last executing test programs: 24m42.644108756s ago: executing program 32 (id=399): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000002d40)) 23m25.827956567s ago: executing program 33 (id=636): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x14, 0x22, 0x601, 0x0, 0x0, "", [@typed={0x4, 0x104, 0x0, 0x0, @binary}]}, 0x14}], 0x1, 0x0, 0x0, 0x24001080}, 0x0) 22m53.354202296s ago: executing program 34 (id=770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a00000007002100626200001c002280040000800400008004"], 0x38}}, 0x10004000) 13m13.73141725s ago: executing program 35 (id=2950): socket$unix(0x1, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000140)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) 11m42.041028454s ago: executing program 36 (id=3185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x4008084) 11m18.114957851s ago: executing program 8 (id=3289): openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='Z', 0x1}], 0x1) 11m16.774645134s ago: executing program 8 (id=3292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r1, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 11m15.453903363s ago: executing program 8 (id=3295): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xc0080, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000001) syz_clone(0x4386111, 0x0, 0x0, 0x0, 0x0, 0x0) 11m13.028226873s ago: executing program 8 (id=3302): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000280)={[{@nodiscard}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}, {@noload}, {@minixdf}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 11m11.111874138s ago: executing program 7 (id=3307): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0x2d4, 0x4, 0x2, 0x7, 0x4}}, {0x4}}]}]}, 0x54}}, 0x0) 11m10.460915276s ago: executing program 8 (id=3308): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000100)={[{@bh}, {@init_itable}, {@stripe}, {@debug}]}, 0x3, 0x467, &(0x7f0000001040)="$eJzs3M9vFFUcAPDvzLZFBGxFVEBU/BWJP1oKqBw4qNHEAyYmetBj0xaCLNTQmgghCsbgyRgT78aj/4Je9GKMJ6NXvRsSYrgAntbMzgzsbneXst2ylf18kum+Nz/2vW/fvN0383Y3gKG1O/uTRGyOiD8jYjzPNu+wO3+4evns7LXLZ2eTqNXe/iep73fl8tnZctfyuE1FZk8akX6WxENtyl08feb4TLU6f6rITy2d+GBq8fSZ54+dmDk6f3T+5L6DBw/sn37pxX0v9CXOrE5Xdn68sGvHG+999ebhL5rib4lj1bZvaHzqtp6q1fpW3HqwpSGdjAywItySSkRkzTVa7//jUYkbjTcer3860MoBa6pWq9U2dd58rgbcwZJozuvyMCzKN/rs+rdcWgcBL6/d8GPgLr2SXwBlcV8tlnzLSKRRppqvb/tpd0T67rl/v8mW6Pd9CACANn7Mxj/PtRv/pfFA8Vgaj4iJiLg3IrZGxH0RsS0i7o+o7/tgRGy/xfJbJ0mWj3/Siz0FtkLZ+O9QMbfVPP67HvdEpchtqcc/mhw5Vp3fGxH3RMSeGN2Q5ae7lPHTa3982WlbFn85/suWrPxyLFjU4+LIhuZj5maWZlYTc6NL5yN2jrSLP7k+E5BExI6I2NljGcee+W5Xp203j7+LPswz1b6NeDpv/3PREn8p6T4/OXVXVOf3TpVnxXK//nbhrU7lryr+Psja/+62538Sh/LzbiJpnK9dvPUyLvz1ecdrml7P/7HknXp6rFj30czS0qnpiLHkcF7pxvX7bhxb5sv9f/g9X9+u/2+N8j8R9Tns7CR+OCIeiYhHi7o/FhGPR8QTXeL/5dUn3+89/rWVtf9ch/YvtLT/jcRYtK5pn6gc//n7pkInlsV/rXv7H6in9hRrVvL6t5J69XY2AwAAwP9PWv9kfJJOFvc4N0eaTk7mn5ffFpFWFxaXnj2y8OHJufw7AhMxmpZ3usYb7odOF5f1ef58ROQfLSi37y/uG39d2VjPT84uVOcGHTwMuU31Pr+8/2f+rgy6dsCa830tGF76Pwwv/R+Gl/4Pw6tN/984iHoAt1+79/9PBlAP4PZr6f+m/WCIuP6H4dWx/7f+8k+69nUBbi/v/zCUFjfGzb8k3zVRPlOPh9+xiRhdF9VYfaKWtG3cSLscteLfX5BYr4nBvi4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0y38BAAD//wyV4A8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 11m10.043757236s ago: executing program 7 (id=3310): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) 11m9.306655084s ago: executing program 8 (id=3312): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x243, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) times(&(0x7f0000000000)) 11m6.706209328s ago: executing program 37 (id=3312): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x243, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) times(&(0x7f0000000000)) 11m6.665569454s ago: executing program 7 (id=3314): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 11m6.133817744s ago: executing program 7 (id=3317): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000280)={[{@nodiscard}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}, {@noload}, {@minixdf}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 11m5.313694668s ago: executing program 9 (id=3232): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x25dfdbfd}, 0x14}}, 0x4010) 11m3.855744094s ago: executing program 7 (id=3321): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) migrate_pages(r0, 0x7, 0x0, &(0x7f00000000c0)=0x3) 11m3.829195963s ago: executing program 9 (id=3322): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900ffffffff02dbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) 11m2.332187066s ago: executing program 7 (id=3326): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0xffd7, 0x2, {0x7f, 0x4}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 11m2.219492853s ago: executing program 9 (id=3327): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1d, 0x0, &(0x7f0000001600)) 10m58.508819701s ago: executing program 38 (id=3326): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0xffd7, 0x2, {0x7f, 0x4}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 10m58.352657435s ago: executing program 9 (id=3330): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000280)={[{@nodiscard}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}, {@noload}, {@minixdf}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f00000004c0)="$eJzs3MtvG0UYAPBv7SR9k1DKo6WFQEFEPJImfdADFxBIHEBCgkMRp5CkVajboCZItIogcAhHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZu6iZ3GiVOX7O8nbTvjHWvm292xZ2e8CaCwBtN/koi9EfFHRPTXs7cXGKz/d3NpfuKfpfmJJKrVt/9OauVuLM1P5EXz9+2pZ6rVLL+jSb2L70WMVypTl7L8yNyFD0dmL195YfrC+Lmpc1MXx06fPnH8SN+psZMdiTON68ahT2YOH3z93atvTpy5+v4v36Xt3Zvtb4yjUwbrR7eppztdWZfta0gnPV1sCG0pR0R6unpr/b8/yrFreV9/vPZ5VxsHbKlqtVpt9v2cWagC21gS3W4B0B35F316/5tvd2nocU+4/nL9BiiN+2a21ff0RCkr07vi/raTBiPizMK/X6dbbNE8BABAox/S8c/zzcZ/pXioodx92RrKQETcHxH7I+KBiDgQEQ9G1Mo+HBGPtFn/yhWS1eOf0rUNBbZO6fjvpWxt6/bxXz76i4FylttXi783OTtdmTqWHZOh6N2R5kfXqOPHV3//stW+xvFfuqX152PBrB3XelZM0E2Oz41vJuZG1z+LONTTLP4k8mWcJCIORsShDdYx/ey3h1vtu3P8a+jAOlP1m4hn6ud/IVbEn0tark+Ovnhq7OTIzqhMHRvJr4rVfv1t8a1W9W8q/g5Iz//uptf/cvwDyc6I2ctXztfWa2fbr2Pxzy9a3tNs9PrvS96ppfuy1z4en5u7NBrRl7yx+vWxW+/N83n5NP6ho837//64dSQejYj0Ij4SEY9FxONZ25+IiCcj4uga8f/8ylMftB//GrPyHZTGP3mn8x+N57/9RPn8T9+3H38uPf8naqmh7JX1fP6tt4GbOXYAAADwf1Gq/QY+KQ0vp0ul4eH6b/gPxO5SZWZ27rmzMx9dnKz/Vn4gekv5TFd/w3zoaDY3nOfHVuSPZ/PGX5V31fLDEzOVyW4HDwW3p0X/T/1V7nbrgC3neS0oLv0fikv/h+LS/6G49H8ormb9/9MutAO4+3z/Q3Hp/1Bc+j8Ul/4PhdTy2fjSph75l9j2iSjdE83Y/omedf8xiw0mdjTd1e1PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74LwAA//9wiOSH") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 10m56.482900814s ago: executing program 9 (id=3335): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8c, 0x86a, 0x1, 0x6, 0xd59f80, 0x19f2, 0x3b, 0xa, 0x7, 0x4000007, 0x2800, 0xd, 0x9, 0xcd, 0x15, 0x30, {0x8, 0x1fe}, 0x0, 0x9}}) 10m55.075123326s ago: executing program 9 (id=3337): ioperm(0x7, 0x4, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m50.572494957s ago: executing program 39 (id=3337): ioperm(0x7, 0x4, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m4.314244393s ago: executing program 3 (id=3619): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4a, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xd, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f0000000100)={0x40, 0xb, 0xe, {0xe, 0x24, "271d70fe7f15532cd1096f4d"}}, 0x0, 0x0, 0x0}, 0x0) 9m1.206332797s ago: executing program 3 (id=3628): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000080)='./file0\x00', 0x1600008, &(0x7f00000000c0)={[{@nodecompose}, {@gid}, {@force}, {@uid}, {@nls={'nls', 0x3d, 'maciceland'}}, {@gid}, {@barrier}]}, 0xff, 0x632, &(0x7f0000000800)="$eJzs3UtsG2kdAPD/OI4TB9TN7qa7Ba1EtJUWRESbh7IQLpSHUA4rtFoOnKPWbay6aZW4KK0QCi9x4MKh4lwOuXFC6j1SOcMF9ZpjJVAvPaDcjGY8dpy386qd7e8Xjb/v8zfzzX/+9jzsyJoA3lrzE1HciCTmJz5bTdub6zO1zfWZoby7FhFpvRBRbBaRLEUkz5vdN9KHr6VP5vMnB63nSXXuixevN182W8XWwkkprQ0fvNxRmguu5VOMR8RAXu412O2oO8a7eeB4+/nvn/YPshlous1XW4mDXmvssXacxU+83wL9I2meN/cYjRjJztDN64DIjw6FNxvd2TvWUQ4AAAAuqHe2Ymut0Wj0Og4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4SPL7/yf5VGjVxyNp3f+/1DF7qYehnomNXgcAAAAAAAAAACfSGOhsfWMrtmI1LrV7k+x//h9njbHs8SvxMFaiEstxLVZjIepRj+WYiojRjoFKqwv1+vJUF0tO77vk9LluNAAAAAAAAAB82f025rf//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP0giRhoFtk01qqPRqEYEcMRUUrnW4v4V6t+kW30OgAAAAB4A97Ziq1YjUutdiPJPvN/kH3uH46HsRT1qEY9alGJW9l3Ac1P/YXN9Zna5vrMvXTaO+5f/tfIdBlGNmI0v3vYf81XsjnKcTuq2TPX4mbcj1q5c5QrrXj2j+s3r9Kxf5DrMrJbeZlu+Z/zsj+MZhkZbGdkMo8tzeO7h2fih69OtaapKLS/+Rk7h5yP5GWyq+y93ZmYjkKW79QHh2ci4pvP/vaLxdrS3cXbKxP9s0kn1MxEo9HMxFDWamXiw7cqE5PZtl9ut+fjp/HzmIjx+DyWoxq/jIWoRyXG4ydZbSF/P6ePo7syVdg59I0drc+PiqSUvy7No+jxYvo4W/ZSVONncT9uRSU+zf6mYyq+G7MxG3Mdr/DlLvb6wvH2+qvfyivpIf2Pedkf0ry+25HXzmPuaNbX+cx2lt47+2Nj8et5JV3H7yLix2e4naezOxPpWeLZV5t97x+eib9m1wkrtaW7y4sLD7pc3yd5me5Hf+irs0T6fnkvfbGy1s53R9r3/r59U1nfWLuvsKfvcrvvqD21lF/D7R1pOuv7cN++mazvSkffnuut9vUQAH1s5NsjpfJ/yv8sPy3/vrxY/mz4R0PfG/qoFIP/GPx+cXLgk8JHyd/jafx6+/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwciuPHt9dqNUqy0dWkuzm/xFdzdxRad3O6fCZk/xGPscZWaVWqwxHX4RxrErt3xEdzyS9jqcfKkP99ubv7XEJOH/X6/ceXF959Pg71XsLdyp3KkuDs7Nzk3Ozn85cv12tDUT6WJnsdZTAedg+6fc6EgAAAAAAAAAAAKBbh/8MYDCf63Q/J+jxJgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX3PxEFDciianJa5Npe3N9ppZOrfr2nMWIKERE8quI5HnEjWhOMdoxXHLQep5U57548Xrz5fZYxdb8hcOW685aPsV4RAzk5VmNd/PU4yXtLUwTdrV0uuDgzPw/AAD//4oVCL4=") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='osx.:'], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 8m59.468243656s ago: executing program 3 (id=3634): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20881, 0x0) ppoll(&(0x7f00000006c0)=[{r0, 0x204}], 0x1, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 8m52.882427691s ago: executing program 3 (id=3648): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56a, &(0x7f0000000580)="$eJzs3V9v094ZwPHH/bUQZVI1jQmhqsChbFKRSnASCIq48pyT9EBiR7aD2itW0RRVpDBRJq29GOOGbdL2Irjdi9g7QrvfLphsJ/2XOGFK20zV9xO158Q+9nmOG51Tt/axAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsdyabRctaRqvs6GyubXAbx2/7W89tEAenErG1CtixV+Sy8mtdNGtXx6vvhl/W/ntH9N3y5KLk5wc/uzmz5/dmJ8bbD8m4Euxf3D4dqvX636YdSAX59/fr2evbGjPhL5pOQ2tTOiraqViP1qvh6pumjrcDCPdUm6gncgP1Kr7QBWr1bLShU2/4zVqTlMPFj59WLLtinpeaGsnCH3v0fNC6K6bZtN4jaRMvDou8zT+IL4wkYq001JqZ7fXLU9qQVyo+COFSpMKlexSqVgslYqVJ9UnT217fmiBfYYMlZj9hxazdY69NzCduf74L00x4klHNkSNfLlSk0B8aWWs7xuM/79+pMfWe3L8X04XLd86Xr0Uf1uRO+m7O1njf0Ysl/falwM5lLeyJT3pSVc+zDyiy301RIsnRkLxxUhLnGSJ6i9RUpWKVMSWV7IudQlFSV2MNEVLKJsSSiQ6+US5EogWRyLxJRAlq+LKA1FSlKpUpSxKtBRkU3zpiCcNqYmT7GVHdpPjXhZlZcV4VKiY2Yz84HPXldKY1jL+Y3rn2n8D0/g+GP8BAAAAAMCVZSV/fY/P/xfkdpKrm6a2Zx0WAAAAAAA4R8l//pfjZCHO3RaL838AAAAAAK4aK7nHzhKRvNxNcztiJbdLjfojwE8zCBEAAAAAAEwp+f//nThJ5kC5K9bRdClcBAAAAAAAwBXxl6PZd7Pm2A3b161//kuCYMH63N74lbWXzM3r7PUvBRi6IiCqL1mL/Z0kSSVN5uddvWzl0kJHk2B+6yc78qkfR7rDoTisIFj4z/fUUQB/yg4gJ2cDuDEvf5N7aZl722m6PViT1pKvm6YuuH7zWVEcZ3Eu0hvR79/t/kGS5v/Vay1aOdntdQuv3/e2k4PxOd7L573+BIpD8yhmHYwb8/IxmW8huedi5JFfSG7E6Nebt2Rnt9e1kzqdtP1z6eZzp2v8tDimzi+ykpZa6c94mz/d/lxcZ7GQ1fp+FMUpW/5F7qdl7q/eT5MRUZQmRVE6GcXoYzF9FOVJUZSnjAIAZmVnwihknRj4M8adQWZML7cz6bcMa6iW//XXi6RHX03LrC4lHev80oge3Z7Uo9tTjm7/GHoGUtYYG9f79zOj6td4g6+Z9YbNkhUfwp8+7v1Obu4fHD7c3dt6033TfVcqlSv2Y9t+UpKFpBn9hLEHADDC5GfsTCxhPZ5wVv2Lo0sKCvJa3ktPtmUtudsgueJg5F7zJy5DWJtw1ppPhsn0CS9rY87qriV3OQz2Wxpb9nQM5Yv/QQAAcIlWJozDPzL+r0047z49lo8/O86feFobAAC4GDr4ZuWjP1tBYNqvitVq0YnWtQp894UKTK2hlfEiHbjrjtfQqh34ke/6zTjz0tR0qMJOu+0Hkar7gWr7odlIpg9U/Ue/h7rleJFxw3ZTO6FWru9Fjhupmgld1e78pmnCdR0kG4dt7Zq6cZ3I+J4K/U7g6oJSodYnCpqa9iJTN3HWU+3AtJwgp176zU5Lq5oO3cC0Iz/d4aAu49X9oJXstjDrgw0AwP+J/YPDt1u9XvfDRWWuzbqFAADgrOPhetaRAAAAAAAAAAAAAAAAAAAAAACALBd+/9/ZTP8BAHKplZI5h4xkrprjZ3r1MhO7jk8X2jEBuHD/DQAA//8Dc1K7") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) 8m51.683375233s ago: executing program 3 (id=3653): unshare(0x24020400) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) 8m50.556409292s ago: executing program 3 (id=3656): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffff5, 0x3}, 0x10) 8m48.261157105s ago: executing program 40 (id=3656): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)={0x10, 0xfffffffffffffff5, 0x3}, 0x10) 2m5.623747871s ago: executing program 2 (id=5263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 2m4.813325123s ago: executing program 2 (id=5267): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, &(0x7f0000000040)) 2m3.728283999s ago: executing program 2 (id=5271): stat(&(0x7f0000000340)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) 2m2.55045934s ago: executing program 2 (id=5275): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x4004, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303031302c636f6465706167653d63703835352c696f636861727365743d6370313235302c0065fcfac35652d2119752177b83dd62bd1f7de553835128ed9475d69a7ff68815d149e3d770260f87adedaaa6166f2883a669eadf2fc703841d76d28addf20312d9c8fc5b9c22b6ded1166f95bc118305a3ee7ebad510e9785ba1b21c76ac0d23979366134009b2e8055dfdb125c12135913b94b66581", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYBLOB="d3f35b2297445ef029d1864d2fa28357216768347b4e29f27da9448236496d7f8e1f1692877062f7af1f6d5e06c98ff182c2d8859074ed34c8c537a0b145cedef8e4ec5ed426fbbfae61328eaf7b084e2f5dceae9684c14981c48762696b73478e92a645f261d79997bcb1e932a3a0fa099263b83dd195aa8d6b98ca3f1d44279b4c944d1fc34ab659dc061fb25b68d1decc34a81af69416ebec70fa59c6bae763c506a00ca1ca0954d3399f2e2b6c7b914b03e4c0121813e5", @ANYBLOB="930f5cedffd91218932a937443bfd092311dd9f5aca3e0daf0e3c850948814dab6ce93f85bf7d0614662ca07fcba804e2181ea10357b2152c11ea1c1290e597ceada5fcd29201d9f8bb050a7db0ae3fedd350305b88b281ad98df8d2dde194f4f16561c179cc9fee273fab23ec519b5d0c945fc1995042a9444415d92df893773482d47e8fe3ab08a63d0ab9dd6b68d0524ff7e886edf3e9a93311aae9f71b59ff87790e9c1208ea5d8f6a8bd749f72ef1eca23235a5b0dae4b09e40a4b4cf06aa4d1b36bc91ffeafd9f8ceb19f6c085a9bfe9ce2e89fbf9af06e8e947bf42518d1f0027c5fa39249914cdacc74a2750f3d79cf2", @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRES8, @ANYRESOCT], 0x1, 0x309, &(0x7f0000000880)="$eJzs3T1v00AYB/D/XZImfVExbRESC6hQCZaKAgNiSYWysjMhIEmliqgVbZGAhYIYER+AFfEV+BAsIL4ATEzM0IlD9/ji2I1fYlLXbfn/pAbncnd+nPPLPRatQUT/rdutbx+u/7A/CqigAuAWoAE0gCqAMzjbeLKxs77T63bSOqpIC/uj4LdUQ3XaG924pradtHA8+66KmXAZFcMYs/q97CCodHL0x9BA3R2H8nnjkOMqyi5wvuwYDlt4gNUe9vAUsyWGQ0RER4C7/mt3mZiRIgWtgSV32T9R1/+9k7Mp1o3eUJFJbRC6/svszig7vqfko0G+Jymc/Vz3s8RRgqntez8Bf8+KTDBVVlYpsejJtfUqltsv0dF4haYTqrYgrx1/1+3LiHYxJjdNkdxbDXem/K2RGeV+/ZDW1nvdul2IiX8+3xrHpz6pL+qe8vAOnWD+VzXKDpOMlLdvpHTNxn81ucdpaWVrwaX9zWZTR6qclpWcc2twMrayEZ+RSM4qBjcNdoMI0uKUdc8helvB37qVjFbzca284F1Cq4VIq4rbE5bbm73UWym5JHxHw/qbqN6qu2oRP/ERrdD8X9uelhA6MtPOj0pquj2jvYk/xkzE16xKTW/odDs4XC4EETj1UTeJwvLdLXuDh7iJ2e1nzx9Ver3ull14ELPweGZLuZLaa2Cozq/3fn8JzQ9mYbWClDrYHZTIieGFMaP2bMYITA1/G9GFK9n9/B59pfZID0rs4RNX2R5lQYk+gCEwqqAxHWehnvXNF7zQ+oy0HfL4LNiLaMJHxZyk6GjZVv1BdwWTJQdEh83Ou5Sf/8lM3s3qJEWyL17KPD09yUSkx5Ugg4tOBefkdSpXBjednMGF1ngtIWeUnOviZeBSqFAhdY2ei/OEUC18xX3e/yciIiIiIiIiIiIiIiIiIiIiIiIiOm7cf/rv/8pmIb9pUPImEhEREREREREREREREREREREREREREREde//0/N+4vxEvz//1cj3/d9X9O8bzf02uBzkRUcTfAAAA///9fX2a") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chown(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0xffffffffffffffff) 2m1.233539258s ago: executing program 2 (id=5281): r0 = fsopen(&(0x7f00000001c0)='cgroup\x00', 0x0) r1 = dup2(r0, r0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='source', 0x0, r0) 2m0.540398724s ago: executing program 2 (id=5283): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000080)=[{}], 0x1, &(0x7f0000000180), 0x0, 0x0) 1m57.933648662s ago: executing program 41 (id=5283): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000080)=[{}], 0x1, &(0x7f0000000180), 0x0, 0x0) 9.233960608s ago: executing program 1 (id=5664): r0 = io_uring_setup(0x2d54, &(0x7f0000000080)={0x0, 0x0, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x20002880, &(0x7f0000000000)={0x0, 0xb07c, 0x7e, 0x0, 0x0, 0x0, r0}) 7.923873774s ago: executing program 1 (id=5669): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0xa0}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@dmask}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000003c0)=""/174, 0xae) 7.745899262s ago: executing program 4 (id=5671): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, r1, 0x1, 0x0, 0x25dfdbfe, {0x1, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0xf36187960dadebcc}, 0xc000) 7.667145543s ago: executing program 6 (id=5672): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r0, &(0x7f0000000080)="e0", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e20, 0xfffeffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 6.560060606s ago: executing program 5 (id=5673): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="070800ff4bffba100048000086dd", 0xe, 0x24044001, &(0x7f0000000000)={0x11, 0x11, r1, 0x1, 0x0, 0x6, @random="6d3d0b2b9ddd"}, 0x14) 6.485850397s ago: executing program 4 (id=5674): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6.284834073s ago: executing program 0 (id=5675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 6.257008844s ago: executing program 6 (id=5676): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="3891f887675175d30f4dff2dd5f47366d2", 0x11}, {&(0x7f00000000c0)="eca3a9b113417b112cd1c2b37467368d30fc6b950612d10f162a092cb97d5e5e565d3e638db22f1dc78c7fe735a08e0e6a43cbd3e882ffaf48653ad4dc6f3f994ba637feb8aac9885e23b7458a34dd0173694da796b937840aaa0158ff19b1ee1199b4697bde83031f4bf3c03c0cf959f1c18e88ccb244604f291f9ba1ebba4b447acb3fad5a667b0d48cfd149aa4a2ffbd25ba66bf9d1c650d4189d5c611ae188c4c6ce7f9878eb7fd41c6738991c1545244845a0490d9b4bdd93de6adff4ed1072d1cadeeee6e02ab538045e629eaa8d010ae2ec8dce5e6bc7fa5af1eb605ac0e5", 0xe2}, {&(0x7f00000001c0)="b0d92d18020a9e30816852113cbf86997abeedda0db1af9fea703606043eee416b602c931f9b9125e0f735b3fafa26c9a9296a936b4dd148342a227043a14f62fe438bfc95999e49b1081b8f9dbe6edd828102a3f97e387b24ee604ef7ea22631c3765b65a996923c099bfd5c99ec5631238a9c85fcce46a409ac50351b24088659a91dd26acf99b4363dec2b8c851152676a4e23388162c50a44ffbc5f4893f4b79fd8fc5b6150a", 0xa8}, {&(0x7f0000000280)='<', 0x1}, {&(0x7f00000003c0)="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", 0x665}], 0x5) 5.964578498s ago: executing program 1 (id=5677): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000001f40)={0x0, 0xfb, 0x381, 0x1, 0x40, "8a9f9e8755f9a5a4c14af1c37801b235", "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"}, 0x381, 0x2) 5.615934073s ago: executing program 5 (id=5678): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) sendmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000010000000c"], 0x10}}], 0x1, 0x0) 5.351342414s ago: executing program 4 (id=5679): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f0000000580)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@quota}, {@errors_remount}]}, 0x84, 0x502, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 5.103852974s ago: executing program 0 (id=5680): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) 4.929687451s ago: executing program 6 (id=5681): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000040)="240000001e005f0214f9f407000904001f00000000000000080000010800040001000001", 0x24) 4.71132596s ago: executing program 5 (id=5682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x4048010) 3.880460994s ago: executing program 0 (id=5683): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000001840), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000080001004000"], 0x6c}}, 0x0) 3.491485298s ago: executing program 6 (id=5684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x3c, r1, 0x1, 0x0, 0x0, {0x2f}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 3.30419335s ago: executing program 1 (id=5685): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000120001003dbd700000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 '], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 3.224082255s ago: executing program 5 (id=5686): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x3f00000000000000}) 2.739132417s ago: executing program 4 (id=5687): io_setup(0xeb0, &(0x7f0000000140)=0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000001780)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 2.22942439s ago: executing program 0 (id=5688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000040c0000002000018008000300020000001400020076657468315f746f5f7465616d00000014000380040005000400040008000200"], 0x48}}, 0x0) 2.196671257s ago: executing program 6 (id=5689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000000000000a00000008000300", @ANYRES32], 0x1c}}, 0x0) 2.025739955s ago: executing program 5 (id=5690): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000340), 0x4) 1.894670136s ago: executing program 1 (id=5691): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000003a40)=[@ip_retopts={{0x10}}], 0x10}, 0x10) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES16, @ANYRES16, @ANYRES16], 0x1, 0x1cf, &(0x7f0000000780)="$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") 1.484050996s ago: executing program 4 (id=5692): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000080)={0xb, {"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", 0x1000}}, 0x1006) 1.07580908s ago: executing program 5 (id=5693): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001e005f0214ffffffffe9fff8076000001d000000000004aa0000000072000000", 0x24) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x0, 0x65, 0x80, 0xca}}]}}]}}, 0x0) 1.042656828s ago: executing program 0 (id=5694): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x10, 0x1403, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0) 898.126196ms ago: executing program 6 (id=5695): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x30004c0, &(0x7f0000002bc0)=ANY=[@ANYBLOB="71756965742c63726561746f723dd4675f162c696f636861727365743d69736f383835392d322c71756965742c636f6465706167653d63703933362c00b24530a1a1e51b95228246cc65c972358b611490e09004a315011a4fe58392211f22a42390912061adb25c406e20585d9fa4109c4a2b201f39c5e48b745085abecadfbfbbcd03215c2cdd68151829c12d7be50cdd55aa9e506d9e28ad8ce2951dd1f560961e92e8d198954d737b45262a26cc3bb46b70e1ad909d3b0c2d7fb8053f47884a9cc46a9d32ce04b2d00544c47d94d5a91538c024918965b", @ANYRESDEC, @ANYRESOCT], 0x11, 0x2b7, &(0x7f0000000b00)="$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") r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000002b00)=""/4115, 0x1013) 397.902711ms ago: executing program 1 (id=5696): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r0) 26.619489ms ago: executing program 4 (id=5697): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0xd8) 0s ago: executing program 0 (id=5698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x48ab0a1a1870d04a}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) kernel console output (not intermixed with test programs): read failed, block=256, location=256 [ 1487.580978][T23902] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1487.592284][T23902] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1487.662616][T23902] Remounting filesystem read-only [ 1487.708434][T23908] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1487.772923][T19234] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 1488.652350][T23928] loop0: detected capacity change from 0 to 256 [ 1489.238579][T23928] FAT-fs (loop0): Directory bread(block 64) failed [ 1489.248741][T23928] FAT-fs (loop0): Directory bread(block 65) failed [ 1489.256126][T23928] FAT-fs (loop0): Directory bread(block 66) failed [ 1489.262957][T23928] FAT-fs (loop0): Directory bread(block 67) failed [ 1489.270191][T23928] FAT-fs (loop0): Directory bread(block 68) failed [ 1489.280234][T23928] FAT-fs (loop0): Directory bread(block 69) failed [ 1489.287376][T23928] FAT-fs (loop0): Directory bread(block 70) failed [ 1489.294193][T23928] FAT-fs (loop0): Directory bread(block 71) failed [ 1489.301539][T23928] FAT-fs (loop0): Directory bread(block 72) failed [ 1489.311667][T23928] FAT-fs (loop0): Directory bread(block 73) failed [ 1489.937117][T23946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4310'. [ 1489.969031][T23946] vlan2: entered promiscuous mode [ 1489.977611][T23946] erspan0: entered promiscuous mode [ 1490.250164][T23945] loop1: detected capacity change from 0 to 2048 [ 1490.460401][T23945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1492.309510][T23979] loop0: detected capacity change from 0 to 1024 [ 1492.527952][ T5852] hid-generic C98F:0003:0000.0024: unknown main item tag 0x0 [ 1492.536159][ T5852] hid-generic C98F:0003:0000.0024: unknown main item tag 0x0 [ 1492.546434][T23972] loop1: detected capacity change from 0 to 4096 [ 1492.603072][T23972] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1492.637754][ T5852] hid-generic C98F:0003:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1492.651291][T23972] ntfs3(loop1): It is recommened to use chkdsk. [ 1493.338144][T23972] ntfs3(loop1): failed to convert "076c" to cp437 [ 1493.388730][T23972] ntfs3(loop1): ino=5, "/" ntfs_readdir [ 1494.220719][T24010] loop2: detected capacity change from 0 to 1024 [ 1494.310780][T24010] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1494.525821][T24010] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4326: Invalid block bitmap block 0 in block_group 0 [ 1494.640657][T24010] Quota error (device loop2): write_blk: dquota write failed [ 1494.648727][T24010] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1494.659498][T24010] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.4326: Failed to acquire dquot type 0 [ 1494.795997][T24010] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.4326: Freeing blocks not in datazone - block = 0, count = 4096 [ 1494.906642][T24010] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.4326: Invalid inode bitmap blk 0 in block_group 0 [ 1494.925548][ T4013] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 1494.938251][ T4013] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:23: Failed to release dquot type 0 [ 1495.004970][T24010] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 1495.093964][T24010] EXT4-fs (loop2): 1 orphan inode deleted [ 1495.102795][T24010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1495.287699][ T3565] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 1495.769583][T18565] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1495.821021][ T3716] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 1495.830832][ T3716] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 0 [ 1495.969916][T24032] loop0: detected capacity change from 0 to 2048 [ 1496.237143][T24032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1496.435086][T24032] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1496.479598][T24047] ip6tnl1: entered promiscuous mode [ 1496.488470][T24047] ip6tnl1: entered allmulticast mode [ 1496.501862][T24047] team0: Device ip6tnl1 is of different type [ 1496.862293][T10496] kernel write not supported for file /snd/seq (pid: 10496 comm: kworker/0:1) [ 1496.965556][T19234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1497.313333][T24060] loop4: detected capacity change from 0 to 512 [ 1497.395376][T24060] EXT4-fs: Ignoring removed mblk_io_submit option [ 1497.503334][T24060] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1497.633237][T24067] loop0: detected capacity change from 0 to 128 [ 1497.637114][T24060] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1497.795630][T24060] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1497.863591][T24060] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.4339: Invalid block bitmap block 0 in block_group 0 [ 1497.919094][T24060] EXT4-fs (loop4): Remounting filesystem read-only [ 1497.991258][T24060] Quota error (device loop4): write_blk: dquota write failed [ 1498.070283][T24060] Quota error (device loop4): write_blk: dquota write failed [ 1498.079328][T24060] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1498.093323][T24060] EXT4-fs (loop4): 1 orphan inode deleted [ 1498.229475][T24060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1498.772444][T18893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1501.218686][T24123] loop1: detected capacity change from 0 to 1024 [ 1501.414007][T24127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4360'. [ 1501.423666][T24127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4360'. [ 1501.442950][T24123] hfsplus: bad catalog entry type [ 1501.921151][ T8622] hfsplus: b-tree write err: -5, ino 4 [ 1503.261230][T24158] netlink: 810 bytes leftover after parsing attributes in process `syz.0.4368'. [ 1504.323173][T24169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4371'. [ 1504.333007][T24169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4371'. [ 1504.701214][T24174] loop0: detected capacity change from 0 to 764 [ 1505.653361][T24179] loop6: detected capacity change from 0 to 4096 [ 1505.768482][T24179] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1505.910161][T24194] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 1506.305494][T24179] ntfs3(loop6): Failed to load $Extend (-22). [ 1506.312006][T24179] ntfs3(loop6): Failed to initialize $Extend. [ 1507.078568][T24198] loop2: detected capacity change from 0 to 2048 [ 1507.270498][T24198] hpfs: filesystem error: invalid number of hotfixes: 266, used: 2; already mounted read-only [ 1507.360005][T24198] hpfs: filesystem error: improperly stopped [ 1507.367031][T24198] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 1508.042852][T24198] loop2: detected capacity change from 0 to 1024 [ 1509.303098][T24237] loop0: detected capacity change from 0 to 2048 [ 1509.412822][T24242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4393'. [ 1509.507925][T24237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1509.651015][T24237] EXT4-fs error (device loop0): ext4_ext_precache:648: inode #2: comm syz.0.4391: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1509.776638][T24237] EXT4-fs (loop0): Remounting filesystem read-only [ 1510.319778][T19234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.020605][T24267] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1511.027456][T24267] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1511.036068][T24267] vhci_hcd vhci_hcd.0: Device attached [ 1511.287885][T10496] vhci_hcd: vhci_device speed not set [ 1511.304836][ T5852] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1511.385228][T10496] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 1511.514843][ T5851] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 1511.527692][ T5852] usb 7-1: Using ep0 maxpacket: 32 [ 1511.546109][ T5852] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.560892][ T5852] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.571286][ T5852] usb 7-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1511.580771][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.636844][T24282] loop4: detected capacity change from 0 to 512 [ 1511.743744][T24282] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 1511.782193][ T5852] usb 7-1: config 0 descriptor?? [ 1511.817097][ T5851] usb 2-1: config 0 has no interfaces? [ 1511.822964][ T5851] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1511.834628][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.969131][ T5851] usb 2-1: config 0 descriptor?? [ 1512.257997][T24268] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 1512.276032][ T8622] vhci_hcd: stop threads [ 1512.280538][ T8622] vhci_hcd: release socket [ 1512.283062][T19839] usb 2-1: USB disconnect, device number 16 [ 1512.286359][ T8622] vhci_hcd: disconnect device [ 1512.469235][ T5852] input: HID 054c:03d5 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:054C:03D5.0025/input/input18 [ 1512.717441][ T5852] sony 0003:054C:03D5.0025: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.6-1/input0 [ 1512.867339][ T5852] usb 7-1: USB disconnect, device number 15 [ 1513.638072][T24338] loop0: detected capacity change from 0 to 64 [ 1514.209504][T24341] loop1: detected capacity change from 0 to 2048 [ 1514.297213][T24348] netlink: 'syz.2.4409': attribute type 7 has an invalid length. [ 1514.334285][T24341] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=26504, location=26504 [ 1514.455274][T24341] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1514.880442][T24357] loop6: detected capacity change from 0 to 1024 [ 1516.484972][T10496] vhci_hcd: vhci_device speed not set [ 1518.229026][T24414] loop4: detected capacity change from 0 to 2048 [ 1518.378441][T24414] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1518.477610][T24422] loop6: detected capacity change from 0 to 512 [ 1518.497536][T24422] EXT4-fs: Ignoring removed nobh option [ 1518.581592][T24422] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 1519.817336][T24443] loop4: detected capacity change from 0 to 1024 [ 1519.923433][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1519.930505][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1520.525400][T18685] hfsplus: b-tree write err: -5, ino 4 [ 1520.668205][T24460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4437'. [ 1520.928691][ T30] audit: type=1326 audit(1520.905:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24466 comm="syz.1.4439" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x0 [ 1522.429423][T24485] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4444'. [ 1522.615535][T24483] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4444'. [ 1524.311403][T24505] loop1: detected capacity change from 0 to 512 [ 1524.418592][T24505] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1524.558588][T24505] EXT4-fs (loop1): 1 truncate cleaned up [ 1524.567376][T24505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1524.765042][T24498] loop2: detected capacity change from 0 to 4096 [ 1524.824188][T24512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4454'. [ 1525.058961][T24514] loop6: detected capacity change from 0 to 128 [ 1525.124915][T24514] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1525.203479][T21057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1525.249894][T24506] loop0: detected capacity change from 0 to 4096 [ 