4541] udevd[4541]: symlink '../../loop5' '/dev/disk/by-diskseq/756.tmp-b7:5' failed: Read-only file system [ 294.172866][T11852] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,max_batch_time=0x0000000000008000,,errors=continue. Quota mode: none. [ 294.229267][T11852] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.343164][ T26] audit: type=1800 audit(1756227501.718:20): pid=11852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3063" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 294.429708][ T4541] udevd[4541]: symlink '../../loop5' '/dev/disk/by-diskseq/756.tmp-b7:5' failed: Read-only file system [ 294.610340][ T4567] udevd[4567]: symlink '../../loop5' '/dev/disk/by-diskseq/756.tmp-b7:5' failed: Read-only file system [ 294.648883][ T4541] udevd[4541]: symlink '../../loop3' '/dev/disk/by-diskseq/760.tmp-b7:3' failed: Read-only file system [ 294.764452][T11901] program syz.0.3083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.778963][ T4184] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 294.793789][T11897] loop5: detected capacity change from 0 to 8192 [ 294.827416][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/762.tmp-b7:2' failed: Read-only file system [ 294.875055][ T4201] udevd[4201]: symlink '../../loop3' '/dev/disk/by-diskseq/760.tmp-b7:3' failed: Read-only file system [ 294.920947][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/762.tmp-b7:2' failed: Read-only file system [ 294.972707][ T4541] udevd[4541]: symlink '../../loop1' '/dev/disk/by-diskseq/763.tmp-b7:1' failed: Read-only file system [ 294.987247][T11907] loop2: detected capacity change from 0 to 256 [ 294.995468][T11910] loop1: detected capacity change from 0 to 256 [ 295.063068][ T4201] udevd[4201]: symlink '../../loop3' '/dev/disk/by-diskseq/760.tmp-b7:3' failed: Read-only file system [ 295.084942][T11910] exfat: Deprecated parameter 'namecase' [ 295.119500][T11897] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 295.144180][T11897] REISERFS (device loop5): using ordered data mode [ 295.170301][T11910] exfat: Deprecated parameter 'utf8' [ 295.202448][T11897] reiserfs: using flush barriers [ 295.228155][ T4201] udevd[4201]: symlink '../../loop3' '/dev/disk/by-diskseq/765.tmp-b7:3' failed: Read-only file system [ 295.234114][T11897] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 295.300247][ T4201] udevd[4201]: symlink '../../loop3' '/dev/disk/by-diskseq/765.tmp-b7:3' failed: Read-only file system [ 295.307008][T11897] REISERFS (device loop5): checking transaction log (loop5) [ 295.450602][ T4184] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.473880][ T4184] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.482087][T11897] REISERFS (device loop5): Using r5 hash to sort names [ 295.484240][ T4184] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.514279][T11897] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 295.573593][ T4184] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 295.583778][ T4184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.616099][ T4184] usb 4-1: config 0 descriptor?? [ 295.984965][T11910] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 296.178617][ T4184] hid-multitouch 0003:0EEF:72D0.001A: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0 [ 296.409609][T11907] FAT-fs (loop2): Directory bread(block 64) failed [ 296.427676][T11907] FAT-fs (loop2): Directory bread(block 65) failed [ 296.463358][T11907] FAT-fs (loop2): Directory bread(block 66) failed [ 296.469954][T11907] FAT-fs (loop2): Directory bread(block 67) failed [ 296.509215][ T5784] usb 4-1: USB disconnect, device number 14 [ 296.526325][T11907] FAT-fs (loop2): Directory bread(block 68) failed [ 296.532919][T11907] FAT-fs (loop2): Directory bread(block 69) failed [ 296.622410][T11907] FAT-fs (loop2): Directory bread(block 70) failed [ 296.677776][T11907] FAT-fs (loop2): Directory bread(block 71) failed [ 296.687994][T11907] FAT-fs (loop2): Directory bread(block 72) failed [ 296.728309][T11907] FAT-fs (loop2): Directory bread(block 73) failed [ 297.440186][T11935] loop5: detected capacity change from 0 to 1024 [ 297.836457][ T429] hfsplus: b-tree write err: -5, ino 4 [ 298.407937][T11957] loop1: detected capacity change from 0 to 1024 [ 298.737676][ T5785] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 299.159673][ T5773] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 299.190538][ T5785] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.218620][ T5785] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.243021][ T5785] usb 1-1: config 0 interface 0 has no altsetting 0 [ 299.249665][ T5785] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 299.282813][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.316217][ T5785] usb 1-1: config 0 descriptor?? [ 299.565792][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/780.tmp-b7:2' failed: Read-only file system [ 299.641411][T11982] loop2: detected capacity change from 0 to 2048 [ 299.663277][ T5773] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 299.681180][ T5773] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 299.705883][ T5773] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 299.734095][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.791045][T11970] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 299.828367][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/785.tmp-b7:2' failed: Read-only file system [ 299.863835][T11957] hfsplus: unable to parse mount options [ 299.897588][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 299.977512][T11982] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 300.057298][ T5785] hid-led: probe of 0003:1D34:000A.001B failed with error -71 [ 300.116307][ T5785] usb 1-1: USB disconnect, device number 4 [ 300.122589][ T4201] udevd[4201]: symlink '../../loop2' '/dev/disk/by-diskseq/785.tmp-b7:2' failed: Read-only file system [ 300.183576][ T4567] udevd[4567]: symlink '../../loop1' '/dev/disk/by-diskseq/771.tmp-b7:1' failed: Read-only file system [ 300.202124][ T4201] udevd[4201]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 300.238311][ T4567] udevd[4567]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system [ 300.265845][ T4567] udevd[4567]: symlink '../../loop1' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:1' failed: Read-only file system [ 300.385336][ T5773] usb 6-1: USB disconnect, device number 9 [ 300.390782][ T4567] udevd[4567]: symlink '../../loop1' '/dev/disk/by-diskseq/771.tmp-b7:1' failed: Read-only file system [ 300.459527][ T4173] udevd[4173]: symlink '../../loop2' '/dev/disk/by-diskseq/785.tmp-b7:2' failed: Read-only file system [ 300.618667][T11989] loop2: detected capacity change from 0 to 2048 [ 300.718611][T11993] netlink: 'syz.0.3122': attribute type 1 has an invalid length. [ 300.747481][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3122'. [ 300.889345][T11989] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 301.027431][T11999] loop5: detected capacity change from 0 to 256 [ 301.035754][T12000] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 301.134754][T12003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3126'. [ 301.521279][T12016] loop2: detected capacity change from 0 to 256 [ 301.924125][T12016] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 302.309617][T12026] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3138'. [ 302.676502][T11999] FAT-fs (loop5): error, clusters badly computed (1 != 0) [ 302.686516][T11999] FAT-fs (loop5): Filesystem has been set read-only [ 302.735516][T11999] FAT-fs (loop5): error, clusters badly computed (2 != 1) [ 302.794297][T12032] tipc: Started in network mode [ 302.800053][T12032] tipc: Node identity e0000002, cluster identity 4711 [ 302.816240][T12024] loop3: detected capacity change from 0 to 32768 [ 302.835769][T12032] tipc: Enabling of bearer rejected, failed to enable media [ 303.236998][T12024] ERROR: (device loop3): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 303.236998][T12024] [ 303.320350][T12024] ERROR: (device loop3): remounting filesystem as read-only [ 303.367604][T12024] jfs_readdir: unexpected rc = -5 from dtReadNext [ 303.476540][T12030] loop2: detected capacity change from 0 to 32768 [ 304.053938][T12049] loop3: detected capacity change from 0 to 64 [ 304.509454][T12055] loop5: detected capacity change from 0 to 2048 [ 304.652500][ T26] audit: type=1326 audit(1756227512.043:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.0.3153" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe073357be9 code=0x0 [ 304.663468][T12030] XFS: attr2 mount option is deprecated. [ 304.694576][T12030] XFS: ikeep mount option is deprecated. [ 304.739616][T12055] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.812051][T12055] overlayfs: upper fs needs to support d_type. [ 304.819445][T12030] XFS (loop2): Mounting V5 Filesystem [ 304.845802][T12055] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 304.880085][T12055] overlayfs: failed to set xattr on upper [ 304.897874][T12055] overlayfs: ...falling back to index=off,metacopy=off. [ 305.055149][ T8159] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 305.066343][ T8159] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 305.832073][ T4541] udevd[4541]: symlink '../../loop3' '/dev/disk/by-diskseq/772.tmp-b7:3' failed: Read-only file system [ 305.835919][ T4567] udevd[4567]: symlink '../../loop1' '/dev/disk/by-diskseq/784.tmp-b7:1' failed: Read-only file system [ 305.940039][T12078] loop3: detected capacity change from 0 to 1024 [ 306.714924][T12030] XFS (loop2): Ending clean mount [ 306.757457][T12030] XFS (loop2): Quotacheck needed: Please wait. [ 306.757638][T12082] binder: 12081:12082 ioctl c0306201 2000000001c0 returned -14 [ 306.925955][T12030] XFS (loop2): Quotacheck: Done. [ 307.009998][ T4360] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 307.025298][ T4192] XFS (loop2): Unmounting Filesystem [ 307.673855][ T4568] udevd[4568]: symlink '../../loop1' '/dev/disk/by-diskseq/786.tmp-b7:1' failed: Read-only file system [ 307.771582][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/786.tmp-b7:1' failed: Read-only file system [ 307.822365][ T4541] udevd[4541]: symlink '../../loop5' '/dev/disk/by-diskseq/789.tmp-b7:5' failed: Read-only file system [ 307.878053][ T4541] udevd[4541]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system [ 307.928194][ T4201] udevd[4201]: symlink '../../loop3' '/dev/disk/by-diskseq/772.tmp-b7:3' failed: Read-only file system [ 307.941266][ T4541] udevd[4541]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system [ 307.999796][ T4201] udevd[4201]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 308.138001][ T4201] udevd[4201]: symlink '../../loop3' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:3' failed: Read-only file system [ 308.353735][T12088] loop1: detected capacity change from 0 to 32768 [ 308.537931][ T429] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.256162][T12120] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3180'. [ 309.541358][ T26] audit: type=1400 