last executing test programs: 2m5.629721276s ago: executing program 3 (id=22293): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f00000005c0)=ANY=[@ANYBLOB='iocharset=cp1251,utf8,overriderockperm,nojoliet,nojoliet,overriderockperm,dmode=0x0000000000000003,dmode=0x0000000000000002,mode=0x0000000000000080,hide,block=0x0000000000000200,map=acorn,overriderockperm,check=relaxed,gid=', @ANYRESHEX=0x0, @ANYBLOB=',wid=', @ANYRESDEC, @ANYRES32], 0x5, 0xa51, &(0x7f0000001cc0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m5.412111799s ago: executing program 3 (id=22299): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x10, 0x40, 0x8, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xfd}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0) 2m5.205227851s ago: executing program 3 (id=22306): r0 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="c00000000018010400000000000000000a0000003c0001802c00018014"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a0001002abd70009595df250a000000000000000800"], 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 2m5.089348818s ago: executing program 3 (id=22309): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x8) 2m5.068169669s ago: executing program 3 (id=22311): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5ae, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0xf65e477cde8f6976) 2m4.296106054s ago: executing program 3 (id=22320): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001340)='./file0\x00', 0x2000082, &(0x7f0000000100)={[{@shortname_lower}, {@rodir}, {@fat=@nocase}, {@utf8no}, {@utf8no}, {@shortname_lower}, {@numtail}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@rodir}, {@rodir}, {@numtail}, {@rodir}, {@uni_xlateno}]}, 0x26, 0x367, &(0x7f0000000780)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x48100, 0x6) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2m4.107987885s ago: executing program 32 (id=22320): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001340)='./file0\x00', 0x2000082, &(0x7f0000000100)={[{@shortname_lower}, {@rodir}, {@fat=@nocase}, {@utf8no}, {@utf8no}, {@shortname_lower}, {@numtail}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@rodir}, {@rodir}, {@numtail}, {@rodir}, {@uni_xlateno}]}, 0x26, 0x367, &(0x7f0000000780)="$eJzs3T9onGUYAPDn+qW5S7Amg1B0Ot0EKU3EQaeEUqGYQSuH/xYPm/ondxZyeBCHXm5RipPiqJNbBx07i4OIm4OrFaQqLnYrNPjJ3X333X+bgBeU/n5DeHje9/ne5+5e+L6E5M3rrdi5dDIu3759K0qlQixsnNuIO4VYjRORRM9+TPXR4vQ8APAfdydN48+0596zP1nuR+79APD/1b3/v3lqkCgeofjaA/NoCQCYs0N+///81OyVubUFAMzRxP3/sZHhsR/zL+S/E9CzNP8GAYB/3YuvvPrc5lbExXK5FFH/sFlpVuKZwfjm5Xg7arEdZ2MlDiJ6Dwq9p4XO12cvbJ0/W+74dTUqnYpmJaLealZ6TwqbSbe+GGuxkl80zeuTTv1at74cEfut7vpRLzQrJ2M5W/+n5diO9ViJh7LSQX3Eha3z6+XsApV6v74V0Y5Sf71O/2diJX54I65ELS51Wxj0f3WtXD6Xbo3UN68Xu/P+wYk5fBwAAAAAAAAAAAAAAAAAAAAAANwnzpRzq/n5N2m91fzg4viE1ZHzcSq94ex8oHbvfKC02D+d51oyfj7Q6Pk8zcqCA3QAAAAAAAAAAAAAAAAAAAAg09hbjGqttr3b2Ht/ZzhoDWXe/e7Lb5aiP7SQlb6TDKoiS45cpz9x6MpJ5EukeXmajMzJgiSiP3m/ev1G3vHwnGL+KibKO0FxYqiQ9VSt1U49+stn06r+6gT73UwSE2/LaFDI1h8aqj/YSZQi4mBW1exg/R5zbqZpOmMoTUfa6ATZUQytI7dxiODbW289/GTj9FPdzNfZSo8/sfLSzU+/+H2nWot2752p1RZ3GwfpIa4chYg8k6ZZkAztn0L2AgtTdkI36G+RPNMeLNHebexVkx//ePmRj78fWz2Zvn/S4cx7s5v/ajyz2AsKEatj/UwNTk7Z/NOD1+7mu/foH9zpzzeqN67+/FuWmdgts97MCAd1AAAAAAAAAAAAAAAAAADA8Rj80e/YQJqmrZlVT78Qkcy9NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LoP//z8UtCcyhwnutmJyqLi92+isU5q2+NKxv1wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO5TfwcAAP//Is908w==") r0 = open(&(0x7f0000000140)='.\x00', 0x48100, 0x6) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 50.21331137s ago: executing program 2 (id=23228): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x30, r1, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) 50.115835956s ago: executing program 2 (id=23231): r0 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\xae\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8fC\x91W\xadi\x00\xf2k\xd5v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x1a\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\xf0V\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xf2\xb5K\x03\x85\x92k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r0, 0x409, 0x12) mmap(&(0x7f0000589000/0x1000)=nil, 0x1000, 0x200000a, 0x11, r0, 0x6c69e000) 50.04288021s ago: executing program 2 (id=23232): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)="5c00000012006bab9a3fe37ea60864160af36504001d0000001d001931a0e69ee517d344ac8f06000000a705251eff82949a3651f60a84c9f4d4938037e70e45c5bbfbffa8499c69dd752d0017675e403f1143e40967c4246eeb65bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000080) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/223, 0xdf}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x3}, 0x100) 49.789384005s ago: executing program 2 (id=23236): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000540), 0x2, 0x550, &(0x7f0000000900)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) 48.897377607s ago: executing program 2 (id=23250): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}, @in={0x2, 0x4e20, @private=0xa010100}], 0x3c) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 47.30537884s ago: executing program 2 (id=23270): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x46}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x40408d1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) 47.073014243s ago: executing program 33 (id=23270): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x46}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x40408d1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) 34.491718267s ago: executing program 6 (id=23273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x44, r1, 0x1, 0x0, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) 34.394992943s ago: executing program 6 (id=23408): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000001c0)=0x3) 33.800894768s ago: executing program 6 (id=23414): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000540), 0x2, 0x550, &(0x7f0000000900)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) 33.089059219s ago: executing program 6 (id=23424): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="2485e1", 0x3}], 0x1}, 0x10) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 31.19342956s ago: executing program 6 (id=23442): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2805, 0xd59f83, 0x19f2, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) 30.951797194s ago: executing program 34 (id=23442): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2805, 0xd59f83, 0x19f2, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) 4.859817727s ago: executing program 0 (id=23757): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0xa, 0x80, 0x140}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r0}, 0x38) 4.490860908s ago: executing program 0 (id=23768): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000001a00)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@errors_continue}, {@umask={'umask', 0x3d, 0x5}}, {@errors_remount}, {@namecase}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x8}}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {}]}, 0x1, 0x151e, &(0x7f0000007640)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x101) mount$nfs(&(0x7f00000001c0)='\xd1\xaey\x99\xb3\xd72\"/\xadN\x80\xf0\xc4Fj[\xfeC\xf4,\t[\x02\xca~\x06\x95\xea\x99\x1e\xb5\x8e\xe4\x82y-\xd9\xf1\x90\x91I\xb9\x00\xe3\xef\v\x14\xf2\xe0b+\t\'\xe4\xb6B CL\x94i\xfe\x99\x88\xbf\xbdeY\xe3S\xb1\x0e\xe4\xdf\x1dd\xdb\x9e\xc1\x1d\x938JQ\x94)\xa3\x80\xe0f\x8cW5\x18p\xd5\xce\xcc\xf7\x94\xc3\x8aO\xe4>\x96o\x9c-\xf6Cw\x84~\xe3zu\x9aP&Sel$<\xf1\xcbk40x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x9, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x4000010) 3.466874178s ago: executing program 4 (id=23765): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x94a, 0x8001, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 3.349617335s ago: executing program 0 (id=23766): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 3.243445251s ago: executing program 4 (id=23770): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x28, @string={0x28, 0x3, "9cf9b95062958b1822b39c200d439ca633b9aa582fc3dce12bc7257f316bd0a619fa08cf9c60"}}}, 0x0) 2.905142891s ago: executing program 7 (id=23773): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 2.720288992s ago: executing program 7 (id=23775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, 0x739f6eda87ff4aae}) 2.586811799s ago: executing program 7 (id=23777): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x43) 2.497925405s ago: executing program 0 (id=23778): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd25, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xfff3}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x5}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44845}, 0x4090) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 2.497257005s ago: executing program 7 (id=23779): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000240)=ANY=[], 0x8, 0x1cc, &(0x7f00000006c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) fstatfs(r0, 0x0) 2.280807147s ago: executing program 7 (id=23780): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000004c0)='./file0\x00', 0x1a00040, &(0x7f0000000a80)={[{@numtail}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@flush}, {@uni_xlateno}, {@rodir}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@utf8no}, {@utf8no}]}, 0x3, 0x35f, &(0x7f0000000bc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 2.155244734s ago: executing program 0 (id=23782): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000002640)={[{@usrquota}, {@coherency_full}, {@err_cont}, {@heartbeat_none}, {@err_cont}, {@nointr}, {@grpquota}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x200, 0x1000000000000001, 0x5, 0x42, 0x1, 0xfffffffffffffffd, 0x66c}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 1.72120419s ago: executing program 5 (id=23787): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x0, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0xed, 0x7, 0x0, 0x3f, 0xb763599953cb091d, {0x10000, 0x6fd8e84b}, 0x3, 0xed}}) 1.658117923s ago: executing program 5 (id=23788): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xbb8, 0x0, 0x5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x2}, 0x1, 0xfa, 0x2652, 0x8, 0x3, 'syz1\x00', "b567498481404ccb897d4cde103bd9d1178ae76f04c3565d612b3519d815b5b6", "d3c88c0b7dbf3b3557000b6635dc9523475494ea39e6dd66e2b91c4b3cdfd0ea", [{0x4, 0x8001, {0x3, 0x4}}, {0x2, 0x1, {0x0, 0x57ce}}, {0x5, 0x8, {0x0, 0x7fff}}, {0xc, 0x4, {0x3, 0xf15}}, {0x3, 0x9364, {0x2, 0x9}}, {0x8000, 0x1ff, {0x1, 0xfffffffe}}, {0x2, 0x35e, {0x2, 0x1}}, {0x100, 0x40, {0x3, 0x4}}, {0x0, 0x3, {0x1, 0x7}}, {0x2, 0x1, {0x1, 0x1}}, {0x80, 0x9, {0x2, 0x7f}}, {0x4, 0x3380, {0x3, 0x1}}, {0x0, 0x104c, {0x0, 0x7f}}, {0x0, 0xed}, {0x9, 0x8, {0x3, 0x1}}, {0xbdc1, 0xd, {0x1, 0x8000}}, {0x200, 0x2, {0x0, 0x5}}, {0x8, 0xfffb, {0x1, 0x5}}, {0x4, 0x7c5a, {0x0, 0x8}}, {0x7, 0x2, {0x0, 0x3eff}}, {0xffff, 0x2ade}, {0x1, 0x3, {0x1, 0x316e}}, {0xd, 0x3, {0x3, 0x7fffffff}}, {0x1, 0x0, {0x1, 0xc6}}, {0x8000, 0x5, {0x0, 0x400}}, {0xfff, 0x400, {0x2, 0xece2}}, {0xe85, 0x0, {0x3, 0x3}}, {0xc17, 0x4, {0x0, 0x5}}, {0x8, 0xca4, {0x0, 0x10000}}, {0x3, 0x6, {0x3, 0x5}}, {0x7, 0x4, {0x3, 0x7}}, {0x7fff, 0x1, {0x0, 0x8}}, {0x9, 0x1000, {0x1, 0x10000}}, {0x1, 0x5, {0x3, 0xfff}}, {0x2, 0x8, {0x0, 0x5d6e}}, {0x9, 0x3, {0x3, 0x1}}, {0x282, 0x5, {0x0, 0x4}}, {0x0, 0x0, {0x1, 0x3ff}}, {0xe8, 0xcc, {0x0, 0x3}}, {0x2, 0x8, {0x0, 0x101}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x5, 0x0, 0x81, 0x9, 0x23, 'syz1\x00', "40c138fcc28e0dc6945e4c681d46cfb6324e24a203c3a6b8d99197e231b10fa4", "e8f8738bb61262cdfde1b433388ac7b17a3becd44ae518168e4acca3bb144bfe", [{0x5, 0x82, {0x3, 0x6}}, {0x0, 0xf}, {0xff, 0x0, {0x2, 0x80000001}}, {0x8, 0x1ff, {0x1, 0x9}}, {0x3, 0x8, {0x2, 0x2}}, {0x1ff, 0x0, {0x0, 0x3}}, {0x0, 0xc, {0x3, 0x1}}, {0x2, 0x165, {0x1, 0x400}}, {0x7, 0x1, {0x3, 0x644b}}, {0x9, 0x1, {0x0, 0xfffffffc}}, {0x4, 0x7, {0x3, 0xffffff80}}, {0x2, 0x200, {0x1, 0x6}}, {0x1, 0x0, {0x1, 0x5}}, {0x709d, 0x0, {0x1, 0x3}}, {0x80a, 0x515, {0x1, 0x6}}, {0x6, 0xa, {0x1, 0x3}}, {0x1, 0xc7, {0x1, 0x8}}, {0x78, 0xf8, {0x1, 0x4}}, {0x81, 0x1000, {0x1, 0x10000}}, {0x5, 0x7f, {0x3, 0x4}}, {0x9d5, 0xc4, {0x3, 0xce}}, {0x4, 0x2, {0x0, 0x8a}}, {0xb, 0xd2b, {0x1, 0x8}}, {0xa882, 0x2, {0x0, 0x9}}, {0x7, 0x9, {0x0, 0x20400}}, {0x3, 0x100, {0x1, 0x4}}, {0x9, 0x1, {0x3, 0x5}}, {0x4, 0xa, {0x0, 0x7fff}}, {0x9, 0x4, {0x1}}, {0x8, 0x953, {0x1, 0x2}}, {0xda8, 0x4, {0x0, 0xfffffff6}}, {0xfcb, 0x479d, {0x3, 0x6}}, {0xf9b, 0x1, {0x0, 0x8}}, {0x8, 0x7, {0x0, 0xad4}}, {0x1, 0xffff, {0x2, 0x8}}, {0x3, 0xa, {0x3, 0x5}}, {0xffff, 0x7, {0x2, 0xa}}, {0x0, 0x4, {0x3, 0xffffffa8}}, {0x0, 0x5, {0x7de2eeedef162fb7, 0xf}}, {0x1, 0x3, {0x0, 0x330}}]}}}, {{0x254, 0x1, {{0x1, 0xb}, 0x7, 0x1, 0xe77, 0xc, 0xc, 'syz0\x00', "54d584c4aa66416451865d40ce22f274db636ba77c9342f6282bb61519796e6d", "c325ae2a46ddbe4a9b58e5158c52ce623d7103a4a946ed5d56748955d127698a", [{0x40, 0x4, {0x1, 0x7}}, {0x37d, 0x8000, {0x3, 0xfffffffa}}, {0x10, 0x6, {0x1, 0x4}}, {0x3ff, 0xf, {0x3, 0x2}}, {0x0, 0x1ff, {0x3, 0x4}}, {0x0, 0x9, {0x1, 0x3}}, {0x800, 0x40, {0x1, 0x6}}, {0xfff0, 0x4, {0x0, 0x7}}, {0x2, 0x8, {0x3, 0xec8}}, {0x6, 0x0, {0x1, 0x6cc05106}}, {0x5, 0x9, {0x3, 0x6}}, {0x3, 0x4, {0x3, 0x5}}, {0x7fff, 0x0, {0x3, 0x1}}, {0x6b, 0x0, {0x0, 0x1c}}, {0x7fff, 0xc167, {0x2, 0x7}}, {0x38d, 0x59a5, {0x3, 0x8}}, {0x16, 0x1, {0x1, 0x4}}, {0x5, 0x12, {0x2, 0x7}}, {0xc8, 0x0, {0x0, 0x401}}, {0x9d, 0x9, {0xb2d357f92eadfd44, 0xffffff80}}, {0xa, 0x9}, {0x4000, 0xf7}, {0x1, 0x75e, {0x2, 0x4}}, {0x7, 0x4, {0x2, 0xfffffff8}}, {0x38, 0x9, {0x3, 0x807}}, {0x1, 0x7, {0x0, 0x7}}, {0x3, 0xd3b6, {0x2, 0xfde}}, {0x7fff, 0x1, {0x3, 0x9}}, {0x3, 0x1000, {0x1, 0xfff}}, {0x8001, 0xd5, {0x1, 0x8}}, {0x6, 0x800, {0x0, 0x1}}, {0x2, 0x2, {0x2, 0x80000000}}, {0x2, 0x3, {0x1, 0xc5fd}}, {0x0, 0x0, {0x2, 0x5}}, {0x81, 0x200, {0x1, 0x1d9}}, {0x400, 0x9, {0x0, 0xb2}}, {0xfff, 0x7ff, {0x2}}, {0xbb70, 0x1, {0x63dd0548f7a48699, 0x4}}, {0x52ee, 0x6, {0x1, 0xf}}, {0x7fff, 0x6, {0x3, 0x2d}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x40, 0x6, 0x637b, 0x1, 0xa, 'syz1\x00', "23f959dd240854aff3f59d72607a9467b06cdcc0fa581d399b83266fbb43b962", "a322d3c59fbb33f1a8e04e757b465d12e0cb1a7e91ba7a4bbda8cffef542c728", [{0x7, 0x8, {0x1, 0xffffffff}}, {0xa65, 0x8, {0x3, 0x5}}, {0x9, 0x0, {0x0, 0x57b}}, {0x7, 0x2, {0x1}}, {0xfffd, 0x2, {0x0, 0x6}}, {0x7, 0xb, {0x1, 0x800}}, {0x1c0, 0x6, {0x3, 0x7}}, {0x9, 0x2, {0x3, 0x5}}, {0x80, 0x6, {0x0, 0x3}}, {0x1, 0x1}, {0x8b0, 0x8, {0x0, 0x5}}, {0xb1, 0x1000, {0x0, 0x7}}, {0x9, 0x5, {0x1, 0x4}}, {0x81, 0x3, {0x0, 0x7fff}}, {0x0, 0x6, {0x2, 0x101}}, {0x2, 0x8001, {0x2, 0x40}}, {0x7, 0x4, {0x1, 0x10000}}, {0x1, 0x0, {0x0, 0x3}}, {0x4, 0x5, {0x1, 0x4}}, {0x0, 0x1, {0x1, 0xdb9}}, {0x6a29, 0x5, {0x3, 0xdb1a}}, {0x7e65, 0xfffb, {0x2, 0x4}}, {0x1, 0x40, {0x1, 0x7ff}}, {0x9b, 0x27, {0x2, 0x400}}, {0x1ff, 0x10e, {0x3, 0x3}}, {0x3ff, 0x0, {0x1, 0x10000}}, {0x8, 0x2, {0x0, 0x5d}}, {0xff81, 0x639, {0x1, 0x29f}}, {0x7ff, 0x6, {0x1, 0x356}}, {0x3, 