last executing test programs: 6m14.683551104s ago: executing program 32 (id=29): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@init_itable}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x47a, &(0x7f0000000580)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x200e1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 5m19.475759277s ago: executing program 5 (id=457): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="000800bcadd26526bbecefcae8f4ff93be00000000000000004c53be5b27001f", 0x20) 5m19.207486315s ago: executing program 5 (id=459): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 5m18.809802868s ago: executing program 5 (id=461): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@nodiscard}, {@compress_cache}, {@discard_unit_section}, {@alloc_mode_reuse}, {@checkpoint_diasble}, {@background_gc_on}, {@background_gc_on}, {@four_active_logs}, {@fsync_mode_posix}, {@block_mode}, {@data_flush}, {@heap}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x550f, &(0x7f000000cf00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r0, 0x2, 0x7, 0x4) 5m16.533025652s ago: executing program 5 (id=472): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 5m14.711283091s ago: executing program 5 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}}, 0x0) 5m13.865930059s ago: executing program 5 (id=496): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m13.21261403s ago: executing program 33 (id=496): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m22.597590512s ago: executing program 6 (id=1465): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x3, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x6}}) 3m21.255460505s ago: executing program 6 (id=1470): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0xc, 0x8, 0x40, 0x7, 0x13, "71feaf33c32ed6fe90107884be157e88b3e578"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x4, 0x0, 0xffffffc0, 0xa, 0x13, "840bf321ffe8cad4d6725fa5cff5ea21bee073"}) 3m20.997871424s ago: executing program 6 (id=1473): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x50d, &(0x7f00000006c0)="$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") r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xf001}, {0xffffffff, 0x400008, 0xfffffffffffffffe, 0x6, 0x7}]}) 3m20.235232368s ago: executing program 6 (id=1482): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x2010880, &(0x7f00000008c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f696e746567726974792c6e6f646973636172642c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d332c6469736361726400726573697a652c71756f74612c75737271756f74612c726573697a653d3078303030303030303030303030303d30372c696e746567726974792c646973636172642c6e6f71756f74612c6e6f71756f74612c657569643c8c72c5bf762ab3dd5153bdd55a1a26f2c6a42c1df48b34291ea0696f2f1f0a7b31c91bccf7f4707502478f37599eb13d60653683e6a858f2a54586fd6dc9da99078d3e365b7fe2d52d0591c9c049673c6720ed91bb", @ANYRESDEC=0x0, @ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES8, @ANYRES64], 0xfe, 0x60ee, &(0x7f0000001080)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 3m18.250620443s ago: executing program 6 (id=1498): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 3m17.229824496s ago: executing program 6 (id=1511): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8000, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000000340)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 3m16.709423873s ago: executing program 34 (id=1511): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8000, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000000340)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 2m42.687626428s ago: executing program 0 (id=1763): open(&(0x7f0000000180)='./file1\x00', 0x4a37e, 0x4) lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x129242, 0x0) 2m42.32701472s ago: executing program 0 (id=1766): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) 2m41.886881784s ago: executing program 0 (id=1769): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f0000000180)=ANY=[], 0x1, 0x5572, &(0x7f0000000440)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="85", 0x1}, {&(0x7f0000000180)="3d33f2330f", 0x5}], 0x2, 0x7800, 0x1, 0x3) 2m40.028670064s ago: executing program 0 (id=1781): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setreuid(0x0, 0xee00) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000440)={0xfff7, [0x80, 0xffffffff], 0xfffe}, 0x10) 2m39.382666925s ago: executing program 0 (id=1787): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m38.3028581s ago: executing program 0 (id=1797): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write(r0, &(0x7f0000003000)='\n', 0x1) pwrite64(r0, 0x0, 0x0, 0x10001) 2m23.008007977s ago: executing program 35 (id=1797): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write(r0, &(0x7f0000003000)='\n', 0x1) pwrite64(r0, 0x0, 0x0, 0x10001) 1m13.077181177s ago: executing program 7 (id=2596): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8e) unlinkat(r1, &(0x7f0000000040)='./bus\x00', 0x200) 1m12.620606792s ago: executing program 7 (id=2599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x4070bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x2c}}, 0x18) 1m12.282992083s ago: executing program 7 (id=2601): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 1m12.027773481s ago: executing program 7 (id=2604): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8000002) 1m11.45501868s ago: executing program 7 (id=2608): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000100", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m10.953309807s ago: executing program 7 (id=2614): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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") sync() syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) 55.75782315s ago: executing program 36 (id=2614): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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") sync() syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) 47.824087447s ago: executing program 1 (id=2813): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setreuid(0x0, 0xee00) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000440)={0xfff7, [0x80, 0xffffffff], 0xfffe}, 0x10) 47.484860798s ago: executing program 1 (id=2814): r0 = semget(0x1, 0x1, 0x39c) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) semctl$IPC_RMID(r0, 0x0, 0x0) 47.12356089s ago: executing program 1 (id=2817): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="d2"], 0x48}}, 0x20000804) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) 46.300740047s ago: executing program 1 (id=2819): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0xa00}, 0x8800) 45.766377184s ago: executing program 1 (id=2822): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 44.737530837s ago: executing program 1 (id=2833): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'sh\x00', 0x0, 0x64000000, 0xe}, {@private=0xa010101, 0x4e26, 0x0, 0x3, 0x0, 0x8001}}, 0x44) 29.627091438s ago: executing program 37 (id=2833): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'sh\x00', 0x0, 0x64000000, 0xe}, {@private=0xa010101, 0x4e26, 0x0, 0x3, 0x0, 0x8001}}, 0x44) 4.798693745s ago: executing program 4 (id=3195): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x81a0}, [@call={0x85, 0x0, 0x0, 0x28}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000440)='\x00'/14, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.454288935s ago: executing program 4 (id=3199): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}}]}, 0x30}}, 0x0) 3.959018722s ago: executing program 4 (id=3202): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_init1(0x0) 2.46698957s ago: executing program 4 (id=3211): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b15, 0x0) 2.286266006s ago: executing program 9 (id=3214): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1c0, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xb}, {0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x7}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x164, 0x2, [@TCA_BASIC_ACT={0x160, 0x3, [@m_sample={0x68, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x29, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d8c5509c5f67bbd00abca8965993d237d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0xf4, 0xc, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xa5, 0x6, "2dbf268a304e872a0d7f589c8901efee8571a53c4f0062991873d363eeca75f7594e303fa6758fe5d09d4f9ffd072918848212ec1896728111b3c61d1de320181a72e0f47ddfe150f87d3d5d6ddc89258e07ea93abbbaa8b9538526f3018c8a1b0e044cee5833db84e522dd97d547504650f4a6186a9bdc8a084ea8dcb9ee2d96d67813c5f9ee6a009727f36b1bb22dc537ebc9f6caf615e577911012fe6258c81"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x82050) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.16287591s ago: executing program 8 (id=3215): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) 2.088077293s ago: executing program 3 (id=3216): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000001140)={@multicast2, @dev={0xac, 0x14, 0x14, 0x32}}, 0x8) 2.025798914s ago: executing program 8 (id=3217): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x20080, 0x2880}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x40000) 1.983920406s ago: executing program 9 (id=3218): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0xb26a, 0x1, 0x0, 0x0, 0x8001, 0x7f, 0x2, 0x4, r1}, &(0x7f00000002c0)=0x20) 1.824935001s ago: executing program 3 (id=3220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0xc0) 1.630787687s ago: executing program 2 (id=3221): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x80b43) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0xf5ff, 0x0}, &(0x7f0000000000)="93fb0b0cfccf", 0x0, 0x0, 0xfffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 1.53194952s ago: executing program 3 (id=3222): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000004200010200000000000000000a000001"], 0x14}}, 0x0) 1.465712383s ago: executing program 8 (id=3223): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@noauto_da_alloc}, {@quota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.387807965s ago: executing program 2 (id=3224): syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close(0x3) 1.294773288s ago: executing program 3 (id=3225): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000003c0)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) 1.104548284s ago: executing program 2 (id=3226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 1.041594007s ago: executing program 3 (id=3227): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) 910.78498ms ago: executing program 3 (id=3228): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) 891.738011ms ago: executing program 8 (id=3229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x9, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 884.812081ms ago: executing program 9 (id=3230): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x7d, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x47, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0x6, 0x0, 0x2, '\x00', {0xd, 0x6, "3fafee", 0x5, 0x2c, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @local, [@hopopts={0x3a}], "7d1835546de51a0b11b7c7b3385302"}}}}}}}, 0x0) 748.777256ms ago: executing program 2 (id=3231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) 622.95318ms ago: executing program 4 (id=3232): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x778, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x1, 0x0, 0x100000001, 0x0, 0x0, 0x4}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 621.92537ms ago: executing program 9 (id=3233): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x99) 474.579505ms ago: executing program 2 (id=3234): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 468.165825ms ago: executing program 8 (id=3244): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="595327bd7000000000086b00000008000300", @ANYRES32=0x0, @ANYBLOB="06009d"], 0x38}}, 0x0) 341.676899ms ago: executing program 9 (id=3235): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x808010, &(0x7f00000002c0)=ANY=[], 0x1, 0x9b, &(0x7f0000000000)="$eJzs0s3NAQEQBuD324/gYBtw0IEatCKO3JyIREVaUYJECW7isrJhIyjAT54nmZlM3sscZnfeDlIm1SapniyWq9lkfu3p58E4/IIiSSdJN8mwvO/J4fYFyf64njZVJ3+nJgEAAL5JkVE9/l+TVpJekvYbrgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HJcAAAD//yc5MPk=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) getdents(r0, &(0x7f0000000100)=""/24, 0x18) 304.03086ms ago: executing program 8 (id=3236): syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed008e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@min_batch_time={'min_batch_time', 0x3d, 0xd23b}}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x47d, &(0x7f0000000dc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) lseek(r0, 0x6, 0x4) 303.915791ms ago: executing program 4 (id=3237): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f00000006c0)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@grpquota}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000001200)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x3) 38.457769ms ago: executing program 2 (id=3238): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008}, 0x4000000) 0s ago: executing program 9 (id=3239): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0xa, 0x300) syz_emit_ethernet(0xaa6, &(0x7f00000024c0)={@local, @multicast, @void, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x8, 0xa98, 0x66, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x7}, {0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x3, {{0x2, 0x1, 0x4, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x2, {{0x4, 0x2, 0x5, 0x2, 0x1, 0x2, 0x0, 0x7}, 0x2, {0x9, 0x9, 0x0, 0xd, 0x1, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "6f638de558b73a694715050d7589aa893ae9849fed7c6d99d7117efb4060cdfff9c770caaf5da06b7a3305aaec68e96120a6282627c54d090000008b76e4ade124b98c741594d99b"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): fs: (device loop4): mounted with root inode @ nid 36. [ 340.392252][T10661] netlink: 'syz.8.2202': attribute type 196 has an invalid length. [ 340.403559][T10638] (syz.3.2191,10638,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 340.427507][T10657] syz.4.2200: attempt to access beyond end of device [ 340.427507][T10657] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 340.499178][T10657] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 340.512016][T10638] (syz.3.2191,10638,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 340.604801][T10638] JBD2: Ignoring recovery information on journal [ 340.740102][T10638] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 340.937378][T10671] loop4: detected capacity change from 0 to 2048 [ 341.012564][T10671] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362 [ 341.056064][T10671] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 341.090501][T10671] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 341.130345][ T4279] ocfs2: Unmounting device (7,3) on (node local) [ 341.215232][T10671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 341.787805][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2213'. [ 342.044020][T10669] loop8: detected capacity change from 0 to 32768 [ 342.164621][T10674] XFS (loop7): Mounting V5 Filesystem [ 342.305539][T10674] XFS (loop7): Ending clean mount [ 342.521740][ T8705] XFS (loop7): Unmounting Filesystem [ 343.055601][T10717] set_capacity_and_notify: 1 callbacks suppressed [ 343.055618][T10717] loop3: detected capacity change from 0 to 1024 [ 343.082609][T10718] loop4: detected capacity change from 0 to 1024 [ 343.120073][T10718] EXT4-fs: Ignoring removed orlov option [ 343.120992][T10717] EXT4-fs: Ignoring removed i_version option [ 343.242657][T10718] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 343.269363][T10717] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.353976][T10717] __quota_error: 1 callbacks suppressed [ 343.353996][T10717] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 343.429208][T10717] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 343.461687][T10717] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.2226: Failed to acquire dquot type 0 [ 343.482150][T10717] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 343.514397][T10717] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #13: comm syz.3.2226: corrupted inode contents [ 343.547471][T10717] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #13: comm syz.3.2226: mark_inode_dirty error [ 343.585788][T10717] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #13: comm syz.3.2226: corrupted inode contents [ 343.619360][T10717] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.2226: mark_inode_dirty error [ 343.630918][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 343.638227][T10717] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #13: comm syz.3.2226: corrupted inode contents [ 343.657566][T10717] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 343.695042][T10717] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #13: comm syz.3.2226: corrupted inode contents [ 343.790016][T10717] EXT4-fs error (device loop3): ext4_truncate:4314: inode #13: comm syz.3.2226: mark_inode_dirty error [ 343.809171][T10732] loop7: detected capacity change from 0 to 4096 [ 343.826569][T10717] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 343.847242][T10708] loop8: detected capacity change from 0 to 32768 [ 343.867090][T10717] EXT4-fs (loop3): 1 truncate cleaned up [ 343.928768][T10717] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 344.124072][T10708] XFS (loop8): Mounting V5 Filesystem [ 344.130726][T10717] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 344.142966][T10717] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 344.152597][T10717] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.2226: Failed to acquire dquot type 0 [ 344.320107][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 344.439841][T10708] XFS (loop8): Ending clean mount [ 344.639519][T10036] XFS (loop8): Unmounting Filesystem [ 345.077830][T10736] loop4: detected capacity change from 0 to 32768 [ 345.214424][T10736] XFS (loop4): Mounting V5 Filesystem [ 345.364240][T10736] XFS (loop4): Ending clean mount [ 345.426511][T10736] XFS (loop4): Quotacheck needed: Please wait. [ 345.429968][T10758] loop7: detected capacity change from 0 to 40427 [ 345.483163][T10758] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 345.494078][T10758] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 345.520677][T10758] F2FS-fs (loop7): invalid crc_offset: 33558524 [ 345.583561][T10736] XFS (loop4): Quotacheck: Done. [ 345.625116][T10758] F2FS-fs (loop7): Found nat_bits in checkpoint [ 345.757301][ T4276] XFS (loop4): Unmounting Filesystem [ 345.819298][T10758] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 345.826442][T10758] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 345.990371][T10758] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 346.074572][T10760] loop1: detected capacity change from 0 to 32768 [ 346.112439][T10762] loop3: detected capacity change from 0 to 32768 [ 346.952173][T10775] loop8: detected capacity change from 0 to 32768 [ 347.009214][T10775] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 347.367690][ T4260] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 347.609873][ T4257] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 347.693907][T10778] loop7: detected capacity change from 0 to 32768 [ 347.809119][ T4257] usb 9-1: Using ep0 maxpacket: 32 [ 347.818869][ T4257] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 347.854038][ T4257] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 347.857524][T10778] XFS (loop7): Mounting V5 Filesystem [ 347.894524][ T4257] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 347.936013][ T4257] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 347.982995][T10778] XFS (loop7): Ending clean mount [ 348.000818][ T4257] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 348.029839][T10778] XFS (loop7): Quotacheck needed: Please wait. [ 348.055558][T10782] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 348.095357][ T4257] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 348.116643][T10782] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 348.162841][ T4257] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.173848][T10782] F2FS-fs (loop3): invalid crc value [ 348.209040][ T4257] usb 9-1: config 0 descriptor?? [ 348.223733][T10782] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 348.254836][T10778] XFS (loop7): Quotacheck: Done. [ 348.296309][T10780] XFS (loop1): Mounting V5 Filesystem [ 348.443126][T10780] XFS (loop1): Ending clean mount [ 348.450552][ T8705] XFS (loop7): Unmounting Filesystem [ 348.469777][ T4257] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 348.524809][T10780] XFS (loop1): Quotacheck needed: Please wait. [ 348.630278][T10782] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 348.637404][T10782] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 348.731728][T10780] XFS (loop1): Quotacheck: Done. [ 348.894534][ T4269] XFS (loop1): Unmounting Filesystem [ 348.903825][ T4279] syz-executor: attempt to access beyond end of device [ 348.903825][ T4279] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 349.078719][ T4257] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 349.280968][ T4257] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 349.307533][ T4257] usb 5-1: config 1 has no interface number 0 [ 349.342450][ T4257] usb 5-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 349.398322][ T4257] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.452809][ T4257] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 349.482409][ T4257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.519353][ T4257] usb 5-1: Product: syz [ 349.539442][ T4257] usb 5-1: Manufacturer: syz [ 349.544126][ T4257] usb 5-1: SerialNumber: syz [ 349.570384][T10809] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 349.584659][ T4257] usb 5-1: Expected 3 endpoints, found: 2 [ 350.194944][T10835] netlink: 'syz.7.2258': attribute type 5 has an invalid length. [ 350.379200][ T4257] usb 9-1: USB disconnect, device number 4 [ 350.405324][ T4257] usblp0: removed [ 350.742929][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2262'. [ 350.809227][T10847] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2264'. [ 351.120008][T10853] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2267'. [ 351.252671][T10857] set_capacity_and_notify: 3 callbacks suppressed [ 351.252689][T10857] loop1: detected capacity change from 0 to 1024 [ 351.371661][T10857] hfsplus: bad catalog entry type [ 351.488117][ T4456] hfsplus: b-tree write err: -5, ino 25 [ 351.495544][ T4456] hfsplus: b-tree write err: -5, ino 4 [ 351.525523][ T4456] hfsplus: b-tree write err: -5, ino 2 [ 351.543399][ T4456] hfsplus: b-tree write err: -5, ino 26 [ 351.770047][ T4257] usb 5-1: USB disconnect, device number 17 [ 351.911147][T10870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2275'. [ 352.181731][T10878] loop4: detected capacity change from 0 to 512 [ 352.273864][T10878] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.2278: dx entry: limit 1024 != root limit 124 [ 352.337128][T10878] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2278: Corrupt directory, running e2fsck is recommended [ 352.355845][T10878] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 352.365131][T10878] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.2278: corrupted in-inode xattr [ 352.405655][T10878] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2278: couldn't read orphan inode 15 (err -117) [ 352.488800][T10878] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 352.547689][T10892] xt_hashlimit: Unknown mode mask 883EBBD7, kernel too old? [ 352.577011][T10887] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 352.584529][T10887] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 352.593601][T10878] EXT4-fs error (device loop4): ext4_xattr_set_entry:1617: inode #2: comm syz.4.2278: corrupted xattr entries [ 352.698801][T10887] vhci_hcd vhci_hcd.0: Device attached [ 352.753158][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 352.838882][ T6474] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 352.938814][ T5147] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 353.040466][ T6474] usb 4-1: config 0 has no interfaces? [ 353.070726][ T6474] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 353.092751][ T6474] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 353.112375][ T6474] usb 4-1: Manufacturer: syz [ 353.162319][ T6474] usb 4-1: config 0 descriptor?? [ 353.380489][ T4257] usb 4-1: USB disconnect, device number 14 [ 353.383658][T10891] usb 39-1: recv xbuf, 0 [ 353.428061][ T4456] vhci_hcd: stop threads [ 353.436758][ T4456] vhci_hcd: release socket [ 353.474980][ T4456] vhci_hcd: disconnect device [ 353.498898][ T5147] vhci_hcd: vhci_device speed not set [ 353.634224][T10921] loop7: detected capacity change from 0 to 512 [ 353.679613][T10924] loop4: detected capacity change from 0 to 256 [ 353.696421][T10921] EXT4-fs (loop7): orphan cleanup on readonly fs [ 353.721759][T10921] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 353.748844][ T6477] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 353.789055][T10924] FAT-fs (loop4): Directory bread(block 64) failed [ 353.795679][T10924] FAT-fs (loop4): Directory bread(block 65) failed [ 353.797213][T10921] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.2296: corrupted inode contents [ 353.839467][T10921] EXT4-fs error (device loop7): ext4_dirty_inode:6133: inode #15: comm syz.7.2296: mark_inode_dirty error [ 353.885070][T10921] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.2296: corrupted inode contents [ 353.888949][T10924] FAT-fs (loop4): Directory bread(block 66) failed [ 353.926174][T10921] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2945: inode #15: comm syz.7.2296: mark_inode_dirty error [ 353.929209][T10924] FAT-fs (loop4): Directory bread(block 67) failed [ 353.947138][T10921] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2948: inode #15: comm syz.7.2296: mark inode dirty (error -117) [ 353.957121][T10924] FAT-fs (loop4): Directory bread(block 68) failed [ 353.985469][T10921] EXT4-fs warning (device loop7): ext4_evict_inode:299: xattr delete (err -117) [ 353.987332][T10924] FAT-fs (loop4): Directory bread(block 69) failed [ 354.004477][ T6477] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 354.019044][T10924] FAT-fs (loop4): Directory bread(block 70) failed [ 354.023161][ T6477] usb 9-1: config 0 has no interface number 0 [ 354.033773][ T6477] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 354.037662][T10924] FAT-fs (loop4): Directory bread(block 71) failed [ 354.052338][T10924] FAT-fs (loop4): Directory bread(block 72) failed [ 354.052876][T10921] EXT4-fs (loop7): 1 orphan inode deleted [ 354.059857][T10924] FAT-fs (loop4): Directory bread(block 73) failed [ 354.081894][T10921] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 354.085801][ T6477] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 354.186017][ T6477] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 354.229453][ T6477] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.266383][ T6477] usb 9-1: config 0 descriptor?? [ 354.273220][T10915] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 354.310362][ T6477] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 354.438145][ T8705] EXT4-fs (loop7): unmounting filesystem. [ 354.576777][ T5147] usb 9-1: USB disconnect, device number 5 [ 354.595336][T10942] loop7: detected capacity change from 0 to 64 [ 354.639546][T10942] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing [ 355.475221][T10963] loop4: detected capacity change from 0 to 64 [ 356.022239][T10970] loop3: detected capacity change from 0 to 8192 [ 356.218149][T10980] loop1: detected capacity change from 0 to 4096 [ 356.239068][T10980] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 356.314615][T10980] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 356.382718][T10980] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 356.448095][T10980] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 356.496753][T10980] ntfs: volume version 3.1. [ 356.544713][T10980] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9. You might want to try to use the mount option nls=utf8. [ 356.638954][T10980] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 356.830130][ T4269] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 356.871634][T10997] loop3: detected capacity change from 0 to 512 [ 356.923504][T10997] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 357.759250][ T6482] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 357.958768][ T6482] usb 5-1: Using ep0 maxpacket: 32 [ 357.972393][ T6482] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 357.977664][T11019] loop3: detected capacity change from 0 to 64 [ 358.018724][ T6482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.027105][ T6482] usb 5-1: Product: syz [ 358.038845][ T6482] usb 5-1: Manufacturer: syz [ 358.048967][ T6482] usb 5-1: SerialNumber: syz [ 358.065904][ T6482] usb 5-1: config 0 descriptor?? [ 358.228282][T11023] loop8: detected capacity change from 0 to 64 [ 358.504004][ T6482] airspy 5-1:0.0: Board ID: 00 [ 358.509267][ T6482] airspy 5-1:0.0: Firmware version: [ 358.541031][ T4313] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 358.619073][ T9446] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 358.753929][ T4313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 358.766424][T11038] loop8: detected capacity change from 0 to 256 [ 358.773844][ T4313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.787595][ T4313] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 358.808772][ T4313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.819057][ T4313] usb 4-1: config 0 descriptor?? [ 358.835118][ T4313] hub 4-1:0.0: USB hub found [ 358.840170][ T9446] usb 2-1: Using ep0 maxpacket: 32 [ 358.847460][ T9446] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.865225][ T9446] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.876744][ T9446] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.890420][ T9446] usb 2-1: config 0 interface 0 has no altsetting 0 [ 358.897184][ T9446] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 358.906627][ T9446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.911018][ T6482] airspy 5-1:0.0: usb_control_msg() failed -71 request 0e [ 358.943728][ T6482] airspy 5-1:0.0: Registered as swradio24 [ 358.944855][ T9446] usb 2-1: config 0 descriptor?? [ 358.960840][ T6482] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 358.986079][ T6482] usb 5-1: USB disconnect, device number 18 [ 359.052570][T11027] loop3: detected capacity change from 0 to 512 [ 359.144762][T11027] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2341: inode has both inline data and extents flags [ 359.260910][T11027] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2341: couldn't read orphan inode 15 (err -117) [ 359.275227][T11027] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 359.346895][ T4313] hub 4-1:0.0: 1 port detected [ 359.402270][ T9446] corsair-psu 0003:1B1C:1C09.0015: unknown main item tag 0x0 [ 359.429196][ T9446] corsair-psu 0003:1B1C:1C09.0015: unknown main item tag 0x0 [ 359.471372][ T9446] corsair-psu 0003:1B1C:1C09.0015: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 359.582598][ T9446] corsair-psu 0003:1B1C:1C09.0015: unable to initialize device (-38) [ 359.629227][ T9446] corsair-psu: probe of 0003:1B1C:1C09.0015 failed with error -38 [ 359.669013][ T9446] usb 2-1: USB disconnect, device number 10 [ 359.761413][ T4313] usb 4-1: USB disconnect, device number 15 [ 359.927610][T11058] fido_id[11058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 359.942459][ T6482] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 360.150654][ T6482] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 360.168685][ T6482] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.199747][ T6482] usb 9-1: config 0 descriptor?? [ 360.212997][ T6482] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 360.360811][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 360.624329][ T6482] cpia1 9-1:0.0: unexpected state after lo power cmd: 00 [ 360.823382][ T6482] gspca_cpia1: usb_control_msg 01, error -71 [ 360.832552][ T6482] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 360.874129][ T6482] usb 9-1: USB disconnect, device number 6 [ 361.214657][T11081] loop4: detected capacity change from 0 to 2048 [ 361.234256][T11081] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 361.261032][T11081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 361.928947][ T9446] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 362.118922][ T9446] usb 5-1: Using ep0 maxpacket: 8 [ 362.129143][ T9446] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 