audit(1756227516.926:22): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A4BB284132960AB0EC7C873CFF3EB09BFFB78A08C1060ACEBD68C681F4EB06507909110374F83A9CA6CF1A22A152E4424641EA1201497E3A973866BE7F8659A0119BA2D92304E687C61DF4D960D941CFAB0AC10F5861C9B38D760E8B906A47E2CF457A255A8C061FE8E4C805DC7D3B0124BD25494ED2D54BE8AEF5615C6FD7C4FAC3CF7DA8F20AA026998926069FC3032289822655A10BB16E1E6C08002CC0435A6667F338D23DC07810124F374749CEB5F78713B7DAD2FE3044A243139A1B5170D5BCFDBCD8748AC706DDDCBBD0B1F20F52C143DA1E74B736AC64A66616EA3069133AC3A pid=12123 comm="syz.3.3182" [ 309.676291][T12130] loop2: detected capacity change from 0 to 512 [ 309.927261][T12130] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 309.972731][T12130] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 310.014903][T12130] System zones: 1-12 [ 310.019971][T12130] EXT4-fs (loop2): orphan cleanup on readonly fs [ 310.062288][T12130] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.3184: Directory hole found for htree index block 0 [ 310.096614][T12088] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.139658][T12088] lbmIODone: I/O error in JFS log [ 310.166628][T12088] *** Log Format Error ! *** [ 310.172190][T12088] lmLogInit: exit(-22) [ 310.216352][T12088] lmLogOpen: exit(-22) [ 310.242176][T12130] EXT4-fs (loop2): Remounting filesystem read-only [ 310.252391][T12130] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 310.290530][T12130] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.3184: Directory hole found for htree index block 0 [ 310.345513][T12130] EXT4-fs (loop2): Remounting filesystem read-only [ 310.358453][T12130] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 310.409535][T12130] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 310.922622][ T4541] udevd[4541]: symlink '../../loop3' '/dev/disk/by-diskseq/802.tmp-b7:3' failed: Read-only file system [ 310.951437][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/801.tmp-b7:1' failed: Read-only file system [ 311.028480][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-uuid/3550edcd-4d53-4e80-911f-c2d0fbc49ebf.tmp-b7:1' failed: Read-only file system [ 311.099366][ T4541] udevd[4541]: symlink '../../loop3' '/dev/disk/by-diskseq/802.tmp-b7:3' failed: Read-only file system [ 311.145620][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3201'. [ 311.244864][ T4541] udevd[4541]: symlink '../../loop3' '/dev/disk/by-diskseq/802.tmp-b7:3' failed: Read-only file system [ 311.397217][ T4541] udevd[4541]: symlink '../../loop3' '/dev/disk/by-diskseq/802.tmp-b7:3' failed: Read-only file system [ 311.577715][ T4541] udevd[4541]: symlink '../../loop3' '/dev/disk/by-diskseq/802.tmp-b7:3' failed: Read-only file system [ 311.732694][ T429] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.791348][ T4541] udevd[4541]: symlink '../../loop3' '/dev/disk/by-diskseq/802.tmp-b7:3' failed: Read-only file system [ 311.835959][T12175] vivid-001: ================= START STATUS ================= [ 311.861836][T12175] vivid-001: Radio HW Seek Mode: Bounded [ 311.892195][ T4567] udevd[4567]: symlink '../../loop2' '/dev/disk/by-diskseq/792.tmp-b7:2' failed: Read-only file system [ 311.916194][T12175] vivid-001: Radio Programmable HW Seek: false [ 311.922434][T12175] vivid-001: RDS Rx I/O Mode: Block I/O [ 311.951041][ T26] audit: type=1400 audit(1756227519.337:23): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AA0537DBBEEC666B07BAAB917252113A5B9A77283189B518F356DEBE42D80CF2D0687B9C64D0253A6A09286FDED6E4F8557B8FB4F25CA4FB138AF8945C74BBC98748EAAA030BE5317646F195E6E085AC6DDB29542E3581961259987241F7E7061526A7AFEC8962E74215FEA43703A4E pid=12177 comm="syz.2.3197" [ 311.958962][T12175] vivid-001: Generate RBDS Instead of RDS: [ 311.987949][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.990926][T12161] chnl_net:caif_netlink_parms(): no params data found [ 312.023378][ T4567] udevd[4567]: symlink '../../loop2' '/dev/disk/by-diskseq/792.tmp-b7:2' failed: Read-only file system [ 312.090160][T12175] false [ 312.092958][T12175] vivid-001: RDS Reception: true [ 312.145388][T12175] vivid-001: RDS Program Type: 0 inactive [ 312.215326][T12175] vivid-001: RDS PS Name: inactive [ 312.240896][T12175] vivid-001: RDS Radio Text: inactive [ 312.246516][T12175] vivid-001: RDS Traffic Announcement: false inactive [ 312.274942][T12175] vivid-001: RDS Traffic Program: false inactive [ 312.290935][T12175] vivid-001: RDS Music: false inactive [ 312.321211][T12175] vivid-001: ================== END STATUS ================== [ 312.428990][T12161] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.516516][T12161] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.594049][T12161] device bridge_slave_0 entered promiscuous mode [ 312.702696][T12161] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.765051][T12161] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.815198][T12161] device bridge_slave_1 entered promiscuous mode [ 312.829718][T12190] loop1: detected capacity change from 0 to 8192 [ 312.988691][T12161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.012294][T12202] loop3: detected capacity change from 0 to 4096 [ 313.037944][T12161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.183169][T12161] team0: Port device team_slave_0 added [ 313.203800][T12161] team0: Port device team_slave_1 added [ 313.252796][ T6340] Bluetooth: hci3: command 0x0409 tx timeout [ 313.335570][T12161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.342540][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.464629][T12161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.509972][ T429] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.543575][T12161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.559281][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.632646][T12161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.679667][T12217] devtmpfs: Cannot retroactively limit size [ 313.860023][T12161] device hsr_slave_0 entered promiscuous mode [ 313.888166][T12161] device hsr_slave_1 entered promiscuous mode [ 313.905653][T12161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.907927][T12223] netlink: 'syz.2.3225': attribute type 2 has an invalid length. [ 313.913235][T12161] Cannot create hsr debugfs directory [ 314.187784][T12190] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 314.206470][T12229] loop2: detected capacity change from 0 to 64 [ 314.226645][T12190] REISERFS (device loop1): using ordered data mode [ 314.273815][T12190] reiserfs: using flush barriers [ 314.298716][T12190] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 314.334592][T12190] REISERFS (device loop1): checking transaction log (loop1) [ 314.610855][T12190] REISERFS (device loop1): Using tea hash to sort names [ 314.621941][T12190] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 314.906066][ T429] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.326333][ T4953] Bluetooth: hci3: command 0x041b tx timeout [ 315.539601][ T4181] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 315.546102][ T4181] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 315.855924][T12255] loop1: detected capacity change from 0 to 4096 [ 316.724083][T12161] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 316.751548][T12255] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 316.783879][T12161] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 316.839660][T12161] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 316.933537][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.960812][T12161] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 317.068597][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3251'. [ 317.104238][ T4182] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 317.150435][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3251'. [ 317.477558][ T4953] Bluetooth: hci3: command 0x040f tx timeout [ 317.725180][T12161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.833686][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.857862][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.874936][T12161] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.928386][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.972715][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.074855][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.081948][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.201010][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 318.306682][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.337908][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.394826][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.401996][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.457782][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.491169][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3274'. [ 318.514373][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.536277][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.603936][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.756770][T12161] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.820709][T12161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.905748][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.917908][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.972127][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.013544][T12353] loop3: detected capacity change from 0 to 2048 [ 319.023381][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.040428][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.063238][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 319.095741][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.114144][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 319.134820][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3277'. [ 319.152111][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3277'. [ 319.185607][T12350] netlink: 'syz.2.3277': attribute type 14 has an invalid length. [ 319.217832][T12350] netlink: 'syz.2.3277': attribute type 11 has an invalid length. [ 319.579895][ T4184] Bluetooth: hci3: command 0x0419 tx timeout [ 319.719813][T12373] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 319.726017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.758490][T12378] loop1: detected capacity change from 0 to 1024 [ 319.759538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.780454][T12373] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 319.805517][T12373] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 319.849782][T12161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.558141][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.588696][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 320.690638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 320.699725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 320.754024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.776762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.835452][T12161] device veth0_vlan entered promiscuous mode [ 320.862879][T12161] device veth1_vlan entered promiscuous mode [ 320.982134][ T8367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 320.991231][ T8367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 321.029861][T12424] loop2: detected capacity change from 0 to 512 [ 321.048794][ T8367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 321.079237][T12425] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.084320][ T8367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 