last executing test programs: 1m33.616426193s ago: executing program 2 (id=131): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x5, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 1m33.510334955s ago: executing program 2 (id=132): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) setuid(0xee01) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 1m33.065027814s ago: executing program 2 (id=135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/144, 0x90}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f00000007c0)=""/138, 0x8a}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000001f00)=""/4078, 0xfee}], 0x5}, 0xc}], 0x1, 0x400100a0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 1m32.658692602s ago: executing program 2 (id=138): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000080)={[{@bh}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 1m32.399059797s ago: executing program 2 (id=140): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1m31.658627071s ago: executing program 2 (id=145): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) 1m31.044252083s ago: executing program 32 (id=145): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) 1m29.175853189s ago: executing program 3 (id=156): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000100)={&(0x7f0000000280)={{@hyper, 0x8000}, {}, 0x400, "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"}, 0x418, 0x6}) 1m28.943911983s ago: executing program 3 (id=158): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[], 0x0, 0x6fb, &(0x7f0000000a40)="$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") syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x21) 1m28.398225504s ago: executing program 3 (id=161): mbind(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x3, &(0x7f0000000000)=0x6, 0x6, 0x1) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) 1m28.156929879s ago: executing program 3 (id=162): syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000400)='./bus\x00', 0xa18008, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m26.227735236s ago: executing program 3 (id=165): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1514, &(0x7f0000001540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400) 1m22.097100526s ago: executing program 3 (id=179): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002ac0)=ANY=[], 0x1348}, 0x1, 0x0, 0x0, 0x48184}, 0x84) 1m21.750197622s ago: executing program 33 (id=179): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002ac0)=ANY=[], 0x1348}, 0x1, 0x0, 0x0, 0x48184}, 0x84) 3.423697744s ago: executing program 5 (id=631): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000a80)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000bc0)={@hyper}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0) 3.315919956s ago: executing program 4 (id=633): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r1, 0x309, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 3.1451415s ago: executing program 4 (id=635): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="0000520006000500010000000800", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0xc0c5}, 0x0) 3.057072991s ago: executing program 4 (id=636): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000080)='./file3\x00', 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1, 0x9e, &(0x7f0000000140)="$eJzszr2JAkEABeB3Gxx7yTZwwXVwNWgRVmBoaKQI2pCtWIKpkYGpyYjsCrKggYE/8H0wDG8eA29zXP+mScoyKaWs0ipn09l88p3b7nV8hqq76yR/TZv3w2SQ5Kvrt4fF+HJ630f1CzYDAACPqfLfz1cPu5/nLwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4L6cAAAD//6LYGgE=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x62) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x275a, 0x0) 2.673010629s ago: executing program 4 (id=638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2a, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 2.502440362s ago: executing program 4 (id=640): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000440)='./file0\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x553b, &(0x7f000000ac00)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x5) rmdir(&(0x7f0000000100)='./control\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 2.348075745s ago: executing program 5 (id=641): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004a40)=""/159, 0x9f}, {&(0x7f0000004b00)=""/200, 0xc8}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/253, 0xfd}, {&(0x7f0000005d00)=""/199, 0xc7}], 0x8}}], 0x1, 0x2120, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 2.145126489s ago: executing program 5 (id=642): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r1, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) 1.971981782s ago: executing program 5 (id=645): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 1.807326766s ago: executing program 5 (id=646): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x26, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.536952201s ago: executing program 5 (id=649): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x32, 0xffffffffffffffff, 0x75a3a000) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0x1) 1.476589932s ago: executing program 1 (id=650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000ce0000000059b6c26a56b197"]) 1.112977529s ago: executing program 0 (id=652): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x1c5143, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 1.112840759s ago: executing program 1 (id=653): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e3100000000000000000014000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 989.583501ms ago: executing program 4 (id=654): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 910.434633ms ago: executing program 1 (id=655): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000e00000000000000000000008500000050000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='contention_end\x00', r0}, 0x18) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 685.067327ms ago: executing program 1 (id=656): link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 672.573087ms ago: executing program 0 (id=657): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000380)=0xa) 554.49066ms ago: executing program 1 (id=658): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000600)=r0, 0x4) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES8=r0], 0x1c}}, 0x0) 367.400683ms ago: executing program 1 (id=659): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) 366.155563ms ago: executing program 0 (id=660): bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0112000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 101.138799ms ago: executing program 0 (id=661): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112) 67.825779ms ago: executing program 0 (id=662): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=663): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 72.590350][ T5774] cgroup: Unknown subsys name 'net' [ 72.760944][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.434056][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.085671][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.095380][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.103382][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.111646][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.119548][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.127012][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.134996][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.148752][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.153989][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.159869][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.171032][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.173085][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.186352][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.189596][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.194738][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.202680][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.215397][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.219884][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.225287][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.238001][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.245762][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.254087][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.262236][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.269780][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.808359][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 76.825796][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 76.884065][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 77.116619][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.124259][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.131627][ T5788] bridge_slave_0: entered allmulticast mode [ 77.139345][ T5788] bridge_slave_0: entered promiscuous mode [ 77.147805][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 77.159592][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.167118][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.174479][ T5785] bridge_slave_0: entered allmulticast mode [ 77.181888][ T5785] bridge_slave_0: entered promiscuous mode [ 77.189457][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.196910][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.204212][ T5784] bridge_slave_0: entered allmulticast mode [ 77.211193][ T5784] bridge_slave_0: entered promiscuous mode [ 77.219102][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.226322][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.233761][ T5784] bridge_slave_1: entered allmulticast mode [ 77.240705][ T5784] bridge_slave_1: entered promiscuous mode [ 77.249143][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.256576][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.264118][ T5788] bridge_slave_1: entered allmulticast mode [ 77.271029][ T5788] bridge_slave_1: entered promiscuous mode [ 77.291360][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.298597][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.306323][ T5785] bridge_slave_1: entered allmulticast mode [ 77.313535][ T5785] bridge_slave_1: entered promiscuous mode [ 77.415182][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.428056][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.440373][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.453582][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.470283][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.481870][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.576322][ T5788] team0: Port device team_slave_0 added [ 77.611591][ T5784] team0: Port device team_slave_0 added [ 77.620017][ T5788] team0: Port device team_slave_1 added [ 77.639466][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.647192][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.654722][ T5791] bridge_slave_0: entered allmulticast mode [ 77.661726][ T5791] bridge_slave_0: entered promiscuous mode [ 77.669737][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.677061][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.684517][ T5791] bridge_slave_1: entered allmulticast mode [ 77.691540][ T5791] bridge_slave_1: entered promiscuous mode [ 77.701641][ T5785] team0: Port device team_slave_0 added [ 77.711407][ T5785] team0: Port device team_slave_1 added [ 77.718969][ T5784] team0: Port device team_slave_1 added [ 77.790452][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.797650][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.824838][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.849031][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.861383][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.896319][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.903665][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.930445][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.968278][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.975635][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.003157][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.016943][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.024580][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.050558][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.062392][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.069363][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.095652][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.116741][ T5791] team0: Port device team_slave_0 added [ 78.127253][ T5791] team0: Port device team_slave_1 added [ 78.153202][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.160194][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.186761][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.225155][ T5786] Bluetooth: hci0: command tx timeout [ 78.263497][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.270492][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.296789][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.307554][ T5786] Bluetooth: hci2: command tx timeout [ 78.310579][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.313812][ T5793] Bluetooth: hci1: command tx timeout [ 78.326483][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.326897][ T50] Bluetooth: hci3: command tx timeout [ 78.358786][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.382690][ T5788] hsr_slave_0: entered promiscuous mode [ 78.389207][ T5788] hsr_slave_1: entered promiscuous mode [ 78.450970][ T5784] hsr_slave_0: entered promiscuous mode [ 78.458249][ T5784] hsr_slave_1: entered promiscuous mode [ 78.465661][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.473740][ T5784] Cannot create hsr debugfs directory [ 78.484681][ T5785] hsr_slave_0: entered promiscuous mode [ 78.491684][ T5785] hsr_slave_1: entered promiscuous mode [ 78.498848][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.506725][ T5785] Cannot create hsr debugfs directory [ 78.530211][ T5791] hsr_slave_0: entered promiscuous mode [ 78.536896][ T5791] hsr_slave_1: entered promiscuous mode [ 78.544062][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.551653][ T5791] Cannot create hsr debugfs directory [ 79.011671][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.029144][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.046076][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.058893][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.143269][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.158120][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.169115][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.212316][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.248803][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.269345][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.282997][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.295788][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.390613][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.405192][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.424227][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.436740][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.530323][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.600171][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.635477][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.656960][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.664420][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.691605][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.734673][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.741838][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.752686][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.759845][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.770316][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.777509][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.827949][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.887706][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.900956][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.929612][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.936806][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.987050][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.994296][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.037011][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.127553][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.134787][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.177194][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.184459][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.220871][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.306231][ T5793] Bluetooth: hci0: command tx timeout [ 80.331964][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.382625][ T5793] Bluetooth: hci3: command tx timeout [ 80.382770][ T50] Bluetooth: hci1: command tx timeout [ 80.388070][ T5786] Bluetooth: hci2: command tx timeout [ 80.487947][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.632225][ T5784] veth0_vlan: entered promiscuous mode [ 80.651284][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.688360][ T5784] veth1_vlan: entered promiscuous mode [ 80.771190][ T5784] veth0_macvtap: entered promiscuous mode [ 80.791134][ T5784] veth1_macvtap: entered promiscuous mode [ 80.800785][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.834102][ T5791] veth0_vlan: entered promiscuous mode [ 80.868593][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.881410][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.901117][ T5791] veth1_vlan: entered promiscuous mode [ 80.914857][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.925298][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.935859][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.945851][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.960557][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.027099][ T5788] veth0_vlan: entered promiscuous mode [ 81.047898][ T5791] veth0_macvtap: entered promiscuous mode [ 81.059040][ T5791] veth1_macvtap: entered promiscuous mode [ 81.103075][ T5788] veth1_vlan: entered promiscuous mode [ 81.179441][ T5788] veth0_macvtap: entered promiscuous mode [ 81.192009][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.204025][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.214073][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.224835][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.238576][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.246955][ T5788] veth1_macvtap: entered promiscuous mode [ 81.269240][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.281100][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.294413][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.355556][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.365654][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.374930][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.383772][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.396690][ T5785] veth0_vlan: entered promiscuous mode [ 81.407861][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.418475][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.429852][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.440631][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.454025][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.462546][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.470563][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.486956][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.497944][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.509909][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.520634][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.532531][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.550641][ T5785] veth1_vlan: entered promiscuous mode [ 81.566988][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.578471][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.588380][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.597292][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.743971][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.751861][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.781270][ T5785] veth0_macvtap: entered promiscuous mode [ 81.792786][ T5873] syz.2.2[5873]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.806368][ T5785] veth1_macvtap: entered promiscuous mode [ 81.959374][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.989474][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.022339][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.046279][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.071392][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.096168][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.124860][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.185123][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.199797][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.214506][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.234713][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.252269][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.272212][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.282063][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.312286][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.334351][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.382425][ T5786] Bluetooth: hci0: command tx timeout [ 82.391711][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.417868][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.449924][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.462465][ T5786] Bluetooth: hci2: command tx timeout [ 82.463590][ T50] Bluetooth: hci1: command tx timeout [ 82.474230][ T5793] Bluetooth: hci3: command tx timeout [ 82.493588][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.533664][ T5873] loop2: detected capacity change from 0 to 32768 [ 82.543259][ T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.551118][ T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.571678][ T5873] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2 (5873) [ 82.673061][ T5873] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.702657][ T5873] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 82.711492][ T5873] BTRFS info (device loop2): use zlib compression, level 3 [ 82.748099][ T5873] BTRFS info (device loop2): using free space tree [ 82.765015][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.789803][ T5877] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.810799][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.974583][ T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.019145][ T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.055432][ T5873] BTRFS info (device loop2): enabling ssd optimizations [ 83.072284][ T5873] BTRFS info (device loop2): auto enabling async discard [ 83.134589][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.172213][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.458515][ T5784] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 83.529972][ T5902] loop0: detected capacity change from 0 to 4096 [ 83.615249][ T5902] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 84.021494][ T5802] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (5802) [ 84.463887][ T5793] Bluetooth: hci0: command tx timeout [ 84.543035][ T5793] Bluetooth: hci2: command tx timeout [ 84.547930][ T50] Bluetooth: hci3: command tx timeout [ 84.550701][ T5786] Bluetooth: hci1: command tx timeout [ 85.020286][ T5930] loop2: detected capacity change from 0 to 4096 [ 85.073685][ T5930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.129239][ T5916] loop1: detected capacity change from 0 to 32768 [ 85.155411][ T5916] ======================================================= [ 85.155411][ T5916] WARNING: The mand mount option has been deprecated and [ 85.155411][ T5916] and is ignored by this kernel. Remove the mand [ 85.155411][ T5916] option from the mount to silence this warning. [ 85.155411][ T5916] ======================================================= [ 85.311432][ T5916] JBD2: Ignoring recovery information on journal [ 85.445886][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.496848][ T5916] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 85.526234][ T28] audit: type=1800 audit(1758288543.818:2): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.14" name="/newroot/2/bus/#30//deleted" dev="tmpfs" ino=30 res=0 errno=0 [ 85.970474][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 86.525310][ T5971] warning: `syz.0.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.739983][ T9] kernel read not supported for file /input/event1 (pid: 9 comm: kworker/0:1) [ 86.771443][ T5982] loop1: detected capacity change from 0 to 512 [ 86.814576][ T5982] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.33: casefold flag without casefold feature [ 86.882640][ T5982] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.33: couldn't read orphan inode 15 (err -117) [ 86.907874][ T5982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.981432][ T28] audit: type=1800 audit(1758288545.268:3): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.33" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 87.020740][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.663648][ T5989] loop1: detected capacity change from 0 to 32768 [ 87.733684][ T5989] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 87.892361][ T5989] XFS (loop1): Ending clean mount [ 87.927111][ T5989] XFS (loop1): Quotacheck needed: Please wait. [ 88.070738][ T6016] kvm: kvm [6014]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000041) [ 88.114699][ T5989] XFS (loop1): Quotacheck: Done. [ 88.368103][ T5785] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 88.395939][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.47'. [ 88.421322][ T6023] program syz.2.46 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.710694][ T6008] loop0: detected capacity change from 0 to 40427 [ 88.769242][ T6008] F2FS-fs (loop0): heap/no_heap options were deprecated [ 88.778042][ T6008] F2FS-fs (loop0): build fault injection attr: rate: 19, type: 0x7ffff [ 88.796372][ T6008] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x77e8c [ 88.811818][ T6008] F2FS-fs (loop0): invalid crc value [ 88.871784][ T6008] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 88.895367][ T6008] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.961422][ T6008] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 88.985545][ C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 89.059974][ T6008] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 89.066816][ T6034] loop1: detected capacity change from 0 to 2048 [ 89.148913][ T6034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.207885][ T5776] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.220053][ T6008] F2FS-fs (loop0): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 89.252392][ T6034] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.349898][ T6034] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 89.391920][ T6008] F2FS-fs (loop0): inject checkpoint error in f2fs_balance_fs of f2fs_convert_inline_inode+0x783/0x7f0 [ 89.409140][ T6034] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 89.410581][ T6008] F2FS-fs (loop0): Stopped filesystem due to reason: 1 [ 89.446111][ T6034] EXT4-fs error (device loop1): __ext4_new_inode:1075: comm syz.1.48: reserved inode found cleared - inode=1 [ 89.479918][ T6025] loop2: detected capacity change from 0 to 40427 [ 89.495667][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.521555][ T6025] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 89.535573][ T6025] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 89.548322][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.562836][ T6025] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff [ 89.571411][ T6025] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7 [ 89.590995][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.601329][ T5776] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 89.613976][ T6025] F2FS-fs (loop2): invalid crc value [ 89.638335][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.661959][ T6025] F2FS-fs (loop2): Found nat_bits in checkpoint [ 89.688851][ T5776] usb 4-1: config 0 descriptor?? [ 89.834465][ T6025] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 89.851887][ T6025] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 90.115006][ T5784] syz-executor: attempt to access beyond end of device [ 90.115006][ T5784] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.160556][ T5784] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 90.551881][ T5776] hid-led: probe of 0003:27B8:01ED.0001 failed with error -71 [ 90.613922][ T5776] usb 4-1: USB disconnect, device number 2 [ 90.748514][ T6057] loop1: detected capacity change from 0 to 4096 [ 90.865975][ T6058] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.068367][ T6052] loop0: detected capacity change from 0 to 32768 [ 91.088371][ T6052] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.52 (6052) [ 91.090317][ T6060] loop2: detected capacity change from 0 to 4096 [ 91.133897][ T6060] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 91.180790][ T6052] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 91.229103][ T6052] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 91.253089][ T6060] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 91.275237][ T6052] BTRFS info (device loop0): enabling auto defrag [ 91.291938][ T6052] BTRFS info (device loop0): doing ref verification [ 91.326233][ T6052] BTRFS info (device loop0): use no compression [ 91.352735][ T6052] BTRFS info (device loop0): force clearing of disk cache [ 91.392572][ T6052] BTRFS info (device loop0): max_inline at 4096 [ 91.399083][ T6052] BTRFS info (device loop0): disabling free space tree [ 91.463882][ T6060] syz.2.55 (6060) used greatest stack depth: 20496 bytes left [ 91.607715][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.59'. [ 91.659197][ T6052] BTRFS info (device loop0): enabling ssd optimizations [ 91.691834][ T6052] BTRFS info (device loop0): auto enabling async discard [ 91.713959][ T6052] BTRFS info (device loop0): rebuilding free space tree [ 91.838930][ T6052] BTRFS info (device loop0): disabling free space tree [ 91.879945][ T6052] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 91.919917][ T6052] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.006531][ T27] cfg80211: failed to load regulatory.db [ 92.224381][ T6094] loop2: detected capacity change from 0 to 64 [ 92.590205][ T5788] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.140797][ T6112] loop0: detected capacity change from 0 to 1024 [ 93.193748][ T6112] EXT4-fs: inline encryption not supported [ 93.199635][ T6112] EXT4-fs: Ignoring removed i_version option [ 93.212929][ T6090] loop3: detected capacity change from 0 to 32768 [ 93.247348][ T6112] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.309645][ T6112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.369169][ T6090] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 93.495048][ T6122] EXT4-fs error (device loop0): mb_free_blocks:1938: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 93.499904][ T6090] syz.3.64 (6090) used greatest stack depth: 19600 bytes left [ 93.542416][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.605035][ T5791] ocfs2: Unmounting device (7,3) on (node local) [ 93.696426][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.754407][ T27] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 93.771025][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.795271][ T27] usb 3-1: config 0 has no interface number 0 [ 93.814494][ T27] usb 3-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 93.824040][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.842995][ T27] usb 3-1: Product: syz [ 93.848740][ T27] usb 3-1: Manufacturer: syz [ 93.855833][ T27] usb 3-1: SerialNumber: syz [ 93.875015][ T27] usb 3-1: config 0 descriptor?? [ 93.891673][ T27] vmk80xx 3-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 93.904381][ T6125] loop0: detected capacity change from 0 to 1024 [ 93.937384][ T6125] EXT4-fs: Ignoring removed nobh option [ 93.984693][ T6125] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.009152][ T6125] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.77: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 94.052935][ T6125] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.77: couldn't read orphan inode 11 (err -117) [ 94.077723][ T6125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.122299][ T27] usb 3-1: USB disconnect, device number 2 [ 94.184663][ T6125] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.77: Invalid block bitmap block 0 in block_group 0 [ 94.240836][ T6125] Quota error (device loop0): write_blk: dquota write failed [ 94.259845][ T6125] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 94.276006][ T6125] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.77: Failed to acquire dquot type 0 [ 94.314394][ T6131] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.77: Invalid inode bitmap blk 137438953472 in block_group 0 [ 94.428786][ T3463] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm kworker/u4:8: Invalid inode table block 8589934593 in block_group 0 [ 94.466752][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.055368][ T6133] loop3: detected capacity change from 0 to 32768 [ 95.095930][ T6133] (syz.3.79,6133,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.121348][ T6133] (syz.3.79,6133,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.191271][ T6133] JBD2: Ignoring recovery information on journal [ 95.250500][ T6133] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 95.556012][ T5791] ocfs2: Unmounting device (7,3) on (node local) [ 96.252328][ T5876] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.474027][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 96.489995][ T5876] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 96.514119][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.554047][ T5876] usb 3-1: config 0 descriptor?? [ 96.782453][ T5876] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 96.782958][ T6187] loop1: detected capacity change from 0 to 512 [ 96.794156][ T6172] loop0: detected capacity change from 0 to 32768 [ 96.817242][ T6187] EXT4-fs: Ignoring removed i_version option [ 96.819938][ T5876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.833840][ T6172] XFS: noikeep mount option is deprecated. [ 96.839702][ T6172] XFS: noikeep mount option is deprecated. [ 96.862397][ T6187] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.890196][ T5876] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 96.905441][ T6187] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 96.916627][ T5876] usb 3-1: media controller created [ 96.951669][ T6172] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.966152][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.994671][ T6168] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 97.016493][ T6187] EXT4-fs (loop1): 1 truncate cleaned up [ 97.042365][ T5876] az6027: usb out operation failed. (-71) [ 97.062394][ T5876] az6027: usb out operation failed. (-71) [ 97.068186][ T5876] stb0899_attach: Driver disabled by Kconfig [ 97.074855][ T6187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.141068][ T5876] az6027: no front-end attached [ 97.141068][ T5876] [ 97.163664][ T5876] az6027: usb out operation failed. (-71) [ 97.189995][ T5876] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 97.215650][ T5876] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 97.227996][ T6172] XFS (loop0): Ending clean mount [ 97.246893][ T6187] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.102: corrupted in-inode xattr: overlapping e_value [ 97.270155][ T6172] XFS (loop0): Quotacheck needed: Please wait. [ 97.288533][ T5876] dvb-usb: schedule remote query interval to 400 msecs. [ 97.317826][ T6187] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1781: inode #15: comm syz.1.102: unable to update i_inline_off [ 97.338431][ T5876] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 97.371263][ T6187] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.373935][ T6172] XFS (loop0): Quotacheck: Done. [ 97.393797][ T5876] usb 3-1: USB disconnect, device number 3 [ 97.408756][ T6201] EXT4-fs error (device loop1): ext4_xattr_ibody_list:797: inode #15: comm syz.1.102: corrupted in-inode xattr: overlapping e_value [ 97.460657][ T6187] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.102: corrupted in-inode xattr: overlapping e_value [ 97.569550][ T5876] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 97.666568][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.740592][ T6203] loop3: detected capacity change from 0 to 8192 [ 97.763099][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.799529][ T6203] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 97.827309][ T6203] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 97.856271][ T6203] REISERFS (device loop3): using ordered data mode [ 97.867515][ T6203] reiserfs: using flush barriers [ 97.888734][ T6203] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.926015][ T6203] REISERFS (device loop3): checking transaction log (loop3) [ 98.182913][ T6203] REISERFS (device loop3): Using tea hash to sort names [ 98.234699][ T6203] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 98.314716][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 98.559988][ T6221] loop2: detected capacity change from 0 to 2048 [ 98.629898][ T6221] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.675097][ T6221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.760640][ T6221] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 9: comm syz.2.112: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 98.762612][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.810250][ T6221] EXT4-fs (loop2): Remounting filesystem read-only [ 98.972309][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 98.997645][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.998727][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 99.011342][ T6232] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 99.035450][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.076247][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 99.092709][ T9] pvrusb2: ********** [ 99.096784][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 99.115787][ T9] pvrusb2: Important functionality might not be entirely working. [ 99.129636][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 99.142678][ T5854] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.176025][ T9] pvrusb2: ********** [ 99.307706][ T2318] pvrusb2: Invalid write control endpoint [ 99.345437][ T5854] usb 4-1: config 0 has no interfaces? [ 99.351039][ T5854] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 99.392336][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.423418][ T5854] usb 4-1: config 0 descriptor?? [ 99.469000][ T2318] pvrusb2: Invalid write control endpoint [ 99.492991][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 99.504552][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 99.512565][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 99.538250][ T2318] pvrusb2: Device being rendered inoperable [ 99.567124][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 99.591623][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 99.611093][ T2318] pvrusb2: Attached sub-driver cx25840 [ 99.625301][ T6219] pvrusb2: Attempted to execute control transfer when device not ok [ 99.630343][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 99.651953][ T6245] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.675114][ T5776] usb 1-1: USB disconnect, device number 2 [ 99.686368][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 99.703424][ T6230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.741983][ T6230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.794450][ T9] usb 4-1: USB disconnect, device number 3 [ 100.360563][ T6261] netlink: 64 bytes leftover after parsing attributes in process `syz.0.128'. [ 100.382470][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.592272][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 100.606669][ T9] usb 4-1: config index 0 descriptor too short (expected 72, got 36) [ 100.632279][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 100.666297][ T6255] loop1: detected capacity change from 0 to 32768 [ 100.675940][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 100.692564][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.714984][ T9] usb 4-1: Product: syz [ 100.719256][ T9] usb 4-1: Manufacturer: syz [ 100.729021][ T9] usb 4-1: SerialNumber: syz [ 100.752678][ T6255] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 100.777990][ T6273] loop2: detected capacity change from 0 to 256 [ 100.849358][ T28] audit: type=1804 audit(1758288559.128:4): pid=6255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.125" name="/newroot/35/file1/file0" dev="loop1" ino=17058 res=1 errno=0 [ 100.962053][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 101.137756][ T9] usb 4-1: USB disconnect, device number 4 [ 101.510345][ T6284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.137'. [ 101.546655][ T6284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.137'. [ 101.558230][ T6284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.137'. [ 101.575566][ T6284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.137'. [ 101.592879][ T6286] loop2: detected capacity change from 0 to 512 [ 101.606741][ T6286] EXT4-fs: Ignoring removed bh option [ 101.646504][ T6286] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.138: Parent and EA inode have the same ino 15 [ 101.680055][ T6286] EXT4-fs (loop2): 1 orphan inode deleted [ 101.689385][ T6286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.751874][ T5784] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 101.818194][ T5784] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 101.845314][ T5776] IPVS: starting estimator thread 0... [ 101.882625][ T5784] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 101.963014][ T6293] IPVS: using max 19 ests per chain, 45600 per kthread [ 102.158459][ T6277] loop1: detected capacity change from 0 to 32768 [ 102.333203][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.560827][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.774334][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.905223][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.954218][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.998911][ T6296] loop0: detected capacity change from 0 to 32768 [ 103.019477][ T6296] XFS: attr2 mount option is deprecated. [ 103.096967][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.112719][ T6296] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 103.162346][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 103.171490][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.197107][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.212443][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.221577][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.230097][ T27] usb 2-1: Product: syz [ 103.240676][ T27] usb 2-1: Manufacturer: syz [ 103.245563][ T27] usb 2-1: SerialNumber: syz [ 103.261174][ T27] usb 2-1: selecting invalid altsetting 1 [ 103.272523][ T6296] XFS (loop0): Ending clean mount [ 103.311495][ T6296] XFS (loop0): Quotacheck needed: Please wait. [ 103.480230][ T6296] XFS (loop0): Quotacheck: Done. [ 103.644296][ T6319] loop3: detected capacity change from 0 to 256 [ 103.893796][ T6319] FAT-fs (loop3): Directory bread(block 64) failed [ 103.900836][ T6319] FAT-fs (loop3): Directory bread(block 65) failed [ 103.921914][ T6319] FAT-fs (loop3): Directory bread(block 66) failed [ 103.932227][ T6319] FAT-fs (loop3): Directory bread(block 67) failed [ 103.939085][ T6319] FAT-fs (loop3): Directory bread(block 68) failed [ 103.953710][ T6319] FAT-fs (loop3): Directory bread(block 69) failed [ 103.961625][ T6319] FAT-fs (loop3): Directory bread(block 70) failed [ 103.996815][ T5788] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 104.002323][ T6319] FAT-fs (loop3): Directory bread(block 71) failed [ 104.041187][ T6319] FAT-fs (loop3): Directory bread(block 72) failed [ 104.052337][ T6319] FAT-fs (loop3): Directory bread(block 73) failed [ 104.112629][ T27] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 104.159378][ T27] usb 2-1: selecting invalid altsetting 1 [ 104.201233][ T27] cdc_ncm 2-1:1.0: bind() failure [ 104.250714][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.265746][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.276962][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.305735][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.314994][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 104.326040][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.339586][ T27] usb 2-1: USB disconnect, device number 2 [ 104.927252][ T6342] loop1: detected capacity change from 0 to 128 [ 104.960017][ T6342] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.021649][ T6342] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.190420][ T6347] loop0: detected capacity change from 0 to 256 [ 105.208465][ T6347] exfat: Deprecated parameter 'utf8' [ 105.232552][ T6347] exfat: Deprecated parameter 'namecase' [ 105.297451][ T6347] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc465a08c, utbl_chksum : 0xe619d30d) [ 105.409283][ T6352] loop3: detected capacity change from 0 to 164 [ 105.476470][ T6352] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 105.591898][ T6352] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 105.957881][ T6358] loop0: detected capacity change from 0 to 4096 [ 106.164955][ T6358] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 106.382384][ T5786] Bluetooth: hci0: command tx timeout [ 106.643416][ T6325] chnl_net:caif_netlink_parms(): no params data found [ 106.875435][ T12] hsr_slave_0: left promiscuous mode [ 106.931108][ T12] hsr_slave_1: left promiscuous mode [ 106.992609][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.000138][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.033992][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.034279][ T6365] loop3: detected capacity change from 0 to 40427 [ 107.041431][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.080637][ T12] bridge_slave_1: left allmulticast mode [ 107.099346][ T6365] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 107.118089][ T6365] F2FS-fs (loop3): Image doesn't support compression [ 107.142844][ T12] bridge_slave_1: left promiscuous mode [ 107.144779][ T6365] F2FS-fs (loop3): Image doesn't support compression [ 107.150503][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.193119][ T6365] F2FS-fs (loop3): invalid crc value [ 107.236497][ T6365] F2FS-fs (loop3): Found nat_bits in checkpoint [ 107.247806][ T12] bridge_slave_0: left allmulticast mode [ 107.272421][ T12] bridge_slave_0: left promiscuous mode [ 107.278340][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.454891][ T12] veth1_macvtap: left promiscuous mode [ 107.462743][ T12] veth0_macvtap: left promiscuous mode [ 107.478737][ T6365] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 107.488849][ T12] veth1_vlan: left promiscuous mode [ 107.502930][ T12] veth0_vlan: left promiscuous mode [ 107.668106][ T6365] F2FS-fs (loop3): inject dquot initialize in f2fs_dquot_initialize of __f2fs_tmpfile+0x77/0x340 [ 107.712503][ T6365] overlayfs: upper fs does not support tmpfile. [ 107.795864][ T6371] loop1: detected capacity change from 0 to 40427 [ 107.833147][ T6371] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 107.850811][ T6371] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 107.906346][ T6371] F2FS-fs (loop1): Found nat_bits in checkpoint [ 107.920776][ T5791] syz-executor: attempt to access beyond end of device [ 107.920776][ T5791] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 107.965435][ T5791] syz-executor: attempt to access beyond end of device [ 107.965435][ T5791] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 108.180746][ T6371] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 108.193961][ T6371] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 108.330965][ T59] kworker/u4:4: attempt to access beyond end of device [ 108.330965][ T59] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 108.395125][ T5785] syz-executor: attempt to access beyond end of device [ 108.395125][ T5785] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.405354][ T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 108.410324][ T5785] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 108.442571][ T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 108.449524][ T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 108.462745][ T5786] Bluetooth: hci0: command tx timeout [ 108.871451][ T6388] loop0: detected capacity change from 0 to 40427 [ 108.894576][ T6388] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 108.915657][ T6388] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 109.056579][ T6388] F2FS-fs (loop0): Found nat_bits in checkpoint [ 109.226004][ T12] team0 (unregistering): Port device team_slave_1 removed [ 109.226087][ T6388] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 109.248013][ T6388] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 109.397578][ T12] team0 (unregistering): Port device team_slave_0 removed [ 109.519863][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.603637][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.766331][ T6398] loop1: detected capacity change from 0 to 512 [ 110.396879][ T6405] loop1: detected capacity change from 0 to 512 [ 110.421339][ T6405] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.453134][ T6405] EXT4-fs (loop1): 1 truncate cleaned up [ 110.474017][ T6405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.552321][ T5786] Bluetooth: hci0: command tx timeout [ 110.614476][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.756456][ T12] bond0 (unregistering): Released all slaves [ 110.811652][ T6410] loop1: detected capacity change from 0 to 4096 [ 110.859128][ T6410] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 110.869543][ T6410] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 111.005142][ T6410] ntfs3: loop1: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size [ 