362.148866][ T9446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.186773][ T9446] pvrusb2: Hardware description: Terratec Grabster AV400 [ 362.202259][ T9446] pvrusb2: ********** [ 362.210331][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2375'. [ 362.211376][ T9446] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 362.251186][ T9446] pvrusb2: Important functionality might not be entirely working. [ 362.290444][ T9446] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 362.319364][ T9446] pvrusb2: ********** [ 362.389699][ T2310] pvrusb2: Invalid write control endpoint [ 362.585755][T11117] batman_adv: batadv0: Adding interface: gretap1 [ 362.595892][ T9446] usb 5-1: USB disconnect, device number 19 [ 362.618950][T11117] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.644442][ C0] vkms_vblank_simulate: vblank timer overrun [ 362.657458][ T2310] pvrusb2: Invalid write control endpoint [ 362.674547][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 362.696869][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 362.705963][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 362.716544][T11117] batman_adv: batadv0: Interface activated: gretap1 [ 362.723317][ T2310] pvrusb2: Device being rendered inoperable [ 362.738359][T11121] loop7: detected capacity change from 0 to 512 [ 362.738790][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 362.761469][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 362.816576][ T2310] pvrusb2: Attached sub-driver cx25840 [ 362.846877][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 362.883349][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 363.296871][ T26] audit: type=1326 audit(1774953078.915:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11135 comm="syz.3.2387" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29c599c819 code=0x0 [ 363.850328][T11154] loop8: detected capacity change from 0 to 64 [ 363.918252][ T26] audit: type=1800 audit(1774953079.535:45): pid=11154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2393" name=14 dev="loop8" ino=21 res=0 errno=0 [ 363.958787][ T9446] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 364.158699][ T9446] usb 8-1: Using ep0 maxpacket: 32 [ 364.172206][ T9446] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.216456][ T9446] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.237209][ T9446] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 364.276831][ T9446] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.308054][ T9446] usb 8-1: config 0 descriptor?? [ 364.483296][T11167] loop8: detected capacity change from 0 to 1024 [ 364.578385][T11170] loop4: detected capacity change from 0 to 512 [ 364.701100][ T35] hfsplus: b-tree write err: -5, ino 25 [ 364.719027][ T35] hfsplus: b-tree write err: -5, ino 4 [ 364.759120][ T9446] koneplus 0003:1E7D:2D51.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.7-1/input0 [ 364.779047][ T35] hfsplus: b-tree write err: -5, ino 2 [ 365.154897][ T9446] usb 8-1: USB disconnect, device number 3 [ 365.344947][T11183] fido_id[11183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 366.125510][T11216] program syz.8.2421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.390501][T11231] loop4: detected capacity change from 0 to 64 [ 366.428464][T11228] loop3: detected capacity change from 0 to 128 [ 366.527760][T11228] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 366.587235][T11228] hpfs: filesystem error: improperly stopped [ 366.595766][T11228] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 366.683388][T11228] hpfs: You really don't want any checks? You are crazy... [ 366.709421][T11228] hpfs: hpfs_map_sector(): read error [ 366.714884][T11228] hpfs: code page support is disabled [ 366.732755][T11228] hpfs: hpfs_map_4sectors(): unaligned read [ 366.750565][T11228] hpfs: hpfs_map_4sectors(): unaligned read [ 366.759712][T11228] hpfs: filesystem error: unable to find root dir [ 366.850949][T11241] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2432'. [ 367.351620][T11258] autofs4:pid:11258:autofs_fill_super: pipe file descriptor does not contain proper ops [ 367.470512][T11261] loop3: detected capacity change from 0 to 1024 [ 367.478251][T11261] EXT4-fs: Ignoring removed bh option [ 367.479567][T11265] use of bytesused == 0 is deprecated and will be removed in the future, [ 367.508106][T11266] tipc: Started in network mode [ 367.523602][T11266] tipc: Node identity , cluster identity 4711 [ 367.531864][T11265] use the actual size instead. [ 367.541470][T11266] tipc: Failed to set node id, please configure manually [ 367.561083][T11266] tipc: Enabling of bearer rejected, failed to enable media [ 367.643017][T11261] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 367.694863][T11261] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 367.719531][ T4313] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 367.920226][ T4313] usb 9-1: Using ep0 maxpacket: 8 [ 367.928263][ T4313] usb 9-1: unable to get BOS descriptor or descriptor too short [ 367.941684][T11280] loop4: detected capacity change from 0 to 256 [ 367.950090][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 367.958174][ T4313] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.971623][T11280] exfat: Deprecated parameter 'namecase' [ 367.996059][ T4313] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 983 [ 368.027264][T11280] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 368.035056][ T4313] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32 [ 368.059306][ T6477] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 368.095192][ T4313] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 109, changing to 10 [ 368.117762][ T4313] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 26473, setting to 1024 [ 368.158491][ T4313] usb 9-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 368.198753][ T4313] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.229502][ T4313] usb 9-1: Product: syz [ 368.237926][ T4313] usb 9-1: Manufacturer: syz [ 368.254418][ T4313] usb 9-1: SerialNumber: syz [ 368.300141][ T6477] usb 2-1: config 0 has no interfaces? [ 368.308292][ T6477] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 368.344551][ T6477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.356048][ T6477] usb 2-1: Product: syz [ 368.369624][ T6477] usb 2-1: Manufacturer: syz [ 368.375180][ T6477] usb 2-1: SerialNumber: syz [ 368.411125][ T6477] usb 2-1: config 0 descriptor?? [ 368.484468][T11290] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2454'. [ 368.519441][T11290] netlink: 'syz.3.2454': attribute type 9 has an invalid length. [ 368.527609][ T4313] usb 9-1: MIDIStreaming interface descriptor not found [ 368.562712][T11290] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2454'. [ 368.583602][T11290] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2454'. [ 368.607629][T11292] loop7: detected capacity change from 0 to 4096 [ 368.626989][ T4313] usb 9-1: USB disconnect, device number 7 [ 368.629552][ T6477] usb 2-1: USB disconnect, device number 11 [ 368.663105][T11292] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 368.801102][T11292] ntfs3: loop7: ntfs3_write_inode r=1e failed, -22. [ 368.852933][T11297] ntfs3: loop7: ntfs3_write_inode r=1e failed, -22. [ 368.981736][ T8705] ntfs3: loop7: ntfs_evict_inode r=1e failed, -22. [ 369.028734][ T8705] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 369.870998][T11327] loop4: detected capacity change from 0 to 24 [ 369.878560][T11327] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 369.929684][T11327] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 370.304561][T11338] loop8: detected capacity change from 0 to 256 [ 370.333282][T11338] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 370.615855][T11336] loop1: detected capacity change from 0 to 8192 [ 370.682723][T11336] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 370.728187][T11336] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 370.739208][T11336] REISERFS (device loop1): using ordered data mode [ 370.749281][T11336] reiserfs: using flush barriers [ 370.786254][T11336] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 370.803432][T11336] REISERFS (device loop1): checking transaction log (loop1) [ 370.894070][T11336] REISERFS (device loop1): Using r5 hash to sort names [ 370.910909][T11336] REISERFS (device loop1): using 3.5.x disk format [ 370.917976][T11336] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 371.079345][T11348] netlink: 'syz.8.2479': attribute type 2 has an invalid length. [ 371.655734][T11358] netlink: 'syz.7.2483': attribute type 1 has an invalid length. [ 371.697675][T11360] loop8: detected capacity change from 0 to 1024 [ 371.714665][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2483'. [ 371.736859][T11346] loop3: detected capacity change from 0 to 32768 [ 371.792531][T11360] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 371.880531][T11360] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.975853][T11367] program syz.4.2487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.994860][T10036] EXT4-fs (loop8): unmounting filesystem. [ 372.225958][T11369] loop7: detected capacity change from 0 to 4096 [ 372.283538][T11369] EXT4-fs: inline encryption not supported [ 372.350198][T11369] EXT4-fs (loop7): Test dummy encryption mode enabled [ 372.382817][T11369] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c018, mo2=0003] [ 372.513961][T11369] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 372.689023][ T4313] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 372.729756][T11389] loop4: detected capacity change from 0 to 512 [ 372.880068][ T8705] EXT4-fs (loop7): unmounting filesystem. [ 372.908836][ T4313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.937629][ T4313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.965318][ T4313] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 372.993128][ T4313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.023783][ T4313] usb 4-1: config 0 descriptor?? [ 373.475127][ T4313] hid-steam 0003:28DE:1142.0017: unknown main item tag 0x0 [ 373.503127][ T4313] hid-steam 0003:28DE:1142.0017: unknown main item tag 0x0 [ 373.523391][ T4313] hid-steam 0003:28DE:1142.0017: unknown main item tag 0x0 [ 373.543622][ T4313] hid-steam 0003:28DE:1142.0017: item fetching failed at offset 4/5 [ 373.574551][ T4313] hid-steam 0003:28DE:1142.0017: steam_probe:parse of hid interface failed [ 373.601520][T11391] loop1: detected capacity change from 0 to 32768 [ 373.608184][ T4313] hid-steam: probe of 0003:28DE:1142.0017 failed with error -22 [ 373.637389][T11391] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2497 (11391) [ 373.650635][T11392] loop8: detected capacity change from 0 to 32768 [ 373.683336][ T6470] usb 4-1: USB disconnect, device number 16 [ 373.742216][T11391] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 373.764750][T11391] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 373.775084][T11391] BTRFS info (device loop1): enabling auto defrag [ 373.781799][T11391] BTRFS info (device loop1): use no compression [ 373.784373][T11392] XFS (loop8): Mounting V5 Filesystem [ 373.788283][T11391] BTRFS info (device loop1): force clearing of disk cache [ 373.802007][T11391] BTRFS info (device loop1): max_inline at 4096 [ 373.808322][T11391] BTRFS info (device loop1): disabling free space tree [ 374.033294][T11392] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 374.085202][T11391] BTRFS info (device loop1): enabling ssd optimizations [ 374.123023][T11392] XFS (loop8): Starting recovery (logdev: internal) [ 374.138110][T11391] BTRFS info (device loop1): rebuilding free space tree [ 374.237161][T11392] XFS (loop8): Ending recovery (logdev: internal) [ 374.243987][T11391] BTRFS info (device loop1): disabling free space tree [ 374.259360][T11391] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 374.319602][T11391] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 374.547468][T10036] XFS (loop8): Unmounting Filesystem [ 374.659165][ T4269] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 375.330902][T11456] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 375.388944][T11456] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 375.785080][T11471] loop8: detected capacity change from 0 to 512 [ 375.887052][T11471] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 375.997086][T11471] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 376.080599][T10036] EXT4-fs (loop8): unmounting filesystem. [ 376.326154][T11489] netlink: 7 bytes leftover after parsing attributes in process `syz.8.2527'. [ 376.427029][T11495] loop1: detected capacity change from 0 to 128 [ 376.539948][T11497] loop7: detected capacity change from 0 to 1024 [ 377.185339][T11510] device macvtap0 entered promiscuous mode [ 377.205872][T11509] device macvtap0 left promiscuous mode [ 377.234093][T11514] IPVS: sh: FWM 4 0x00000004 - no destination available [ 377.477381][T11491] loop3: detected capacity change from 0 to 32768 [ 377.603209][T11491] XFS (loop3): Mounting V5 Filesystem [ 377.830075][T11491] XFS (loop3): Ending clean mount [ 378.047738][ T4279] XFS (loop3): Unmounting Filesystem [ 378.161923][ T6470] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 378.409984][ T6470] usb 5-1: config 0 has no interfaces? [ 378.415732][ T6470] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 378.462876][ T6470] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.491678][ T6470] usb 5-1: config 0 descriptor?? [ 378.494143][T11555] loop7: detected capacity change from 0 to 2048 [ 378.591980][T11560] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 378.639889][T11555] NILFS (loop7): unrecognized mount option "˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰" [ 378.719641][T11540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.761433][T11540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.784015][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.799973][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.812515][ T5134] usb 5-1: USB disconnect, device number 20 [ 379.189673][T11573] netlink: 'syz.8.2555': attribute type 3 has an invalid length. [ 379.270364][T11573] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2555'. [ 379.321826][T11578] Failed to get privilege flags for destination (handle=0x2:0x0) [ 379.388926][ T5134] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 379.580834][ T5134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.611034][ T5134] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.40 [ 379.639732][T11584] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 379.658218][ T5134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.700891][ T5134] usb 5-1: config 0 descriptor?? [ 379.786174][ T4282] Bluetooth: hci6: urb ffff888028dbf900 submission failed (2) [ 379.789701][T11559] loop1: detected capacity change from 0 to 32768 [ 379.917453][ T6482] usb 5-1: USB disconnect, device number 21 [ 379.936677][T11559] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 380.353749][T11606] loop8: detected capacity change from 0 to 512 [ 380.391976][ T4258] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 380.424757][T11606] EXT4-fs error (device loop8): __ext4_iget:5091: inode #11: block 1: comm syz.8.2567: invalid block [ 380.481325][T11606] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2567: couldn't read orphan inode 11 (err -117) [ 380.519440][T11606] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 380.608867][ T6482] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 380.619310][T11606] EXT4-fs error (device loop8): ext4_add_entry:2486: inode #2: comm syz.8.2567: Directory hole found for htree leaf block 0 [ 380.820853][ T6482] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 380.848337][ T6482] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 380.868112][T10036] EXT4-fs (loop8): unmounting filesystem. [ 380.885700][ T6482] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 380.928302][ T6482] usb 2-1: config 0 interface 0 has no altsetting 0 [ 380.984436][ T6482] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.021387][ T6482] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.050636][T11620] loop3: detected capacity change from 0 to 4096 [ 381.063790][T11626] netlink: 'syz.4.2574': attribute type 15 has an invalid length. [ 381.066389][ T6482] usb 2-1: config 0 interface 0 has no altsetting 0 [ 381.094675][ T6482] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.116201][ T6482] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.158885][ T6482] usb 2-1: config 0 interface 0 has no altsetting 0 [ 381.167546][ T6482] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.179203][ T6482] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.195939][ T6482] usb 2-1: config 0 interface 0 has no altsetting 0 [ 381.222560][ T6482] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.254914][ T6482] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.325069][ T6482] usb 2-1: config 0 interface 0 has no altsetting 0 [ 381.364090][ T6482] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.408073][ T6482] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.410104][T11634] tipc: Started in network mode [ 381.448896][T11634] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 381.462443][ T6482] usb 2-1: config 0 interface 0 has no altsetting 0 [ 381.474996][T11634] tipc: Enabled bearer , priority 10 [ 381.495642][ T6482] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.521437][ T6482] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.571698][ T6482] usb 2-1: config 0 interface 0 has no altsetting 0 [ 381.601652][ T6482] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.618734][ T6482] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.668569][ T6482] usb 2-1: config 0 interface 0 has no altsetting 0 [ 381.698286][ T6482] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 381.743280][ T6482] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 381.795069][ T6482] usb 2-1: Product: syz [ 381.818931][ T6482] usb 2-1: Manufacturer: syz [ 381.833830][ T6482] usb 2-1: SerialNumber: syz [ 381.855635][ T6482] usb 2-1: config 0 descriptor?? [ 381.904374][ T6482] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 382.123527][ T6482] usb 2-1: USB disconnect, device number 12 [ 382.162455][ T6482] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 382.485419][T11658] loop3: detected capacity change from 0 to 2048 [ 382.540125][T11658] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 382.564746][T11658] NILFS (loop3): mounting unchecked fs [ 382.588927][ T5134] tipc: Node number set to 4269801492 [ 382.612339][ T4260] udevd[4260]: incorrect nilfs2 checksum on /dev/loop3 [ 382.621684][T11658] NILFS (loop3): recovery complete [ 382.648211][T11662] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.540519][T11656] loop4: detected capacity change from 0 to 40427 [ 383.589674][T11656] F2FS-fs (loop4): build fault injection attr: rate: 684, type: 0x3ffff [ 383.627843][T11656] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 383.640452][T11656] F2FS-fs (loop4): invalid crc value [ 383.650648][T11656] F2FS-fs (loop4): Found nat_bits in checkpoint [ 383.695544][T11656] F2FS-fs (loop4): Start checkpoint disabled! [ 383.718970][T11656] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 384.053395][T11667] loop8: detected capacity change from 0 to 40427 [ 384.096644][ T46] kworker/u4:3: attempt to access beyond end of device [ 384.096644][ T46] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 384.130767][T11667] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x3ffff [ 384.182184][T11667] F2FS-fs (loop8): invalid crc value [ 384.243000][T11667] F2FS-fs (loop8): Found nat_bits in checkpoint [ 384.358860][T11692] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2595'. [ 384.419533][T11667] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 384.775978][T10036] syz-executor: attempt to access beyond end of device [ 384.775978][T10036] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 385.265097][T11686] loop3: detected capacity change from 0 to 32768 [ 385.379603][T11712] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2603'. [ 385.421981][T11686] XFS (loop3): Mounting V5 Filesystem [ 385.510901][T11686] XFS (loop3): Ending clean mount [ 385.639446][T11686] XFS (loop3): Quotacheck needed: Please wait. [ 385.784707][T11686] XFS (loop3): Quotacheck: Done. [ 385.990917][ T4279] XFS (loop3): Unmounting Filesystem [ 386.530808][T11740] loop7: detected capacity change from 0 to 2048 [ 386.565906][T11740] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 386.602950][T11740] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 386.640150][T11740] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 386.693499][T11740] UDF-fs: Scanning with blocksize 512 failed [ 386.745098][T11740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.177708][T11762] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2622'. [ 387.341304][T11764] siw: device registration error -23 [ 387.859835][T11753] loop3: detected capacity change from 0 to 40427 [ 387.877754][T11753] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 387.905875][T11753] F2FS-fs (loop3): invalid crc value [ 387.928923][T11753] F2FS-fs (loop3): Found nat_bits in checkpoint [ 388.018067][T11753] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 388.039085][ T4313] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 388.182325][ T4279] syz-executor: attempt to access beyond end of device [ 388.182325][ T4279] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 388.241012][ T4313] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 388.258733][ T4313] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.283537][ T4313] usb 9-1: config 0 descriptor?? [ 388.745592][ T4313] [drm] Initialized udl 0.0.1 20120220 for 9-1:0.0 on minor 2 [ 388.755449][T11791] mkiss: ax0: crc mode is auto. [ 388.768204][ T4313] [drm] Initialized udl on minor 2 [ 388.937791][ T4313] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 388.958913][ T4313] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 388.979143][ T4313] usb 9-1: USB disconnect, device number 8 [ 388.985715][ T5147] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 388.995346][ T5147] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 389.020043][ T5147] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 389.636655][T11797] loop1: detected capacity change from 0 to 4096 [ 389.701023][T11797] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 389.751667][T11797] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 389.779585][T11797] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 389.833387][T11797] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 389.938932][ T4313] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 389.951082][T11797] ntfs: volume version 3.1. [ 389.997199][T11797] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp852. You might want to try to use the mount option nls=utf8. [ 390.056177][T11797] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 390.075525][T11797] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp852. You might want to try to use the mount option nls=utf8. [ 390.137896][T11797] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 390.150564][T11811] loop8: detected capacity change from 0 to 136 [ 390.159481][ T4313] usb 5-1: Using ep0 maxpacket: 16 [ 390.167448][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.189930][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.201921][ T4313] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 390.225747][T11811] Attempt to read inode for relocated directory [ 390.253656][ T4313] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 390.274563][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.308084][ T4313] usb 5-1: config 0 descriptor?? [ 390.576988][T11816] siw: device registration error -23 [ 390.714700][T11821] loop8: detected capacity change from 0 to 4096 [ 390.733651][ T4313] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 390.757323][ T4313] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 390.771691][ T4313] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 390.793651][T11822] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.815696][ T4313] microsoft 0003:045E:07DA.0018: No inputs registered, leaving [ 390.864484][ T4313] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 390.879007][ T6477] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 390.912000][ T4313] microsoft 0003:045E:07DA.0018: no inputs found [ 390.935724][ T4313] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 390.975820][ T4313] usb 5-1: USB disconnect, device number 22 [ 391.070544][ T6477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 391.070586][ T6477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.070623][ T6477] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 391.070650][ T6477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.072744][ T6477] usb 4-1: config 0 descriptor?? [ 391.074976][ T6477] hub 4-1:0.0: USB hub found [ 391.223973][T11827] fido_id[11827]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 391.279280][ T6477] hub 4-1:0.0: 1 port detected [ 391.485912][ T6477] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 391.494257][ T6477] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 391.505508][ T6477] usbhid 4-1:0.0: can't add hid device: -71 [ 391.511687][ T6477] usbhid: probe of 4-1:0.0 failed with error -71 [ 391.549691][ T6477] usb 4-1: USB disconnect, device number 17 [ 392.178936][T11851] netlink: 'syz.3.2657': attribute type 25 has an invalid length. [ 392.209736][T11851] netlink: 'syz.3.2657': attribute type 25 has an invalid length. [ 392.561764][T11863] loop8: detected capacity change from 0 to 128 [ 392.599277][T11863] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 392.611244][T11865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2669'. [ 392.641577][T11863] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.653634][T11861] loop1: detected capacity change from 0 to 4096 [ 393.228783][ T6477] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 393.389981][T11875] loop4: detected capacity change from 0 to 8192 [ 393.418715][T11875] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 393.433219][ T6477] usb 2-1: Using ep0 maxpacket: 32 [ 393.440676][ T6477] usb 2-1: config 0 has an invalid interface number: 71 but max is 0 [ 393.446239][T11875] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 393.449368][ T6477] usb 2-1: config 0 has no interface number 0 [ 393.475268][ T6477] usb 2-1: config 0 interface 71 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.498984][ T6477] usb 2-1: config 0 interface 71 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.509538][ T6477] usb 2-1: config 0 interface 71 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.516856][T11875] REISERFS (device loop4): using ordered data mode [ 393.522867][ T6477] usb 2-1: config 0 interface 71 has no altsetting 0 [ 393.522911][ T6477] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 393.545559][ T6477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.563706][ T6477] usb 2-1: config 0 descriptor?? [ 393.593465][T11875] reiserfs: using flush barriers [ 393.624090][T11875] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 393.689290][T11875] REISERFS (device loop4): checking transaction log (loop4) [ 393.718562][T11869] loop8: detected capacity change from 0 to 32768 [ 393.734253][T11875] REISERFS (device loop4): Using r5 hash to sort names [ 393.745279][T11869] XFS: attr2 mount option is deprecated. [ 393.745322][T11875] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 393.824942][T11873] loop3: detected capacity change from 0 to 32768 [ 393.881598][T11869] XFS (loop8): Mounting V5 Filesystem [ 393.929093][T11873] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 393.929093][T11873] [ 393.943950][T11873] ERROR: (device loop3): remounting filesystem as read-only [ 393.944513][T11869] XFS (loop8): Ending clean mount [ 393.951712][T11873] ialloc: diAlloc returned -5! [ 393.995232][ T6477] uclogic 0003:28BD:0933.0019: interface is invalid, ignoring [ 394.004143][T11869] XFS (loop8): Quotacheck needed: Please wait. [ 394.107073][T11869] XFS (loop8): Quotacheck: Done. [ 394.278202][ T4257] usb 2-1: USB disconnect, device number 13 [ 394.288120][T10036] XFS (loop8): Unmounting Filesystem [ 394.954054][T11900] loop8: detected capacity change from 0 to 64 [ 395.459514][T11919] sch_fq: defrate 4294967295 ignored. [ 395.568792][ T6482] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 395.761269][ T6482] usb 4-1: Using ep0 maxpacket: 8 [ 395.768442][ T6482] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.808745][ T6482] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 395.838744][ T6482] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 395.858241][ T6482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.885290][ T6482] usb 4-1: config 0 descriptor?? [ 395.898374][T11929] loop8: detected capacity change from 0 to 512 [ 395.922338][T11929] EXT4-fs: Ignoring removed nobh option [ 395.975093][T11929] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 395.989011][T11929] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 396.113702][T10036] EXT4-fs (loop8): unmounting filesystem. [ 396.289284][T11923] loop1: detected capacity change from 0 to 32768 [ 396.315158][ T6482] cypress 0003:04B4:DE61.001A: ignoring exceeding usage max [ 396.336531][ T6482] cypress 0003:04B4:DE61.001A: report_id 3177015884 is invalid [ 396.355700][T11923] JBD2: Ignoring recovery information on journal [ 396.438121][ T6482] cypress 0003:04B4:DE61.001A: item 0 4 1 8 parsing failed [ 396.465654][T11923] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 396.504137][ T6482] cypress 0003:04B4:DE61.001A: parse failed [ 396.553589][ T6482] cypress: probe of 0003:04B4:DE61.001A failed with error -22 [ 396.603373][ T6482] usb 4-1: USB disconnect, device number 18 [ 396.750469][ T4269] ocfs2: Unmounting device (7,1) on (node local) [ 396.776371][T11946] loop4: detected capacity change from 0 to 256 [ 396.807192][T11946] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 397.217096][T11957] loop4: detected capacity change from 0 to 1024 [ 397.372456][T11960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2708'. [ 397.686625][T11970] loop1: detected capacity change from 0 to 256 [ 397.881835][T11978] loop8: detected capacity change from 0 to 64 [ 397.954227][T11978] hfs: hfs: Invalid key length: 94 [ 398.125745][T10036] hfs: node 4:3 still has 1 user(s)! [ 398.367593][T11988] loop4: detected capacity change from 0 to 256 [ 398.406280][T11988] FAT-fs (loop4): Directory bread(block 64) failed [ 398.413351][T11988] FAT-fs (loop4): Directory bread(block 65) failed [ 398.425071][T11988] FAT-fs (loop4): Directory bread(block 66) failed [ 398.436123][T11988] FAT-fs (loop4): Directory bread(block 67) failed [ 398.446871][T11988] FAT-fs (loop4): Directory bread(block 68) failed [ 398.458543][T11990] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2722'. [ 398.462714][T11988] FAT-fs (loop4): Directory bread(block 69) failed [ 398.485614][T11988] FAT-fs (loop4): Directory bread(block 70) failed [ 398.495549][T11988] FAT-fs (loop4): Directory bread(block 71) failed [ 398.509955][T11988] FAT-fs (loop4): Directory bread(block 72) failed [ 398.537950][T11988] FAT-fs (loop4): Directory bread(block 73) failed [ 398.568861][ T5147] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 398.761269][ T5147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 398.780578][ T5147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.799998][ T5147] usb 2-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 398.827269][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.862634][ T5147] usb 2-1: config 0 descriptor?? [ 399.275877][T12003] loop4: detected capacity change from 0 to 4096 [ 399.298802][ T5147] hid-generic 0003:0925:8066.001B: unbalanced collection at end of report description [ 399.317518][ T5147] hid-generic: probe of 0003:0925:8066.001B failed with error -22 [ 399.435558][T11993] loop3: detected capacity change from 0 to 40427 [ 399.492219][T11993] F2FS-fs (loop3): invalid crc value [ 399.510524][T11993] F2FS-fs (loop3): Found nat_bits in checkpoint [ 399.539183][ T6477] usb 2-1: USB disconnect, device number 14 [ 399.657134][T11993] F2FS-fs (loop3): Start checkpoint disabled! [ 399.677348][T11993] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 399.863961][T12000] loop8: detected capacity change from 0 to 40427 [ 399.918675][T12000] F2FS-fs (loop8): Found nat_bits in checkpoint [ 399.972288][T12000] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2 [ 399.989490][T12000] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 400.004156][ T9] kworker/u4:0: attempt to access beyond end of device [ 400.004156][ T9] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 400.916248][T12036] loop8: detected capacity change from 