321.167777][T12161] device veth0_macvtap entered promiscuous mode [ 321.186704][T12161] device veth1_macvtap entered promiscuous mode [ 321.269741][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.299321][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.360676][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.405606][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.425333][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.488710][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.525770][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.575660][T12424] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 321.596351][T12424] ext4 filesystem being mounted at /658/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.604187][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.670567][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.693903][T12424] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #2: comm syz.2.3300: corrupted inode contents [ 321.725203][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.784940][T12161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.787992][T12424] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #2: comm syz.2.3300: mark_inode_dirty error [ 321.809790][ T8367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 321.818301][ T8367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 321.861363][ T8367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 321.893183][ T8367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.939693][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.973050][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.991581][T12424] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #2: comm syz.2.3300: corrupted inode contents [ 322.008261][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.054827][T12446] loop3: detected capacity change from 0 to 1024 [ 322.099442][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.143828][T12378] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 322.188083][T12441] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #2: comm syz.2.3300: corrupted inode contents [ 322.212608][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.254240][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.289115][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.307616][T12441] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #2: comm syz.2.3300: mark_inode_dirty error [ 322.357932][T12441] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #2: comm syz.2.3300: corrupted inode contents [ 322.363890][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.436460][T12441] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.3300: mark_inode_dirty error [ 322.449272][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.490113][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.500161][T12441] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #2: comm syz.2.3300: corrupted inode contents [ 322.546325][T12161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.572644][T12441] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #2: comm syz.2.3300: mark_inode_dirty error [ 322.640092][ T8367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 322.656425][ T8367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 322.727592][T12161] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.783266][T12161] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.889949][T12161] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.950927][T12161] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.962230][ T1289] hfsplus: b-tree write err: -5, ino 4 [ 323.262583][ T26] audit: type=1326 audit(1756227530.662:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.2.3305" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f017a778be9 code=0x0 [ 323.439963][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.485185][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.553772][ T8367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 323.554147][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.599556][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.700790][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 324.332116][T12478] loop2: detected capacity change from 0 to 1764 [ 324.800902][ T4184] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 324.872886][T12498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3317'. [ 325.184171][ T4184] usb 7-1: Using ep0 maxpacket: 8 [ 325.409367][ T4184] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.420597][ T4184] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.448649][ T4184] usb 7-1: config 0 interface 0 has no altsetting 0 [ 325.458854][ T4184] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 325.497927][ T4184] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.627391][ T4184] usb 7-1: config 0 descriptor?? [ 325.724707][T12530] device ip6gretap1 entered promiscuous mode [ 326.168478][ T4184] steelseries_srws1 0003:1038:1410.001C: item fetching failed at offset 3/5 [ 326.177661][ T4184] steelseries_srws1 0003:1038:1410.001C: parse failed [ 326.218329][ T4184] steelseries_srws1: probe of 0003:1038:1410.001C failed with error -22 [ 326.411398][ T5773] usb 7-1: USB disconnect, device number 2 [ 326.589746][T12478] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 326.739754][T12478] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 328.114648][T12573] loop3: detected capacity change from 0 to 32768 [ 328.193051][T12573] XFS: noikeep mount option is deprecated. [ 328.378276][T12573] XFS (loop3): Mounting V5 Filesystem [ 329.654645][ T4263] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 330.183846][ T4263] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 330.217199][ T4263] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.462467][ T4263] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 330.502623][ T4263] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 330.552663][ T4263] usb 1-1: Product: syz [ 330.590159][ T4263] usb 1-1: Manufacturer: syz [ 330.700711][ T4263] hub 1-1:4.0: USB hub found [ 330.793660][T12679] loop6: detected capacity change from 0 to 2048 [ 330.900889][ T4263] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 331.168715][T12689] loop2: detected capacity change from 0 to 512 [ 331.337439][ T5785] usb 1-1: USB disconnect, device number 5 [ 331.423158][T12573] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 331.746176][T12702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3380'. [ 331.771013][T12573] XFS (loop3): Starting recovery (logdev: internal) [ 331.998994][T12573] XFS (loop3): Ending recovery (logdev: internal) [ 332.051075][ T4181] XFS (loop3): Unmounting Filesystem [ 332.573783][T12679] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 332.675484][T12717] device gretap0 entered promiscuous mode [ 332.681423][T12717] device vlan2 entered promiscuous mode [ 332.831307][T12689] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 332.841019][T12689] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 332.841019][T12689] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 332.841019][T12689] [ 332.953879][T12689] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 333.023774][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3383'. [ 333.053584][T12720] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3383'. [ 333.096591][T12689] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.3376: casefold flag without casefold feature [ 333.152905][T12689] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.3376: couldn't read orphan inode 15 (err -117) [ 333.212399][T12689] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,jqfmt=vfsv0,nouser_xattr,grpjquota=./file0,nobarrier,i_version,nolazytime,,errors=continue. Quota mode: writeback. [ 333.692841][T12734] loop1: detected capacity change from 0 to 4096 [ 334.020719][T12753] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3397'. [ 334.606502][T12763] loop6: detected capacity change from 0 to 4096 [ 334.900415][T12756] loop2: detected capacity change from 0 to 32768 [ 335.987344][T12781] nbd: must specify at least one socket [ 336.224597][T12756] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.3398 (12756) [ 336.308997][T12790] sp0: Synchronizing with TNC [ 336.347478][T12790] sp0: Found TNC [ 336.573103][T12763] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 336.919925][T12799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3415'. [ 337.115659][T12763] ntfs3: loop6: Failed to load $Extend. [ 337.392216][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 337.658088][T12817] netlink: 'syz.0.3421': attribute type 62 has an invalid length. [ 337.800069][T12819] loop1: detected capacity change from 0 to 64 [ 337.904851][T12756] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 337.917481][T12756] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 337.984985][T12756] BTRFS info (device loop2): use lzo compression, level 0 [ 337.992143][T12756] BTRFS info (device loop2): using free space tree [ 338.032340][T12756] BTRFS info (device loop2): has skinny extents [ 338.046869][T12827] loop6: detected capacity change from 0 to 256 [ 338.121752][T12756] BTRFS error (device loop2): open_ctree failed: -12 [ 338.436690][ T4269] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 338.529429][ T4173] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by udevd (4173) [ 338.603201][T12849] device netdevsim0 entered promiscuous mode [ 338.671007][T12849] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 339.364518][T12819] hfs: unable to locate alternate MDB [ 339.388675][T12819] hfs: continuing without an alternate MDB [ 339.765804][T12877] loop3: detected capacity change from 0 to 256 [ 339.894102][T12862] loop2: detected capacity change from 0 to 32768 [ 340.263992][T12827] FAT-fs (loop6): Directory bread(block 64) failed [ 340.270569][T12827] FAT-fs (loop6): Directory bread(block 65) failed [ 340.322173][T12827] FAT-fs (loop6): Directory bread(block 66) failed [ 340.328745][T12827] FAT-fs (loop6): Directory bread(block 67) failed [ 340.367677][T12827] FAT-fs (loop6): Directory bread(block 68) failed [ 340.428621][T12827] FAT-fs (loop6): Directory bread(block 69) failed [ 340.456189][T12827] FAT-fs (loop6): Directory bread(block 70) failed [ 340.471146][T12827] FAT-fs (loop6): Directory bread(block 71) failed [ 340.498685][T12827] FAT-fs (loop6): Directory bread(block 72) failed [ 340.531123][T12827] FAT-fs (loop6): Directory bread(block 73) failed [ 341.392040][T12902] loop2: detected capacity change from 0 to 128 [ 341.546405][ T4184] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 341.753560][T12910] loop3: detected capacity change from 0 to 1024 [ 341.929081][ T4184] usb 1-1: Using ep0 maxpacket: 32 [ 342.141933][ T4184] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 342.150041][ T4184] usb 1-1: config 0 has no interface number 0 [ 342.470536][ T4184] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 342.479630][ T4184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.519430][ T4184] usb 1-1: Product: syz [ 342.524014][ T4184] usb 1-1: Manufacturer: syz [ 342.528658][ T4184] usb 1-1: SerialNumber: syz [ 342.563445][ T4184] usb 1-1: config 0 