last executing test programs: 25.136171271s ago: executing program 1 (id=984): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000090400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002c001280110001006272696467655f736c6176650000000014000580080025"], 0x4c}}, 0x0) 24.871619739s ago: executing program 1 (id=986): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x5, 0x7}, {0x6, 0x0, 0x3, 0x1000}]}) write$ppp(r0, &(0x7f0000000080)="2f12", 0x2) 24.601238769s ago: executing program 1 (id=989): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 24.411260578s ago: executing program 1 (id=992): syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000000)='./file0\x00', 0x804c5a, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES8, @ANYBLOB="01ce6671a3b30f673148672100038bbb4413ea284b892438cdddda3da4c78d940655fbd68a286059c5766f98f85fb413503eaf8c90a24dda1e09f68cd741168d69dae50652ca7b67c5b0a27ab80ff9afa5000443de8c748e1d5beabee7c1346b215f641ae190d56ea4ab81bacd909929deb5757040e8d5b2752ea779c30f600bd516a68d881e7fc7289826d49e35134a94e27f115c8195a0f152cbd840ffdb008356c72319cceb43ccb1280556efdf0fdf582fd3cfc830dff1787f000000b7400f5aef57b6dcbfde7af6012383adb085c40e4c295c2a3be750a42400e58523d24b8eecd75caabcee22347bdb78b72b400d080a044ebde5d39ad91ff0ef75aa244381cf00cd6fe9b9a92a9968104bf02481022af426853287e521a4e3cfe480f984efcea1359ff932ebd3bc75aefea41074799f3502a7472a6686b4011a41d7f0cfb25b3dc3077b4e8ded17cfff2b1d59bc12f637c36690f5ca91ee999ec138f6ce66522e652939a37435edb78f9ae18489f9d2b73c81609399f0d123f1721171bd72c012623f04d8965d3e5785d057c15798ab36af821c9b308731422ba3858b9895ace14068ea58f8cb6060c205caf209a73628eff5b9270a4a55c2d7fc59a4fe6e023bd424d8b010e2232d1b2e6ca603b466b2c82afff4a8cc469e8664d54769fc97df122b3ff8c34354dad46f900eaf6e72e538c0595caa056984ab8974af7cdae5bde6a12f412fe2a876aa191e78e91fbf780e2f4a20f57d41376b29f990ce63aa6edf622d2203fee37df269abf869d13b175852b775fff70491d1e5d1311b7eef954a101ddb98c5ba2b312528485ece7aff23cc6fee599daea0fca71a5970cf0fc82b49640cc3fabbc401dead4f83aa0c4072a9e98ab5afb790be17961fc073e2f8f800000000000000005089d6db5ad893ee9b22b9250d01980952d0a3e0076c877556fa43f90cb574fd6ad67398ac4d9f8ff4e3ef09f99220928602523adc2289b51328ac152bd7edc66d4e962cbc2d2b0c5f8e48384eff563a10787b0199642385e811504e7168804114842d51f42dd6937515fa64b2fd14ef427072c6556b99171bd00165a9aada7173f001679ac791ee67188c670f583f7b1f8df68b97f4dcb5652f2b13aa941b7ff56c48fb7162e91ef53c70938a92e4bf55d65319f74766a309722f767fc8f3db2a194a2f098336601be2edcbcc9b562f2fc64e2deff9a16e84f1e8bc5fb82c91f4d10e34f5a093fc4fcbdb89342274857c8e6aa8864b3214f51b9e515bf645235007cede80ff5931bff340780a3b43bc0466340c195a515f779d0333dd467bb665508d9c89e18e86d1975e273f937e3bd1", @ANYRESDEC, @ANYRES32=0x0], 0x3, 0x1f4, &(0x7f0000000f40)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x631) 23.798075736s ago: executing program 1 (id=996): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000200000085000000b600000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 23.175995374s ago: executing program 1 (id=1002): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}}, 0x0) 22.835613262s ago: executing program 32 (id=1002): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}}, 0x0) 3.292027332s ago: executing program 4 (id=1179): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6164696e6963622c6e6f7374726963742c6d6f64653d30303030303030303030303030303030303030303030342c7569643d666f726765742c6e6f6164696e6963622c756d61736b3d30303030303030303030303030303034303030323030302c6c617374626c6f636b3d30303030303030303030303030303030303031332c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030352c00ef6ed4ec439921ba30d487245a7352f900c1f0cecd63c6e8f061d74fb9e1aba36c4076539a266e2c9a97d32241a228183fc0e6b760a2c7d7abe8c596c71bdbe5d272fe729e26"], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.980015401s ago: executing program 4 (id=1184): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.784293381s ago: executing program 2 (id=1185): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0xfffffffd}]}]}, 0x38}}, 0x0) 2.652415281s ago: executing program 3 (id=1186): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="f4001100042b2c25fe8007000000007a000000339f426cfd8e2fa40000000000000000000000634b", 0x5dc}], 0x1}, 0x900) syz_extract_tcp_res(0x0, 0x0, 0x0) 2.42073478s ago: executing program 3 (id=1188): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getuid() 2.368454009s ago: executing program 0 (id=1189): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.165924578s ago: executing program 4 (id=1192): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x18) 2.045079378s ago: executing program 5 (id=1193): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0xff, 0x67e, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x6880, 0x0) 2.044155488s ago: executing program 2 (id=1194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'vcan0\x00', 0x700}) 1.960465398s ago: executing program 4 (id=1195): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xf0f, 0x2, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 1.752047487s ago: executing program 5 (id=1196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="18005a8014000180050001000c"], 0x34}}, 0x0) 1.739390697s ago: executing program 4 (id=1197): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) userfaultfd(0x801) 1.673492477s ago: executing program 2 (id=1198): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x38413542, 0x2, [], [0x2b8, 0x0, 0x40000], [0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x800000]}) 1.653711537s ago: executing program 0 (id=1199): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f00000002c0), 0x4, 0x76b, &(0x7f0000001400)="$eJzs3M1rXOUaAPDnnGaSfuTeyYUL9+pChBZaKJ0kzaZdNW7cFQoFtzUkJyHkJBMyk9qJhbauhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzmSS0piZpEnaadPfD07P856v531mDm/nQN4TwCvrzeKfJGIwIq5ERLm9PY2I/lZ0NOL2+nFrj25OFksSzebVX5PitFhrljevlbTXJ6J1Svw/Ih6UIs5+8M+8tcbK3ESeZ0vt9nB9fnG41lg5Nzs/MZPNZAujYxdHLoyNXRgZ27GG/+2y1lPvXDx277u3V1e//7p+942+c0mMt+qOdm27vMxTWf9MSjG+ZfvCs0jWQ0mXfUefYz8AAOiu+J1/JCL6Wr9Sy3GkFQEAAACHSXOguaN041gAAADgJZV4rgcAAIBDbuPvADbm9j6rebCd/PJWRAxtl7+vNYc44miUIuL4WvLEzIRk/TTYl9t3IuL++Nb778viDru9z2uPbGk/OUe6f59X5yDcL8af8e3Gn3Rz/Iltxp++jXcn7FPn8e9x/iMdxr8ru8zxzWevlTrmvxPxet92+ZPN/EmH/O+2op0/hburH97rtK/5RcTpbf//SZ7I1eX9EOPTs3m31w/Eg7/OPOxW//FO+ZPu9S/uWPm699d+n+s0lhT5z5zs8P3f6py/uCc+avcjjYh77XXRXt2S4+T8D992q38qormX7//zXdb/01cDN3Z5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVrZjNO0Uok4ERH/jeNpXq3Vz05Xlxemin0RQ1FKp2fzbCQiyuvtpGiPtuLH7fNb2mMR8Z8fj60nnc2zymQ1n+p18QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGw6ERGDkaSViEgj4o9ymlYqEX27OHfgOfQPAAAAOCBDve4AAAAA8Mx5/gcAAIDDb6/P/8kB9wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA41K5cvlwszbVHNyeL9tT1xvJc9fq5qaw2V5lfnqxMVpcWKzPV6kyeVSar8ztdL69WF0cvxvKN4XpWqw/XGivX5qvLC/Vrs/MTM9m1rPRcqgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBpDbaWJK1ERNqK07RSifhXRAxFKZmezbORiPh3RDwslwaK9mivOw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCBqzVW5ibyPFsSCF6KoL99574o/dlbcCsiXoBudAl6PDABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANATtcbK3ESeZ0u1XvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3kp/TiKiWE6XTw1u3duf/FlurSPivU+vfnxjol5fGi22/7a5vf5Je/v5XvQfAAAAXgmXnubgjef0jed4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3ao1VuYm8jxb2l9wKRorzaTDMb2uEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Ju/AwAA///+/bx6") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x25f6, 0xffffffff, 0x0, 0x80, 0x7}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.545943916s ago: executing program 5 (id=1200): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) 1.460926956s ago: executing program 2 (id=1201): timer_create(0x2, 0x0, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000002c0)={{}, {r1, r2+60000000}}, 0x0) timer_delete(r0) 1.222324385s ago: executing program 0 (id=1202): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x14, r1, 0x60b}, 0x14}}, 0x0) 1.220407775s ago: executing program 2 (id=1203): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000240)={@random="8fc7c8a5c2a4", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x5, 0x0, @void}}}}}}}, 0x0) 1.094584665s ago: executing program 5 (id=1204): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default trusted:'], 0x34, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1.028960924s ago: executing program 3 (id=1205): r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x40002119, 0x400, 0x1}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 984.251164ms ago: executing program 2 (id=1206): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2000400, &(0x7f00000000c0)=ANY=[], 0x1, 0x6ba, &(0x7f0000001400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x4000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 951.488494ms ago: executing program 0 (id=1207): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='b'], 0x9) 868.134384ms ago: executing program 5 (id=1208): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "88838167605ab7f5"}) 824.694144ms ago: executing program 3 (id=1209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2], 0x38}}, 0x0) 630.614733ms ago: executing program 3 (id=1210): r0 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f0000001340)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383d24f535e5c1d308623ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1", 0xeb}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) connect$tipc(r0, &(0x7f0000000180), 0x10) 630.449013ms ago: executing program 0 (id=1211): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xaa1f, 0xff39, 0x3) syz_mount_image$fuse(0x0, &(0x7f0000002200)='./file1\x00', 0x1041004, 0x0, 0x0, 0x0, 0x0) 630.331863ms ago: executing program 5 (id=1212): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xc0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 548.942933ms ago: executing program 4 (id=1213): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x18, 0xffffffff, 0x2) truncate(&(0x7f00000001c0)='./file1\x00', 0x6) 360.907562ms ago: executing program 3 (id=1214): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9"], 0x1, 0x619d, &(0x7f0000000780)="$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") r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) 0s ago: executing program 0 (id=1215): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 82.012729][ T127] playstation: probe of 0003:054C:0CE6.0001 failed with error -22 [ 82.197050][ T14] usb 2-1: USB disconnect, device number 3 [ 82.914270][ T127] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.955525][ T4861] loop2: detected capacity change from 0 to 512 [ 82.996366][ T4861] EXT4-fs: Ignoring removed i_version option [ 83.011240][ T4861] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.083212][ T4861] EXT4-fs (loop2): 1 orphan inode deleted [ 83.089451][ T4861] EXT4-fs (loop2): 1 truncate cleaned up [ 83.095656][ T4861] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.114315][ T127] usb 5-1: Using ep0 maxpacket: 32 [ 83.123630][ T127] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.158584][ T127] usb 5-1: config 0 has no interface number 0 [ 83.166011][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 83.176031][ T127] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.191932][ T127] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.208535][ T127] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 83.219239][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.236490][ T127] usb 5-1: config 0 descriptor?? [ 83.374647][ T4874] loop2: detected capacity change from 0 to 128 [ 83.417451][ T4874] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.431542][ T4874] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.561081][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 83.627130][ T4877] loop2: detected capacity change from 0 to 64 [ 83.738825][ T4877] hfs: keylen 94 too large [ 83.888785][ T127] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0094.0002/input/input5 [ 84.013619][ T127] uclogic 0003:28BD:0094.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.4-1/input1 [ 84.155644][ T127] usb 5-1: USB disconnect, device number 4 [ 84.503536][ T4898] loop2: detected capacity change from 0 to 1024 [ 84.710160][ T35] hfsplus: b-tree write err: -5, ino 3 [ 84.815117][ T4905] loop2: detected capacity change from 0 to 512 [ 84.867703][ T127] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.875282][ T4910] loop1: detected capacity change from 0 to 512 [ 84.902780][ T4905] EXT4-fs (loop2): 1 orphan inode deleted [ 84.918712][ T11] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 84.927737][ T4910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.949863][ T4905] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.955482][ T4912] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 84.960811][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6817: comm kworker/u4:1: Failed to release dquot type 1 [ 84.993733][ T4905] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.034648][ T4910] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 85.071080][ T4905] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.218: corrupted xattr block 19 [ 85.071226][ T4910] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.099343][ T4910] EXT4-fs (loop1): unmounting filesystem. [ 85.102177][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.109806][ T4905] EXT4-fs error (device loop2): ext4_get_inode_usage:852: inode #15: comm syz.2.218: corrupted xattr block 19 [ 85.134573][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.148925][ T127] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 85.159052][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.195951][ T127] usb 1-1: config 0 descriptor?? [ 85.241492][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 85.265995][ T51] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 85.283439][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6817: comm kworker/u4:3: Failed to release dquot type 1 [ 85.627090][ T127] lenovo 0003:17EF:6067.0003: unknown main item tag 0x0 [ 85.651133][ T127] lenovo 0003:17EF:6067.0003: unknown main item tag 0x0 [ 85.665852][ T127] lenovo 0003:17EF:6067.0003: item fetching failed at offset 2/7 [ 85.679342][ T127] lenovo 0003:17EF:6067.0003: hid_parse failed [ 85.686867][ T127] lenovo: probe of 0003:17EF:6067.0003 failed with error -22 [ 85.731909][ T4927] loop4: detected capacity change from 0 to 4096 [ 85.750362][ T4927] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 85.814486][ T4927] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 85.843186][ T4910] loop1: detected capacity change from 0 to 32768 [ 85.851034][ T4927] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 85.863656][ T127] usb 1-1: USB disconnect, device number 2 [ 85.888060][ T4927] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 85.910060][ T4927] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 85.934329][ T4927] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 85.943536][ T4927] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 85.968294][ T4910] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 85.975048][ T4927] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 86.050381][ T4927] ntfs: volume version 3.1. [ 86.069360][ T4250] ocfs2: Unmounting device (7,1) on (node local) [ 87.025170][ T4576] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.097688][ T4295] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.105762][ T4967] program syz.4.245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.218646][ T4576] usb 2-1: New USB device found, idVendor=04cb, idProduct=010b, bcdDevice=3d.e0 [ 87.232331][ T4576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.249481][ T4576] usb 2-1: Product: syz [ 87.258562][ T4576] usb 2-1: Manufacturer: syz [ 87.270431][ T4576] usb 2-1: SerialNumber: syz [ 87.287476][ T4576] usb 2-1: config 0 descriptor?? [ 87.308709][ T4295] usb 3-1: Using ep0 maxpacket: 16 [ 87.322368][ T4295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.338463][ T4576] gspca_main: finepix-2.14.0 probing 04cb:010b [ 87.351099][ T4295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.373765][ T4295] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 87.397913][ T4295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.421131][ T4295] usb 3-1: config 0 descriptor?? [ 87.562790][ T129] usb 2-1: USB disconnect, device number 4 [ 87.720670][ T4982] netlink: 336 bytes leftover after parsing attributes in process `syz.0.251'. [ 87.796254][ T4973] loop4: detected capacity change from 0 to 32768 [ 87.804617][ T4973] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.249 (4973) [ 87.841683][ T4973] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 87.853514][ T4973] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 87.863871][ T4964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.879619][ T4973] BTRFS info (device loop4): enabling disk space caching [ 87.887567][ T4964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.908246][ T4973] BTRFS info (device loop4): enabling auto defrag [ 87.919961][ T4973] BTRFS info (device loop4): doing ref verification [ 87.929962][ T4973] BTRFS info (device loop4): use no compression [ 87.931279][ T4295] hid (null): bogus close delimiter [ 87.937030][ T4973] BTRFS info (device loop4): force clearing of disk cache [ 87.949956][ T4973] BTRFS info (device loop4): disabling disk space caching [ 88.060121][ T4973] BTRFS info (device loop4): enabling ssd optimizations [ 88.061438][ T5003] process 'syz.0.253' launched './file0' with NULL argv: empty string added [ 88.083672][ T4973] BTRFS info (device loop4): rebuilding free space tree [ 88.133242][ T4973] BTRFS info (device loop4): disabling free space tree [ 88.145786][ T4295] usb 3-1: string descriptor 0 read error: -71 [ 88.198339][ T4973] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 88.208889][ T4295] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 88.218511][ T4295] letsketch: probe of 0003:6161:4D15.0004 failed with error -32 [ 88.234279][ T4973] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 88.255022][ T4295] usb 3-1: USB disconnect, device number 2 [ 88.658546][ T4245] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 88.804265][ T127] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.950372][ T5008] loop1: detected capacity change from 0 to 32768 [ 89.014227][ T127] usb 1-1: Using ep0 maxpacket: 32 [ 89.021244][ T127] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 89.052480][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.078739][ T127] usb 1-1: config 0 descriptor?? [ 89.090215][ T127] gspca_main: sunplus-2.14.0 probing 041e:400b [ 89.144193][ T14] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 89.336234][ T14] usb 3-1: config 1 interface 0 altsetting 245 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 89.356268][ T14] usb 3-1: config 1 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.374373][ T14] usb 3-1: config 1 interface 0 has no altsetting 0 [ 89.383789][ T14] usb 3-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 89.408140][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.417144][ T14] usb 3-1: Product: syz [ 89.421362][ T14] usb 3-1: Manufacturer: syz [ 89.426637][ T14] usb 3-1: SerialNumber: syz [ 89.443724][ T5015] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 89.589946][ T5023] loop4: detected capacity change from 0 to 32768 [ 89.681862][ T14] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input6 [ 89.893221][ T5029] netlink: 'syz.1.265': attribute type 1 has an invalid length. [ 89.906471][ T5029] netlink: 'syz.1.265': attribute type 2 has an invalid length. [ 89.908769][ T127] gspca_sunplus: reg_r err -71 [ 89.916360][ T5029] netlink: 16074 bytes leftover after parsing attributes in process `syz.1.265'. [ 89.935098][ T127] sunplus: probe of 1-1:0.0 failed with error -71 [ 89.972718][ T127] usb 1-1: USB disconnect, device number 3 [ 90.052152][ T5033] loop1: detected capacity change from 0 to 512 [ 90.113001][ C0] bcm5974 3-1:1.0: trackpad urb failed: -1 [ 90.237589][ T5033] EXT4-fs (loop1): Test dummy encryption mode enabled [ 90.255812][ T5033] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.266: inline data xattr refers to an external xattr inode [ 90.278145][ T5033] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.266: couldn't read orphan inode 12 (err -117) [ 90.291707][ T5033] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 90.328347][ T3608] bcm5974 3-1:1.0: could not read from device [ 90.335254][ T127] usb 3-1: USB disconnect, device number 3 [ 90.361862][ T4239] bcm5974 3-1:1.0: could not read from device [ 90.409754][ T5031] loop4: detected capacity change from 0 to 32768 [ 90.419111][ T5031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.264 (5031) [ 90.440287][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 90.447240][ T5031] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.467366][ T5031] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 90.477794][ T5031] BTRFS info (device loop4): using free space tree [ 90.589343][ T5053] loop1: detected capacity change from 0 to 764 [ 90.700564][ T5031] BTRFS info (device loop4): enabling ssd optimizations [ 90.814595][ T4572] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 90.909220][ T4245] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.048608][ T4572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 91.066558][ T5071] Failed to get privilege flags for destination (handle=0x2:0x8) [ 91.076396][ T4572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.091879][ T4572] usb 1-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 91.103458][ T4572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.178790][ T4572] usb 1-1: config 0 descriptor?? [ 91.603312][ T4572] wacom 0003:056A:0090.0005: item fetching failed at offset 7/11 [ 91.606208][ T5087] loop4: detected capacity change from 0 to 4096 [ 91.631109][ T4572] wacom 0003:056A:0090.0005: parse failed [ 91.641053][ T4572] wacom: probe of 0003:056A:0090.0005 failed with error -22 [ 91.707277][ T5091] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.718549][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 91.749776][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 91.768061][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 91.768076][ T27] audit: type=1800 audit(1734471999.041:12): pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.276" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 91.867187][ T4572] usb 1-1: USB disconnect, device number 4 [ 91.942442][ T5097] program syz.3.282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.020605][ T5100] loop4: detected capacity change from 0 to 512 [ 92.079538][ T5100] EXT4-fs (loop4): 1 truncate cleaned up [ 92.086610][ T5100] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 92.141130][ T5108] loop1: detected capacity change from 0 to 256 [ 92.163263][ T5108] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.245951][ T4245] EXT4-fs (loop4): unmounting filesystem. [ 93.014330][ T5016] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.207198][ T5016] usb 1-1: Using ep0 maxpacket: 16 [ 93.216725][ T5016] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.236122][ T5016] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.275305][ T5016] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.304323][ T5016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.332723][ T5016] usb 1-1: Product: syz [ 93.337905][ T5016] usb 1-1: Manufacturer: syz [ 93.342539][ T5016] usb 1-1: SerialNumber: syz [ 93.442079][ T5127] loop1: detected capacity change from 0 to 40427 [ 93.533558][ T5127] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.682780][ T5127] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 93.779166][ T5016] usb 1-1: 0:2 : does not exist [ 93.860375][ T5120] loop3: detected capacity change from 0 to 65536 [ 93.952546][ T5120] XFS (loop3): Mounting V5 Filesystem [ 93.961388][ T4250] syz-executor: attempt to access beyond end of device [ 93.961388][ T4250] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.039266][ T5120] XFS (loop3): Ending clean mount [ 94.052679][ T5120] XFS (loop3): Quotacheck needed: Please wait. [ 94.111333][ T5120] XFS (loop3): Quotacheck: Done. [ 94.186384][ T5016] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 94.244358][ T5016] usb 1-1: USB disconnect, device number 5 [ 94.498069][ T4252] XFS (loop3): Unmounting Filesystem [ 94.525030][ T4978] udevd[4978]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.803005][ T5164] loop1: detected capacity change from 0 to 1024 [ 94.856685][ T5164] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.452368][ T5185] loop1: detected capacity change from 0 to 4096 [ 95.459798][ T5187] loop2: detected capacity change from 0 to 1024 [ 95.478894][ T5185] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 95.623124][ T5185] ntfs3: loop1: ino=1b, "file0" attr_set_size [ 95.631788][ T5079] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 95.653843][ T5185] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 95.824206][ T5079] usb 1-1: Using ep0 maxpacket: 32 [ 95.838564][ T5079] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 95.881976][ T5079] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 95.919898][ T5079] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.940862][ T5079] usb 1-1: Product: syz [ 95.950258][ T5079] usb 1-1: Manufacturer: syz [ 95.971340][ T5079] usb 1-1: SerialNumber: syz [ 96.000780][ T5079] usb 1-1: config 0 descriptor?? [ 96.008746][ T5183] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 96.025182][ T5079] hub 1-1:0.0: bad descriptor, ignoring hub [ 96.031171][ T5079] hub: probe of 1-1:0.0 failed with error -5 [ 96.070921][ T5079] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 96.232429][ T5209] loop1: detected capacity change from 0 to 512 [ 96.287765][ T5209] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 96.342316][ T4572] usb 1-1: USB disconnect, device number 6 [ 96.342320][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 96.369738][ T5209] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 96.395532][ T5209] System zones: 1-12 [ 96.400599][ T5209] EXT4-fs (loop1): orphan cleanup on readonly fs [ 96.440031][ T5209] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.326: bg 0: block 361: padding at end of block bitmap is not set [ 96.474635][ T5209] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 96.489353][ T5209] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.326: attempt to clear invalid blocks 33619980 len 1 [ 96.522540][ T5209] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.326: invalid indirect mapped block 1811939328 (level 0) [ 96.549152][ T5209] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.326: invalid indirect mapped block 2 (level 2) [ 96.584871][ T5209] EXT4-fs (loop1): 1 truncate cleaned up [ 96.590593][ T5209] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 96.700791][ T5209] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #2: block 5: comm syz.1.326: lblock 0 mapped to illegal pblock 5 (length 1) [ 96.752973][ T5209] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.326: error -117 reading directory block [ 96.796108][ T5209] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #2: block 5: comm syz.1.326: lblock 0 mapped to illegal pblock 5 (length 1) [ 96.836665][ T5209] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.326: error -117 reading directory block [ 96.949581][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 96.991167][ T5231] loop3: detected capacity change from 0 to 2048 [ 97.102148][ T5231] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 97.151078][ T5240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.339'. [ 97.359511][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 97.677494][ T5229] loop2: detected capacity change from 0 to 32768 [ 97.680401][ T5254] mkiss: ax0: crc mode is auto. [ 97.695092][ T5229] (syz.2.334,5229,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "heastbeat=none" or missing value [ 97.760872][ T5229] (syz.2.334,5229,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 97.806754][ T5259] netlink: 2 bytes leftover after parsing attributes in process `syz.4.347'. [ 98.212992][ T4572] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 98.444883][ T4572] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.485789][ T4572] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.512751][ T4572] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 98.537403][ T4572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 98.561197][ T4572] usb 1-1: SerialNumber: syz [ 98.651298][ T27] audit: type=1326 audit(1734472005.921:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5284 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391af85d29 code=0x7ffc0000 [ 98.724205][ T27] audit: type=1326 audit(1734472005.921:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5284 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f391af85d29 code=0x7ffc0000 [ 98.746331][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.799563][ T27] audit: type=1326 audit(1734472005.921:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5284 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391af85d29 code=0x7ffc0000 [ 98.806765][ T4572] usb 1-1: 0:2 : does not exist [ 98.893522][ T4572] usb 1-1: USB disconnect, device number 7 [ 98.955082][ T3623] udevd[3623]: worker [4978] terminated by signal 33 (Unknown signal 33) [ 98.973964][ T3623] udevd[3623]: worker [4978] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0' [ 99.025588][ T5275] loop4: detected capacity change from 0 to 32768 [ 99.091307][ T5275] JBD2: Ignoring recovery information on journal [ 99.124602][ T4239] udevd[4239]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.162049][ T5297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 99.171537][ T5297] netlink: 36 bytes leftover after parsing attributes in process `syz.1.364'. [ 99.195336][ T5275] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 99.292368][ T5299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.365'. [ 99.318329][ T5299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.365'. [ 99.339122][ T5299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 99.365150][ T4245] ocfs2: Unmounting device (7,4) on (node local) [ 100.343512][ T5322] loop1: detected capacity change from 0 to 40427 [ 100.358997][ T5322] F2FS-fs (loop1): Found nat_bits in checkpoint [ 100.384286][ T4572] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 100.407118][ T5322] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 100.471935][ T4250] syz-executor: attempt to access beyond end of device [ 100.471935][ T4250] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.564367][ T5016] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.599860][ T4572] usb 1-1: Using ep0 maxpacket: 8 [ 100.609340][ T4572] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 100.634173][ T4572] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.644899][ T4572] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.660547][ T4572] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.671039][ T4572] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.699698][ T4572] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.720511][ T4572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.755930][ T5016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.793274][ T5016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.803948][ T5016] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 100.814666][ T5016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.836190][ T5016] usb 5-1: config 0 descriptor?? [ 101.052236][ T5016] usbhid 5-1:0.0: can't add hid device: -71 [ 101.067427][ T5016] usbhid: probe of 5-1:0.0 failed with error -71 [ 101.096206][ T5016] usb 5-1: USB disconnect, device number 5 [ 101.165062][ T4575] usb 1-1: USB disconnect, device number 8 [ 101.299795][ T5357] netlink: 16 bytes leftover after parsing attributes in process `syz.2.391'. [ 101.340608][ T5359] loop1: detected capacity change from 0 to 512 [ 101.389303][ T5359] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 101.398860][ T5359] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.450995][ T5359] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 101.574769][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 101.897782][ T5079] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 101.916054][ T5079] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 101.958487][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 101.971920][ T5384] bond0: option miimon: invalid value (18446744071562067972) [ 101.972740][ T5079] hid-generic 0000:0003:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 101.980672][ T5384] bond0: option miimon: allowed values 0 - 2147483647 [ 102.244294][ T5391] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 102.433341][ T5395] tap0: tun_chr_ioctl cmd 1074025677 [ 102.454809][ T5395] tap0: linktype set to 805 [ 102.634554][ T5404] loop4: detected capacity change from 0 to 2048 [ 102.719704][ T5404] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.728429][ T5404] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.864161][ T5079] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.897001][ T5418] loop0: detected capacity change from 0 to 128 [ 102.916548][ T5418] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.946021][ T4245] EXT4-fs (loop4): unmounting filesystem. [ 102.961072][ T5418] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.087766][ T4575] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.094311][ T5079] usb 3-1: Using ep0 maxpacket: 16 [ 103.106155][ T5079] usb 3-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 103.129567][ T27] audit: type=1326 audit(1734472010.401:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.4.418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51ee585d29 code=0x0 [ 103.129806][ T5079] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.161481][ T5079] usb 3-1: config 0 descriptor?? [ 103.181741][ T5079] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 103.183337][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 103.297918][ T4575] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 103.314167][ T4575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.332940][ T4575] usb 2-1: Product: syz [ 103.337394][ T4575] usb 2-1: Manufacturer: syz [ 103.342017][ T4575] usb 2-1: SerialNumber: syz [ 103.375510][ T4575] usb 2-1: config 0 descriptor?? [ 103.617507][ T4291] usb 2-1: USB disconnect, device number 5 [ 103.851234][ T5438] syz.0.425 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 104.101708][ T4291] usb 3-1: USB disconnect, device number 4 [ 104.220221][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.251127][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.263133][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.276605][ T5447] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 104.293591][ T5451] netlink: 'syz.1.430': attribute type 25 has an invalid length. [ 104.305176][ T5451] netlink: 'syz.1.430': attribute type 7 has an invalid length. [ 104.917877][ T5465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 105.158687][ T5469] netlink: 'syz.2.438': attribute type 29 has an invalid length. [ 105.179384][ T5469] netlink: 'syz.2.438': attribute type 29 has an invalid length. [ 105.445938][ T5478] loop4: detected capacity change from 0 to 512 [ 105.500203][ T5478] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 105.511272][ T5478] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.779314][ T4245] EXT4-fs (loop4): unmounting filesystem. [ 106.924982][ T5508] loop4: detected capacity change from 0 to 32768 [ 106.969994][ T5508] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.454 (5508) [ 107.018683][ T5508] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 107.046247][ T5508] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 107.075438][ T5508] BTRFS info (device loop4): enabling ssd optimizations [ 107.082459][ T5508] BTRFS info (device loop4): not using ssd optimizations [ 107.130303][ T5508] BTRFS info (device loop4): turning off barriers [ 107.140441][ T5508] BTRFS info (device loop4): use no compression [ 107.170921][ T5508] BTRFS info (device loop4): using free space tree [ 107.407957][ T5516] loop1: detected capacity change from 0 to 32768 [ 107.514343][ T5516] XFS (loop1): Mounting V5 Filesystem [ 107.619207][ T5525] loop3: detected capacity change from 0 to 32768 [ 107.685845][ T5518] loop0: detected capacity change from 0 to 32768 [ 107.693225][ T5516] XFS (loop1): Ending clean mount [ 107.713206][ T5516] XFS (loop1): Quotacheck needed: Please wait. [ 107.723970][ T5525] XFS (loop3): Mounting V5 Filesystem [ 107.808978][ T5516] XFS (loop1): Quotacheck: Done. [ 107.816876][ T4245] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 107.861693][ T5518] XFS (loop0): Mounting V5 Filesystem [ 107.898070][ T5525] XFS (loop3): Ending clean mount [ 107.907943][ T4250] XFS (loop1): Unmounting Filesystem [ 108.168148][ T5518] XFS (loop0): Ending clean mount [ 108.196119][ T5518] XFS (loop0): Quotacheck needed: Please wait. [ 108.251233][ T5577] sctp: [Deprecated]: syz.2.468 (pid 5577) Use of int in maxseg socket option. [ 108.251233][ T5577] Use struct sctp_assoc_value instead [ 108.307436][ T5518] XFS (loop0): Quotacheck: Done. [ 108.390061][ T4252] XFS (loop3): Unmounting Filesystem [ 108.587918][ T4254] XFS (loop0): Unmounting Filesystem [ 109.290588][ T5606] loop1: detected capacity change from 0 to 512 [ 109.335849][ T5610] loop0: detected capacity change from 0 to 1024 [ 109.379645][ T5613] netlink: 60 bytes leftover after parsing attributes in process `syz.3.479'. [ 109.422502][ T5606] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.480: casefold flag without casefold feature [ 109.448270][ T5613] netlink: 60 bytes leftover after parsing attributes in process `syz.3.479'. [ 109.458370][ T5608] netlink: 60 bytes leftover after parsing attributes in process `syz.3.479'. [ 109.510722][ T5606] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.480: couldn't read orphan inode 15 (err -117) [ 109.539684][ T5592] loop2: detected capacity change from 0 to 32768 [ 109.542494][ T5616] netlink: 60 bytes leftover after parsing attributes in process `syz.3.479'. [ 109.556871][ T5592] XFS: attr2 mount option is deprecated. [ 109.562544][ T5592] XFS: ikeep mount option is deprecated. [ 109.580220][ T5606] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.622029][ T5592] XFS: noikeep mount option is deprecated. [ 109.813907][ T5592] XFS (loop2): Mounting V5 Filesystem [ 109.820525][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 110.030919][ T5592] XFS (loop2): Ending clean mount [ 110.056701][ T5641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'. [ 110.063861][ T5592] XFS (loop2): Quotacheck needed: Please wait. [ 110.110869][ T5641] device veth1_macvtap left promiscuous mode [ 110.135515][ T5592] XFS (loop2): Quotacheck: Done. [ 110.363938][ T5649] program syz.0.492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.376372][ T4249] XFS (loop2): Unmounting Filesystem [ 110.929901][ T5075] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 111.124234][ T5075] usb 2-1: Using ep0 maxpacket: 8 [ 111.138843][ T5075] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.159070][ T5075] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 111.169935][ T5075] usb 2-1: can't read configurations, error -71 [ 112.130547][ T5683] loop0: detected capacity change from 0 to 32768 [ 112.172491][ T5683] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.508 (5683) [ 112.217536][ T5683] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 112.244218][ T5683] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 112.282318][ T5683] BTRFS info (device loop0): setting nodatacow, compression disabled [ 112.320186][ T5683] BTRFS info (device loop0): force clearing of disk cache [ 112.338027][ T5683] BTRFS info (device loop0): setting datacow [ 112.381749][ T5683] BTRFS info (device loop0): doing ref verification [ 112.398497][ T5683] BTRFS info (device loop0): disabling free space tree [ 112.422702][ T5683] BTRFS info (device loop0): turning on sync discard [ 112.455946][ T5683] BTRFS info (device loop0): enabling ssd optimizations [ 112.473147][ T5683] BTRFS info (device loop0): using spread ssd allocation scheme [ 112.493418][ T5683] BTRFS info (device loop0): not using ssd optimizations [ 112.513692][ T5683] BTRFS info (device loop0): not using spread ssd allocation scheme [ 112.621792][ T5694] loop1: detected capacity change from 0 to 32768 [ 112.721362][ T5683] BTRFS info (device loop0): rebuilding free space tree [ 112.752382][ T5694] XFS (loop1): Mounting V5 Filesystem [ 112.824898][ T5683] BTRFS info (device loop0): disabling free space tree [ 112.868759][ T5694] XFS (loop1): Ending clean mount [ 112.883371][ T5683] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.903749][ T5694] XFS (loop1): Quotacheck needed: Please wait. [ 112.919553][ T5683] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.039802][ T5694] XFS (loop1): Quotacheck: Done. [ 113.323391][ T5747] loop3: detected capacity change from 0 to 1024 [ 113.389451][ T5747] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.469017][ T4250] XFS (loop1): Unmounting Filesystem [ 113.507048][ T5747] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 113.529332][ T4254] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.596994][ T5755] netlink: 87 bytes leftover after parsing attributes in process `syz.4.531'. [ 113.651912][ T5747] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 113.882025][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 114.184286][ T5068] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 114.389359][ T5068] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 114.401019][ T5068] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.433932][ T5068] usb 3-1: config 0 descriptor?? [ 114.449584][ T5068] cp210x 3-1:0.0: cp210x converter detected [ 114.863740][ T5068] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 115.070230][ T5794] loop4: detected capacity change from 0 to 256 [ 115.080241][ T5068] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 115.092589][ T5068] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 115.111930][ T5794] exfat: Deprecated parameter 'utf8' [ 115.120656][ T5794] exfat: Deprecated parameter 'utf8' [ 115.140202][ T5068] usb 3-1: cp210x converter now attached to ttyUSB0 [ 115.147398][ T5794] exfat: Deprecated parameter 'utf8' [ 115.183260][ T5068] usb 3-1: USB disconnect, device number 5 [ 115.189393][ T5781] loop0: detected capacity change from 0 to 32768 [ 115.215847][ T5794] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 115.225425][ T5781] XFS (loop0): Invalid device [./file0], error=-15 [ 115.230930][ T5068] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 115.243190][ T5068] cp210x 3-1:0.0: device disconnected [ 115.468757][ T5798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 115.510094][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.567275][ T5798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.614747][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.640077][ T5798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.764176][ T4295] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 115.964287][ T4295] usb 1-1: Using ep0 maxpacket: 8 [ 115.972130][ T4295] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 116.014544][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.030685][ T4295] usb 1-1: config 0 descriptor?? [ 116.253743][ T4295] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 116.476407][ T5810] loop1: detected capacity change from 0 to 40427 [ 116.504244][ T5068] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 116.513885][ T5810] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 116.549975][ T5810] F2FS-fs (loop1): invalid crc value [ 116.562714][ T5810] F2FS-fs (loop1): Found nat_bits in checkpoint [ 116.664225][ T5810] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.680724][ T5832] loop3: detected capacity change from 0 to 4096 [ 116.716573][ T5068] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 116.729541][ T5068] usb 3-1: config 0 has no interface number 0 [ 116.757874][ T5068] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 116.796358][ T5810] syz.1.554: attempt to access beyond end of device [ 116.796358][ T5810] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.813892][ T5068] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 116.831713][ T5068] usb 3-1: config 0 interface 255 has no altsetting 0 [ 116.839525][ T5068] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 116.853954][ T5068] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.862785][ T4250] syz-executor: attempt to access beyond end of device [ 116.862785][ T4250] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 116.884605][ T4295] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 116.891009][ T5068] usb 3-1: config 0 descriptor?? [ 116.907605][ T4295] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 116.928843][ T5068] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 116.975726][ T4295] asix: probe of 1-1:0.0 failed with error -71 [ 116.997926][ T4295] usb 1-1: USB disconnect, device number 9 [ 117.029120][ T5841] loop4: detected capacity change from 0 to 512 [ 117.078812][ T5841] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.203543][ T5841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.221049][ T27] audit: type=1800 audit(1734472024.491:17): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.567" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 117.226170][ T4572] usb 3-1: USB disconnect, device number 6 [ 117.346483][ T4245] EXT4-fs (loop4): unmounting filesystem. [ 117.961454][ T5866] loop2: detected capacity change from 0 to 1024 [ 118.007305][ T5866] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.073674][ T5866] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 118.253400][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 118.405568][ T5876] netlink: 368 bytes leftover after parsing attributes in process `syz.4.580'. [ 118.565725][ T5878] loop2: detected capacity change from 0 to 256 [ 118.600936][ T5872] loop1: detected capacity change from 0 to 32768 [ 118.620087][ T5878] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 118.677105][ T5878] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 118.699398][ T5872] JBD2: Ignoring recovery information on journal [ 118.845396][ T5872] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 119.046475][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 119.060407][ T4250] ocfs2: Unmounting device (7,1) on (node local) [ 119.403596][ T5900] loop2: detected capacity change from 0 to 1024 [ 119.485201][ T64] hfsplus: b-tree write err: -5, ino 4 [ 119.597707][ T5909] tap0: tun_chr_ioctl cmd 1074025677 [ 119.603303][ T5909] tap0: linktype set to 780 [ 119.667416][ T5067] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 119.864243][ T5067] usb 2-1: Using ep0 maxpacket: 32 [ 119.886172][ T5067] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 119.904162][ T5067] usb 2-1: config 0 has no interface number 0 [ 119.912725][ T5067] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 119.932171][ T5067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.942312][ T5067] usb 2-1: Product: syz [ 119.952442][ T5067] usb 2-1: Manufacturer: syz [ 119.957972][ T5067] usb 2-1: SerialNumber: syz [ 119.975120][ T5067] usb 2-1: config 0 descriptor?? [ 119.983836][ T5067] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 120.026730][ T5918] IPv6: addrconf: prefix option has invalid lifetime [ 120.033855][ T5918] IPv6: addrconf: prefix option has invalid lifetime [ 120.190893][ T5067] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 120.209441][ T5067] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 120.367818][ T5924] tun0: tun_chr_ioctl cmd 2147767521 [ 120.614168][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 120.619290][ T4572] usb 2-1: USB disconnect, device number 8 [ 120.676470][ T4572] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 120.733225][ T4572] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 120.755081][ T4572] quatech2 2-1:0.51: device disconnected [ 120.908179][ T5944] loop4: detected capacity change from 0 to 512 [ 120.952421][ T5944] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.973652][ T5944] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.610: casefold flag without casefold feature [ 120.988824][ T5944] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.610: couldn't read orphan inode 15 (err -117) [ 121.006057][ T5944] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.049318][ T27] audit: type=1326 audit(1734472028.321:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcff85d29 code=0x7ffc0000 [ 121.082406][ T5944] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.610: Directory hole found for htree leaf block 0 [ 121.124493][ T27] audit: type=1326 audit(1734472028.321:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7febcff85d29 code=0x7ffc0000 [ 121.154200][ T27] audit: type=1326 audit(1734472028.321:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcff85d29 code=0x7ffc0000 [ 121.258633][ T27] audit: type=1326 audit(1734472028.341:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcff85d29 code=0x7ffc0000 [ 121.295926][ T4245] EXT4-fs (loop4): unmounting filesystem. [ 121.829565][ T5942] loop0: detected capacity change from 0 to 32768 [ 121.871687][ T5942] XFS: ikeep mount option is deprecated. [ 122.000042][ T5951] loop2: detected capacity change from 0 to 32768 [ 122.010574][ T5942] XFS (loop0): Mounting V5 Filesystem [ 122.070083][ T5979] capability: warning: `syz.3.624' uses 32-bit capabilities (legacy support in use) [ 122.125833][ T5951] XFS (loop2): Mounting V5 Filesystem [ 122.208021][ T5942] XFS (loop0): Ending clean mount [ 122.220840][ T5942] XFS (loop0): Quotacheck needed: Please wait. [ 122.332185][ T5942] XFS (loop0): Quotacheck: Done. [ 122.411382][ T5951] XFS (loop2): Ending clean mount [ 122.447671][ T27] audit: type=1800 audit(1734472029.721:22): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.609" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 122.449262][ T5951] XFS (loop2): Quotacheck needed: Please wait. [ 122.513944][ T5963] loop4: detected capacity change from 0 to 32768 [ 122.556743][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.629'. [ 122.593713][ T5951] XFS (loop2): Quotacheck: Done. [ 122.626731][ T4254] XFS (loop0): Unmounting Filesystem [ 122.927779][ T4249] XFS (loop2): Unmounting Filesystem [ 123.155602][ T5997] loop1: detected capacity change from 0 to 40427 [ 123.193720][ T5997] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 123.239531][ T5997] F2FS-fs (loop1): invalid crc value [ 123.266129][ T5997] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.398391][ T6012] loop0: detected capacity change from 0 to 512 [ 123.426070][ T6012] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.436234][ T5997] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.483848][ T6012] EXT4-fs (loop0): 1 truncate cleaned up [ 123.521289][ T6012] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 123.768554][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 123.894251][ T4295] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 124.091608][ T6037] netem: incorrect ge model size [ 124.097500][ T4295] usb 3-1: Using ep0 maxpacket: 8 [ 124.109635][ T4295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.138779][ T4295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.174243][ T4295] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 124.200697][ T4295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.230025][ T4295] usb 3-1: config 0 descriptor?? [ 124.566475][ T5579] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.662510][ T4295] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 124.680045][ T4295] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 124.688424][ T4295] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 124.696217][ T4295] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 124.703824][ T4295] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 124.711809][ T4295] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 124.719693][ T4295] playstation 0003:054C:0CE6.0007: unknown main item tag 0x0 [ 124.742226][ T4295] playstation 0003:054C:0CE6.0007: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.2-1/input0 [ 124.768640][ T5579] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 124.789686][ T5579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.820838][ T5579] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 124.847620][ T5579] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 124.860410][ T4295] playstation 0003:054C:0CE6.0007: Invalid reportID received, expected 9 got 119 [ 124.868641][ T5579] usb 5-1: Manufacturer: syz [ 124.874209][ T4295] playstation 0003:054C:0CE6.0007: Failed to retrieve DualSense pairing info: -22 [ 124.874258][ T4295] playstation 0003:054C:0CE6.0007: Failed to get MAC address from DualSense [ 124.874272][ T4295] playstation 0003:054C:0CE6.0007: Failed to create dualsense. [ 124.880121][ T4295] playstation: probe of 0003:054C:0CE6.0007 failed with error -22 [ 124.930665][ T5579] usb 5-1: config 0 descriptor?? [ 125.025986][ T5579] rc_core: IR keymap rc-hauppauge not found [ 125.032041][ T5579] Registered IR keymap rc-empty [ 125.041269][ T5579] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 125.052656][ T5579] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 125.092749][ T4572] usb 3-1: USB disconnect, device number 7 [ 125.227914][ T5016] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 125.374028][ T6067] rc rc0: two consecutive events of type space [ 125.414223][ T5016] usb 2-1: Using ep0 maxpacket: 16 [ 125.421424][ T5016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.432763][ T5016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.442688][ T5016] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 125.451832][ T5016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.462129][ T5016] usb 2-1: config 0 descriptor?? [ 125.580453][ T4572] usb 5-1: USB disconnect, device number 6 [ 125.876990][ T6073] loop2: detected capacity change from 0 to 4096 [ 125.885330][ T6065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.911967][ T6065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.934588][ T6073] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 125.950372][ T5016] hid (null): bogus close delimiter [ 126.150670][ T5016] usb 2-1: string descriptor 0 read error: -71 [ 126.188930][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.667'. [ 126.198033][ T5016] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 126.218677][ T5016] letsketch: probe of 0003:6161:4D15.0008 failed with error -32 [ 126.243983][ T5016] usb 2-1: USB disconnect, device number 9 [ 126.254734][ T6087] netlink: 40 bytes leftover after parsing attributes in process `syz.4.668'. [ 126.419003][ T6094] loop0: detected capacity change from 0 to 512 [ 126.449309][ T6094] EXT4-fs (loop0): 1 truncate cleaned up [ 126.455294][ T6094] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 126.507986][ T6098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.671'. [ 126.589221][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 126.599654][ T47] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 126.974135][ T6117] loop3: detected capacity change from 0 to 1024 [ 127.360601][ T6125] tap0: tun_chr_ioctl cmd 1074025681 [ 127.402148][ T6127] loop0: detected capacity change from 0 to 512 [ 127.471713][ T6127] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.686: inode #1: comm syz.0.686: iget: illegal inode # [ 127.558081][ T6127] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.686: error while reading EA inode 1 err=-117 [ 127.641805][ T6127] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.686: inode #1: comm syz.0.686: iget: illegal inode # [ 127.683630][ T6127] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.686: error while reading EA inode 1 err=-117 [ 127.709333][ T6127] EXT4-fs (loop0): 1 orphan inode deleted [ 127.717128][ T6127] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 127.784268][ T5579] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 127.961010][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 127.978204][ T5579] usb 3-1: Using ep0 maxpacket: 16 [ 127.990460][ T5579] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 128.024155][ T5579] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.032189][ T5579] usb 3-1: Product: syz [ 128.078329][ T5579] usb 3-1: Manufacturer: syz [ 128.103791][ T5579] usb 3-1: SerialNumber: syz [ 128.128152][ T5579] usb 3-1: config 0 descriptor?? [ 128.157657][ T5579] usb_ehset_test: probe of 3-1:0.0 failed with error -32 [ 128.351040][ T6136] loop4: detected capacity change from 0 to 32768 [ 128.371272][ T5579] usb 3-1: USB disconnect, device number 8 [ 128.450407][ T6150] loop0: detected capacity change from 0 to 256 [ 128.459471][ T6136] ERROR: (device loop4): diAllocBit: iag inconsistent [ 128.459471][ T6136] [ 128.483134][ T6150] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 128.489149][ T6136] ERROR: (device loop4): remounting filesystem as read-only [ 128.520010][ T6136] ialloc: diAlloc returned -5! [ 128.565366][ T27] audit: type=1800 audit(1734472035.841:23): pid=6150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.696" name="file1" dev="loop0" ino=1048620 res=0 errno=0 [ 128.586053][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.607245][ T4263] Bluetooth: hci2: command 0x2016 tx timeout [ 128.679512][ T6150] exFAT-fs (loop0): hint_cluster is invalid (17) [ 129.931019][ T6172] loop0: detected capacity change from 0 to 32768 [ 130.003727][ T6172] XFS (loop0): Mounting V5 Filesystem [ 130.075298][ T6172] XFS (loop0): Ending clean mount [ 130.096973][ T6172] XFS (loop0): Quotacheck needed: Please wait. [ 130.138946][ T27] audit: type=1326 audit(1734472037.411:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ee585d29 code=0x7ffc0000 [ 130.212607][ T27] audit: type=1326 audit(1734472037.411:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f51ee585d29 code=0x7ffc0000 [ 130.246982][ T6172] XFS (loop0): Quotacheck: Done. [ 130.247189][ T27] audit: type=1326 audit(1734472037.411:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ee585d29 code=0x7ffc0000 [ 130.332939][ T6194] loop1: detected capacity change from 0 to 32768 [ 130.363786][ T4254] XFS (loop0): Unmounting Filesystem [ 130.467030][ T27] audit: type=1326 audit(1734472037.741:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.717" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febcff85d29 code=0x0 [ 130.684407][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 131.024173][ T5016] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 131.171937][ T6232] loop0: detected capacity change from 0 to 4096 [ 131.199293][ T6232] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 131.219404][ T5016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.238570][ T5016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.257068][ T5016] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 131.266823][ T5016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.286798][ T5016] usb 3-1: config 0 descriptor?? [ 131.386489][ T6232] ntfs3: loop0: ino=1b, "file0" attr_set_size [ 131.413093][ T6232] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 131.504904][ T5016] usbhid 3-1:0.0: can't add hid device: -71 [ 131.510924][ T5016] usbhid: probe of 3-1:0.0 failed with error -71 [ 131.535284][ T5016] usb 3-1: USB disconnect, device number 9 [ 131.835751][ T6236] loop1: detected capacity change from 0 to 32768 [ 131.928708][ T6236] XFS (loop1): Mounting V5 Filesystem [ 131.929222][ T6247] loop0: detected capacity change from 0 to 256 [ 131.939927][ T6234] loop4: detected capacity change from 0 to 40427 [ 131.982908][ T6247] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.997207][ T6234] F2FS-fs (loop4): Found nat_bits in checkpoint [ 132.096188][ T6236] XFS (loop1): Ending clean mount [ 132.114581][ T6236] XFS (loop1): Quotacheck needed: Please wait. [ 132.143707][ T6234] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 132.191762][ T6236] XFS (loop1): Quotacheck: Done. [ 132.239533][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.313431][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.336747][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.379354][ T4250] XFS (loop1): Unmounting Filesystem [ 132.387321][ T6257] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 132.463565][ T4245] syz-executor: attempt to access beyond end of device [ 132.463565][ T4245] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.511651][ T6261] netlink: 'syz.0.738': attribute type 25 has an invalid length. [ 132.563839][ T6261] netlink: 'syz.0.738': attribute type 7 has an invalid length. [ 132.775785][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.782124][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.820610][ T6265] program syz.2.742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.011553][ T6271] loop0: detected capacity change from 0 to 512 [ 133.055402][ T6271] EXT4-fs (loop0): Test dummy encryption mode enabled [ 133.115008][ T6271] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.744: inline data xattr refers to an external xattr inode [ 133.166294][ T6271] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.744: couldn't read orphan inode 12 (err -117) [ 133.180775][ T6271] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 133.387564][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 133.713262][ T6299] loop3: detected capacity change from 0 to 128 [ 133.856184][ T6298] loop0: detected capacity change from 0 to 8192 [ 133.883927][ T6298] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 134.006518][ T6298] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 134.074479][ T6298] REISERFS (device loop0): using ordered data mode [ 134.114588][ T6298] reiserfs: using flush barriers [ 134.140704][ T6298] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.186856][ T6298] REISERFS (device loop0): checking transaction log (loop0) [ 134.382227][ T6298] REISERFS (device