0 to 512 [ 400.983172][T12038] program syz.1.2752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.016619][T12036] EXT4-fs (loop8): 1 truncate cleaned up [ 401.030608][T12036] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 401.134455][ T26] audit: type=1800 audit(1774953116.755:46): pid=12036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2740" name="file0" dev="overlay" ino=13 res=0 errno=0 [ 401.159167][ T5147] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 401.280347][T10036] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 401.334653][T10036] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 465: padding at end of block bitmap is not set [ 401.360763][ T5147] usb 4-1: Using ep0 maxpacket: 8 [ 401.371924][T10036] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 401.384141][ T5147] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 401.394415][ T5147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.403000][T10036] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 234881024 (level 0) [ 401.417316][ T5147] usb 4-1: Product: syz [ 401.422210][ T5147] usb 4-1: Manufacturer: syz [ 401.426865][ T5147] usb 4-1: SerialNumber: syz [ 401.448049][T10036] EXT4-fs (loop8): unmounting filesystem. [ 401.673486][T12057] loop4: detected capacity change from 0 to 64 [ 401.806605][T12059] loop8: detected capacity change from 0 to 512 [ 401.863141][T12059] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 401.886290][ T5147] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 401.904899][ T5147] mxuport: probe of 4-1:254.0 failed with error -5 [ 401.927712][ T4276] hfs: node 4:3 still has 1 user(s)! [ 401.958517][T12059] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.122585][ T5147] usb 4-1: USB disconnect, device number 19 [ 402.138426][T12048] could not allocate digest TFM handle sha3-224-ce [ 402.270089][T10036] EXT4-fs (loop8): unmounting filesystem. [ 402.340577][ T4286] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 402.354707][ T4286] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 402.364047][ T4286] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 402.376104][ T4286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 402.407784][ T4286] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 402.415362][ T4286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 402.494599][T12070] device netdevsim0 entered promiscuous mode [ 402.858491][T12076] loop8: detected capacity change from 0 to 2048 [ 402.898480][T12076] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.954933][T12083] loop4: detected capacity change from 0 to 8 [ 402.956198][T12065] chnl_net:caif_netlink_parms(): no params data found [ 402.987797][T12083] SQUASHFS error: zstd decompression failed, data probably corrupt [ 402.997274][T12083] SQUASHFS error: Failed to read block 0x60: -5 [ 403.009006][T12083] SQUASHFS error: zstd decompression failed, data probably corrupt [ 403.017149][T12083] SQUASHFS error: Failed to read block 0x60: -5 [ 403.231481][T12086] program syz.4.2760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.273579][T12068] loop1: detected capacity change from 0 to 32768 [ 403.374654][T12092] device vlan2 entered promiscuous mode [ 403.388968][T12092] device macvtap0 entered promiscuous mode [ 403.434714][T12068] XFS (loop1): Mounting V5 Filesystem [ 403.523610][T12065] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.543801][T12065] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.603972][T12065] device bridge_slave_0 entered promiscuous mode [ 403.649522][T12065] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.669909][T12068] XFS (loop1): Ending clean mount [ 403.677806][T12065] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.723693][T12065] device bridge_slave_1 entered promiscuous mode [ 403.736433][T12068] XFS (loop1): Quotacheck needed: Please wait. [ 403.900828][T12065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.913161][T12068] XFS (loop1): Quotacheck: Done. [ 403.932661][T12065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.989183][T12109] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 404.105331][T12065] team0: Port device team_slave_0 added [ 404.134938][ T4269] XFS (loop1): Unmounting Filesystem [ 404.145862][T12065] team0: Port device team_slave_1 added [ 404.225381][T12065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.237404][T12065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.264526][T12065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.293252][T12065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.308399][T12115] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2769'. [ 404.326470][T12065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.411156][T12065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.459970][ T4282] Bluetooth: hci6: command 0x0409 tx timeout [ 404.577078][T12103] loop3: detected capacity change from 0 to 32768 [ 404.611758][T12103] [ 404.611758][T12103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 404.611758][T12103] [ 404.633174][T12065] device hsr_slave_0 entered promiscuous mode [ 404.650345][T12065] device hsr_slave_1 entered promiscuous mode [ 404.672704][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2772'. [ 404.699245][T12065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.706895][T12065] Cannot create hsr debugfs directory [ 404.851415][ T4279] [ 404.851415][ T4279] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 404.851415][ T4279] [ 404.897147][ T4279] [ 404.897147][ T4279] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 404.897147][ T4279] [ 405.482769][T12065] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 405.521294][T12065] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 405.580326][T12065] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 405.612677][T12065] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 405.897683][T12149] loop4: detected capacity change from 0 to 2048 [ 405.912276][T12065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.932900][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 405.942495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 405.976654][T12065] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.027754][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 406.047512][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.078237][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.085491][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.145138][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 406.183561][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 406.215861][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 406.255796][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.263047][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.298268][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 406.336637][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 406.357535][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 406.396406][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 406.429305][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 406.445478][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 406.495596][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 406.525382][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 406.538885][ T4282] Bluetooth: hci6: command 0x041b tx timeout [ 406.563764][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 406.614177][T12065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.654774][T12065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 406.680501][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 406.696990][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 406.767647][T12142] loop3: detected capacity change from 0 to 40427 [ 406.817351][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2794'. [ 406.817716][T12142] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 406.861640][T12142] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 406.952731][T12142] F2FS-fs (loop3): Found nat_bits in checkpoint [ 407.033522][T12175] loop8: detected capacity change from 0 to 8 [ 407.119911][T12142] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 407.126133][T12175] SQUASHFS error: Failed to read block 0x18e: -5 [ 407.139084][T12175] SQUASHFS error: Unable to read metadata cache entry [18c] [ 407.161431][T12142] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 407.549011][ T4279] syz-executor: attempt to access beyond end of device [ 407.549011][ T4279] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 407.628497][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 407.655039][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 407.684513][T12187] loop4: detected capacity change from 0 to 1024 [ 407.725728][T12065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.807473][T12187] hfsplus: bad catalog entry type [ 407.962217][ T53] hfsplus: b-tree write err: -5, ino 25 [ 407.968018][ T53] hfsplus: b-tree write err: -5, ino 4 [ 407.986391][ T53] hfsplus: b-tree write err: -5, ino 2 [ 408.618754][ T4282] Bluetooth: hci6: command 0x040f tx timeout [ 409.088401][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 409.110070][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 409.168549][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 409.181108][T12197] loop8: detected capacity change from 0 to 32768 [ 409.197386][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 409.219860][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 409.242841][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 409.264682][T12065] device veth0_vlan entered promiscuous mode [ 409.322691][T12065] device veth1_vlan entered promiscuous mode [ 409.388992][ T5147] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 409.419852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 409.436035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 409.462250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 409.490393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 409.539925][T12065] device veth0_macvtap entered promiscuous mode [ 409.584492][T12065] device veth1_macvtap entered promiscuous mode [ 409.590534][ T5147] usb 5-1: Using ep0 maxpacket: 32 [ 409.601647][ T5147] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 409.641515][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.675560][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.685038][ T5147] usb 5-1: Product: syz [ 409.712416][ T5147] usb 5-1: Manufacturer: syz [ 409.717092][ T5147] usb 5-1: SerialNumber: syz [ 409.726884][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.767543][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.789013][ T5147] usb 5-1: config 0 descriptor?? [ 409.811074][T12205] loop3: detected capacity change from 0 to 40427 [ 409.817675][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.854976][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.881310][T12205] F2FS-fs (loop3): invalid crc value [ 409.921296][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.953326][T12205] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 409.978753][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.035752][T12234] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 410.044626][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.088828][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.148819][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.207542][ T5147] airspy 5-1:0.0: usb_control_msg() failed -71 request 0a [ 410.225171][ T5147] airspy 5-1:0.0: Could not detect board [ 410.234175][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.255620][ T5147] airspy: probe of 5-1:0.0 failed with error -71 [ 410.291448][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.319881][T12065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.320703][ T5147] usb 5-1: USB disconnect, device number 23 [ 410.344498][T12205] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 410.357818][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 410.381096][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 410.403101][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 410.422115][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 410.453619][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.472853][ T26] audit: type=1800 audit(1774953126.095:47): pid=12205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2807" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 410.478746][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.561648][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.583945][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.597835][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.614209][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.636301][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.659572][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.677941][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.698704][ T4282] Bluetooth: hci6: command 0x0419 tx timeout [ 410.703070][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.724066][T12065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.738901][T12065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.752577][ T4279] syz-executor: attempt to access beyond end of device [ 410.752577][ T4279] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 410.791199][T12065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.816786][T12242] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.825900][T12242] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.834672][T12242] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.843444][T12242] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.921077][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 410.949759][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 410.974380][T12065] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.998841][T12065] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.026554][T12065] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.064287][T12065] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.362752][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.388033][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.417996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 411.496197][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.533769][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.615483][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 411.641580][T12262] loop1: detected capacity change from 0 to 8 [ 412.013149][T12273] loop8: detected capacity change from 0 to 1024 [ 412.160549][T12273] hfsplus: bad catalog entry type [ 412.311552][ T1177] hfsplus: b-tree write err: -5, ino 25 [ 412.317434][ T1177] hfsplus: b-tree write err: -5, ino 4 [ 412.333493][ T1177] hfsplus: b-tree write err: -5, ino 2 [ 412.515065][T12289] loop8: detected capacity change from 0 to 256 [ 412.635715][T12289] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 412.895957][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2836'. [ 412.931799][T12298] device erspan0 entered promiscuous mode [ 412.949682][T12298] device erspan0 left promiscuous mode [ 413.429309][T12313] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2842'. [ 413.826596][T12327] loop9: detected capacity change from 0 to 512 [ 413.903264][T12327] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 413.938747][T12327] UDF-fs: Scanning with blocksize 512 failed [ 413.950725][T12327] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 413.968419][T12327] UDF-fs: Scanning with blocksize 1024 failed [ 413.992435][T12327] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 414.002771][T12327] UDF-fs: Scanning with blocksize 2048 failed [ 414.019641][T12327] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 414.040525][T12327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 414.173006][T12331] loop3: detected capacity change from 0 to 2048 [ 414.201847][T12331] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 414.586979][T12337] loop3: detected capacity change from 0 to 2048 [ 414.621542][T12337] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 414.677235][T12323] loop8: detected capacity change from 0 to 32768 [ 414.692496][T12337] UDF-fs: unknown compression code (195) [ 414.823646][T12323] XFS (loop8): Mounting V5 Filesystem [ 414.882213][T12353] loop9: detected capacity change from 0 to 256 [ 414.976005][T12353] exfat: Deprecated parameter 'utf8' [ 414.981781][T12323] XFS (loop8): Ending clean mount [ 415.007194][T12353] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 415.024055][T12323] XFS (loop8): Quotacheck needed: Please wait. [ 415.120168][T12323] XFS (loop8): Quotacheck: Done. [ 415.255860][T12355] netlink: 'syz.3.2859': attribute type 11 has an invalid length. [ 415.384466][T10036] XFS (loop8): Unmounting Filesystem [ 415.397030][T12345] loop4: detected capacity change from 0 to 32768 [ 415.615816][T12361] loop9: detected capacity change from 0 to 1024 [ 415.646518][T12361] EXT4-fs: Ignoring removed i_version option [ 415.668767][T12361] EXT4-fs: inline encryption not supported [ 415.694046][T12361] EXT4-fs (loop9): Test dummy encryption mode enabled [ 415.754676][T12361] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 415.779677][T12361] EXT4-fs (loop9): Online defrag not supported with bigalloc [ 415.877721][T12065] EXT4-fs (loop9): unmounting filesystem. [ 415.888107][T12367] loop3: detected capacity change from 0 to 64 [ 415.941078][T12367] hfs: filesystem is marked locked, mounting read-only. [ 416.015408][T12367] hfs: walked past end of dir [ 416.473260][T12380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2863'. [ 416.512943][T12380] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2863'. [ 416.997314][T12392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2879'. [ 417.137161][T12396] genirq: Flags mismatch irq 4. 