descriptor?? [ 342.648915][ T4184] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 342.670930][ T4184] dvb-usb: bulk message failed: -22 (2/0) [ 342.726754][ T4184] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.786101][ T4184] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 342.840970][ T4184] usb 1-1: media controller created [ 342.858296][T12896] dvb-usb: bulk message failed: -22 (5/0) [ 342.977718][ T4184] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.070026][ T4184] cxusb: set interface failed [ 343.086949][ T4184] dvb-usb: bulk message failed: -22 (1/0) [ 343.184984][ T4184] DVB: Unable to find symbol lgdt330x_attach() [ 343.191300][ T4184] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 343.444336][ T4184] rc_core: IR keymap rc-dvico-portable not found [ 343.499675][ T4184] Registered IR keymap rc-empty [ 343.561008][ T4184] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 343.636871][T12910] hfsplus: bad catalog entry type [ 343.642104][T12934] loop6: detected capacity change from 0 to 32768 [ 343.708987][ T4184] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input19 [ 343.718956][T12934] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.3459 (12934) [ 343.770831][ T4360] hfsplus: b-tree write err: -5, ino 4 [ 343.801168][ T4184] dvb-usb: schedule remote query interval to 100 msecs. [ 343.828637][ T4184] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 343.867630][ T4184] usb 1-1: USB disconnect, device number 6 [ 343.901815][T12934] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 343.998875][T12934] BTRFS info (device loop6): force zlib compression, level 3 [ 344.019423][ T4184] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 344.079311][T12934] BTRFS info (device loop6): force clearing of disk cache [ 344.115246][T12934] BTRFS info (device loop6): setting nodatasum [ 344.148938][T12934] BTRFS info (device loop6): doing ref verification [ 344.178768][T12934] BTRFS info (device loop6): allowing degraded mounts [ 344.215095][T12934] BTRFS info (device loop6): enabling disk space caching [ 344.242020][T12934] BTRFS info (device loop6): disk space caching is enabled [ 344.290342][T12934] BTRFS info (device loop6): has skinny extents [ 344.544403][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3471'. [ 344.616803][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3471'. [ 344.709876][T12987] netlink: 'syz.1.3471': attribute type 18 has an invalid length. [ 345.119423][T12934] BTRFS info (device loop6): enabling ssd optimizations [ 345.198865][T13013] loop2: detected capacity change from 0 to 64 [ 345.213826][T12934] BTRFS info (device loop6): clearing free space tree [ 345.228977][T12934] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 345.324493][T12934] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 345.864932][ T4567] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop6 scanned by udevd (4567) [ 346.558835][T13021] loop3: detected capacity change from 0 to 32768 [ 347.054523][T13050] loop1: detected capacity change from 0 to 32768 [ 347.275970][ T429] device hsr_slave_0 left promiscuous mode [ 347.294579][ T429] device hsr_slave_1 left promiscuous mode [ 347.345851][ T429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.367167][ T429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.397940][ T429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.405400][ T429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.528205][ T429] device bridge_slave_1 left promiscuous mode [ 347.534578][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.599993][ T429] device bridge_slave_0 left promiscuous mode [ 347.600729][T13050] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 347.606449][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.614531][T13050] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 347.698581][T13050] gfs2: fsid=syz:syz.s: fatal: invalid metadata block [ 347.698581][T13050] bh = 19 (type: exp=5, found=4) [ 347.698581][T13050] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 347.719276][T13050] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 347.726899][T13050] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 347.735742][T13050] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 347.743601][T13050] gfs2: fsid=syz:syz.s: File system withdrawn [ 347.749820][T13050] CPU: 0 PID: 13050 Comm: syz.1.3487 Not tainted 5.15.189-syzkaller #0 [ 347.758064][T13050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.768129][T13050] Call Trace: [ 347.771413][T13050] [ 347.774361][T13050] dump_stack_lvl+0x168/0x230 [ 347.779055][T13050] ? kobject_uevent_env+0x371/0x890 [ 347.784274][T13050] ? show_regs_print_info+0x20/0x20 [ 347.789512][T13050] ? load_image+0x3b0/0x3b0 [ 347.794034][T13050] ? kobject_uevent_env+0x371/0x890 [ 347.799254][T13050] gfs2_withdraw+0x111b/0x1460 [ 347.804042][T13050] ? gfs2_lm+0x220/0x220 [ 347.808298][T13050] ? gfs2_meta_read+0x7d4/0xa50 [ 347.813169][T13050] ? gfs2_meta_read+0x7d4/0xa50 [ 347.818027][T13050] ? gfs2_meta_new+0x160/0x160 [ 347.822806][T13050] gfs2_metatype_check_ii+0x74/0x90 [ 347.828020][T13050] gfs2_meta_buffer+0x262/0x310 [ 347.832891][T13050] __fillup_metapath+0x14d/0x340 [ 347.837849][T13050] __gfs2_iomap_get+0x703/0x13e0 [ 347.842814][T13050] ? gfs2_alloc_extent+0x4f0/0x4f0 [ 347.847943][T13050] ? rcu_is_watching+0x11/0xa0 [ 347.852716][T13050] ? trace_gfs2_bmap+0x8a/0x1f0 [ 347.857582][T13050] gfs2_block_map+0x229/0x670 [ 347.862286][T13050] ? gfs2_iomap_end+0x6b0/0x6b0 [ 347.867148][T13050] ? mark_lock+0x94/0x320 [ 347.871484][T13050] ? verify_lock_unused+0x140/0x140 [ 347.876690][T13050] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 347.882691][T13050] ? lockdep_hardirqs_on+0x94/0x140 [ 347.887904][T13050] gfs2_write_alloc_required+0x362/0x610 [ 347.893548][T13050] ? __rwlock_init+0x140/0x140 [ 347.898338][T13050] ? gfs2_map_journal_extents+0xaa0/0xaa0 [ 347.904091][T13050] ? _raw_spin_unlock+0x24/0x40 [ 347.908947][T13050] ? gfs2_glock_nq+0xcb0/0x1550 [ 347.913814][T13050] gfs2_jdesc_check+0x1c3/0x290 [ 347.918678][T13050] check_journal_clean+0x151/0x300 [ 347.923814][T13050] ? gfs2_trans_remove_revoke+0x370/0x370 [ 347.929549][T13050] ? check_journal_clean+0x10d/0x300 [ 347.934850][T13050] ? __rwlock_init+0x140/0x140 [ 347.939626][T13050] ? do_raw_spin_unlock+0x11d/0x230 [ 347.944833][T13050] ? _raw_spin_unlock+0x24/0x40 [ 347.949694][T13050] ? gfs2_jdesc_find+0xa7/0xc0 [ 347.954467][T13050] init_journal+0x179c/0x2220 [ 347.959163][T13050] ? end_bio_io_page+0x100/0x100 [ 347.964106][T13050] ? vsnprintf+0x1905/0x1a00 [ 347.968707][T13050] ? snprintf+0xd7/0x120 [ 347.972964][T13050] ? init_journal+0x710/0x2220 [ 347.977731][T13050] ? vscnprintf+0x80/0x80 [ 347.982072][T13050] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 347.987195][T13050] init_inodes+0xdb/0x320 [ 347.991535][T13050] gfs2_fill_super+0x1701/0x1f50 [ 347.996494][T13050] ? gfs2_reconfigure+0xcd0/0xcd0 [ 348.001527][T13050] ? gfs2_glock_nq_num+0x82/0x1b0 [ 348.006563][T13050] ? preempt_count_add+0x8d/0x190 [ 348.011611][T13050] ? sb_set_blocksize+0xa5/0xe0 [ 348.016488][T13050] get_tree_bdev+0x3f1/0x610 [ 348.021093][T13050] ? gfs2_reconfigure+0xcd0/0xcd0 [ 348.026131][T13050] gfs2_get_tree+0x4d/0x1e0 [ 348.030651][T13050] vfs_get_tree+0x88/0x270 [ 348.035256][T13050] do_new_mount+0x24a/0xa40 [ 348.039776][T13050] __se_sys_mount+0x2d6/0x3c0 [ 348.044466][T13050] ? __x64_sys_mount+0xc0/0xc0 [ 348.049242][T13050] ? lockdep_hardirqs_on+0x94/0x140 [ 348.054451][T13050] ? __x64_sys_mount+0x1c/0xc0 [ 348.059225][T13050] do_syscall_64+0x4c/0xa0 [ 348.063656][T13050] ? clear_bhb_loop+0x30/0x80 [ 348.068354][T13050] ? clear_bhb_loop+0x30/0x80 [ 348.073218][T13050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 348.079117][T13050] RIP: 0033:0x7f608135438a [ 348.083537][T13050] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.103145][T13050] RSP: 002b:00007f607f5b9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 348.111572][T13050] RAX: ffffffffffffffda RBX: 00007f607f5b9ef0 RCX: 00007f608135438a [ 348.119564][T13050] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f607f5b9eb0 [ 348.127545][T13050] RBP: 0000200000000400 R08: 00007f607f5b9ef0 R09: 0000000000200001 [ 348.135521][T13050] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 348.143499][T13050] R13: 00007f607f5b9eb0 R14: 00000000000125bb R15: 0000200000000180 [ 348.151498][T13050] [ 348.156311][T13050] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 348.187633][ T429] device veth1_macvtap left promiscuous mode [ 348.230076][ T429] device veth0_macvtap left promiscuous mode [ 348.284052][ T429] device veth1_vlan left promiscuous mode [ 348.351215][ T429] device veth0_vlan left promiscuous mode [ 349.462124][T13091] loop6: detected capacity change from 0 to 32768 [ 349.680544][ T429] team0 (unregistering): Port device team_slave_1 removed [ 349.757565][ T429] team0 (unregistering): Port device team_slave_0 removed [ 349.800282][ T429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.844753][ T429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.224453][ T429] bond0 (unregistering): Released all slaves [ 350.878451][T13091] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 351.109015][T13091] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 351.506438][T12161] ocfs2: Unmounting device (7,6) on (node local) [ 351.883141][T13128] loop3: detected capacity change from 0 to 1024 [ 351.987313][T13131] loop1: detected capacity change from 0 to 128 [ 352.397740][ T9] hfsplus: b-tree write err: -5, ino 4 [ 352.894979][T13165] loop6: detected capacity change from 0 to 256 [ 353.014235][T13171] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3526'. [ 353.624217][T13189] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3523'. [ 353.825167][T13196] loop3: detected capacity change from 0 to 256 [ 354.127078][T13168] loop1: detected capacity change from 0 to 40427 [ 354.584129][T13165] FAT-fs (loop6): Directory bread(block 64) failed [ 354.590819][T13165] FAT-fs (loop6): Directory bread(block 65) failed [ 354.635538][T13165] FAT-fs (loop6): Directory bread(block 66) failed [ 354.642118][T13165] FAT-fs (loop6): Directory bread(block 67) failed [ 354.662836][T13165] FAT-fs (loop6): Directory bread(block 68) failed [ 354.709530][T13165] FAT-fs (loop6): Directory bread(block 69) failed [ 354.726864][T13165] FAT-fs (loop6): Directory bread(block 70) failed [ 354.768124][T13165] FAT-fs (loop6): Directory bread(block 71) failed [ 354.792629][T13165] FAT-fs (loop6): Directory bread(block 72) failed [ 354.828722][T13165] FAT-fs (loop6): Directory bread(block 73) failed [ 355.192698][T13215] loop2: detected capacity change from 0 to 1024 [ 355.393128][T13219] loop6: detected capacity change from 0 to 512 [ 355.570821][ T1289] hfsplus: b-tree write err: -5, ino 4 [ 355.620712][T13196] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 355.689808][T13168] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 355.707724][T13168] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 355.764416][T13213] ceph: Unexpected value for 'acl' [ 355.779929][T13168] F2FS-fs (loop1): invalid crc value [ 355.881034][T13168] F2FS-fs (loop1): Found nat_bits in checkpoint [ 356.846305][T13234] loop3: detected capacity change