last executing test programs: 8m17.127169801s ago: executing program 32 (id=268): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd24, 0x0, {0x2, 0x20, 0x14, 0x0, 0xfd, 0x2, 0xfe, 0x7, 0x200}, [@RTA_UID={0x8}, @RTA_IIF={0x8, 0x3, r2}]}, 0x2c}}, 0xea5bc50b6199d7fe) 7m55.314431778s ago: executing program 33 (id=376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @random="b5077544944d", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a878", 0x18, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x4, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) 6m36.966223465s ago: executing program 1 (id=946): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x56, &(0x7f0000000400)={0x5, 0xf, 0x56, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x1, 0x7, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0xff, 0x7, 0x5, 0xd5}, @generic={0x3c, 0x10, 0x7, "914d2af4a9f829d1edefff0508a64d5207caae6dc1f883d8cb801d076f394f009a50443b1fe9b9d5cad1d2b441236f5155df2ed496921926a0"}]}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 6m34.68651759s ago: executing program 1 (id=960): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) write$ppp(r0, &(0x7f0000000640)="00f3", 0x2) 6m34.270244124s ago: executing program 1 (id=964): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000002c0)=@v2={0x2, @adiantum, 0x1, '\x00', @b}) 6m33.577461807s ago: executing program 1 (id=971): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000000)='.\x02\x00', 0x204810, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000003c0)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7}, 0x0, 0x9}}, &(0x7f0000000000), 0x0) 6m33.066819253s ago: executing program 1 (id=974): setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x12cc9210, 0x4) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8, 0x2, 0x819}, 0x14) 6m32.473283363s ago: executing program 1 (id=979): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000040)={[{@umask={'umask', 0x3d, 0xe}}, {@type={'type', 0x3d, "103683de"}}, {@umask={'umask', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x5}}, {@nobarrier}, {@umask={'umask', 0x3d, 0x3}}, {@nls={'nls', 0x3d, 'iso8859-7'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x92041, 0x0, 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 6m31.789214205s ago: executing program 34 (id=979): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000040)={[{@umask={'umask', 0x3d, 0xe}}, {@type={'type', 0x3d, "103683de"}}, {@umask={'umask', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x5}}, {@nobarrier}, {@umask={'umask', 0x3d, 0x3}}, {@nls={'nls', 0x3d, 'iso8859-7'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x92041, 0x0, 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3m59.023637769s ago: executing program 0 (id=2289): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}]}}]}, 0x14c}}, 0x0) 3m58.70754028s ago: executing program 0 (id=2302): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) pwritev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)='\x00!:', 0x3}], 0x1, 0x807, 0x0) 3m58.476373217s ago: executing program 0 (id=2294): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r0, &(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x3}}, 0x10) close(0x3) 3m58.187784237s ago: executing program 0 (id=2296): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000000)='.\x02\x00', 0x204810, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000003c0)="$eJzs3V1v08gawPHHpT1EOVJ1dDhCqCowlLNSkUpwEgiKuPI6k3QgsSPbYdsrVNEUVaSwoqy07Q3LDbsr7X4I9nI/xH4jtPd7syvbSV9oEgN9VfX/RTATe+x5JrX8yG08FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIJZbs+2iJU3jdZbUaG4t8Fu7b/tbH1ggt/YVY/oVseJ/ksvJlXTRlf/trr4c/zcns+m7WcnFRU62/335Pw8uTU4Mth8T8Gf57Qv3tLm1/Xyl1+u+OqpAzqCrF0eva2jPhL5pOQ2tTOiraqVi31msh6pumjpcDiPdUm6gncgP1Lx7SxWr1bLShWW/4zVqTlMPFt6/XbLtinpYaGsnCH3vzsNC6C6aZtN4jaRNvDpucz8+EB+ZSEXaaSm1tt7rlrMGEDcqfkqjUlajkl0qFYulUrFyr3rvvm1PHlhgf0QOtDi6gxZnzCf+ZI/w7A0czkQ//0tTjHjSkSVRQ1+u1CQQX1oj1vcN8v9Xd/TYfvfm/0GWv7K7ekaS/H8tfXdtVP4fEcvJvTZlS7bluaxIT3rSlVenHtHJvhqixRMjofhipCVOskT1lyipSkUqYssTWZS6hKKkLkaaoiWUZQklEp0cUa4EosWRSHwJRMm8uHJLlBSlKlUpixItBVkWXzriSUNq4iR7WZP15HMvi7JGxbjTqDhyGPnBcdeV0pjRkv9xeEd6/gYO4+9B/gcAAAAAAOeWlfz2Pb7+n5KrSa1umto+7bAAAAAAAMARSv7yPxsXU3Htqlhc/wMAAAAAcN5YyT12lojk5XpaWxMruV2KXwIAAAAAAHBOJH//vxYXyRwo18XamS6F638AAAAAAM6JnzLn2A/bF60//pQgmLLetpf+b20kc/M6GxfS7S58vMeoPmNN93eSFJW0mJx09ayVSxvtTIL5oV+sZcVh7Qbg7ATww+cEcGlSfpEbaZsbq2m5OliT9pKvm6YuuH7zQVEcZ3oi0kvRdy/Wv5dk+D97rWkrJ+u9buHpy95qEsvbeC9vN/oTKB6YR3FMLK+T+RaSey6GjngquRGj32/ekrX1XtfeO/6JdPOJ/T2+mR7T5zuZS1vN9We8ze8ffy7us1gYNfp+FMVDjvyd3Ezb3Jy/mRZDoihlRVHaG8Xwz+LwUZSzoigfMgoAOC1rGVnISs53f30jkpF3xp7lviy7y2dm93cyn7aZn0lOrJMzQ87odtYZ3T5kdvv9wDOQRuXYuN9fP8qq7+MN3o/sN2yWrPgjvPB641u5vLm1fXt9Y+VZ91n3RalUrth3bfteSaaSYfQLcg8AYIi9z9ixhub/zKfwWHczrqr/u/OVgoI8lZfSk1VZSO42SL5xMHSv+T1fQ1jIuGrNJ2kyfcLLwpirun8ldzkM9lsa23Z/DOUT+EkAAHBy5jLy8Kfk/4WM6+79uXz81XF+z9PaAADA8dDBBysf/WgFgWk/KVarRSda1Crw3UcqMLWGVsaLdOAuOl5Dq3bgR77rN+PKY1PToQo77bYfRKruB6rth2YpmT5Q9R/9HuqW40XGDdtN7YRaub4XOW6kaiZ0VbvzddOEizpINg7b2jV14zqR8T0V+p3A1QWlQq33NDQ17UWmbuKqp9qBaTlBTj32m52WVjUduoFpR366w0Ffxqv7QSvZbeG0P2wAAM6Iza3t5yu9XvfVMVaG9Zs7+aECAIC+8VkaAAAAAAAAAAAAAAAAAAAAAACcBSdx/x+Vc14ZTAV9VuKhcgSVzFPHm2M/OQE4Vv8EAAD//9YBT3M=") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7}, 0x0, 0x9}}, &(0x7f0000000000), 0x0) 3m57.828040778s ago: executing program 0 (id=2298): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x6030) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x101, 0x2000003, 0x1758}) 3m56.897678849s ago: executing program 0 (id=2308): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x7b) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001f40)=[{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000002c0)="8cfaa9100892e3b08733cbda879a4d5a55abebdb6dc8964bd3565221cffc78b3454d35437ff1b66d135bc688a328e15df149800e78cdf0e499ae06e9dd9b8f299cf0eaf9093e3ad5d28570cf7b891eb00e9d19ee3efa1aea07502c7eb9d1c3bfd897de345a0df6748f0340250629aa8149ed4653329712786a6cb52e98685156d3e2539bf47bd676f909524cbdf60d215fec11c8669e1f487d1452c765d4cba90272dea9d7591baea20cf17349c9a49d7a7d3600db5c14", 0xb7}, {&(0x7f00000008c0)="7002ad4eb32fd512fd79e8fc97d197fda523d49e760a32d648d8", 0x1a}], 0x2, 0x0, 0x0, 0x81}], 0x1, 0x8377f0b276fc996b) 3m56.326375258s ago: executing program 35 (id=2308): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x7b) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001f40)=[{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000002c0)="8cfaa9100892e3b08733cbda879a4d5a55abebdb6dc8964bd3565221cffc78b3454d35437ff1b66d135bc688a328e15df149800e78cdf0e499ae06e9dd9b8f299cf0eaf9093e3ad5d28570cf7b891eb00e9d19ee3efa1aea07502c7eb9d1c3bfd897de345a0df6748f0340250629aa8149ed4653329712786a6cb52e98685156d3e2539bf47bd676f909524cbdf60d215fec11c8669e1f487d1452c765d4cba90272dea9d7591baea20cf17349c9a49d7a7d3600db5c14", 0xb7}, {&(0x7f00000008c0)="7002ad4eb32fd512fd79e8fc97d197fda523d49e760a32d648d8", 0x1a}], 0x2, 0x0, 0x0, 0x81}], 0x1, 0x8377f0b276fc996b) 3m13.658496001s ago: executing program 6 (id=2578): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000280)="30f3be11c176db2792bc8ca6875f156221ac6ed99eaaf7db0eedc9950158fa64ddf841cfcc15081f6d96", 0x2a) 3m12.509479299s ago: executing program 6 (id=2585): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r2, 0x0, 0xffffff6a) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 3m12.060480213s ago: executing program 6 (id=2589): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x10000000}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) 3m11.822391071s ago: executing program 6 (id=2592): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@orlov}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f000000c180)="$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") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000000)='./file1\x00') 3m11.27450624s ago: executing program 6 (id=2596): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) waitid(0x1, r0, 0x0, 0x2, 0x0) wait4(0x0, 0x0, 0x2, 0x0) 3m8.757199222s ago: executing program 6 (id=2605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000110000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x0) 3m8.029178666s ago: executing program 36 (id=2605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000110000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x0) 2m50.761007924s ago: executing program 9 (id=2606): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000140)={[{@uni_xlate}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@numtail}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@flush}, {@numtail}]}, 0x81, 0x2ae, &(0x7f0000001980)="$eJzs3c+KI0UYAPCvJ52ZjArJwZMINujB07CzT7BBRljMSemDXlTcLMgkLEwgsCrGPXkXPPkOvoMP4MU38OBR8OYexJakO3+nM2wkZmX297vM11X1VVdV18xAoCufvD68fPBo9PDJV79Gq5XE0b24F0+T6MRRzH0TAMBt8rQo4o+iFHF8Y9t0Vl+0q6ujw4wQANi39f//AMCL4IMPP3qv2+tdvJ9lrYjht+M8iYhhMs7L+u7D+DwG0Y870Y6/IoqFMn7lfu8i0iybfxgwPo08Yvjxz9V19/eIWf55tKNzPf/d+72L86wUbw0n43x65+nPZryURHSLpOzobrTj1YiiGVUny/y7NfmRH8fbb/5Qjf/vfpxFO375LB7FIB7Muljmf32eZe8U3//5ZTmDPCKZjPOTWbulonGwhwIAAAAAAAAAAAAAAAAAAAAAwK13li10Vs/PmZ8GeHZWXz87H6hRcz5QdcLPZOV8nTtZls2P8RnnzSjz03gtjfS5Th4AAAAAAAAAAAAAAAAAAAD+J0aPv7j8dDDoX60FPxWbJTVB9UZ/VCXpSlW6XnVzPzXB5Y8Ru2c9SxCNamiD5Not5hN65g7T7Y1PdhnYaV0/cbRtDdNBlIP/bvdFeGOnCU6D4l+s83x3TTfJDY0bMXrcqt8kKzvztOrsajR7QKfbNu16UNQsXWNr1vGe9tjxy/vdtNMZNxeLud6mNX2SKyXNPf+mbEj+iz8/AAAAAAAAAAAAAAAAAADAiuVLv/Hbtconz2VIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBwy+//XwTR2SzZDCZVcr8ufSM4uRrV3LZz4GkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0TAAD//0dFVzc=") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 2m50.242533431s ago: executing program 9 (id=2701): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x7, 0xee6, &(0x7f0000001ec0)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 2m49.439974188s ago: executing program 9 (id=2705): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x0, 0x5, 0x28, 0x9, "0adb3fb8"}, 0x5}) 2m48.408312081s ago: executing program 9 (id=2712): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x200, 0x4, 0x8000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8000, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 2m47.108551044s ago: executing program 37 (id=2712): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x200, 0x4, 0x8000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8000, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 1m43.331056442s ago: executing program 8 (id=3112): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x148, 0x0, &(0x7f0000000280)="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", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x50) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x20d00) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1m43.039255541s ago: executing program 8 (id=3116): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000100)='./file0\x00', 0x210800, &(0x7f0000000180)={[{@nolazytime}, {@discard}, {}, {@prjquota}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x31, 0x39, 0x6d]}}, {@qnoenforce}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x300, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0205865, &(0x7f00000000c0)={0x0, 0x0, 0x8001, 0x2}) 1m40.764586726s ago: executing program 8 (id=3131): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)={0x24, r0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) 1m39.502513907s ago: executing program 8 (id=3138): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x26b) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x2010009, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) 1m38.975705765s ago: executing program 8 (id=3145): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x70bd26, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) 1m37.916003169s ago: executing program 8 (id=3150): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x1, 0x0, 0x48}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x6c, 0x0, &(0x7f0000000380)="a18619fbb73e2060a071eb6cd3c6dbd3a5151846d09dd5ab31a1069b1ef653834d41ad4597b9534a5cdafa08f63d11dec833c4e7dc25768570521c9008a1fb856b104de91a6e14b9c4b76ef07a7b696f77e83e3882e1d0f08ba3156709af4eebd96c78fcb401b61f684989b0", 0x4, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 1m37.528073133s ago: executing program 38 (id=3150): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x1, 0x0, 0x48}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x6c, 0x0, &(0x7f0000000380)="a18619fbb73e2060a071eb6cd3c6dbd3a5151846d09dd5ab31a1069b1ef653834d41ad4597b9534a5cdafa08f63d11dec833c4e7dc25768570521c9008a1fb856b104de91a6e14b9c4b76ef07a7b696f77e83e3882e1d0f08ba3156709af4eebd96c78fcb401b61f684989b0", 0x4, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 6.316386252s ago: executing program 7 (id=3783): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x93, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 6.043672031s ago: executing program 7 (id=3785): r0 = eventfd2(0x4, 0x800) io_setup(0x6, &(0x7f0000001300)=0x0) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xffed, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x10, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x5}, 0x0) 5.77919051s ago: executing program 7 (id=3788): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x510adacf27e83721}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xff}]}}}]}, 0x64}}, 0x0) 5.237224778s ago: executing program 7 (id=3793): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x60}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) 4.735417104s ago: executing program 3 (id=3798): mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20) 3.967574949s ago: executing program 3 (id=3803): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e321000c8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0xc4) 3.840557773s ago: executing program 2 (id=3804): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, &(0x7f0000000240)={0x20, 0x22, 0xd, {0xd, 0x0, "d6668f14415e1c60684ac3"}}, 0x0, 0x0, 0x0}, 0x0) 3.450521106s ago: executing program 4 (id=3805): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4a, 0x800000, 0x88, 0x9, 0x5}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 3.430721217s ago: executing program 3 (id=3806): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000003000)=""/4102, 0x1006}], 0x1, 0x600, 0x3) 3.279475892s ago: executing program 3 (id=3807): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) write$yama_ptrace_scope(r0, &(0x7f0000000480)='2\x00', 0x2) 3.113377328s ago: executing program 4 (id=3808): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") chdir(&(0x7f00000001c0)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2.890734735s ago: executing program 7 (id=3809): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xe8040) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000300)=0x8001d) 2.181117498s ago: executing program 4 (id=3811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x2) preadv(r2, &(0x7f0000004140)=[{&(0x7f00000002c0)=""/113, 0x71}], 0x1, 0x43e, 0x8) 1.956907195s ago: executing program 7 (id=3812): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9b, &(0x7f000000bc00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfc6, 0xfffffffffffffff7, 0x6976}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000006900)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="ac2d5b5b8945d57e7869648ebe10b8d2719763b4bf3f6667bf8f722606d2b3593f26218e9a5fba2e7d4166787da71737b380045fb0a682e2915271f214c0112961b73c4638e7ba68deb34826d7682ace7549c83bf52bd9142b6c5adebf82155270d33204c09c07ed4ca2fc932af48646c9624e3e3544d68f61a2b073fb85332599b299a4f441a8e2f74c57aa38b5b596238280c1693bba97ff258679ab84485970b60f81093dda6501baba18a7790ca3e6fcfa12898b9fff3faf613d71f9d64dbd5c2edad8e774fb0da39e532d92164e2d34aff7cae32f3cd7aa9aace000f136323e4808d0c66c0828942def38deb2e1d847555fe0d5ba8084babb3169f9f06246ecd5327758448c9c7e4591da12ff1b084e757d05af4f0f0444ecfcc0c4d2067a98d49fe52412218380bb75e21cd23724e0390b116b9a1c1e3350b3e6f17c5bd1f1adb4ce1d03d5b30eb0690340708f06dfca5c9d74a7c140cabddd0f37d8bcf15e578dde85d7c28ccb1c9633ceeb54bb278d5a097220ca53a2ea4781aca2b70189199938afba9a700a610225311fe8316794ca0ae139a50dbd34d572d6165eaaa94844620045e615d51f5e19c29aadad3539490961135851f15bbfd0604f3926877583d85c45a04c6f155ad6e1966d2004ab6ab51f9beb82dbcdcaaab886564cbf81b581da397eba4fc8fe430ef93ed613cd588e399669b9f4b63481163e6c2b74112538192be9551ca400bc2b947a535fccbc567a68a3ab94554385bb1f2a0e2146310113102a9ffbcbbf44d30e076d363d6201faecf8bbbbc9d7fcd38195860bbc85ee3f5f9b2c990164abc3a7674ab2a631147d708585f52694a46b681cbc623b53a272f21f2aa5597beec8094954541316cc45ec9751fef12369e7272b7bdcb527bac4a19e0bba1b68ef98e3563705e9ca40bb914cece2fd75c2375b81a06dadcdb1c54a175855e30c3d9ca58ca873e43d703b1471526fb3dfe12e140b81df3afae6104e5ffa4e8585b456a7199c75c5abc7afeca743fce310df09062f20b9a99fac5d019338d98606805f4faad9cc81ebf03b7239a340c973828b676af4e594d796689f9823730c5ead8dba256925869ab0d7196a99b75a15f9927852d7813aa5a4cb76764749e882d59c094c5ebd1911153150e8d53aa8abbf360a4045b63e0e296d03158de8aa02b5aeb459dcdc6b9d5aa8c0e455e7cb6a5d9b26ee5420e41d89590a0c04ca8701a6a386716a32e04102f281f66317a21940c0cf83e128f4f83bdf6770170d74d43f3b1f4c0bb5e8c69254e0bfd15c6d02596bf3b547e5b9b8e84390455a9c4b00b633c661616aca4a4158868be21633f343155996eaff00c2c347fea03c6f06e7adcd83cf320e3a446d07dba202e5960632560da8a3b60efe5a814a5cb2a4ff0842fff23897b583b381e5030e506caef8dc97bef9532111e3eb3621870ec39fe2351d3814a02d2f9e38aac1f0897f32ddbffdc6e0acdea95ff7f67865daae1130f68f00985682ecefc43fb6f8521514923b5cf3560be0739aeb4eb00b389d39ebb9b974e054120fcd48c0d6bc09441c2c19f41bdfceed01a3b686921500fae88795f216794d21dd3a98f2fdb5a1590e0cbdc5cd9593b164e255131c21f22ed7e7ed4ec83db91f8bf5f327d7222be1e470a7c0d0a657c73ad606f2ef0c59d3c118c601d23d67ee16ce3658c9153b8131f06c1e4f83c49dbe6dbc3478b1313b9221bc4c5eadebfd16cd07afde509f2e926fcfd5f8feabe836f4080ea5e65c1e4d859f16ac45ad8c804eb9ecce363faf19c1409d8192a644823578ccfd5b643478eb948223676d375f811fffa874f7c2a281104a28baf4da2716ae870abb3e0f05e63466176356728a700fe39ebb62bdbff139fdbf21520022984dc6d3eed1d81b94f28a07cc238ccb64d65e87534c0111bb76212368c6e8e9a536e758fa2f16a2cab9d31984055488b27bcff12bcc5a0fe21a0e44edfb87c681060e6944ff89dce4a9c7122c53acc27913a5fbf15c9ada971df88f0df3f82eb563f63c640ad6e39a1f5c1aad83c364957ec6d645f4243d1fb4ecef275d4c0ca0284064cde0c282d793f290bab5a4dec15f3e2adcc9d455d2e28bd040d6e0f651ac6f20f55d1303d2aaef2104b393afc849e9cd7743ca20a6f092cbf42a67446892493128d38bb0d0f507ffe3fd718ec48eff58df729728bc01ee180d676dfa22c81da0e4e3fda94f4f94195bc82e1f941d8a290ca0d416373d420eba196470e4f25940506061c601f12b3656d6d6b3a47e50d5235b7fd0f82bb0835aee3470b69bf7e59616ece447d9af36c396f687214ff7d7e27961f461c780b4c563aeb47fa9f335cbdade8a06711ba79b6fe8778ac1bc06bb59131c17409c1d1d0cc746aec8c3b1348f9585945192d8e32002c676753ab246a92702fc8e3a3ce89b84661b1b10dcd73fddacd311ca663d483b87a59225f60627eecf409d6188236b198633d47c5f1c0ba0bb4321aac88a