111.267467][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.281611][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.305841][ T6325] bridge_slave_0: entered allmulticast mode [ 111.335738][ T6325] bridge_slave_0: entered promiscuous mode [ 111.367523][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.397358][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.421193][ T6325] bridge_slave_1: entered allmulticast mode [ 111.446633][ T6325] bridge_slave_1: entered promiscuous mode [ 111.586505][ T6325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.638041][ T6325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.682266][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.805892][ T6428] loop0: detected capacity change from 0 to 512 [ 111.820149][ T6325] team0: Port device team_slave_0 added [ 111.829843][ T6428] EXT4-fs: Ignoring removed i_version option [ 111.860905][ T6428] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.903537][ T6325] team0: Port device team_slave_1 added [ 111.916035][ T8] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 111.940054][ T8] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 111.983524][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 111.999112][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 112.042304][ T8] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 112.061554][ T8] usb 2-1: Product: syz [ 112.101457][ T8] usb 2-1: Manufacturer: syz [ 112.119028][ T8] usb 2-1: SerialNumber: syz [ 112.150162][ T8] usb 2-1: config 0 descriptor?? [ 112.158063][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.176369][ T8] hub 2-1:0.0: bad descriptor, ignoring hub [ 112.189421][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.218239][ T6428] EXT4-fs (loop0): Test dummy encryption mode enabled [ 112.225260][ T8] hub: probe of 2-1:0.0 failed with error -5 [ 112.239703][ T8] usb 2-1: selecting invalid altsetting 0 [ 112.251812][ T6428] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c018, mo2=0103] [ 112.260558][ T6428] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.178: inode #13: comm syz.0.178: iget: illegal inode # [ 112.302942][ T6325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.336942][ T6428] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.178: couldn't read orphan inode 13 (err -117) [ 112.394384][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.401497][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.487738][ T6428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.563448][ T8] usb 2-1: USB disconnect, device number 3 [ 112.615288][ T6325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.632478][ T5786] Bluetooth: hci0: command tx timeout [ 112.687114][ T6428] EXT4-fs (loop0): shut down requested (1) [ 112.834696][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.853893][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.026394][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.041508][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.053138][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.072485][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.082043][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.092991][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 113.107045][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.201410][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.234752][ T6325] hsr_slave_0: entered promiscuous mode [ 113.241595][ T6325] hsr_slave_1: entered promiscuous mode [ 113.253655][ T6325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.261499][ T6325] Cannot create hsr debugfs directory [ 113.303068][ T8] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 113.330503][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.494414][ T8] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 113.512763][ T8] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 113.542369][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.551954][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 113.571925][ T8] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 113.608449][ T8] usb 2-1: Product: syz [ 113.613047][ T8] usb 2-1: Manufacturer: syz [ 113.617715][ T8] usb 2-1: SerialNumber: syz [ 113.643586][ T8] usb 2-1: config 0 descriptor?? [ 113.662559][ T8] hub 2-1:0.0: bad descriptor, ignoring hub [ 113.677956][ T8] hub: probe of 2-1:0.0 failed with error -5 [ 113.696554][ T8] usb 2-1: selecting invalid altsetting 0 [ 114.150709][ T5876] usb 2-1: USB disconnect, device number 4 [ 114.344194][ T6453] loop0: detected capacity change from 0 to 32768 [ 114.359041][ T6453] XFS: noikeep mount option is deprecated. [ 114.406924][ T6325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.463773][ T6453] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.519500][ T6325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.598263][ T6325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.643634][ T6325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.643785][ T6453] XFS (loop0): Ending clean mount [ 114.667423][ T6442] chnl_net:caif_netlink_parms(): no params data found [ 114.707207][ T6453] XFS (loop0): Quotacheck needed: Please wait. [ 114.807094][ T6453] XFS (loop0): Quotacheck: Done. [ 115.084783][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.110716][ T6490] loop1: detected capacity change from 0 to 256 [ 115.183451][ T5793] Bluetooth: hci3: command tx timeout [ 115.193223][ T6490] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 115.375610][ T6490] exFAT-fs (loop1): error, invalid size(size(1) > aligned(9223372036854777344) [ 115.375610][ T6490] [ 115.387406][ T6490] exFAT-fs (loop1): Filesystem has been set read-only [ 115.525354][ T6497] loop1: detected capacity change from 0 to 1024 [ 115.533340][ T6497] EXT4-fs: Ignoring removed bh option [ 115.581054][ T6497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.730144][ T6502] loop0: detected capacity change from 0 to 256 [ 115.734773][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.770591][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.797046][ T6442] bridge_slave_0: entered allmulticast mode [ 115.813795][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.824452][ T6442] bridge_slave_0: entered promiscuous mode [ 115.846716][ T6502] FAT-fs (loop0): Directory bread(block 64) failed [ 115.848268][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.876536][ T6502] FAT-fs (loop0): Directory bread(block 65) failed [ 115.877974][ T6442] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.911725][ T6442] bridge_slave_1: entered allmulticast mode [ 115.923591][ T6502] FAT-fs (loop0): Directory bread(block 66) failed [ 115.930196][ T6502] FAT-fs (loop0): Directory bread(block 67) failed [ 115.935067][ T6442] bridge_slave_1: entered promiscuous mode [ 115.950833][ T6502] FAT-fs (loop0): Directory bread(block 68) failed [ 115.958935][ T6502] FAT-fs (loop0): Directory bread(block 69) failed [ 115.966167][ T6502] FAT-fs (loop0): Directory bread(block 70) failed [ 115.973852][ T6502] FAT-fs (loop0): Directory bread(block 71) failed [ 115.980523][ T6502] FAT-fs (loop0): Directory bread(block 72) failed [ 115.988449][ T6502] FAT-fs (loop0): Directory bread(block 73) failed [ 116.134646][ T6502] syz.0.188: attempt to access beyond end of device [ 116.134646][ T6502] loop0: rw=2051, sector=1224, nr_sectors = 544 limit=256 [ 116.255639][ T6442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.314021][ T6442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.478105][ T6442] team0: Port device team_slave_0 added [ 116.566464][ T6442] team0: Port device team_slave_1 added [ 116.692086][ T12] hsr_slave_0: left promiscuous mode [ 116.715144][ T12] hsr_slave_1: left promiscuous mode [ 116.721873][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.735219][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.744093][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.751547][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.774894][ T12] bridge_slave_1: left allmulticast mode [ 116.783522][ T12] bridge_slave_1: left promiscuous mode [ 116.796037][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.807751][ T6519] loop0: detected capacity change from 0 to 1024 [ 116.815345][ T12] bridge_slave_0: left allmulticast mode [ 116.822748][ T12] bridge_slave_0: left promiscuous mode [ 116.839792][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.924181][ T12] veth1_macvtap: left promiscuous mode [ 116.940024][ T12] veth0_macvtap: left promiscuous mode [ 116.957899][ T12] veth1_vlan: left promiscuous mode [ 116.972086][ T12] veth0_vlan: left promiscuous mode [ 117.262479][ T5793] Bluetooth: hci3: command tx timeout [ 117.822041][ T6527] loop0: detected capacity change from 0 to 32768 [ 117.879763][ T6527] JBD2: Ignoring recovery information on journal [ 118.022841][ T6527] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 118.322735][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 118.499699][ T12] team0 (unregistering): Port device team_slave_1 removed [ 118.615538][ T12] team0 (unregistering): Port device team_slave_0 removed [ 118.720629][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.815087][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.906735][ T6550] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 118.913640][ T6550] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 118.938951][ T6550] vhci_hcd vhci_hcd.0: Device attached [ 118.973787][ T6551] vhci_hcd: connection closed [ 118.997617][ T2995] vhci_hcd: stop threads [ 119.014512][ T2995] vhci_hcd: release socket [ 119.026482][ T2995] vhci_hcd: disconnect device [ 119.342405][ T5793] Bluetooth: hci3: command tx timeout [ 119.426155][ T12] bond0 (unregistering): Released all slaves [ 119.456282][ T6546] overlayfs: statfs failed on './file0' [ 119.601993][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.611153][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.639318][ T6442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.685972][ T6325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.713587][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.720981][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.765442][ T6442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.904041][ T6325] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.913728][ T6560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.206'. [ 119.934970][ T6442] hsr_slave_0: entered promiscuous mode [ 119.955962][ T6442] hsr_slave_1: entered promiscuous mode [ 119.979236][ T6442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.989211][ T6442] Cannot create hsr debugfs directory [ 120.194624][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.201817][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.219551][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.226754][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.626323][ T6442] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.632398][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.655041][ T6442] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.678629][ T6442] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.701464][ T6442] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 120.835143][ T9] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 120.862956][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 120.890913][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 120.910501][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 120.919751][ T6325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.950158][ T6442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.963428][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 120.978774][ T9] usb 1-1: Product: syz [ 120.995534][ T9] usb 1-1: Manufacturer: syz [ 121.005037][ T9] usb 1-1: SerialNumber: syz [ 121.020330][ T9] usb 1-1: config 0 descriptor?? [ 121.020444][ T6442] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.046309][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 121.069206][ T9] hub: probe of 1-1:0.0 failed with error -5 [ 121.078553][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.085758][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.115743][ T9] usb 1-1: selecting invalid altsetting 0 [ 121.128452][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.136551][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.422691][ T5793] Bluetooth: hci3: command tx timeout [ 121.802167][ T6325] veth0_vlan: entered promiscuous mode [ 121.819697][ T6442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.828463][ T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:1) [ 121.847492][ T27] usb 1-1: USB disconnect, device number 3 [ 121.867405][ T6325] veth1_vlan: entered promiscuous mode [ 122.009755][ T6325] veth0_macvtap: entered promiscuous mode [ 122.037768][ T6325] veth1_macvtap: entered promiscuous mode [ 122.080000][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.110242][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.120257][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.122552][ T27] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 122.131081][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.154831][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.171238][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.198230][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.242278][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.283742][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.314254][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.361476][ T6325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.375198][ T27] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 122.385350][ T27] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 122.396122][ T6325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.409879][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 122.416726][ T6325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.425892][ T6325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.437846][ T27] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.447921][ T27] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 122.469212][ T27] usb 1-1: Product: syz [ 122.478378][ T27] usb 1-1: Manufacturer: syz [ 122.509200][ T27] usb 1-1: SerialNumber: syz [ 122.530375][ T27] usb 1-1: config 0 descriptor?? [ 122.567854][ T27] hub 1-1:0.0: bad descriptor, ignoring hub [ 122.592909][ T27] hub: probe of 1-1:0.0 failed with error -5 [ 122.617581][ T27] usb 1-1: selecting invalid altsetting 0 [ 122.721509][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.779964][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.923296][ T743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.931195][ T743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.022180][ T6442] veth0_vlan: entered promiscuous mode [ 123.075374][ T6442] veth1_vlan: entered promiscuous mode [ 123.113356][ T5776] usb 1-1: USB disconnect, device number 4 [ 123.169486][ T6442] veth0_macvtap: entered promiscuous mode [ 123.216185][ T6442] veth1_macvtap: entered promiscuous mode [ 123.306835][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.327517][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.340909][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.358132][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.368361][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.393608][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.421913][ T6442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.456158][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.476959][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.490474][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.507105][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.518847][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.539292][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.557623][ T6442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.580187][ T6442] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.594600][ T6442] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.607165][ T6442] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.628181][ T6442] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.661701][ T6643] loop1: detected capacity change from 0 to 1024 [ 123.670345][ T6645] loop4: detected capacity change from 0 to 1024 [ 123.704252][ T6645] EXT4-fs: Ignoring removed bh option [ 123.761436][ T6643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.803548][ T6643] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.830660][ T6645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.890517][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.923486][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.024503][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.052714][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.127333][ T6325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.146993][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.611167][ T28] audit: type=1326 audit(1758288582.878:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb98ec29 code=0x7ffc0000 [ 124.654894][ T28] audit: type=1326 audit(1758288582.898:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb98ec29 code=0x7ffc0000 [ 124.709276][ T28] audit: type=1326 audit(1758288582.908:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0fcb98ec29 code=0x7ffc0000 [ 124.743429][ T28] audit: type=1326 audit(1758288582.908:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb98ec29 code=0x7ffc0000 [ 124.842431][ T28] audit: type=1326 audit(1758288582.908:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0fcb98ec29 code=0x7ffc0000 [ 124.932328][ T28] audit: type=1326 audit(1758288583.048:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb98ec29 code=0x7ffc0000 [ 125.015939][ T28] audit: type=1326 audit(1758288583.048:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb98ec29 code=0x7ffc0000 [ 125.077045][ T28] audit: type=1326 audit(1758288583.058:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0fcb9c14e5 code=0x7ffc0000 [ 125.171657][ T28] audit: type=1326 audit(1758288583.208:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0fcb98ec29 code=0x7ffc0000 [ 125.525860][ T6661] loop4: detected capacity change from 0 to 32768 [ 126.257410][ T6698] loop5: detected capacity change from 0 to 512 [ 126.274398][ T6698] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.352540][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 126.442298][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.562472][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 126.587306][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 16129, setting to 1024 [ 126.616237][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 126.637157][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.659965][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.673087][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 126.673538][ T9] usb 5-1: Product: syz [ 126.685177][ T9] usb 5-1: Manufacturer: syz [ 126.689836][ T9] usb 5-1: SerialNumber: syz [ 126.703285][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.739937][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.780534][ T27] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 126.800895][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.815590][ T27] usb 1-1: config 0 descriptor?? [ 126.932448][ T5854] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 126.948196][ T9] cdc_ncm 5-1:1.0: bind() failure [ 126.967439][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 126.991750][ T9] cdc_ncm 5-1:1.1: bind() failure [ 127.010160][ T9] usb 5-1: USB disconnect, device number 2 [ 127.132308][ T5854] usb 6-1: Using ep0 maxpacket: 8 [ 127.139905][ T5854] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 127.164907][ T5854] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 127.182825][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.212675][ T5854] usb 6-1: Product: syz [ 127.217311][ T5854] usb 6-1: Manufacturer: syz [ 127.237503][ T5854] usb 6-1: SerialNumber: syz [ 127.245102][ T5854] usb 6-1: config 0 descriptor?? [ 127.266553][ T5854] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 127.268849][ T27] savu 0003:1E7D:2D5A.0002: unbalanced collection at end of report description [ 127.317857][ T5854] usb 6-1: setting power ON [ 127.322933][ T27] savu 0003:1E7D:2D5A.0002: parse failed [ 127.333793][ T5854] dvb-usb: bulk message failed: -22 (2/0) [ 127.350663][ T27] savu: probe of 0003:1E7D:2D5A.0002 failed with error -22 [ 127.389950][ T5854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.413264][ T5854] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 127.424424][ T5854] usb 6-1: media controller created [ 127.467563][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.483391][ T6709] dvb-usb: bulk message failed: -22 (3/0) [ 127.500163][ T9] usb 1-1: USB disconnect, device number 5 [ 127.507273][ T6709] dvb-usb: bulk message failed: -22 (4/0) [ 127.529544][ T6709] cxusb: i2c read failed [ 127.562790][ T6722] cxusb: i2c wr: len=8192 is too big! [ 127.562790][ T6722] [ 127.586680][ T5854] usb 6-1: selecting invalid altsetting 6 [ 127.599002][ T5854] usb 6-1: digital interface selection failed (-22) [ 127.610562][ T5854] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 127.637186][ T5854] usb 6-1: setting power OFF [ 127.654887][ T5854] dvb-usb: bulk message failed: -22 (2/0) [ 127.661121][ T5854] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 127.691885][ T5854] (NULL device *): no alternate interface [ 127.793993][ T5854] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 127.859237][ T5854] usb 6-1: USB disconnect, device number 2 [ 128.076223][ T6736] loop4: detected capacity change from 0 to 512 [ 128.116508][ T6736] EXT4-fs (loop4): orphan cleanup on readonly fs [ 128.178402][ T6736] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.240: bad orphan inode 13 [ 128.214281][ T6736] ext4_test_bit(bit=12, block=18) = 1 [ 128.219735][ T6736] is_bad_inode(inode)=0 [ 128.249357][ T6736] NEXT_ORPHAN(inode)=2130706432 [ 128.277890][ T6736] max_ino=32 [ 128.288305][ T6736] i_nlink=1 [ 128.300228][ T6736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.524079][ T6751] loop5: detected capacity change from 0 to 4096 [ 128.589269][ T6325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.690624][ T6757] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.857748][ T6760] tap0: tun_chr_ioctl cmd 21731 [ 129.517539][ T6780] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 129.802062][ T6755] loop1: detected capacity change from 0 to 40427 [ 129.835285][ T6787] Zero length message leads to an empty skb [ 129.852218][ T6755] F2FS-fs (loop1): invalid crc value [ 129.879241][ T6755] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.066911][ T6755] F2FS-fs (loop1): Start checkpoint disabled! [ 130.100870][ T6755] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 130.616550][ T6800] loop0: detected capacity change from 0 to 128 [ 130.669936][ T11] kworker/u4:0: attempt to access beyond end of device [ 130.669936][ T11] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 130.703853][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 130.720999][ T6800] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.746469][ T6800] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.768883][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 130.900367][ T6800] fscrypt (loop0, inode 12): Unsupported encryption flags (0x08) [ 131.074603][ T5788] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.078235][ T6810] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 131.112102][ T6810] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 131.184063][ T6812] loop6: detected capacity change from 0 to 524287999 [ 131.220811][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.230274][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.247028][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.256289][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.269548][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.278807][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.287168][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.296441][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.313066][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.322293][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.334802][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.344102][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.356365][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.365641][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.386781][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.396037][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.403987][ T5802] ldm_validate_partition_table(): Disk read failed. [ 131.443019][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.452283][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.465602][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.474878][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.487248][ T5802] Dev loop6: unable to read RDB block 0 [ 131.494054][ T5802] loop6: unable to read partition table [ 131.530838][ T6812] ldm_validate_partition_table(): Disk read failed. [ 131.550226][ T6812] Dev loop6: unable to read RDB block 0 [ 131.594246][ T6812] loop6: unable to read partition table [ 131.602532][ T6812] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 132.388970][ T6846] netlink: 152 bytes leftover after parsing attributes in process `syz.1.271'. [ 132.427873][ T6846] tipc: Started in network mode [ 132.447259][ T6846] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 132.487518][ T6846] tipc: Enabled bearer , priority 10 [ 132.735468][ T6855] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.274'. [ 132.972800][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.979758][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.001756][ T6864] netlink: 'syz.1.279': attribute type 29 has an invalid length. [ 133.010117][ T6864] netlink: 'syz.1.279': attribute type 29 has an invalid length. [ 133.048476][ T6864] netlink: 'syz.1.279': attribute type 29 has an invalid length. [ 133.065234][ T6864] netlink: 'syz.1.279': attribute type 29 has an invalid length. [ 133.127568][ T6865] loop0: detected capacity change from 0 to 4096 [ 133.222680][ T6865] NILFS (loop0): invalid segment: Checksum error in segment payload [ 133.253675][ T6865] NILFS (loop0): trying rollback from an earlier position [ 133.352206][ T6865] NILFS (loop0): recovery complete [ 133.388777][ T6875] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.592428][ T5871] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 133.604471][ T5876] tipc: Node number set to 4269801514 [ 133.812242][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 133.847741][ T5871] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 133.857299][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.877086][ T5871] usb 5-1: config 0 descriptor?? [ 134.122370][ T5871] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 134.167168][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.225014][ T5871] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 134.239572][ T5871] usb 5-1: media controller created [ 134.281756][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.335236][ T5871] az6027: usb out operation failed. (-71) [ 134.350729][ T5871] az6027: usb out operation failed. (-71) [ 134.372861][ T5871] stb0899_attach: Driver disabled by Kconfig [ 134.390593][ T5871] az6027: no front-end attached [ 134.390593][ T5871] [ 134.425237][ T5871] az6027: usb out operation failed. (-71) [ 134.453201][ T5871] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 134.491519][ T5871] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 134.560327][ T5871] dvb-usb: schedule remote query interval to 400 msecs. [ 134.588653][ T5871] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 134.625104][ T5871] usb 5-1: USB disconnect, device number 3 [ 134.835507][ T5871] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 134.911505][ T6881] loop0: detected capacity change from 0 to 32768 [ 135.088589][ T6910] erspan0: entered promiscuous mode [ 135.786050][ T6920] loop0: detected capacity change from 0 to 8192 [ 136.198842][ T6938] netlink: 'syz.5.300': attribute type 29 has an invalid length. [ 136.262864][ T6938] netlink: 'syz.5.300': attribute type 29 has an invalid length. [ 136.297809][ T6938] netlink: 'syz.5.300': attribute type 29 has an invalid length. [ 136.309952][ T6938] netlink: 'syz.5.300': attribute type 29 has an invalid length. [ 136.549702][ T6949] loop0: detected capacity change from 0 to 512 [ 136.640985][ T6949] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.304: corrupted in-inode xattr: invalid ea_ino [ 136.701334][ T6949] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.304: couldn't read orphan inode 15 (err -117) [ 136.731710][ T6949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.015320][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.399518][ T6970] 9pnet_fd: Insufficient options for proto=fd [ 137.661430][ T6984] netlink: 236 bytes leftover after parsing attributes in process `syz.0.314'. [ 138.040073][ T6993] loop1: detected capacity change from 0 to 47 [ 138.586133][ T6975] loop5: detected capacity change from 0 to 32768 [ 138.681709][ T6975] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 138.968299][ T6975] XFS (loop5): Ending clean mount [ 139.358246][ T6442] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 140.595606][ T7027] loop4: detected capacity change from 0 to 32768 [ 140.625617][ T7027] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 140.695379][ T7047] loop1: detected capacity change from 0 to 4096 [ 140.734577][ T7047] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 140.818063][ T7047] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 140.936588][ T6198] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 141.332097][ T28] audit: type=1326 audit(1758288599.618:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.0.333" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc7e98ec29 code=0x0 [ 142.314980][ T7061] loop4: detected capacity change from 0 to 40427 [ 142.363028][ T7061] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 142.370052][ T7061] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 142.455082][ T7061] F2FS-fs (loop4): invalid crc value [ 142.503049][ T7061] F2FS-fs (loop4): Found nat_bits in checkpoint [ 142.689845][ T7061] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 142.722651][ T7061] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 143.021440][ T6325] syz-executor: attempt to access beyond end of device [ 143.021440][ T6325] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.071867][ T6325] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 143.229082][ T7114] loop0: detected capacity change from 0 to 1024 [ 143.261583][ T7108] loop1: detected capacity change from 0 to 8192 [ 143.270277][ T7114] EXT4-fs: Ignoring removed nobh option [ 143.282380][ T7114] EXT4-fs: Ignoring removed bh option [ 143.312442][ T7114] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.352598][ T7108] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.493725][ T7114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.713609][ T5871] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 143.821021][ T7114] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4031: comm syz.0.347: Allocating blocks 497-513 which overlap fs metadata [ 143.918002][ T7114] EXT4-fs (loop0): Remounting filesystem read-only [ 143.952282][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 143.980753][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.034062][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.084644][ T5871] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 144.125884][ T7112] EXT4-fs (loop0): pa ffff8880789d50e8: logic 256, phys. 385, len 8 [ 144.135581][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.189289][ T5871] usb 6-1: config 0 descriptor?? [ 144.207042][ T5871] hub 6-1:0.0: USB hub found [ 144.272006][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.452321][ T5871] hub 6-1:0.0: 1 port detected [ 144.541988][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'. [ 144.832594][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 144.855366][ T5871] usb 6-1: USB disconnect, device number 3 [ 145.075219][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.111841][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.132296][ T23] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 145.170613][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.197782][ T23] usb 1-1: config 0 descriptor?? [ 145.668765][ T23] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 145.698656][ T7172] loop5: detected capacity change from 0 to 2048 [ 145.739171][ T7172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.739785][ T23] playstation 0003:054C:0BA0.0003: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 145.790650][ T7172] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.842542][ T28] audit: type=1800 audit(1758288604.128:15): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.358" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 145.935438][ T23] playstation 0003:054C:0BA0.0003: Invalid reportID received, expected 18 got 146 [ 145.972333][ T23] playstation 0003:054C:0BA0.0003: Failed to retrieve DualShock4 pairing info: -22 [ 145.981751][ T23] playstation 0003:054C:0BA0.0003: Failed to get MAC address from DualShock4 [ 146.037113][ T23] playstation 0003:054C:0BA0.0003: Failed to create dualshock4. [ 146.069775][ T6442] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.105883][ T23] playstation: probe of 