from 0 to 8 [ 356.856154][T13231] use of bytesused == 0 is deprecated and will be removed in the future, [ 356.865965][T13232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.902640][T13231] use the actual size instead. [ 357.413717][ T4953] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 357.797973][ T4953] usb 3-1: Using ep0 maxpacket: 32 [ 357.963289][T13219] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.3541: bad orphan inode 13 [ 357.997797][ T4953] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 358.019126][ T4953] usb 3-1: config 0 has no interface number 0 [ 358.050338][T13219] ext4_test_bit(bit=12, block=4) = 1 [ 358.055973][T13219] is_bad_inode(inode)=0 [ 358.060307][T13219] NEXT_ORPHAN(inode)=0 [ 358.092206][T13219] max_ino=32 [ 358.095856][T13219] i_nlink=1 [ 358.099040][T13219] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 358.163143][T13219] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.3541: Unrecognised inode hash code 20 [ 358.185176][T13219] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.3541: Corrupt directory, running e2fsck is recommended [ 358.187801][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 358.247037][T13219] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.3541: Unrecognised inode hash code 20 [ 358.288036][T13234] SQUASHFS error: zstd decompression error: 2 [ 358.296860][T13234] SQUASHFS error: zstd decompression failed, data probably corrupt [ 358.312571][ T4953] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 358.321989][ T4953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.325646][T13219] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.3541: Corrupt directory, running e2fsck is recommended [ 358.343096][T13234] SQUASHFS error: Failed to read block 0x60: -5 [ 358.349641][ T4953] usb 3-1: Product: syz [ 358.361233][ T4953] usb 3-1: Manufacturer: syz [ 358.401409][T13234] SQUASHFS error: zstd decompression error: 2 [ 358.407672][ T4953] usb 3-1: SerialNumber: syz [ 358.441059][ T4953] usb 3-1: config 0 descriptor?? [ 358.446265][T13234] SQUASHFS error: zstd decompression failed, data probably corrupt [ 358.496562][T13234] SQUASHFS error: Failed to read block 0x60: -5 [ 358.552100][ T26] audit: type=1800 audit(1756227565.960:25): pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3543" name="/" dev="loop3" ino=1 res=0 errno=0 [ 358.571611][ T4953] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 358.678074][ T4953] dvb-usb: bulk message failed: -22 (2/0) [ 358.753025][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.778617][T13236] dvb-usb: bulk message failed: -22 (5/0) [ 358.779183][ T4953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 358.794390][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 358.832713][ T7] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 358.849664][T13254] mkiss: ax0: crc mode is auto. [ 358.860221][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.915162][ T7] usb 1-1: config 0 descriptor?? [ 358.950055][ T4953] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 359.009663][ T4953] usb 3-1: media controller created [ 359.060143][ T4953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.177046][ T4953] cxusb: set interface failed [ 359.186586][ T4953] dvb-usb: bulk message failed: -22 (1/0) [ 359.406735][ T4953] DVB: Unable to find symbol lgdt330x_attach() [ 359.416775][ T4953] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 359.439222][ T7] lenovo 0003:17EF:6067.001D: item fetching failed at offset 0/2 [ 359.448182][ T7] lenovo 0003:17EF:6067.001D: hid_parse failed [ 359.528047][ T7] lenovo: probe of 0003:17EF:6067.001D failed with error -22 [ 359.782123][ T4953] rc_core: IR keymap rc-dvico-portable not found [ 359.805777][ T5773] usb 1-1: USB disconnect, device number 7 [ 359.815432][ T4953] Registered IR keymap rc-empty [ 359.840882][ T4953] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 359.866093][ T4953] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input20 [ 359.941107][ T4953] dvb-usb: schedule remote query interval to 100 msecs. [ 359.971237][ T4953] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 360.058435][ T4953] usb 3-1: USB disconnect, device number 17 [ 360.257493][ T4953] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 360.406627][T13256] loop1: detected capacity change from 0 to 32768 [ 360.906717][T13256] [ 360.906717][T13256] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 360.906717][T13256] [ 360.969665][T13256] ERROR: (device loop1): diWrite: ixpxd invalid [ 360.969665][T13256] [ 361.033599][T13256] ERROR: (device loop1): txCommit: [ 361.033599][T13256] [ 361.270048][ T4182] [ 361.270048][ T4182] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 361.270048][ T4182] [ 361.312229][ T4182] [ 361.312229][ T4182] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 361.312229][ T4182] [ 361.738727][T13325] netlink: 'syz.3.3585': attribute type 29 has an invalid length. [ 361.800724][T13325] netlink: 'syz.3.3585': attribute type 29 has an invalid length. [ 361.877522][T13328] netlink: 'syz.3.3585': attribute type 29 has an invalid length. [ 362.697348][ T4263] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 362.818437][T13360] loop3: detected capacity change from 0 to 1024 [ 362.828361][T13363] loop1: detected capacity change from 0 to 256 [ 362.907730][T13360] EXT4-fs (loop3): Ignoring removed oldalloc option [ 362.924656][T13360] EXT4-fs (loop3): Ignoring removed bh option [ 362.941718][T13360] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 363.083207][T13360] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 363.108834][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.180845][ T4263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 363.200850][ T4263] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 363.227863][ T4263] usb 3-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 363.259721][ T4263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.310156][ T4263] usb 3-1: config 0 descriptor?? [ 363.364587][T13341] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 363.700919][T13380] loop6: detected capacity change from 0 to 1024 [ 363.853451][ T4263] wacom 0003:056A:0319.001E: unbalanced collection at end of report description [ 363.879813][ T4263] wacom 0003:056A:0319.001E: parse failed [ 363.885703][ T4263] wacom: probe of 0003:056A:0319.001E failed with error -22 [ 364.113790][ T4263] usb 3-1: USB disconnect, device number 18 [ 364.780121][T13396] QAT: Invalid ioctl 1075883590 [ 364.789023][T13396] QAT: Invalid ioctl 1075883590 [ 364.805430][T13396] QAT: Invalid ioctl 1075883590 [ 364.834485][T13396] QAT: Invalid ioctl 1075883590 [ 364.852111][T13396] QAT: Invalid ioctl 1075883590 [ 364.887878][T13396] QAT: Invalid ioctl 1075883590 [ 364.898348][T13396] QAT: Invalid ioctl 1075883590 [ 364.918949][T13396] QAT: Invalid ioctl 1075883590 [ 364.924001][T13396] QAT: Invalid ioctl 1075883590 [ 364.955305][T13396] QAT: Invalid ioctl 1075883590 [ 365.293591][T13411] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3623'. [ 365.314522][T13411] tipc: Bearer : already 2 bearers with priority 10 [ 365.367351][T13411] tipc: Bearer : trying with adjusted priority [ 365.412915][T13411] tipc: Enabled bearer , priority 9 [ 365.451149][T13363] FAT-fs (loop1): Directory bread(block 64) failed [ 365.506181][T13363] FAT-fs (loop1): Directory bread(block 65) failed [ 365.545033][T13363] FAT-fs (loop1): Directory bread(block 66) failed [ 365.603884][T13363] FAT-fs (loop1): Directory bread(block 67) failed [ 365.645640][T13380] hfsplus: bad catalog entry type [ 365.675341][T13363] FAT-fs (loop1): Directory bread(block 68) failed [ 365.703452][T13363] FAT-fs (loop1): Directory bread(block 69) failed [ 365.723699][ T4269] hfsplus: b-tree write err: -5, ino 4 [ 365.770818][T13363] FAT-fs (loop1): Directory bread(block 70) failed [ 365.777391][T13363] FAT-fs (loop1): Directory bread(block 71) failed [ 365.835889][T13363] FAT-fs (loop1): Directory bread(block 72) failed [ 365.887806][T13363] FAT-fs (loop1): Directory bread(block 73) failed [ 365.996003][T13429] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.005554][T13429] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.014326][T13429] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.023118][T13429] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.026931][ T4953] hid-generic 0000:0003:0000.001F: unknown main item tag 0x0 [ 366.124541][ T4953] hid-generic 0000:0003:0000.001F: unknown main item tag 0x0 [ 366.184478][T13429] Zero length message leads to an empty skb [ 366.190813][T13436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3637'. [ 366.220480][ T4953] hid-generic 0000:0003:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 367.020301][T13454] loop3: detected capacity change from 0 to 4096 [ 367.246078][T13460] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3643'. [ 367.315539][T13460] tipc: Started in network mode [ 367.325617][T13460] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 367.378725][T13460] tipc: Enabling of bearer rejected, failed to enable media [ 368.879847][T13454] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 369.231229][T13516] loop1: detected capacity change from 0 to 64 [ 369.515313][T13499] loop2: detected capacity change from 0 to 32768 [ 369.749341][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 369.768166][T13454] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 370.112327][T13535] loop3: detected capacity change from 0 to 2048 [ 370.681090][T13545] device ip6gretap1 entered promiscuous mode [ 371.390500][T13535] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 371.583458][T13535] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.958891][T13570] loop6: detected capacity change from 0 to 1024 [ 372.160420][T13578] loop3: detected capacity change from 0 to 64 [ 372.245920][ T4360] hfsplus: b-tree write err: -5, ino 4 [ 372.459982][ T4263] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 372.954896][ T4263] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 372.979966][ T4263] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.025774][ T4263] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 373.044869][ T4263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.076893][ T4263] usb 1-1: config 0 descriptor?? [ 373.156797][T13580] loop6: detected capacity change from 0 to 32768 [ 373.366670][T13580] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 373.394145][T13580] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 373.473091][T13580] BTRFS info (device loop6): use lzo compression, level 0 [ 373.492428][T13580] BTRFS info (device loop6): using free space tree [ 373.524795][T13580] BTRFS info (device loop6): has skinny extents [ 373.587887][ T4263] zydacron 0003:13EC:0006.0020: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.0-1/input0 [ 373.773004][T13602] loop2: detected capacity change from 0 to 64 [ 373.823735][ T4830] usb 1-1: USB disconnect, device number 8 [ 373.860502][ T5773] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 374.071316][T13580] BTRFS info (device loop6): enabling ssd optimizations [ 374.422646][ T5773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 374.447039][ T5773] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 