6061d5e97883914cd74284ab937b9579ccee6ab5bb39f6274a04e3e7a8c3d033e340357bc15c5f6daa047b1cee448ac380bbde4bf806b0891a04b9e408609b040b7d3a02d2a76d4013756d79244792c543fe2327a3c371852bed5ab54de987bc4699b32ad1c08f7fff7a23069e72bddc9a590b2c707bac3957d46b657a4e17f1914db58fb6436bdd58b86df491016a2b9ebe0c35a859b216f17f4828c8dee30a38ed1fc36347af978999d0c404313cf99c9281c45194abd79475a80ea1486840aad72b1c0c4f17fe35a150fcb574fa9fcc09a7fc5dcd34e15d4bf1bccfa8bf423d2437e2eb0d3ca9324fbfc7e256b862c50ebc8db3fb69f69003d37807af8ddccf2d929ad9d06ebbb7e538d93bb0b7bc828e1639e0b5e89c22badca307ad28183c3083e87c917feb4c882397d397ea2e7ff0e05ebb252940302cdc0f0f7efe40685f7c3e8923e3795d70d69c70d9a071e401cee771f29dcb5316471768464c4659f2c76d11713ab44f4c944a4819deb1248b02457403e9630aaf4a180e9e55bb4d291e9a2bc85a1ed17f906d54935c7e5e8b707ead56284fda0208bd88ab5c3259bd5329c0d26653eb07b6856ad799fd6fa8d2111da3970ff8509bc2ef3a8813d04f36001526b70757646ed4bf25a256751b8ec714f2e62dea19e82aacec389195532bf7f335afae4351adb93c846e22f1f2a3e0d620d81688bd5530e389f2284b3c997d4abab7c30aac1b141425cd9aa315dc5a5e8b04fd503d79896b1494d8be48048c7392fc92c325b76bde4496c49da34c9ff95969bec8f95c356239d5336907957383b12c512fff6d797097a26a5aee9251bae940ef1a19b3f746396300d3baeb476b023f740ed7c1da92fdbf1834c3a882a6079885b933333d0e194cc1f25a06c3a2d370936886cb385d9861d6762c7416a1db5275228b6499cdef9767fb998d43251b963bc4477b2c051b70a0317de5f6ec3158914145bd036ff194df9722d2a3d2ac2397891b573a34ad16236cdc7ca77bc15f0fdbc3cae923d61633a42bab450a80cf3ee6580e792b1617d74fa189d450a64ca12d8c797698208ea61010b6072885b762af598159621f838ebacc00ea11f5924b39b2bbbc5c7d667871ce32e9aa75893a9fa13a2ffe66b360e266446259a8745addb4e186139d86d4e8d48537ac35029b0d87c03e8c1a9b9a422594496feda8bc5502777428fe737198ed896c2128a4f7d552f2eea8fef6e68feaf3cbfd549e622eea7bc988bb16fc49b7ab241426f2e40edcca07d4f947ccb1d3b8c2e9cb14a0c04495dbb75bd9c935f36bfe398455b0e5f927d5726e617c69ca81fe36c3e6ea510c5fe4735161c992f9ebf66727e5a7ded590061d4da3b86b996846a6bb102e47d33465d88a68644c8a76a770d5e0318e6c301e7c7f5575bf15a9589b32cfaa41ee15972488497195a2cb49a6b6f937a8e311e34d311dfd4fe222d3abc095b0b24a1b7193eb3353def0cc1511c8fce9b0a7867ae2fed4db93009646dc91a3745387cbe61b37f749b40d5d38970856b7ab8b6e1e0b81c078c68cb55c57854b8b5863b7a4c87f42e6d6dca2de0326b1b26970168c99f59816877448e7f72626f5354fdb5e033cd6b42e9476665efae66287e656590d1f80b3a09557a57d7de4bade6a122d40a92db1d347463b74151d44a02dbe067259c633b8c84425e77a736fca99f06d0fd66e35365511ec017537f4c212e7f2e23369958c3a7b92feffad9edb12139f1f690f9512725c0a1a164e78b4130c91fd3961df91c1a11783c24b03bcf305fd0e14e6510f4d58cf73326e94f2bc1b1ab295297bee7a98b77afe483a7d66e780d5e111b4202285f580ce571ecc0985501faa0e9f2f5b9848d770d8d8ad7b90a951f83279073e45a0c7abcf89cd6200f7fc320e46ea3de2addee3a984432501063f9928d0897d93dde20fe8fbe4dabc1ac34b0efdb3d7c7b4d49571ea64252d7209ff6d0ae5b95ef35d8160c5976f7ed9c4b69db81a73f6d00fd254c417696d6af694f3688826cc04db8019f2419fa99e47dc436fd76890b5291cd2724717a1e604e6cb5e214235664e8c7148c2bd87996c05bcfe1f29200f40a0d766df3ddc6faef82fb34d385f90b8f0e4bb7ba519e7986735c169cb3546d62fb70fbd49eec4edd70397d2fcbfdb9cd87331fce3c9786b7090501b904c8f925a1dbfa151a18e6c145ebb74da7100de60a627100d6c04ce789a7d4e88692cb090fd9ff2006e5ddb870f5b2aa502081eb7a26744de9a0d29a66ef18eb097e1d396561078e3f9258046a3a3e9b5878964d71b526755084f385d9777b2ab503f9d77c09a46004b5005f69eedee80edd87dd17f2292eba00f71dedb010b7b003a8400f6b44d63559a10bc0052c678ac8ed9658aff4f858778ebb60cbaf53d82248a260c7255f943711e8ac31a4b7a4694dcdace3be25ea43bdc9dfd52d369292d8d7581a6979d1b8ad543baeb9296907e0926025f4c3597e98e2eacd048a5dedd0e9dabc3268ed35a91c6180908af07a95bf374573c7b4f611eb30bbb5f1721a6550f483dcaed51d84fdaa5c6a52d7c4d04ca4edfd2884483c2d5aaebf6f06c6fff8bff813923ac8c6edd0eadefab938442ff09b1b3ff926c963d67a01cccbd86cb69bb5e5a4adca82110f87d3ee7800b14412b48cd94feacbaa9c1921e816d0287ad1198b94fd6de314912b79938a0d00ef5968ca4cb506afa1496ce4886c8c44955a92c9d2395f108a357e240511cc7e6548ac4174e5b52cc1f03ea8fa8268a7283e9cd25518cc71114869537891b64337222f04c111407bc2c8777f1132e1b294ec533610fd1ae3b4aa7e20c315d87aeed3a19151677e04173fbd55e88669f515dea19c8b99f8d7e829734f615a9b95e278fec62cf2d1a37d535ef71996530c62e65bb6fde625447e9122cfd947d7032c7580bfa5286bdde0bd9c4f0c63cbceddc302e1daef7f27bf289f72456802560e4477b27520b45f3a39e787824f169b3fa0ec7fba1c37f4499d43a9cdca7595f3e9ab74223c34819b260130d8a7613653101cc9a6e236ac01965356c90814c632ed421a62654a457ccc66040026451610b94898d13292cf2096fc1744b8fe67cebbcee0a3830be987694e593d732f05e3c6503a71173dc9870c3eca017318b628dd651232ea1c424a98b394188c8b8dbf30d69f1976219fd5b1975f8deebabeca970581f011f428c164bb35e0d6be187a5a2887d6bb0889c41c5c24d0b173f05db5d3a9e50318b448b3c8c", @ANYRESDEC, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) 1.948536726s ago: executing program 5 (id=3813): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003300)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.945396426s ago: executing program 2 (id=3814): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0xf62, 0x4) 1.851645819s ago: executing program 3 (id=3815): unshare(0x22020400) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_complete(r1, r2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 1.734380293s ago: executing program 4 (id=3816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 1.669030075s ago: executing program 2 (id=3817): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@link_local, @random="4bb7e00d2cac", @val={@void, {0x9900, 0x5, 0x0, 0x3}}, {@ipv4={0x88a8, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x100, 0x4e20, 0x8}}}}}, 0x0) 1.51452782s ago: executing program 5 (id=3818): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x410}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 1.502291321s ago: executing program 4 (id=3819): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x11, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0xfee5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.399978764s ago: executing program 3 (id=3820): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.363431525s ago: executing program 2 (id=3821): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.169592881s ago: executing program 4 (id=3822): unshare(0x62040200) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0) r0 = socket(0x2b, 0x1, 0x1) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x5, 0x1, 0x6, 0xd]}, &(0x7f0000000140)=0x54) 1.169441941s ago: executing program 5 (id=3823): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xce}], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000700)={0x904, 0x14, 0x800, 0x70bd26, 0x25dfdbfd, {0x11, 0xf7}, [@INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "e383ed9495218545e7988c5722a6f4903b1bdf9e4d855e7ff54b023ca078edec2481a5126596b3c43a4630f3727b37153b47476751bab9cd53b7dc7ebadf6f738d75164e3e80352596cddf499dd6fe9cae90f57674b5e212aea6eb43af3075e668617ab0191b4b4f9b7e2ebc34205edf1cc3dbaa23f20a594b5bc365f603ad3770972fb0207679f047e5caa642ae8beeb1c1362c425f3c9a6bf85322ee29184220af4a757aea21cfc707620713144feaac0723ce351a631085031c34a56962581f0e5fe48c8ddedfc71c3abe5ce0b924dec602b3048627044c734ab4899604cc79c47bbc497af45d3cd6148022da1266ab8b0fb11cfcea12ee"}, @INET_DIAG_REQ_BYTECODE={0x7ed, 0x1, "7428e765b092374c19129760713c1e91ed95655d62da2dd5974f584d3d36e99444cb837f85db1c38819daabc51161d923cae820c5a007717e06a66ba202f4e159fe7f88e9d9ff46a577f1fe80ff9c647e7ae0c61f6ec15825e4c54c11e2a7bd0d2106a69779bf00537ea715fffefe15967d46051290983288806b924802a99081cd94a8d11527d83806ccb3243392914896de0997643718e42d1fef19f83e4cbf27f92a8fcce410bf76e9c1a04644de87a22ea7ba6527aa4f16b76ef65aefd10eba6b84e77ea69c87f753699753965767baed7bea1ca544bb974448094c7ef5e4d7cf9ffc166594f7e1484a812ac53d76664b4d728ed7754080b2cff7f4d8ef8830f15d9a83c0e4780fbdaf12e3c0dd473a525678b8c78be338042d95b9a462b3d95ebd428fa4fb10047a74bb9584f7c4816e2b1861d9cae52fcea10344b1c7b3af43c578952d3fe01b5ba50f9c457e629229ad53fda1b806aa693d30f0adc4a357c432ee63bd4ae0fb66efbb6ae6696af705ef0c7f7913c07738ae94deb1463fe7a3af705ee44ca587b78355c9566e150832b0447dea63560ff27aba1b7c79f2ad8ac61cf9cda3e6e8c6ed4f03c3175c069f4478a0e7de8f63b1dcc90eacdaf632b3c06c6f6edf8d2ad9f974d44cac0eb95c9ab58d036c48be56c3a46aca9fda52bce4e3891113a155fb7f20c8278b1947abe583b5bd151a3a102aec054cc0222dbde9ff9f7b47fb60f1e414f6af9951c5245303db8c11164b5a04453865b1c335732b2456a5394f8f1dd229280780d2ef19a71fc2d46c3fbb5d13d5085d114f704605da5e35972c3d31ec5239af6a78aeb1138429c41085132686c55c344cc0f10874b6776273493020704102e9ccadf9adaa50813116bfe6803ac319f43aa6233efe3cce42f12d9b230dc006a7d5111808694f87c052535bf359964aaab06c84811c9a43b49fdb47fe836a468ffaf4d3639a34de51f388ac24d8dff6b0c03852bd26ce37a14b4d2689b1dbb71443583c37c66104a1e75fe8cd11fc2e74ce69a3523dafdd653b7315717af7470c1336b86c54592aa20540b13515775f04d6b312722bb277d67c9c03fbb06130e3d47250d5785f1739ca6ea2dfe83f04c7ae53bd5a0bc1aa78041879b4e167db9fdd7ca0b16d37d99b60c093c7271e982dec68928f05cd7557cc5d7805de3eaa35d3778acdb884b1c38617defd29d12b1927ab7a0c4b97450e4c1032c2496a96398b871357713d7df355ab5d5db629e5759d960cb6f039f58c511b3a5b3bd04811b8bc145e476016892810ec4c364271de6b7454dd810e7cb7b06daf00f2e5ebc91d428621d51a4bfbcb4a44753f74181b2342b90641fdf21932eeff9bd033b6502bb74e41c9a6374b61c285c51e808d0d442afbebb8254541477f177c12eb528c89c6ac63a6bb9a40bb4b65803b9673b0feb0b18e794e16ce88ee07ae84193a6650ed4256eaccaa4655e05de0c4bf1e0bda17262141e7cdf6b6e538ac44cc8ba0d667b0580f88c506b0c27f3d595c327b7a302995a4e648fd3cb6cc12f7ff46233724048812cb7a9a72066da2e1e38b6a68013574bd480009cee719c3121070c47afccfdd0017236624977a470771d047fcb10a3e7bd7e2a742e4c92f86ee2176488cafb3c6b30e61cc0c784e30342d596128f21a28a595adb55542d89e6ff1ec570a256861aad28d4cc39435c65f2a388a0e4b0ae84c8cbf44fb6ab4c6325dd4c91ce06356d33f08c9296f2a5efa27e1065ee64c8e97e938790ce583952538521e5c33553b3fe5a794a37261126d8602f90e57b8fdfa603a2c0339e8fa82166ea5d2244bc357900a573512d07e7ac9faaeb3aa6925227de5937c6a0fbc8bd35154164efc824689b556afb25aa873314a1a89c9ee07ecfe0079d633ea34a05845a2329c7deecf985e3dfdfbd18a46f41cd659a6203a8a91e73676022e1412c75fecb8e6add3d481ca6861c701f216d82f282846db9eaa8f378e9e4c5baee311adc4ad72676655734377e6bbe03e1f1c0ddeeb0ba5714c1adacf4412467cda6a00d0fbf6aaaeda791bc584527cb9c9892987c116710fa6b91ead7f95dd905c98a5bf9d55cc48564fd26aa25920eebba7fb6ad5c3d0ad5c6f802403749afa971bd09d1aad3dac9521115965491bd616f393d66339c463a7e7a61543a47556fe26a3457f302cc349e63b747078695d029d39a16ee87649b560d2f946d0f30434daf5b1ed05641f6c6defa8294188903989178c4ff1f711d797d1246e1bd5360affbb10c6ed7099a23da94bdf666f70a85156f663b115bc059e213c35ac7feac4bd550a28b080fcd4c0f7d78466c6ed222e916712da288591cb48bf911e0bce7dc7ae86d880465463b14ff9fddba5a7e15e8bddee33175dbf52b00a33f9a3ef74425331d3631e70ebe69cd13ce6f429f844c2120660a3f2aed43802df57648d2a9df41657ae1698330cdda617c69d5f60a49566b9cbd1a42b0d92c723c1d01f0021f0881a899a93abce2b9c9c41b4df27f07d098f34c5d34232d676ac3dd78bc7f34a9e0bdb9b7f36352479a9797ac47126b0b1908a28794ff93b36df254eabbae7665691d24f4978ce39fc58713fed3c15e144a829840bf894e6ec9dbce6adc89ba773cfa52d37077f3c74a6cf2e32cc1de8c9687feb6b09dc59ac85c850e1971707291aaf746d5c1fe5564f162afab4bf5c18a481d5b36aba647431841352c08372b7b61f6c7f1f4711e861fbc67effc7e22840b6882342743b263dd81046002700be7a5c11e6e60d80adf61583fae39128acd8039da912d31d02d36afb16e158318af8b4447884793ca9c9d1497b6559b62c6d233cc1276a8b7bf27"}]}, 0x904}, 0x1, 0x0, 0x0, 0x40000c8}, 0x45) ptrace(0x10, 0x1) 1.026672856s ago: executing program 2 (id=3824): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3fdd, @local, 'veth1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r0, 0x0, 0x0) 885.732131ms ago: executing program 5 (id=3825): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 626.941789ms ago: executing program 5 (id=3826): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x51b, &(0x7f0000001000)="$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") capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x81, 0xffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) 327.704309ms ago: executing program 2 (id=3827): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000080)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c007680afe8eaed0b3c589f1daf0fe389a4c0a839d3c96e249534fa8c59f66f0cc85c3f06a689df8de150e8fafa3625335e4b43e7531b74c008bda93c795f58e5e86b52a1af8fccc1c69527b2e4334c33bd8a3ace83266d463402c750b85ae0b07ec332198c13b68e9ae20cb684c8515f951156f670f39e3896fd7b3b16b737398cde6ae247e1eeb5d0a5dc27a235f1f0540ae603751adc5ebd6e760979e44a"], 0x1, 0x9e29, &(0x7f0000013e80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) 0s ago: executing program 5 (id=3828): syz_mount_image$udf(&(0x7f0000001880), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x1, 0x4ac, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz1\x00', {0x3, 0xa, 0x0, 0xfff7}, 0x38, [0xffff, 0x8, 0x7, 0xe9, 0x4, 0x6, 0x5, 0x10, 0x2, 0x950c, 0x1298, 0x8, 0x2, 0x5506fd78, 0x7, 0xffffffa2, 0x9, 0x1, 0x8, 0x401, 0x8, 0x3, 0x3, 0x222, 0x1, 0xde, 0x10000, 0x4, 0x5, 0xbf7, 0xfffffffe, 0x200, 0x6, 0x4, 0xa, 0x7, 0x100, 0x9, 0x101, 0x1, 0x8, 0x2, 0x9, 0x4, 0x7, 0x4, 0xa, 0x0, 0x635dfebb, 0x0, 0xfffffffe, 0xd, 0x3, 0x7, 0x5, 0x0, 0x0, 0xae, 0x4, 0xfffffff7, 0x5, 0x3, 0x2, 0xfffffff9], [0x7, 0x7, 0x7, 0xb, 0xdd6, 0x6, 0x5, 0x7fff, 0x7, 0x52263b86, 0x0, 0x3, 0x5ce3, 0xfffffff7, 0xf, 0x3, 0x4, 0x200, 0xa66, 0xb0, 0x6, 0x8, 0x20000, 0x45, 0xffffffff, 0x0, 0x2, 0x3, 0x7, 0x3, 0x6, 0x2b86, 0x139d3, 0x9, 0x385a, 0x3ff8, 0x5, 0x1, 0x4, 0xffffffff, 0x8, 0x4, 0x1, 0x8, 0x4, 0xfffff305, 0x622e, 0x2, 0xf4f4, 0x8, 0x2, 0x36, 0x2, 0x92, 0x0, 0x7, 0xfff, 0xfffffff9, 0x7, 0x1cd4, 0x5a26, 0x17, 0x80000001, 0x9], [0x204, 0x8000, 0x40002e, 0x23, 0x14b, 0x2, 0x200, 0x0, 0x2, 0x80000000, 0x1, 0x6, 0x51d, 0x5, 0x5, 0xa1, 0x6, 0x0, 0x4, 0x1, 0x7, 0x7, 0x2, 0xe000001, 0xacd, 0xbc, 0x7, 0x9, 0x40, 0xc, 0x7, 0x6, 0xa, 0x5, 0x7, 0xb7, 0x401, 0x9, 0x3, 0x4, 0x4, 0x81, 0x5, 0x7, 0xfff, 0xdb91, 0xfffffffc, 0xd, 0x58cf, 0x1, 0x519eb04a, 0xfffffffb, 0xdd7, 0x4c, 0x200ffff, 0x6, 0x4661, 0x4, 0x401, 0x7eedff86, 0x0, 0x1, 0x1, 0xc7be], [0x7, 0x1, 0x3fe0, 0x1, 0x200, 0x101, 0x101, 0x4, 0x99, 0x7287, 0x8003, 0x5, 0xe02c, 0x816b, 0xe, 0x7, 0x101, 0x5, 0x8, 0x4000200, 0x1, 0x5365, 0x6, 0x8, 0x7, 0x2, 0x5, 0xbfff8004, 0xe, 0x3, 0x1, 0xda, 0x4, 0x6f8, 0xfcf, 0x8, 0x80008, 0x2, 0x6, 0x10001, 0x3919, 0x2, 0x1000, 0x1, 0x0, 0x82000000, 0xb, 0xc33, 0x7, 0x7, 0x3, 0xc2e, 0x8, 0x2, 0x0, 0x1, 0x7fff, 0xffffffff, 0x31, 0x7fffffff, 0xff, 0x1ff, 0x3, 0x2d]}, 0x45c) truncate(&(0x7f0000000040)='./file1\x00', 0xfffff) kernel console output (not intermixed with test programs): 4246][ T4287] XFS (loop3): Unmounting Filesystem [ 498.535981][T13382] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 498.745927][T13388] loop2: detected capacity change from 0 to 2048 [ 498.901432][T13388] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e84ec018, mo2=0002] [ 498.909827][T13388] System zones: 0-4 [ 499.021517][T13388] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 499.058419][T13388] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.337885][T12564] EXT4-fs (loop2): unmounting filesystem. [ 499.630612][T11195] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 499.723456][T13403] loop2: detected capacity change from 0 to 4096 [ 499.770824][T13403] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 499.840800][T11195] usb 8-1: Using ep0 maxpacket: 8 [ 499.848651][T11195] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 499.881747][T13403] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 499.906572][T11195] usb 8-1: config 179 has no interface number 0 [ 499.933334][T11195] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 499.995208][T11195] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 500.027214][T11195] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 500.055874][T13414] loop3: detected capacity change from 0 to 1024 [ 500.062988][T11195] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 500.098572][T13414] EXT4-fs: Ignoring removed mblk_io_submit option [ 500.106709][T11195] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 500.190159][T11195] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 500.217449][T13414] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 500.226112][T11195] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.243261][T13399] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 500.425106][T13414] EXT4-fs (loop3): shut down requested (2) [ 500.520893][T11195] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input22 [ 500.743464][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 500.758370][ T5052] usb 8-1: USB disconnect, device number 15 [ 500.764437][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 500.764486][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 500.846880][ T5052] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 501.396837][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.403265][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.843763][T13467] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2989'. [ 501.961570][T11195] kernel write not supported for file /media4 (pid: 11195 comm: kworker/1:20) [ 502.324790][T13483] loop3: detected capacity change from 0 to 256 [ 502.332650][T13481] loop7: detected capacity change from 0 to 64 [ 502.473203][T13490] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2999'. [ 502.669047][T13496] loop7: detected capacity change from 0 to 128 [ 502.673030][ T4685] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 502.870692][ T4685] usb 9-1: Using ep0 maxpacket: 8 [ 502.892705][ T4685] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 502.933390][ T4685] usb 9-1: config 179 has no interface number 0 [ 502.964721][ T4685] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 502.979605][ T4686] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 503.026531][ T4685] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 503.062112][ T4685] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 503.099662][ T4685] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 503.143555][ T4685] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 503.168630][T13510] loop2: detected capacity change from 0 to 512 [ 503.170895][ T4686] usb 6-1: Using ep0 maxpacket: 16 [ 503.189991][ T4686] usb 6-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 503.208346][ T4685] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 503.237518][ T4686] usb 6-1: config 0 interface 0 has no altsetting 0 [ 503.248175][ T4685] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.250447][T13510] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.3006: inode has both inline data and extents flags [ 503.282256][ T4686] usb 6-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 503.291358][T13510] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.3006: couldn't read orphan inode 15 (err -117) [ 503.291638][T13510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 503.357601][T13486] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 503.455447][ T4686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.470634][ T4292] Bluetooth: hci0: command 0x0406 tx timeout [ 503.482639][ T4686] usb 6-1: config 0 descriptor?? [ 503.516808][T12564] EXT4-fs (loop2): unmounting filesystem. [ 503.666296][ T4685] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input23 [ 503.708740][T13517] loop7: detected capacity change from 0 to 8 [ 503.926096][ T4686] lenovo 0003:04B3:3108.0021: item fetching failed at offset 0/41 [ 503.966704][ T4686] lenovo 0003:04B3:3108.0021: hid_parse failed [ 503.982519][ T4686] lenovo: probe of 0003:04B3:3108.0021 failed with error -22 [ 504.068514][T13519] loop3: detected capacity change from 0 to 4096 [ 504.162597][ T5052] usb 6-1: USB disconnect, device number 23 [ 504.260440][ T26] audit: type=1800 audit(1780491975.872:914): pid=13519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3009" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 504.492995][ T5052] usb 9-1: USB disconnect, device number 4 [ 504.498992][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 504.507346][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 504.537806][ T5052] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 505.140833][T13534] program syz.2.3014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 505.452741][ T5052] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 505.672766][ T5052] usb 4-1: Using ep0 maxpacket: 16 [ 505.682590][ T5052] usb 4-1: config 0 interface 0 has no altsetting 0 [ 505.729997][ T5052] usb 4-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.00 [ 505.780837][ T5052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.829458][ T5052] usb 4-1: config 0 descriptor?? [ 505.875280][T13556] loop5: detected capacity change from 0 to 512 [ 505.905078][T13527] loop7: detected capacity change from 0 to 32768 [ 505.966619][T13527] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.3010 (13527) [ 506.025209][T13527] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 506.092172][T13527] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 506.120668][T13527] BTRFS info (device loop7): setting nodatasum [ 506.140140][T13527] BTRFS info (device loop7): force zlib compression, level 3 [ 506.178115][T13527] BTRFS info (device loop7): turning on flush-on-commit [ 506.230264][T13527] BTRFS info (device loop7): max_inline at 4096 [ 506.265444][ T5052] wacom 0003:056A:00C0.0022: ignoring exceeding usage max [ 506.280556][T13527] BTRFS info (device loop7): using free space tree [ 506.311039][ T5052] wacom 0003:056A:00C0.0022: hidraw0: USB HID v0.81 Device [HID 056a:00c0] on usb-dummy_hcd.3-1/input0 [ 506.438977][T13573] loop5: detected capacity change from 0 to 512 [ 506.520812][T13548] loop2: detected capacity change from 0 to 32768 [ 506.528712][ T4685] usb 4-1: USB disconnect, device number 26 [ 506.559069][T13573] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 506.623079][T13527] BTRFS info (device loop7): enabling ssd optimizations [ 506.668498][T13548] JBD2: Ignoring recovery information on journal [ 506.691010][T13573] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 506.801626][T13573] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3021: Corrupt directory, running e2fsck is recommended [ 506.907652][T13548] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 506.952406][T13573] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 507.021302][ T7606] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 507.060991][T13573] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.3021: corrupted in-inode xattr [ 507.083632][T13581] fido_id[13581]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 507.191760][T13573] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.3021: couldn't read orphan inode 15 (err -117) [ 507.278543][T13573] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 507.671521][ T5174] EXT4-fs (loop5): unmounting filesystem. [ 507.680316][T12564] ocfs2: Unmounting device (7,2) on (node local) [ 507.771366][T13593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 507.865913][T13593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.159755][T13609] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 508.187449][T13609] pim6reg1: linktype set to 768 [ 508.934562][T13632] loop7: detected capacity change from 0 to 512 [ 509.000777][ T4320] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 509.035767][T13632] EXT4-fs (loop7): orphan cleanup on readonly fs [ 509.108347][T13632] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 509.232626][ T4320] usb 6-1: config 0 has no interfaces? [ 509.261050][ T4320] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 509.275702][T13632] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.3034: corrupted inode contents [ 509.288809][T13632] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #15: comm syz.7.3034: mark_inode_dirty error [ 509.300958][T13632] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.3034: corrupted inode contents [ 509.325284][T13632] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2947: inode #15: comm syz.7.3034: mark_inode_dirty error [ 509.348108][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.368767][T13615] loop8: detected capacity change from 0 to 131072 [ 509.378754][T13615] F2FS-fs (loop8): Invalid log sectorsize (67108873) [ 509.385584][T13615] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 509.395262][T13615] F2FS-fs (loop8): invalid crc value [ 509.407097][T13632] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2950: inode #15: comm syz.7.3034: mark inode dirty (error -117) [ 509.410984][ T4320] usb 6-1: Product: syz [ 509.424813][T13632] EXT4-fs warning (device loop7): ext4_evict_inode:301: xattr delete (err -117) [ 509.439313][T13632] EXT4-fs (loop7): 1 orphan inode deleted [ 509.445535][T13632] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 509.457417][T13615] F2FS-fs (loop8): Found nat_bits in checkpoint [ 509.502993][T13615] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 509.510116][T13615] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 509.543622][ T4320] usb 6-1: Manufacturer: syz [ 509.579093][ T4320] usb 6-1: SerialNumber: syz [ 509.624918][ T4320] usb 6-1: config 0 descriptor?? [ 509.847011][ T7606] EXT4-fs (loop7): unmounting filesystem. [ 509.948123][ T4683] usb 6-1: USB disconnect, device number 24 [ 509.977286][T13651] loop2: detected capacity change from 0 to 256 [ 510.036117][T13651] exfat: Deprecated parameter 'namecase' [ 510.055301][T13651] exfat: Deprecated parameter 'namecase' [ 510.147551][T13651] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 510.733143][T13669] loop2: detected capacity change from 0 to 512 [ 510.734673][T13671] loop7: detected capacity change from 0 to 128 [ 510.845975][T13669] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.3046: bg 0: block 5: invalid block bitmap [ 510.881246][T13669] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 510.902475][T13669] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3046: invalid indirect mapped block 3 (level 2) [ 510.991717][T13669] EXT4-fs (loop2): 2 truncates cleaned up [ 510.997568][T13669] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 511.468386][ T9] kworker/u4:0: attempt to access beyond end of device [ 511.468386][ T9] loop7: rw=1, sector=128, nr_sectors = 1 limit=128 [ 511.606029][ T9] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 511.629686][T12564] EXT4-fs (loop2): unmounting filesystem. [ 511.729109][ T9] kworker/u4:0: attempt to access beyond end of device [ 511.729109][ T9] loop7: rw=1, sector=129, nr_sectors = 1 limit=128 [ 511.851223][ T9] Buffer I/O error on dev loop7, logical block 129, lost async page write [ 511.937076][ T9] kworker/u4:0: attempt to access beyond end of device [ 511.937076][ T9] loop7: rw=1, sector=130, nr_sectors = 1 limit=128 [ 511.990944][T13677] loop3: detected capacity change from 0 to 131072 [ 512.002523][ T9] Buffer I/O error on dev loop7, logical block 130, lost async page write [ 512.011412][ T9] kworker/u4:0: attempt to access beyond end of device [ 512.011412][ T9] loop7: rw=1, sector=131, nr_sectors = 24 limit=128 [ 512.030707][T13677] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 512.037487][T13677] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 512.048465][T13677] F2FS-fs (loop3): invalid crc value [ 512.124177][T13677] F2FS-fs (loop3): Found nat_bits in checkpoint [ 512.223320][T13677] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 512.230448][T13677] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 512.740700][ T5052] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 512.930604][ T5052] usb 6-1: Using ep0 maxpacket: 16 [ 512.937615][ T5052] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.994966][ T5052] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.055743][ T5052] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 513.129972][ T5052] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 513.165978][ T5052] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.182338][ T5052] usb 6-1: config 0 descriptor?? [ 513.423340][T13719] loop2: detected capacity change from 0 to 512 [ 513.535380][T13719] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.3061: inode has both inline data and extents flags [ 513.618936][ T5052] microsoft 0003:045E:07DA.0023: No inputs registered, leaving [ 513.652449][ T5052] microsoft 0003:045E:07DA.0023: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 513.690585][T13719] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.3061: couldn't read orphan inode 15 (err -117) [ 513.710609][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 513.745125][ T5052] microsoft 0003:045E:07DA.0023: no inputs found [ 513.768605][ T5052] microsoft 0003:045E:07DA.0023: could not initialize ff, continuing anyway [ 513.796655][T13728] loop8: detected capacity change from 0 to 512 [ 513.819374][ T4539] usb 6-1: USB disconnect, device number 25 [ 513.841039][T13719] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 513.898141][T13728] EXT4-fs (loop8): 1 truncate cleaned up [ 513.938438][T13728] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 514.028623][T13731] fido_id[13731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 514.070763][T13719] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 514.137119][ T26] audit: type=1800 audit(1780491985.752:915): pid=13728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3064" name="file1" dev="loop8" ino=13 res=0 errno=0 [ 514.231404][T12564] EXT4-fs (loop2): unmounting filesystem. [ 514.398973][T11183] EXT4-fs (loop8): unmounting filesystem. [ 514.634639][T13743] netlink: 'syz.8.3068': attribute type 1 has an invalid length. [ 514.926726][T13748] loop2: detected capacity change from 0 to 2048 [ 515.020626][T13748] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 515.190779][T13734] infiniband syz2: set down [ 515.196298][T13734] infiniband syz2: added syzkaller0 [ 515.566969][T13734] RDS/IB: syz2: added [ 515.616458][T13734] smc: adding ib device syz2 with port count 1 [ 515.642857][T13734] smc: ib device syz2 port 1 has pnetid [ 515.698081][ T28] smc: removing ib device syz2 [ 515.824556][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'. [ 516.046332][T13784] program syz.3.3082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.275854][T13734] rdma_rxe: rxe_register_device failed with error -19 [ 516.294631][T13734] rdma_rxe: failed to add syzkaller0 [ 516.370730][ T4539] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 516.378464][ T5052] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 516.599882][ T5052] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 516.610624][ T4539] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 516.635123][ T4539] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.644682][ T5052] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 516.667332][ T4539] usb 6-1: config 0 descriptor?? [ 516.675036][ T5052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.694363][ T4539] cp210x 6-1:0.0: cp210x converter detected [ 516.734656][ T5052] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 516.767539][T13807] loop8: detected capacity change from 0 to 64 [ 516.792947][T13807] hfs: unable to locate alternate MDB [ 516.815857][T13807] hfs: continuing without an alternate MDB [ 517.101574][ T4539] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 517.135378][ T4539] usb 6-1: cp210x converter now attached to ttyUSB0 [ 517.318190][ T4539] usb 6-1: USB disconnect, device number 26 [ 517.362797][ T4539] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 517.407155][ T4539] cp210x 6-1:0.0: device disconnected [ 517.523510][T13823] netlink: 774 bytes leftover after parsing attributes in process `syz.7.3094'. [ 517.594611][T13816] loop3: detected capacity change from 0 to 8192 [ 517.623335][T13816] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 517.651657][T13816] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 517.677221][T13816] REISERFS (device loop3): using ordered data mode [ 517.772562][T13816] reiserfs: using flush barriers [ 517.798910][ T5052] stv0680 3-1:4.0: Could not get descriptor 0200 [ 517.830697][T13816] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 517.954305][T13816] REISERFS (device loop3): checking transaction log (loop3) [ 518.000931][ T5052] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 518.020894][ T5052] stv0680 3-1:4.0: last error: 34, command = 0xf [ 518.052538][T13816] REISERFS (device loop3): Using r5 hash to sort names [ 518.059489][T13816] REISERFS (device loop3): using 3.5.x disk format [ 518.085811][ T5052] usb 3-1: USB disconnect, device number 6 [ 518.108264][T13816] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 518.477404][T13841] loop5: detected capacity change from 0 to 256 [ 518.600011][T13841] FAT-fs (loop5): Directory bread(block 64) failed [ 518.627305][T13841] FAT-fs (loop5): Directory bread(block 65) failed [ 518.657832][T13841] FAT-fs (loop5): Directory bread(block 66) failed [ 518.688174][T13841] FAT-fs (loop5): Directory bread(block 67) failed [ 518.720919][T13841] FAT-fs (loop5): Directory bread(block 68) failed [ 518.727604][T13841] FAT-fs (loop5): Directory bread(block 69) failed [ 518.791484][T13841] FAT-fs (loop5): Directory bread(block 70) failed [ 518.840636][T13841] FAT-fs (loop5): Directory bread(block 71) failed [ 518.847377][T13841] FAT-fs (loop5): Directory bread(block 72) failed [ 518.872457][T13841] FAT-fs (loop5): Directory bread(block 73) failed [ 518.897652][T13851] loop3: detected capacity change from 0 to 512 [ 518.936580][T13851] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 518.979194][T13851] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 519.027024][T13851] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 519.045588][T13851] System zones: 0-2, 18-18, 34-35 [ 519.065742][T13851] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 519.092779][T13851] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 519.110314][T13851] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 519.136173][T13851] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 519.190379][ T26] audit: type=1800 audit(1780491990.802:916): pid=13851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3101" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 519.210993][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.420430][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 519.544037][T13862] loop5: detected capacity change from 0 to 256 [ 519.575531][T13862] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 519.643218][T13868] loop3: detected capacity change from 0 to 256 [ 519.651149][T13862] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 519.685245][T13868] FAT-fs (loop3): Unrecognized mount option "Í}€" or missing value [ 519.713353][T13862] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 520.315553][T13881] program syz.8.3112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.976862][T13898] serio: Serial port pty24 [ 521.584269][T13916] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 521.668439][T13916] overlayfs: workdir and upperdir must be separate subtrees [ 521.678997][T13894] loop8: detected capacity change from 0 to 32768 [ 521.836177][T13894] XFS (loop8): Mounting V5 Filesystem [ 522.071470][T13894] XFS (loop8): Ending clean mount [ 522.160746][T13894] XFS (loop8): Quotacheck needed: Please wait. [ 522.263803][T13894] XFS (loop8): Quotacheck: Done. [ 522.394800][T13935] loop7: detected capacity change from 0 to 8192 [ 522.437212][T13935] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 522.483077][T13911] loop5: detected capacity change from 0 to 32768 [ 522.496175][T13935] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 522.506587][T13935] REISERFS (device loop7): using ordered data mode [ 522.513862][T13935] reiserfs: using flush barriers [ 522.657327][T13935] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 522.699623][T13911] XFS (loop5): Mounting V5 Filesystem [ 522.745893][T13935] REISERFS (device loop7): checking transaction log (loop7) [ 522.773284][T13935] REISERFS (device loop7): Using r5 hash to sort names [ 522.781160][T11183] XFS (loop8): Unmounting Filesystem [ 522.801302][T13935] REISERFS (device loop7): using 3.5.x disk format [ 522.809103][T13935] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 522.864492][T13911] XFS (loop5): Ending clean mount [ 523.203360][ T5174] XFS (loop5): Unmounting Filesystem [ 523.829307][T13970] input: syz1 as /devices/virtual/input/input28 [ 524.106446][T13979] loop8: detected capacity change from 0 to 512 [ 524.222302][T13979] EXT4-fs error (device loop8): ext4_iget_extra_inode:4763: inode #15: comm syz.8.3138: corrupted in-inode xattr [ 524.321842][T13979] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.3138: couldn't read orphan inode 15 (err -117) [ 524.345085][T13979] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 524.550775][T11183] EXT4-fs error (device loop8): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 524.572082][ T5053] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 524.589952][T11183] EXT4-fs error (device loop8): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 524.631427][T13996] loop3: detected capacity change from 0 to 4096 [ 524.720345][T14002] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 524.790726][ T5053] usb 3-1: Using ep0 maxpacket: 16 [ 524.797748][ T5053] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 524.840789][ T5053] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 524.849037][ T5053] usb 3-1: config 0 has no interface number 0 [ 524.900614][ T5053] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 524.932201][ T5053] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 524.997149][ T5053] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 525.037806][ T5053] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.082976][ T5053] usb 3-1: Product: syz [ 525.108519][ T5053] usb 3-1: Manufacturer: syz [ 525.140728][ T5053] usb 3-1: SerialNumber: syz [ 525.171681][ T5053] usb 3-1: config 0 descriptor?? [ 525.196733][T13992] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 525.210541][T13992] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 525.466161][T13992] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 525.502555][T11183] EXT4-fs (loop8): unmounting filesystem. [ 525.526350][T13992] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 525.673878][T13985] loop7: detected capacity change from 0 to 32768 [ 525.834908][T13985] XFS (loop7): Mounting V5 Filesystem [ 526.126055][ T2931] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.153900][ T5053] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 526.184813][ T5053] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 526.230052][ T5053] asix: probe of 3-1:0.251 failed with error -71 [ 526.261999][ T5053] usb 3-1: USB disconnect, device number 7 [ 526.283363][T13985] XFS (loop7): Ending clean mount [ 526.453046][ T2931] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.653082][ T7606] XFS (loop7): Unmounting Filesystem [ 526.737312][ T2931] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.060336][ T4292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 527.085097][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 527.095472][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 527.108125][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 527.134559][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 527.151731][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 527.156225][ T2931] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.260582][ T4683] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 527.451012][ T4683] usb 4-1: Using ep0 maxpacket: 16 [ 527.462021][ T4683] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.496873][ T4683] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 527.543480][ T4683] usb 4-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 527.609277][ T4683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.660912][ T4683] usb 4-1: Product: syz [ 527.665170][ T4683] usb 4-1: Manufacturer: syz [ 527.669829][ T4683] usb 4-1: SerialNumber: syz [ 527.742448][ T4683] usb 4-1: config 0 descriptor?? [ 527.955133][T14041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.983196][T14041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.013082][ T4320] usb 4-1: USB disconnect, device number 27 [ 528.437053][T14044] chnl_net:caif_netlink_parms(): no params data found [ 528.591008][ T4320] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 528.795069][ T4320] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 528.804824][ T4320] usb 4-1: config 0 has no interface number 0 [ 528.812799][ T4320] usb 4-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 528.858990][ T4320] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 528.868491][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.884562][ T4320] usb 4-1: Product: syz [ 528.888805][ T4320] usb 4-1: Manufacturer: syz [ 528.894132][ T4320] usb 4-1: SerialNumber: syz [ 528.901138][ T4320] usb 4-1: config 0 descriptor?? [ 528.960761][T14044] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.968096][T14044] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.001607][T14044] device bridge_slave_0 entered promiscuous mode [ 529.076520][T14096] loop5: detected capacity change from 0 to 512 [ 529.127378][ T4320] usb 4-1: USB disconnect, device number 28 [ 529.212442][T14096] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 529.222113][T14044] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.230904][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 529.255097][T14044] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.272731][T14096] ext4 filesystem being mounted at /573/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 529.290093][T14044] device bridge_slave_1 entered promiscuous mode [ 529.376669][T14096] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3166: bg 0: block 217: padding at end of block bitmap is not set [ 529.389849][T14103] EXT4-fs (loop5): shut down requested (2) [ 529.542380][ T5174] EXT4-fs (loop5): unmounting filesystem. [ 529.595646][T14044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.606641][T14107] loop2: detected capacity change from 0 to 2048 [ 529.739807][T14107] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 529.792390][T14044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.912836][T12564] EXT4-fs (loop2): unmounting filesystem. [ 530.066928][T14044] team0: Port device team_slave_0 added [ 530.116376][T14120] loop2: detected capacity change from 0 to 256 [ 530.235394][T14044] team0: Port device team_slave_1 added [ 530.311648][T14044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.320568][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.346511][ C0] vkms_vblank_simulate: vblank timer overrun [ 530.419656][T14044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.539063][ T4320] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 530.616889][T14044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.625711][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.663566][T14044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.734839][ T5052] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 530.760656][ T4320] usb 4-1: Using ep0 maxpacket: 16 [ 530.769172][ T4320] usb 4-1: unable to get BOS descriptor or descriptor too short [ 530.786085][ T4320] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 530.794880][ T4320] usb 4-1: config 9 has no interface number 0 [ 530.801341][ T4320] usb 4-1: config 9 interface 57 has no altsetting 0 [ 530.851460][ T4320] usb 4-1: string descriptor 0 read error: -22 [ 530.859778][ T4320] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 530.869472][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.934804][ T5052] usb 6-1: unable to get BOS descriptor or descriptor too short [ 530.949151][ T5052] usb 6-1: not running at top speed; connect to a high speed hub [ 530.963108][ T5052] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.984747][ T5052] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.019295][T14044] device hsr_slave_0 entered promiscuous mode [ 531.047885][ T5052] usb 6-1: string descriptor 0 read error: -22 [ 531.079825][ T5052] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.090240][T14044] device hsr_slave_1 entered promiscuous mode [ 531.100979][T14044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.109599][ T5052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.149633][T14044] Cannot create hsr debugfs directory [ 531.175196][ T5052] usb 6-1: 0:2 : does not exist [ 531.294477][ T2931] device hsr_slave_0 left promiscuous mode [ 531.311084][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 531.321001][ T2931] device hsr_slave_1 left promiscuous mode [ 531.380955][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.388487][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.491795][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.503261][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.523258][ T2931] device bridge_slave_1 left promiscuous mode [ 531.537686][ T2931] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.568034][ T2931] device bridge_slave_0 left promiscuous mode [ 531.576538][ T2931] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.706817][ T2931] device veth1_macvtap left promiscuous mode [ 531.720701][ T2931] device veth0_macvtap left promiscuous mode [ 531.726948][ T2931] device veth1_vlan left promiscuous mode [ 531.745842][ T4320] video4linux radio48: keene_cmd_main failed (-71) [ 531.761227][ T4320] radio-keene 4-1:9.57: V4L2 device registered as radio48 [ 531.769747][ T2931] device veth0_vlan left promiscuous mode [ 531.793620][ T4320] usb 4-1: USB disconnect, device number 29 [ 532.001959][ T5052] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 532.048425][ T5052] usb 6-1: Warning! Unlikely big volume range (=7732), cval->res is probably wrong. [ 532.067275][ T5052] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = -19823/-12091/1 [ 532.130816][T14146] loop7: detected capacity change from 0 to 32768 [ 532.132899][ T5052] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 532.176297][ T5052] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 532.203866][ T26] audit: type=1800 audit(1780492003.822:917): pid=14146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3178" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 532.265319][ T5052] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 532.329482][ T5052] usb 6-1: USB disconnect, device number 27 [ 532.767692][T14160] Set syz1 is full, maxelem 0 reached [ 533.086615][ T4686] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 533.270952][ T4686] usb 4-1: Using ep0 maxpacket: 32 [ 533.280107][ T4686] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 533.298973][ T4686] usb 4-1: config 0 has no interface number 0 [ 533.321861][ T4686] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 533.339806][ T4686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.358707][ T4686] usb 4-1: Product: syz [ 533.368825][ T4686] usb 4-1: Manufacturer: syz [ 533.378946][ T4686] usb 4-1: SerialNumber: syz [ 533.391421][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 533.399838][ T4686] usb 4-1: config 0 descriptor?? [ 533.417481][ T4686] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 533.637013][ T4686] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 533.694273][ T4686] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 534.035340][ T4539] usb 4-1: USB disconnect, device number 30 [ 534.042179][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 534.059825][ T4539] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 534.073532][ T4539] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 534.085728][ T4539] quatech2 4-1:0.51: device disconnected [ 534.086149][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.155334][ T2931] team0 (unregistering): Port device team_slave_1 removed [ 534.233234][ T2931] team0 (unregistering): Port device team_slave_0 removed [ 534.302819][ T2931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.383085][ T2931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.082845][ T2931] bond0 (unregistering): Released all slaves [ 535.215247][T14170] netlink: 'syz.7.3184': attribute type 2 has an invalid length. [ 535.228352][T14170] netlink: 'syz.7.3184': attribute type 8 has an invalid length. [ 535.246610][T14170] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3184'. [ 535.274342][T14173] netlink: 'syz.7.3184': attribute type 2 has an invalid length. [ 535.307525][T14173] netlink: 'syz.7.3184': attribute type 8 has an invalid length. [ 535.317440][T14173] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3184'. [ 535.420855][T14183] program syz.5.3187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 535.470641][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 535.637602][T14188] loop5: detected capacity change from 0 to 64 [ 536.270794][ T5052] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 536.465232][ T5052] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.484843][ T5052] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16648, setting to 1024 [ 536.502015][ T5052] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 536.511420][ T5052] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.527368][T14209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3195'. [ 536.552222][ T5052] usb 8-1: config 0 descriptor?? [ 536.972773][ T5052] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 536.996600][ T5052] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0024/input/input29 [ 537.171947][ C1] usb 8-1: input irq status -75 received [ 537.368654][ T5052] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 537.427137][T14222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3198'. [ 537.437851][ T5052] usb 8-1: USB disconnect, device number 16 [ 537.454713][T14222] netlink: 'syz.5.3198': attribute type 29 has an invalid length. [ 537.470540][T14222] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3198'. [ 537.838014][T14227] fido_id[14227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 537.953545][T14044] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 538.062417][T14044] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 538.121519][T14044] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 538.162483][T14044] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 538.169017][T14236] loop5: detected capacity change from 0 to 1024 [ 538.278298][T14236] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 538.288168][T14236] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.360896][T14236] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.3203: lblock 3 mapped to illegal pblock 3 (length 3) [ 538.382403][T14236] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 538.398836][T14236] EXT4-fs (loop5): This should not happen!! Data will be lost [ 538.398836][T14236] [ 538.410369][T14244] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.3203: lblock 3 mapped to illegal pblock 3 (length 1) [ 538.580953][ T26] audit: type=1800 audit(1780492010.192:918): pid=14244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3203" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 538.650838][ T7798] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 538.780856][ T56] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 538.807293][T14044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.831305][ T56] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 538.850730][ T7798] usb 4-1: Using ep0 maxpacket: 8 [ 538.860906][ T7798] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 538.869530][ T7798] usb 4-1: config 179 has no interface number 0 [ 538.887599][ T56] EXT4-fs (loop5): This should not happen!! Data will be lost [ 538.887599][ T56] [ 538.913779][ T7798] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 538.928691][ T7798] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 538.941093][ T7798] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 538.952606][ T7798] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 538.954470][ T5174] EXT4-fs (loop5): unmounting filesystem. [ 538.980663][ T7798] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 539.006062][ T7798] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 539.025119][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.025794][ T7798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.048198][T14243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 539.069000][T14044] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.106932][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 539.124347][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 539.200156][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 539.220512][ T4537] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 539.241049][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 539.301544][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.308815][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.329407][T14258] loop5: detected capacity change from 0 to 512 [ 539.348690][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 539.394658][T14258] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 539.413371][T14258] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 539.426204][ T4537] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 539.441275][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 539.450363][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 539.459545][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.466772][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.475773][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 539.517951][ T4537] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 539.541187][T14258] EXT4-fs (loop5): 1 truncate cleaned up [ 539.548649][ T4537] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 539.560731][T14258] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 539.584854][ T4537] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 539.614661][ T5052] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input30 [ 539.628653][ T4537] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 539.638396][T14258] EXT4-fs (loop5): shut down requested (1) [ 539.662781][ T4537] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.676071][ T4537] usb 8-1: Product: syz [ 539.680377][ T4537] usb 8-1: Manufacturer: syz [ 539.685978][ T4537] usb 8-1: SerialNumber: syz [ 539.714759][ T4537] usb 8-1: config 0 descriptor?? [ 539.745303][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 539.763030][ T4288] usb 4-1: USB disconnect, device number 31 [ 539.769087][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 539.775751][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 539.777460][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 539.798068][ T4288] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 539.823141][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 539.873479][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 539.887202][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 539.899604][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 539.909453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 539.916944][ T5174] EXT4-fs (loop5): unmounting filesystem. [ 539.923270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 539.966020][T14044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 539.977230][ T4537] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 540.010896][ T7798] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 540.019557][T14044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 540.039011][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 540.048347][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 540.203705][T14250] usb 8-1: Couldn't submit interrupt_out_urb -90 [ 540.213499][ T7798] usb 3-1: Using ep0 maxpacket: 16 [ 540.222146][ T7798] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.265852][ T7798] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 540.320243][ T5052] usb 8-1: USB disconnect, device number 17 [ 540.340875][ T7798] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 540.380588][ T7798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.421676][ T7798] usb 3-1: Product: syz [ 540.425926][ T7798] usb 3-1: Manufacturer: syz [ 540.480513][ T7798] usb 3-1: SerialNumber: syz [ 540.713097][ T7798] usb 3-1: 0:2 : does not exist [ 540.733688][ T7798] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 540.807128][ T7798] usb 3-1: USB disconnect, device number 8 [ 