0x9, {0x2, 0x6}}, {0x5, 0x7, {0x2, 0x5}}, {0x5, 0x1, {0x1, 0x9}}, {0x0, 0x9, {0x3}}, {0xf06, 0x5718, {0x0, 0xfffffff9}}, {0x2, 0x9d1b, {0xff9b9104c456e144, 0x80000000}}, {0x2, 0x309, {0x3, 0x4}}, {0x5, 0x3, {0x3, 0x7d3f}}, {0x7, 0x6, {0x3, 0x2}}, {0x3ff, 0x5f6, {0x0, 0x5}}, {0x10, 0x7a5, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0xe}, 0x1, 0x3, 0x1, 0x2, 0x19, 'syz1\x00', "14869bf28a8b0d820009451fe68f4ead569d0142c65d7ad249c3c670d30d308f", "6e618abf40a91f0588738ea506b4132189321acedfd69b8fa5d1e69cd3ec0255", [{0x2, 0x0, {0x1, 0x8}}, {0x6, 0x4, {0x0, 0x80000000}}, {0x4, 0x9, {0x3}}, {0x6, 0x0, {0x2, 0x6}}, {0x25b, 0x6, {0x3, 0x4}}, {0x4, 0x1ec, {0x2, 0x4}}, {0x5, 0x8, {0x0, 0x4}}, {0x8001, 0xff, {0x0, 0x1}}, {0xc, 0x2, {0x0, 0xc}}, {0x6, 0x400, {0x2, 0x1}}, {0x1, 0x20, {0x0, 0x2}}, {0xed, 0xfffc, {0x3, 0x8}}, {0x8, 0x1, {0x2, 0xd}}, {0x3, 0xdf07, {0x0, 0x7fff}}, {0xa550, 0x4, {0x3, 0x71}}, {0x1, 0x79fb, {0x0, 0x1}}, {0xe726, 0x3, {0x3}}, {0x200, 0x1ff, {0x2, 0x400}}, {0x3734, 0x3, {0x3, 0x7}}, {0x0, 0x9, {0x2, 0xffffffff}}, {0x53a5, 0x938e, {0x2, 0x1}}, {0x53, 0x4, {0x2, 0x7ff}}, {0x6, 0x6, {0x0, 0x8}}, {0xd, 0x5, {0x2, 0x37b}}, {0x4, 0xd, {0x3, 0x8}}, {0x1000, 0x193, {0x2, 0xf94}}, {0x694, 0x1ff, {0x0, 0x7}}, {0x9, 0x7, {0x0, 0x800}}, {0xa1, 0x1, {0x2, 0xa}}, {0x7f, 0x40, {0x3, 0x295f}}, {0xff, 0x202a, {0x2, 0xffffffff}}, {0xbcfe, 0xcaf9, {0x2, 0xd3a}}, {0x100, 0x0, {0x3, 0x6}}, {0x694, 0x3, {0x0, 0xf}}, {0xf2, 0x8, {0x2, 0x9}}, {0x787e, 0x1, {0x0, 0xee3}}, {0xff, 0x4, {0x2, 0x101}}, {0x1c00, 0x9, {0x0, 0x2}}, {0x4, 0x1, {0x1, 0x40000}}, {0xfffe, 0x2, {0x6, 0xd3}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x8080}, 0x4) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x214440, &(0x7f0000000d80)=ANY=[], 0x23, 0x7e2, &(0x7f0000001000)="$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") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='udf\x00', 0x1000040, 0x0) 1.54144355s ago: executing program 7 (id=23789): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1, 0x443b, &(0x7f0000009e40)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x12080, 0x65) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.02730018s ago: executing program 5 (id=23795): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x210052, &(0x7f0000000980)={[{@fat=@debug}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@dots}, {@fat=@errors_remount}, {@dots}, {@dots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@fat=@tz_utc}, {@nodots}, {@fat=@discard}, {@dots}]}, 0x1, 0x1b8, &(0x7f0000000340)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 955.874725ms ago: executing program 1 (id=23796): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) 803.507854ms ago: executing program 5 (id=23797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) 764.074355ms ago: executing program 1 (id=23798): r0 = socket$alg(0x26, 0x5, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r1, 0x0, 0x1800, 0x8) 594.982315ms ago: executing program 5 (id=23799): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x68f, &(0x7f0000000280)="$eJzs3c1vFOcdB/DvLGubpQk4BAhUkUBBaquigI1FWvcSWlUVh6iK0kPPFhiwWAg1TuVEVUvfrznwB6QHbj1UlXpHTS+9tLdcfYxUtZdc4p62mtnZ9frdBuK1088Hzc4z87z/dl72BWsD/N+6diHNJyly7cJbi+X20uOp9tLjqbu9dJKxJI2k2V2l+LzT6XycXE13yZlyZ91csbr1+8d6qUdz0+988tnSp92tZr1U5Rvr6+3Ww3rJuSSH6vXzau/6du0d3q65oj/DMmDne4GDYRtJ0qn8+1F3z0/+/kI/Z0Bro9rbHvnAAVB075vrjCdH6hO9fB3QvSt279kH2sNhDwAAAAD2wLHlLGcxR4c9DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhI6t//L+ql0UufS9H7/f/Rel/q9P5ydnfFn3xR4wAAAAAAAACAPXR2OaNZzNHedqeovvN/rdo4UT1+Je/lQWYzn4tZzEwWspD5TCYZH2hodHFmYWF+sl+z9z8D1te8vGHNy9sMdKxet57HrAEAAAAAAADgoPm80+lsWeBXubby/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOwHRXKou6qWE730eBrNJIeTjJblHib/7KUPqjOvJ0+GPQgAAAB4Bp0dlju2nOUs5mi/XlG95z9Vve8/nPdyLwuZy0Lamc2N6rOA7rv+xtLjqfbS46m75bK+3e/+Z1fDrVpM97OHjXs+XZVo5Wbmqj0Xcz3vpihupFHVLJ3ujWfjcf2yHFPxZtfIDkd2o16XM/+wXq/V3NVcN7XLD1PGq4iM9CMyUY+tjMZLW0dim2dnbJueJtPoD/bEmp7WTGJVzN/c4cyO1OtyPr/bJObDsTYSlweOvlNbxzz5+l/++OPb7Xt3bt98cGH/TGlnDtXr7nWltT4SUwOReGXDSDRWWjvIkVhnoprbyf72tfwgP8qFnMvbmc9cfpqZLGQ25/L9KjVTH8/FwCk/EKmBMOXqqo7e3m4ko/UR2n2yVo8p24zptaru0czlh3k3NzKbN6p/lzOZb+VKrmR64Bk+uYMrbWOTs77z4oaDP/+NOtFK8vt6Xbn1nK6vT62M60sDcR285o5XeYN7VqJ0fBf3o16U/rT1UJpfrRNlH79efVYN2dpITA5E4uWtI/GH6rLyoH3vzvztmfs76+74h3WiPI9+u6/uEuXxcrz/umD10VHmvVznjVTLSrxG629cuvUa6/JO9vO6Z+rDTc/UsvSp/mmz+o5V5r2yYS9TVd7pgby1r7fa/ddDB/3LH4AvtSPfPDLa+lfrH62PWr9p3W69dfh7Y98ee3U0I38b+U5z4tDXGq8Wf85H+fnK+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODpPXj/gzsz7fbs/JpEp9P5xSZZBznR+zmzPez0zAvJU1d/8dl6H02yPyL/306nU+8p9sN4tk50SmPpPGX1vybZWeFmko2yzg4/CFtcNPwAFHwpXFq4e//Sg/c/eH3u7syt2Vuz96avXJmemL7yxtSlm3Pt2Ynu47BHCXwRVm76wx4JAAAAAAAAAAAAsFN78ecEm/d+eC+nCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxQ1y6k+SRFJicuTpTbS4+n2uXSS6+UbCZpJCl+lhQfJ1fTXTI+0FyxWT+P5qbf+eSzpU9X2mr2yje2qrczD+sl55IcqtfPq73rz9xe0Z9hGbDzvcDBsP0vAAD//2qtCRA=") unlink(&(0x7f0000000080)='./file1\x00') setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 481.054682ms ago: executing program 4 (id=23800): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000004c0)='./file0\x00', 0x1a00040, &(0x7f0000000a80)={[{@numtail}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@flush}, {@uni_xlateno}, {@rodir}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@utf8no}, {@utf8no}]}, 0x3, 0x35f, &(0x7f0000000bc0)="$eJzs3T+IHFUYAPBvM3u3l0C8K4SgIIx2gh5JxEKrC+ECwW1UFv9UruaicnsGbnExKbI5G7EULLWys9DCIrUIithZ2BpBomKh6QIGn+zO7O3s3V5yBjYx+PsVy5f33jfve2G4GeZm372yEutn5uLstWtXY2GhFvWVkytxvRZLkcXIpdhtfkobAHBvuJ5SPVJhnym1GZcEAMzY9ZTiz9cPV1re/fpm45OrPwDc84bX/5QO3mzMwl4d52ZSEgAwY+X1f/z8/5GJ7vnJX/XXK28FAAD3qudfevmZE82I5/J8IWLjvV6r14qnx/0nzsab0Ym1OBqLcSOKVwWGn7Xh56nTzdWjeZ7345elaA0yeq2IjX6vVdwpnMiG+Y04FouxFKNXDYZ3Gyml7NQXzdVj+VBEXOoP54+NWq81F4fK+X88FGtxPPK4f1d+xOnm6vG8PEBrY5Tfj9gaP7cY1L8ci/H9a3EuOnEmBrmj25rm6sVjeX4yNSfye63GcFxhzycgAAAAAAAAAAAAAAAAAAAAAABwW5bzbUvb+9+k8f49y8tT+of74xT55f5AW8X+QKmRIqU/3nm89X4WE/sD7dyfp9eqx4G7u3QAAAAAAAAAAAAAAAAAAAD4z+ien492p7O22T1/Yb0a9De75w9ExKDlrW8/++pg7B5zi6BezlHpysumC+vtlI0Gp2xiTBlkg8lHLZ9e3q64OqaxvYqpZTT27up0Dj/880fjloey0ZH/Ho/JYvoCsx1lVION+4qS/s1/1HZw/BZjrqRUKw5/aaLr1Wz6pFGLqO8ode52CqsGaRB8c/WNB57oHnly2PJlKjz62OILVz785Lf1difKOjud+c3ujbTeLv89/WTbO8gq508tiqBWPRPqE1lRzlu2bE0esJ398PuLD37w3f5mT9WWt6eMyYrlfL6za74IBpXs6Do4ba65KSf/DIIjH6+0L1/86df9ZlV+SNioAwAAAAAAAAAAAAAAAAAA7ojKd8VL5Zd9526W9dSzs68MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO6c8d//rwRbu1r2E/zVj91djbXNbsT83V4mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//3KvYzE=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 480.214752ms ago: executing program 1 (id=23810): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000880)={[{@uid}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {}, {@part={'part', 0x3d, 0x4}}, {@file_umask={'file_umask', 0x3d, 0xd}}, {@uid}, {@part={'part', 0x3d, 0x5}}, {@creator={'creator', 0x3d, "8c10b081"}}]}, 0x2, 0x36b, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 247.659356ms ago: executing program 4 (id=23801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000060900010073797a30000000003c000000090a010400000000000000000700000308000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000003800038034000080040001802c0007800b00010074617267657400001c000280080002400000000a040003000900010053"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) 225.841197ms ago: executing program 1 (id=23802): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000000)="c109000000000000001d1e020e71", 0xe}, {&(0x7f0000000500)='9&', 0x2}], 0x2}, 0x20040000) 135.177312ms ago: executing program 5 (id=23803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r1, r0}, 0xc) 27.341198ms ago: executing program 1 (id=23804): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40) 0s ago: executing program 1 (id=23805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x20}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xe}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) kernel console output (not intermixed with test programs): netlink: 8 bytes leftover after parsing attributes in process `syz.2.22588'. [ 1270.199876][ T4244] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1270.507995][T20192] loop0: detected capacity change from 0 to 64 [ 1270.594294][ T4244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1270.620798][ T4244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.641686][ T4244] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 1270.674099][ T4244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.685306][T20202] loop1: detected capacity change from 0 to 2048 [ 1270.706141][ T4244] usb 6-1: config 0 descriptor?? [ 1270.750276][T20202] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1270.905318][T20202] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000080000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814,. Quota mode: writeback. [ 1271.015858][T20202] EXT4-fs error (device loop1): empty_inline_dir:1873: inode #12: block 5: comm syz.1.22614: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 1271.070853][T20202] EXT4-fs (loop1): Remounting filesystem read-only [ 1271.078655][T20202] EXT4-fs warning (device loop1): empty_inline_dir:1880: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 1271.266743][ T4244] wacom 0003:056A:00ED.0010: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.5-1/input0 [ 1271.472940][T20232] netlink: 100 bytes leftover after parsing attributes in process `syz.4.22613'. [ 1271.494757][ T1325] usb 6-1: USB disconnect, device number 3 [ 1271.541111][T20225] loop1: detected capacity change from 0 to 4096 [ 1271.596775][T20230] fido_id[20230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1271.637290][T20225] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1271.674248][T20225] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1271.726685][ T4342] udevd[4342]: incorrect nilfs2 checksum on /dev/loop1 [ 1271.787601][T20238] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1271.848815][T20243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22617'. [ 1272.034027][T20207] loop2: detected capacity change from 0 to 32768 [ 1272.124201][T20253] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22620'. [ 1272.138110][ C1] vkms_vblank_simulate: vblank timer overrun [ 1272.151456][T20256] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1536) ! [ 1272.198245][T20207] JBD2: Ignoring recovery information on journal [ 1272.341873][T20262] netlink: 104 bytes leftover after parsing attributes in process `syz.1.22623'. [ 1272.447446][T20207] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 1272.602963][T20276] tipc: Started in network mode [ 1272.624409][T20276] tipc: Node identity aaaaaaaaaa3, cluster identity 2048 [ 1272.635659][ T9400] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1272.667506][T20276] tipc: Enabled bearer , priority 10 [ 1272.704881][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 1272.718664][T20280] loop0: detected capacity change from 0 to 256 [ 1272.925619][T20280] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x10e00a98, utbl_chksum : 0xe619d30d) [ 1272.978164][ T1325] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1273.031424][ T9400] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1273.049045][ T9400] usb 6-1: config 0 has no interface number 0 [ 1273.055577][ T9400] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.092811][ T9400] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.146042][ T9400] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1273.164798][ T9400] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.182095][ T9400] usb 6-1: config 0 descriptor?? [ 1273.221410][T20286] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1273.398292][ T1325] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1273.416696][ T1325] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0xB has invalid wMaxPacketSize 0 [ 1273.470124][ T1325] usb 2-1: config 0 interface 0 altsetting 10 bulk endpoint 0xB has invalid maxpacket 0 [ 1273.480062][ T1325] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1273.694437][ T1325] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 1273.703743][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.716693][ T9400] uclogic 0003:256C:006D.0011: unknown main item tag 0x0 [ 1273.726064][ T1325] usb 2-1: Product: syz [ 1273.730302][ T1325] usb 2-1: Manufacturer: syz [ 1273.734922][ T1325] usb 2-1: SerialNumber: syz [ 1273.736169][ T9400] uclogic 0003:256C:006D.0011: unknown main item tag 0x0 [ 1273.758186][ T9400] uclogic 0003:256C:006D.0011: unknown main item tag 0x0 [ 1273.767993][ T1325] usb 2-1: config 0 descriptor?? [ 1273.775559][ T5464] tipc: Node number set to 10136234 [ 1273.777280][ T9400] uclogic 0003:256C:006D.0011: unknown main item tag 0x0 [ 1273.800534][ T9400] uclogic 0003:256C:006D.0011: unknown main item tag 0x0 [ 1273.810208][ T9400] uclogic 0003:256C:006D.0011: No inputs registered, leaving [ 1273.824268][ T1325] ir_toy 2-1:0.0: required endpoints not found [ 1273.831330][ T5473] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1273.836350][ T9400] uclogic 0003:256C:006D.0011: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.5-1/input1 [ 1273.954442][ T9400] usb 6-1: USB disconnect, device number 4 [ 1273.994092][ T9401] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1274.271303][ T9401] usb 1-1: Using ep0 maxpacket: 16 [ 1274.295016][ T5473] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.330242][ T5473] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1274.459055][ T5473] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1274.479443][ T5473] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1274.495888][ T5473] usb 3-1: SerialNumber: syz [ 1274.570890][ T9401] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1274.580334][ T9401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.624213][ T9401] usb 1-1: Product: syz [ 1274.628738][ T9401] usb 1-1: Manufacturer: syz [ 1274.633754][ T9401] usb 1-1: SerialNumber: syz [ 1274.666088][ T9401] usb 1-1: config 0 descriptor?? [ 1274.743599][ T9401] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1274.830284][ T5473] usb 3-1: 0:2 : does not exist [ 1274.879658][ T5473] usb 3-1: USB disconnect, device number 42 [ 1274.886235][T20337] set_capacity_and_notify: 1 callbacks suppressed [ 1274.886252][T20337] loop5: detected capacity change from 0 to 64 [ 1275.169974][ T4342] udevd[4342]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1275.202539][ T26] audit: type=1326 audit(1213.372:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20343 comm="syz.5.22656" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec1ac6aeb9 code=0x0 [ 1275.447657][ T9401] ssu100: probe of 1-1:0.0 failed with error -71 [ 1275.473776][ T9401] usb 1-1: USB disconnect, device number 37 [ 1275.683308][T20359] loop2: detected capacity change from 0 to 1024 [ 1276.209847][ T9401] usb 2-1: USB disconnect, device number 28 [ 1276.879988][ T1325] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1276.919583][T20408] netlink: 108 bytes leftover after parsing attributes in process `syz.4.22674'. [ 1276.955441][T20408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.22674'. [ 1277.092268][T20375] loop5: detected capacity change from 0 to 32768 [ 1277.169095][ T1325] usb 1-1: Using ep0 maxpacket: 16 [ 1277.230071][T20375] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1277.295990][T19416] ocfs2: Unmounting device (7,5) on (node local) [ 1277.307538][ T4890] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1277.339666][ T1325] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1277.347937][ T1325] usb 1-1: config 0 has no interface number 0 [ 1277.542881][ T1325] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1277.564117][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.572699][ T1325] usb 1-1: Product: syz [ 1277.586353][ T4890] usb 3-1: Using ep0 maxpacket: 32 [ 1277.596338][ T1325] usb 1-1: Manufacturer: syz [ 1277.602945][ T1325] usb 1-1: SerialNumber: syz [ 1277.624124][ T1325] usb 1-1: config 0 descriptor?? [ 1277.673310][ T1325] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1277.724922][ T4890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.767124][ T4890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.831462][ T4890] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1277.865630][ T4890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.910356][ T4890] usb 3-1: config 0 descriptor?? [ 1278.042998][T20457] [U] ÿÿ [ 1278.152638][ T5464] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1278.389799][ T1325] gspca_spca1528: reg_w err -71 [ 1278.419570][ T1325] spca1528: probe of 1-1:0.1 failed with error -71 [ 1278.429930][ T5464] usb 5-1: Using ep0 maxpacket: 16 [ 1278.449344][ T1325] usb 1-1: USB disconnect, device number 38 [ 1278.480276][ T4890] savu 0003:1E7D:2D5A.