374.488156][ T5773] usb 4-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 374.504478][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.564076][ T5773] usb 4-1: config 0 descriptor?? [ 374.604510][T13583] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 375.131812][ T5773] wacom 0003:056A:0319.0021: unbalanced collection at end of report description [ 375.156572][ T5773] wacom 0003:056A:0319.0021: parse failed [ 375.183997][ T5773] wacom: probe of 0003:056A:0319.0021 failed with error -22 [ 375.247860][T13618] device gretap0 entered promiscuous mode [ 375.262861][T13618] device vlan2 entered promiscuous mode [ 375.432829][ T4819] usb 4-1: USB disconnect, device number 15 [ 375.573279][ T4953] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 376.444258][ T4953] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 376.444290][ T4953] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 376.444309][ T4953] usb 3-1: Product: syz [ 376.444322][ T4953] usb 3-1: Manufacturer: syz [ 376.444336][ T4953] usb 3-1: SerialNumber: syz [ 376.522605][ T4953] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 376.571553][T13624] fido_id[13624]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 377.039525][ T4953] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 377.145229][T13625] fido_id[13625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 377.166311][ T4953] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 377.318120][ T4953] usb 3-1: USB disconnect, device number 19 [ 377.569897][T13627] loop6: detected capacity change from 0 to 8192 [ 377.673854][T13621] loop3: detected capacity change from 0 to 32768 [ 377.703162][T13627] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 377.760723][T13627] REISERFS (device loop6): using ordered data mode [ 377.798598][T13627] reiserfs: using flush barriers [ 377.871869][T13627] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 377.993735][T13627] REISERFS (device loop6): checking transaction log (loop6) [ 377.997032][T13637] loop1: detected capacity change from 0 to 512 [ 378.335216][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.342206][ T4263] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 378.377576][T13627] REISERFS (device loop6): Using tea hash to sort names [ 378.386366][T13627] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 378.602102][ T4241] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 378.790105][ T4263] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 378.807529][ T4263] usb 3-1: config 0 has no interface number 0 [ 378.813791][ T4263] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 378.832019][ T4263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.856750][ T4263] usb 3-1: config 0 descriptor?? [ 378.919777][ T4241] usb 4-1: Using ep0 maxpacket: 8 [ 379.060446][ T4241] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.111777][ T4241] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.132909][ T4241] usb 4-1: config 0 interface 0 has no altsetting 0 [ 379.139558][ T4241] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 379.194981][ T4241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.202870][ T4953] usb 3-1: USB disconnect, device number 20 [ 379.231487][ T4241] usb 4-1: config 0 descriptor?? [ 379.505959][T13637] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 379.611878][T13637] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 379.687675][T13637] EXT4-fs (loop1): 1 truncate cleaned up [ 379.693536][T13637] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback. [ 379.713172][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.747433][ T4241] steelseries_srws1 0003:1038:1410.0022: item fetching failed at offset 3/5 [ 379.774473][ T4241] steelseries_srws1 0003:1038:1410.0022: parse failed [ 379.781367][ T4241] steelseries_srws1: probe of 0003:1038:1410.0022 failed with error -22 [ 379.807261][T13637] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 379.994319][ T4241] usb 4-1: USB disconnect, device number 16 [ 380.084677][ T4182] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /609/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 380.188026][ T4182] EXT4-fs error (device loop1): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 380.315814][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 380.366668][ T4182] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /609/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 380.520859][ T4182] EXT4-fs error (device loop1): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 380.616800][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 380.690711][ T4182] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /609/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 380.790303][ T4182] EXT4-fs error (device loop1): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 380.880452][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 381.009489][T13661] device gretap0 entered promiscuous mode [ 381.016554][ T4182] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /609/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 381.098257][T13661] device vlan2 entered promiscuous mode [ 381.208426][ T4182] EXT4-fs error (device loop1): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 381.270122][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 381.295045][ T5151] Bluetooth: hci5: Frame reassembly failed (-84) [ 381.332258][ T4182] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /609/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 381.460862][ T4182] EXT4-fs error (device loop1): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 381.480983][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.588495][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 381.695821][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 381.796950][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 381.895236][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 381.980134][T13669] loop6: detected capacity change from 0 to 32768 [ 382.029705][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 382.088950][T13669] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.3728 (13669) [ 382.123453][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 382.166416][T13669] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 382.181612][T13669] BTRFS info (device loop6): using free space tree [ 382.210226][T13669] BTRFS info (device loop6): has skinny extents [ 382.589415][T13669] BTRFS info (device loop6): enabling ssd optimizations [ 382.702600][T13669] BTRFS warning (device loop6): can't set the mixed_backref feature bit while mounted [ 383.365181][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 383.389104][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 384.561523][T13699] loop6: detected capacity change from 0 to 32768 [ 385.053386][ T4826] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 385.064566][T13699] (syz.6.3732,13699,0):ocfs2_verify_userspace_stack:855 ERROR: cluster stack passed to mount, but this filesystem does not support it [ 385.082611][T13699] (syz.6.3732,13699,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 385.134767][ T4182] EXT4-fs error: 101 callbacks suppressed [ 385.134783][ T4182] EXT4-fs error (device loop1): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 385.160647][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.305256][ T4182] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /609/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 385.428370][ T4182] EXT4-fs error (device loop1): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 385.453485][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 385.465119][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 385.523208][ T4826] usb 1-1: Using ep0 maxpacket: 32 [ 385.556602][ T4182] EXT4-fs warning: 46 callbacks suppressed [ 385.556618][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 385.590899][ T4182] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /609/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 385.613349][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.715381][ T4826] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 385.739525][ T4826] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 385.748192][ T4826] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 385.770949][ T4182] EXT4-fs error (device loop1): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 385.776627][ T4826] usb 1-1: config 1 has no interface number 0 [ 385.812798][ T4826] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 385.865263][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 385.891316][ T4826] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 385.918762][ T4182] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /609/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 385.938688][ T4826] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 385.952429][T13718] loop6: detected capacity change from 0 to 1024 [ 385.987986][ T4826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.060437][ T4182] EXT4-fs error (device loop1): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 386.123495][ T4826] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 386.151141][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 386.209708][ T4182] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /609/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 386.292669][ T4182] EXT4-fs error (device loop1): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 386.333760][ T4826] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 386.360109][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 386.385668][ T4182] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /609/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 386.527723][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 386.631072][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 386.757943][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 386.870800][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 386.966778][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 387.086366][ T4182] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 387.280009][ T4826] usb 1-1: USB disconnect, device number 9 [ 387.298276][ T4826] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 387.525234][ T5784] Bluetooth: hci5: command 0x1009 tx timeout [ 387.542228][ T5151] hfsplus: b-tree write err: -5, ino 4 [ 392.230486][T13742] IPVS: Error connecting to the multicast addr [ 392.552665][T13746] loop6: detected capacity change from 0 to 8192 [ 392.642826][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3758'. [ 392.756987][T13750] loop2: detected capacity change from 0 to 8192 [ 392.920842][T13750] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 392.975484][T13750] REISERFS (device loop2): using journaled data mode [ 392.985178][T13750] reiserfs: using flush barriers [ 393.055700][T13750] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 393.157658][T13750] REISERFS (device loop2): checking transaction log (loop2) [ 393.238241][T13750] REISERFS (device loop2): Using r5 hash to sort names [ 393.250699][T13750] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 