1525.598761][T24514] FAT-fs (loop6): FAT read failed (blocknr 128) [ 1526.050961][T24506] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 1527.404158][T24545] loop4: detected capacity change from 0 to 1024 [ 1527.558867][T24545] hfsplus: bad catalog entry type [ 1527.741787][T24549] loop2: detected capacity change from 0 to 8 [ 1528.006116][T17018] hfsplus: b-tree write err: -5, ino 4 [ 1530.235990][T24586] netlink: 'syz.2.4472': attribute type 3 has an invalid length. [ 1534.725508][T24644] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1534.733242][T24644] macvlan3: entered promiscuous mode [ 1534.752417][T24644] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1535.078635][ T5851] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1535.301096][ T5851] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1535.309851][ T5851] usb 7-1: config 0 has no interface number 0 [ 1535.316725][ T5851] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1535.326284][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.433370][ T5851] usb 7-1: config 0 descriptor?? [ 1535.571527][ T5851] usb 7-1: selecting invalid altsetting 1 [ 1535.578315][ T5851] dvb_ttusb_budget: ttusb_init_controller: error [ 1535.585288][ T5851] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1536.034824][ T5852] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1536.257664][ T5852] usb 5-1: Using ep0 maxpacket: 16 [ 1536.288408][ T5851] DVB: Unable to find symbol cx22700_attach() [ 1536.308299][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1536.323004][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1536.333357][ T5852] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1536.349663][ T5852] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1536.359317][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.717327][ T5852] usb 5-1: config 0 descriptor?? [ 1536.853436][ T5851] DVB: Unable to find symbol tda10046_attach() [ 1536.860689][ T5851] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1537.009342][ T5851] usb 7-1: USB disconnect, device number 16 [ 1537.243569][ T5852] microsoft 0003:045E:07DA.0026: No inputs registered, leaving [ 1537.336844][ T5852] microsoft 0003:045E:07DA.0026: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1537.348925][ T5852] microsoft 0003:045E:07DA.0026: no inputs found [ 1537.358622][ T5852] microsoft 0003:045E:07DA.0026: could not initialize ff, continuing anyway [ 1537.529277][T24705] loop2: detected capacity change from 0 to 256 [ 1537.580290][ T5852] usb 5-1: USB disconnect, device number 13 [ 1538.727329][T24714] loop1: detected capacity change from 0 to 4096 [ 1538.794984][T24714] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1539.346887][T24714] ntfs3(loop1): ino=19, mi_enum_attr [ 1539.352642][T24714] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1541.133744][T24760] loop6: detected capacity change from 0 to 64 [ 1541.859000][T24770] loop0: detected capacity change from 0 to 164 [ 1542.295607][T24766] loop2: detected capacity change from 0 to 4096 [ 1542.314153][T24774] loop4: detected capacity change from 0 to 1024 [ 1542.343639][T24766] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1542.410319][T24774] hfsplus: unable to find HFS+ superblock [ 1543.250491][T24795] loop4: detected capacity change from 0 to 8 [ 1543.450451][T24795] cramfs: Error -5 while decompressing! [ 1543.457030][T24795] cramfs: ffffffff94e44578(27)->ffff888024c18000(4096) [ 1543.465807][T24795] cramfs: Error -5 while decompressing! [ 1543.471635][T24795] cramfs: ffffffff94e44578(27)->ffff888024c18000(4096) [ 1543.512706][ T30] audit: type=1800 audit(1543.475:161): pid=24795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4523" name="file0" dev="loop4" ino=244 res=0 errno=0 [ 1544.390369][T24814] loop2: detected capacity change from 0 to 256 [ 1544.663304][T24814] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 1545.910790][T24844] loop1: detected capacity change from 0 to 512 [ 1546.149707][T24844] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 1546.245353][T24844] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 1546.275956][T24844] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1546.286781][T24844] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1546.355190][T24844] EXT4-fs (loop1): 1 truncate cleaned up [ 1546.436340][T24844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1546.540930][ T30] audit: type=1326 audit(1546.525:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24853 comm="syz.6.4539" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x0 [ 1546.852287][T21057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1547.090274][T24862] loop2: detected capacity change from 0 to 256 [ 1547.148736][T24862] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1547.160312][T24862] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1547.416433][T24862] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1548.528373][T24884] loop6: detected capacity change from 0 to 128 [ 1548.788863][T24884] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1548.923783][T24891] loop2: detected capacity change from 0 to 256 [ 1548.953046][T24891] exfat: Deprecated parameter 'utf8' [ 1548.954053][T24891] exfat: Deprecated parameter 'namecase' [ 1549.053287][T24891] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1549.621458][ T7594] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1550.540937][T24916] loop6: detected capacity change from 0 to 256 [ 1550.639398][T24916] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1550.650722][T24916] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1550.735316][T24911] loop2: detected capacity change from 0 to 2048 [ 1550.805175][ T5852] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1550.848411][T24916] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1550.998759][ T5852] usb 5-1: Using ep0 maxpacket: 16 [ 1551.088447][ T5852] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1551.100624][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1551.245649][ T5852] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1551.255220][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.263613][ T5852] usb 5-1: Product: syz [ 1551.271292][ T5852] usb 5-1: Manufacturer: syz [ 1551.276473][ T5852] usb 5-1: SerialNumber: syz [ 1551.399143][ T5852] usb 5-1: config 0 descriptor?? [ 1551.457882][ T5852] hub 5-1:0.0: bad descriptor, ignoring hub [ 1551.464233][ T5852] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1551.487105][ T5852] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input20 [ 1551.788369][ T5852] usb 5-1: USB disconnect, device number 14 [ 1552.877352][T24960] loop0: detected capacity change from 0 to 2048 [ 1552.915246][T24960] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1553.070599][T24967] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1553.353986][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.362270][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.370537][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.378767][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.386838][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.394789][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.402542][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.412752][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.421486][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.429566][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.437581][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.445530][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.453272][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.461515][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.469405][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.477356][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.485905][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.493657][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.501639][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.511789][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.520611][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.528565][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.536538][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.544571][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.552331][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.560314][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.568234][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.576308][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.584039][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.591961][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.599956][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.607902][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.618805][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.628894][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.637198][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.645133][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.652894][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.660850][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.668817][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.676819][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.684687][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.692425][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.701328][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.709266][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.719404][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.728158][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.736124][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.743877][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.751831][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.759758][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.767809][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.775876][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.783623][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.792063][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.800069][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.808069][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.818721][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.827345][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.835486][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.843226][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.851377][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.859505][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.868432][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.876406][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.884138][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.892114][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.900089][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.908464][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.916410][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.926469][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.934209][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.943214][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.951271][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.959226][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.967270][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.975241][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.982989][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.990991][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1553.999055][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1554.007091][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1554.015776][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1554.025915][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1554.033654][ T5851] hid-generic 0000:0006:0000.0027: unknown main item tag 0x0 [ 1554.450497][T24981] loop6: detected capacity change from 0 to 1024 [ 1554.548329][T24983] pimreg: entered allmulticast mode [ 1554.727388][ T5851] hid-generic 0000:0006:0000.0027: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1554.756570][T24983] pimreg: left allmulticast mode [ 1554.807127][T24992] fuse: Bad value for 'fd' [ 1555.120823][ T35] hfsplus: b-tree write err: -5, ino 4 [ 1556.846379][T25026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4573'. [ 1557.004256][T25020] loop1: detected capacity change from 0 to 2048 [ 1557.582387][T25020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1558.312833][T25042] loop4: detected capacity change from 0 to 2048 [ 1558.470984][T25042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1558.680032][T21057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1558.863444][T25042] EXT4-fs: can't change dax mount option while remounting [ 1559.408609][T18893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1559.830778][T25065] netlink: 'syz.0.4585': attribute type 1 has an invalid length. [ 1559.839344][T25065] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4585'. [ 1560.256306][T25071] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1560.801163][T25075] loop1: detected capacity change from 0 to 512 [ 1560.918474][T25075] EXT4-fs: Ignoring removed nobh option [ 1561.183282][T25075] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4581: invalid indirect mapped block 256 (level 2) [ 1561.327066][T25075] EXT4-fs (loop1): 2 truncates cleaned up [ 1561.335921][T25075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1561.423819][T25086] loop4: detected capacity change from 0 to 512 [ 1561.559739][T25086] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 1561.695720][T25086] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1561.706704][T25086] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1561.759886][T25086] EXT4-fs (loop4): 1 truncate cleaned up [ 1561.817123][T25086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1562.013236][T25093] loop6: detected capacity change from 0 to 1764 [ 1562.073435][T25086] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 1562.579392][T18893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1562.603301][T21057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1562.980726][T25112] loop0: detected capacity change from 0 to 256 [ 1563.036321][T25112] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1563.223274][T25119] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4598'. [ 1563.233390][T25119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4598'. [ 1564.319246][T25138] loop4: detected capacity change from 0 to 64 [ 1567.250868][T25177] loop6: detected capacity change from 0 to 1024 [ 1567.849153][ T56] hfsplus: b-tree write err: -5, ino 4 [ 1568.755801][T25202] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1568.762761][T25202] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1568.774901][T25202] vhci_hcd vhci_hcd.0: Device attached [ 1568.905153][T25207] vhci_hcd: connection closed [ 1568.907252][T18685] vhci_hcd: stop threads [ 1568.917313][T18685] vhci_hcd: release socket [ 1568.921975][T18685] vhci_hcd: disconnect device [ 1571.668307][T25252] netlink: 'syz.0.4632': attribute type 2 has an invalid length. [ 1571.765017][T25255] loop4: detected capacity change from 0 to 65 [ 1571.916252][T25255] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1573.660531][T25273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4637'. [ 1576.194031][T25308] loop6: detected capacity change from 0 to 4096 [ 1577.552389][T25331] loop2: detected capacity change from 0 to 1024 [ 1577.617876][T25334] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1577.624743][T25334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1577.634990][T25331] EXT4-fs: Ignoring removed nobh option [ 1577.636696][T25334] vhci_hcd vhci_hcd.0: Device attached [ 1577.640772][T25331] EXT4-fs: Ignoring removed bh option [ 1577.894737][T10496] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1577.895947][T25331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1578.027836][ T5852] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1578.201924][ T5852] usb 5-1: Using ep0 maxpacket: 16 [ 1578.281605][ T5852] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1578.292095][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.303552][ T5852] usb 5-1: Product: syz [ 1578.308157][ T5852] usb 5-1: Manufacturer: syz [ 1578.313030][ T5852] usb 5-1: SerialNumber: syz [ 1578.468127][ T5852] usb 5-1: config 0 descriptor?? [ 1578.523083][ T5852] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1578.537849][ T5852] usb 5-1: Detected FT232H [ 1578.838714][T18565] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.865532][ T5852] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1578.885810][T25336] vhci_hcd: connection closed [ 1578.896966][ T56] vhci_hcd: stop threads [ 1578.908471][ T56] vhci_hcd: release socket [ 1578.915021][ T56] vhci_hcd: disconnect device [ 1578.928019][ T5852] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1578.965161][T10496] usb 41-1: device descriptor read/64, error -71 [ 1578.975996][ T5852] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 1579.040773][ T5852] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1579.117101][ T5852] usb 5-1: USB disconnect, device number 15 [ 1579.169374][T10496] vhci_hcd: vhci_device speed not set [ 1579.192274][ T5852] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1579.208309][ T5852] ftdi_sio 5-1:0.0: device disconnected [ 1580.412396][T25393] loop4: detected capacity change from 0 to 164 [ 1580.467273][T25393] iso9660: Unknown parameter '0xffffffffffffffff184467440737095516150xffffffffffffffff' [ 1580.640854][T25393] syz.4.4664: attempt to access beyond end of device [ 1580.640854][T25393] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1580.657678][T25393] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 1581.335898][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1581.342664][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1581.420273][T25407] loop6: detected capacity change from 0 to 256 [ 1581.460603][T25407] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1582.465034][ T5851] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1582.665178][ T5851] usb 3-1: Using ep0 maxpacket: 32 [ 1582.724084][ T5851] usb 3-1: config 0 has an invalid interface number: 36 but max is 0 [ 1582.732903][ T5851] usb 3-1: config 0 has no interface number 0 [ 1582.857071][ T5851] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=1b.c4 [ 1582.866926][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.875754][ T5851] usb 3-1: Product: syz [ 1582.880195][ T5851] usb 3-1: Manufacturer: syz [ 1582.885647][ T5851] usb 3-1: SerialNumber: syz [ 1583.037504][ T5851] usb 3-1: config 0 descriptor?? [ 1583.316920][ T5851] cx82310_eth 3-1:0.36: probe with driver cx82310_eth failed with error -71 [ 1583.417155][ T5851] cxacru 3-1:0.36: usbatm_usb_probe: bind failed: -19! [ 1583.517665][ T5851] usb 3-1: USB disconnect, device number 7 [ 1583.552615][T20894] udevd[20894]: setting mode of /dev/bus/usb/003/007 to 020664 failed: No such file or directory [ 1583.616237][T20894] udevd[20894]: setting owner of /dev/bus/usb/003/007 to uid=0, gid=0 failed: No such file or directory [ 1584.479816][T25442] sctp: failed to load transform for md5: -2 [ 1584.903347][T25458] loop4: detected capacity change from 0 to 64 [ 1586.181985][T25477] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 1586.194562][T25477] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 1586.200763][T25477] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 1586.200763][T25477] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 1586.220583][T25477] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 1586.232281][T25477] CUSE: DEVNAME unspecified [ 1586.393972][T25480] loop6: detected capacity change from 0 to 8 [ 1586.498197][T25480] unable to read xattr id index table [ 1587.718266][T25501] loop6: detected capacity change from 0 to 16 [ 1587.728763][T25500] loop0: detected capacity change from 0 to 512 [ 1587.789874][T25501] erofs (device loop6): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 1587.805780][T25501] erofs (device loop6): mounted with root inode @ nid 36. [ 1587.906346][T25501] syz.6.4691: attempt to access beyond end of device [ 1587.906346][T25501] loop6: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 1587.921310][T25501] erofs (device loop6): read error -5 @ 0 of nid 36 [ 1587.975103][T25500] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.4692: bad orphan inode 15 [ 1588.046255][T25500] ext4_test_bit(bit=14, block=5) = 0 [ 1588.117956][T25500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1588.312016][T25500] EXT4-fs error (device loop0): __ext4_new_inode:1072: comm syz.0.4692: reserved inode found cleared - inode=1 [ 1588.467945][T25513] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 1588.487714][T25513] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 1589.133154][T19234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1592.157849][T25567] loop2: detected capacity change from 0 to 64 [ 1593.962803][ T30] audit: type=1326 audit(1593.955:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.4.4718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 1593.984660][ C1] vkms_vblank_simulate: vblank timer overrun [ 1593.991860][ T30] audit: type=1326 audit(1593.955:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.4.4718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 1594.142670][ T30] audit: type=1326 audit(1594.045:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.4.4718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 1594.167869][ T30] audit: type=1326 audit(1594.055:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.4.4718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 1594.190678][ T30] audit: type=1326 audit(1594.055:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.4.4718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 1594.213926][ T30] audit: type=1326 audit(1594.115:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.4.4718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 1594.235747][ C1] vkms_vblank_simulate: vblank timer overrun [ 1594.407338][T25603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4721'. [ 1594.455747][T25604] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4721'. [ 1594.465545][T25604] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4721'. [ 1595.328105][T25613] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4722'. [ 1596.726354][T25635] netlink: 'syz.1.4730': attribute type 1 has an invalid length. [ 1597.617120][T25630] loop2: detected capacity change from 0 to 4096 [ 1597.715052][T25630] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1598.072270][T25646] program syz.6.4734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1601.389377][T25698] loop0: detected capacity change from 0 to 512 [ 1601.687590][T25698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1601.782408][T25703] loop2: detected capacity change from 0 to 64 [ 1601.901703][T25705] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 283: padding at end of block bitmap is not set [ 1602.116690][T25698] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1602.180520][T25698] EXT4-fs (loop0): can't enable nombcache during remount [ 1602.678938][T25713] loop4: detected capacity change from 0 to 2048 [ 1602.819029][T19234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1602.966095][T25719] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1603.575451][T25719] NILFS (loop4): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 1603.590463][T25719] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=2) [ 1603.627734][T25719] Remounting filesystem read-only [ 1603.634982][T18893] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 1605.329425][T25753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4761'. [ 1606.152533][T25764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4765'. [ 1607.132785][T25776] loop0: detected capacity change from 0 to 256 [ 1607.188957][T25778] netlink: 'syz.6.4770': attribute type 4 has an invalid length. [ 1607.442124][T25776] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 1608.586537][T25784] loop2: detected capacity change from 0 to 4096 [ 1608.606266][T25798] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4775'. [ 1609.059134][T25784] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 1609.618972][T25807] loop4: detected capacity change from 0 to 128 [ 1609.858421][T25807] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1610.409098][T25821] ntfs3: Bad value for 'gid' [ 1610.414166][T25821] ntfs3: Bad value for 'gid' [ 1610.480174][T18893] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1611.139226][T25831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4785'. [ 1613.359309][T25861] loop6: detected capacity change from 0 to 512 [ 1613.559283][T25861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1613.779004][T25861] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00000019, b_size=2048, device loop6 blocksize: 2048 [ 1613.796815][T25861] grow_buffers: requested out-of-range block 144115188075855872 for device loop6 [ 1613.807023][T25861] EXT4-fs warning (device loop6): ext4_resize_fs:2019: can't read last block, resize aborted [ 1614.369095][ T7594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1616.111055][T25907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4806'. [ 1616.127245][T25907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4806'. [ 1616.136922][T25907] netlink: 'syz.4.4806': attribute type 18 has an invalid length. [ 1616.561162][T25913] loop0: detected capacity change from 0 to 1024 [ 1616.601735][T25913] EXT4-fs: Ignoring removed bh option [ 1616.659502][T25913] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1616.986610][T25913] EXT4-fs error (device loop0): ext4_map_blocks:708: inode #3: block 1: comm syz.0.4807: lblock 1 mapped to illegal pblock 1 (length 1) [ 1617.091417][T25913] EXT4-fs (loop0): Remounting filesystem read-only [ 1617.101425][T25913] Quota error (device loop0): write_blk: dquota write failed [ 1617.109693][T25913] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1617.120509][T25913] EXT4-fs (loop0): 1 orphan inode deleted [ 1617.132000][T25913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1617.661007][T19234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1618.089378][T25918] syz.2.4810 (25918): drop_caches: 2 [ 1620.168371][T19817] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1620.388124][T19817] usb 3-1: Using ep0 maxpacket: 8 [ 1620.419095][T19817] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1620.433130][T19817] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1620.440549][T19817] usb 3-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 1620.450358][T19817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.570123][T19817] usb 3-1: config 0 descriptor?? [ 1621.079841][T19817] lenovo 0003:17EF:60FE.0028: unknown main item tag 0x0 [ 1621.087602][T19817] lenovo 0003:17EF:60FE.0028: unknown main item tag 0x0 [ 1621.098839][T19817] lenovo 0003:17EF:60FE.0028: unknown main item tag 0x0 [ 1621.107469][T19817] lenovo 0003:17EF:60FE.0028: unknown main item tag 0x0 [ 1621.115089][T19817] lenovo 0003:17EF:60FE.0028: unknown main item tag 0x0 [ 1621.122395][T19817] lenovo 0003:17EF:60FE.0028: unknown main item tag 0x0 [ 1621.314146][T19817] lenovo 0003:17EF:60FE.0028: hidraw0: USB HID v0.0b Device [HID 17ef:60fe] on usb-dummy_hcd.2-1/input0 [ 1621.426322][T19817] usb 3-1: USB disconnect, device number 8 [ 1621.721225][T25986] loop4: detected capacity change from 0 to 2048 [ 1621.865485][T25986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1622.103726][T25986] EXT4-fs error (device loop4): ext4_find_extent:938: inode #2: comm syz.4.4826: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1622.170377][T25986] EXT4-fs (loop4): Remounting filesystem read-only [ 1622.690369][T18893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1623.865980][T19817] IPVS: starting estimator thread 0... [ 1623.961666][T26027] IPVS: using max 192 ests per chain, 9600 per kthread [ 1624.148285][ T30] audit: type=1326 audit(1624.135:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26032 comm="syz.6.4834" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f52579 code=0x0 [ 1624.683030][T26038] [U] R5¡JCÒ°~V6“˜|‡7§¤Á…KXVZZËG—RÙÔ [ 1626.451983][T26064] loop0: detected capacity change from 0 to 256 [ 1626.557953][T26053] loop4: detected capacity change from 0 to 4096 [ 1627.488342][T26075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4846'. [ 1627.498033][T26075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4846'. [ 1627.510303][T26075] netlink: 'syz.2.4846': attribute type 5 has an invalid length. [ 1627.518638][T26075] netlink: 'syz.2.4846': attribute type 6 has an invalid length. [ 1629.485160][T19817] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1629.697480][T19817] usb 7-1: Using ep0 maxpacket: 32 [ 1629.765203][T19817] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.777498][T19817] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.788899][T19817] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1629.800502][T19817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.927446][T19817] usb 7-1: config 0 descriptor?? [ 1630.147688][T26114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4854'. [ 1630.535561][T19817] aquacomputer_d5next 0003:0C70:F0B6.0029: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.6-1/input0 [ 1630.756998][T19817] usb 7-1: USB disconnect, device number 17 [ 1635.440958][T26204] netlink: 'syz.4.4878': attribute type 3 has an invalid length. [ 1635.495717][ T3565] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 1635.866691][T26213] loop1: detected capacity change from 0 to 1024 [ 1635.956279][T26213] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1635.966777][T26213] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1635.977318][T26213] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1636.175529][T26213] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #5: comm syz.1.4880: unexpected bad inode w/o EXT4_IGET_BAD [ 1636.234079][T26213] EXT4-fs (loop1): no journal found [ 1636.240195][T26213] EXT4-fs (loop1): can't get journal size [ 1636.292613][T26213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1636.557281][ T30] audit: type=1326 audit(1636.535:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26221 comm="syz.6.4883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1636.583404][ T30] audit: type=1326 audit(1636.535:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26221 comm="syz.6.4883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1636.880986][T21057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1636.901123][ T30] audit: type=1326 audit(1636.655:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26221 comm="syz.6.4883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1636.924032][ T30] audit: type=1326 audit(1636.655:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26221 comm="syz.6.4883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1636.946838][ T30] audit: type=1326 audit(1636.655:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26221 comm="syz.6.4883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1636.968510][ C1] vkms_vblank_simulate: vblank timer overrun [ 1636.977791][ T30] audit: type=1326 audit(1636.685:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26221 comm="syz.6.4883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1636.999480][ C1] vkms_vblank_simulate: vblank timer overrun [ 1637.006495][ T30] audit: type=1326 audit(1636.875:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26228 comm="syz.6.4883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1637.028715][ T30] audit: type=1326 audit(1636.895:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26221 comm="syz.6.4883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1637.050402][ C1] vkms_vblank_simulate: vblank timer overrun [ 1637.057769][ T30] audit: type=1326 audit(1636.925:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26221 comm="syz.6.4883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1637.467322][T26236] loop4: detected capacity change from 0 to 128 [ 1637.740709][ T30] audit: type=1326 audit(1637.115:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26228 comm="syz.6.4883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1637.924773][T26241] loop0: detected capacity change from 0 to 512 [ 1637.962061][T26231] loop2: detected capacity change from 0 to 4096 [ 1637.991120][T26241] EXT4-fs: Ignoring removed nobh option [ 1638.052346][T26241] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1638.093192][T26231] ntfs3(loop2): It is recommened to use chkdsk. [ 1638.168557][T26231] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 1638.181481][T26241] EXT4-fs (loop0): 1 truncate cleaned up [ 1638.183815][T26241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1638.190288][T26231] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 1638.213686][T26231] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 1638.222293][T26231] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 1638.230826][T26231] ntfs3(loop2): try to read out of volume at offset 0x3fffffc1c00 [ 1638.239350][T26231] ntfs3(loop2): try to read out of volume at offset 0x3fffffc2c00 [ 1638.247935][T26231] ntfs3(loop2): try to read out of volume at offset 0x3fffffc4c00 [ 1638.256729][T26231] ntfs3(loop2): try to read out of volume at offset 0x3fffffc8c00 [ 1638.266392][T26231] ntfs3(loop2): try to read out of volume at offset 0x3fffffd0c00 [ 1638.816515][T19234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1640.997687][T26289] loop1: detected capacity change from 0 to 764 [ 