loop0): Using tea hash to sort names [ 134.394868][ T6298] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 134.836619][ T6312] loop1: detected capacity change from 0 to 32768 [ 134.876781][ T6312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.763 (6312) [ 134.920207][ T6284] loop4: detected capacity change from 0 to 65536 [ 134.944529][ T6312] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.975742][ T6312] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 135.014597][ T6312] BTRFS info (device loop1): using free space tree [ 135.076793][ T6284] XFS (loop4): Mounting V5 Filesystem [ 135.161063][ T6284] XFS (loop4): Ending clean mount [ 135.238215][ T6284] XFS (loop4): Quotacheck needed: Please wait. [ 135.244681][ T6312] BTRFS info (device loop1): enabling ssd optimizations [ 135.315925][ T6284] XFS (loop4): Quotacheck: Done. [ 135.388623][ T27] audit: type=1800 audit(1734472042.661:28): pid=6312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.763" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 135.563581][ T4245] XFS (loop4): Unmounting Filesystem [ 135.577883][ T4250] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.238645][ T6376] Bluetooth: MGMT ver 1.22 [ 136.290957][ T6374] loop2: detected capacity change from 0 to 4096 [ 136.331727][ T6374] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 136.375295][ T6374] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 136.413091][ T6374] ntfs3: loop2: Failed to load $Extend. [ 136.484672][ T6382] device lo entered promiscuous mode [ 136.644893][ T35] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 136.663718][ T4249] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 136.672490][ T6390] loop3: detected capacity change from 0 to 128 [ 136.696554][ T6390] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 136.718797][ T6390] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.775260][ T5578] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.880902][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 136.985038][ T5578] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.005396][ T5578] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.032818][ T5578] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.047066][ T5578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.056792][ T5578] usb 5-1: Product: syz [ 137.062340][ T5578] usb 5-1: Manufacturer: syz [ 137.071275][ T5578] usb 5-1: SerialNumber: syz [ 137.096391][ T5578] usb 5-1: selecting invalid altsetting 1 [ 137.200595][ T6409] loop2: detected capacity change from 0 to 256 [ 137.261825][ T6409] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 137.272160][ T6409] FAT-fs (loop2): Filesystem has been set read-only [ 137.304790][ T9] tipc: Subscription rejected, illegal request [ 137.664308][ T5067] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.689236][ T6414] loop0: detected capacity change from 0 to 32768 [ 137.712484][ T6414] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 137.817389][ T6424] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 137.840105][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.848521][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.856873][ T5067] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 137.880113][ T5067] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.920894][ T4254] ocfs2: Unmounting device (7,0) on (node local) [ 137.930668][ T5067] usb 3-1: config 0 descriptor?? [ 137.957969][ T5067] cp210x 3-1:0.0: cp210x converter detected [ 138.048177][ T5578] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 138.064414][ T5578] cdc_ncm 5-1:1.0: bind() failure [ 138.104397][ T5578] usb 5-1: USB disconnect, device number 7 [ 138.331884][ T6426] loop1: detected capacity change from 0 to 4096 [ 138.352413][ T5067] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 138.388703][ T6426] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 138.408959][ T5067] usb 3-1: cp210x converter now attached to ttyUSB0 [ 138.628063][ T5579] usb 3-1: USB disconnect, device number 10 [ 138.675425][ T5579] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 138.712372][ T5579] cp210x 3-1:0.0: device disconnected [ 138.935003][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.809'. [ 138.964850][ T6448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.809'. [ 139.144195][ T5578] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 139.343825][ T6434] loop4: detected capacity change from 0 to 32768 [ 139.345729][ T5578] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 139.363828][ T5578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.440245][ T5578] usb 1-1: config 0 descriptor?? [ 139.451324][ T5578] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 139.453182][ T6434] XFS (loop4): Mounting V5 Filesystem [ 139.608163][ T6467] loop1: detected capacity change from 0 to 1024 [ 139.609423][ T6434] XFS (loop4): Ending clean mount [ 139.615612][ T6467] EXT4-fs: Ignoring removed nobh option [ 139.627034][ T6467] EXT4-fs: Ignoring removed bh option [ 139.633299][ T6467] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.672613][ T6467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 139.711005][ T27] audit: type=1800 audit(1734472046.981:29): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.814" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 139.822644][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 139.859520][ T6449] loop3: detected capacity change from 0 to 40427 [ 139.897696][ T6449] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 139.919901][ T6449] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 139.940181][ T4245] XFS (loop4): Unmounting Filesystem [ 139.959230][ T6449] F2FS-fs (loop3): invalid crc value [ 140.020705][ T6449] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.086703][ T6449] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 140.099857][ T6449] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 140.213401][ T6461] loop2: detected capacity change from 0 to 32768 [ 140.266457][ T5578] usb 1-1: USB disconnect, device number 10 [ 140.402882][ T4276] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 140.419116][ T4276] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 140.487465][ T6480] netlink: 20 bytes leftover after parsing attributes in process `syz.1.818'. [ 140.516355][ T6480] netlink: 20 bytes leftover after parsing attributes in process `syz.1.818'. [ 140.554320][ T6480] Zero length message leads to an empty skb [ 140.909022][ T6490] loop3: detected capacity change from 0 to 512 [ 140.963565][ T6490] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 140.972158][ T6490] System zones: 1-12 [ 140.979651][ T6490] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.819: Directory hole found for htree index block 0 [ 141.010041][ T6490] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 141.028648][ T6490] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.819: Directory hole found for htree index block 0 [ 141.041963][ T6490] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 141.061653][ T6490] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 141.100136][ T6490] EXT4-fs (loop3): shut down requested (1) [ 141.251123][ T6503] Falling back ldisc for ttyS3. [ 141.265067][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 141.372823][ T6482] loop4: detected capacity change from 0 to 32768 [ 141.459956][ T27] audit: type=1800 audit(1734472048.731:30): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.816" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 141.489498][ T6482] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 141.489498][ T6482] [ 141.523287][ T6482] xtLookup: xtSearch returned -5 [ 141.539605][ T6482] free_index: error reading directory table [ 141.586355][ T6482] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 141.586355][ T6482] [ 141.639269][ T6482] xtLookup: xtSearch returned -5 [ 141.661762][ T6482] free_index: error reading directory table [ 141.755391][ T6520] netlink: 'syz.0.834': attribute type 1 has an invalid length. [ 141.986788][ T6523] loop1: detected capacity change from 0 to 4096 [ 142.135076][ T27] audit: type=1800 audit(1734472049.411:31): pid=6523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.835" name="file0" dev="loop1" ino=28 res=0 errno=0 [ 142.155331][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.142790][ T6557] loop1: detected capacity change from 0 to 4096 [ 143.179133][ T6544] loop3: detected capacity change from 0 to 32768 [ 143.251166][ T6544] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 143.279638][ T6557] Cannot load nls macgreek [ 143.376519][ T6544] (syz.3.846,6544,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "01777777777777777777777Xcv:Q" or missing value [ 143.443468][ T4252] ocfs2: Unmounting device (7,3) on (node local) [ 144.088596][ T6587] loop3: detected capacity change from 0 to 32768 [ 144.111349][ T6587] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 scanned by syz.3.860 (6587) [ 144.169010][ T6587] BTRFS info (device loop3): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 144.201137][ T6587] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 144.240767][ T6587] BTRFS info (device loop3): disabling tree log [ 144.263495][ T6587] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 144.301564][ T6587] BTRFS info (device loop3): trying to use backup root at mount time [ 144.332145][ T6587] BTRFS info (device loop3): setting nodatacow, compression disabled [ 144.382043][ T6587] BTRFS info (device loop3): enabling ssd optimizations [ 144.405768][ T6587] BTRFS info (device loop3): using spread ssd allocation scheme [ 144.416895][ T6597] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 144.426384][ T6587] BTRFS info (device loop3): using free space tree [ 144.465620][ T6597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.985814][ T6625] loop2: detected capacity change from 0 to 16 [ 145.068063][ T6625] erofs: (device loop2): mounted with root inode @ nid 36. [ 145.112984][ T4252] BTRFS info (device loop3): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 145.223651][ T6625] erofs: (device loop2): erofs_read_inode: unsupported i_format 36 of nid 37 [ 145.412692][ T5439] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 10 /dev/loop3 scanned by udevd (5439) [ 145.508535][ T6633] loop4: detected capacity change from 0 to 8192 [ 145.535430][ T6633] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 145.707801][ T6633] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 145.729164][ T6633] REISERFS (device loop4): using ordered data mode [ 145.744226][ T6633] reiserfs: using flush barriers [ 145.756034][ T6633] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 145.814848][ T6633] REISERFS (device loop4): checking transaction log (loop4) [ 145.844361][ T6633] REISERFS (device loop4): Using rupasov hash to sort names [ 145.875392][ T6633] REISERFS (device loop4): using 3.5.x disk format [ 145.912776][ T6633] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 145.941873][ T6648] loop1: detected capacity change from 0 to 64 [ 145.948338][ T6633] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 145.984758][ T6633] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 146.004373][ T6631] loop0: detected capacity change from 0 to 32768 [ 146.035413][ T6633] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 146.061875][ T6631] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.871 (6631) [ 146.126043][ T6631] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 146.175852][ T6633] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 146.181952][ T6631] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 146.226953][ T6631] BTRFS info (device loop0): setting nodatacow, compression disabled [ 146.237071][ T6631] BTRFS info (device loop0): force clearing of disk cache [ 146.246586][ T6633] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 146.258372][ T6631] BTRFS info (device loop0): enabling ssd optimizations [ 146.276347][ T6631] BTRFS info (device loop0): using spread ssd allocation scheme [ 146.306019][ T6631] BTRFS info (device loop0): doing ref verification [ 146.324270][ T6631] BTRFS info (device loop0): force zlib compression, level 3 [ 146.331800][ T6631] BTRFS info (device loop0): not using ssd optimizations [ 146.377975][ T6631] BTRFS info (device loop0): not using spread ssd allocation scheme [ 146.400152][ T6631] BTRFS info (device loop0): using free space tree [ 146.679349][ T6631] BTRFS info (device loop0): rebuilding free space tree [ 146.957467][ T6681] loop4: detected capacity change from 0 to 128 [ 147.210814][ T4254] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 147.492077][ T6689] loop3: detected capacity change from 0 to 4096 [ 147.670201][ T27] audit: type=1800 audit(1734472054.941:32): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.890" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 147.962327][ T6707] netlink: 2 bytes leftover after parsing attributes in process `syz.4.898'. [ 148.322885][ T6721] loop3: detected capacity change from 0 to 256 [ 149.101202][ T6748] netlink: 48 bytes leftover after parsing attributes in process `syz.4.918'. [ 149.129877][ T6748] netlink: 48 bytes leftover after parsing attributes in process `syz.4.918'. [ 149.876032][ T6756] loop2: detected capacity change from 0 to 32768 [ 149.913766][ T6771] netlink: 'syz.4.928': attribute type 4 has an invalid length. [ 149.932156][ T6756] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.921 (6756) [ 149.981876][ T6756] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.018675][ T6756] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 150.073917][ T6756] BTRFS info (device loop2): using free space tree [ 150.131969][ T6781] loop0: detected capacity change from 0 to 512 [ 150.234202][ T6756] BTRFS info (device loop2): enabling ssd optimizations [ 150.306377][ T6781] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 150.346758][ T6781] EXT4-fs (loop0): 1 truncate cleaned up [ 150.352667][ T6781] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 150.385204][ T6781] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.930: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 150.525777][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 150.641715][ T4249] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.658973][ T6804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.934'. [ 150.660030][ T6802] loop1: detected capacity change from 0 to 256 [ 150.796874][ T6802] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xff532d92, utbl_chksum : 0xe619d30d) [ 150.860159][ T6811] loop0: detected capacity change from 0 to 256 [ 150.919778][ T6811] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 151.526683][ T6821] loop0: detected capacity change from 0 to 8192 [ 151.568027][ T6821] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 151.585755][ T6821] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 151.610528][ T6821] REISERFS (device loop0): using ordered data mode [ 151.638645][ T6821] reiserfs: using flush barriers [ 151.648389][ T6826] vxcan1: tx address claim with dest, not broadcast [ 151.658003][ T6821] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.731904][ T6821] REISERFS (device loop0): checking transaction log (loop0) [ 151.752940][ T6821] REISERFS (device loop0): Using r5 hash to sort names [ 151.808853][ T6821] reiserfs: enabling write barrier flush mode [ 151.837628][ T6821] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 152.291665][ T6842] netlink: 956 bytes leftover after parsing attributes in process `syz.1.949'. [ 152.498161][ T27] audit: type=1326 