393.330520][T13765] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3765'. [ 393.334352][T13750] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 393.394190][T13765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3765'. [ 393.460763][T13765] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3765'. [ 394.419069][T13746] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 394.480583][T13746] REISERFS (device loop6): using ordered data mode [ 394.509798][T13772] chnl_net:caif_netlink_parms(): no params data found [ 394.551281][T13746] reiserfs: using flush barriers [ 394.587226][T13746] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 394.680565][T13746] REISERFS (device loop6): checking transaction log (loop6) [ 394.784334][T13746] REISERFS (device loop6): Using r5 hash to sort names [ 394.809657][T13772] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.834987][T13772] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.912345][ T4241] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 394.923911][T13772] device bridge_slave_0 entered promiscuous mode [ 394.943543][T13772] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.966412][T13772] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.989055][T13772] device bridge_slave_1 entered promiscuous mode [ 395.187757][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.223545][T13772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.246771][T13808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 395.272476][T13772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.297818][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.374075][ T4241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.412397][ T4241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.435448][ T4241] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.470081][T13816] nbd: must specify at least one socket [ 395.491875][ T4241] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 395.511264][ T4241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.521865][ T4241] usb 4-1: config 0 descriptor?? [ 395.541500][T13820] netlink: 'syz.2.3787': attribute type 27 has an invalid length. [ 395.591168][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 395.640931][T13772] team0: Port device team_slave_0 added [ 395.742384][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.813908][T13772] team0: Port device team_slave_1 added [ 395.889189][T13772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.896593][T13772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.922514][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.933631][ T4819] Bluetooth: hci1: command 0x0409 tx timeout [ 395.952934][T13772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.007912][ T4241] kye 0003:0458:5011.0023: hidraw0: USB HID vff.fe Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 396.043589][ T5773] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 396.048336][ T4241] kye 0003:0458:5011.0023: tablet-enabling feature report not found [ 396.060314][ T4241] kye 0003:0458:5011.0023: tablet enabling failed [ 396.105781][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.131900][T13772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.140492][T13772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.168747][T13772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.294200][ T4241] usb 4-1: USB disconnect, device number 17 [ 396.315483][T13772] device hsr_slave_0 entered promiscuous mode [ 396.330183][T13772] device hsr_slave_1 entered promiscuous mode [ 396.353858][T13772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.355745][T13853] loop2: detected capacity change from 0 to 4096 [ 396.361440][T13772] Cannot create hsr debugfs directory [ 396.433383][ T5773] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 396.442496][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.463618][T13853] ntfs: volume version 3.1. [ 396.486582][T13853] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 396.505307][T13853] ntfs: (device loop2): load_and_init_quota(): Failed to find inode number for $Quota. [ 396.522961][T13853] ntfs: (device loop2): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 396.534797][T13853] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 396.547501][T13853] ntfs: (device loop2): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 396.565665][ T5773] usb 1-1: config 0 descriptor?? [ 396.593586][T13853] ntfs: (device loop2): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 396.764829][ T9] tipc: Left network mode [ 396.886071][ T5773] kaweth 1-1:0.0: Firmware present in device. [ 397.008763][T13861] loop6: detected capacity change from 0 to 8192 [ 397.029949][T13772] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 397.087318][ T5773] kaweth 1-1:0.0: Statistics collection: 0 [ 397.097541][T13861] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 397.097676][ T5773] kaweth 1-1:0.0: Multicast filter limit: 0 [ 397.122661][ T5773] kaweth 1-1:0.0: MTU: 0 [ 397.130330][T13772] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 397.131888][T13877] loop3: detected capacity change from 0 to 512 [ 397.143951][ T5773] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 397.153066][T13861] REISERFS (device loop6): using ordered data mode [ 397.162906][T13861] reiserfs: using flush barriers [ 397.170501][T13861] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 397.172091][T13772] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 397.210522][T13861] REISERFS (device loop6): checking transaction log (loop6) [ 397.219837][T13772] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 397.256128][T13861] REISERFS (device loop6): Using r5 hash to sort names [ 397.292951][ T5773] kaweth: probe of 1-1:0.0 failed with error -5 [ 397.293450][T13861] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 397.327409][ T5773] usb 1-1: USB disconnect, device number 10 [ 397.353269][ T4241] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 397.364991][T13877] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,bsddf,,errors=continue. Quota mode: writeback. [ 397.378820][T13877] ext4 filesystem being mounted at /768/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 397.524675][T13877] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.3809: invalid size [ 397.644964][T13772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.707733][T13895] loop6: detected capacity change from 0 to 1024 [ 397.723242][ T4241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.753125][T13895] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 397.764468][ T4241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.765833][T13895] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 397.786385][ T4241] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.800086][ T4241] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.806710][T13895] EXT4-fs error (device loop6): ext4_get_journal_inode:5158: inode #5: comm syz.6.3810: unexpected bad inode w/o EXT4_IGET_BAD [ 397.810111][ T4241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.823173][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.840922][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.857943][T13895] EXT4-fs (loop6): no journal found [ 397.871015][T13772] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.873942][ T4241] usb 3-1: config 0 descriptor?? [ 397.885154][T13895] EXT4-fs (loop6): can't get journal size [ 397.911648][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.928379][T13895] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 397.953098][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.974838][ T1289] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.981965][ T1289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.990713][ T9] IPVS: stopping backup sync thread 8495 ... [ 398.002679][ T5773] Bluetooth: hci1: command 0x041b tx timeout [ 398.040193][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 398.114566][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 398.142795][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 398.189624][ T1289] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.196836][ T1289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.247502][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 398.257239][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 398.285819][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 398.317562][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 398.395323][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 398.415334][ T4241] plantronics 0003:047F:FFFF.0024: unbalanced delimiter at end of report description [ 398.440330][ T4241] plantronics 0003:047F:FFFF.0024: parse failed [ 398.457457][ T4241] plantronics: probe of 0003:047F:FFFF.0024 failed with error -22 [ 398.479971][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 398.513636][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 398.558377][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 398.584634][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.661590][T13772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.684378][T13772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 398.704479][ T5788] usb 3-1: USB disconnect, device number 21 [ 398.711467][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 398.744379][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.748940][T13933] syz.6.3820 (13933): attempted to duplicate a private mapping with mremap. This is not supported. [ 398.960218][ T9] device hsr_slave_0 left promiscuous mode [ 399.000503][ T9] device hsr_slave_1 left promiscuous mode [ 399.080954][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.111243][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.154742][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.170827][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.224018][ T9] device bridge_slave_1 left promiscuous mode [ 399.230274][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.270486][ T9] device bridge_slave_0 left promiscuous mode [ 399.289450][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.340435][ T9] device veth1_macvtap left promiscuous mode [ 399.350330][ T9] device veth0_macvtap left promiscuous mode [ 399.364259][ T9] device veth1_vlan left promiscuous mode [ 399.376835][ T9] device veth0_vlan left promiscuous mode [ 399.956973][ T9] team0 (unregistering): Port device team_slave_1 removed [ 399.971087][ T9] team0 (unregistering): Port device team_slave_0 removed [ 399.989944][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.005196][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.049025][ T9] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 400.071324][ T4819] Bluetooth: hci1: command 0x040f tx timeout [ 400.089713][ T9] bond0 (unregistering): Released all slaves [ 400.384909][T14003] loop2: detected capacity change from 0 to 256 [ 400.463086][T14006] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3850'. [ 400.481613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 400.494146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 400.529116][T14003] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 400.564925][T13772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.956040][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 