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1278.569350][ T5464] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1278.576065][ T5464] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 1278.628771][ T5464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.668890][ T5464] usb 5-1: config 0 descriptor?? [ 1278.696607][ T4890] usb 3-1: USB disconnect, device number 43 [ 1278.843472][T20464] loop1: detected capacity change from 0 to 32768 [ 1278.909625][T20464] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1278.992305][T20468] loop5: detected capacity change from 0 to 32768 [ 1279.025119][ T4195] ocfs2: Unmounting device (7,1) on (node local) [ 1279.058818][T20468] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.22695 (20468) [ 1279.102535][ C0] vkms_vblank_simulate: vblank timer overrun [ 1279.178472][T20468] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1279.198318][T20468] BTRFS info (device loop5): using free space tree [ 1279.208551][T20468] BTRFS info (device loop5): has skinny extents [ 1279.218339][ T5464] sony 0003:1345:3008.0013: item fetching failed at offset 2/5 [ 1279.244794][ T5464] sony 0003:1345:3008.0013: parse failed [ 1279.250517][ T5464] sony: probe of 0003:1345:3008.0013 failed with error -22 [ 1279.450782][ T1325] usb 5-1: USB disconnect, device number 24 [ 1279.547351][T20468] BTRFS info (device loop5): enabling ssd optimizations [ 1279.881473][ T4342] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (4342) [ 1280.682923][ C0] vkms_vblank_simulate: vblank timer overrun [ 1281.119726][T20535] loop2: detected capacity change from 0 to 32768 [ 1281.278561][T20535] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1281.320100][T20585] loop1: detected capacity change from 0 to 4096 [ 1281.388975][T20585] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 1281.432102][T20535] (syz.2.22704,20535,0):ocfs2_verify_group_and_input:425 ERROR: the add group should be in chain 1 [ 1281.445750][T20535] (syz.2.22704,20535,0):ocfs2_group_add:503 ERROR: status = -22 [ 1281.582500][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 1281.608601][T20600] netlink: 'syz.5.22727': attribute type 6 has an invalid length. [ 1281.682643][T20602] netlink: 'syz.5.22727': attribute type 6 has an invalid length. [ 1281.969306][ T9401] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1282.236104][ T9401] usb 5-1: Using ep0 maxpacket: 8 [ 1282.252080][T20606] loop1: detected capacity change from 0 to 32768 [ 1282.309870][T20606] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1282.321789][T20606] BTRFS info (device loop1): using free space tree [ 1282.332910][T20606] BTRFS info (device loop1): has skinny extents [ 1282.407094][ T9401] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1282.489257][T20606] BTRFS info (device loop1): enabling ssd optimizations [ 1282.503415][ T9401] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 1282.514211][ T9401] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.539325][T20612] loop5: detected capacity change from 0 to 32768 [ 1282.574396][ T9401] usb 5-1: config 4 has no interface number 0 [ 1282.646135][T20612] JFS: metapage_get_blocks failed [ 1282.686444][T20612] ERROR: (device loop5): release_metapage: write_one_page() failed [ 1282.686444][T20612] [ 1282.718168][T20612] ERROR: (device loop5): remounting filesystem as read-only [ 1282.740282][ C0] vkms_vblank_simulate: vblank timer overrun [ 1282.771616][T20639] attempt to access beyond end of device [ 1282.771616][T20639] loop5: rw=0, want=2621800, limit=32768 [ 1282.856303][ T9401] usb 5-1: string descriptor 0 read error: -22 [ 1282.862599][ T9401] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1282.909277][ T9401] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.997587][ T9401] usb 5-1: Found UVC 0.02 device (04f2:b746) [ 1283.004739][ T9401] usb 5-1: No streaming interface found for terminal 6. [ 1283.284993][ T9401] usb 5-1: USB disconnect, device number 25 [ 1283.358630][ C0] vkms_vblank_simulate: vblank timer overrun [ 1283.465950][ C0] vkms_vblank_simulate: vblank timer overrun [ 1283.518647][ C0] vkms_vblank_simulate: vblank timer overrun [ 1283.535049][T20642] loop0: detected capacity change from 0 to 32768 [ 1283.625786][ T277] blkno = 5002c, nblocks = 1 [ 1283.634171][ T277] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 1283.634171][ T277] [ 1283.695850][ T277] blkno = 5002d, nblocks = 1 [ 1283.701297][ T277] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 1283.701297][ T277] [ 1283.795944][T20659] sp0: Synchronizing with TNC [ 1283.830861][T20656] [U] è [ 1283.945340][T20661] loop0: detected capacity change from 0 to 4096 [ 1284.010923][T19416] JFS: metapage_get_blocks failed [ 1284.044171][T20668] netlink: 72 bytes leftover after parsing attributes in process `syz.4.22752'. [ 1284.068935][T20661] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 1284.281147][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22754'. [ 1284.409838][ C0] vkms_vblank_simulate: vblank timer overrun [ 1284.915493][T20672] loop1: detected capacity change from 0 to 32768 [ 1284.977588][T20672] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1285.079858][T20672] (syz.1.22753,20672,0):ocfs2_verify_group_and_input:425 ERROR: the add group should be in chain 1 [ 1285.133753][T20672] (syz.1.22753,20672,0):ocfs2_group_add:503 ERROR: status = -22 [ 1285.144111][T20703] loop2: detected capacity change from 0 to 256 [ 1285.263827][ T4195] ocfs2: Unmounting device (7,1) on (node local) [ 1285.273655][T20703] FAT-fs (loop2): Directory bread(block 64) failed [ 1285.280555][T20703] FAT-fs (loop2): Directory bread(block 65) failed [ 1285.319920][ C0] vkms_vblank_simulate: vblank timer overrun [ 1285.337936][T20703] FAT-fs (loop2): Directory bread(block 66) failed [ 1285.344841][T20703] FAT-fs (loop2): Directory bread(block 67) failed [ 1285.363013][T20703] FAT-fs (loop2): Directory bread(block 68) failed [ 1285.389692][ T9269] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1285.411841][ C0] vkms_vblank_simulate: vblank timer overrun [ 1285.432615][T20703] FAT-fs (loop2): Directory bread(block 69) failed [ 1285.439437][T20703] FAT-fs (loop2): Directory bread(block 70) failed [ 1285.481966][T20703] FAT-fs (loop2): Directory bread(block 71) failed [ 1285.507357][T20703] FAT-fs (loop2): Directory bread(block 72) failed [ 1285.518048][T20703] FAT-fs (loop2): Directory bread(block 73) failed [ 1285.664232][ T9269] usb 6-1: Using ep0 maxpacket: 8 [ 1285.717371][T20695] loop0: detected capacity change from 0 to 32768 [ 1285.782365][ C0] vkms_vblank_simulate: vblank timer overrun [ 1285.796398][ T9269] usb 6-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 1285.833683][ T9269] usb 6-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 1285.855180][ T9269] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1285.861938][ T9269] usb 6-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 1285.871434][ T9269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.881799][ T9269] usb 6-1: config 0 descriptor?? [ 1285.911626][T20695] XFS (loop0): Mounting V5 Filesystem [ 1285.972344][T20695] XFS (loop0): Ending clean mount [ 1285.980099][T20695] XFS (loop0): Quotacheck needed: Please wait. [ 1286.079413][T20695] XFS (loop0): Quotacheck: Done. [ 1286.324743][ T4185] XFS (loop0): Unmounting Filesystem [ 1286.402321][ T9269] wacom 0003:056A:010E.0014: unknown main item tag 0x0 [ 1286.440998][ T9269] wacom 0003:056A:010E.0014: unknown main item tag 0x0 [ 1286.449189][ T9269] wacom 0003:056A:010E.0014: unknown main item tag 0x0 [ 1286.470914][ T9269] wacom 0003:056A:010E.0014: unknown main item tag 0x0 [ 1286.489023][ T9269] wacom 0003:056A:010E.0014: unknown main item tag 0x0 [ 1286.507283][ T9269] wacom 0003:056A:010E.0014: unknown main item tag 0x0 [ 1286.525609][ T9269] wacom 0003:056A:010E.0014: unknown main item tag 0x0 [ 1286.564437][ T9269] wacom 0003:056A:010E.0014: hidraw0: USB HID v11.d8 Device [HID 056a:010e] on usb-dummy_hcd.5-1/input0 [ 1286.618987][ T9269] usb 6-1: USB disconnect, device number 5 [ 1286.814909][T20732] loop2: detected capacity change from 0 to 4096 [ 1286.862488][T20733] fido_id[20733]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1287.014111][T20732] ntfs: volume version 3.1. [ 1287.289878][T20746] loop0: detected capacity change from 0 to 512 [ 1287.385913][T20746] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1287.454465][T20746] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.22771: bad orphan inode 131083 [ 1287.477139][T20746] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 1287.672303][T20735] loop1: detected capacity change from 0 to 32768 [ 1287.804468][T20758] loop5: detected capacity change from 0 to 1024 [ 1287.988372][T20770] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1288.206761][T20774] loop0: detected capacity change from 0 to 1024 [ 1288.304572][T20775] loop5: detected capacity change from 0 to 4096 [ 1288.327296][T20781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22798'. [ 1288.343915][T20774] hfsplus: bad catalog entry type [ 1288.382430][T20783] program syz.4.22799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1288.395032][T20775] ntfs: (device loop5): parse_options(): Unrecognized mount option GËÛ¨_sys_files. [ 1288.455395][ T154] hfsplus: b-tree write err: -5, ino 4 [ 1288.878263][T20801] loop2: detected capacity change from 0 to 64 [ 1288.918352][T20803] loop5: detected capacity change from 0 to 512 [ 1288.944980][T20803] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1288.980000][T20803] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.22805: bad orphan inode 131083 [ 1289.001819][T20803] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 1289.562928][T20821] program syz.2.22814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1289.576063][T20798] loop0: detected capacity change from 0 to 40427 [ 1289.625498][T20798] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 1289.642176][T20798] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 1289.692121][T20798] F2FS-fs (loop0): invalid crc value [ 1289.715853][T20798] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1289.862820][T20798] F2FS-fs (loop0): Start checkpoint disabled! [ 1289.917877][T20798] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1290.266464][T20849] smc: net device ip6_vti0 applied user defined pnetid SYZ1 [ 1290.292005][T20848] loop1: detected capacity change from 0 to 4096 [ 1290.393543][T20848] ntfs: volume version 3.1. [ 1290.629421][T20857] program syz.5.22829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1290.776605][ T4271] hfsplus: b-tree write err: -5, ino 4 [ 1290.895743][T20867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22836'. [ 1290.937974][T20867] netlink: 212 bytes leftover after parsing attributes in process `syz.0.22836'. [ 1290.974768][T20867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22836'. [ 1290.991566][ T9269] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1291.066759][T20865] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1291.123470][T20865] REISERFS (device loop1): using ordered data mode [ 1291.130058][T20865] reiserfs: using flush barriers [ 1291.185916][T20865] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1291.203336][T20865] REISERFS (device loop1): checking transaction log (loop1) [ 1291.225237][T20865] REISERFS (device loop1): Using r5 hash to sort names [ 1291.243550][T20865] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1291.255054][T20879] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1291.376714][ T9269] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1291.384974][ T9269] usb 5-1: config 0 has no interface number 0 [ 1291.590444][ T9269] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1291.610702][ T9269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.662404][ T9269] usb 5-1: Product: syz [ 1291.677199][ T9269] usb 5-1: Manufacturer: syz [ 1291.681876][ T9269] usb 5-1: SerialNumber: syz [ 1291.730160][ T9269] usb 5-1: config 0 descriptor?? [ 1291.927728][T20875] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 1291.945951][T20875] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff [ 1291.962098][T20875] F2FS-fs (loop5): invalid crc value [ 1291.991068][T20875] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1292.082751][T20895] ntfs: volume version 3.1. [ 1292.156837][ T9269] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 1292.163858][ T9269] usb 5-1: No valid video chain found. [ 1292.220539][ T9269] usb 5-1: USB disconnect, device number 26 [ 1292.238331][T20875] F2FS-fs (loop5): Start checkpoint disabled! [ 1292.255556][T20875] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1292.326625][ T4271] hfsplus: b-tree write err: -5, ino 4 [ 1293.192659][T20904] set_capacity_and_notify: 5 callbacks suppressed [ 1293.192677][T20904] loop2: detected capacity change from 0 to 40427 [ 1293.257818][ T9269] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1293.280403][T20904] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1293.288636][T20904] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1293.306851][T20928] loop5: detected capacity change from 0 to 8192 [ 1293.363053][T20928] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1293.415772][T20928] REISERFS (device loop5): using ordered data mode [ 1293.453595][T20904] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1293.461574][T20928] reiserfs: using flush barriers [ 1293.514364][ T9269] usb 1-1: Using ep0 maxpacket: 32 [ 1293.514434][T20928] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1293.554638][T20904] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1293.573048][T20904] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1293.596169][T20928] REISERFS (device loop5): checking transaction log (loop5) [ 1293.643011][ T9269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.655647][T20928] REISERFS (device loop5): Using r5 hash to sort names [ 1293.663072][T20928] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1293.672758][ T9269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.705227][ T9269] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1293.746730][ T9269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.782222][ T9269] usb 1-1: config 0 descriptor?? [ 1294.100125][T20936] loop1: detected capacity change from 0 to 32768 [ 1294.299500][ T9269] hid-u2fzero 0003:10C4:8ACF.0015: unknown main item tag 0x1 [ 1294.327184][ T9269] hid-u2fzero 0003:10C4:8ACF.0015: item fetching failed at offset 3/5 [ 1294.338215][ T9269] hid-u2fzero: probe of 0003:10C4:8ACF.0015 failed with error -22 [ 1294.463749][T20955] loop1: detected capacity change from 0 to 1024 [ 1294.520686][ T9269] usb 1-1: USB disconnect, device number 39 [ 1295.239693][T20982] loop0: detected capacity change from 0 to 256 [ 1295.449510][ T9269] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1295.553107][T20970] loop5: detected capacity change from 0 to 32768 [ 1295.670759][T20970] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1295.706095][ T9269] usb 3-1: Using ep0 maxpacket: 16 [ 1295.750960][T20970] (syz.5.22883,20970,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 1295.802853][T19416] ocfs2: Unmounting device (7,5) on (node local) [ 1295.834691][ T9269] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.863178][ T9269] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1295.881415][T20969] loop1: detected capacity change from 0 to 40427 [ 1295.909841][ T9269] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 1295.919136][ T9269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.961099][T20969] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1295.969293][T20969] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1295.979103][ T9269] usb 3-1: config 0 descriptor?? [ 1296.070578][T20969] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1296.321522][T20969] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1296.336843][T20969] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1296.520310][ T9269] apple 0003:05AC:0274.0016: unbalanced delimiter at end of report description [ 1296.543693][ T9269] apple 0003:05AC:0274.0016: parse failed [ 1296.549504][ T9269] apple: probe of 0003:05AC:0274.0016 failed with error -22 [ 1296.706478][T21020] loop5: detected capacity change from 0 to 1024 [ 1296.742172][ T5468] usb 3-1: USB disconnect, device number 44 [ 1296.747327][T20996] loop0: detected capacity change from 0 to 32768 [ 1296.861343][T21020] hfsplus: bad catalog entry type [ 1296.913350][ T4274] hfsplus: b-tree write err: -5, ino 4 [ 1296.949344][T20996] XFS (loop0): Mounting V5 Filesystem [ 1297.026730][T21037] loop5: detected capacity change from 0 to 64 [ 1297.163648][T20996] XFS (loop0): Ending clean mount [ 1297.256651][T20996] xfs: Unexpected value for 'quota' [ 1297.353253][ T4185] XFS (loop0): Unmounting Filesystem [ 1297.708418][T21065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22922'. [ 1297.951820][T21075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22927'. [ 1298.059245][T21074] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1298.153984][T21074] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1298.197558][T21074] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1298.221122][T21079] hfsplus: bad catalog entry type [ 1298.293250][T21074] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1298.349524][T21074] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1298.371140][ T144] hfsplus: b-tree write err: -5, ino 4 [ 1298.463402][T21074] ntfs: (device loop1): check_mft_mirror(): Failed to read $MFTMirr. [ 1298.513347][T21074] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1298.550083][T21095] netlink: 596 bytes leftover after parsing attributes in process `syz.2.22933'. [ 1298.607081][T21074] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1298.625594][T21096] tipc: Invalid UDP bearer configuration [ 1298.625640][T21096] tipc: Enabling of bearer rejected, failed to enable media [ 1298.675118][T21074] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1298.699168][T21074] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1298.743821][T21074] ntfs: volume version 3.1. [ 1299.293055][T21104] set_capacity_and_notify: 2 callbacks suppressed [ 1299.293073][T21104] loop5: detected capacity change from 0 to 32768 [ 1299.298084][ T5470] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1299.353770][T21104] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 1299.376154][T21104] JBD2: Ignoring recovery information on journal [ 1299.419202][T21104] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1299.436693][T21098] loop0: detected capacity change from 0 to 40427 [ 1299.455368][T21098] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1299.465266][T21098] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1299.508501][T21098] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1299.573374][T19416] ocfs2: Unmounting device (7,5) on (node local) [ 1299.593320][T21098] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1299.603759][T21098] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1299.971827][ T5470] usb 2-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 1299.989863][ T5470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.025003][ T5470] usb 2-1: Product: syz [ 1300.041165][ T5470] usb 2-1: Manufacturer: syz [ 1300.056767][ T5470] usb 2-1: SerialNumber: syz [ 1300.075552][ T5470] usb 2-1: config 0 descriptor?? [ 1300.133592][T21137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22950'. [ 1300.147824][ T5470] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1300.613184][ T5470] sonixb 2-1:0.0: Error writing register 01: -71 [ 1300.630609][ T5470] sonixb: probe of 2-1:0.0 failed with error -71 [ 1300.652364][ T5470] usb 2-1: USB disconnect, device number 29 [ 1300.744942][T21143] loop5: detected capacity change from 0 to 32768 [ 1300.758496][T21141] loop2: detected capacity change from 0 to 32768 [ 1300.790721][T21141] [ 1300.790721][T21141] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1300.790721][T21141] [ 1300.826111][ T4186] [ 1300.826111][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1300.826111][ T4186] [ 1300.867109][ T4186] [ 1300.867109][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1300.867109][ T4186] [ 1300.899316][T21143] (syz.5.22954,21143,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1300.934404][T21143] (syz.5.22954,21143,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1300.987309][T21143] JBD2: Ignoring recovery information on journal [ 1301.119223][T21143] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1301.280275][T19416] ocfs2: Unmounting device (7,5) on (node local) [ 1301.842469][T20655] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1301.899770][T21193] tipc: Enabling of bearer rejected, failed to enable media [ 1302.065297][T21204] loop5: detected capacity change from 0 to 64 [ 1302.134134][T20655] usb 5-1: Using ep0 maxpacket: 16 [ 1302.229800][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.345945][T21212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22988'. [ 1302.494642][T20655] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1302.503932][T20655] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.547528][T20655] usb 5-1: Product: syz [ 1302.558603][T20655] usb 5-1: Manufacturer: syz [ 1302.563364][T20655] usb 5-1: SerialNumber: syz [ 1302.659383][T21208] loop1: detected capacity change from 0 to 32768 [ 1302.732822][T21208] read_mapping_page failed! [ 1302.763171][T21208] ERROR: (device loop1): txCommit: [ 1302.763171][T21208] [ 1302.796579][T21224] netlink: 'syz.2.22994': attribute type 10 has an invalid length. [ 1302.805574][T21208] ERROR: (device loop1): remounting filesystem as read-only [ 1302.848249][T21224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.22994'. [ 1302.868960][T21224] device bond0 entered promiscuous mode [ 1302.876735][T21226] loop0: detected capacity change from 0 to 512 [ 1302.884865][T21224] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1302.904962][T20655] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1302.935903][T20655] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1302.969995][T21226] EXT4-fs (loop0): Invalid default hash set in the superblock [ 1302.999223][T20655] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1303.069145][T20655] usb 5-1: media controller created [ 1303.106858][T20655] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1303.125974][T21230] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1303.183382][T21230] sp0: Synchronizing with TNC [ 1303.321511][T20655] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 1303.456130][T21240] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23002'. [ 1303.555861][ T4890] usb 5-1: USB disconnect, device number 27 [ 1303.887781][T21232] loop0: detected capacity change from 0 to 32768 [ 1303.913645][T21261] tipc: Invalid UDP bearer configuration [ 1303.913683][T21261] tipc: Enabling of bearer rejected, failed to enable media [ 1303.979349][T21263] loop2: detected capacity change from 0 to 4096 [ 1304.015942][T21232] XFS (loop0): Mounting V5 Filesystem [ 1304.039815][T21263] EXT4-fs (loop2): Ignoring removed nobh option [ 1304.057885][T21263] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1304.100842][T21263] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,nobh,dioread_nolock,test_dummy_encryption,nodelalloc,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1304.128560][T21232] XFS (loop0): Ending clean mount [ 1304.141386][ T4890] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1304.184872][T21232] XFS (loop0): Quotacheck needed: Please wait. [ 1304.490118][T21281] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1304.495334][T21232] XFS (loop0): Quotacheck: Done. [ 1304.537319][ T4890] usb 2-1: config index 0 descriptor too short (expected 59684, got 36) [ 1304.545755][ T4890] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1304.611330][ T4890] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1304.620567][ T4890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.651828][ T4185] XFS (loop0): Unmounting Filesystem [ 1304.702446][ T4890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1304.750360][ T4890] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.08 [ 1304.769955][ T4890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.793969][ T4890] usb 2-1: config 0 descriptor?? [ 1305.293507][T21309] loop2: detected capacity change from 0 to 4096 [ 1305.311132][ T4890] lg-g15 0003:046D:C222.0017: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 1305.404317][T21309] __ntfs_warning: 10 callbacks suppressed [ 1305.404341][T21309] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1305.486862][T21309] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1305.540394][ T4890] usb 2-1: USB disconnect, device number 30 [ 1305.549752][T21309] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1305.626981][T21309] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1305.676010][T21309] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1305.787592][T21309] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 1305.806863][T21309] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1305.830500][T21309] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1305.837532][T21316] fido_id[21316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1305.883594][T21309] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1305.951912][T21309] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1305.999538][T21309] ntfs: volume version 3.1. [ 1306.234432][T21305] loop5: detected capacity change from 0 to 32768 [ 1306.302816][T21338] tipc: Enabling of bearer rejected, failed to enable media [ 1306.374768][T21342] loop1: detected capacity change from 0 to 24 [ 1306.505770][T21305] XFS (loop5): Mounting V5 Filesystem [ 1306.525652][T21342] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1306.564519][T21342] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1306.703189][ C0] vkms_vblank_simulate: vblank timer overrun [ 1306.762064][T21305] XFS (loop5): Ending clean mount [ 1306.798983][T21305] XFS (loop5): Quotacheck needed: Please wait. [ 1306.996245][T21305] XFS (loop5): Quotacheck: Done. [ 1307.001743][T21375] loop2: detected capacity change from 0 to 256 [ 1307.046295][T21377] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1307.081517][T21375] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1307.117532][T21367] loop0: detected capacity change from 0 to 4096 [ 1307.174617][T19416] XFS (loop5): Unmounting Filesystem [ 1307.388027][T21367] ntfs: volume version 3.1. [ 1307.700927][T13013] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1307.986892][T21411] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1308.000370][T13013] usb 3-1: Using ep0 maxpacket: 8 [ 1308.128684][T13013] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 1308.163243][T13013] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1308.180902][T13013] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 1308.213339][T13013] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.248012][T13013] usb 3-1: config 0 descriptor?? [ 1308.363757][T21420] loop0: detected capacity change from 0 to 64 [ 1308.559766][T21428] loop5: detected capacity change from 0 to 2048 [ 1308.632107][T21428] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1308.643225][T21431] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1308.692133][T21428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1308.721183][T21428] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 1308.743657][T21428] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 1308.761987][T13013] glorious 0003:258A:0036.0018: item fetching failed at offset 3/4 [ 1308.787058][T13013] glorious: probe of 0003:258A:0036.0018 failed with error -22 [ 1308.995959][T13013] usb 3-1: USB disconnect, device number 45 [ 1309.113534][ T5468] kernel write not supported for file /sequencer2 (pid: 5468 comm: kworker/0:14) [ 1309.154873][ T4890] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1309.387824][T21460] binder: 21459:21460 ioctl 4018620d 0 returned -22 [ 1309.396020][T21460] binder: 21459:21460 ioctl c0306201 200000000180 returned -11 [ 1309.407753][T20655] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1309.550449][ T4890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.595823][T21468] loop2: detected capacity change from 0 to 128 [ 1309.602913][ T4890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1309.678694][T20655] usb 5-1: Using ep0 maxpacket: 8 [ 1309.700305][ T4890] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1309.732107][ T4890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1309.754944][T21468] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1309.796445][ T4890] usb 2-1: SerialNumber: syz [ 1309.952159][ T5468] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1310.032295][T20655] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1310.041587][ T5470] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1310.060261][T20655] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.071076][T20655] usb 5-1: Product: syz [ 1310.092775][T20655] usb 5-1: Manufacturer: syz [ 1310.103621][T20655] usb 5-1: SerialNumber: syz [ 1310.119693][ T4890] usb 2-1: 0:2 : does not exist [ 1310.146054][ T4890] usb 2-1: USB disconnect, device number 31 [ 1310.234555][ T5468] usb 1-1: Using ep0 maxpacket: 16 [ 1310.577079][ T5468] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1310.586819][ T5468] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.595037][ T5468] usb 1-1: Product: syz [ 1310.599865][ T5468] usb 1-1: Manufacturer: syz [ 1310.604588][ T5468] usb 1-1: SerialNumber: syz [ 1310.630229][T20655] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 1310.638659][T20655] mxuport: probe of 5-1:254.0 failed with error -5 [ 1310.662718][ T5470] usb 6-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 1310.678682][ T5470] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.687288][ T5470] usb 6-1: Product: syz [ 1310.691572][ T5470] usb 6-1: Manufacturer: syz [ 1310.696789][ T5470] usb 6-1: SerialNumber: syz [ 1310.703573][ T5470] usb 6-1: config 0 descriptor?? [ 1310.761156][ T5470] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1310.864637][ T4890] usb 5-1: USB disconnect, device number 28 [ 1310.910437][ T5468] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1310.927108][ T5468] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1310.938094][ T5468] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1310.947093][ T5468] usb 1-1: media controller created [ 1310.964179][ T5468] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1311.160511][ T5468] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 1311.221209][ T5470] sonixb 6-1:0.0: Error writing register 01: -71 [ 1311.227928][ T5470] sonixb: probe of 6-1:0.0 failed with error -71 [ 1311.235952][ T5470] usb 6-1: USB disconnect, device number 6 [ 1311.378034][ T4890] usb 1-1: USB disconnect, device number 40 [ 1311.791058][T21505] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1311.799561][T21504] binder: 21501:21504 ioctl 4018620d 0 returned -22 [ 1311.832297][T21507] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1311.948246][T21507] sp0: Synchronizing with TNC [ 1312.139973][T21515] loop0: detected capacity change from 0 to 2048 [ 1312.190397][T21515] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1312.253327][T21515] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1312.273208][T21524] loop2: detected capacity change from 0 to 512 [ 1312.327728][T21515] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 1312.354464][T21515] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 1312.376903][T21524] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1312.412868][T21524] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1312.440494][T21524] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1312.468895][T21524] System zones: 0-2, 18-18, 34-35 [ 1312.488575][T21524] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 1312.511754][T21524] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1312.562867][T21524] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1312.599961][T21524] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: none. [ 1312.612574][T21524] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.2.23124: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 1312.641418][T21524] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 1312.939261][ T5470] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1313.021920][T21517] loop1: detected capacity change from 0 to 32768 [ 1313.141514][T21555] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1313.165882][ T21] kworker/dying (21) used greatest stack depth: 15992 bytes left [ 1313.181639][T21560] loop2: detected capacity change from 0 to 24 [ 1313.182698][T21555] sp0: Synchronizing with TNC [ 1313.230368][T21560] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1313.277898][T21517] XFS (loop1): Mounting V5 Filesystem [ 1313.318565][T21560] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1313.548974][ T5470] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 1313.569291][ T5470] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.585936][ T5470] usb 5-1: Product: syz [ 1313.586008][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.596255][ T5470] usb 5-1: Manufacturer: syz [ 1313.600940][ T5470] usb 5-1: SerialNumber: syz [ 1313.656533][ T5470] usb 5-1: config 0 descriptor?? [ 1313.701162][T21517] XFS (loop1): Ending clean mount [ 1313.711759][ T5470] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1313.720802][T21517] XFS (loop1): Quotacheck needed: Please wait. [ 1313.828655][T21581] loop5: detected capacity change from 0 to 4096 [ 1313.852724][T21581] EXT4-fs (loop5): Ignoring removed nobh option [ 1313.864880][T21581] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1313.886422][T21517] XFS (loop1): Quotacheck: Done. [ 1314.016490][T21581] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,nobh,dioread_nolock,test_dummy_encryption,nodelalloc,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1314.127646][ T4195] XFS (loop1): Unmounting Filesystem [ 1314.179501][ T5470] sonixb 5-1:0.0: Error writing register 01: -71 [ 1314.185942][ T5470] sonixb: probe of 5-1:0.0 failed with error -71 [ 1314.258352][ T5470] usb 5-1: USB disconnect, device number 29 [ 1314.661592][T21596] loop0: detected capacity change from 0 to 16 [ 1314.674796][T21596] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1314.686696][T21580] loop2: detected capacity change from 0 to 32768 [ 1314.781306][T21580] read_mapping_page failed! [ 1314.817493][T21580] ERROR: (device loop2): txCommit: [ 1314.817493][T21580] [ 1314.846076][T21580] ERROR: (device loop2): remounting filesystem as read-only [ 1315.013491][T21605] loop0: detected capacity change from 0 to 24 [ 1315.037643][T21606] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1315.056796][T21605] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1315.127279][T21605] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1315.277430][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.414753][T21624] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1315.616021][T21633] netlink: 766 bytes leftover after parsing attributes in process `syz.5.23174'. [ 1315.702956][T21636] netlink: 108 bytes leftover after parsing attributes in process `syz.1.23176'. [ 1315.762332][T21636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23176'. [ 1316.174194][T21659] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23186'. [ 1316.285523][T20655] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1316.442699][T21638] loop0: detected capacity change from 0 to 32768 [ 1316.546750][T21638] read_mapping_page failed! [ 1316.563423][T20655] usb 6-1: Using ep0 maxpacket: 16 [ 1316.569622][T21638] ERROR: (device loop0): txCommit: [ 1316.569622][T21638] [ 1316.595432][T21638] ERROR: (device loop0): remounting filesystem as read-only [ 1316.649336][T21667] loop2: detected capacity change from 0 to 4096 [ 1316.710623][T21667] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1316.895090][T20655] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1316.915095][T20655] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.958327][T20655] usb 6-1: Product: syz [ 1316.977762][T20655] usb 6-1: Manufacturer: syz [ 1316.989260][T20655] usb 6-1: SerialNumber: syz [ 1317.121294][ T154] ntfs3: loop2: ino=1b, Internal error [ 1317.140905][ T154] ntfs3: loop2: ntfs3_write_inode r=1b failed, -22. [ 1317.152148][ T154] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1317.274529][ C1] vkms_vblank_simulate: vblank timer overrun [ 1317.324777][T20655] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1317.358609][T20655] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1317.415259][T20655] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1317.437907][T20655] usb 6-1: media controller created [ 1317.510928][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23201'. [ 1317.524150][T20655] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1317.555083][T21690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23201'. [ 1317.709362][T20655] dvb_usb_gl861: probe of 6-1:157.0 failed with error -5 [ 1317.944828][T20655] usb 6-1: USB disconnect, device number 7 [ 1317.958788][T21710] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1318.063137][T21675] loop0: detected capacity change from 0 to 40427 [ 1318.134652][T21675] F2FS-fs (loop0): invalid crc value [ 1318.169305][T21675] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1318.391526][T21675] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1318.403979][T21728] loop1: detected capacity change from 0 to 4096 [ 1318.497993][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 1318.498010][ T26] audit: type=1800 audit(1253.866:73): pid=21675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.23194" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1318.558350][T21728] NILFS (loop1): mounting unchecked fs [ 1318.583297][T21728] NILFS (loop1): recovery required for readonly filesystem [ 1318.611021][T21728] NILFS (loop1): write access will be enabled during recovery [ 1318.620172][T21739] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23223'. [ 1318.648976][T21728] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1318.681698][T21728] NILFS (loop1): trying rollback from an earlier position [ 1318.740452][ T4185] attempt to access beyond end of device [ 1318.740452][ T4185] loop0: rw=2049, want=45104, limit=40427 [ 1318.790431][T21728] NILFS (loop1): recovery complete [ 1318.855643][T21748] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1319.085498][T21759] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23232'. [ 1319.378374][T21767] loop2: detected capacity change from 0 to 512 [ 1319.493561][T21767] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1319.527842][T21767] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1319.573571][T21767] System zones: 0-1, 15-15, 18-18, 34-34 [ 1319.611408][T21767] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1319.646042][T21767] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1319.716740][T21767] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1319.770592][T21767] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1319.792331][T21767] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #16: comm syz.2.23236: iget: bad extended attribute block 1 [ 1319.864701][T21767] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.23236: couldn't read orphan inode 16 (err -117) [ 1319.931333][T21767] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1319.978290][T21758] loop1: detected capacity change from 0 to 32768 [ 1320.013264][T21767] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1320.043444][T21767] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1320.054892][T21758] [ 1320.054892][T21758] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1320.054892][T21758] [ 1320.122673][T21795] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1320.122673][T21795] The task syz.4.23246 (21795) triggered the difference, watch for misbehavior. [ 1320.220676][ T4195] [ 1320.220676][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1320.220676][ T4195] [ 1320.260033][ T4195] [ 1320.260033][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1320.260033][ T4195] [ 1320.697858][T21811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1321.157073][T21794] loop5: detected capacity change from 0 to 40427 [ 1321.218291][T21825] loop1: detected capacity change from 0 to 4096 [ 1321.226134][T21829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23266'. [ 1321.238774][T21829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23266'. [ 1321.296622][T21825] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1321.307037][T21794] F2FS-fs (loop5): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 1321.357242][T21794] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1321.434889][T21794] F2FS-fs (loop5): invalid crc value [ 1321.449160][T21831] Invalid ELF header magic: != ELF [ 1321.490329][T21833] tipc: Resetting bearer [ 1321.526188][T21794] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1321.609839][ T154] ntfs3: loop1: ino=1b, Internal error [ 1321.615977][ T154] ntfs3: loop1: ntfs3_write_inode r=1b failed, -22. [ 1321.640851][ T154] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1321.650499][ T1136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 35803 - 0 [ 1321.720128][T21794] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1321.759618][T21794] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1321.770275][ T1136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 37560 - 0 [ 1321.895983][T21843] netlink: 'syz.0.23272': attribute type 3 has an invalid length. [ 1321.930483][ T26] audit: type=1800 audit(1257.083:74): pid=21794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.23249" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 1321.964952][ T1136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 35803 - 0 [ 1322.046869][ T1136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 37560 - 0 [ 1322.063357][T19416] attempt to access beyond end of device [ 1322.063357][T19416] loop5: rw=2049, want=45104, limit=40427 [ 1322.149947][ T1136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 35803 - 0 [ 1322.237649][ T1136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 37560 - 0 [ 1322.757127][T21873] loop0: detected capacity change from 0 to 16 [ 1322.791451][T21873] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1322.957703][T21876] netlink: 64 bytes leftover after parsing attributes in process `syz.1.23287'. [ 1323.020843][T21880] loop5: detected capacity change from 0 to 1024 [ 1323.187117][T21880] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1323.492732][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23290'. [ 1324.051720][T21865] chnl_net:caif_netlink_parms(): no params data found [ 1324.302189][T21933] loop5: detected capacity change from 0 to 736 [ 1324.445454][T21865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.459231][T21924] loop0: detected capacity change from 0 to 32768 [ 1324.520142][T21924] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1324.521226][T21865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.556943][T21865] device