1641.042617][T26289] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1641.125005][T19817] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1641.186572][T26289] syz.1.4899: attempt to access beyond end of device [ 1641.186572][T26289] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1641.345151][T19817] usb 5-1: Using ep0 maxpacket: 16 [ 1641.384050][T19817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1641.396739][T19817] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1641.406470][T19817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.406977][T26295] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4901'. [ 1641.493069][T19817] usb 5-1: config 0 descriptor?? [ 1642.112700][T19817] asus 0003:0B05:17E0.002A: hidraw0: USB HID v9.7d Device [HID 0b05:17e0] on usb-dummy_hcd.4-1/input0 [ 1642.124574][T19817] asus 0003:0B05:17E0.002A: Asus input not registered [ 1642.240663][T19817] asus 0003:0B05:17E0.002A: probe with driver asus failed with error -12 [ 1642.326910][T19817] usb 5-1: USB disconnect, device number 16 [ 1642.470089][T26320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4905'. [ 1642.480403][T26320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4905'. [ 1642.489894][T26320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4905'. [ 1642.506776][T26300] loop2: detected capacity change from 0 to 4096 [ 1642.735307][T26327] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1642.802712][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1642.810134][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1643.506547][T26314] loop1: detected capacity change from 0 to 4096 [ 1643.617673][T26314] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1644.022569][T26314] ntfs3(loop1): ino=19, mi_enum_attr [ 1644.031464][T26314] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1648.304851][T26393] loop6: detected capacity change from 0 to 4096 [ 1648.512050][T26393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1648.855347][T26410] tipc: Enabling of bearer rejected, failed to enable media [ 1649.166205][ T7594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1650.201346][T26431] tipc: New replicast peer: 255.255.255.255 [ 1650.211955][T26431] tipc: Enabled bearer , priority 10 [ 1651.976292][T10496] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1652.258578][T10496] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30 [ 1652.272854][T10496] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1652.284746][T10496] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1652.297927][T10496] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 1652.311419][T10496] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1652.321145][T10496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.404161][T10496] usb 2-1: config 0 descriptor?? [ 1652.961368][T10496] corsair-cpro 0003:1B1C:0C10.002B: item fetching failed at offset 0/3 [ 1653.070155][T10496] corsair-cpro 0003:1B1C:0C10.002B: probe with driver corsair-cpro failed with error -22 [ 1653.212541][T10496] usb 2-1: USB disconnect, device number 17 [ 1654.055123][T19817] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1654.292811][T19817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.304012][T19817] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1654.434828][T19817] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1654.444701][T19817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1654.453091][T19817] usb 3-1: SerialNumber: syz [ 1654.767835][T19817] usb 3-1: 0:2 : does not exist [ 1654.952700][T19817] usb 3-1: USB disconnect, device number 9 [ 1655.931433][T19242] udevd[19242]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1655.997246][T26544] hugetlbfs: Bad value '%' for mount option 'size' [ 1655.997246][T26544] [ 1657.356161][T26562] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1658.010951][T26568] loop1: detected capacity change from 0 to 2048 [ 1658.178721][T26568] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1658.362485][T26582] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1658.535011][T19817] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1658.735721][T19817] usb 5-1: Using ep0 maxpacket: 16 [ 1658.780461][T19817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1658.792203][T19817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1658.802925][T19817] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 1658.812516][T19817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.937669][T19817] usb 5-1: config 0 descriptor?? [ 1659.522994][T19817] aquacomputer_d5next 0003:0C70:F00A.002C: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.4-1/input0 [ 1659.716089][T19817] usb 5-1: USB disconnect, device number 17 [ 1660.599014][T26625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4980'. [ 1661.449384][T26637] usb usb8: usbfs: process 26637 (syz.4.4983) did not claim interface 7 before use [ 1661.549242][T26638] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1666.326410][T26709] loop0: detected capacity change from 0 to 128 [ 1666.443224][T26709] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1666.686901][T26709] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 1666.783662][T26709] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 1667.261772][T19234] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1667.300286][ T30] audit: type=1326 audit(1667.275:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26723 comm="syz.4.5009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 1667.323741][ T30] audit: type=1326 audit(1667.275:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26723 comm="syz.4.5009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 1667.345625][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.353851][ T30] audit: type=1326 audit(1667.295:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26723 comm="syz.4.5009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 1667.377129][ T30] audit: type=1326 audit(1667.295:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26723 comm="syz.4.5009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 1667.398818][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.450238][ T30] audit: type=1326 audit(1667.415:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26723 comm="syz.4.5009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 1667.474755][ T30] audit: type=1326 audit(1667.445:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26723 comm="syz.4.5009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 1667.496449][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.506363][ T30] audit: type=1326 audit(1667.445:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26723 comm="syz.4.5009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 1667.528745][ T30] audit: type=1326 audit(1667.445:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26723 comm="syz.4.5009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 1667.580391][T26728] loop1: detected capacity change from 0 to 256 [ 1668.086351][T26728] FAT-fs (loop1): Directory bread(block 64) failed [ 1668.093237][T26728] FAT-fs (loop1): Directory bread(block 65) failed [ 1668.103737][T26728] FAT-fs (loop1): Directory bread(block 66) failed [ 1668.111210][T26728] FAT-fs (loop1): Directory bread(block 67) failed [ 1668.118629][T26728] FAT-fs (loop1): Directory bread(block 68) failed [ 1668.128806][T26728] FAT-fs (loop1): Directory bread(block 69) failed [ 1668.136019][T26728] FAT-fs (loop1): Directory bread(block 70) failed [ 1668.142816][T26728] FAT-fs (loop1): Directory bread(block 71) failed [ 1668.149979][T26728] FAT-fs (loop1): Directory bread(block 72) failed [ 1668.160257][T26728] FAT-fs (loop1): Directory bread(block 73) failed [ 1668.489843][T26744] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5013'. [ 1668.615915][T26741] loop4: detected capacity change from 0 to 512 [ 1668.916671][T26741] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1669.018015][T26741] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 1669.028736][T26741] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1669.038786][T26741] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.5014: Failed to acquire dquot type 1 [ 1669.111429][T26741] EXT4-fs (loop4): 1 truncate cleaned up [ 1669.208315][T26741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1669.447990][T26782] tipc: Enabling of bearer rejected, media not registered [ 1669.800710][T18893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1670.387424][T26798] loop0: detected capacity change from 0 to 512 [ 1670.537957][T26804] loop2: detected capacity change from 0 to 64 [ 1670.715670][T26798] EXT4-fs error (device loop0): ext4_do_update_inode:5182: inode #3: comm syz.0.5021: corrupted inode contents [ 1670.799138][T26798] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #3: comm syz.0.5021: mark_inode_dirty error [ 1670.966186][T26798] EXT4-fs error (device loop0): ext4_do_update_inode:5182: inode #3: comm syz.0.5021: corrupted inode contents [ 1671.107638][T26798] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.5021: mark_inode_dirty error [ 1671.196046][T26798] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.5021: Failed to acquire dquot type 0 [ 1671.291388][T26798] EXT4-fs error (device loop0): ext4_do_update_inode:5182: inode #16: comm syz.0.5021: corrupted inode contents [ 1671.307644][T26798] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #16: comm syz.0.5021: mark_inode_dirty error [ 1671.415203][T26798] EXT4-fs error (device loop0): ext4_do_update_inode:5182: inode #16: comm syz.0.5021: corrupted inode contents [ 1671.635236][T26798] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.5021: mark_inode_dirty error [ 1671.685437][T26798] EXT4-fs error (device loop0): ext4_do_update_inode:5182: inode #16: comm syz.0.5021: corrupted inode contents [ 1671.768219][T26798] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 1671.818501][T26798] EXT4-fs error (device loop0): ext4_do_update_inode:5182: inode #16: comm syz.0.5021: corrupted inode contents [ 1671.875503][T26798] EXT4-fs error (device loop0): ext4_truncate:4254: inode #16: comm syz.0.5021: mark_inode_dirty error [ 1671.928259][T26798] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 1671.983420][T26798] EXT4-fs (loop0): 1 truncate cleaned up [ 1671.995866][T26798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1672.066199][T10496] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1672.073989][T10496] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1672.085885][T10496] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1672.093721][T10496] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1672.102617][T10496] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1672.110751][T10496] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1672.121723][T10496] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1672.129716][T10496] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1672.137634][T10496] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1672.148385][T10496] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1672.156286][T10496] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1672.164030][T10496] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1672.171912][T10496] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1672.182781][T10496] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1672.190855][T10496] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1672.198681][T10496] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1672.209519][T10496] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1672.256633][T10496] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1672.384954][T26798] EXT4-fs error (device loop0): ext4_xattr_block_find:1869: inode #15: comm syz.0.5021: corrupted xattr block 19: invalid ea_ino [ 1672.449012][T26828] __quota_error: 2 callbacks suppressed [ 1672.449104][T26828] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1672.466332][T26828] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1672.479903][T26828] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.5021: Failed to acquire dquot type 1 [ 1672.831687][T26832] xt_CT: No such helper "snmp" [ 1672.982331][T19234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1673.011459][T18685] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 1673.021548][T18685] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 0 [ 1673.084052][T18685] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1673.095550][T18685] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 1674.010226][T10496] kernel write not supported for file /input/mouse0 (pid: 10496 comm: kworker/0:1) [ 1676.022560][T26881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5041'. [ 1677.141253][T26895] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.5046'. [ 1678.312343][T26917] block nbd4: not configured, cannot reconfigure [ 1679.201974][T26929] loop4: detected capacity change from 0 to 128 [ 1679.428767][ T30] audit: type=1800 audit(1679.405:188): pid=26929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5059" name="file0" dev="loop4" ino=436 res=0 errno=0 [ 1681.248655][T26958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5067'. [ 1681.426046][T26962] loop4: detected capacity change from 0 to 64 [ 1683.780956][T26998] loop0: detected capacity change from 0 to 256 [ 1684.204722][T27004] loop1: detected capacity change from 0 to 1024 [ 1684.471704][T27004] hfsplus: bad catalog entry type [ 1684.833518][T27012] loop4: detected capacity change from 0 to 256 [ 1684.965476][T13745] hfsplus: b-tree write err: -5, ino 4 [ 1686.275540][T27033] loop0: detected capacity change from 0 to 1024 [ 1686.319821][T27037] loop4: detected capacity change from 0 to 8 [ 1686.454970][T27037] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1686.463228][T27037] SQUASHFS error: Failed to read block 0x91: -5 [ 1686.470558][T27037] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1686.478813][T27037] SQUASHFS error: Unable to read inode 0x11f [ 1687.010890][ T3716] hfsplus: b-tree write err: -5, ino 4 [ 1687.576778][T27054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5094'. [ 1687.801338][T27061] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 1687.813325][T27061] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1688.891987][T27077] loop2: detected capacity change from 0 to 256 [ 1689.060899][T27077] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1689.847783][T27091] program syz.0.5104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1690.337837][T27096] loop2: detected capacity change from 0 to 512 [ 1690.435212][T27096] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1690.542432][T27096] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.5105: bad orphan inode 16 [ 1690.563302][T27096] ext4_test_bit(bit=15, block=4) = 0 [ 1690.569151][T27096] EXT4-fs (loop2): 1 orphan inode deleted [ 1690.577882][T27096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1690.655806][T27096] EXT4-fs error (device loop2): __ext4_new_inode:1072: comm syz.2.5105: reserved inode found cleared - inode=9 [ 1691.165409][T18565] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1691.308893][T27112] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1691.318383][T27112] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1691.327676][T27112] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1691.339808][T27112] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1692.771520][T27129] loop1: detected capacity change from 0 to 2048 [ 1692.849460][T27129] loop1: p1 < > p3 [ 1692.867153][T27129] loop1: p3 size 134217728 extends beyond EOD, truncated [ 1692.980153][T27139] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5117'. [ 1692.989890][T27139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5117'. [ 1693.002246][T27139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5117'. [ 1693.893259][T27154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5120'. [ 1694.778941][T27162] loop2: detected capacity change from 0 to 736 [ 1695.842643][T27185] loop6: detected capacity change from 0 to 128 [ 1696.062469][T27185] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1696.641606][ T7594] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1698.886361][ T30] audit: type=1326 audit(1698.855:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.1.5139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 1699.096000][ T30] audit: type=1326 audit(1698.925:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.1.5139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 1699.118469][ T30] audit: type=1326 audit(1698.925:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.1.5139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 1699.142594][ T30] audit: type=1326 audit(1698.945:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.1.5139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 1699.164290][ C1] vkms_vblank_simulate: vblank timer overrun [ 1699.171772][ T30] audit: type=1326 