401.022571][T14032] delete_channel: no stack [ 401.326738][T14044] loop2: detected capacity change from 0 to 512 [ 401.494879][T14044] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 401.524470][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 401.533683][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 401.706688][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 401.733414][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 401.804957][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 401.831891][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 401.850508][T13772] device veth0_vlan entered promiscuous mode [ 401.896898][T14057] kernel profiling enabled (shift: 4) [ 401.901648][T13772] device veth1_vlan entered promiscuous mode [ 401.990678][ T4826] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 402.025569][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 402.050126][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 402.088083][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 402.130051][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 402.160340][ T6340] Bluetooth: hci1: command 0x0419 tx timeout [ 402.177282][T13772] device veth0_macvtap entered promiscuous mode [ 402.206532][T13772] device veth1_macvtap entered promiscuous mode [ 402.260288][ T4826] usb 4-1: Using ep0 maxpacket: 8 [ 402.267848][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.322003][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.379784][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.399820][ T4826] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 402.420690][ T4826] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 402.434252][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.451965][ T4826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.466764][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.494907][ T4826] usb 4-1: config 0 descriptor?? [ 402.526233][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.574083][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.598678][T14073] loop2: detected capacity change from 0 to 4096 [ 402.605282][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.660091][T13772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.685332][T13896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 402.709482][T13896] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 402.775419][T13896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 402.808019][T14073] ntfs3: loop2: ino=5, "/" directory corrupted [ 402.821015][T13896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 402.845224][T14073] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 402.882830][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.904007][T14073] ntfs3: loop2: ino=5, "/" directory corrupted [ 402.910648][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.921406][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.947909][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.969942][ T6340] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 402.983571][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.012607][ T4826] corsair 0003:1B1C:1B09.0025: unbalanced delimiter at end of report description [ 403.029090][ T4826] corsair 0003:1B1C:1B09.0025: parse failed [ 403.037406][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.047792][ T4826] corsair: probe of 0003:1B1C:1B09.0025 failed with error -22 [ 403.071441][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.089785][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.118016][T13772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.127634][T13896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 403.142837][T13896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 403.207015][T13772] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.225033][ T4826] usb 4-1: USB disconnect, device number 18 [ 403.236444][T13772] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.247289][T13772] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.256753][T13772] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.330257][ T6340] usb 7-1: not running at top speed; connect to a high speed hub [ 403.420085][ T6340] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 403.430940][ T6340] usb 7-1: config 1 has no interface number 1 [ 403.463642][ T6340] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 403.516867][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.545146][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.587374][T14103] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 403.645799][T14103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.670227][T14103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 403.679960][ T6340] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.693827][ T6340] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.729594][ T6340] usb 7-1: Product: syz [ 403.733972][ T6340] usb 7-1: Manufacturer: syz [ 403.738659][ T6340] usb 7-1: SerialNumber: syz [ 403.796138][T14103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 403.828716][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 403.829010][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.871288][T14111] mkiss: ax0: crc mode is auto. [ 403.874345][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.915640][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 404.229882][ T4826] Bluetooth: hci1: command 0x0405 tx timeout [ 404.236080][ T6340] usb 7-1: failed to enable PITCH for EP 0x82 [ 404.413871][ T6340] usb 7-1: USB disconnect, device number 3 [ 404.645112][T14154] loop7: detected capacity change from 0 to 2048 [ 404.738520][T14154] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 404.795496][T14163] loop2: detected capacity change from 0 to 2048 [ 404.834256][T14165] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 404.849992][T14157] udevd[14157]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.944858][T14163] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 405.046509][T14173] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 405.210519][T14181] loop7: detected capacity change from 0 to 16 [ 405.283414][T14181] erofs: (device loop7): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 405.414388][T14193] loop2: detected capacity change from 0 to 64 [ 405.630991][ T429] ------------[ cut here ]------------ [ 405.643759][ T429] kernel BUG at fs/hfs/inode.c:447! [ 405.690963][ T429] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 405.697076][ T429] CPU: 1 PID: 429 Comm: kworker/u4:3 Not tainted 5.15.189-syzkaller #0 [ 405.705405][ T429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 405.715461][ T429] Workqueue: writeback wb_workfn (flush-7:2) [ 405.721552][ T429] RIP: 0010:hfs_write_inode+0x964/0x970 [ 405.727102][ T429] Code: 8f ff e9 13 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e fe ff ff 4c 89 f7 e8 a6 3a 8f ff e9 51 fe ff ff e8 6c d7 4a ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 54 53 48 89 [ 405.746714][ T429] RSP: 0018:ffffc9000320f3c0 EFLAGS: 00010293 [ 405.752782][ T429] RAX: ffffffff822cecb4 RBX: ffff888076526318 RCX: ffff88801e920000 [ 405.760758][ T429] RDX: 0000000000000000 RSI: ffffffff8c2dfa20 RDI: 0000000000000000 [ 405.768839][ T429] RBP: ffffc9000320f550 R08: ffff88801e920000 R09: 0000000000000003 [ 405.776812][ T429] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 405.784791][ T429] R13: 1ffff92000641e7c R14: 0000000000000000 R15: ffff8880765262d8 [ 405.792763][ T429] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 405.801800][ T429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.808383][ T429] CR2: 00007fe8086e3f84 CR3: 00000000641c1000 CR4: 00000000003506e0 [ 405.816360][ T429] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 405.824335][ T429] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 405.832312][ T429] Call Trace: [ 405.835590][ T429] [ 405.838524][ T429] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 405.844264][ T429] ? __writeback_single_inode+0x471/0xda0 [ 405.849990][ T429] ? __rwlock_init+0x140/0x140 [ 405.854758][ T429] ? __lock_acquire+0x7c60/0x7c60 [ 405.859892][ T429] __writeback_single_inode+0x6c3/0xda0 [ 405.865447][ T429] writeback_sb_inodes+0x9fe/0x1610 [ 405.870695][ T429] ? queue_io+0x550/0x550 [ 405.875033][ T429] ? rcu_is_watching+0x11/0xa0 [ 405.879799][ T429] wb_writeback+0x443/0xb90 [ 405.884305][ T429] ? rcu_lock_release+0x20/0x20 [ 405.889156][ T429] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 405.895139][ T429] ? mark_lock+0x94/0x320 [ 405.899469][ T429] ? _raw_spin_unlock_irq+0x1f/0x40 [ 405.904673][ T429] wb_workfn+0x423/0xe60 [ 405.908920][ T429] ? inode_wait_for_writeback+0x200/0x200 [ 405.914644][ T429] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 405.920629][ T429] ? read_lock_is_recursive+0x10/0x10 [ 405.926002][ T429] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 405.931905][ T429] ? _raw_spin_unlock+0x40/0x40 [ 405.936762][ T429] ? _raw_spin_unlock_irq+0x1f/0x40 [ 405.941967][ T429] process_one_work+0x863/0x1000 [ 405.946915][ T429] ? worker_detach_from_pool+0x240/0x240 [ 405.952556][ T429] ? lockdep_hardirqs_off+0x70/0x100 [ 405.957848][ T429] ? _raw_spin_lock_irq+0xab/0xe0 [ 405.962878][ T429] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 405.968259][ T429] ? wq_worker_running+0x97/0x170 [ 405.973324][ T429] worker_thread+0xaa8/0x12a0 [ 405.978105][ T429] kthread+0x436/0x520 [ 405.982174][ T429] ? rcu_lock_release+0x20/0x20 [ 405.987117][ T429] ? kthread_blkcg+0xd0/0xd0 [ 405.991705][ T429] ret_from_fork+0x1f/0x30 [ 405.996125][ T429] [ 405.999147][ T429] Modules linked in: [ 406.003051][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.031870][ T429] ---[ end trace fddad64d754d869a ]--- [ 406.044111][ T429] RIP: 0010:hfs_write_inode+0x964/0x970 [ 406.053224][ T429] Code: 8f ff e9 13 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e fe ff ff 4c 89 f7 e8 a6 3a 8f ff e9 51 fe ff ff e8 6c d7 4a ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 54 53 48 89 [ 406.082014][ T429] RSP: 0018:ffffc9000320f3c0 EFLAGS: 00010293 [ 406.088907][ T429] RAX: ffffffff822cecb4 RBX: ffff888076526318 RCX: ffff88801e920000 [ 406.096983][ T429] RDX: 0000000000000000 RSI: ffffffff8c2dfa20 RDI: 0000000000000000 [ 406.105363][ T429] RBP: ffffc9000320f550 R08: ffff88801e920000 R09: 0000000000000003 [ 406.115775][ T429] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 406.123815][ T429] R13: 1ffff92000641e7c R14: 0000000000000000 R15: ffff8880765262d8 [ 406.132323][ T429] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 406.141627][ T429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.150007][ T5788] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 406.160095][ T429] CR2: 00007fffdb6b4288 CR3: 000000000be8e000 CR4: 00000000003506f0 [ 406.168082][ T429] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 406.168247][ T4819] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 406.179726][ T429] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 406.192664][ T429] Kernel panic - not syncing: Fatal exception [ 406.198942][ T429] Kernel Offset: disabled [ 406.203253][ T429] Rebooting in 86400 seconds..