540.979777][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 540.996036][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 541.034893][T14044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.112871][ T4550] udevd[4550]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.338373][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 542.360349][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 542.464863][T14044] device veth0_vlan entered promiscuous mode [ 542.486221][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 542.505724][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 542.559019][T14044] device veth1_vlan entered promiscuous mode [ 542.607635][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 542.662395][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 542.698746][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 542.798393][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 542.842731][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 542.871911][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 542.890070][T14325] loop2: detected capacity change from 0 to 8192 [ 542.899356][T14044] device veth0_macvtap entered promiscuous mode [ 542.927477][T14044] device veth1_macvtap entered promiscuous mode [ 542.953956][T14325] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 542.989490][T14325] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 543.030740][T14325] REISERFS (device loop2): using ordered data mode [ 543.037356][T14325] reiserfs: using flush barriers [ 543.068859][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.088035][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.098361][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.111272][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.121996][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.134300][T14325] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 543.158540][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.183745][T14325] REISERFS (device loop2): checking transaction log (loop2) [ 543.223331][T14325] REISERFS (device loop2): Using r5 hash to sort names [ 543.238334][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.281113][T14325] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 543.296272][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.373753][T14044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.410497][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 543.424358][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 543.451864][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 543.490097][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 543.536796][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.597078][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.671219][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.710559][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.740771][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.780505][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.792952][T14350] loop3: detected capacity change from 0 to 1024 [ 543.810565][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.869853][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.925238][T14044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.006163][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 544.023970][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 544.033118][T14350] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 544.060660][T14350] hfsplus: xattr search failed [ 544.068809][T14044] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.085864][T14350] syz.3.3243: attempt to access beyond end of device [ 544.085864][T14350] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 544.115382][T14044] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.143007][T14044] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.173313][T14044] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.182658][T14350] Buffer I/O error on dev loop3, logical block 458752, async page read [ 544.223777][T14350] syz.3.3243: attempt to access beyond end of device [ 544.223777][T14350] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 544.292637][T14350] Buffer I/O error on dev loop3, logical block 458752, async page read [ 544.442288][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.458616][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.544551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 544.615839][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.634912][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.678519][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 545.459340][T14355] loop5: detected capacity change from 0 to 32768 [ 545.594902][T14355] XFS (loop5): Mounting V5 Filesystem [ 545.810269][T14355] XFS (loop5): Ending clean mount [ 545.910743][ T5052] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 546.077667][ T5174] XFS (loop5): Unmounting Filesystem [ 546.120652][ T5052] usb 5-1: Using ep0 maxpacket: 16 [ 546.128077][ T5052] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 546.172000][ T5052] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 546.212156][ T5052] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 546.242772][ T5052] usb 5-1: config 0 interface 0 has no altsetting 0 [ 546.256669][ T5052] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 546.288384][ T5052] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.323281][ T5052] usb 5-1: Product: syz [ 546.336662][ T5052] usb 5-1: Manufacturer: syz [ 546.354696][ T5052] usb 5-1: SerialNumber: syz [ 546.374474][ T5052] usb 5-1: config 0 descriptor?? [ 546.603299][ T5052] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input31 [ 546.633434][ T3625] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 546.711398][ T3625] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 546.739707][ T3625] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 546.781269][ T3625] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 546.840747][ T4535] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 546.883009][T14396] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 546.939020][ T3625] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 546.958689][ T5052] usb 5-1: USB disconnect, device number 3 [ 547.225156][T14437] ALSA: mixer_oss: invalid OSS volume '' [ 547.266381][T14437] ALSA: mixer_oss: invalid OSS volume '' [ 547.282805][T14437] ALSA: mixer_oss: invalid OSS volume '' [ 547.306150][T14437] ALSA: mixer_oss: invalid OSS volume '' [ 547.363043][T14437] ALSA: mixer_oss: invalid OSS volume '' [ 547.400163][T14437] ALSA: mixer_oss: invalid OSS volume '' [ 547.990899][ T4686] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 548.184682][ T4686] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 548.230851][ T4686] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 548.257239][ T4686] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 548.287601][ T4686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.343257][T14456] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 548.469204][T14474] loop7: detected capacity change from 0 to 256 [ 548.520425][T14474] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 548.665853][T14446] loop5: detected capacity change from 0 to 32768 [ 548.701172][ T4686] usb 5-1: USB disconnect, device number 4 [ 549.266377][T14489] loop7: detected capacity change from 0 to 128 [ 549.421498][T14489] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 549.436704][T14489] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.701889][ T7606] EXT4-fs (loop7): unmounting filesystem. [ 550.347547][T14480] loop2: detected capacity change from 0 to 40427 [ 550.421708][T14480] F2FS-fs (loop2): build fault injection attr: rate: 694, type: 0x3ffff [ 550.477004][T14480] F2FS-fs (loop2): invalid crc value [ 550.551012][T14480] F2FS-fs (loop2): Found nat_bits in checkpoint [ 550.766829][T14480] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 551.516188][T14547] loop3: detected capacity change from 0 to 512 [ 551.546689][T14547] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 551.619276][T14547] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 551.718058][T14553] loop4: detected capacity change from 0 to 164 [ 551.762607][T14547] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 551.777818][T14553] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 551.890719][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 552.644215][ T4283] Bluetooth: hci4: unexpected event 0x01 length: 29 > 1 [ 553.457738][T14597] loop3: detected capacity change from 0 to 8192 [ 553.554116][T14597] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 553.673576][T14609] netlink: 268 bytes leftover after parsing attributes in process `syz.4.3328'. [ 554.343718][T14592] loop5: detected capacity change from 0 to 32768 [ 554.466947][T14592] XFS (loop5): Mounting V5 Filesystem [ 554.594927][T14644] loop3: detected capacity change from 0 to 8192 [ 554.621394][T14644] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 554.636252][T14592] XFS (loop5): Ending clean mount [ 554.655068][T14644] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 554.690715][T14644] REISERFS (device loop3): using ordered data mode [ 554.719490][T14644] reiserfs: using flush barriers [ 554.756042][T14644] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 554.820225][ T5174] XFS (loop5): Unmounting Filesystem [ 554.833383][T14644] REISERFS (device loop3): checking transaction log (loop3) [ 554.919419][T14644] REISERFS (device loop3): Using r5 hash to sort names [ 554.934651][T14644] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 554.983194][T14649] loop7: detected capacity change from 0 to 512 [ 555.016842][T14649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 555.051170][T14649] EXT4-fs: Ignoring removed mblk_io_submit option [ 555.133721][T14649] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 555.190876][T14649] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 555.267743][T14649] EXT4-fs (loop7): 1 truncate cleaned up [ 555.294129][T14649] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 555.375025][T14649] EXT4-fs (loop7): shut down requested (2) [ 555.766893][ T7606] EXT4-fs (loop7): unmounting filesystem. [ 556.341807][T14687] loop4: detected capacity change from 0 to 1024 [ 556.419660][T14687] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 556.484412][T14687] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.654945][T14703] loop5: detected capacity change from 0 to 1024 [ 556.728287][T14044] EXT4-fs (loop4): unmounting filesystem. [ 556.925562][T14708] loop4: detected capacity change from 0 to 512 [ 556.928501][T14709] loop2: detected capacity change from 0 to 22 [ 556.968839][T14708] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.3358: inode #1: comm syz.4.3358: iget: illegal inode # [ 557.017383][T14709] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 557.046585][T14708] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.3358: error while reading EA inode 1 err=-117 [ 557.090285][T14709] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 557.117154][T14708] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.3358: inode #1: comm syz.4.3358: iget: illegal inode # [ 557.179665][T14708] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.3358: error while reading EA inode 1 err=-117 [ 557.261222][T14708] EXT4-fs (loop4): 1 orphan inode deleted [ 557.267052][T14708] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 557.450700][ T5052] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 557.563797][T14044] EXT4-fs (loop4): unmounting filesystem. [ 557.670613][ T5052] usb 8-1: Using ep0 maxpacket: 8 [ 557.683490][ T5052] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 557.730563][ T5052] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.759403][ T5052] usb 8-1: Product: syz [ 557.768771][ T5052] usb 8-1: Manufacturer: syz [ 557.783908][ T5052] usb 8-1: SerialNumber: syz [ 557.809190][ T5052] usb 8-1: config 0 descriptor?? [ 557.841921][ T5052] gspca_main: se401-2.14.0 probing 047d:5003 [ 557.899137][T14731] loop2: detected capacity change from 0 to 1024 [ 557.933588][T14731] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 557.995041][T14731] EXT4-fs (loop2): invalid journal inode [ 558.070668][T14731] EXT4-fs (loop2): can't get journal size [ 558.085784][T14731] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 558.245617][ T5052] gspca_se401: ExtraFeatures: 117 [ 558.251554][ T5052] gspca_se401: Too many frame sizes [ 558.307828][T12564] EXT4-fs (loop2): unmounting filesystem. [ 558.386723][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3371'. [ 558.440763][T14744] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3371'. [ 558.459736][ T7798] usb 8-1: USB disconnect, device number 18 [ 558.567232][T14741] Falling back ldisc for ttyS3. [ 558.768741][T14753] netlink: 'syz.3.3374': attribute type 10 has an invalid length. [ 558.818932][T14753] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.826299][T14753] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.886718][T14752] loop4: detected capacity change from 0 to 4096 [ 558.921836][T14753] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.931383][T14753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.938848][T14753] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.946081][T14753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.046225][T14761] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 559.118230][T14753] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.125558][T14753] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.332006][T14768] loop2: detected capacity change from 0 to 128 [ 559.406283][T14768] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 559.453229][T14768] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 559.548862][T14771] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3380'. [ 559.959030][T14782] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3384'. [ 559.978572][T14784] loop7: detected capacity change from 0 to 64 [ 560.058751][T14780] loop3: detected capacity change from 0 to 4096 [ 560.129009][T14780] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 560.214116][T14780] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 560.956402][T14808] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3393'. [ 561.032677][T14813] loop5: detected capacity change from 0 to 64 [ 561.249194][T14815] loop7: detected capacity change from 0 to 2048 [ 561.333673][T14815] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 561.416374][T14815] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 561.960768][ T7798] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 562.199409][ T7798] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 562.250086][ T7798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.268442][ T7798] usb 6-1: config 0 descriptor?? [ 562.277170][ T7798] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 562.293271][T14821] loop3: detected capacity change from 0 to 32768 [ 562.381449][T14821] ialloc: diAlloc returned -5! [ 562.418130][T14848] ialloc: diAlloc returned -5! [ 562.610696][ T5052] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 562.683427][ T7798] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 562.832948][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.839410][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.849861][ T5052] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 562.880155][ T5052] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.910791][ T5052] usb 3-1: Product: syz [ 562.915912][ T5052] usb 3-1: Manufacturer: syz [ 562.921269][ T5052] usb 3-1: SerialNumber: syz [ 562.938242][ T5052] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 562.950536][ T4539] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 562.972411][ T4686] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 563.094001][ T7798] gspca_cpia1: usb_control_msg 02, error -71 [ 563.114446][ T7798] gspca_cpia1: usb_control_msg 05, error -71 [ 563.121868][ T7798] cpia1 6-1:0.0: unexpected systemstate: 00 [ 563.147708][ T5052] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 563.169565][ T4539] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 563.171091][ T4686] usb 4-1: Using ep0 maxpacket: 32 [ 563.192726][ T7798] usb 6-1: USB disconnect, device number 28 [ 563.210955][ T4539] usb 8-1: config 0 has no interface number 0 [ 563.214766][ T4686] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 563.253177][ T4539] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 563.272572][ T4539] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.281190][ T4686] usb 4-1: config 0 has no interface number 0 [ 563.294611][ T4539] usb 8-1: Product: syz [ 563.298907][ T4539] usb 8-1: Manufacturer: syz [ 563.310386][ T4686] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 563.327758][ T4539] usb 8-1: SerialNumber: syz [ 563.336708][ T4539] usb 8-1: config 0 descriptor?? [ 563.341014][ T4686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.366754][ T4686] usb 4-1: Product: syz [ 563.376878][ T4686] usb 4-1: Manufacturer: syz [ 563.385136][ T4539] usb 8-1: selecting invalid altsetting 1 [ 563.387214][ T4686] usb 4-1: SerialNumber: syz [ 563.411553][ T4539] dvb_ttusb_budget: ttusb_init_controller: error [ 563.419346][ T4686] usb 4-1: config 0 descriptor?? [ 563.435325][ T4539] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 563.462041][ T4686] smsc95xx v2.0.0 [ 563.714722][ T4539] DVB: Unable to find symbol stv0299_attach() [ 563.773143][ T4685] usb 3-1: USB disconnect, device number 9 [ 563.862709][ T4686] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 563.890421][ T4686] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 563.967878][ T4539] DVB: Unable to find symbol tda8083_attach() [ 563.980556][ T4539] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 564.007011][ T4539] usb 8-1: USB disconnect, device number 19 [ 564.125293][ T4686] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 564.168657][ T4686] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 564.195997][ T4686] usb 4-1: USB disconnect, device number 32 [ 564.391840][T14885] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3416'. [ 564.431259][ T5052] usb 3-1: Service connection timeout for: 256 [ 564.437782][ T5052] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 564.481704][ T5052] ath9k_htc: Failed to initialize the device [ 564.494065][T14887] loop5: detected capacity change from 0 to 1024 [ 564.514324][ T4685] usb 3-1: ath9k_htc: USB layer deinitialized [ 564.714699][T14895] loop4: detected capacity change from 0 to 128 [ 564.795572][T14895] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿ" or missing value [ 564.992766][T14901] loop3: detected capacity change from 0 to 