00000000 (pcmmio) vs. 00000000 (ttyS0) [ 417.386597][T12406] loop9: detected capacity change from 0 to 256 [ 417.538338][T12406] FAT-fs (loop9): Directory bread(block 64) failed [ 417.558689][T12406] FAT-fs (loop9): Directory bread(block 65) failed [ 417.565396][T12406] FAT-fs (loop9): Directory bread(block 66) failed [ 417.598875][T12406] FAT-fs (loop9): Directory bread(block 67) failed [ 417.626914][T12406] FAT-fs (loop9): Directory bread(block 68) failed [ 417.665061][T12406] FAT-fs (loop9): Directory bread(block 69) failed [ 417.676387][T12406] FAT-fs (loop9): Directory bread(block 70) failed [ 417.702039][T12406] FAT-fs (loop9): Directory bread(block 71) failed [ 417.709888][T12406] FAT-fs (loop9): Directory bread(block 72) failed [ 417.716607][T12406] FAT-fs (loop9): Directory bread(block 73) failed [ 417.815437][T12414] loop8: detected capacity change from 0 to 2048 [ 417.927190][T12414] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 417.979755][T12414] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 418.028741][T12414] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 418.048977][T12414] UDF-fs: Scanning with blocksize 512 failed [ 418.082370][T12414] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.479858][T12422] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2894'. [ 418.537644][T12400] loop3: detected capacity change from 0 to 40427 [ 418.580887][T12400] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 418.600317][T12400] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 418.651724][T12400] F2FS-fs (loop3): invalid crc value [ 418.667540][ T4257] kernel write not supported for file /1350/net/rt_cache (pid: 4257 comm: kworker/1:3) [ 418.690458][T12400] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 418.788882][ T6480] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 418.849249][T12400] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 418.878488][T12400] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 419.010624][ T6480] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.041640][ T6480] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.070078][ T6480] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 419.116563][ T6480] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 419.146217][ T6480] usb 10-1: SerialNumber: syz [ 419.151815][ T4279] syz-executor: attempt to access beyond end of device [ 419.151815][ T4279] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 419.374601][ T6480] usb 10-1: 0:2 : does not exist [ 419.395999][ T6480] usb 10-1: unit 255 not found! [ 419.443167][ T6480] usb 10-1: USB disconnect, device number 2 [ 419.673122][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.022690][T12463] loop4: detected capacity change from 0 to 1024 [ 420.076634][T12469] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2913'. [ 420.099269][T12463] hfsplus: bad catalog entry type [ 420.249130][ T1177] hfsplus: b-tree write err: -5, ino 25 [ 420.254973][ T1177] hfsplus: b-tree write err: -5, ino 4 [ 420.282567][ T1177] hfsplus: b-tree write err: -5, ino 2 [ 420.360984][T12472] loop9: detected capacity change from 0 to 4096 [ 421.282264][T12506] sctp: [Deprecated]: syz.3.2929 (pid 12506) Use of int in max_burst socket option. [ 421.282264][T12506] Use struct sctp_assoc_value instead [ 421.676095][T12516] loop4: detected capacity change from 0 to 1024 [ 421.703122][T12522] loop9: detected capacity change from 0 to 256 [ 421.708517][T12516] EXT4-fs: Ignoring removed orlov option [ 421.724409][T12520] loop8: detected capacity change from 0 to 256 [ 421.730558][T12522] exfat: Deprecated parameter 'utf8' [ 421.737288][T12522] exfat: Deprecated parameter 'namecase' [ 421.742915][T12521] loop3: detected capacity change from 0 to 2048 [ 421.757738][T12522] exfat: Deprecated parameter 'namecase' [ 421.778957][T12522] exfat: Deprecated parameter 'utf8' [ 421.814946][T12522] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 421.857514][T12516] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 421.880622][T12521] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 421.907341][T12521] EXT4-fs error (device loop3): ext4_find_extent:945: inode #2: comm syz.3.2937: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 421.950982][T12521] EXT4-fs (loop3): Remounting filesystem read-only [ 422.001053][ T26] audit: type=1800 audit(1774953137.625:48): pid=12522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2938" name="file1" dev="loop9" ino=1048755 res=0 errno=0 [ 422.086214][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 422.149823][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 422.202867][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2939'. [ 422.566642][T12542] loop4: detected capacity change from 0 to 64 [ 422.585545][T12540] loop9: detected capacity change from 0 to 512 [ 422.648372][T12540] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 422.667813][T12540] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 422.683117][T12539] loop8: detected capacity change from 0 to 4096 [ 422.684680][T12540] System zones: 1-12 [ 422.697944][T12540] EXT4-fs error (device loop9): ext4_iget_extra_inode:4752: inode #15: comm syz.9.2945: corrupted in-inode xattr [ 422.734417][T12540] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2945: couldn't read orphan inode 15 (err -117) [ 422.832890][T12540] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 422.955677][T12539] ntfs3: loop8: failed to convert "0080" to cp737 [ 422.997098][T12539] ntfs3: loop8: failed to convert name for inode 1e. [ 423.090740][T12065] EXT4-fs (loop9): unmounting filesystem. [ 423.535232][T12561] loop4: detected capacity change from 0 to 64 [ 423.556661][T12563] loop8: detected capacity change from 0 to 1024 [ 423.576896][T12561] hfs: gid requires an argument [ 423.605002][T12561] hfs: unable to parse mount options [ 423.631814][T12563] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 423.730334][ T6470] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 423.766260][T10036] EXT4-fs (loop8): unmounting filesystem. [ 423.949115][ T6470] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.976338][ T6470] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.994039][ T6470] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 424.006169][ T6470] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 424.014853][ T6470] usb 10-1: Manufacturer: syz [ 424.022993][ T6470] usb 10-1: config 0 descriptor?? [ 424.048862][ T6482] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 424.127003][T12578] device bridge0 entered promiscuous mode [ 424.135368][T12578] device macsec1 entered promiscuous mode [ 424.268984][ T6482] usb 5-1: Using ep0 maxpacket: 16 [ 424.284821][ T6482] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 424.315935][ T6482] usb 5-1: config 1 has no interface number 1 [ 424.335329][ T6482] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 424.350039][ T6482] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 424.364242][ T6482] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 424.390581][ T6482] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.399877][ T6482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.407945][ T6482] usb 5-1: Product: syz [ 424.412296][ T6482] usb 5-1: Manufacturer: syz [ 424.416976][ T6482] usb 5-1: SerialNumber: syz [ 424.645430][ T6470] uclogic 0003:256C:006D.001C: failed retrieving Huion firmware version: -71 [ 424.684399][ T6482] usb 5-1: failed to enable PITCH for EP 0x82 [ 424.699970][ T6470] uclogic 0003:256C:006D.001C: failed probing parameters: -71 [ 424.707709][ T6482] usb 5-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 424.733023][ T6470] uclogic: probe of 0003:256C:006D.001C failed with error -71 [ 424.798977][ T6482] usb 5-1: USB disconnect, device number 24 [ 424.815436][ T6470] usb 10-1: USB disconnect, device number 3 [ 425.006824][T12584] loop8: detected capacity change from 0 to 32768 [ 425.044525][T12584] JBD2: Ignoring recovery information on journal [ 425.131173][T12584] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 425.178278][T12584] OCFS2: ERROR (device loop8): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74) [ 425.228987][T12584] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 425.278917][T12584] OCFS2: File system is now read-only. [ 425.284461][T12584] (syz.8.2965,12584,1):_ocfs2_free_suballoc_bits:2489 ERROR: status = -30 [ 425.330670][T12584] (syz.8.2965,12584,1):ocfs2_remove_inode:699 ERROR: status = -30 [ 425.339346][T12584] (syz.8.2965,12584,1):ocfs2_wipe_inode:821 ERROR: status = -30 [ 425.348945][T12584] (syz.8.2965,12584,1):ocfs2_delete_inode:1082 ERROR: status = -30 [ 425.442929][T10036] ocfs2: Unmounting device (7,8) on (node local) [ 425.617632][T12601] program syz.3.2972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.778304][T12605] loop4: detected capacity change from 0 to 1024 [ 425.798228][T12605] EXT4-fs: inline encryption not supported [ 425.834633][T12605] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 425.957901][T12605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 426.047995][ T26] audit: type=1800 audit(1774953141.665:49): pid=12605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2974" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 426.222999][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 426.490801][T12628] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2980'. [ 426.524717][T12628] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2980'. [ 426.724171][T12638] ALSA: mixer_oss: invalid OSS volume '' [ 427.267787][T12654] 9pnet_fd: p9_fd_create_tcp (12654): problem binding to privport [ 427.278010][T12656] loop3: detected capacity change from 0 to 16 [ 427.329763][T12656] erofs: (device loop3): mounted with root inode @ nid 36. [ 427.379245][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2995'. [ 427.692691][T12668] loop8: detected capacity change from 0 to 64 [ 427.701747][T12664] loop9: detected capacity change from 0 to 4096 [ 427.897893][T12664] ntfs3: loop9: ino=21, "file1" mmap(write) compressed not supported [ 427.964476][T12065] ntfs3: loop9: ntfs_evict_inode r=5 failed, -22. [ 428.018939][T12065] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 428.436077][ T26] audit: type=1326 audit(1774953144.055:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.9.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915d99c819 code=0x7ffc0000 [ 428.450344][T12682] loop3: detected capacity change from 0 to 4096 [ 428.507841][ T26] audit: type=1326 audit(1774953144.085:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.9.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f915d95d04e code=0x7ffc0000 [ 428.540218][T12682] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 428.599101][ T26] audit: type=1326 audit(1774953144.085:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.9.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915d99c819 code=0x7ffc0000 [ 428.693056][ T26] audit: type=1326 audit(1774953144.085:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.9.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915d99c819 code=0x7ffc0000 [ 428.787040][ T26] audit: type=1326 audit(1774953144.095:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.9.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f915d99c819 code=0x7ffc0000 [ 428.915364][ T26] audit: type=1326 audit(1774953144.155:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.9.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915d99c819 code=0x7ffc0000 [ 428.963459][T12692] loop9: detected capacity change from 0 to 4096 [ 428.983711][T12696] loop8: detected capacity change from 0 to 128 [ 428.998988][ T26] audit: type=1326 audit(1774953144.155:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.9.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915d99c819 code=0x7ffc0000 [ 429.024593][T12692] ntfs: (device loop9): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 429.050047][T12692] ntfs: (device loop9): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 429.143822][ T4282] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 429.156826][ T4282] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 429.170850][ T4282] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 429.181638][ T4282] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 429.192758][ T4282] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 429.218967][T12692] ntfs: (device loop9): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 429.239551][ T4282] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 429.363612][T12692] ntfs: volume version 3.1. [ 429.981802][T12697] chnl_net:caif_netlink_parms(): no params data found [ 430.273660][T12697] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.297925][T12697] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.333405][T12697] device bridge_slave_0 entered promiscuous mode [ 430.369210][T12733] mkiss: ax0: crc mode is auto. [ 430.378377][T12697] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.412631][T12697] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.442411][T12697] device bridge_slave_1 entered promiscuous mode [ 430.506454][T12697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.537162][T12697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.657362][T12697] team0: Port device team_slave_0 added [ 430.680568][T12697] team0: Port device team_slave_1 added [ 430.810196][T12697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.817393][T12697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.949578][T12697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.997165][T12697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.008738][T12697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.104499][T12697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.259536][ T4286] Bluetooth: hci7: command 0x0409 tx timeout [ 431.301833][T12697] device hsr_slave_0 entered promiscuous mode [ 431.330606][T12763] loop3: detected capacity change from 0 to 2048 [ 431.331926][T12697] device hsr_slave_1 entered promiscuous mode [ 431.380809][T12697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.430078][T12763] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 431.442115][T12697] Cannot create hsr debugfs directory [ 431.468883][T12763] ext4 filesystem being mounted at /646/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.677866][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 431.928993][ T5147] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 432.087500][T12757] loop8: detected capacity change from 0 to 32768 [ 432.128691][ T5147] usb 10-1: Using ep0 maxpacket: 16 [ 432.136623][ T5147] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.179433][ T5147] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.230489][ T5147] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.259024][ T5147] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.320434][ T5147] usb 10-1: Product: syz [ 432.339577][ T5147] usb 10-1: Manufacturer: syz [ 432.344341][ T5147] usb 10-1: SerialNumber: syz [ 432.621441][ T5147] usb 10-1: 0:2 : does