audit(1698.945:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.1.5139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 1699.193568][ C1] vkms_vblank_simulate: vblank timer overrun [ 1699.958428][T27233] loop6: detected capacity change from 0 to 128 [ 1700.031664][T27233] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1701.549125][T27263] netlink: 'syz.4.5148': attribute type 5 has an invalid length. [ 1702.414706][T27277] loop6: detected capacity change from 0 to 128 [ 1702.475867][T27277] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1702.664767][T27277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1704.211007][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1704.218296][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1705.644144][T27330] loop0: detected capacity change from 0 to 64 [ 1705.833382][T27330] syz.0.5168: attempt to access beyond end of device [ 1705.833382][T27330] loop0: rw=0, sector=65534, nr_sectors = 2 limit=64 [ 1705.850287][T27330] Buffer I/O error on dev loop0, logical block 32767, async page read [ 1708.685710][T27376] futex_wake_op: syz.4.5182 tries to shift op by 35; fix this program [ 1710.071033][T27397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5189'. [ 1712.675226][ T30] audit: type=1800 audit(1712.665:194): pid=27434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5201" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1712.695478][ C1] vkms_vblank_simulate: vblank timer overrun [ 1713.310855][T27441] loop2: detected capacity change from 0 to 164 [ 1713.422247][T27444] loop0: detected capacity change from 0 to 164 [ 1713.639439][T27444] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1714.671077][T27470] loop4: detected capacity change from 0 to 256 [ 1715.751700][T27485] loop6: detected capacity change from 0 to 256 [ 1715.900223][T27486] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1716.087854][T27485] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d) [ 1717.446340][T19817] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1717.524135][T27512] loop0: detected capacity change from 0 to 256 [ 1717.664860][T19817] usb 3-1: Using ep0 maxpacket: 16 [ 1717.727976][T27512] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 1717.728259][T19817] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1717.750747][T19817] usb 3-1: config 0 has no interface number 0 [ 1717.759488][T19817] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1717.771513][T19817] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1717.781970][T19817] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1717.791591][T19817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.023099][T27519] loop4: detected capacity change from 0 to 512 [ 1718.036272][T19817] usb 3-1: config 0 descriptor?? [ 1718.143884][T27519] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1718.309690][T27519] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.5225: bad orphan inode 2 [ 1718.425657][T27519] EXT4-fs (loop4): Remounting filesystem read-only [ 1718.435759][T27519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1718.657519][T19817] elan 0003:04F3:0755.002E: unknown main item tag 0x0 [ 1718.665081][T19817] elan 0003:04F3:0755.002E: unknown main item tag 0x0 [ 1718.672343][T19817] elan 0003:04F3:0755.002E: unknown main item tag 0x0 [ 1718.682889][T19817] elan 0003:04F3:0755.002E: unknown main item tag 0x0 [ 1718.690936][T19817] elan 0003:04F3:0755.002E: unknown main item tag 0x0 [ 1718.811124][T19817] elan 0003:04F3:0755.002E: failed to start in urb: -90 [ 1718.897675][T19817] elan 0003:04F3:0755.002E: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input1 [ 1718.909502][T19817] elan 0003:04F3:0755.002E: Input device is not registered [ 1718.938892][T19817] elan 0003:04F3:0755.002E: probe with driver elan failed with error -119 [ 1718.977990][T19817] usb 3-1: USB disconnect, device number 10 [ 1719.032613][T18893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.138265][T27545] loop0: detected capacity change from 0 to 8 [ 1719.326182][T27545] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1719.334598][T27545] SQUASHFS error: Failed to read block 0x202: -5 [ 1719.341385][T27545] SQUASHFS error: Unable to read metadata cache entry [200] [ 1720.903896][T27571] loop4: detected capacity change from 0 to 64 [ 1721.202987][ T30] audit: type=1800 audit(1721.195:195): pid=27571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5234" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 1721.269861][T27571] Trying to free block not in datazone [ 1721.276085][T27571] Trying to free block not in datazone [ 1721.281903][T27571] Trying to free block not in datazone [ 1721.288955][T27571] Trying to free block not in datazone [ 1721.299910][T27571] Trying to free block not in datazone [ 1721.306058][T27571] Trying to free block not in datazone [ 1721.311727][T27571] Trying to free block not in datazone [ 1721.317572][T27571] Trying to free block not in datazone [ 1721.323245][T27571] Trying to free block not in datazone [ 1721.332215][T27571] Trying to free block not in datazone [ 1721.338166][T27571] Trying to free block not in datazone [ 1721.343856][T27571] Trying to free block not in datazone [ 1723.160342][T27597] loop0: detected capacity change from 0 to 1024 [ 1723.249261][T27597] hfsplus: unable to find HFS+ superblock [ 1724.165033][T19817] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1724.405178][T19817] usb 2-1: Using ep0 maxpacket: 8 [ 1724.461046][T19817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1724.472878][T19817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1724.483569][T19817] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1724.497528][T19817] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1724.507109][T19817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.739525][T19817] usb 2-1: config 0 descriptor?? [ 1725.252809][T19817] apple 0003:05AC:027A.002F: hidraw0: USB HID v0.07 Device [HID 05ac:027a] on usb-dummy_hcd.1-1/input0 [ 1725.375858][T27633] loop0: detected capacity change from 0 to 512 [ 1725.441381][T10496] usb 2-1: USB disconnect, device number 18 [ 1725.493325][T27633] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1725.754196][T27633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1725.938634][T27633] EXT4-fs error (device loop0): __ext4_new_inode:1278: comm syz.0.5251: failed to insert inode 16: doubly allocated? [ 1726.126638][T27658] loop2: detected capacity change from 0 to 256 [ 1726.313735][T27658] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0a619f0a, utbl_chksum : 0xe619d30d) [ 1726.499689][T27654] loop6: detected capacity change from 0 to 4096 [ 1726.660897][T27654] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1726.672289][T19234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1726.800376][T27654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1726.853240][T27666] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5255'. [ 1726.862878][T27666] hsr0: entered promiscuous mode [ 1727.747372][ T7594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1728.928301][T27703] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5260'. [ 1728.937892][T27703] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5260'. [ 1728.950255][T27703] netlink: 'syz.6.5260': attribute type 11 has an invalid length. [ 1729.540216][T27708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5266'. [ 1729.827290][ T5851] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1729.910591][T10496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1730.006903][T10496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1730.075446][ T5851] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1730.135837][ T5851] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1730.197685][ T5851] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1730.288822][ T5851] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1730.368964][T10496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1730.465909][T10496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1730.530339][T10496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1730.916987][T27725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5270'. [ 1731.016873][T27720] loop6: detected capacity change from 0 to 4096 [ 1732.041018][T27742] loop2: detected capacity change from 0 to 64 [ 1733.198347][T27762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5278'. [ 1733.469715][T27767] loop4: detected capacity change from 0 to 512 [ 1733.617222][T27767] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1733.711354][T27767] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5282: invalid indirect mapped block 2683928664 (level 1) [ 1733.755399][T27767] EXT4-fs (loop4): Remounting filesystem read-only [ 1733.763390][T27767] EXT4-fs (loop4): 1 truncate cleaned up [ 1733.775411][T27767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1734.373702][T18893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1734.604912][ T5851] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1734.808686][ T5851] usb 7-1: Using ep0 maxpacket: 32 [ 1734.841112][ T5851] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1734.850959][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.921626][ T5851] usb 7-1: config 0 descriptor?? [ 1734.958594][ T5851] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1735.161184][ T5851] gspca_nw80x: reg_w err -71 [ 1735.169699][ T5851] nw80x 7-1:0.0: probe with driver nw80x failed with error -71 [ 1735.238877][ T5851] usb 7-1: USB disconnect, device number 18 [ 1735.261011][T19242] udevd[19242]: setting mode of /dev/bus/usb/007/018 to 020664 failed: No such file or directory [ 1735.307375][T19242] udevd[19242]: setting owner of /dev/bus/usb/007/018 to uid=0, gid=0 failed: No such file or directory [ 1736.455805][T27800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1737.146931][T27809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1737.168494][T27809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1737.199059][T27809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1737.246179][T27809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1737.272111][T27809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1738.487191][T19817] kernel write not supported for file /input/event2 (pid: 19817 comm: kworker/1:1) [ 1739.175602][T27942] loop6: detected capacity change from 0 to 64 [ 1739.382435][T27809] Bluetooth: hci0: command tx timeout [ 1739.626523][T27808] chnl_net:caif_netlink_parms(): no params data found [ 1741.350619][T27808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.359372][T27808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.370549][T27808] bridge_slave_0: entered allmulticast mode [ 1741.381805][T27808] bridge_slave_0: entered promiscuous mode [ 1741.486078][T27809] Bluetooth: hci0: command tx timeout [ 1741.532362][T27808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.540711][T27808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.549206][T27808] bridge_slave_1: entered allmulticast mode [ 1741.633536][T27808] bridge_slave_1: entered promiscuous mode [ 1742.707570][T27808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1742.824872][T27808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1743.352626][T27808] team0: Port device team_slave_0 added [ 1743.490865][T27808] team0: Port device team_slave_1 added [ 1743.535948][T27809] Bluetooth: hci0: command tx timeout [ 1743.826358][T28089] netlink: 'syz.1.5311': attribute type 24 has an invalid length. [ 1744.053879][T27808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1744.061714][T27808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1744.091502][T27808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1744.272827][T28116] loop0: detected capacity change from 0 to 512 [ 1744.310799][T27808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1744.319667][T27808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1744.345818][ C1] vkms_vblank_simulate: vblank timer overrun [ 1744.353333][T27808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1744.565927][T28116] EXT4-fs error (device loop0): ext4_orphan_get:1390: comm syz.0.5312: inode #15: comm syz.0.5312: iget: illegal inode # [ 1744.752900][T28116] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.5312: couldn't read orphan inode 15 (err -117) [ 1744.817383][T28116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1744.941395][T27808] hsr_slave_0: entered promiscuous mode [ 1744.953480][T27808] hsr_slave_1: entered promiscuous mode [ 1744.963599][T27808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1744.971614][T27808] Cannot create hsr debugfs directory [ 1745.083096][T28156] netlink: 'syz.1.5315': attribute type 6 has an invalid length. [ 1745.091304][T28156] netlink: 'syz.1.5315': attribute type 6 has an invalid length. [ 1745.099561][T28156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5315'. [ 1745.389010][T19234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1745.615150][T27809] Bluetooth: hci0: command tx timeout [ 1745.721254][T28152] loop6: detected capacity change from 0 to 4096 [ 1745.869085][T28152] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1747.030608][T27808] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.330531][T27808] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.612263][T27808] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.759026][T28242] loop6: detected capacity change from 0 to 1024 [ 1747.822128][T27808] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.423595][T28257] loop4: detected capacity change from 0 to 128 [ 1748.643496][T27808] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1748.806163][T27808] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1748.947298][T27808] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1749.057421][T27808] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1749.462198][T28279] loop1: detected capacity change from 0 to 164 [ 1749.580898][T28279] Unable to read rock-ridge attributes [ 1749.688281][T28279] Unable to read rock-ridge attributes [ 1749.769949][T28279] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1749.824986][T28279] Unable to read rock-ridge attributes [ 1749.830999][T28279] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1750.677336][T27808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1750.778434][T28292] loop0: detected capacity change from 0 to 256 [ 1751.041534][T27808] 8021q: adding VLAN 0 to HW filter on device team0 [ 1751.209643][T28148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1751.217611][T28148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1751.344010][T28148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1751.351858][T28148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1751.481693][T28292] FAT-fs (loop0): Directory bread(block 64) failed [ 1751.489022][T28292] FAT-fs (loop0): Directory bread(block 65) failed [ 1751.496551][T28292] FAT-fs (loop0): Directory bread(block 66) failed [ 1751.503388][T28292] FAT-fs (loop0): Directory bread(block 67) failed [ 1751.510747][T28292] FAT-fs (loop0): Directory bread(block 68) failed [ 1751.517866][T28292] FAT-fs (loop0): Directory bread(block 69) failed [ 1751.525392][T28292] FAT-fs (loop0): Directory bread(block 70) failed [ 1751.532204][T28292] FAT-fs (loop0): Directory bread(block 71) failed [ 1751.539557][T28292] FAT-fs (loop0): Directory bread(block 72) failed [ 1751.546784][T28292] FAT-fs (loop0): Directory bread(block 73) failed [ 1754.638088][T28335] loop6: detected capacity change from 0 to 256 [ 1754.687437][T27808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1754.687675][T28335] exfat: Deprecated parameter 'namecase' [ 1754.700939][T28335] exfat: Deprecated parameter 'utf8' [ 1754.946761][T28335] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1756.421476][T28347] loop0: detected capacity change from 0 to 4096 [ 1756.553999][T28347] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 1756.911623][T28369] loop4: detected capacity change from 0 to 256 [ 1756.989022][T28347] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 1757.219487][T28369] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1757.999219][T27808] veth0_vlan: entered promiscuous mode [ 1758.196061][T27808] veth1_vlan: entered promiscuous mode [ 1758.641467][T27808] veth0_macvtap: entered promiscuous mode [ 1758.766094][T27808] veth1_macvtap: entered promiscuous mode [ 