0003:054C:0BA0.0003 failed with error -22 [ 146.188638][ T23] usb 1-1: USB disconnect, device number 6 [ 146.421531][ T7188] loop1: detected capacity change from 0 to 256 [ 146.448460][ T7188] exfat: Deprecated parameter 'namecase' [ 146.477036][ T7188] exfat: Deprecated parameter 'namecase' [ 146.557541][ T7188] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 146.707541][ T7169] loop4: detected capacity change from 0 to 40427 [ 146.759213][ T7169] F2FS-fs (loop4): Found nat_bits in checkpoint [ 146.931728][ T7169] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 147.124319][ T7169] syz.4.357: attempt to access beyond end of device [ 147.124319][ T7169] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 147.187664][ T7169] F2FS-fs (loop4): Remounting filesystem read-only [ 147.245593][ T7206] netlink: 132 bytes leftover after parsing attributes in process `syz.0.366'. [ 147.261499][ T7206] netlink: 'syz.0.366': attribute type 12 has an invalid length. [ 147.301150][ T7206] netlink: 132 bytes leftover after parsing attributes in process `syz.0.366'. [ 147.912719][ T5854] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 148.124449][ T5854] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.141550][ T5854] usb 6-1: config 0 has no interface number 0 [ 148.177252][ T5854] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 148.207892][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.254473][ T5854] usb 6-1: Product: syz [ 148.258734][ T5854] usb 6-1: Manufacturer: syz [ 148.282495][ T5854] usb 6-1: SerialNumber: syz [ 148.311445][ T5854] usb 6-1: config 0 descriptor?? [ 148.559685][ T5854] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 148.584197][ T5854] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 148.614876][ T5854] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 148.643720][ T5854] usb 6-1: media controller created [ 148.689446][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.815732][ T5854] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 148.862663][ T5876] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 148.955389][ T7257] loop1: detected capacity change from 0 to 1024 [ 148.970369][ T5854] usb 6-1: USB disconnect, device number 4 [ 149.092200][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 149.130354][ T5876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.167470][ T5876] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 149.204899][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.233361][ T5876] usb 5-1: config 0 descriptor?? [ 149.253264][ T5876] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 149.519073][ T7271] loop0: detected capacity change from 0 to 64 [ 149.528300][ T5141] bcm5974 5-1:0.0: could not read from device [ 149.559900][ T7249] bcm5974 5-1:0.0: could not read from device [ 149.578078][ T5876] usb 5-1: USB disconnect, device number 4 [ 149.610832][ T5141] bcm5974 5-1:0.0: could not read from device [ 150.048680][ T2995] Bluetooth: hci4: Frame reassembly failed (-84) [ 150.199097][ T7295] loop0: detected capacity change from 0 to 256 [ 150.222772][ T7295] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 150.466961][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.512519][ T7301] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 150.664481][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.683559][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 150.707023][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.718694][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.774590][ T7297] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.785721][ T9] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 150.844580][ T7307] netlink: 'syz.0.395': attribute type 1 has an invalid length. [ 151.279352][ T9] usb 2-1: USB disconnect, device number 5 [ 151.574238][ T7321] loop4: detected capacity change from 0 to 1024 [ 151.584989][ T7321] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 151.666477][ T7321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.819357][ T6325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.062406][ T5786] Bluetooth: hci4: command 0x1003 tx timeout [ 152.070184][ T5793] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 152.107386][ T7337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.407'. [ 152.541130][ T7333] loop4: detected capacity change from 0 to 32768 [ 152.589463][ T7333] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 152.663780][ T7333] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 152.792495][ T7355] loop0: detected capacity change from 0 to 64 [ 152.853386][ T5854] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 152.901534][ T7355] hfs: small file entry [ 152.914110][ T7333] overlayfs: upper fs does not support tmpfile. [ 152.974712][ T7333] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 152.995257][ T7333] overlayfs: failed to set xattr on upper [ 153.001180][ T7333] overlayfs: ...falling back to redirect_dir=nofollow. [ 153.009992][ T7333] overlayfs: ...falling back to index=off. [ 153.016844][ T7333] overlayfs: ...falling back to uuid=null. [ 153.023375][ T7333] overlayfs: upper fs missing required features. [ 153.074407][ T5854] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 153.092862][ T5854] usb 6-1: config 0 has no interface number 0 [ 153.112876][ T5854] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.148467][ T5854] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.177147][ T6325] ocfs2: Unmounting device (7,4) on (node local) [ 153.178959][ T5854] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.206284][ T5854] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 153.215894][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.253165][ T5854] usb 6-1: config 0 descriptor?? [ 153.272268][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.402570][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 153.482484][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 153.507432][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.535037][ T9] usb 2-1: Product: syz [ 153.540566][ T9] usb 2-1: Manufacturer: syz [ 153.550273][ T9] usb 2-1: SerialNumber: syz [ 153.563768][ T9] usb 2-1: config 0 descriptor?? [ 153.606434][ T23] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.627982][ T23] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 153.653380][ T23] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 153.685029][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.722865][ T7362] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 153.740556][ T5854] hid (null): report_id 35660 is invalid [ 153.757745][ T23] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 153.922004][ T9] usb 2-1: USB disconnect, device number 6 [ 153.974450][ T5854] input: HID 28bd:0042 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0004/input/input8 [ 154.110903][ T5854] uclogic 0003:28BD:0042.0004: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 154.163651][ T5854] usb 6-1: USB disconnect, device number 5 [ 154.280705][ T23] usb 1-1: USB disconnect, device number 7 [ 154.332020][ T7377] fido_id[7377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 154.716485][ T7388] syz.5.419: attempt to access beyond end of device [ 154.716485][ T7388] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 154.762278][ T7388] FAT-fs (loop11): unable to read boot sector [ 154.847697][ T7393] capability: warning: `syz.4.420' uses deprecated v2 capabilities in a way that may be insecure [ 155.079042][ T7399] input: syz0 as /devices/virtual/input/input9 [ 156.070993][ T7421] loop5: detected capacity change from 0 to 47 [ 156.112129][ C1] sched: RT throttling activated [ 156.414350][ T7403] loop1: detected capacity change from 0 to 131072 [ 156.425267][ T7403] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 156.433452][ T7403] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 156.458334][ T7403] F2FS-fs (loop1): invalid crc value [ 156.487296][ T7426] netlink: 16 bytes leftover after parsing attributes in process `syz.5.432'. [ 156.499775][ T7403] F2FS-fs (loop1): Found nat_bits in checkpoint [ 156.575485][ T7403] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 156.582652][ T7403] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 157.657309][ T7460] loop4: detected capacity change from 0 to 2048 [ 157.796803][ T7460] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.950975][ T7463] loop0: detected capacity change from 0 to 4096 [ 157.972890][ T7460] capability: warning: `syz.4.442' uses 32-bit capabilities (legacy support in use) [ 158.125638][ T7463] ntfs: volume version 3.1. [ 158.372441][ T7463] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 158.432635][ T7463] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 158.562984][ T7471] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 158.607952][ T7471] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 158.770459][ T2995] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 159.114284][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 159.220405][ T7498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.453'. [ 159.280208][ T7498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.453'. [ 159.317346][ T9] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 159.337007][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.359370][ T9] usb 6-1: Product: syz [ 159.367157][ T9] usb 6-1: Manufacturer: syz [ 159.380133][ T9] usb 6-1: SerialNumber: syz [ 159.402036][ T9] usb 6-1: config 0 descriptor?? [ 159.781321][ T9] usb 6-1: USB disconnect, device number 6 [ 159.820674][ T28] audit: type=1326 audit(1758288618.108:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.0.458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc7e98ec29 code=0x0 [ 160.108965][ T7517] loop4: detected capacity change from 0 to 8192 [ 160.137093][ T7517] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 160.161622][ T7517] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 160.171570][ T7517] REISERFS (device loop4): using ordered data mode [ 160.180485][ T7517] reiserfs: using flush barriers [ 160.190371][ T7517] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 160.208778][ T7517] REISERFS (device loop4): checking transaction log (loop4) [ 160.340096][ T7517] REISERFS (device loop4): Using tea hash to sort names [ 160.359243][ T7517] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 160.788532][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.463'. [ 161.130988][ T7546] loop0: detected capacity change from 0 to 512 [ 161.145472][ T7546] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 161.206279][ T7546] EXT4-fs (loop0): orphan cleanup on readonly fs [ 161.236181][ T7546] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.466: Block bitmap for bg 0 marked uninitialized [ 161.387168][ T7546] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 161.439737][ T7546] EXT4-fs (loop0): 1 orphan inode deleted [ 161.453667][ T7546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 161.543425][ T7546] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 161.565234][ T7546] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 161.583929][ T7546] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.466: Block bitmap for bg 0 marked uninitialized [ 161.606400][ T7546] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.466: Block bitmap for bg 0 marked uninitialized [ 161.629442][ T7546] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.466: Block bitmap for bg 0 marked uninitialized [ 161.665307][ T7546] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.466: Block bitmap for bg 0 marked uninitialized [ 161.702774][ T7546] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.466: Block bitmap for bg 0 marked uninitialized [ 161.724464][ T7546] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.466: Block bitmap for bg 0 marked uninitialized [ 161.819625][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.192787][ T7567] loop5: detected capacity change from 0 to 8192 [ 162.224446][ T7567] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 162.238435][ T7567] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 162.249445][ T7567] REISERFS (device loop5): using ordered data mode [ 162.256728][ T7567] reiserfs: using flush barriers [ 162.272060][ T7567] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.301822][ T7567] REISERFS (device loop5): checking transaction log (loop5) [ 162.452363][ T5776] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.648448][ T7567] REISERFS (device loop5): Using tea hash to sort names [ 162.669470][ T5776] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 162.700277][ T7567] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 162.711436][ T5776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.739100][ T5776] usb 5-1: Product: syz [ 162.756763][ T5776] usb 5-1: Manufacturer: syz [ 162.761517][ T5776] usb 5-1: SerialNumber: syz [ 162.802971][ T5776] usb 5-1: config 0 descriptor?? [ 163.184170][ T9] usb 5-1: USB disconnect, device number 5 [ 163.355380][ T7606] loop1: detected capacity change from 0 to 64 [ 163.468483][ T28] audit: type=1800 audit(1758288621.758:17): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.484" name="file1" dev="loop1" ino=22 res=0 errno=0 [ 163.478493][ T7606] hfs: request for non-existent node 131072 in B*Tree [ 163.516680][ T7606] hfs: request for non-existent node 131072 in B*Tree [ 163.709129][ T7615] loop5: detected capacity change from 0 to 256 [ 163.918529][ T7621] process 'syz.1.487' launched './file0' with NULL argv: empty string added [ 164.940175][ T7659] loop4: detected capacity change from 0 to 512 [ 164.948972][ T7659] EXT4-fs: Ignoring removed i_version option [ 164.983725][ T7659] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.057594][ T7659] EXT4-fs (loop4): 1 truncate cleaned up [ 165.082889][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 165.088658][ T7659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.132812][ T7659] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.501: corrupted in-inode xattr: overlapping e_value [ 165.152878][ T7659] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1781: inode #15: comm syz.4.501: unable to update i_inline_off [ 165.187538][ T7659] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.501: corrupted in-inode xattr: overlapping e_value [ 165.278572][ T7668] EXT4-fs error (device loop4): ext4_xattr_ibody_list:797: inode #15: comm syz.4.501: corrupted in-inode xattr: overlapping e_value [ 165.322238][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 165.330120][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 165.348679][ T23] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 165.358355][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.374556][ T23] usb 1-1: Product: syz [ 165.379003][ T23] usb 1-1: Manufacturer: syz [ 165.389590][ T23] usb 1-1: SerialNumber: syz [ 165.401909][ T23] usb 1-1: config 0 descriptor?? [ 165.410877][ T7653] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 165.425699][ T6325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.444585][ T23] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 165.704540][ T5776] usb 1-1: USB disconnect, device number 8 [ 166.450736][ T7710] loop0: detected capacity change from 0 to 512 [ 166.493621][ T7710] EXT4-fs: Ignoring removed i_version option [ 166.518594][ T7710] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 166.599483][ T7710] EXT4-fs (loop0): 1 truncate cleaned up [ 166.623779][ T7710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.747105][ T7717] mmap: syz.1.519 (7717) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 166.770169][ T7720] loop4: detected capacity change from 0 to 2048 [ 166.786750][ T7710] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.513: corrupted in-inode xattr: overlapping e_value [ 166.838319][ T7710] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1781: inode #15: comm syz.0.513: unable to update i_inline_off [ 166.882714][ T7720] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.917933][ T7724] EXT4-fs error (device loop0): ext4_xattr_ibody_list:797: inode #15: comm syz.0.513: corrupted in-inode xattr: overlapping e_value [ 166.990003][ T7710] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.513: corrupted in-inode xattr: overlapping e_value [ 167.021333][ T7726] loop5: detected capacity change from 0 to 4096 [ 167.040926][ T7720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.118533][ T7726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.178907][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.190814][ T7720] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #12: block 9: comm syz.4.517: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 167.252769][ T7720] EXT4-fs (loop4): Remounting filesystem read-only [ 167.312724][ T5776] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 167.340189][ T7726] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #15: comm syz.5.520: corrupted inode contents [ 167.385940][ T6325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.442344][ T7726] EXT4-fs error (device loop5): ext4_dirty_inode:6106: inode #15: comm syz.5.520: mark_inode_dirty error [ 167.486438][ T7726] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #15: comm syz.5.520: corrupted inode contents [ 167.546985][ T7726] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.520: mark_inode_dirty error [ 167.592734][ T7726] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #15: comm syz.5.520: corrupted inode contents [ 167.605674][ T5776] usb 2-1: config 0 has no interfaces? [ 167.611764][ T5776] usb 2-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 167.632247][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.673257][ T5776] usb 2-1: config 0 descriptor?? [ 167.706001][ T7726] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.520: mark_inode_dirty error [ 167.751043][ T7726] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #15: comm syz.5.520: corrupted inode contents [ 167.828819][ T7726] EXT4-fs error (device loop5): ext4_truncate:4288: inode #15: comm syz.5.520: mark_inode_dirty error [ 167.910921][ T7726] EXT4-fs error (device loop5) in ext4_setattr:5645: Corrupt filesystem [ 167.963617][ T7730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.986308][ T7730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.053004][ T5854] usb 2-1: USB disconnect, device number 7 [ 168.622369][ T5854] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 168.832264][ T5854] usb 2-1: Using ep0 maxpacket: 8 [ 168.844807][ T5854] usb 2-1: config index 0 descriptor too short (expected 72, got 36) [ 168.864381][ T5854] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 168.905166][ T5854] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 168.924914][ T7726] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #15: comm syz.5.520: corrupted inode contents [ 168.938513][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.940639][ T7778] loop0: detected capacity change from 0 to 2048 [ 168.958379][ T5854] usb 2-1: Product: syz [ 168.965968][ T5854] usb 2-1: Manufacturer: syz [ 168.982272][ T5854] usb 2-1: SerialNumber: syz [ 169.014870][ T7778] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.081315][ T6442] EXT4-fs warning (device loop5): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 169.098696][ T7778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.146503][ T7778] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 9: comm syz.0.532: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 169.197347][ T7778] EXT4-fs (loop0): Remounting filesystem read-only [ 169.244202][ T6442] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.330741][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.486295][ T5854] usb 2-1: USB disconnect, device number 8 [ 169.604603][ T7791] loop5: detected capacity change from 0 to 1024 [ 169.652904][ T7791] hfsplus: invalid extent max_key_len 65535 [ 169.663329][ T7791] hfsplus: failed to load extents file [ 169.745225][ T7791] loop5: detected capacity change from 0 to 1024 [ 169.835781][ T28] audit: type=1804 audit(1758288628.128:18): pid=7791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.534" name="/newroot/65/file0/file1" dev="loop5" ino=20 res=1 errno=0 [ 170.042025][ T7782] loop4: detected capacity change from 0 to 32768 [ 170.080127][ T7782] XFS: noikeep mount option is deprecated. [ 170.176201][ T7782] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.342281][ T5876] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 170.352923][ T5871] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 170.410147][ T7782] XFS (loop4): Ending clean mount [ 170.440933][ T7782] XFS (loop4): Quotacheck needed: Please wait. [ 170.508383][ T7782] XFS (loop4): Quotacheck: Done. [ 170.555208][ T5876] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.562406][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 170.586733][ T5876] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 170.593643][ T5871] usb 1-1: config 0 interface 0 has no altsetting 0 [ 170.610318][ T5876] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.629737][ T5871] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 170.638866][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.663264][ T7798] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 170.678933][ T6325] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.696173][ T5876] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 170.716532][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.795408][ T5871] usb 1-1: config 0 descriptor?? [ 171.148867][ T5776] usb 6-1: USB disconnect, device number 7 [ 171.307943][ T5871] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 171.336784][ T5871] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 171.362594][ T5871] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 171.370176][ T5871] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 171.402598][ T5871] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 171.420843][ T5871] corsair-cpro 0003:1B1C:0C10.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 171.533679][ T5871] corsair-cpro: probe of 0003:1B1C:0C10.0005 failed with error -71 [ 171.565899][ T5871] usb 1-1: USB disconnect, device number 9 [ 171.599396][ T7824] loop1: detected capacity change from 0 to 32768 [ 171.606977][ T7833] fido_id[7833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 172.259750][ T7846] loop5: detected capacity change from 0 to 1024 [ 172.313395][ T7846] EXT4-fs: Ignoring removed bh option [ 172.431350][ T7846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.589305][ T6442] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.931175][ T7866] loop5: detected capacity change from 0 to 4096 [ 172.952687][ T5776] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 173.048706][ T7866] ntfs: volume version 3.1. [ 173.147574][ T7866] ntfs: (device loop5): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 173.174479][ T5776] usb 1-1: config 0 has no interfaces? [ 173.182607][ T7866] ntfs: (device loop5): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 173.204892][ T5776] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 173.232192][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.240557][ T7873] ntfs: (device loop5): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 173.261512][ T5776] usb 1-1: config 0 descriptor?? [ 173.292520][ T7873] ntfs: (device loop5): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 173.508260][ T11] ntfs: (device loop5): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 173.531313][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.558830][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.616481][ T9] usb 1-1: USB disconnect, device number 10 [ 173.710733][ T7859] loop4: detected capacity change from 0 to 32768 [ 173.786606][ T7864] loop1: detected capacity change from 0 to 32768 [ 173.803755][ T7864] XFS: attr2 mount option is deprecated. [ 173.866384][ T7859] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.883967][ T7864] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.988236][ T7864] XFS (loop1): Ending clean mount [ 174.040776][ T7864] XFS (loop1): Quotacheck needed: Please wait. [ 174.114998][ T7859] XFS (loop4): Ending clean mount [ 174.176311][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 174.186210][ T7864] XFS (loop1): Quotacheck: Done. [ 174.335530][ T6325] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.360088][ T5785] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 174.384440][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 174.401858][ T9] usb 1-1: config index 0 descriptor too short (expected 72, got 36) [ 174.420034][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 174.456497][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 174.482756][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.508722][ T9] usb 1-1: Product: syz [ 174.516912][ T9] usb 1-1: Manufacturer: syz [ 174.521622][ T9] usb 1-1: SerialNumber: syz [ 174.920694][ T27] usb 1-1: USB disconnect, device number 11 [ 175.322340][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 175.532423][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 175.543361][ T23] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.555793][ T23] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 175.566581][ T23] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 175.576007][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.595114][ T7913] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.606474][ T23] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 175.615396][ T7919] loop5: detected capacity change from 0 to 40427 [ 175.645572][ T7919] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x7ffff [ 175.687897][ T7919] F2FS-fs (loop5): invalid crc value [ 175.732319][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 175.735207][ T7919] F2FS-fs (loop5): Found nat_bits in checkpoint [ 175.746679][ T27] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 175.769923][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.793193][ T27] usb 2-1: config 0 descriptor?? [ 175.877770][ T7919] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 175.938773][ T28] audit: type=1800 audit(1758288634.228:19): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.558" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 175.998026][ T5871] usb 5-1: USB disconnect, device number 6 [ 176.008445][ T6442] syz-executor: attempt to access beyond end of device [ 176.008445][ T6442] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.025288][ T6442] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 176.045979][ T27] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 176.092923][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 176.133069][ T27] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 176.140293][ T27] usb 2-1: media controller created [ 176.181033][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.232467][ T27] az6027: usb out operation failed. (-71) [ 176.239294][ T27] az6027: usb out operation failed. (-71) [ 176.245331][ T27] stb0899_attach: Driver disabled by Kconfig [ 176.251379][ T27] az6027: no front-end attached [ 176.251379][ T27] [ 176.259965][ T27] az6027: usb out operation failed. (-71) [ 176.266763][ T27] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 176.285812][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 176.323017][ T27] dvb-usb: schedule remote query interval to 400 msecs. [ 176.330042][ T27] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 176.360963][ T27] usb 2-1: USB disconnect, device number 9 [ 176.416342][ T27] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 176.895594][ T7931] loop5: detected capacity change from 0 to 8192 [ 176.912509][ T7936] Invalid ELF header magic: != ELF [ 176.928825][ T7931] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.966717][ T7931] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 176.999577][ T7931] REISERFS (device loop5): using ordered data mode [ 177.027806][ T7931] reiserfs: using flush barriers [ 177.032998][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 177.043678][ T7931] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 177.077858][ T7931] REISERFS (device loop5): checking transaction log (loop5) [ 177.255428][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.271689][ T7931] REISERFS (device loop5): Using tea hash to sort names [ 177.285557][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.285869][ T7931] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 177.314959][ T27] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 177.343610][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.376184][ T27] usb 5-1: config 0 descriptor?? [ 177.812264][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 178.027433][ T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 178.062529][ T23] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 178.082197][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 178.091334][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.124772][ T7939] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 178.156908][ T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 178.236426][ T27] hid-led: probe of 0003:27B8:01ED.0006 failed with error -71 [ 178.259365][ T27] usb 5-1: USB disconnect, device number 7 [ 178.398662][ T7943] loop0: detected capacity change from 0 to 40427 [ 178.441285][ T7943] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 178.456583][ T7943] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 178.465831][ T7943] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x7ffff [ 178.477325][ T7943] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x7 [ 178.484541][ T7946] loop5: detected capacity change from 0 to 32768 [ 178.499744][ T7943] F2FS-fs (loop0): invalid crc value [ 178.512295][ T7946] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.567 (7946) [ 178.559166][ T7943] F2FS-fs (loop0): Found nat_bits in checkpoint [ 178.568041][ T7946] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 178.605178][ T7946] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 178.615457][ T7946] BTRFS info (device loop5): enabling auto defrag [ 178.622934][ T7946] BTRFS info (device loop5): doing ref verification [ 178.630857][ T7946] BTRFS info (device loop5): use no compression [ 178.640829][ T7946] BTRFS info (device loop5): force clearing of disk cache [ 178.656957][ T5854] usb 2-1: USB disconnect, device number 10 [ 178.662052][ T7946] BTRFS info (device loop5): max_inline at 4096 [ 178.669382][ T7946] BTRFS info (device loop5): disabling free space tree [ 178.777548][ T7943] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 178.818774][ T7943] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 178.872328][ T7946] BTRFS info (device loop5): enabling ssd optimizations [ 178.915538][ T7946] BTRFS info (device loop5): auto enabling async discard [ 178.955023][ T7946] BTRFS info (device loop5): rebuilding free space tree [ 178.989940][ T7946] BTRFS info (device loop5): disabling free space tree [ 178.999155][ T7946] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 179.014405][ T7946] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 179.158969][ T5788] syz-executor: attempt to access beyond end of device [ 179.158969][ T5788] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.180847][ T5788] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 179.403238][ T6442] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 179.775444][ T7969] loop4: detected capacity change from 0 to 32768 [ 179.846543][ T7969] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 179.971866][ T7979] loop5: detected capacity change from 0 to 256 [ 179.979570][ T7979] exfat: Deprecated parameter 'utf8' [ 179.986138][ T7979] exfat: Deprecated parameter 'namecase' [ 180.041890][ T7979] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc465a08c, utbl_chksum : 0xe619d30d) [ 180.057318][ T7969] syz.4.568 (7969) used greatest stack depth: 18704 bytes left [ 180.266736][ T6325] ocfs2: Unmounting device (7,4) on (node local) [ 180.563136][ T5871] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 180.767426][ T5871] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.799877][ T5871] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 180.820479][ T5871] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.839876][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.861827][ T7983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 180.873212][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 180.884793][ T5871] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 180.906905][ T7994] loop1: detected capacity change from 0 to 8192 [ 180.930928][ T7994] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 180.957044][ T7994] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 180.986532][ T7994] REISERFS (device loop1): using ordered data mode [ 180.993206][ T7994] reiserfs: using flush barriers [ 181.002288][ T7994] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 181.030063][ T7994] REISERFS (device loop1): checking transaction log (loop1) [ 181.086024][ T9] usb 5-1: config 0 has no interfaces? [ 181.091797][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 181.111479][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.137219][ T9] usb 5-1: config 0 descriptor?? [ 181.346212][ T7994] REISERFS (device loop1): Using tea hash to sort names [ 181.370650][ T7994] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 181.399617][ T9] usb 1-1: USB disconnect, device number 12 [ 181.469451][ T7989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.519267][ T7989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.549238][ T5871] usb 5-1: USB disconnect, device number 8 [ 182.132224][ T5871] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 182.196406][ T8003] loop1: detected capacity change from 0 to 40427 [ 182.212052][ T8003] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 182.219975][ T8003] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 182.242035][ T8003] F2FS-fs (loop1): Found nat_bits in checkpoint [ 182.304021][ T8003] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 182.311142][ T8003] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 182.323900][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 182.347676][ T5871] usb 5-1: config index 0 descriptor too short (expected 72, got 36) [ 182.362229][ T5871] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 182.399981][ T5871] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 182.419113][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.427636][ T5871] usb 5-1: Product: syz [ 182.431950][ T5871] usb 5-1: Manufacturer: syz [ 182.441406][ T5871] usb 5-1: SerialNumber: syz [ 182.737595][ T5871] usb 5-1: USB disconnect, device number 9 [ 183.197036][ T8014] loop0: detected capacity change from 0 to 32768 [ 183.252045][ T8014] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 183.508847][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 183.513712][ T8022] loop4: detected capacity change from 0 to 256 [ 183.559054][ T8022] exfat: Deprecated parameter 'utf8' [ 183.585110][ T8022] exfat: Deprecated parameter 'namecase' [ 183.594785][ T8016] loop1: detected capacity change from 0 to 32768 [ 183.633757][ T8016] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.579 (8016) [ 183.657923][ T8022] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc465a08c, utbl_chksum : 0xe619d30d) [ 183.699104][ T8016] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 183.739935][ T8016] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 183.776186][ T8016] BTRFS info (device loop1): enabling auto defrag [ 183.798862][ T8016] BTRFS info (device loop1): doing ref verification [ 183.817808][ T8016] BTRFS info (device loop1): use no compression [ 183.842262][ T8016] BTRFS info (device loop1): force clearing of disk cache [ 183.870751][ T8016] BTRFS info (device loop1): max_inline at 4096 [ 183.899531][ T8016] BTRFS info (device loop1): disabling free space tree [ 184.103624][ T8016] BTRFS info (device loop1): enabling ssd optimizations [ 184.110657][ T8016] BTRFS info (device loop1): auto enabling async discard [ 184.169749][ T8016] BTRFS info (device loop1): rebuilding free space tree [ 184.223664][ T8016] BTRFS info (device loop1): disabling free space tree [ 184.245699][ T8016] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 184.263678][ T8016] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 184.578324][ T5785] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 184.685069][ T8048] loop0: detected capacity change from 0 to 8192 [ 184.727565][ T8048] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 184.741929][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 184.772415][ T8048] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 184.781826][ T8048] REISERFS (device loop0): using ordered data mode [ 184.789544][ T8048] reiserfs: using flush barriers [ 184.802679][ T8048] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.839265][ T8048] REISERFS (device loop0): checking transaction log (loop0) [ 184.990441][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.026647][ T8048] REISERFS (device loop0): Using tea hash to sort names [ 185.035451][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 185.050151][ T8048] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 185.066239][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.108886][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.163290][ T8049] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 185.185959][ T9] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 185.697312][ T8057] netlink: 40 bytes leftover after parsing attributes in process `syz.1.592'. [ 185.725549][ T23] usb 6-1: USB disconnect, device number 8 [ 186.201594][ T8070] loop1: detected capacity change from 0 to 256 [ 186.215880][ T8070] exfat: Deprecated parameter 'utf8' [ 186.226172][ T8070] exfat: Deprecated parameter 'namecase' [ 186.259914][ T8070] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc465a08c, utbl_chksum : 0xe619d30d) [ 186.586761][ T8056] loop4: detected capacity change from 0 to 40427 [ 186.604518][ T8056] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 186.628079][ T8056] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 186.694398][ T8056] F2FS-fs (loop4): Found nat_bits in checkpoint [ 186.909340][ T8056] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 186.936480][ T8056] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 188.080326][ T8113] loop4: detected capacity change from 0 to 256 [ 188.121499][ T8113] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 188.122590][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 188.174513][ T8113] exFAT-fs (loop4): error, invalid size(size(1) > aligned(9223372036854777344) [ 188.174513][ T8113] [ 188.186104][ T8113] exFAT-fs (loop4): Filesystem has been set read-only [ 188.300392][ T8117] loop0: detected capacity change from 0 to 1024 [ 188.322353][ T5874] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 188.324769][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.351276][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 188.368232][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 188.377837][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.389844][ T8102] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 188.404153][ T9] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 188.499930][ T11] hfsplus: b-tree write err: -5, ino 4 [ 188.535604][ T5874] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 188.561002][ T5874] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 188.576134][ T5874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.585699][ T5874] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 188.597283][ T5874] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 188.610360][ T5874] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 188.637597][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 188.654233][ T5874] usb 2-1: Product: syz [ 188.658455][ T5874] usb 2-1: Manufacturer: syz [ 188.687870][ T5874] cdc_wdm 2-1:1.0: skipping garbage [ 188.693221][ T5874] cdc_wdm 2-1:1.0: skipping garbage [ 188.724548][ T5874] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 188.730573][ T5874] cdc_wdm 2-1:1.0: Unknown control protocol [ 188.789073][ T9] usb 6-1: USB disconnect, device number 9 [ 189.108170][ T27] usb 2-1: USB disconnect, device number 11 [ 189.546438][ T8125] loop4: detected capacity change from 0 to 512 [ 189.569493][ T8125] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.604326][ T8125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.660246][ T8125] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.856320][ T6325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.028042][ T8132] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.036235][ T8122] loop5: detected capacity change from 0 to 40427 [ 190.051488][ T8122] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 190.072721][ T8122] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 190.107360][ T8122] F2FS-fs (loop5): Found nat_bits in checkpoint [ 190.281249][ T8141] sg_write: data in/out 91/10 bytes for SCSI command 0xc0-- guessing data in; [ 190.281249][ T8141] program syz.1.623 not setting count and/or reply_len properly [ 190.363886][ T8122] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 190.370998][ T8122] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 190.854579][ T5827] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 190.985499][ T8161] netlink: 'syz.4.635': attribute type 5 has an invalid length. [ 191.103921][ T5827] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.138122][ T5827] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.185836][ T5827] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.195556][ T8165] loop4: detected capacity change from 0 to 64 [ 191.210523][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.222486][ T8165] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 191.236224][ T8149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 191.287932][ T5827] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 191.349635][ T8167] loop0: detected capacity change from 0 to 1024 [ 191.760009][ T27] usb 2-1: USB disconnect, device number 12 [ 192.254475][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.645'. [ 192.263817][ T8186] netlink: 'syz.5.645': attribute type 20 has an invalid length. [ 192.272835][ T8186] netlink: 'syz.5.645': attribute type 21 has an invalid length. [ 192.427669][ T8188] input: syz1 as /devices/virtual/input/input11 [ 192.551544][ T8171] loop4: detected capacity change from 0 to 40427 [ 192.581370][ T8171] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 192.594935][ T8171] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 192.666101][ T8171] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.840852][ T8171] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 192.876310][ T8171] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 193.093032][ T8208] loop0: detected capacity change from 0 to 512 [ 193.122581][ T8208] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.652: casefold flag without casefold feature [ 193.151384][ T8208] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.652: couldn't read orphan inode 15 (err -117) [ 193.243686][ T8208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.350005][ T28] audit: type=1800 audit(1758288651.638:20): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.652" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 193.479035][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.850654][ T8222] loop1: detected capacity change from 0 to 128 [ 193.878181][ T8222] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.906336][ T8222] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.927038][ T8199] loop5: detected capacity change from 0 to 40427 [ 193.933879][ T8222] EXT4-fs (loop1): Test dummy encryption mode enabled [ 193.970717][ T8222] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.014718][ T8199] F2FS-fs (loop5): invalid crc value [ 194.055279][ T8222] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 194.104668][ T8199] F2FS-fs (loop5): Found nat_bits in checkpoint [ 194.329057][ T8199] F2FS-fs (loop5): Start checkpoint disabled! [ 194.339617][ T5156] udevd[5156]: worker [5802] terminated by signal 33 (Unknown signal 33) [ 194.362756][ T5156] udevd[5156]: worker [5802] failed while handling '/devices/virtual/block/loop5' [ 194.404100][ T8199] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 194.416523][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.425161][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.514603][ T8222] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 194.865088][ T36] kworker/u4:2: attempt to access beyond end of device [ 194.865088][ T36] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 194.902330][ T36] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 194.947174][ T36] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 195.172670][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.391758][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.622977][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.726759][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.964685][ T8222] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.896631][ T36] hsr_slave_0: left promiscuous mode [ 196.907555][ T36] hsr_slave_1: left promiscuous mode [ 196.914343][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.921995][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.932493][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.941066][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.949754][ T36] bridge_slave_1: left allmulticast mode [ 196.957006][ T36] bridge_slave_1: left promiscuous mode [ 196.966147][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.976370][ T36] bridge_slave_0: left allmulticast mode [ 196.982055][ T36] bridge_slave_0: left promiscuous mode [ 196.988832][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.035583][ T36] veth1_macvtap: left promiscuous mode [ 197.041180][ T36] veth0_macvtap: left promiscuous mode [ 197.051693][ T36] veth1_vlan: left promiscuous mode [ 197.059018][ T36] veth0_vlan: left promiscuous mode [ 197.658256][ T36] team0 (unregistering): Port device team_slave_1 removed [ 197.709883][ T36] team0 (unregistering): Port device team_slave_0 removed [ 197.766702][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.817295][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.357541][ T36] bond0 (unregistering): Released all slaves [ 198.759564][ T36] IPVS: stop unused estimator thread 0... [ 198.881476][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.979996][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.075509][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.150970][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.345344][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.447314][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.528910][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.596165][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.811784][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.933229][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.997922][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.101166][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.331251][ T36] tipc: Disabling bearer [ 200.338380][ T36] tipc: Left network mode [ 202.291543][ T36] hsr_slave_0: left promiscuous mode [ 202.299551][ T36] hsr_slave_1: left promiscuous mode [ 202.308826][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.316833][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.326067][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.338683][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.347925][ T36] bridge_slave_1: left allmulticast mode [ 202.357228][ T36] bridge_slave_1: left promiscuous mode [ 202.364356][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.378323][ T36] bridge_slave_0: left allmulticast mode [ 202.385778][ T36] bridge_slave_0: left promiscuous mode [ 202.391614][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.416689][ T36] hsr_slave_0: left promiscuous mode [ 202.427339][ T36] hsr_slave_1: left promiscuous mode [ 202.435205][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.446418][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.456383][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.466368][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.477036][ T36] bridge_slave_1: left allmulticast mode [ 202.485617][ T36] bridge_slave_1: left promiscuous mode [ 202.491379][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.502365][ T36] bridge_slave_0: left allmulticast mode [ 202.508137][ T36] bridge_slave_0: left promiscuous mode [ 202.519310][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.543726][ T36] hsr_slave_0: left promiscuous mode [ 202.549858][ T36] hsr_slave_1: left promiscuous mode [ 202.564405][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.571854][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.586235][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.595354][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.605888][ T36] bridge_slave_1: left allmulticast mode [ 202.611575][ T36] bridge_slave_1: left promiscuous mode [ 202.618910][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.633991][ T36] bridge_slave_0: left allmulticast mode [ 202.639710][ T36] bridge_slave_0: left promiscuous mode [ 202.648290][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.746755][ T36] veth1_macvtap: left promiscuous mode [ 202.755831][ T36] veth0_macvtap: left promiscuous mode [ 202.761554][ T36] veth1_vlan: left promiscuous mode [ 202.767524][ T36] veth0_vlan: left promiscuous mode [ 202.778667][ T36] veth1_macvtap: left promiscuous mode [ 202.784766][ T36] veth0_macvtap: left promiscuous mode [ 202.790460][ T36] veth1_vlan: left promiscuous mode [ 202.800786][ T36] veth0_vlan: left promiscuous mode [ 202.809420][ T36] veth1_macvtap: left promiscuous mode [ 202.820255][ T36] veth0_macvtap: left promiscuous mode [ 202.827679][ T36] veth1_vlan: left promiscuous mode [ 202.837232][ T36] veth0_vlan: left promiscuous mode [ 203.643329][ T36] team0 (unregistering): Port device team_slave_1 removed [ 203.697432][ T36] team0 (unregistering): Port device team_slave_0 removed [ 203.746013][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.795786][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.309146][ T36] bond0 (unregistering): Released all slaves