not exist [ 432.670429][ T5147] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 432.729053][ T5147] usb 10-1: USB disconnect, device number 4 [ 432.970307][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.338920][ T4286] Bluetooth: hci7: command 0x041b tx timeout [ 433.520458][T12789] loop4: detected capacity change from 0 to 32768 [ 433.684643][T12789] XFS (loop4): Mounting V5 Filesystem [ 433.754599][T12814] xt_hashlimit: Unknown mode mask 883EBBD7, kernel too old? [ 433.811088][T12789] XFS (loop4): Ending clean mount [ 433.864107][T12817] loop9: detected capacity change from 0 to 1024 [ 433.927771][T12821] loop3: detected capacity change from 0 to 256 [ 434.002306][T12817] hfsplus: bad catalog entry type [ 434.009629][T12821] FAT-fs (loop3): Directory bread(block 64) failed [ 434.017441][T12821] FAT-fs (loop3): Directory bread(block 65) failed [ 434.065891][T12821] FAT-fs (loop3): Directory bread(block 66) failed [ 434.089293][T12821] FAT-fs (loop3): Directory bread(block 67) failed [ 434.106322][T12821] FAT-fs (loop3): Directory bread(block 68) failed [ 434.123622][T12821] FAT-fs (loop3): Directory bread(block 69) failed [ 434.130936][T12821] FAT-fs (loop3): Directory bread(block 70) failed [ 434.149332][ T46] hfsplus: b-tree write err: -5, ino 25 [ 434.155180][ T46] hfsplus: b-tree write err: -5, ino 4 [ 434.174002][ T4276] XFS (loop4): Unmounting Filesystem [ 434.189266][T12821] FAT-fs (loop3): Directory bread(block 71) failed [ 434.195910][T12821] FAT-fs (loop3): Directory bread(block 72) failed [ 434.220739][ T46] hfsplus: b-tree write err: -5, ino 2 [ 434.226408][ T46] hfsplus: b-tree write err: -5, ino 26 [ 434.238741][T12821] FAT-fs (loop3): Directory bread(block 73) failed [ 434.292501][T12697] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 434.361239][T12697] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 434.407074][T12697] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 434.481415][T12697] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 434.845975][T12697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.902667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 434.932703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 434.961976][T12697] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.039566][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 435.069579][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 435.109393][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.116654][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.179173][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 435.210425][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 435.259818][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 435.275040][T12840] loop4: detected capacity change from 0 to 128 [ 435.289499][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.296732][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.315350][T12840] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 435.359346][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 435.369536][T12840] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 435.391287][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 435.419083][ T4286] Bluetooth: hci7: command 0x040f tx timeout [ 435.446131][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 435.502565][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 435.549328][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 435.603750][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 435.633555][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 435.675770][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 435.701816][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 435.763540][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 435.791773][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 435.812187][T12697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 435.845216][T12849] batman_adv: batadv0: Adding interface: gretap1 [ 435.879501][T12849] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.919060][T12849] batman_adv: batadv0: Interface activated: gretap1 [ 436.125482][T12856] loop3: detected capacity change from 0 to 1024 [ 436.129877][T12857] netlink: 332 bytes leftover after parsing attributes in process `syz.8.3077'. [ 436.182319][T12857] netlink: 'syz.8.3077': attribute type 9 has an invalid length. [ 436.232805][T12857] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3077'. [ 436.291470][T12857] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3077'. [ 436.355794][ T9] hfsplus: b-tree write err: -5, ino 25 [ 436.374695][ T9] hfsplus: b-tree write err: -5, ino 4 [ 436.421566][ T9] hfsplus: b-tree write err: -5, ino 2 [ 437.069048][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 437.080439][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 437.115936][T12697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.228912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 437.260664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 437.333960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 437.351476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 437.374503][T12697] device veth0_vlan entered promiscuous mode [ 437.414740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.450698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 437.488116][T12697] device veth1_vlan entered promiscuous mode [ 437.498981][ T4286] Bluetooth: hci7: command 0x0419 tx timeout [ 437.554260][T12905] loop9: detected capacity change from 0 to 256 [ 437.579703][T12905] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 437.608903][ T5147] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 437.630777][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 437.756823][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 437.768028][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 437.801478][ T5147] usb 5-1: config 0 has no interfaces? [ 437.819688][ T5147] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 437.849742][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 437.858025][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.891685][ T5147] usb 5-1: Product: syz [ 437.891982][T12697] device veth0_macvtap entered promiscuous mode [ 437.895901][ T5147] usb 5-1: Manufacturer: syz [ 437.927605][T12697] device veth1_macvtap entered promiscuous mode [ 437.936383][ T5147] usb 5-1: SerialNumber: syz [ 437.965892][ T5147] usb 5-1: config 0 descriptor?? [ 438.020846][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.059277][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.085369][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.139471][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.188645][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.220354][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.232678][T12916] loop3: detected capacity change from 0 to 1024 [ 438.242991][ T6477] usb 5-1: USB disconnect, device number 25 [ 438.260403][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.302919][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.329865][T12916] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 438.342883][T12916] ext4 filesystem being mounted at /661/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.353875][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.362681][T12917] loop9: detected capacity change from 0 to 4096 [ 438.439113][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.462728][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.468001][T12917] EXT4-fs: inline encryption not supported [ 438.488765][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.528109][T12917] EXT4-fs (loop9): Test dummy encryption mode enabled [ 438.542491][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.567872][T12917] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c018, mo2=0003] [ 438.582680][T12917] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 438.612201][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.660715][T12697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.670102][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 438.678390][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 438.700048][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 438.738893][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 438.769915][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 438.802882][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.870773][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.907420][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.948976][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.968702][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.980805][T12930] loop3: detected capacity change from 0 to 512 [ 439.022723][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.085681][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.147874][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.209372][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.238828][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.288709][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.308812][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.331546][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.366270][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.411387][T12065] EXT4-fs (loop9): unmounting filesystem. [ 439.429086][T12697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.436637][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 439.499839][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 439.537167][T12697] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.578891][T12697] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.587683][T12697] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.630305][T12697] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.910051][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.919007][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.959206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 440.035034][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.053604][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.081079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 440.223527][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.230108][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.346022][T12960] netlink: 'syz.9.3099': attribute type 15 has an invalid length. [ 440.642251][T12968] Failed to get privilege flags for destination (handle=0x2:0x0) [ 440.659134][T12970] loop9: detected capacity change from 0 to 512 [ 440.663754][T12965] loop4: detected capacity change from 0 to 4096 [ 440.734976][T12970] EXT4-fs error (device loop9): __ext4_iget:5091: inode #11: block 1: comm syz.9.3101: invalid block [ 440.908986][T12970] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3101: couldn't read orphan inode 11 (err -117) [ 440.979227][T12970] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 441.081129][T12970] EXT4-fs error (device loop9): ext4_add_entry:2486: inode #2: comm syz.9.3101: Directory hole found for htree leaf block 0 [ 441.129030][ T6482] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 441.315863][T12065] EXT4-fs (loop9): unmounting filesystem. [ 441.323860][ T6482] usb 9-1: config 0 has no interfaces? [ 441.329485][ T6482] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 441.370188][ T6482] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.429929][ T6482] usb 9-1: config 0 descriptor?? [ 441.669882][T12977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.728914][T12977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.769380][ T6470] usb 9-1: USB disconnect, device number 9 [ 441.875067][T13001] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 441.981427][T13003] netlink: 'syz.4.3112': attribute type 3 has an invalid length. [ 442.019376][T13003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3112'. [ 442.369534][ T6470] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 442.591569][ T6470] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.623530][ T6470] usb 9-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.40 [ 442.654995][T13017] loop2: detected capacity change from 0 to 2048 [ 442.664177][ T6470] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.701698][ T6470] usb 9-1: config 0 descriptor?? [ 442.722887][T12991] loop9: detected capacity change from 0 to 32768 [ 442.746420][T13023] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 442.776048][ T4286] Bluetooth: hci8: urb ffff8881452dc700 submission failed (2) [ 442.806056][T12991] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 10 [ 442.860716][T13017] NILFS (loop2): unrecognized mount option "˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰" [ 442.981927][ T6470] usb 9-1: USB disconnect, device number 10 [ 443.806095][T13055] device macvtap0 entered promiscuous mode [ 443.820788][T13053] IPVS: sh: FWM 4 0x00000004 - no destination available [ 443.830618][T13052] device macvtap0 left promiscuous mode [ 444.138257][T13062] loop8: detected capacity change from 0 to 1024 [ 444.263197][T13068] loop3: detected capacity change from 0 to 128 [ 444.439846][T13071] netlink: 7 bytes leftover after parsing attributes in process `syz.9.3136'. [ 444.818356][T13037] loop2: detected capacity change from 0 to 32768 [ 444.845329][T13080] loop9: detected capacity change from 0 to 512 [ 444.964348][T13037] XFS (loop2): Mounting V5 Filesystem [ 445.058469][T13080] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 445.133170][T13080] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 445.182735][T13037] XFS (loop2): Ending clean mount [ 445.436480][T12697] XFS (loop2): Unmounting Filesystem [ 445.606439][T12065] EXT4-fs (loop9): unmounting filesystem. [ 445.814934][T13118] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 445.904780][T13118] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 446.959123][ T6470] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 447.071036][T13127] loop3: detected capacity change from 0 to 32768 [ 447.132048][T13127] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.3152 (13127) [ 447.161093][ T6470] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.213625][ T6470] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.272066][ T6470] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 447.302065][ T6470] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.334204][ T6470] usb 5-1: config 0 descriptor?? [ 447.388696][T13127] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 447.439099][T13127] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 447.462437][T13127] BTRFS info (device loop3): enabling auto defrag [ 447.488141][T13127] BTRFS info (device loop3): use no compression [ 447.548982][T13127] BTRFS info (device loop3): force clearing of disk cache [ 447.568815][T13127] BTRFS info (device loop3): max_inline at 4096 [ 447.589355][T13127] BTRFS info (device loop3): disabling free space tree [ 447.696048][T13139] loop9: detected capacity change from 0 to 32768 [ 447.719512][T13139] XFS (loop9): Mounting V5 Filesystem [ 447.780808][T13127] BTRFS info (device loop3): enabling ssd optimizations [ 447.787981][ T6470] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 447.804971][T13139] XFS (loop9): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 447.827651][ T6470] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 447.867145][T13127] BTRFS info (device loop3): rebuilding free space tree [ 447.878824][ T6470] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 447.886118][ T6470] hid-steam 0003:28DE:1142.001D: item fetching failed at offset 4/5 [ 447.908919][T13139] XFS (loop9): Starting recovery (logdev: internal) [ 447.940305][T13127] BTRFS info (device loop3): disabling free space tree [ 447.953393][ T6470] hid-steam 0003:28DE:1142.001D: steam_probe:parse of hid interface failed [ 447.985273][T13127] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 447.988635][ T6470] hid-steam: probe of 0003:28DE:1142.001D failed with error -22 [ 448.050324][T13127] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 448.078978][ T6470] usb 5-1: USB disconnect, device number 26 [ 448.145351][T13139] XFS (loop9): Ending recovery (logdev: internal) [ 448.458104][T12065] XFS (loop9): Unmounting Filesystem [ 448.464973][ T4279] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 448.897282][T13209] loop8: detected capacity change from 0 to 2048 [ 448.944539][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3171'. [ 