1759.003048][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.015328][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.028388][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.040181][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.050695][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.062445][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.072896][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.083785][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.094429][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.105375][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.115722][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.126713][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.140760][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.152396][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.162749][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.173779][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.184044][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.195109][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.205428][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.216364][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.226808][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.240076][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.250997][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.262094][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.272455][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.283427][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.300785][T27808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1759.499024][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.510680][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.521086][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.532145][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.545794][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.557647][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.567886][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.579088][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.589382][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.601143][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.611496][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.622455][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.633157][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.646395][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.657474][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.668405][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.678740][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.690111][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.700610][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.711507][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.722005][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.732916][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.745547][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.757381][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.767629][T27808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.778922][T27808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.796499][T27808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1760.158171][T27808] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.167553][T27808] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.178888][T27808] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.188224][T27808] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.282620][T28413] loop0: detected capacity change from 0 to 1024 [ 1764.959824][T28474] loop6: detected capacity change from 0 to 128 [ 1765.126317][T28474] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1765.308663][T28480] loop1: detected capacity change from 0 to 512 [ 1765.526461][T28480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1765.652869][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1765.660177][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1765.915290][ T7594] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1766.271400][T21057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1767.084130][T28508] loop1: detected capacity change from 0 to 128 [ 1767.197262][T28508] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1767.363118][T28508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1768.539211][T28528] loop4: detected capacity change from 0 to 16 [ 1768.647483][T28528] erofs (device loop4): mounted with root inode @ nid 36. [ 1768.899168][T28528] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1768.926056][ T8622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.934173][ T8622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1769.047527][T28528] erofs (device loop4): read error -117 @ 43 of nid 36 [ 1769.221609][T28536] loop0: detected capacity change from 0 to 256 [ 1769.420530][T28536] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1769.442989][T13745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1769.455012][T13745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1770.672118][T28565] loop6: detected capacity change from 0 to 512 [ 1770.846806][T28565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1771.146812][T28565] EXT4-fs error (device loop6): ext4_lookup:1789: inode #14: comm syz.6.5396: unexpected EA_INODE flag [ 1771.299746][T28574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5286'. [ 1771.361290][T28575] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5286'. [ 1771.371021][T28575] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5286'. [ 1771.569869][T28579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5398'. [ 1771.579722][T28579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5398'. [ 1771.589337][T28579] netlink: 'syz.1.5398': attribute type 7 has an invalid length. [ 1771.848221][ T7594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1772.841536][T28598] raw_sendmsg: syz.1.5404 forgot to set AF_INET. Fix it! [ 1774.121536][T28617] loop6: detected capacity change from 0 to 256 [ 1775.418109][T28632] loop0: detected capacity change from 0 to 2048 [ 1775.462644][T28638] loop6: detected capacity change from 0 to 256 [ 1775.507789][T28632] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1775.624636][ T3565] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 1775.695409][T28639] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1776.078294][T28638] FAT-fs (loop6): Directory bread(block 64) failed [ 1776.085606][T28638] FAT-fs (loop6): Directory bread(block 65) failed [ 1776.092596][T28638] FAT-fs (loop6): Directory bread(block 66) failed [ 1776.100652][T28638] FAT-fs (loop6): Directory bread(block 67) failed [ 1776.110944][T28638] FAT-fs (loop6): Directory bread(block 68) failed [ 1776.118110][T28638] FAT-fs (loop6): Directory bread(block 69) failed [ 1776.127834][T28638] FAT-fs (loop6): Directory bread(block 70) failed [ 1776.138382][T28638] FAT-fs (loop6): Directory bread(block 71) failed [ 1776.145530][T28638] FAT-fs (loop6): Directory bread(block 72) failed [ 1776.152372][T28638] FAT-fs (loop6): Directory bread(block 73) failed [ 1777.205916][T28657] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5422'. [ 1778.573829][T28672] loop1: detected capacity change from 0 to 2048 [ 1778.678096][T28672] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1778.789874][T28679] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1778.929089][T28672] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1778.953776][T28672] Remounting filesystem read-only [ 1778.959391][T28672] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1780.061133][T28693] loop6: detected capacity change from 0 to 64 [ 1781.508236][T28713] option changes via remount are deprecated (pid=28710 comm=syz.6.5438) [ 1782.630029][T28717] loop4: detected capacity change from 0 to 4096 [ 1782.676258][T28724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5443'. [ 1782.982068][T28729] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1783.461655][T28732] loop5: detected capacity change from 0 to 1024 [ 1783.646304][T28732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1783.772207][T28732] EXT4-fs (loop5): resizing filesystem from 512 to 0 blocks [ 1783.782878][T28732] EXT4-fs warning (device loop5): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 1783.914063][T28743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5446'. [ 1784.188049][T27808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1784.643274][T28756] loop6: detected capacity change from 0 to 64 [ 1785.423969][T28768] loop4: detected capacity change from 0 to 512 [ 1785.777138][T28768] EXT4-fs (loop4): 1 orphan inode deleted [ 1785.786270][T28768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1785.805110][ T1775] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1785.815963][ T1775] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 1785.972547][ T30] audit: type=1800 audit(1785.965:196): pid=28768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5453" name="bus" dev="loop4" ino=16 res=0 errno=0 [ 1786.125862][T10496] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1786.194102][T28788] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5455'. [ 1786.243297][T28784] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5455'. [ 1786.364766][T10496] usb 2-1: Using ep0 maxpacket: 32 [ 1786.428153][T10496] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1786.437295][T10496] usb 2-1: config 0 has no interface number 0 [ 1786.443703][T10496] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1786.523880][T18893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1786.609997][T10496] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1786.622839][T10496] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.631605][T10496] usb 2-1: Product: syz [ 1786.636980][T10496] usb 2-1: Manufacturer: syz [ 1786.641844][T10496] usb 2-1: SerialNumber: syz [ 1786.771496][T10496] usb 2-1: config 0 descriptor?? [ 1787.258117][ T30] audit: type=1400 audit(1787.235:197): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=28796 comm="syz.5.5458" [ 1787.563644][T10496] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71 [ 1787.573079][T10496] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1787.581007][T10496] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1787.592200][T10496] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1787.851313][T10496] usb 2-1: USB disconnect, device number 19 [ 1788.279071][T28814] loop5: detected capacity change from 0 to 256 [ 1788.372678][T28814] exfat: Deprecated parameter 'namecase' [ 1788.382054][T28814] exfat: Deprecated parameter 'utf8' [ 1788.470012][T28803] loop6: detected capacity change from 0 to 4096 [ 1788.606859][T28803] NILFS (loop6): invalid segment: Checksum error in segment payload [ 1788.615613][T28803] NILFS (loop6): trying rollback from an earlier position [ 1788.660313][T28814] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1788.821836][T28803] NILFS (loop6): recovery complete [ 1788.886625][T28823] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1789.894763][T10496] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1790.114823][T10496] usb 6-1: Using ep0 maxpacket: 32 [ 1790.191303][T10496] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1790.203575][T10496] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1790.214114][T10496] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1790.227077][T10496] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.501451][T10496] usb 6-1: config 0 descriptor?? [ 1790.600724][T10496] hub 6-1:0.0: USB hub found [ 1790.805094][T10496] hub 6-1:0.0: 1 port detected [ 1791.016270][T10496] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1791.023406][T10496] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1791.175861][T28857] loop1: detected capacity change from 0 to 164 [ 1791.209335][T10496] usbhid 6-1:0.0: can't add hid device: -71 [ 1791.220488][T10496] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1791.309260][T10496] usb 6-1: USB disconnect, device number 11 [ 1791.720519][T28870] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1791.727394][T28870] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1791.739605][T28870] vhci_hcd vhci_hcd.0: Device attached [ 1791.948544][T10496] vhci_hcd: vhci_device speed not set [ 1792.027988][T28873] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 1792.034870][T28873] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1792.046889][T28873] vhci_hcd vhci_hcd.0: Device attached [ 1792.080057][T10496] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1792.229449][T28870] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 1792.236312][T28870] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1792.244869][T28870] vhci_hcd vhci_hcd.0: Device attached [ 1792.290868][T28878] vhci_hcd: connection closed [ 1792.295081][T28871] vhci_hcd: connection reset by peer [ 1792.296019][ T4013] vhci_hcd: stop threads [ 1792.300634][T28874] vhci_hcd: connection closed [ 1792.307708][ T4013] vhci_hcd: release socket [ 1792.325614][ T4013] vhci_hcd: disconnect device [ 1792.412358][ T4013] vhci_hcd: stop threads [ 1792.418375][ T4013] vhci_hcd: release socket [ 1792.423277][ T4013] vhci_hcd: disconnect device [ 1792.515042][ T4013] vhci_hcd: stop threads [ 1792.519705][ T4013] vhci_hcd: release socket [ 1792.527757][ T4013] vhci_hcd: disconnect device [ 1792.911016][T28887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5477'. [ 1792.924813][T28887] IPVS: Error joining to the multicast group [ 1793.913411][T28894] loop1: detected capacity change from 0 to 512 [ 1794.275365][T28894] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5479: bg 0: block 248: padding at end of block bitmap is not set [ 1794.333165][T28894] Quota error (device loop1): write_blk: dquota write failed [ 1794.345212][T28894] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1794.361767][T28894] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.5479: Failed to acquire dquot type 1 [ 1794.434027][T28894] EXT4-fs (loop1): 1 truncate cleaned up [ 1794.446382][T28894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1794.509407][T28904] loop4: detected capacity change from 0 to 2048 [ 1794.607505][T28904] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1794.704642][T28894] EXT4-fs error (device loop1): ext4_lookup:1793: inode #2: comm syz.1.5479: deleted inode referenced: 12 [ 1794.875838][T28904] syz.4.5482: attempt to access beyond end of device [ 1794.875838][T28904] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1794.918085][T28912] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1795.323445][T28920] loop0: detected capacity change from 0 to 16 [ 1795.412583][T28920] erofs (device loop0): mounted with root inode @ nid 36. [ 1795.470563][T21057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1795.534173][T28920] syz.0.5486: attempt to access beyond end of device [ 1795.534173][T28920] loop0: rw=524288, sector=68719476744, nr_sectors = 24 limit=16 [ 1795.551123][T28920] syz.0.5486: attempt to access beyond end of device [ 1795.551123][T28920] loop0: rw=0, sector=68719476744, nr_sectors = 16 limit=16 [ 1795.580534][ T30] audit: type=1800 audit(1795.565:198): pid=28920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5486" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 1796.240102][T28929] loop5: detected capacity change from 0 to 256 [ 1796.572587][T28929] exFAT-fs (loop5): start_clu is invalid cluster(0x400) [ 1796.692420][T28938] loop4: detected capacity change from 0 to 256 [ 1796.816971][T28938] exfat: Deprecated parameter 'utf8' [ 1797.188040][T28938] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1797.221729][T10496] vhci_hcd: vhci_device speed not set [ 1797.766978][T28953] netlink: 'syz.5.5494': attribute type 7 has an invalid length. [ 1797.775436][T28953] netlink: 'syz.5.5494': attribute type 8 has an invalid length. [ 1797.783417][T28953] netlink: 'syz.5.5494': attribute type 13 has an invalid length. [ 1798.122538][T28956] loop0: detected capacity change from 0 to 1024 [ 1799.047828][T28971] netlink: 'syz.6.5499': attribute type 11 has an invalid length. [ 1799.994912][T10496] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1800.032832][T28986] loop0: detected capacity change from 0 to 1024 [ 1800.160921][T28986] hfsplus: Filesystem is marked locked, mounting read-only. [ 1800.261322][T10496] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1800.272022][T10496] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1800.285331][T10496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.481526][T10496] usb 2-1: config 0 descriptor?? [ 1801.088925][T10496] lg-g15 0003:046D:C222.0030: unbalanced collection at end of report description [ 1801.157689][T10496] lg-g15 0003:046D:C222.0030: probe with driver lg-g15 failed with error -22 [ 1801.369467][T10496] usb 2-1: USB disconnect, device number 20 [ 1802.352918][T29017] loop6: detected capacity change from 0 to 764 [ 1802.613930][T29017] rock: directory entry would overflow storage [ 1802.620828][T29017] rock: sig=0x5850, size=36, remaining=7 [ 1804.660070][T29052] loop1: detected capacity change from 0 to 256 [ 1806.009708][T29076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5523'. [ 1806.046570][T29076] vlan2: entered allmulticast mode [ 1806.056302][T29076] gretap0: entered allmulticast mode [ 1806.297555][T29082] loop5: detected capacity change from 0 to 128 [ 