bridge_slave_0 entered promiscuous mode [ 1324.566101][T21865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.577430][T21924] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1324.581675][T21865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.596435][T21865] device bridge_slave_1 entered promiscuous mode [ 1324.707477][T21913] loop1: detected capacity change from 0 to 32768 [ 1324.723529][T21865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.777788][T21865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.795527][ T9269] Bluetooth: hci2: command 0x0409 tx timeout [ 1324.826281][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 1325.189868][T21865] team0: Port device team_slave_0 added [ 1325.238887][T21865] team0: Port device team_slave_1 added [ 1325.367539][T21971] delete_channel: no stack [ 1325.508131][T21865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.527752][T21865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.631741][T21865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.700768][T21865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.719730][T21865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.790731][T21986] loop5: detected capacity change from 0 to 1024 [ 1325.811560][T21865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1325.867801][T21986] hfsplus: bad catalog entry type [ 1325.963924][T21993] loop1: detected capacity change from 0 to 1024 [ 1325.977239][ T4271] hfsplus: b-tree write err: -5, ino 4 [ 1326.004833][T21865] device hsr_slave_0 entered promiscuous mode [ 1326.021892][T21993] hfsplus: bad catalog entry type [ 1326.047743][T21865] device hsr_slave_1 entered promiscuous mode [ 1326.067862][T21865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1326.075502][T21865] Cannot create hsr debugfs directory [ 1326.110695][ T4271] hfsplus: b-tree write err: -5, ino 4 [ 1326.307440][T22007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23327'. [ 1326.430789][ T9400] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1326.558162][T22020] loop1: detected capacity change from 0 to 256 [ 1326.656481][T22020] exfat: Deprecated parameter 'namecase' [ 1326.687794][ T9400] usb 1-1: Using ep0 maxpacket: 8 [ 1326.801034][T22020] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 1326.817756][ T9400] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1326.871462][ T9400] usb 1-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 1326.928354][ T9400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.980263][ T9400] usb 1-1: config 0 descriptor?? [ 1327.029491][T20655] Bluetooth: hci2: command 0x041b tx timeout [ 1327.164708][ T1136] device hsr_slave_0 left promiscuous mode [ 1327.178156][ T1136] device hsr_slave_1 left promiscuous mode [ 1327.211194][T20655] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1327.223552][ T1136] device veth1_macvtap left promiscuous mode [ 1327.229638][ T1136] device veth0_macvtap left promiscuous mode [ 1327.265645][ T1136] device veth1_vlan left promiscuous mode [ 1327.326522][T22051] loop1: detected capacity change from 0 to 1024 [ 1327.423968][T22051] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1327.437522][T22051] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1327.459651][T22051] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.23345: bg 0: block 10: padding at end of block bitmap is not set [ 1327.484060][ T9400] wacom 0003:056A:032C.0019: ignoring exceeding usage max [ 1327.502519][ T9400] wacom 0003:056A:032C.0019: unknown main item tag 0x0 [ 1327.514670][ T9400] wacom 0003:056A:032C.0019: hidraw0: USB HID v5.59 Device [HID 056a:032c] on usb-dummy_hcd.0-1/input0 [ 1327.529213][T22051] Quota error (device loop1): write_blk: dquota write failed [ 1327.552190][T22051] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list [ 1327.563199][T22051] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1327.573815][T22051] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.23345: Failed to acquire dquot type 0 [ 1327.586696][T22051] Quota error (device loop1): write_blk: dquota write failed [ 1327.594177][T22051] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list [ 1327.604689][T22051] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1327.614948][T22051] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.23345: Failed to acquire dquot type 0 [ 1327.627027][T22051] EXT4-fs error (device loop1): ext4_free_blocks:6234: comm syz.1.23345: Freeing blocks not in datazone - block = 0, count = 4096 [ 1327.645741][T22051] Quota error (device loop1): write_blk: dquota write failed [ 1327.650833][T20655] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1327.664510][T22051] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list [ 1327.671877][T20655] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1327.677282][T22051] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1327.695809][T20655] usb 6-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 1327.719047][T22051] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.23345: Failed to acquire dquot type 0 [ 1327.719591][T20655] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.752763][ T9269] usb 1-1: USB disconnect, device number 41 [ 1327.760156][T20655] usb 6-1: config 0 descriptor?? [ 1327.773064][T22051] EXT4-fs (loop1): 1 orphan inode deleted [ 1327.779939][T22051] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1328.198129][ T1136] bond3 (unregistering): Released all slaves [ 1328.283585][T20655] thrustmaster 0003:044F:B653.001A: hidraw0: USB HID v0.00 Device [HID 044f:b653] on usb-dummy_hcd.5-1/input0 [ 1328.305213][T20655] thrustmaster 0003:044F:B653.001A: no inputs found [ 1328.380464][ T1136] bond2 (unregistering): Released all slaves [ 1328.407405][ T1136] bond1 (unregistering): Released all slaves [ 1328.517750][T20655] usb 6-1: USB disconnect, device number 8 [ 1328.708416][ T1136] bond0 (unregistering): Released all slaves [ 1328.771171][T21865] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1328.817044][T21865] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1328.871040][T21865] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1328.903547][T21865] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1329.242515][T20655] Bluetooth: hci2: command 0x040f tx timeout [ 1329.264040][ T9401] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1329.285768][T21865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.329581][T21865] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.351776][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1329.376463][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1329.432962][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1329.446316][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1329.465944][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.473138][ T4271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.532090][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1329.574533][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1329.605990][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.613204][ T4271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.670812][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1329.681651][ T9401] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.702034][ T9401] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1329.734237][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1329.777894][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1329.809383][ T9401] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1329.816075][ T9401] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 1329.847850][T22125] loop5: detected capacity change from 0 to 64 [ 1329.850616][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1329.883859][ T9401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.918806][ T9401] usb 2-1: config 0 descriptor?? [ 1329.924431][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1329.960876][T22120] fido_id[22120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1330.012855][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1330.070951][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1330.102337][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1330.158501][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1330.222906][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1330.231642][ T9401] usb 2-1: string descriptor 0 read error: -71 [ 1330.283781][T21865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1330.329317][T21865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1330.376688][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1330.385372][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1330.397125][ T9401] usbhid 2-1:0.0: can't add hid device: -71 [ 1330.403167][ T9401] usbhid: probe of 2-1:0.0 failed with error -71 [ 1330.469733][ T9401] usb 2-1: USB disconnect, device number 32 [ 1330.521459][T22130] fido_id[22130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1330.582515][T22137] loop5: detected capacity change from 0 to 512 [ 1330.703488][T22110] loop0: detected capacity change from 0 to 32768 [ 1330.731182][T22137] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1330.798489][T22137] EXT4-fs (loop5): 1 truncate cleaned up [ 1330.835386][T22137] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 1331.089776][T22156] loop1: detected capacity change from 0 to 1024 [ 1331.143187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1331.156236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1331.221688][T21865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1331.466228][T20655] Bluetooth: hci2: command 0x0419 tx timeout [ 1331.473124][ T154] hfsplus: b-tree write err: -5, ino 4 [ 1332.183416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1332.239052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1332.330503][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1332.349808][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1332.403059][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1332.426851][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1332.463987][T21865] device veth0_vlan entered promiscuous mode [ 1332.521920][T21865] device veth1_vlan entered promiscuous mode [ 1332.610857][T22207] loop0: detected capacity change from 0 to 8192 [ 1332.631402][T20655] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1332.679811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1332.708155][T22207] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1332.737772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1332.740285][T22207] REISERFS (device loop0): using ordered data mode [ 1332.752569][T22207] reiserfs: using flush barriers [ 1332.758874][T22207] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1332.779944][T22207] REISERFS (device loop0): checking transaction log (loop0) [ 1332.803313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1332.871852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1332.880104][T22207] REISERFS (device loop0): Using tea hash to sort names [ 1332.896139][T22207] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1332.905525][T20655] usb 5-1: Using ep0 maxpacket: 8 [ 1332.921995][T21865] device veth0_macvtap entered promiscuous mode [ 1332.940778][T21865] device veth1_macvtap entered promiscuous mode [ 1332.994297][T21865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.029006][T22225] loop1: detected capacity change from 0 to 512 [ 1333.046056][T21865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.056303][T20655] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1333.066959][T20655] usb 5-1: config 179 has no interface number 0 [ 1333.074014][T21865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.084693][T20655] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1333.096285][T21865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.106662][T20655] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1333.127293][T21865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1333.140382][T20655] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1333.163527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1333.172697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1333.186441][T20655] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1333.199557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1333.208066][T20655] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1333.222891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1333.238510][T21865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.255493][T20655] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1333.269423][T21865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.281564][T20655] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1333.292379][T21865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.315606][T20655] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.333368][T21865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.343595][T21865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.356019][T22225] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1333.358760][T21865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.385729][T20655] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input135 [ 1333.409243][T21865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1333.496876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1333.509127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1333.543401][T21865] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.570243][T21865] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.617379][T21865] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.653482][T22234] loop0: detected capacity change from 0 to 2048 [ 1333.660164][T21865] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.690016][ T5470] Bluetooth: hci2: command 0x0405 tx timeout [ 1333.761009][T22234] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1333.811605][ T5468] usb 5-1: USB disconnect, device number 30 [ 1333.828705][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1333.842148][ T5468] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1333.926203][T22234] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1333.956034][T22234] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1333.969718][T22234] UDF-fs: Scanning with blocksize 512 failed [ 1334.028862][T22234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1334.073509][T22237] loop5: detected capacity change from 0 to 8192 [ 1334.094322][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.136836][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.179003][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1334.239341][T22237] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1334.256469][T22248] loop1: detected capacity change from 0 to 512 [ 1334.262894][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.278058][T22237] REISERFS (device loop5): using ordered data mode [ 1334.284632][T22237] reiserfs: using flush barriers [ 