audit(1734472059.771:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5614185d29 code=0x7ffc0000 [ 152.575400][ T27] audit: type=1326 audit(1734472059.801:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5614185d29 code=0x7ffc0000 [ 152.633821][ T27] audit: type=1326 audit(1734472059.801:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5614184690 code=0x7ffc0000 [ 152.663197][ T6853] loop1: detected capacity change from 0 to 256 [ 152.671922][ T27] audit: type=1326 audit(1734472059.801:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5614184690 code=0x7ffc0000 [ 152.768468][ T6853] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 152.794511][ T27] audit: type=1326 audit(1734472059.801:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5614185d29 code=0x7ffc0000 [ 152.825464][ T27] audit: type=1326 audit(1734472059.801:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5614185d29 code=0x7ffc0000 [ 152.850973][ T27] audit: type=1326 audit(1734472059.801:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f5614185d29 code=0x7ffc0000 [ 152.934130][ T27] audit: type=1326 audit(1734472059.801:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5614185d29 code=0x7ffc0000 [ 153.012714][ T27] audit: type=1326 audit(1734472059.801:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5614185d29 code=0x7ffc0000 [ 153.070681][ T27] audit: type=1326 audit(1734472059.921:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec9785d29 code=0x7ffc0000 [ 153.080616][ T6863] loop4: detected capacity change from 0 to 128 [ 153.122466][ T6861] loop2: detected capacity change from 0 to 2048 [ 153.132351][ T27] audit: type=1326 audit(1734472059.941:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec9785d29 code=0x7ffc0000 [ 153.168804][ T6863] FAT-fs (loop4): bogus logical sector size 0 [ 153.181843][ T27] audit: type=1326 audit(1734472059.941:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f0ec9785d29 code=0x7ffc0000 [ 153.185983][ T6863] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 153.217450][ T6861] loop2: p4 < > [ 153.267442][ T6863] FAT-fs (loop4): Can't find a valid FAT filesystem [ 153.271195][ T6861] ax25_connect(): syz.2.960 uses autobind, please contact jreuter@yaina.de [ 153.300496][ T27] audit: type=1326 audit(1734472059.941:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec9785d29 code=0x7ffc0000 [ 153.367630][ T27] audit: type=1326 audit(1734472059.941:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec9785d29 code=0x7ffc0000 [ 153.442374][ T6863] tmpfs: Bad value for 'gid' [ 153.564860][ T6855] loop0: detected capacity change from 0 to 32768 [ 153.620209][ T6855] [ 153.620209][ T6855] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.620209][ T6855] [ 153.679461][ T6855] ERROR: (device loop0): diWrite: ixpxd invalid [ 153.679461][ T6855] [ 153.744278][ T6855] ERROR: (device loop0): txCommit: [ 153.744278][ T6855] [ 153.759830][ T6871] ERROR: (device loop0): diWrite: ixpxd invalid [ 153.759830][ T6871] [ 153.804644][ T6871] ERROR: (device loop0): txCommit: [ 153.804644][ T6871] [ 153.887932][ T6855] jfs_mkdir: dtSearch returned -17 [ 153.999378][ T4254] [ 153.999378][ T4254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.999378][ T4254] [ 154.039839][ T4254] [ 154.039839][ T4254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.039839][ T4254] [ 154.712764][ T6899] loop4: detected capacity change from 0 to 256 [ 154.824102][ T6899] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.854140][ T6899] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 154.886147][ T6899] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf32de3a7, utbl_chksum : 0xe619d30d) [ 155.118709][ T6909] loop0: detected capacity change from 0 to 4096 [ 155.148673][ T6911] loop2: detected capacity change from 0 to 512 [ 155.192634][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.984'. [ 155.211942][ T6914] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.294928][ T6911] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.983: attempt to clear invalid blocks 2 len 1 [ 155.333758][ T6911] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 155.385721][ T6911] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.983: invalid indirect mapped block 1819239214 (level 0) [ 155.425477][ T6911] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.983: invalid indirect mapped block 1819239214 (level 1) [ 155.465438][ T6911] EXT4-fs (loop2): 1 truncate cleaned up [ 155.471329][ T6911] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 155.548252][ T6911] EXT4-fs (loop2): shut down requested (2) [ 155.776145][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 155.928735][ T6928] loop0: detected capacity change from 0 to 256 [ 155.952967][ T6932] loop1: detected capacity change from 0 to 8 [ 156.019590][ T6934] loop4: detected capacity change from 0 to 512 [ 156.040057][ T6934] EXT4-fs (loop4): Test dummy encryption mode enabled [ 156.081725][ T6934] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.993: inode #1: comm syz.4.993: iget: illegal inode # [ 156.104770][ T6934] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.993: error while reading EA inode 1 err=-117 [ 156.123561][ T6934] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.993: inode #1: comm syz.4.993: iget: illegal inode # [ 156.165846][ T6934] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.993: error while reading EA inode 1 err=-117 [ 156.235020][ T6934] EXT4-fs (loop4): 1 orphan inode deleted [ 156.240899][ T6934] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 156.380313][ T6941] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.993: unexpected EA_INODE flag [ 156.429859][ T4250] SQUASHFS error: Unable to read directory block [631:72] [ 156.470350][ T4250] SQUASHFS error: Unable to read inode 0xe3 [ 156.486707][ T4250] SQUASHFS error: Unable to read inode 0xe3 [ 156.546106][ T6943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.997'. [ 156.590042][ T4245] EXT4-fs (loop4): unmounting filesystem. [ 156.631054][ T6937] loop2: detected capacity change from 0 to 32768 [ 156.647548][ T6937] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop2 scanned by syz.2.994 (6937) [ 156.737430][ T6937] BTRFS info (device loop2): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 156.789127][ T6937] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 156.814224][ T6937] BTRFS info (device loop2): using free space tree [ 157.014463][ T4250] syz-executor (4250) used greatest stack depth: 18744 bytes left [ 157.125669][ T6937] BTRFS info (device loop2): enabling ssd optimizations [ 157.169297][ T6970] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 157.228617][ T4276] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.304686][ T6924] loop3: detected capacity change from 0 to 65536 [ 157.364202][ T26] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 157.441665][ T6924] XFS (loop3): Mounting V5 Filesystem [ 157.463589][ T4276] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.552062][ T6924] XFS (loop3): Ending clean mount [ 157.563764][ T4249] BTRFS info (device loop2): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 157.564318][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 157.598584][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.618990][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.650494][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 157.665903][ T26] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 157.686273][ T26] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.731297][ T26] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 157.750787][ T26] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 157.779356][ T26] usb 5-1: Manufacturer: syz [ 157.794659][ T26] usb 5-1: config 0 descriptor?? [ 157.943480][ T4263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.949815][ T4276] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.953584][ T4263] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.972883][ T4263] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.983671][ T4263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.993243][ T4263] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 158.004187][ T4263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.167033][ T4276] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.180734][ T26] rc_core: IR keymap rc-hauppauge not found [ 158.188466][ T26] Registered IR keymap rc-empty [ 158.193567][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.247909][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.290587][ T26] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 158.336409][ T26] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 158.354515][ T6994] loop2: detected capacity change from 0 to 512 [ 158.376551][ T6994] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 158.423298][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.435996][ T6994] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 158.450534][ T6994] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 158.464352][ T6994] System zones: 0-1, 15-15, 18-18, 34-34 [ 158.472597][ T6994] EXT4-fs (loop2): orphan cleanup on readonly fs [ 158.479494][ T6994] __quota_error: 12 callbacks suppressed [ 158.479509][ T6994] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 158.484728][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.485585][ T6994] EXT4-fs warning (device loop2): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 158.521262][ T6994] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 158.530768][ T6994] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1008: bg 0: block 40: padding at end of block bitmap is not set [ 158.548159][ T6994] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 158.576057][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.589583][ T6994] EXT4-fs (loop2): 1 truncate cleaned up [ 158.601505][ T6994] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 158.630585][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.674341][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.711619][ T6985] chnl_net:caif_netlink_parms(): no params data found [ 158.719643][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.754253][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.785046][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.809106][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 158.844283][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.896076][ T26] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.920923][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1011'. [ 158.941039][ T26] mceusb 5-1:0.0: Registered р with mce emulator interface version 1 [ 158.998397][ T26] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 159.060181][ T26] usb 5-1: USB disconnect, device number 8 [ 159.182962][ T4252] XFS (loop3): Unmounting Filesystem [ 159.193966][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1014'. [ 159.247808][ T6985] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.258041][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.283866][ T6985] device bridge_slave_0 entered promiscuous mode [ 159.380090][ T7017] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1015'. [ 159.457562][ T6985] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.476910][ T6985] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.495978][ T6985] device bridge_slave_1 entered promiscuous mode [ 159.666375][ T6985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.734213][ T4575] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 159.749384][ T6985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.833192][ T6985] team0: Port device team_slave_0 added [ 159.841889][ T6985] team0: Port device team_slave_1 added [ 159.904447][ T26] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 159.913948][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.922982][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.952342][ T6985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.964802][ T4575] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.975348][ T4575] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.988836][ T4575] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.998357][ T4575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.007286][ T4575] usb 3-1: Product: syz [ 160.011485][ T4575] usb 3-1: Manufacturer: syz [ 160.016205][ T4575] usb 3-1: SerialNumber: syz [ 160.041545][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.049775][ T4263] Bluetooth: hci1: command 0x0409 tx timeout [ 160.054383][ T7031] can0: slcan on ttyS3. [ 160.061144][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.094482][ T6985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.136783][ T26] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 160.147617][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.155731][ T26] usb 1-1: Product: syz [ 160.160213][ T26] usb 1-1: Manufacturer: syz [ 160.166366][ T26] usb 1-1: SerialNumber: syz [ 160.191705][ T26] usb 1-1: config 0 descriptor?? [ 160.196952][ T7032] can0 (unregistered): slcan off ttyS3. [ 160.238901][ T4575] usb 3-1: 0:2 : does not exist [ 160.271371][ T4575] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 160.404681][ T4575] usb 3-1: USB disconnect, device number 11 [ 160.482976][ T5439] udevd[5439]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.504806][ T26] usb 1-1: USB disconnect, device number 11 [ 160.507692][ T6985] device hsr_slave_0 entered promiscuous mode [ 160.528146][ T6985] device hsr_slave_1 entered promiscuous mode [ 160.543699][ T6985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.552259][ T6985] Cannot create hsr debugfs directory [ 160.736147][ T4276] device hsr_slave_0 left promiscuous mode [ 160.742681][ T4276] device hsr_slave_1 left promiscuous mode [ 160.751092][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.759192][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.767791][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.775300][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.783166][ T4276] device bridge_slave_1 left promiscuous mode [ 160.798525][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.811330][ T4276] device bridge_slave_0 left promiscuous mode [ 160.818442][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.878427][ T4276] device veth0_macvtap left promiscuous mode [ 160.885730][ T4276] device veth1_vlan left promiscuous mode [ 160.893243][ T4276] device veth0_vlan left promiscuous mode [ 161.400227][ T4276] team0 (unregistering): Port device team_slave_1 removed [ 161.443098][ T4276] team0 (unregistering): Port device team_slave_0 removed [ 161.490246][ T4276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.536801][ T4276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.016840][ T4276] bond0 (unregistering): Released all slaves [ 162.124624][ T4263] Bluetooth: hci1: command 0x041b tx timeout [ 162.386131][ T6985] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 162.423251][ T6985] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.458459][ T6985] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.460815][ T7053] netlink: 'syz.4.1031': attribute type 49 has an invalid length. [ 162.482960][ T6985] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.508493][ T7053] netlink: 'syz.4.1031': attribute type 49 has an invalid length. [ 162.680082][ T6985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.701007][ T6983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.720972][ T7059] loop0: detected capacity change from 0 to 1024 [ 162.727131][ T6983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.742703][ T7059] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 162.768187][ T6985] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.798961][ T6983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.826184][ T7059] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 162.827263][ T6983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.844715][ T4294] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 162.918368][ T6983] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.927114][ T6983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.943789][ T6983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.968796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.986402][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 162.988097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.015981][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.023134][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.040648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.046344][ T4294] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.089862][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.094615][ T4294] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 163.104973][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.139912][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.156709][ T4294] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.159424][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.178843][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.186900][ T4294] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 163.186933][ T4294] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 163.201070][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.223189][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.239024][ T6985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.254363][ T4294] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.259452][ T6985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.270805][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.270831][ T4294] usb 3-1: Product: syz [ 163.270846][ T4294] usb 3-1: Manufacturer: syz [ 163.286701][ T4294] cdc_wdm 3-1:1.0: skipping garbage [ 163.302037][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.309540][ T4294] cdc_wdm 3-1:1.0: skipping garbage [ 163.316412][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.326075][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.357404][ T4294] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 163.383788][ T4294] cdc_wdm 3-1:1.0: Unknown control protocol [ 163.635372][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.642271][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.654438][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.661067][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.674763][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.681404][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.688224][ T4576] usb 3-1: USB disconnect, device number 12 [ 163.828871][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.840240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.861429][ T6985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.121036][ T7089] loop3: detected capacity change from 0 to 128 [ 164.204225][ T4263] Bluetooth: hci1: command 0x040f tx timeout [ 164.277807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.287582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.319494][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.334599][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.346751][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.360133][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.368031][ T5075] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 164.397080][ T6985] device veth0_vlan entered promiscuous mode [ 164.429518][ T6985] device veth1_vlan entered promiscuous mode [ 164.472752][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.493723][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.523779][ T6985] device veth0_macvtap entered promiscuous mode [ 164.551930][ T6985] device veth1_macvtap entered promiscuous mode [ 164.575908][ T5075] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.596427][ T5075] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.599509][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.644733][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.645283][ T5075] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 164.677354][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.705891][ T5075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.711821][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.723780][ T5075] usb 5-1: SerialNumber: syz [ 164.749389][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.777536][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.806738][ T6985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.843993][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.864818][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.901897][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.927573][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.946054][ T5075] usb 5-1: 0:2 : does not exist [ 164.970407][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.991283][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.001719][ T5075] usb 5-1: USB disconnect, device number 9 [ 165.026400][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.072360][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.107125][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.113564][ T7095] loop0: detected capacity change from 0 to 32768 [ 165.126509][ T7110] loop3: detected capacity change from 0 to 164 [ 165.132890][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.152179][ T7110] Unable to read rock-ridge attributes [ 165.163120][ T7095] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1044 (7095) [ 165.196213][ T6985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.209665][ T7110] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 165.222681][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.233611][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.260855][ T6985] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.286392][ T7095] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 165.303350][ T6985] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.311765][ T7095] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 165.325482][ T7095] BTRFS info (device loop0): setting nodatacow, compression disabled [ 165.333647][ T7095] BTRFS info (device loop0): setting datacow [ 165.342282][ T7095] BTRFS info (device loop0): doing ref verification [ 165.342987][ T6985] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.351506][ T7095] BTRFS info (device loop0): force clearing of disk cache [ 165.365642][ T6985] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.371072][ T7095] BTRFS info (device loop0): turning off barriers [ 165.381890][ T7095] BTRFS info (device loop0): enabling ssd optimizations [ 165.427390][ T7095] BTRFS info (device loop0): using spread ssd allocation scheme [ 165.453827][ T7095] BTRFS info (device loop0): using free space tree [ 165.625563][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.640578][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.686707][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.717924][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.748722][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.767237][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1059'. [ 165.784292][ T7095] BTRFS info (device loop0): rebuilding free space tree [ 165.807205][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.821143][ T7141] netlink: 832 bytes leftover after parsing attributes in process `syz.2.1058'. [ 166.059384][ T7144] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1060'. [ 166.096414][ T7095] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 166.107254][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'. [ 166.147957][ T7144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1060'. [ 166.285588][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 166.366500][ T4254] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 166.503622][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 167.030699][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1071'. [ 167.065504][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1071'. [ 167.174307][ T4246] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 167.355959][ T4246] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.380464][ T4246] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.410941][ T4246] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.424192][ T4246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.434620][ T7192] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1080'. [ 167.457018][ T7169] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 167.706852][ T7196] netlink: 'syz.0.1083': attribute type 1 has an invalid length. [ 167.720150][ T7194] loop3: detected capacity change from 0 to 4096 [ 167.773022][ T7194] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 167.822750][ T5075] usb 5-1: USB disconnect, device number 10 [ 167.856374][ T7194] ntfs: volume version 3.1. [ 168.342795][ T7219] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1092'. [ 168.934263][ T26] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 169.144158][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 169.153280][ T26] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.173049][ T26] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.185791][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 169.204267][ T26] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 169.225304][ T26] usb 5-1: Product: syz [ 169.229582][ T26] usb 5-1: Manufacturer: syz [ 169.254345][ T26] hub 5-1:4.0: USB hub found [ 169.382075][ T64] tipc: Subscription rejected, illegal request [ 169.474852][ T7229] loop4: detected capacity change from 0 to 256 [ 169.498847][ T7229] exfat: Deprecated parameter 'namecase' [ 169.500500][ T7257] loop2: detected capacity change from 0 to 128 [ 169.543585][ T7229] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 169.597793][ T26] hub 5-1:4.0: 2 ports detected [ 169.598463][ T7257] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 169.626631][ T7257] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.861101][ T26] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 169.881600][ T26] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 169.944944][ T26] usb 5-1: USB disconnect, device number 11 [ 170.023728][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 170.694878][ T7301] loop2: detected capacity change from 0 to 256 [ 170.709298][ T7301] exfat: Deprecated parameter 'namecase' [ 170.725439][ T7301] exfat: Deprecated parameter 'utf8' [ 170.737082][ T7301] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 170.751726][ T7280] loop0: detected capacity change from 0 to 40427 [ 170.779405][ T7280] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 170.792054][ T7280] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 170.838934][ T7280] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 170.866986][ T7304] loop2: detected capacity change from 0 to 512 [ 170.875245][ T7304] EXT4-fs (loop2): Test dummy encryption mode enabled [ 170.885152][ T7280] F2FS-fs (loop0): Found nat_bits in checkpoint [ 170.894428][ T7304] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1127: inode #1: comm syz.2.1127: iget: illegal inode # [ 170.908219][ T7304] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1127: error while reading EA inode 1 err=-117 [ 170.921268][ T7304] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1127: inode #1: comm syz.2.1127: iget: illegal inode # [ 170.936951][ T7304] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1127: error while reading EA inode 1 err=-117 [ 170.950237][ T7304] EXT4-fs (loop2): 1 orphan inode deleted [ 170.956646][ T7304] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 170.971379][ T7280] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 170.994248][ T7280] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 171.049919][ T7310] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.1127: unexpected EA_INODE flag [ 171.420986][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 171.812173][ T7330] netlink: 'syz.4.1137': attribute type 21 has an invalid length. [ 171.837917][ T7330] netlink: 'syz.4.1137': attribute type 1 has an invalid length. [ 171.857264][ T7330] __nla_validate_parse: 3 callbacks suppressed [ 171.857281][ T7330] netlink: 14374 bytes leftover after parsing attributes in process `syz.4.1137'. [ 171.984192][ T4294] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 172.209149][ T4294] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.226535][ T4294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.242472][ T7322] loop2: detected capacity change from 0 to 32768 [ 172.266615][ T4294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.301842][ T7322] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 172.301842][ T7322] [ 172.301994][ T4294] usb 6-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 172.335149][ T7322] ERROR: (device loop2): remounting filesystem as read-only [ 172.342669][ T4294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.353128][ T4294] usb 6-1: config 0 descriptor?? [ 172.374205][ T7322] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 172.374205][ T7322] [ 172.414158][ T7322] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 172.414158][ T7322] [ 172.770109][ T4294] elecom 0003:056E:011C.0009: item fetching failed at offset 2/5 [ 172.788720][ T4294] elecom: probe of 0003:056E:011C.0009 failed with error -22 [ 172.992439][ T5075] usb 6-1: USB disconnect, device number 2 [ 173.151424][ T7344] loop0: detected capacity change from 0 to 40427 [ 173.177554][ T7344] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 173.219243][ T7344] F2FS-fs (loop0): invalid crc value [ 173.239241][ T7344] F2FS-fs (loop0): Found nat_bits in checkpoint [ 173.365862][ T7344] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 173.524006][ T4254] syz-executor: attempt to access beyond end of device [ 173.524006][ T4254] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 173.619409][ T7356] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 173.684194][ T7356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.687523][ T7358] loop5: detected capacity change from 0 to 1024 [ 174.500205][ T7366] loop3: detected capacity change from 0 to 32768 [ 174.557290][ T7368] loop4: detected capacity change from 0 to 40427 [ 174.576037][ T7368] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 174.622057][ T7366] XFS (loop3): Mounting V5 Filesystem [ 174.629901][ T7368] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 174.661266][ T7368] F2FS-fs (loop4): invalid crc value [ 174.735256][ T7389] loop0: detected capacity change from 0 to 1024 [ 174.756978][ T7368] F2FS-fs (loop4): Found nat_bits in checkpoint [ 174.781773][ T7366] XFS (loop3): Ending clean mount [ 174.801657][ T7366] XFS (loop3): Quotacheck needed: Please wait. [ 174.833727][ T7389] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 174.861399][ T7366] XFS (loop3): Quotacheck: Done. [ 174.861836][ T7368] F2FS-fs (loop4): Start checkpoint disabled! [ 174.924268][ T27] audit: type=1800 audit(1734472082.191:59): pid=7389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1158" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 