256 [ 565.000015][T14901] exfat: Deprecated parameter 'namecase' [ 565.104160][T14901] exfat: Deprecated parameter 'namecase' [ 565.190989][T14901] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d) [ 565.923310][T14922] loop7: detected capacity change from 0 to 512 [ 565.997660][T14926] loop4: detected capacity change from 0 to 256 [ 566.024763][T14929] program syz.2.3431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.079413][T14926] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xf17e4aaa, utbl_chksum : 0xe619d30d) [ 566.504190][T14934] loop5: detected capacity change from 0 to 4096 [ 566.612963][T14947] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 567.298138][T14958] loop5: detected capacity change from 0 to 4096 [ 567.399908][T14958] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 567.517274][T14958] ntfs3: loop5: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size [ 567.545395][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.690876][T14942] loop4: detected capacity change from 0 to 32768 [ 567.795290][T14942] JBD2: Ignoring recovery information on journal [ 567.843305][T14942] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 567.912970][T14942] JBD2: bad block at offset 32 [ 567.918164][ T56] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 567.933123][ T5174] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 567.962246][ T5174] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 567.997705][T14942] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 568.017304][ T5174] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 568.044312][T14942] ocfs2: Unmounting device (7,4) on (node local) [ 568.141761][ T56] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 568.149498][ T5174] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22. [ 568.265108][T14956] loop7: detected capacity change from 0 to 32768 [ 568.431266][T14980] loop4: detected capacity change from 0 to 256 [ 568.604806][T14960] loop2: detected capacity change from 0 to 40427 [ 568.652285][T14960] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 568.721289][T14960] F2FS-fs (loop2): invalid crc value [ 568.773326][T14960] F2FS-fs (loop2): Found nat_bits in checkpoint [ 569.038699][T14997] loop7: detected capacity change from 0 to 128 [ 569.054294][T14960] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 569.270805][T15001] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 569.417766][T15001] EXT4-fs (loop5): 1 truncate cleaned up [ 569.465956][T15001] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 569.655697][ T5174] EXT4-fs (loop5): unmounting filesystem. [ 569.838056][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3457'. [ 570.028901][T15016] set_capacity_and_notify: 1 callbacks suppressed [ 570.028932][T15016] loop5: detected capacity change from 0 to 1024 [ 570.910293][T15034] loop2: detected capacity change from 0 to 512 [ 571.066745][T15046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3468'. [ 571.087626][T15034] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 571.213677][ T4320] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 571.400564][T12564] EXT4-fs (loop2): unmounting filesystem. [ 571.411023][ T4320] usb 6-1: Using ep0 maxpacket: 16 [ 571.418698][ T4320] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.491271][ T4320] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.526479][ T4320] usb 6-1: config 0 interface 0 has no altsetting 0 [ 571.543979][ T4320] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 571.573595][ T4320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.622273][ T4320] usb 6-1: config 0 descriptor?? [ 572.053763][ T4320] hid (null): unknown global tag 0xe [ 572.292900][ T4320] usb 6-1: USB disconnect, device number 29 [ 572.474252][T15053] loop3: detected capacity change from 0 to 32768 [ 572.498376][T15078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3477'. [ 572.572620][T15053] XFS (loop3): Mounting V5 Filesystem [ 572.633331][T15053] XFS (loop3): Ending clean mount [ 572.774833][ T4539] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 572.823228][ T4287] XFS (loop3): Unmounting Filesystem [ 572.980801][ T4539] usb 3-1: Using ep0 maxpacket: 8 [ 572.988475][ T4539] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 573.062340][ T4539] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 573.110562][ T4539] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 573.121254][ T4539] usb 3-1: Product: syz [ 573.125478][ T4539] usb 3-1: Manufacturer: syz [ 573.130109][ T4539] usb 3-1: SerialNumber: syz [ 573.204886][T15105] overlayfs: failed to clone upperpath [ 573.404293][ T4539] usb 3-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 573.418660][T15103] loop5: detected capacity change from 0 to 4096 [ 573.425325][ T4539] usb 3-1: Handspring Visor / Palm OS: Number of ports: 1 [ 573.466272][T15103] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 573.533086][T15103] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 573.592042][T15103] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 573.605054][ T4539] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 573.633931][ T4539] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 573.660568][T15103] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 573.675892][ T4539] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 573.720201][ T4539] usb 3-1: USB disconnect, device number 10 [ 573.726894][T15103] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 573.771088][ T4539] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 573.794428][T15103] ntfs: volume version 3.1. [ 573.825021][ T4539] visor 3-1:1.0: device disconnected [ 573.832921][T15103] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 573.902753][T15103] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 573.928120][T15116] loop7: detected capacity change from 0 to 1024 [ 573.962785][T15103] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 574.030383][T15103] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 574.052301][T15103] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 574.309320][T15116] hfsplus: b-tree write err: -5, ino 3 [ 574.453218][T15121] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.460675][T15121] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.602777][T15159] loop5: detected capacity change from 0 to 64 [ 575.702285][T15162] tun0: tun_chr_ioctl cmd 1074025673 [ 575.882601][ T5174] hfs: node 4:3 still has 1 user(s)! [ 576.024373][T15168] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3506'. [ 576.058332][T15164] loop3: detected capacity change from 0 to 4096 [ 576.453860][T15182] overlayfs: upper fs does not support file handles, falling back to index=off. [ 576.469560][T15183] loop7: detected capacity change from 0 to 256 [ 576.490615][T15182] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 576.540582][T15183] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x142f93c7, utbl_chksum : 0xe619d30d) [ 576.724573][T15187] netlink: 888 bytes leftover after parsing attributes in process `syz.5.3513'. [ 576.755224][T15174] loop4: detected capacity change from 0 to 8192 [ 577.215410][T15199] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3517'. [ 577.290807][T15199] netlink: 'syz.5.3517': attribute type 9 has an invalid length. [ 577.356061][T15199] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3517'. [ 577.470554][T15199] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3517'. [ 577.504897][T15205] loop4: detected capacity change from 0 to 1024 [ 577.703400][T15205] hfsplus: b-tree write err: -5, ino 3 [ 577.719918][T15210] loop3: detected capacity change from 0 to 2048 [ 577.822477][T15210] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 577.877199][T15212] loop7: detected capacity change from 0 to 8192 [ 577.889951][T15210] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 577.927383][T15210] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 577.939991][T15210] EXT4-fs (loop3): This should not happen!! Data will be lost [ 577.939991][T15210] [ 577.950226][T15210] EXT4-fs (loop3): Total free blocks count 0 [ 577.972656][T15210] EXT4-fs (loop3): Free/Dirty block details [ 577.978642][T15210] EXT4-fs (loop3): free_blocks=66060288 [ 577.987658][T15212] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 578.017302][T15212] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 578.039454][T15210] EXT4-fs (loop3): dirty_blocks=48 [ 578.061092][T15212] REISERFS (device loop7): using ordered data mode [ 578.067752][T15212] reiserfs: using flush barriers [ 578.082286][T15210] EXT4-fs (loop3): Block reservation details [ 578.092668][T15212] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 578.112252][T15210] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 578.171816][T15212] REISERFS (device loop7): checking transaction log (loop7) [ 578.223497][T15218] loop5: detected capacity change from 0 to 4096 [ 578.611638][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 578.698675][T15212] REISERFS (device loop7): Using r5 hash to sort names [ 578.730336][T15212] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 578.991324][ T4539] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 579.193307][ T4539] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 579.212700][T15244] reiserfs: enabling write barrier flush mode [ 579.220499][ T4539] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 579.229433][ T4539] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 579.336073][ T4539] usb 5-1: config 220 has no interface number 2 [ 579.375785][ T4539] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 579.427457][ T4539] usb 5-1: config 220 interface 0 has no altsetting 0 [ 579.465679][ T4539] usb 5-1: config 220 interface 76 has no altsetting 0 [ 579.508832][ T4539] usb 5-1: config 220 interface 1 has no altsetting 0 [ 579.560142][ T4539] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 579.607287][ T4539] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.635816][ T4539] usb 5-1: Product: syz [ 579.662138][ T4539] usb 5-1: Manufacturer: syz [ 579.673543][ T4539] usb 5-1: SerialNumber: syz [ 579.903552][ T4539] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 579.922268][ T4539] usb 5-1: No valid video chain found. [ 579.950241][ T4539] usb 5-1: selecting invalid altsetting 0 [ 580.016443][ T4539] usb 5-1: selecting invalid altsetting 0 [ 580.045419][ T4539] usbtest: probe of 5-1:220.1 failed with error -22 [ 580.106664][ T4539] usb 5-1: USB disconnect, device number 5 [ 580.635699][T15267] loop4: detected capacity change from 0 to 256 [ 580.726490][T15267] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 580.857533][T15267] syz.4.3539: attempt to access beyond end of device [ 580.857533][T15267] loop4: rw=2049, sector=34225520825, nr_sectors = 1 limit=256 [ 580.974434][T15267] Buffer I/O error on dev loop4, logical block 34225520825, lost async page write [ 581.038462][T15267] syz.4.3539: attempt to access beyond end of device [ 581.038462][T15267] loop4: rw=2049, sector=34225520826, nr_sectors = 1 limit=256 [ 581.066798][T15267] Buffer I/O error on dev loop4, logical block 34225520826, lost async page write [ 581.104482][T15267] syz.4.3539: attempt to access beyond end of device [ 581.104482][T15267] loop4: rw=2049, sector=34225520827, nr_sectors = 1 limit=256 [ 581.127593][T15267] Buffer I/O error on dev loop4, logical block 34225520827, lost async page write [ 581.543305][T15282] loop5: detected capacity change from 0 to 128 [ 582.278059][T15274] loop7: detected capacity change from 0 to 32768 [ 582.355918][T15274] JBD2: Ignoring recovery information on journal [ 582.515817][T15274] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 582.683373][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3556'. [ 582.831372][ T7606] ocfs2: Unmounting device (7,7) on (node local) [ 583.017510][T15323] loop5: detected capacity change from 0 to 8 [ 584.114578][ T4283] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 584.123688][ T4283] Bluetooth: hci0: Injecting HCI hardware error event [ 584.136352][ T4283] Bluetooth: hci0: hardware error 0x00 [ 584.296053][T15324] loop7: detected capacity change from 0 to 32768 [ 584.348916][T15324] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 584.676497][T15323] loop5: detected capacity change from 0 to 32768 [ 584.804493][T15323] XFS (loop5): Mounting V5 Filesystem [ 584.826068][ T4550] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 584.901536][T15323] XFS (loop5): Ending clean mount [ 585.211299][ T5174] XFS (loop5): Unmounting Filesystem [ 585.751456][T15393] loop7: detected capacity change from 0 to 1024 [ 586.350813][ T4283] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 586.436396][T15408] loop7: detected capacity change from 0 to 128 [ 586.547888][T15408] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 586.594559][T15408] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.865524][ T7606] EXT4-fs (loop7): unmounting filesystem. [ 587.160019][T15428] loop5: detected capacity change from 0 to 128 [ 587.211628][T15428] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 587.261626][T15428] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 587.302897][T15432] loop2: detected capacity change from 0 to 64 [ 587.386856][T15432] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 587.471409][ T2931] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 587.616867][T15404] loop4: detected capacity change from 0 to 32768 [ 587.900853][T15404] XFS (loop4): Mounting V5 Filesystem [ 587.993774][T15404] XFS (loop4): Ending clean mount [ 588.025060][T15452] loop7: detected capacity change from 0 to 1024 [ 588.110337][T15452] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 588.290721][T14044] XFS (loop4): Unmounting Filesystem [ 588.327095][T15456] loop5: detected capacity change from 0 to 4096 [ 588.490843][T15458] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 588.988138][ T4686] kernel write not supported for file /media0 (pid: 4686 comm: kworker/0:11) [ 590.043874][T15445] loop3: detected capacity change from 0 to 32768 [ 590.292861][T15445] XFS (loop3): Mounting V5 Filesystem [ 590.498831][T15445] XFS (loop3): Ending clean mount [ 590.519471][T15445] XFS (loop3): Quotacheck needed: Please wait. [ 590.727888][T15445] XFS (loop3): Quotacheck: Done. [ 590.892791][ T4287] XFS (loop3): Unmounting Filesystem [ 591.341510][T15527] loop5: detected capacity change from 0 to 2048 [ 591.442229][T15527] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 591.474009][T15494] loop2: detected capacity change from 0 to 32768 [ 591.667024][T15494] XFS (loop2): Mounting V5 Filesystem [ 591.786518][T15494] XFS (loop2): Ending clean mount [ 592.127268][ T5174] EXT4-fs (loop5): unmounting filesystem. [ 592.157938][T12564] XFS (loop2): Unmounting Filesystem [ 592.241590][T15556] loop4: detected capacity change from 0 to 4096 [ 592.347547][T15556] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 592.489612][T15557] loop7: detected capacity change from 0 to 8192 [ 592.529179][ T4363] I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 592.678147][T15563] device syz_tun entered promiscuous mode [ 592.763261][T15563] device macvtap1 entered promiscuous mode [ 592.862331][T15563] device syz_tun left promiscuous mode [ 593.216570][T15571] loop7: detected capacity change from 0 to 512 [ 593.247935][T14044] EXT4-fs (loop4): unmounting filesystem. [ 593.324580][T15571] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.3627: missing EA_INODE flag [ 593.465026][T15571] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.3627: error while reading EA inode 12 err=-117 [ 593.530790][T15571] EXT4-fs (loop7): 1 orphan inode deleted [ 593.596071][T15571] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 593.793879][ T4686] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 593.835508][T15584] loop5: detected capacity change from 0 to 1024 [ 593.864806][ T7606] EXT4-fs (loop7): unmounting filesystem. [ 594.012425][ T4686] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 594.037085][ T4686] usb 5-1: config 0 has no interface number 0 [ 594.063560][ T4686] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 594.093179][ T4686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.120646][ T4686] usb 5-1: Product: syz [ 594.140795][ T4686] usb 5-1: Manufacturer: syz [ 594.155684][ T4686] usb 5-1: SerialNumber: syz [ 594.221284][ T4686] usb 5-1: config 0 descriptor?? [ 594.434347][ T4686] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 594.453340][ T4686] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 594.484224][ T4686] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 594.520523][ T4686] usb 5-1: media controller created [ 594.600168][ T4686] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 594.665766][T15597] loop5: detected capacity change from 0 to 1024 [ 594.686332][T15581] loop2: detected capacity change from 0 to 32768 [ 594.725978][T15581] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3625 (15581) [ 594.736375][T15597] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 594.822837][T15581] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 594.890624][T15581] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 594.940770][T15581] BTRFS warning (device loop2): excessive commit interval 3581 [ 594.948421][T15581] BTRFS info (device loop2): force zlib compression, level 3 [ 594.996027][ T4686] usb 5-1: USB disconnect, device number 6 [ 595.001416][T15581] BTRFS info (device loop2): metadata ratio 107050 [ 595.051440][T15581] BTRFS info (device loop2): turning on flush-on-commit [ 595.079566][T15581] BTRFS info (device loop2): max_inline at 4096 [ 595.122910][T15581] BTRFS info (device loop2): using free space tree [ 595.314178][T15589] loop7: detected capacity change from 0 to 32768 [ 595.357069][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 595.357087][ T26] audit: type=1800 audit(1780492322.976:938): pid=15589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3630" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 595.417447][T15621] loop3: detected capacity change from 0 to 512 [ 595.490043][T15581] BTRFS info (device loop2): enabling ssd optimizations [ 595.501045][T15621] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 595.538280][T15621] EXT4-fs (loop3): shut down requested (0) [ 595.798372][T12564] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 595.819936][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 596.689620][T15652] loop3: detected capacity change from 0 to 256 [ 596.876897][T15656] loop7: detected capacity change from 0 to 256 [ 596.986580][T15656] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 597.089146][T15656] exFAT-fs (loop7): error, tried to truncate zeroed cluster. [ 597.144919][T15656] exFAT-fs (loop7): Filesystem has been set read-only [ 597.265176][ T26] audit: type=1804 audit(1780492324.886:939): pid=15665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3648" name="/newroot/544/file1/file1" dev="loop7" ino=1048819 res=1 errno=0 [ 597.287519][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.328771][T15665] syz.7.3648: attempt to access beyond end of device [ 597.328771][T15665] loop7: rw=524288, sector=34359738488, nr_sectors = 16 limit=256 [ 597.443088][T15669] loop9: detected capacity change from 0 to 524287936 [ 597.631550][T15665] syz.7.3648: attempt to access beyond end of device [ 597.631550][T15665] loop7: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 597.820789][ T26] audit: type=1800 audit(1780492325.446:940): pid=15665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3648" name="file1" dev="loop7" ino=1048819 res=0 errno=0 [ 598.070689][ T4320] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 598.151579][T15687] netlink: 'syz.7.3657': attribute type 1 has an invalid length. [ 598.178765][T15687] netlink: 'syz.7.3657': attribute type 2 has an invalid length. [ 598.206859][T15687] netlink: 'syz.7.3657': attribute type 3 has an invalid length. [ 598.233044][T15687] netlink: 236 bytes leftover after parsing attributes in process `syz.7.3657'. [ 598.282602][ T4320] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 598.329201][ T4320] usb 3-1: config 0 has no interface number 0 [ 598.346051][ T4320] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 598.387172][ T4320] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 598.420984][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.429066][ T4320] usb 3-1: Product: syz [ 598.459884][ T4320] usb 3-1: Manufacturer: syz [ 598.464903][ T4320] usb 3-1: SerialNumber: syz [ 598.509686][ T4320] usb 3-1: config 0 descriptor?? [ 598.557439][ T4320] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 598.904025][T15699] loop7: detected capacity change from 0 to 512 [ 598.957247][T15705] loop4: detected capacity change from 0 to 1024 [ 598.995109][T15705] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 599.011726][T15705] EXT4-fs (loop4): orphan cleanup on readonly fs [ 599.039490][T15705] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 599.054136][T15699] EXT4-fs (loop7): 1 orphan inode deleted [ 599.059981][T15699] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 599.078502][T15706] loop5: detected capacity change from 0 to 2048 [ 599.104048][T15705] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 599.120914][T15699] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.156529][T15706] NILFS (loop5): invalid segment: Magic number mismatch [ 599.168043][T15705] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 599.197476][T15706] NILFS (loop5): trying rollback from an earlier position [ 599.230647][T15705] EXT4-fs (loop4): 1 truncate cleaned up [ 599.247715][T15705] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 599.252691][T15699] EXT4-fs (loop7): resizing filesystem from 64 to 2 blocks [ 599.298157][T15706] NILFS (loop5): recovery complete [ 599.329474][T15699] EXT4-fs warning (device loop7): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 599.350850][T15716] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 599.562648][ T7606] EXT4-fs (loop7): unmounting filesystem. [ 599.598414][T14044] EXT4-fs (loop4): unmounting filesystem. [ 600.161465][ T4320] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 600.360865][ T4288] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 600.383624][ T4320] usb 8-1: config 0 has no interfaces? [ 600.396631][ T4320] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 600.446904][ T4320] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 600.461000][ T4685] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 600.492065][ T4320] usb 8-1: SerialNumber: syz [ 600.499191][ T4320] usb 8-1: config 0 descriptor?? [ 600.561781][ T4288] usb 6-1: Using ep0 maxpacket: 8 [ 600.568876][ T4288] usb 6-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.596420][ T4288] usb 6-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.607005][ T4288] usb 6-1: config 0 interface 0 has no altsetting 0 [ 600.614307][ T4288] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 600.625303][ T4288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.645179][ T4288] usb 6-1: config 0 descriptor?? [ 600.660546][ T4685] usb 5-1: Using ep0 maxpacket: 8 [ 600.667877][ T4685] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 600.699691][ T4685] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 600.739833][ T4685] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 600.786282][ T4685] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.832833][ T4539] usb 8-1: USB disconnect, device number 20 [ 600.870600][ T4685] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 600.901044][ T4685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.931366][ T4320] usb 3-1: USB disconnect, device number 11 [ 600.941744][ T4320] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 601.087542][ T4288] smartjoyplus 0003:6666:8804.0026: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.5-1/input0 [ 601.120385][ T4288] smartjoyplus 0003:6666:8804.0026: Force feedback for SmartJoy PLUS PS2/USB adapter [ 601.158826][ T4685] usb 5-1: GET_CAPABILITIES returned 0 [ 601.164530][ T4685] usbtmc 5-1:16.0: can't read capabilities [ 601.304627][ T4288] usb 6-1: USB disconnect, device number 30 [ 601.375449][ T4320] usb 5-1: USB disconnect, device number 7 [ 601.407068][T15745] fido_id[15745]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 601.577571][T15738] loop3: detected capacity change from 0 to 40427 [ 601.609036][T15738] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 601.639515][T15738] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 601.688932][T15738] F2FS-fs (loop3): invalid crc value [ 601.770723][T15738] F2FS-fs (loop3): Found nat_bits in checkpoint [ 601.968578][T15738] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 601.996268][T15738] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 602.996977][T15786] loop4: detected capacity change from 0 to 1024 [ 603.051279][T15786] EXT4-fs: Ignoring removed bh option [ 603.090697][ T5052] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 603.129143][T15786] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 603.260900][T15769] loop7: detected capacity change from 0 to 32768 [ 603.282471][ T5052] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.304572][ T5052] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.315647][T15790] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 603.351909][T15790] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 603.380071][T15790] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 603.406121][ T5052] usb 6-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 603.435018][ T5052] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.437514][T15790] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 603.449594][ T5052] usb 6-1: config 0 descriptor?? [ 603.469624][T15769] XFS (loop7): Mounting V5 Filesystem [ 603.490639][T14044] EXT4-fs (loop4): unmounting filesystem. [ 603.510884][T15790] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 603.532184][T15790] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 603.554563][T15769] XFS (loop7): Ending clean mount [ 603.586400][T15790] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 603.632434][T15790] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 603.677658][T15783] loop5: detected capacity change from 0 to 256 [ 603.722303][T15783] exFAT-fs (loop5): failed to read boot sector [ 603.728549][T15783] exFAT-fs (loop5): failed to recognize exfat type [ 603.882144][T15811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3686'. [ 603.892149][ T7606] XFS (loop7): Unmounting Filesystem [ 603.915601][T15811] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3686'. [ 603.976430][T15813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3686'. [ 604.008221][T15813] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3686'. [ 604.049381][ T5052] hid (null): nested delimiters [ 604.099133][ T5052] wacom 0003:056A:030C.0027: nested delimiters [ 604.130880][ T5052] wacom 0003:056A:030C.0027: item 0 1 2 10 parsing failed [ 604.149062][ T5052] wacom 0003:056A:030C.0027: parse failed [ 604.178329][ T5052] wacom: probe of 0003:056A:030C.0027 failed with error -22 [ 604.268302][ T4320] usb 6-1: USB disconnect, device number 31 [ 604.808391][T15793] loop2: detected capacity change from 0 to 40427 [ 604.908045][T15793] F2FS-fs (loop2): invalid crc value [ 604.933705][T15793] F2FS-fs (loop2): Found nat_bits in checkpoint [ 605.126777][T15793] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 605.279064][ T26] audit: type=1800 audit(1780492332.896:941): pid=15793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3685" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 605.310762][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 605.312257][ T4320] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 605.390559][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 605.390565][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 605.461372][T12564] syz-executor: attempt to access beyond end of device [ 605.461372][T12564] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 605.532548][ T4320] usb 8-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 605.550898][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 605.557077][ T4320] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.640538][ T4320] usb 8-1: Product: syz [ 605.644794][ T4320] usb 8-1: Manufacturer: syz [ 605.649434][ T4320] usb 8-1: SerialNumber: syz [ 605.658456][T15845] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3697'. [ 605.703051][ T4320] usb 8-1: config 0 descriptor?? [ 605.746022][ T4320] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 606.138383][T15859] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3700'. [ 606.188350][ T4320] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 606.200557][ T4320] sq905c 8-1:0.0: Reading version command failed [ 606.207042][ T4320] sq905c: probe of 8-1:0.0 failed with error -71 [ 606.215014][T15864] program syz.3.3701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 606.290817][ T4320] usb 8-1: USB disconnect, device number 21 [ 606.586208][T15874] loop5: detected capacity change from 0 to 2048 [ 606.642982][T15874] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 606.753426][T15882] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 606.839247][T15883] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 607.170695][ T7470] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 607.360764][ T7470] usb 8-1: Using ep0 maxpacket: 32 [ 607.368664][ T7470] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 607.405926][ T7470] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.470510][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 607.631005][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 607.678240][ T7470] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 607.695609][ T7470] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 607.711796][ T7470] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 607.725873][ T7470] usb 8-1: media controller created [ 607.780882][ T7470] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 607.890268][ T7470] az6027: usb out operation failed. (-71) [ 607.898919][ T7470] az6027: usb out operation failed. (-71) [ 607.930336][ T7470] stb0899_attach: Driver disabled by Kconfig [ 607.960003][ T7470] az6027: no front-end attached [ 607.960003][ T7470] [ 608.022467][ T7470] az6027: usb out operation failed. (-71) [ 608.028298][ T7470] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 608.072935][ T7470] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input33 [ 608.130315][ T7470] dvb-usb: schedule remote query interval to 400 msecs. [ 608.152487][ T7470] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 608.162459][T15924] loop2: detected capacity change from 0 to 256 [ 608.175904][ T7470] usb 8-1: USB disconnect, device number 22 [ 608.228889][T15924] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 608.298673][ T7470] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 608.562465][T15935] loop4: detected capacity change from 0 to 8 [ 608.651548][T15937] device syz_tun entered promiscuous mode [ 608.702150][T15937] device macvtap1 entered promiscuous mode [ 608.756121][T15937] device syz_tun left promiscuous mode [ 608.999692][T15945] loop5: detected capacity change from 0 to 128 [ 609.077829][ T26] audit: type=1800 audit(1780492336.696:942): pid=15945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3727" name="file1" dev="loop5" ino=1048822 res=0 errno=0 [ 609.167090][ T26] audit: type=1800 audit(1780492336.696:943): pid=15945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3727" name="file1" dev="loop5" ino=1048822 res=0 errno=0 [ 609.323284][ T28] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 609.349767][ T28] FAT-fs (loop5): Filesystem has been set read-only [ 609.384060][ T28] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 609.633350][T15960] loop4: detected capacity change from 0 to 512 [ 609.773447][T15960] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 609.801486][T15960] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 609.921518][T14044] EXT4-fs (loop4): unmounting filesystem. [ 610.166544][T15971] loop2: detected capacity change from 0 to 2048 [ 610.220770][T15971] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 610.351945][T15976] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 610.430944][T15979] netlink: 1748 bytes leftover after parsing attributes in process `syz.3.3739'. [ 610.679163][T15981] loop4: detected capacity change from 0 to 4096 [ 610.774157][T15981] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 610.798520][T15956] loop7: detected capacity change from 0 to 32768 [ 610.916570][T15983] loop2: detected capacity change from 0 to 256 [ 610.939879][T15983] FAT-fs (loop2): Directory bread(block 64) failed [ 610.946826][T15983] FAT-fs (loop2): Directory bread(block 65) failed [ 610.954021][T15983] FAT-fs (loop2): Directory bread(block 66) failed [ 610.964034][T15956] (syz.7.3732,15956,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 611.020492][T15983] FAT-fs (loop2): Directory bread(block 67) failed [ 611.027260][T15983] FAT-fs (loop2): Directory bread(block 68) failed [ 611.035215][T14044] EXT4-fs (loop4): unmounting filesystem. [ 611.097003][T15983] FAT-fs (loop2): Directory bread(block 69) failed [ 611.114140][T15956] (syz.7.3732,15956,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 611.153988][T15983] FAT-fs (loop2): Directory bread(block 70) failed [ 611.161456][T15983] FAT-fs (loop2): Directory bread(block 71) failed [ 611.190713][T15983] FAT-fs (loop2): Directory bread(block 72) failed [ 611.197334][T15983] FAT-fs (loop2): Directory bread(block 73) failed [ 611.234945][T15956] JBD2: Ignoring recovery information on journal [ 611.367362][T15956] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 611.886231][T16000] loop4: detected capacity change from 0 to 4096 [ 611.957312][ T7606] ocfs2: Unmounting device (7,7) on (node local) [ 612.150758][T16007] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 612.178696][T16007] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 612.230747][T16007] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 612.251100][T16007] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 612.351325][T16007] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 612.380644][T16007] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 612.387154][T16007] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 612.470149][T14044] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 612.482450][T16007] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 612.487552][T14044] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 612.775779][T16025] program syz.5.3754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 613.030651][ T4539] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 613.164648][T16036] device syz_tun entered promiscuous mode [ 613.195318][T16036] device macvtap1 entered promiscuous mode [ 613.215030][T16036] device syz_tun left promiscuous mode [ 613.220736][ T4539] usb 5-1: Using ep0 maxpacket: 16 [ 613.227939][ T4539] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.257510][ T4539] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.298314][ T4539] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 613.340529][ T4539] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 613.370208][ T4539] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.385091][T16045] loop7: detected capacity change from 0 to 512 [ 613.403093][ T4539] usb 5-1: config 0 descriptor?? [ 613.425580][T16045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 613.506270][T16015] loop3: detected capacity change from 0 to 32768 [ 613.542987][T16045] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 613.595724][T16045] EXT4-fs error (device loop7): ext4_iget_extra_inode:4763: inode #15: comm syz.7.3759: corrupted in-inode xattr [ 613.620769][ T4537] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 613.668752][T16015] XFS (loop3): Mounting V5 Filesystem [ 613.711282][T16045] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.3759: couldn't read orphan inode 15 (err -117) [ 613.725515][T16045] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 613.828414][ T7606] EXT4-fs (loop7): unmounting filesystem. [ 613.835887][ T4537] usb 6-1: config 0 has no interfaces? [ 613.854222][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.877420][ T4537] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 613.918955][ T4539] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0028/input/input34 [ 613.951087][ T4537] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 613.956249][T16015] XFS (loop3): Ending clean mount [ 613.959141][ T4537] usb 6-1: SerialNumber: syz [ 613.966339][ T4537] usb 6-1: config 0 descriptor?? [ 613.999010][ T4539] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 614.120566][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 614.169185][ T4287] XFS (loop3): Unmounting Filesystem [ 614.206080][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 614.220681][ T4537] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 614.270794][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 614.279004][ T4693] usb 5-1: USB disconnect, device number 8 [ 614.308576][T16059] fido_id[16059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 614.365463][ T4288] usb 6-1: USB disconnect, device number 32 [ 614.406260][ T4537] usb 3-1: Using ep0 maxpacket: 8 [ 614.417003][ T4537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 614.428736][ T4537] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 614.445934][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 614.461804][ T4537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.472161][ T4537] usb 3-1: config 0 descriptor?? [ 614.697310][ T4537] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 614.934292][ T7470] usb 3-1: USB disconnect, device number 12 [ 615.105544][T16075] loop3: detected capacity change from 0 to 1024 [ 615.251152][T16077] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 615.297965][T16077] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 615.320761][T16077] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 615.344885][T16077] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 615.542379][T16087] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3770'. [ 616.033715][T16101] loop2: detected capacity change from 0 to 512 [ 616.095878][T16101] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 616.126435][T16105] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3777'. [ 616.192850][T16101] EXT4-fs (loop2): 1 truncate cleaned up [ 616.227898][T16101] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 616.432515][T16110] EXT4-fs error (device loop2): ext4_xattr_block_find:1828: inode #15: comm syz.2.3775: corrupted xattr block 33 [ 616.523671][T16081] loop5: detected capacity change from 0 to 32768 [ 616.540531][T16110] EXT4-fs (loop2): Remounting filesystem read-only [ 616.626290][T16081] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 616.701097][ T7470] kernel read not supported for file /dsp1 (pid: 7470 comm: kworker/0:18) [ 616.824217][T12564] EXT4-fs (loop2): unmounting filesystem. [ 616.962354][ T5174] ocfs2: Unmounting device (7,5) on (node local) [ 617.230848][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 617.310578][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 617.390800][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 617.396943][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 617.534961][T16133] loop2: detected capacity change from 0 to 256 [ 617.593465][T16133] exFAT-fs (loop2): Invalid exboot-signature(sector = 7): 0xaa55000e [ 617.615379][T16133] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0xd259abd1) [ 617.676893][T16133] exFAT-fs (loop2): invalid boot region [ 617.700720][T16133] exFAT-fs (loop2): failed to recognize exfat type [ 618.076540][T16147] loop2: detected capacity change from 0 to 256 [ 618.119906][T16150] loop4: detected capacity change from 0 to 64 [ 618.659303][T16162] loop2: detected capacity change from 0 to 1024 [ 618.710934][ T4288] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 618.740277][T16162] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 618.813110][T16162] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 618.900654][ T4288] usb 8-1: Using ep0 maxpacket: 8 [ 618.908346][ T4288] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 618.957654][ T4288] usb 8-1: config 179 has no interface number 0 [ 618.968890][T16162] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 2 with error 28 [ 619.010978][T16162] EXT4-fs (loop2): This should not happen!! Data will be lost [ 619.010978][T16162] [ 619.012388][ T4288] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 619.041501][T16162] EXT4-fs (loop2): Total free blocks count 0 [ 619.066216][T16162] EXT4-fs (loop2): Free/Dirty block details [ 619.108298][T16162] EXT4-fs (loop2): free_blocks=0 [ 619.110671][ T4288] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 619.118678][T16162] EXT4-fs (loop2): dirty_blocks=0 [ 619.142201][T16162] EXT4-fs (loop2): Block reservation details [ 619.148433][T16162] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 619.185606][ T4288] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 619.237519][ T4288] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 619.269540][ T4288] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 619.302884][T12564] EXT4-fs (loop2): unmounting filesystem. [ 619.310616][ T4288] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 619.340206][ T4288] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.375474][T16155] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 619.917496][ T4683] usb 8-1: USB disconnect, device number 23 [ 619.917530][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 619.931858][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 620.110685][ T7470] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 620.145968][T16177] loop5: detected capacity change from 0 to 32768 [ 620.218026][T16177] JBD2: Ignoring recovery information on journal [ 620.294951][T16202] loop3: detected capacity change from 0 to 256 [ 620.310524][ T7470] usb 3-1: Using ep0 maxpacket: 32 [ 620.317962][ T7470] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.350262][ T7470] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.372576][ T7470] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 620.406735][T16202] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 620.412092][ T7470] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 620.446050][ T7470] usb 3-1: Product: syz [ 620.450298][ T7470] usb 3-1: Manufacturer: syz [ 620.504893][T16177] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 620.535077][ T26] audit: type=1800 audit(1780492348.156:944): pid=16202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3807" name="file1" dev="loop3" ino=1048823 res=0 errno=0 [ 620.556172][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.571579][ T7470] hub 3-1:4.0: USB hub found [ 620.654557][ T26] audit: type=1800 audit(1780492348.156:945): pid=16202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3807" name="file1" dev="loop3" ino=1048823 res=0 errno=0 [ 620.713071][T16209] loop4: detected capacity change from 0 to 512 [ 620.719462][T16210] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 620.738550][ T7470] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 620.813852][T16210] FAT-fs (loop3): Filesystem has been set read-only [ 620.832516][ T5174] ocfs2: Unmounting device (7,5) on (node local) [ 620.871833][T16210] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 620.889913][T16209] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 620.987763][T16209] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.070834][ T7470] usb 3-1: USB disconnect, device number 13 [ 621.116543][T16209] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:106: comm syz.4.3808: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 621.253416][T16209] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 621.343577][T14044] EXT4-fs (loop4): unmounting filesystem. [ 622.352804][T16249] overlayfs: filesystem on './file0' not supported as upperdir [ 622.455850][T16253] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[5174] was attempted by "… Î Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Ðÿ ÿÿÿÿ [ 622.530925][ T7470] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 622.617796][ C0] vkms_vblank_simulate: vblank timer overrun [ 623.007433][T16228] loop7: detected capacity change from 0 to 32768 [ 623.034208][T16268] loop5: detected capacity change from 0 to 512 [ 623.050654][ T4683] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 623.071304][T16268] EXT4-fs: Ignoring removed nobh option [ 623.082699][ T7470] usb 4-1: Using ep0 maxpacket: 8 [ 623.095251][ T7470] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 623.128173][ T7470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.140941][T16228] ERROR: (device loop7): dbAdjCtl: the maximum free buddy is not the old root [ 623.140941][T16228] [ 623.170589][ T7470] usb 4-1: Product: syz [ 623.174827][ T7470] usb 4-1: Manufacturer: syz [ 623.194668][T16268] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 623.205027][T16228] ERROR: (device loop7): remounting filesystem as read-only [ 623.232598][ T4683] usb 5-1: config 0 has no interfaces? [ 623.247716][ T4683] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 623.271113][T16268] ext4 filesystem being mounted at /701/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 623.321130][ T7470] usb 4-1: SerialNumber: syz [ 623.326651][ T4683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 623.348091][ T7470] usb 4-1: config 0 descriptor?? [ 623.361144][ T4683] usb 5-1: SerialNumber: syz [ 623.384075][ T7470] gspca_main: sq930x-2.14.0 probing 2770:930c [ 623.404078][ T4683] usb 5-1: config 0 descriptor?? [ 623.413350][T16275] loop2: detected capacity change from 0 to 128 [ 623.505758][T16275] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 623.519997][T16275] hpfs: filesystem error: improperly stopped [ 623.537674][ T5174] EXT4-fs (loop5): unmounting filesystem. [ 623.558920][T16275] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 623.567505][T16275] hpfs: You really don't want any checks? You are crazy... [ 623.625291][T16275] hpfs: hpfs_map_sector(): read error [ 623.670730][T16275] hpfs: code page support is disabled [ 623.705797][T16275] hpfs: hpfs_map_4sectors(): unaligned read [ 623.730661][T16275] hpfs: hpfs_map_4sectors(): unaligned read [ 623.755782][ T4683] usb 5-1: USB disconnect, device number 9 [ 623.757510][T16275] hpfs: filesystem error: unable to find root dir [ 623.799159][T16279] loop5: detected capacity change from 0 to 128 [ 623.825046][ T106] BUG: Bad page state in process jfsCommit pfn:53180 [ 623.847763][T16279] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 623.860078][ T106] page:ffffea00014c6000 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x53180 [ 623.862273][T16275] hpfs: hpfs_map_4sectors(): unaligned read [ 623.891866][T16279] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 623.905125][T16275] hpfs: hpfs_map_sector(): read error [ 623.917388][ T106] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 623.922608][T16275] hpfs: hpfs_map_sector(): read error [ 623.962230][ T106] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000 [ 623.993275][ T106] raw: 000000000000001c ffff88805d89b1f0 00000000ffffffff 0000000000000000 [ 624.025566][ T106] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 624.033603][ T106] page_owner tracks the page as allocated [ 624.039411][ T106] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 16228, tgid 16225 (syz.7.3812), ts 623066470092, free_ts 621358103295 [ 624.070070][ T106] post_alloc_hook+0x173/0x1a0 [ 624.075114][ T106] get_page_from_freelist+0x1a1e/0x1ab0 [ 624.090299][ T106] __alloc_pages+0x1ec/0x4f0 [ 624.095329][ T106] folio_alloc+0x1c/0x60 [ 624.099778][ T106] filemap_alloc_folio+0xdb/0x480 [ 624.119868][ T106] do_read_cache_folio+0x1bb/0x760 [ 624.129300][ T106] do_read_cache_page+0x32/0x220 [ 624.138667][ T106] __get_metapage+0x316/0xfa0 [ 624.148400][ T106] diRead+0x6f7/0xbb0 [ 624.156319][ T106] jfs_iget+0x89/0x3f0 [ 624.165658][ T106] jfs_fill_super+0x70e/0xad0 [ 624.175807][ T106] mount_bdev+0x287/0x3c0 [ 624.180332][ T106] legacy_get_tree+0xe6/0x180 [ 624.189365][ T106] vfs_get_tree+0x88/0x270 [ 624.197850][ T7470] gspca_sq930x: ucbus_write failed -71 [ 624.218193][ T106] do_new_mount+0x24a/0xa40 [ 624.223065][ T106] __se_sys_mount+0x2e3/0x3d0 [ 624.227812][ T106] page last free stack trace: [ 624.243431][ T106] free_unref_page_prepare+0x8b4/0x9a0 [ 624.248990][ T106] free_unref_page+0x2e/0x3f0 [ 624.256552][ T106] kasan_depopulate_vmalloc_pte+0x67/0x80 [ 624.266338][ T106] __apply_to_page_range+0x989/0xd10 [ 624.284652][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.291539][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.319972][ T106] kasan_release_vmalloc+0x93/0xb0 [ 624.335602][ T106] __purge_vmap_area_lazy+0xf7e/0x1920 [ 624.355721][ T106] drain_vmap_area_work+0x3c/0xd0 [ 624.376118][ T106] process_one_work+0x8a2/0x1160 [ 624.388138][ T106] worker_thread+0xaa2/0x1270 [ 624.404414][ T106] kthread+0x29d/0x330 [ 624.408723][ T106] ret_from_fork+0x1f/0x30 [ 624.439697][ T106] Modules linked in: [ 624.454449][ T7470] gspca_sq930x: Sensor ov9630 not yet treated [ 624.470355][ T7470] sq930x: probe of 4-1:0.0 failed with error -22 [ 624.479089][ T106] CPU: 1 PID: 106 Comm: jfsCommit Not tainted syzkaller #0 [ 624.486368][ T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 624.496483][ T106] Call Trace: [ 624.499863][ T106] [ 624.502891][ T106] dump_stack_lvl+0x188/0x24e [ 624.507697][ T106] ? show_regs_print_info+0x12/0x12 [ 624.512998][ T106] ? swiotlb_print_info+0x60/0x60 [ 624.518114][ T106] bad_page+0x14b/0x170 [ 624.522329][ T106] free_unref_page_prepare+0x42a/0x9a0 [ 624.527857][ T106] free_unref_page+0x2e/0x3f0 [ 624.532599][ T106] ? __folio_put+0xf1/0x210 [ 624.534150][ T7470] usb 4-1: USB disconnect, device number 33 [ 624.537215][ T106] txUnlock+0x27e/0xcb0 [ 624.537255][ T106] ? lockdep_hardirqs_on+0x94/0x140 [ 624.552576][ T106] jfs_lazycommit+0x56a/0xa70 [ 624.557320][ T106] ? txFreelock+0x5a0/0x5a0 [ 624.561913][ T106] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 624.567954][ T106] ? do_task_dead+0xd0/0xd0 [ 624.572597][ T106] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 624.578552][ T106] ? __kthread_parkme+0x162/0x1c0 [ 624.583648][ T106] kthread+0x29d/0x330 [ 624.587774][ T106] ? txFreelock+0x5a0/0x5a0 [ 624.592344][ T106] ? kthread_blkcg+0xd0/0xd0 [ 624.596990][ T106] ret_from_fork+0x1f/0x30 [ 624.601483][ T106] [ 624.607637][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.636143][ T106] Disabling lock debugging due to kernel taint [ 624.643788][ T106] page:ffffea00014c6000 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x53180 [ 624.669255][ T106] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 624.683681][ T106] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000 [ 624.693035][ T106] raw: 000000000000001c ffff88805d89b1f0 00000000ffffffff 0000000000000000 [ 624.703600][ T106] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 624.716900][ T106] page_owner tracks the page as allocated [ 624.727247][ T106] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 16228, tgid 16225 (syz.7.3812), ts 623066470092, free_ts 621358103295 [ 624.750328][ T106] post_alloc_hook+0x173/0x1a0 [ 624.756232][ T106] get_page_from_freelist+0x1a1e/0x1ab0 [ 624.764091][ T106] __alloc_pages+0x1ec/0x4f0 [ 624.768784][ T106] folio_alloc+0x1c/0x60 [ 624.773358][ T106] filemap_alloc_folio+0xdb/0x480 [ 624.778457][ T106] do_read_cache_folio+0x1bb/0x760 [ 624.787035][ T106] do_read_cache_page+0x32/0x220 [ 624.792319][ T106] __get_metapage+0x316/0xfa0 [ 624.797128][ T106] diRead+0x6f7/0xbb0 [ 624.803476][ T106] jfs_iget+0x89/0x3f0 [ 624.807695][ T106] jfs_fill_super+0x70e/0xad0 [ 624.812715][ T106] mount_bdev+0x287/0x3c0 [ 624.817129][ T106] legacy_get_tree+0xe6/0x180 [ 624.824263][ T106] vfs_get_tree+0x88/0x270 [ 624.828769][ T106] do_new_mount+0x24a/0xa40 [ 624.836766][ T106] __se_sys_mount+0x2e3/0x3d0 [ 624.843774][ T106] page last free stack trace: [ 624.848593][ T106] free_unref_page_prepare+0x8b4/0x9a0 [ 624.870448][ T106] free_unref_page+0x2e/0x3f0 [ 624.875251][ T106] kasan_depopulate_vmalloc_pte+0x67/0x80 [ 624.897402][ T106] __apply_to_page_range+0x989/0xd10 [ 624.905098][ T106] kasan_release_vmalloc+0x93/0xb0 [ 624.910293][ T106] __purge_vmap_area_lazy+0xf7e/0x1920 [ 624.916253][ T106] drain_vmap_area_work+0x3c/0xd0 [ 624.923605][ T106] process_one_work+0x8a2/0x1160 [ 624.928623][ T106] worker_thread+0xaa2/0x1270 [ 624.935813][ T106] kthread+0x29d/0x330 [ 624.940290][ T106] ret_from_fork+0x1f/0x30 [ 624.950612][ T106] ------------[ cut here ]------------ [ 624.956131][ T106] kernel BUG at include/linux/mm.h:1146! [ 624.964498][ T106] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 624.970790][ T106] CPU: 1 PID: 106 Comm: jfsCommit Tainted: G B syzkaller #0 [ 624.979517][ T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 624.989628][ T106] RIP: 0010:put_metapage+0x24f/0x340 [ 624.994989][ T106] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 7b a4 e0 fe e9 25 ff ff ff e8 d1 9c 8f fe 48 8b 3c 24 48 c7 c6 40 3d c6 8a e8 41 b8 ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 8a a0 8f [ 625.014723][ T106] RSP: 0018:ffffc900025c7ce0 EFLAGS: 00010246 [ 625.020909][ T106] RAX: ba4059891aade500 RBX: ffff88805d89b1f0 RCX: ba4059891aade500 [ 625.028936][ T106] RDX: 0000000000000000 RSI: ffffffff8adf2040 RDI: ffffffff8adf2000 [ 625.036966][ T106] RBP: 000000000000007f R08: ffffffff8e2029ef R09: 1ffffffff1c4053d [ 625.044992][ T106] R10: dffffc0000000000 R11: fffffbfff1c4053e R12: ffff88805d89b218 [ 625.053020][ T106] R13: ffffea00014c6034 R14: 1ffff1100bb13643 R15: 1ffff1100bb13650 [ 625.061059][ T106] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 625.070053][ T106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 625.076689][ T106] CR2: 00007f4a0b5ea2f8 CR3: 000000007e490000 CR4: 00000000003506e0 [ 625.084744][ T106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 625.092763][ T106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 625.100785][ T106] Call Trace: [ 625.104129][ T106] [ 625.107107][ T106] txUnlock+0x427/0xcb0 [ 625.111321][ T106] jfs_lazycommit+0x56a/0xa70 [ 625.116053][ T106] ? txFreelock+0x5a0/0x5a0 [ 625.120614][ T106] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 625.126565][ T106] ? do_task_dead+0xd0/0xd0 [ 625.131180][ T106] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 625.137126][ T106] ? __kthread_parkme+0x162/0x1c0 [ 625.142216][ T106] kthread+0x29d/0x330 [ 625.146326][ T106] ? txFreelock+0x5a0/0x5a0 [ 625.150879][ T106] ? kthread_blkcg+0xd0/0xd0 [ 625.155509][ T106] ret_from_fork+0x1f/0x30 [ 625.159987][ T106] [ 625.163045][ T106] Modules linked in: [ 625.175416][ T106] ---[ end trace 0000000000000000 ]--- [ 625.181398][ T106] RIP: 0010:put_metapage+0x24f/0x340 [ 625.186741][ T106] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 7b a4 e0 fe e9 25 ff ff ff e8 d1 9c 8f fe 48 8b 3c 24 48 c7 c6 40 3d c6 8a e8 41 b8 ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 8a a0 8f [ 625.207513][ T106] RSP: 0018:ffffc900025c7ce0 EFLAGS: 00010246 [ 625.213692][ T106] RAX: ba4059891aade500 RBX: ffff88805d89b1f0 RCX: ba4059891aade500 [ 625.222904][ T106] RDX: 0000000000000000 RSI: ffffffff8adf2040 RDI: ffffffff8adf2000 [ 625.233213][ T106] RBP: 000000000000007f R08: ffffffff8e2029ef R09: 1ffffffff1c4053d [ 625.242701][ T106] R10: dffffc0000000000 R11: fffffbfff1c4053e R12: ffff88805d89b218 [ 625.251182][ T106] R13: ffffea00014c6034 R14: 1ffff1100bb13643 R15: 1ffff1100bb13650 [ 625.259218][ T106] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 625.269672][ T106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 625.277764][ T106] CR2: 00007f4a0b5ea2f8 CR3: 0000000073246000 CR4: 00000000003506e0 [ 625.290919][ T106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 625.300110][ T106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 625.309346][ T106] Kernel panic - not syncing: Fatal exception [ 625.316045][ T106] Kernel Offset: disabled [ 625.320469][ T106] Rebooting in 86400 seconds..