1334.310638][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.408184][T19555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1334.421355][T22237] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1334.426987][T22255] loop0: detected capacity change from 0 to 256 [ 1334.438169][T22248] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1334.485428][T22237] REISERFS (device loop5): checking transaction log (loop5) [ 1334.538753][T22255] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1334.579203][T22248] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.23404: corrupted inode contents [ 1334.603842][T22237] REISERFS (device loop5): Using r5 hash to sort names [ 1334.614229][T22237] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1334.678575][T22248] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #2: comm syz.1.23404: mark_inode_dirty error [ 1334.749624][T22248] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.23404: corrupted inode contents [ 1334.833801][T22259] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.23404: corrupted inode contents [ 1334.846904][T22263] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1334.908499][T22263] EXT4-fs (loop6): 1 truncate cleaned up [ 1334.924895][T22259] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #2: comm syz.1.23404: mark_inode_dirty error [ 1334.966615][T22263] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,debug_want_extra_isize=0x0000000000000068,barrier,jqfmt=vfsold,quota,. Quota mode: writeback. [ 1335.015087][T22259] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.23404: corrupted inode contents [ 1335.158897][ T26] audit: type=1800 audit(1269.449:75): pid=22263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.23408" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1335.459036][T22290] set_capacity_and_notify: 1 callbacks suppressed [ 1335.459054][T22290] loop0: detected capacity change from 0 to 2048 [ 1335.491548][T22295] loop6: detected capacity change from 0 to 512 [ 1335.565130][T22297] netlink: 16 bytes leftover after parsing attributes in process `syz.5.23418'. [ 1335.591551][T22295] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1335.658217][T22301] netlink: zone id is out of range [ 1335.663408][T22301] netlink: zone id is out of range [ 1335.668955][T22295] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1335.677385][T22295] System zones: 0-1, 15-15, 18-18, 34-34 [ 1335.684993][T22295] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1335.692184][T22295] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 1335.702343][T22295] EXT4-fs warning (device loop6): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1335.717876][T22295] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1335.725403][T22295] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #16: comm syz.6.23414: iget: bad extended attribute block 1 [ 1335.739717][T22295] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.23414: couldn't read orphan inode 16 (err -117) [ 1335.754982][T22301] netlink: zone id is out of range [ 1335.761359][T22301] netlink: zone id is out of range [ 1335.767482][T22295] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1335.788010][T22301] netlink: zone id is out of range [ 1335.806846][T22301] netlink: zone id is out of range [ 1335.832512][T22301] netlink: zone id is out of range [ 1335.851235][T22295] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1335.861780][T22301] netlink: zone id is out of range [ 1335.887728][T22301] netlink: zone id is out of range [ 1335.899262][T22295] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1335.913464][T22301] netlink: zone id is out of range [ 1336.637000][T22332] loop0: detected capacity change from 0 to 2048 [ 1336.747731][T22332] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1336.794182][ T4342] udevd[4342]: incorrect nilfs2 checksum on /dev/loop0 [ 1336.858164][T22339] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1336.867281][T22332] attempt to access beyond end of device [ 1336.867281][T22332] loop0: rw=524288, want=33554432, limit=2048 [ 1337.349121][T22356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.420801][T22356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.474195][T22356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.539319][T22356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.570973][T22356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.575213][T22313] loop1: detected capacity change from 0 to 40427 [ 1337.624140][T22356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.667092][T22356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.698770][T22313] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 1337.705441][T22313] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1337.720128][T22356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.833194][T22313] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1337.911870][T19555] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.047972][T19555] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.072827][T22313] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1338.154539][T22313] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1338.171840][T22371] loop5: detected capacity change from 0 to 1024 [ 1338.185010][T19555] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.326610][T19555] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.424164][ T4195] attempt to access beyond end of device [ 1338.424164][ T4195] loop1: rw=2049, want=45104, limit=40427 [ 1338.438759][T22376] loop0: detected capacity change from 0 to 1024 [ 1338.451137][T22374] hfsplus: request for non-existent node 262144 in B*Tree [ 1338.500589][T22374] hfsplus: request for non-existent node 262144 in B*Tree [ 1338.545779][T22376] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1338.625105][T22376] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1338.701442][T22376] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.23447: bg 0: block 10: padding at end of block bitmap is not set [ 1338.913672][T22376] Quota error (device loop0): write_blk: dquota write failed [ 1338.922310][T22376] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list [ 1338.933132][T22376] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1338.948865][T22376] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.23447: Failed to acquire dquot type 0 [ 1338.976984][T22376] Quota error (device loop0): write_blk: dquota write failed [ 1339.003035][T22376] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list [ 1339.045955][T22376] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1339.055880][T22376] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.23447: Failed to acquire dquot type 0 [ 1339.120825][T22376] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.23447: Freeing blocks not in datazone - block = 0, count = 4096 [ 1339.163908][T22376] Quota error (device loop0): write_blk: dquota write failed [ 1339.227431][T22376] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list [ 1339.237821][T22376] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.23447: Failed to acquire dquot type 0 [ 1339.302671][T22376] EXT4-fs (loop0): 1 orphan inode deleted [ 1339.366442][T22376] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1339.664732][T22402] loop1: detected capacity change from 0 to 4096 [ 1339.855885][T22379] chnl_net:caif_netlink_parms(): no params data found [ 1339.881616][T22402] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1339.904815][T22419] loop0: detected capacity change from 0 to 736 [ 1339.968070][T22402] ntfs3: loop1: Failed to load $Extend. [ 1340.204516][T22433] loop5: detected capacity change from 0 to 256 [ 1340.366863][T22433] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1340.469385][T22379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.526461][T22379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.536635][T22444] loop0: detected capacity change from 0 to 16 [ 1340.570554][T22444] erofs: (device loop0): mounted with root inode @ nid 36. [ 1340.588885][T22379] device bridge_slave_0 entered promiscuous mode [ 1340.686931][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1340.686950][ T26] audit: type=1800 audit(1274.622:76): pid=22444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.23466" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 1340.729821][T22379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.759142][T22379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.827904][T22379] device bridge_slave_1 entered promiscuous mode [ 1340.964058][T22379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1341.045006][ T9269] Bluetooth: hci2: command 0x0409 tx timeout [ 1341.054408][T22379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.297523][T22379] team0: Port device team_slave_0 added [ 1341.369244][T22379] team0: Port device team_slave_1 added [ 1341.388846][T22483] loop0: detected capacity change from 0 to 128 [ 1341.502757][T22379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1341.536999][T22379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1341.564059][T13013] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1341.650175][T22379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1341.759588][T22379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1341.773447][T22379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1341.801990][T22459] loop1: detected capacity change from 0 to 32768 [ 1341.832238][T22379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1341.892842][T22459] JBD2: Ignoring recovery information on journal [ 1341.996730][T13013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1342.019257][T22459] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1342.019459][T13013] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 1342.050348][T13013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.061989][T13013] usb 6-1: config 0 descriptor?? [ 1342.100191][T22459] (syz.1.23472,22459,0):ocfs2_reflink_ioctl:4454 ERROR: status = -14 [ 1342.131578][T22379] device hsr_slave_0 entered promiscuous mode [ 1342.190282][T22379] device hsr_slave_1 entered promiscuous mode [ 1342.203342][T22501] loop0: detected capacity change from 0 to 512 [ 1342.211685][T22379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1342.224028][ T4195] ocfs2: Unmounting device (7,1) on (node local) [ 1342.230479][T22379] Cannot create hsr debugfs directory [ 1342.406508][T22501] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1342.479342][T22501] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #2: comm syz.0.23488: corrupted inode contents [ 1342.554843][T22501] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #2: comm syz.0.23488: mark_inode_dirty error [ 1342.579669][T13013] logitech 0003:046D:CA03.001B: ignoring exceeding usage max [ 1342.596377][T13013] logitech 0003:046D:CA03.001B: unbalanced delimiter at end of report description [ 1342.619416][T13013] logitech 0003:046D:CA03.001B: parse failed [ 1342.628608][T22501] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #2: comm syz.0.23488: corrupted inode contents [ 1342.648598][T13013] logitech: probe of 0003:046D:CA03.001B failed with error -22 [ 1342.670237][T22514] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #2: comm syz.0.23488: corrupted inode contents [ 1342.688035][T22520] loop1: detected capacity change from 0 to 512 [ 1342.703024][T22514] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #2: comm syz.0.23488: mark_inode_dirty error [ 1342.745150][T22514] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #2: comm syz.0.23488: corrupted inode contents [ 1342.785072][T13013] usb 6-1: USB disconnect, device number 9 [ 1342.816727][T22520] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1342.931487][T22520] EXT4-fs error (device loop1): __ext4_iget:4912: inode #11: block 1: comm syz.1.23495: invalid block [ 1342.959024][T22520] EXT4-fs (loop1): Remounting filesystem read-only [ 1342.965747][T22520] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.23495: couldn't read orphan inode 11 (err -117) [ 1342.979291][T22520] EXT4-fs (loop1): Remounting filesystem read-only [ 1342.993445][T22520] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000004,dioread_lock,max_dir_size_kb=0x0000000000002004,nomblk_io_submit,init_itable=0x0000000000000002,usrquota,errors=remount-ro,grpjquota=,nojournal_checksum,. Quota mode: writeback. [ 1343.041757][T22520] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.23495: Directory hole found for htree leaf block 0 [ 1343.075010][T22520] EXT4-fs (loop1): Remounting filesystem read-only [ 1343.111746][T19555] device hsr_slave_0 left promiscuous mode [ 1343.126611][T19555] device hsr_slave_1 left promiscuous mode [ 1343.144160][T19555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1343.161711][T19555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1343.179750][T19555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1343.207703][T19555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1343.255105][T19555] device bridge_slave_1 left promiscuous mode [ 1343.263451][T19555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.283995][ T9269] Bluetooth: hci2: command 0x041b tx timeout [ 1343.295291][T19555] device bridge_slave_0 left promiscuous mode [ 1343.321363][T19555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.390280][T19555] device veth1_macvtap left promiscuous mode [ 1343.406879][T19555] device veth0_macvtap left promiscuous mode [ 1343.418323][T19555] device veth1_vlan left promiscuous mode [ 1343.436164][T19555] device veth0_vlan left promiscuous mode [ 1343.527246][ T9401] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1343.659677][T22544] loop1: detected capacity change from 0 to 8192 [ 1343.702514][T22544] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1343.716128][T22544] REISERFS (device loop1): using ordered data mode [ 1343.723525][T22544] reiserfs: using flush barriers [ 1343.730972][T22544] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1343.754485][T22544] REISERFS (device loop1): checking transaction log (loop1) [ 1343.766854][T22544] REISERFS (device loop1): Using r5 hash to sort names [ 1343.774559][T22544] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1343.803200][ T9401] usb 1-1: Using ep0 maxpacket: 16 [ 1344.134551][ T9401] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1344.166436][ T9401] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1344.174714][ T9401] usb 1-1: Product: syz [ 1344.198207][ T9401] usb 1-1: Manufacturer: syz [ 1344.209207][ T9401] usb 1-1: SerialNumber: syz [ 1344.216336][ T9401] usb 1-1: config 0 descriptor?? [ 1344.231380][T19555] team0 (unregistering): Port device team_slave_1 removed [ 1344.254035][T19555] team0 (unregistering): Port device team_slave_0 removed [ 1344.269465][T19555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1344.344472][T19555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1344.433255][T22558] loop1: detected capacity change from 0 to 256 [ 1344.500011][T22558] FAT-fs (loop1): Directory bread(block 64) failed [ 1344.517019][T22558] FAT-fs (loop1): Directory