174.947382][ T7366] XFS (loop3): User initiated shutdown received. [ 174.959261][ T7366] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:496). Shutting down filesystem. [ 174.977789][ T7366] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 174.993338][ T7368] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 175.024147][ T7368] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 175.078069][ T7380] ptrace attach of "./syz-executor exec"[6985] was attempted by "./syz-executor exec"[7380] [ 175.090898][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 175.105463][ T4252] XFS (loop3): Unmounting Filesystem [ 175.223884][ T7403] loop0: detected capacity change from 0 to 512 [ 175.303319][ T7403] EXT4-fs (loop0): Test dummy encryption mode enabled [ 175.377491][ T7403] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1160: inode #1: comm syz.0.1160: iget: illegal inode # [ 175.509315][ T7403] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1160: error while reading EA inode 1 err=-117 [ 175.549247][ T7403] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1160: inode #1: comm syz.0.1160: iget: illegal inode # [ 175.582749][ T6983] kworker/u4:7: attempt to access beyond end of device [ 175.582749][ T6983] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 175.638784][ T7403] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1160: error while reading EA inode 1 err=-117 [ 175.694533][ T7403] EXT4-fs (loop0): 1 orphan inode deleted [ 175.700324][ T7403] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 175.875789][ T7422] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.1160: deleted inode referenced: 15 [ 176.140136][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 176.192163][ T7426] loop4: detected capacity change from 0 to 2048 [ 176.261712][ T7428] loop3: detected capacity change from 0 to 1024 [ 176.309162][ T7426] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 176.337923][ T7428] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 176.373649][ T27] audit: type=1800 audit(1734472083.641:60): pid=7428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1172" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 176.397163][ T7426] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.511772][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 176.701240][ T7421] loop2: detected capacity change from 0 to 32768 [ 176.814005][ T7421] XFS (loop2): Mounting V5 Filesystem [ 176.962488][ T7455] loop4: detected capacity change from 0 to 2048 [ 177.010713][ T7455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.057245][ T7421] XFS (loop2): Ending clean mount [ 177.082686][ T7421] XFS (loop2): Quotacheck needed: Please wait. [ 177.194572][ T7421] XFS (loop2): Quotacheck: Done. [ 177.273375][ T7462] loop3: detected capacity change from 0 to 256 [ 177.312653][ T7463] loop5: detected capacity change from 0 to 1024 [ 177.441118][ T7463] hfsplus: invalid extended attribute record [ 177.444826][ T4249] XFS (loop2): Unmounting Filesystem [ 177.649787][ T64] hfsplus: b-tree write err: -5, ino 8 [ 177.672052][ T7453] loop0: detected capacity change from 0 to 32768 [ 178.293101][ T7481] loop5: detected capacity change from 0 to 1024 [ 178.539826][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1196'. [ 178.728114][ T7496] loop0: detected capacity change from 0 to 2048 [ 178.818045][ T7496] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 178.880226][ T7496] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.966855][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 179.200195][ T7510] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 179.349046][ T7515] loop2: detected capacity change from 0 to 1024 [ 179.421684][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.477249][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.574364][ T7521] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.582187][ T7521] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.622817][ T7525] loop0: detected capacity change from 0 to 16 [ 179.641415][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.661743][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.676206][ T7525] erofs: (device loop0): mounted with root inode @ nid 36. [ 179.702420][ T7521] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.717907][ T7525] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 179.722246][ T7521] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.773793][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.781077][ T7525] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 179.781134][ T7525] erofs: (device loop0): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 179.781156][ T7525] erofs: (device loop0): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 179.781174][ T7525] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 179.781223][ T7525] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 179.782966][ T7525] syz.0.1211: attempt to access beyond end of device [ 179.782966][ T7525] loop0: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 179.807259][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.864530][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.884982][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.904301][ T7525] syz.0.1211: attempt to access beyond end of device [ 179.904301][ T7525] loop0: rw=524288, sector=384, nr_sectors = 16 limit=16 [ 179.934292][ T7521] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.941829][ T7525] syz.0.1211: attempt to access beyond end of device [ 179.941829][ T7525] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 179.989662][ T7521] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.997417][ T7525] syz.0.1211: attempt to access beyond end of device [ 179.997417][ T7525] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 180.014371][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.026900][ T7525] syz.0.1211: attempt to access beyond end of device [ 180.026900][ T7525] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 180.045565][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.066102][ T7525] syz.0.1211: attempt to access beyond end of device [ 180.066102][ T7525] loop0: rw=524288, sector=728, nr_sectors = 16 limit=16 [ 180.077747][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.117639][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.137964][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.174698][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.194824][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.227633][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.253327][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.277147][ T7528] [ 180.279527][ T7528] ====================================================== [ 180.286558][ T7528] WARNING: possible circular locking dependency detected [ 180.286647][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.293561][ T7528] 6.1.120-syzkaller-00773-g52f863f820fd #0 Tainted: G W [ 180.293575][ T7528] ------------------------------------------------------ [ 180.293581][ T7528] syz.5.1212/7528 is trying to acquire lock: [ 180.293590][ T7528] ffff888074b054a0 ( [ 180.320315][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.322133][ T7528] &sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x446/0x21b0 [ 180.334094][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.342385][ T7528] [ 180.342385][ T7528] but task is already holding lock: [ 180.342394][ T7528] ffff88807bd21f58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x207/0x8b0 [ 180.367054][ T7528] [ 180.367054][ T7528] which lock already depends on the new lock. [ 180.367054][ T7528] [ 180.367141][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.377440][ T7528] [ 180.377440][ T7528] the existing dependency chain (in reverse order) is: [ 180.377448][ T7528] [ 180.377448][ T7528] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 180.377475][ T7528] lock_acquire+0x1f8/0x5a0 [ 180.377502][ T7528] down_write_killable+0x45/0x90 [ 180.377519][ T7528] upgrade_mmap_lock_carefully+0xbb/0x140 [ 180.377539][ T7528] lock_mm_and_find_vma+0x115/0x2e0 [ 180.377558][ T7528] exc_page_fault+0x169/0x620 [ 180.377573][ T7528] asm_exc_page_fault+0x22/0x30 [ 180.377592][ T7528] fault_in_readable+0x1c8/0x340 [ 180.377607][ T7528] fault_in_iov_iter_readable+0xdb/0x270 [ 180.377625][ T7528] generic_perform_write+0x207/0x5e0 [ 180.377641][ T7528] __generic_file_write_iter+0x176/0x400 [ 180.377660][ T7528] generic_file_write_iter+0xab/0x310 [ 180.377675][ T7528] vfs_write+0x857/0xbc0 [ 180.377690][ T7528] ksys_write+0x19c/0x2c0 [ 180.377704][ T7528] do_syscall_64+0x3b/0xb0 [ 180.377728][ T7528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.377753][ T7528] [ 180.377753][ T7528] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 180.377785][ T7528] validate_chain+0x1661/0x5950 [ 180.403572][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.406582][ T7528] __lock_acquire+0x125b/0x1f80 [ 180.406611][ T7528] lock_acquire+0x1f8/0x5a0 [ 180.406632][ T7528] down_write+0x36/0x60 [ 180.406648][ T7528] process_measurement+0x446/0x21b0 [ 180.419928][ T7530] loop4: detected capacity change from 0 to 40427 [ 180.424005][ T7528] ima_file_mmap+0x121/0x1c0 [ 180.424028][ T7528] __se_sys_remap_file_pages+0x67a/0x8b0 [ 180.424044][ T7528] do_syscall_64+0x3b/0xb0 [ 180.424065][ T7528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.429410][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.434592][ T7528] [ 180.434592][ T7528] other info that might help us debug this: [ 180.434592][ T7528] [ 180.434598][ T7528] Possible unsafe locking scenario: [ 180.434598][ T7528] [ 180.434602][ T7528] CPU0 CPU1 [ 180.434607][ T7528] ---- ---- [ 180.434612][ T7528] lock(&mm->mmap_lock); [ 180.434626][ T7528] lock(&sb->s_type->i_mutex_key [ 180.447238][ T7530] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 180.451973][ T7528] #12); [ 180.451989][ T7528] lock(&mm->mmap_lock); [ 180.452002][ T7528] lock(&sb->s_type->i_mutex_key#12); [ 180.452018][ T7528] [ 180.452018][ T7528] *** DEADLOCK *** [ 180.452018][ T7528] [ 180.452022][ T7528] 1 lock held by syz.5.1212/7528: [ 180.452032][ T7528] #0: [ 180.458265][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.464021][ T7528] ffff88807bd21f58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x207/0x8b0 [ 180.464068][ T7528] [ 180.464068][ T7528] stack backtrace: [ 180.464088][ T7528] CPU: 1 PID: 7528 Comm: syz.5.1212 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 180.464106][ T7528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 180.464120][ T7528] Call Trace: [ 180.464128][ T7528] [ 180.693186][ T7528] dump_stack_lvl+0x1e3/0x2cb [ 180.697869][ T7528] ? nf_tcp_handle_invalid+0x642/0x642 [ 180.703325][ T7528] ? print_circular_bug+0x12b/0x1a0 [ 180.708513][ T7528] check_noncircular+0x2fa/0x3b0 [ 180.713441][ T7528] ? add_chain_block+0x850/0x850 [ 180.718364][ T7528] ? lockdep_lock+0x11f/0x2a0 [ 180.723039][ T7528] ? _find_first_zero_bit+0xd0/0x100 [ 180.728318][ T7528] validate_chain+0x1661/0x5950 [ 180.733157][ T7528] ? reacquire_held_locks+0x660/0x660 [ 180.738532][ T7528] ? reacquire_held_locks+0x660/0x660 [ 180.743894][ T7528] ? look_up_lock_class+0x77/0x140 [ 180.749001][ T7528] ? register_lock_class+0x100/0x990 [ 180.754281][ T7528] ? ima_match_policy+0x104/0x2330 [ 180.759394][ T7528] ? __lock_acquire+0x1f80/0x1f80 [ 180.764415][ T7528] ? is_dynamic_key+0x260/0x260 [ 180.769282][ T7528] ? mark_lock+0x9a/0x340 [ 180.773611][ T7528] __lock_acquire+0x125b/0x1f80 [ 180.778477][ T7528] lock_acquire+0x1f8/0x5a0 [ 180.782998][ T7528] ? process_measurement+0x446/0x21b0 [ 180.788378][ T7528] ? read_lock_is_recursive+0x10/0x10 [ 180.793751][ T7528] ? ima_lsm_policy_change+0x620/0x620 [ 180.799292][ T7528] ? __might_sleep+0xb0/0xb0 [ 180.803871][ T7528] ? ima_get_action+0x71/0xa0 [ 180.808553][ T7528] down_write+0x36/0x60 [ 180.812697][ T7528] ? process_measurement+0x446/0x21b0 [ 180.818065][ T7528] process_measurement+0x446/0x21b0 [ 180.823266][ T7528] ? ima_file_mmap+0x1c0/0x1c0 [ 180.828020][ T7528] ? __lock_acquire+0x1f80/0x1f80 [ 180.833048][ T7528] ? aa_path_link+0xea0/0xea0 [ 180.837717][ T7528] ? mtree_load+0xc45/0xdf0 [ 180.842215][ T7528] ? aa_get_current_label+0x111/0x1d0 [ 180.847577][ T7528] ? apparmor_current_getsecid_subj+0xac/0x110 [ 180.853731][ T7528] ima_file_mmap+0x121/0x1c0 [ 180.858320][ T7528] ? ima_file_free+0x3c0/0x3c0 [ 180.863075][ T7528] ? bpf_lsm_mmap_file+0x5/0x10 [ 180.867913][ T7528] ? security_mmap_file+0x11a/0x170 [ 180.873105][ T7528] __se_sys_remap_file_pages+0x67a/0x8b0 [ 180.878730][ T7528] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 180.884440][ T7528] ? print_irqtrace_events+0x210/0x210 [ 180.889892][ T7528] ? print_irqtrace_events+0x210/0x210 [ 180.895346][ T7528] ? syscall_enter_from_user_mode+0x2e/0x230 [ 180.901315][ T7528] ? lockdep_hardirqs_on+0x94/0x130 [ 180.906501][ T7528] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 180.912218][ T7528] do_syscall_64+0x3b/0xb0 [ 180.916633][ T7528] ? clear_bhb_loop+0x45/0xa0 [ 180.921298][ T7528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.927186][ T7528] RIP: 0033:0x7f77ad985d29 [ 180.931600][ T7528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.951286][ T7528] RSP: 002b:00007f77ae76a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 180.959776][ T7528] RAX: ffffffffffffffda RBX: 00007f77adb75fa0 RCX: 00007f77ad985d29 [ 180.967738][ T7528] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00000000202ec000 [ 180.975700][ T7528] RBP: 00007f77ada01a20 R08: 0000000000000000 R09: 0000000000000000 [ 180.983743][ T7528] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 180.991698][ T7528] R13: 0000000000000000 R14: 00007f77adb75fa0 R15: 00007fff186469d8 [ 180.999665][ T7528] [ 181.004220][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 181.010248][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 181.014104][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.016730][ T4263] Bluetooth: hci3: command 0x0406 tx timeout [ 181.037036][ T7530] F2FS-fs (loop4): invalid crc value [ 181.047453][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.075439][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.082955][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.099728][ T7530] F2FS-fs (loop4): Found nat_bits in checkpoint [ 181.110509][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.138166][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.158918][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.180719][ T7530] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 181.217515][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.240356][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.258499][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.267956][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.275474][ T7515] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.283163][ T27] audit: type=1800 audit(1734472088.551:61): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1206" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 181.297447][ T7533] loop3: detected capacity change from 0 to 32768 [ 181.357810][ T4245] syz-executor: attempt to access beyond end of device [ 181.357810][ T4245] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.366922][ T7533] [ 181.366922][ T7533] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.366922][ T7533] [ 181.403551][ T4252] [ 181.403551][ T4252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.403551][ T4252] [ 181.417248][ T4252] [ 181.417248][ T4252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.417248][ T4252]