449.030496][T13209] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 449.050812][T13209] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.179304][ T5134] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 449.389023][ T5134] usb 4-1: Using ep0 maxpacket: 32 [ 449.398336][ T5134] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 449.470626][ T5134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.515762][ T5134] usb 4-1: Product: syz [ 449.539464][ T5134] usb 4-1: Manufacturer: syz [ 449.544221][ T5134] usb 4-1: SerialNumber: syz [ 449.584260][ T5134] usb 4-1: config 0 descriptor?? [ 449.976663][T13224] loop8: detected capacity change from 0 to 512 [ 450.016546][ T5134] airspy 4-1:0.0: Board ID: 00 [ 450.021933][ T5134] airspy 4-1:0.0: Firmware version: [ 450.419233][ T5134] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 450.442068][ T5134] airspy 4-1:0.0: Registered as swradio24 [ 450.473487][ T5134] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 450.539234][ T5134] usb 4-1: USB disconnect, device number 20 [ 450.896804][T13245] loop9: detected capacity change from 0 to 64 [ 451.629934][T13260] program syz.8.3184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 451.709725][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3186'. [ 452.072321][T13272] loop2: detected capacity change from 0 to 1024 [ 452.121272][T13272] EXT4-fs: Ignoring removed mblk_io_submit option [ 452.195931][T13272] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 452.376996][T13272] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.3190: inode #926365495: comm syz.2.3190: iget: illegal inode # [ 452.478943][T13272] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3190: error while reading EA inode 926365495 err=-117 [ 452.740401][T12697] EXT4-fs (loop2): unmounting filesystem. [ 452.837805][T13265] loop9: detected capacity change from 0 to 32768 [ 453.159770][T13299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3199'. [ 453.329205][ T4312] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 453.539031][ T4312] usb 9-1: Using ep0 maxpacket: 32 [ 453.546618][ T4312] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.588096][ T4312] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.619250][ T4312] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 453.628540][ T4312] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.695719][ T4312] usb 9-1: config 0 descriptor?? [ 453.726808][ T4312] hub 9-1:0.0: USB hub found [ 453.930575][ T4312] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 454.379002][ T4312] hid-generic 0003:046D:C31C.001E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.8-1/input0 [ 454.669485][ T4312] usb 9-1: USB disconnect, device number 11 [ 454.807139][T13328] fido_id[13328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 455.083624][T13344] can0: slcan on ttyS3. [ 455.198708][ T4257] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 455.213420][T13344] can0 (unregistered): slcan off ttyS3. [ 455.230786][T13344] Falling back ldisc for ttyS3. [ 455.438699][ T4257] usb 5-1: Using ep0 maxpacket: 8 [ 455.446137][ T4257] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 455.486228][ T4257] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 455.528675][ T4257] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 455.560846][ T4257] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.594930][ T4257] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 455.618405][ T4257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.860347][ T4257] usb 5-1: GET_CAPABILITIES returned 0 [ 455.866139][ T4257] usbtmc 5-1:16.0: can't read capabilities [ 456.019655][T13373] loop8: detected capacity change from 0 to 512 [ 456.089612][ T4257] usb 5-1: USB disconnect, device number 27 [ 456.101102][T13373] EXT4-fs: Ignoring removed oldalloc option [ 456.211895][T13373] EXT4-fs error (device loop8): ext4_xattr_inode_iget:397: comm syz.8.3223: Parent and EA inode have the same ino 15 [ 456.244362][T13373] EXT4-fs (loop8): 1 orphan inode deleted [ 456.252515][T13373] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 456.268814][T13373] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3223: invalid indirect mapped block 234881024 (level 0) [ 456.456443][T10036] EXT4-fs (loop8): unmounting filesystem. [ 457.053180][T13404] device bridge0 entered promiscuous mode [ 457.095804][T13404] device macsec1 entered promiscuous mode [ 457.130211][T13410] loop9: detected capacity change from 0 to 64 [ 457.153943][T13409] loop8: detected capacity change from 0 to 512 [ 457.238837][T13409] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 457.278016][T13408] loop4: detected capacity change from 0 to 2048 [ 457.300773][T13409] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 457.378818][T13409] System zones: 1-12 [ 457.433997][T13409] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.3236: corrupted in-inode xattr [ 457.435125][T13408] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 457.480569][T13409] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3236: couldn't read orphan inode 15 (err -117) [ 457.499277][ T28] INFO: task syz-executor:4270 blocked for more than 143 seconds. [ 457.507783][ T28] Not tainted syzkaller #0 [ 457.519472][T13409] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 457.543449][T13408] EXT4-fs error (device loop4): ext4_find_extent:945: inode #2: comm syz.4.3237: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 457.547860][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.610627][T13408] EXT4-fs (loop4): Remounting filesystem read-only [ 457.658815][ T28] task:syz-executor state:D stack:22032 pid:4270 ppid:1 flags:0x00004004 [ 457.698785][ T28] Call Trace: [ 457.702149][ T28] [ 457.721238][ T28] __schedule+0x11d1/0x40e0 [ 457.746500][ T28] ? mark_lock+0x94/0x320 [ 457.752974][ T28] ? __sched_text_start+0x8/0x8 [ 457.798878][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 457.804958][ T28] ? lock_chain_count+0x20/0x20 [ 457.818809][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 457.823916][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 457.838687][ T28] schedule+0xb9/0x180 [ 457.843646][ T28] io_schedule+0x7c/0xd0 [ 457.854043][ T28] folio_wait_bit_common+0x70a/0xfa0 [ 457.866100][ T28] ? folio_wait_bit+0x30/0x30 [ 457.871860][ T28] ? migration_entry_wait_on_locked+0xe90/0xe90 [ 457.878156][ T28] ? __lock_acquire+0x7d10/0x7d10 [ 457.883360][ T28] ? __filemap_get_folio+0x10f/0xdb0 [ 457.898607][ T28] __filemap_get_folio+0x423/0xdb0 [ 457.904009][ T28] ? __filemap_get_folio+0x10f/0xdb0 [ 457.912890][ T28] ? page_cache_prev_miss+0x380/0x380 [ 457.918343][ T28] ? mlock_page_drain_local+0x75/0x490 [ 457.924560][ T28] ? mlock_page_drain_local+0x289/0x490 [ 457.930354][ T28] truncate_inode_pages_range+0x402/0x1090 [ 457.936317][ T28] ? mapping_evict_folio+0x520/0x520 [ 457.941941][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 457.947997][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 457.954312][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 457.959635][ T28] evict+0x4dc/0x8d0 [ 457.963586][ T28] ? proc_nr_inodes+0x2f0/0x2f0 [ 457.968486][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 457.976575][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 457.988149][ T28] evict_inodes+0x60c/0x6a0 [ 457.997478][ T28] ? clear_inode+0x150/0x150 [ 458.006858][ T28] generic_shutdown_super+0x93/0x340 [ 458.017224][ T28] kill_block_super+0x7c/0xe0 [ 458.026595][ T28] deactivate_locked_super+0x93/0xf0 [ 458.032156][ T28] cleanup_mnt+0x42c/0x4b0 [ 458.036632][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 458.042191][ T28] task_work_run+0x1d0/0x260 [ 458.046830][ T28] ? task_work_cancel+0x220/0x220 [ 458.052270][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 458.057794][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 458.065815][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 458.071751][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 458.078665][ T28] do_syscall_64+0x58/0xa0 [ 458.083145][ T28] ? clear_bhb_loop+0x60/0xb0 [ 458.087881][ T28] ? clear_bhb_loop+0x60/0xb0 [ 458.096616][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.107664][ T28] RIP: 0033:0x7f75c279da57 [ 458.116794][ T28] RSP: 002b:00007ffd18dbcb48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 458.129781][ T28] RAX: 0000000000000000 RBX: 00007f75c2832048 RCX: 00007f75c279da57 [ 458.137911][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd18dbcc00 [ 458.149840][ T28] RBP: 00007ffd18dbcc00 R08: 00007ffd18dbdc00 R09: 00000000ffffffff [ 458.157912][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd18dbdc90 [ 458.196735][ T28] R13: 00007f75c2832048 R14: 0000000000048f56 R15: 00007ffd18dbdcd0 [ 458.205363][ T28] [ 458.210265][T10036] EXT4-fs (loop8): unmounting filesystem. [ 458.211581][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 458.221570][ T28] [ 458.221570][ T28] Showing all locks held in the system: [ 458.238727][ T28] 1 lock held by rcu_tasks_kthre/12: [ 458.244079][ T28] #0: ffffffff8cb2df30 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 458.308835][ T28] 1 lock held by rcu_tasks_trace/13: [ 458.314187][ T28] #0: ffffffff8cb2e750 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 458.358720][ T28] 1 lock held by khungtaskd/28: [ 458.363742][ T28] #0: ffffffff8cb2d5a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 458.388642][ T28] 2 locks held by getty/4025: [ 458.393402][ T28] #0: ffff88802ff5c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 458.403674][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 458.428842][ T28] 3 locks held by kworker/1:3/4257: [ 458.434158][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 458.447518][ T28] #1: ffffc90003ca7d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 458.472340][ T28] #2: ffffffff8cb33278 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 458.484404][ T28] 1 lock held by syz-executor/4269: [ 458.489916][ T28] #0: ffff88801fffa0e0 (&type->s_umount_key#75){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 458.500381][ T28] 1 lock held by syz-executor/4270: [ 458.505639][ T28] #0: ffff888079a920e0 (&type->s_umount_key#75){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 458.528619][ T28] 2 locks held by kworker/0:3/4312: [ 458.533904][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 458.558633][ T28] #1: ffffc90003ea7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 458.570216][ T28] 3 locks held by kworker/0:18/6482: [ 458.575535][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 458.587237][ T28] #1: ffffc9000476fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 458.600144][ T28] #2: ffffffff8cb33278 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 458.616880][ T28] 1 lock held by syz.7.2614/11740: [ 458.622625][ T28] #0: ffff888079a920e0 (&type->s_umount_key#75){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 458.637406][ T28] 3 locks held by dhcpcd-run-hook/13432: [ 458.643681][ T28] [ 458.646154][ T28] ============================================= [ 458.646154][ T28] [ 458.655430][ T28] NMI backtrace for cpu 1 [ 458.659809][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 458.667062][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.677213][ T28] Call Trace: [ 458.680500][ T28] [ 458.683461][ T28] dump_stack_lvl+0x188/0x24e [ 458.688158][ T28] ? irq_work_queue+0xb8/0x140 [ 458.692942][ T28] ? show_regs_print_info+0x12/0x12 [ 458.698163][ T28] ? load_image+0x400/0x400 [ 458.702704][ T28] ? vprintk_emit+0x59f/0x6a0 [ 458.707403][ T28] ? printk_sprint+0x460/0x460 [ 458.712190][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 458.717148][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 458.723321][ T28] ? _printk+0xda/0x130 [ 458.727489][ T28] ? load_image+0x400/0x400 [ 458.732175][ T28] ? load_image+0x400/0x400 [ 458.736686][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 458.742792][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 458.748880][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 458.755002][ T28] watchdog+0xeee/0xf30 [ 458.759186][ T28] ? watchdog+0x1ed/0xf30 [ 458.763545][ T28] kthread+0x29d/0x330 [ 458.767648][ T28] ? hungtask_pm_notify+0x40/0x40 [ 458.772772][ T28] ? kthread_blkcg+0xd0/0xd0 [ 458.777382][ T28] ret_from_fork+0x1f/0x30 [ 458.781830][ T28] [ 458.786247][ T28] Sending NMI from CPU 1 to CPUs 0: [ 458.792755][ C0] NMI backtrace for cpu 0 [ 458.792767][ C0] CPU: 0 PID: 4331 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 458.792783][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.792792][ C0] Workqueue: bat_events batadv_nc_worker [ 458.792814][ C0] RIP: 0010:kasan_check_range+0x1b6/0x290 [ 458.792839][ C0] Code: df 49 8d 5f 07 4d 85 ff 49 0f 49 df 48 83 e3 f8 49 29 df 74 0e 41 80 3b 00 75 69 49 ff c3 49 ff cf 75 f2 5b 41 5c 41 5e 41 5f <5d> c3 45 84 ff 0f 85 91 00 00 00 41 f7 c7 00 ff 00 00 0f 85 89 00 [ 458.792852][ C0] RSP: 0018:ffffc90004397770 EFLAGS: 00000056 [ 458.792864][ C0] RAX: 0000000000000001 RBX: 00000000000006d1 RCX: ffffffff81645005 [ 458.792875][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90af7318 [ 458.792885][ C0] RBP: ffffc900043979d0 R08: ffffffff90af731f R09: 1ffffffff215ee63 [ 458.792896][ C0] R10: dffffc0000000000 R11: fffffbfff215ee64 R12: ffff88802a5ed940 [ 458.792906][ C0] R13: ffff88802a5ee404 R14: ffff88802a5ee470 R15: ffff88802a5ee490 [ 458.792918][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 458.792930][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.792941][ C0] CR2: 00007f8fee12d008 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 458.792957][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 458.792966][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 458.792976][ C0] Call Trace: [ 458.792981][ C0] [ 458.792987][ C0] __lock_acquire+0xdd5/0x7d10 [ 458.793007][ C0] ? look_up_lock_class+0x75/0x140 [ 458.793031][ C0] ? __lock_acquire+0x13cf/0x7d10 [ 458.793050][ C0] ? verify_lock_unused+0x140/0x140 [ 458.793075][ C0] ? mark_lock+0x94/0x320 [ 458.793095][ C0] lock_acquire+0x1bb/0x4a0 [ 458.793112][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 458.793133][ C0] ? read_lock_is_recursive+0x10/0x10 [ 458.793151][ C0] ? __local_bh_disable_ip+0x111/0x1a0 [ 458.793165][ C0] ? __bpf_trace_tasklet+0x10/0x10 [ 458.793178][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 458.793192][ C0] ? _local_bh_enable+0xa0/0xa0 [ 458.793208][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 458.793224][ C0] _raw_spin_lock_bh+0x32/0x50 [ 458.793248][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 458.793264][ C0] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 458.793282][ C0] batadv_nc_purge_paths+0xe7/0x3b0 [ 458.793302][ C0] batadv_nc_worker+0x365/0x600 [ 458.793321][ C0] ? process_one_work+0x7b0/0x1160 [ 458.793337][ C0] process_one_work+0x8a2/0x1160 [ 458.793358][ C0] ? worker_detach_from_pool+0x240/0x240 [ 458.793376][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 458.793391][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 458.793406][ C0] ? kthread_data+0x4b/0xc0 [ 458.793427][ C0] worker_thread+0xaa2/0x1270 [ 458.793452][ C0] kthread+0x29d/0x330 [ 458.793464][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 458.793480][ C0] ? kthread_blkcg+0xd0/0xd0 [ 458.793493][ C0] ret_from_fork+0x1f/0x30 [ 458.793517][ C0] [ 458.818719][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 458.818734][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 458.818759][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.818771][ T28] Call Trace: [ 458.818776][ T28] [ 458.818784][ T28] dump_stack_lvl+0x188/0x24e [ 458.818814][ T28] ? memcpy+0x3c/0x60 [ 458.818832][ T28] ? show_regs_print_info+0x12/0x12 [ 458.818857][ T28] ? load_image+0x400/0x400 [ 458.818887][ T28] panic+0x2e5/0x730 [ 458.818906][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 458.818933][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 458.818950][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 458.818980][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 458.819015][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 458.819041][ T28] watchdog+0xf2d/0xf30 [ 458.819067][ T28] ? watchdog+0x1ed/0xf30 [ 458.819091][ T28] kthread+0x29d/0x330 [ 458.819106][ T28] ? hungtask_pm_notify+0x40/0x40 [ 458.819125][ T28] ? kthread_blkcg+0xd0/0xd0 [ 458.819142][ T28] ret_from_fork+0x1f/0x30 [ 458.819178][ T28] [ 458.821209][ T28] Kernel Offset: disabled [ 459.207606][ T28] Rebooting in 86400 seconds..