1806.416196][T29082] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1806.559797][T27808] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1807.087514][T29094] can0: slcan on ptm0. [ 1807.360017][T29089] can0 (unregistered): slcan off ptm0. [ 1807.449848][T29104] netlink: 292 bytes leftover after parsing attributes in process `syz.1.5529'. [ 1807.716819][T29109] mkiss: ax0: crc mode is auto. [ 1813.560101][T29194] loop5: detected capacity change from 0 to 64 [ 1814.795570][T29224] loop6: detected capacity change from 0 to 512 [ 1814.818954][T29221] loop5: detected capacity change from 0 to 512 [ 1814.998490][T29221] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1815.013509][T29221] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 1815.024416][T29221] EXT4-fs (loop5): group descriptors corrupted! [ 1815.158774][T29224] EXT4-fs error (device loop6): ext4_orphan_get:1390: comm syz.6.5560: inode #15: comm syz.6.5560: iget: illegal inode # [ 1815.221539][T29224] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.5560: couldn't read orphan inode 15 (err -117) [ 1815.333277][T29221] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5561'. [ 1815.357492][T29224] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1816.015315][T29230] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 215 vs 220 free clusters [ 1816.071811][ T7594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1816.644671][T29251] loop5: detected capacity change from 0 to 1024 [ 1817.277029][ T56] hfsplus: b-tree write err: -5, ino 4 [ 1817.303834][T29258] loop0: detected capacity change from 0 to 2048 [ 1817.571272][T29265] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1817.748455][T29267] loop1: detected capacity change from 0 to 8 [ 1818.389084][T29272] loop6: detected capacity change from 0 to 512 [ 1818.533285][T29272] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1818.876361][T29285] loop1: detected capacity change from 0 to 64 [ 1818.917979][T29272] EXT4-fs (loop6): 1 truncate cleaned up [ 1818.926591][T29272] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1819.909303][ T7594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1820.585276][T29311] loop1: detected capacity change from 0 to 256 [ 1820.633309][T29311] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1821.442999][T29311] FAT-fs (loop1): Directory bread(block 64) failed [ 1821.453231][T29311] FAT-fs (loop1): Directory bread(block 65) failed [ 1821.460640][T29311] FAT-fs (loop1): Directory bread(block 66) failed [ 1821.467605][T29311] FAT-fs (loop1): Directory bread(block 67) failed [ 1821.477890][T29311] FAT-fs (loop1): Directory bread(block 68) failed [ 1821.484959][T29311] FAT-fs (loop1): Directory bread(block 69) failed [ 1821.494047][T29311] FAT-fs (loop1): Directory bread(block 70) failed [ 1821.501742][T29311] FAT-fs (loop1): Directory bread(block 71) failed [ 1821.511855][T29311] FAT-fs (loop1): Directory bread(block 72) failed [ 1821.518879][T29311] FAT-fs (loop1): Directory bread(block 73) failed [ 1824.514134][T29350] loop1: detected capacity change from 0 to 512 [ 1824.631248][T29350] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1824.641693][T29350] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1824.828368][T29350] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.5595: bad orphan inode 131083 [ 1824.866361][T29350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1825.488570][T21057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1825.879754][T29367] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 1825.892314][T29367] overlayfs: missing 'lowerdir' [ 1827.133280][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1827.144090][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1827.380256][T29386] loop6: detected capacity change from 0 to 16 [ 1827.494077][T29386] erofs (device loop6): mounted with root inode @ nid 36. [ 1828.095906][T29395] overlay: filesystem on ./file0/file0 not supported [ 1828.947607][T29409] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5613'. [ 1831.015399][T29437] loop0: detected capacity change from 0 to 2048 [ 1831.317748][T29437] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1831.497381][ T5851] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1831.794922][ T5851] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.808590][ T5851] usb 2-1: config 0 has no interfaces? [ 1831.818042][ T5851] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1831.833934][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.169946][ T5851] usb 2-1: config 0 descriptor?? [ 1832.291558][T29457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5623'. [ 1832.398560][T29457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5623'. [ 1832.620310][T10496] usb 2-1: USB disconnect, device number 21 [ 1832.851964][T29469] loop5: detected capacity change from 0 to 512 [ 1832.870592][T29469] EXT4-fs: Ignoring removed bh option [ 1832.928408][T29469] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1833.129270][T29469] EXT4-fs (loop5): 1 truncate cleaned up [ 1833.232209][T29469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1833.597603][T29475] loop0: detected capacity change from 0 to 2048 [ 1833.661100][T29480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5627'. [ 1833.748634][T29475] NILFS (loop0): invalid segment: Inconsistency found [ 1833.756191][T29475] NILFS (loop0): trying rollback from an earlier position [ 1833.843748][T27808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1833.957812][T29475] NILFS (loop0): recovery complete [ 1834.030441][T29484] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1834.865818][T29494] loop5: detected capacity change from 0 to 256 [ 1834.868313][T29494] exfat: Deprecated parameter 'utf8' [ 1835.034012][T29494] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1835.085317][ T5851] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1835.260468][ T5851] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1835.260658][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1835.260839][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1835.260990][ T5851] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1835.261224][ T5851] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1835.261391][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.347542][ T5851] usb 5-1: config 0 descriptor?? [ 1835.742406][T29503] loop6: detected capacity change from 0 to 2048 [ 1835.851648][ T5851] elecom 0003:056E:00FE.0031: unknown main item tag 0x0 [ 1835.851848][ T5851] elecom 0003:056E:00FE.0031: unknown main item tag 0x0 [ 1835.852030][ T5851] elecom 0003:056E:00FE.0031: unknown main item tag 0x0 [ 1835.852222][ T5851] elecom 0003:056E:00FE.0031: unknown main item tag 0x0 [ 1835.852408][ T5851] elecom 0003:056E:00FE.0031: unknown main item tag 0x0 [ 1835.893922][T29503] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1835.968387][ T5851] elecom 0003:056E:00FE.0031: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 1836.121882][ T5851] usb 5-1: USB disconnect, device number 18 [ 1836.315430][T29517] loop5: detected capacity change from 0 to 1024 [ 1836.540521][T29517] hfsplus: bad catalog entry type [ 1836.939407][ T35] hfsplus: b-tree write err: -5, ino 4 [ 1839.037821][T29563] loop4: detected capacity change from 0 to 16 [ 1839.111855][T29563] erofs (device loop4): mounted with root inode @ nid 36. [ 1840.942901][T29590] loop5: detected capacity change from 0 to 2048 [ 1841.112050][T29597] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1841.348202][T29600] syz_tun: entered allmulticast mode [ 1843.881299][T29618] loop6: detected capacity change from 0 to 1024 [ 1844.160102][T29618] hfsplus: walked past end of dir [ 1846.514618][T29655] loop5: detected capacity change from 0 to 128 [ 1846.548680][T29655] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1846.802216][T29658] loop0: detected capacity change from 0 to 164 [ 1846.806434][T29655] syz.5.5668: attempt to access beyond end of device [ 1846.806434][T29655] loop5: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 1846.828759][T29655] syz.5.5668: attempt to access beyond end of device [ 1846.828759][T29655] loop5: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 1846.998820][T29664] loop1: detected capacity change from 0 to 256 [ 1847.058506][T29658] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=82 [ 1847.233966][T29664] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1848.171183][ T5851] kernel write not supported for file /sysvipc/msg (pid: 5851 comm: kworker/1:5) [ 1849.006110][T29688] loop1: detected capacity change from 0 to 1024 [ 1849.074002][T29688] EXT4-fs: Ignoring removed bh option [ 1849.307144][T29688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1849.513335][T29697] loop4: detected capacity change from 0 to 512 [ 1849.758907][T29697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 1849.772638][T29688] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.5677: error while reading EA inode 32 err=-116 [ 1849.858132][T29697] System zones: 1-12 [ 1849.863320][T29697] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1849.910750][T29688] EXT4-fs (loop1): Remounting filesystem read-only [ 1849.918261][T29688] EXT4-fs warning (device loop1): ext4_xattr_block_set:2190: inode #19: comm syz.1.5677: dec ref error=-30 [ 1849.971628][T29697] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5679: bg 0: block 328: padding at end of block bitmap is not set [ 1850.010074][T29697] EXT4-fs (loop4): Remounting filesystem read-only [ 1850.155665][T29697] EXT4-fs (loop4): 1 orphan inode deleted [ 1850.167520][T29697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1850.508042][T29697] EXT4-fs warning (device loop4): dx_probe:793: inode #2: lblock 0: comm syz.4.5679: error -117 reading directory block [ 1850.622163][T21057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1851.046046][T29715] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5683'. [ 1851.056015][T29715] nbd: couldn't find a device at index 64 [ 1851.243270][T18893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1852.709893][T29741] loop1: detected capacity change from 0 to 8 [ 1852.814027][T29741] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1852.825513][T29741] SQUASHFS error: Failed to read block 0x9b: -5 [ 1852.832024][T29741] SQUASHFS error: Unable to read metadata cache entry [99] [ 1852.847316][T29741] SQUASHFS error: Unable to read inode 0x127 [ 1853.883699][T29759] loop6: detected capacity change from 0 to 64 [ 1853.896634][ T5851] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1854.124870][ T5851] usb 6-1: Using ep0 maxpacket: 8 [ 1854.220022][T29762] ===================================================== [ 1854.227545][T29762] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0xd6b/0xe80 [ 1854.235758][T29762] ieee802154_hdr_push+0xd6b/0xe80 [ 1854.241135][T29762] ieee802154_header_create+0x9bc/0xc70 [ 1854.250021][T29762] dgram_sendmsg+0xd91/0x15e0 [ 1854.255402][T29762] ieee802154_sock_sendmsg+0x96/0xd0 [ 1854.263117][T29762] __sock_sendmsg+0x30f/0x380 [ 1854.269054][T29762] __sys_sendto+0x594/0x750 [ 1854.274670][T29762] __se_compat_sys_socketcall+0xceb/0x1a30 [ 1854.275932][ T5851] usb 6-1: config 0 has an invalid interface number: 246 but max is 0 [ 1854.280684][T29762] __ia32_compat_sys_socketcall+0x6b/0xa0 [ 1854.289212][ T5851] usb 6-1: config 0 has no interface number 0 [ 1854.304963][T29762] ia32_sys_call+0x3c1f/0x41f0 [ 1854.309956][T29762] __do_fast_syscall_32+0xb0/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1854.318372][T29762] do_fast_syscall_32+0x38/0x80 [ 1854.323483][T29762] do_SYSENTER_32+0x1f/0x30 [ 1854.330487][T29762] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1854.337536][T29762] [ 1854.340064][T29762] Local variable hdr created at: [ 1854.348923][T29762] ieee802154_header_create+0x4e/0xc70 [ 1854.355819][T29762] dgram_sendmsg+0xd91/0x15e0 [ 1854.362996][T29762] [ 1854.366402][T29762] CPU: 0 UID: 0 PID: 29762 Comm: syz.1.5696 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(undef) [ 1854.381876][T29762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1854.392303][T29762] ===================================================== [ 1854.399566][T29762] Disabling lock debugging due to kernel taint [ 1854.409837][T29762] Kernel panic - not syncing: kmsan.panic set ... [ 1854.416490][T29762] CPU: 0 UID: 0 PID: 29762 Comm: syz.1.5696 Tainted: G B 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(undef) [ 1854.430171][T29762] Tainted: [B]=BAD_PAGE [ 1854.434479][T29762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1854.444765][T29762] Call Trace: [ 1854.448212][T29762] [ 1854.451300][T29762] dump_stack_lvl+0x216/0x2d0 [ 1854.456256][T29762] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1854.462362][T29762] dump_stack+0x1e/0x24 [ 1854.466796][T29762] panic+0x4e5/0xcf0 [ 1854.470957][T29762] ? kmsan_internal_set_shadow_origin+0x10/0x100 [ 1854.477612][T29762] kmsan_report+0x2ca/0x2d0 [ 1854.482366][T29762] ? __msan_memcpy+0x108/0x1c0 [ 1854.487404][T29762] ? __se_compat_sys_socketcall+0xceb/0x1a30 [ 1854.493664][T29762] ? do_fast_syscall_32+0x38/0x80 [ 1854.498940][T29762] ? do_SYSENTER_32+0x1f/0x30 [ 1854.503868][T29762] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1854.510653][T29762] ? stack_depot_save+0x12/0x20 [ 1854.515738][T29762] ? __msan_warning+0x95/0x120 [ 1854.520759][T29762] ? ieee802154_hdr_push+0xd6b/0xe80 [ 1854.526315][T29762] ? ieee802154_header_create+0x9bc/0xc70 [ 1854.532288][T29762] ? dgram_sendmsg+0xd91/0x15e0 [ 1854.537375][T29762] ? ieee802154_sock_sendmsg+0x96/0xd0 [ 1854.543091][T29762] ? __sock_sendmsg+0x30f/0x380 [ 1854.548207][T29762] ? __sys_sendto+0x594/0x750 [ 1854.553109][T29762] ? __se_compat_sys_socketcall+0xceb/0x1a30 [ 1854.559358][T29762] ? __ia32_compat_sys_socketcall+0x6b/0xa0 [ 1854.565522][T29762] ? ia32_sys_call+0x3c1f/0x41f0 [ 1854.570675][T29762] ? __do_fast_syscall_32+0xb0/0x110 [ 1854.576201][T29762] ? do_fast_syscall_32+0x38/0x80 [ 1854.581467][T29762] ? do_SYSENTER_32+0x1f/0x30 [ 1854.586390][T29762] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1854.593181][T29762] ? __se_compat_sys_socketcall+0xceb/0x1a30 [ 1854.599420][T29762] ? __ia32_compat_sys_socketcall+0x6b/0xa0 [ 1854.605583][T29762] ? ia32_sys_call+0x3c1f/0x41f0 [ 1854.610749][T29762] ? kmsan_get_metadata+0x13e/0x1c0 [ 1854.616239][T29762] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1854.622365][T29762] ? ieee802154_hdr_push+0x49/0xe80 [ 1854.627845][T29762] ? filter_irq_stacks+0x60/0x1b0 [ 1854.633149][T29762] ? kmsan_get_metadata+0x13e/0x1c0 [ 1854.638628][T29762] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1854.645225][T29762] ? kmsan_get_metadata+0x13e/0x1c0 [ 1854.650695][T29762] ? kmsan_internal_memmove_metadata+0x17b/0x230 [ 1854.657302][T29762] ? kmsan_get_metadata+0x13e/0x1c0 [ 1854.662769][T29762] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1854.668857][T29762] __msan_warning+0x95/0x120 [ 1854.673701][T29762] ieee802154_hdr_push+0xd6b/0xe80 [ 1854.679142][T29762] ? __msan_memcpy+0x108/0x1c0 [ 1854.684159][T29762] ieee802154_header_create+0x9bc/0xc70 [ 1854.690007][T29762] ? __pfx_ieee802154_header_create+0x10/0x10 [ 1854.696320][T29762] dgram_sendmsg+0xd91/0x15e0 [ 1854.701371][T29762] ? __pfx_dgram_sendmsg+0x10/0x10 [ 1854.706735][T29762] ieee802154_sock_sendmsg+0x96/0xd0 [ 1854.712294][T29762] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1854.718549][T29762] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1854.724800][T29762] __sock_sendmsg+0x30f/0x380 [ 1854.729760][T29762] __sys_sendto+0x594/0x750 [ 1854.734487][T29762] ? filter_irq_stacks+0x165/0x1b0 [ 1854.739985][T29762] ? stack_depot_save_flags+0x37/0x7e0 [ 1854.745746][T29762] __se_compat_sys_socketcall+0xceb/0x1a30 [ 1854.751880][T29762] ? kmsan_get_metadata+0x13e/0x1c0 [ 1854.757363][T29762] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1854.763477][T29762] __ia32_compat_sys_socketcall+0x6b/0xa0 [ 1854.769481][T29762] ia32_sys_call+0x3c1f/0x41f0 [ 1854.774492][T29762] __do_fast_syscall_32+0xb0/0x110 [ 1854.779863][T29762] ? irqentry_exit+0x16/0x60 [ 1854.784684][T29762] do_fast_syscall_32+0x38/0x80 [ 1854.789787][T29762] do_SYSENTER_32+0x1f/0x30 [ 1854.794541][T29762] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1854.801160][T29762] RIP: 0023:0xf739d579 [ 1854.805422][T29762] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1854.825312][T29762] RSP: 002b:00000000f5025430 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 1854.834008][T29762] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f5025444 [ 1854.842184][T29762] RDX: 0000000000000000 RSI: 00000000f5025560 RDI: 00000000f738cff4 [ 1854.850370][T29762] RBP: 00000000f5025560 R08: 0000000000000000 R09: 0000000000000000 [ 1854.858563][T29762] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1854.866740][T29762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1854.874938][T29762] [ 1854.878439][T29762] Kernel Offset: disabled [ 1854.882903][T29762] Rebooting in 86400 seconds..