bread(block 65) failed [ 1344.525395][ T1325] usb 1-1: USB disconnect, device number 42 [ 1344.544494][T22558] FAT-fs (loop1): Directory bread(block 66) failed [ 1344.554388][T22558] FAT-fs (loop1): Directory bread(block 67) failed [ 1344.566121][T22558] FAT-fs (loop1): Directory bread(block 68) failed [ 1344.615498][T22558] FAT-fs (loop1): Directory bread(block 69) failed [ 1344.633103][T22558] FAT-fs (loop1): Directory bread(block 70) failed [ 1344.641954][T22558] FAT-fs (loop1): Directory bread(block 71) failed [ 1344.650814][T22558] FAT-fs (loop1): Directory bread(block 72) failed [ 1344.664393][T19555] bond0 (unregistering): Released all slaves [ 1344.676472][T22558] FAT-fs (loop1): Directory bread(block 73) failed [ 1344.968093][T22379] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1345.007797][T22379] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1345.117471][T22379] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1345.208724][T22379] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1345.307179][T22578] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.23514'. [ 1345.388094][T22578] net_ratelimit: 19 callbacks suppressed [ 1345.388114][T22578] openvswitch: netlink: Tunnel attr 0 has unexpected len 145 expected 8 [ 1345.503181][T21592] Bluetooth: hci2: command 0x040f tx timeout [ 1345.636228][T22601] loop1: detected capacity change from 0 to 256 [ 1345.646156][T22379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.734868][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1345.750740][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1345.764923][T22601] FAT-fs (loop1): Directory bread(block 64) failed [ 1345.764968][T22601] FAT-fs (loop1): Directory bread(block 65) failed [ 1345.765052][T22601] FAT-fs (loop1): Directory bread(block 66) failed [ 1345.765086][T22601] FAT-fs (loop1): Directory bread(block 67) failed [ 1345.765158][T22601] FAT-fs (loop1): Directory bread(block 68) failed [ 1345.765191][T22601] FAT-fs (loop1): Directory bread(block 69) failed [ 1345.765322][T22601] FAT-fs (loop1): Directory bread(block 70) failed [ 1345.765357][T22601] FAT-fs (loop1): Directory bread(block 71) failed [ 1345.765435][T22601] FAT-fs (loop1): Directory bread(block 72) failed [ 1345.765476][T22601] FAT-fs (loop1): Directory bread(block 73) failed [ 1345.765558][T22379] 8021q: adding VLAN 0 to HW filter on device team0 [ 1345.786383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1345.786982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1345.787379][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.787497][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1345.788007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1345.851588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1345.852175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1345.852542][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.852578][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1345.859130][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1345.898027][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1345.902334][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1345.904176][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1345.905083][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1345.921004][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1345.921845][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1345.936900][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1345.937547][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1345.964600][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1345.965257][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1345.991118][T22379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1346.272280][T22625] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1346.418410][T22629] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 1346.418566][T22629] EXT4-fs (loop9): unable to read superblock [ 1346.690215][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1346.690363][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1346.723775][T22379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.942326][T22654] 9pnet: p9_fd_create_unix (22654): problem connecting socket: éq‰Y’3aK: -111 [ 1347.446899][ T9401] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1347.499078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1347.499721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1347.570778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1347.571542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1347.598320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1347.599104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1347.600976][T22379] device veth0_vlan entered promiscuous mode [ 1347.622277][T22379] device veth1_vlan entered promiscuous mode [ 1347.703174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1347.703961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1347.704461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1347.705530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1347.715844][ T9401] usb 5-1: Using ep0 maxpacket: 16 [ 1347.716180][T21592] Bluetooth: hci2: command 0x0419 tx timeout [ 1347.727794][T22379] device veth0_macvtap entered promiscuous mode [ 1347.740865][T22379] device veth1_macvtap entered promiscuous mode [ 1347.784634][T22379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1347.784705][T22379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.784726][T22379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1347.784741][T22379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.786015][T22379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1347.786111][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1347.786790][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1347.787300][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1347.787813][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1347.808119][T22379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1347.808143][T22379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.808156][T22379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1347.808171][T22379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.808189][T22379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1347.808203][T22379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.809402][T22379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1347.809497][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1347.810152][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1347.826062][T22379] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.826191][T22379] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.826222][T22379] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.826251][T22379] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.854961][ T9401] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1347.855001][ T9401] usb 5-1: config 0 has no interface number 0 [ 1347.855033][ T9401] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1348.005524][ T9401] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1348.005560][ T9401] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1348.005583][ T9401] usb 5-1: Product: syz [ 1348.005601][ T9401] usb 5-1: SerialNumber: syz [ 1348.007772][ T9401] usb 5-1: config 0 descriptor?? [ 1348.049885][ T9401] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 1348.126878][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.126989][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.131711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1348.218792][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.218923][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.224756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1348.288888][T20655] usb 5-1: USB disconnect, device number 31 [ 1348.452653][T22707] loop0: detected capacity change from 0 to 512 [ 1348.474492][T22707] EXT4-fs (loop0): Ignoring removed nobh option [ 1348.475410][T22707] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1348.505707][T22707] EXT4-fs error (device loop0): __ext4_iget:4912: inode #11: block 1: comm syz.0.23552: invalid block [ 1348.506285][T22707] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.23552: couldn't read orphan inode 11 (err -117) [ 1348.506624][T22707] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,debug_want_extra_isize=0x0000000000000004,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 1349.962094][T22761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23571'. [ 1350.893868][T22787] loop0: detected capacity change from 0 to 4096 [ 1350.992113][T22796] loop1: detected capacity change from 0 to 16 [ 1351.058782][T22787] ntfs: volume version 3.1. [ 1351.088828][T22796] erofs: (device loop1): mounted with root inode @ nid 36. [ 1351.145973][T22752] loop7: detected capacity change from 0 to 40427 [ 1351.148990][T22796] overlayfs: upper fs is r/o, try multi-lower layers mount [ 1351.161087][T22787] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because this attribute type is not defined on the NTFS volume. Possible corruption! You should run chkdsk! [ 1351.216110][T22752] F2FS-fs (loop7): Small segment_count (9 < 1 * 24) [ 1351.274236][T22775] loop5: detected capacity change from 0 to 32768 [ 1351.281040][T22752] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1351.314024][T22787] ntfs: (device loop0): ntfs_prepare_file_for_write(): Cannot perform write to inode 0x43, attribute type 0x80, because extending the allocation failed (error 5). [ 1351.439922][T22752] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1351.675860][T22752] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1351.747585][T22752] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1352.119445][T22379] attempt to access beyond end of device [ 1352.119445][T22379] loop7: rw=2049, want=45104, limit=40427 [ 1352.576351][T22839] netlink: 72 bytes leftover after parsing attributes in process `syz.5.23599'. [ 1352.607482][T22838] loop0: detected capacity change from 0 to 2048 [ 1352.644515][T22839] netlink: 16 bytes leftover after parsing attributes in process `syz.5.23599'. [ 1352.676263][T22839] netlink: 72 bytes leftover after parsing attributes in process `syz.5.23599'. [ 1352.742500][T22838] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1352.801430][T22838] NILFS (loop0): mounting unchecked fs [ 1352.868989][ T4344] udevd[4344]: incorrect nilfs2 checksum on /dev/loop0 [ 1352.903838][T22838] NILFS (loop0): recovery complete [ 1352.943419][T22849] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1353.056662][T22846] loop5: detected capacity change from 0 to 4096 [ 1353.069135][T22814] loop1: detected capacity change from 0 to 32768 [ 1353.163951][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.551929][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.850896][T22899] netlink: 16 bytes leftover after parsing attributes in process `syz.7.23620'. [ 1353.941983][T22901] loop1: detected capacity change from 0 to 512 [ 1353.973951][T22907] overlayfs: unrecognized mount option "\" or missing value [ 1354.071364][T22911] netlink: 104 bytes leftover after parsing attributes in process `syz.7.23625'. [ 1354.225328][T22922] loop7: detected capacity change from 0 to 2048 [ 1354.229682][T22901] EXT4-fs (loop1): mounted filesystem without journal. Opts: dax=never,bsddf,,errors=continue. Quota mode: writeback. [ 1354.338902][T22922] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 1354.390908][T22922] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1354.478643][T22936] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.23621: invalid size [ 1354.587863][ C0] vkms_vblank_simulate: vblank timer overrun [ 1354.594537][T22944] netlink: 'syz.0.23634': attribute type 1 has an invalid length. [ 1354.596711][T22945] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1354.622088][T21592] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1354.754793][T22953] loop0: detected capacity change from 0 to 128 [ 1354.834337][T22957] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1354.844593][T22957] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1354.853656][T22957] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1354.862526][T22957] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1354.995240][ T4185] sysv_free_block: flc_count > flc_size [ 1355.012091][ T4185] sysv_free_block: flc_count > flc_size [ 1355.022504][ T4185] sysv_free_block: flc_count > flc_size [ 1355.035511][ T4185] sysv_free_block: flc_count > flc_size [ 1355.049474][ T4185] sysv_free_block: flc_count > flc_size [ 1355.050487][T21592] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1355.058519][ T4185] sysv_free_block: flc_count > flc_size [ 1355.102175][ T4185] sysv_free_block: flc_count > flc_size [ 1355.146249][ T4185] sysv_free_block: flc_count > flc_size [ 1355.151875][ T4185] sysv_free_block: flc_count > flc_size [ 1355.231801][ T4185] sysv_free_block: flc_count > flc_size [ 1355.260037][ T4185] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1355.397937][T22980] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23648'. [ 1355.481909][T22980] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23648'. [ 1355.530926][T22980] netlink: 52 bytes leftover after parsing attributes in process `syz.7.23648'. [ 1356.193084][T23013] netlink: 'syz.4.23661': attribute type 4 has an invalid length. [ 1356.577533][T23028] netlink: 56 bytes leftover after parsing attributes in process `syz.0.23666'. [ 1356.611000][T23028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23666'. [ 1356.658012][T23033] netlink: 'syz.7.23669': attribute type 3 has an invalid length. [ 1356.721563][T22983] loop5: detected capacity change from 0 to 32768 [ 1356.858188][T22983] JBD2: Ignoring recovery information on journal [ 1357.136743][T22983] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1357.281327][T23040] loop0: detected capacity change from 0 to 32768 [ 1357.462629][T23053] loop1: detected capacity change from 0 to 8192 [ 1357.509982][T23040] XFS (loop0): Mounting V5 Filesystem [ 1357.519341][ T26] audit: type=1800 audit(1290.374:77): pid=23053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.23676" name="file1" dev="loop1" ino=1048767 res=0 errno=0 [ 1357.595312][T23078] x_tables: ip6_tables: NETMAP target: only valid in nat table, not syz1 [ 1357.719918][T19416] ocfs2: Unmounting device (7,5) on (node local) [ 1357.823651][T23040] XFS (loop0): Ending clean mount [ 1358.013194][ T4185] XFS (loop0): Unmounting Filesystem [ 1358.149528][ C0] vkms_vblank_simulate: vblank timer overrun [ 1358.395109][T23100] loop5: detected capacity change from 0 to 2048 [ 1358.470217][T23102] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 1358.537941][T23102] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1358.560855][T23102] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1358.582243][T23100] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1358.641602][T23102] comedi comedi3: 8255: I/O port conflict (0xf0000,4) [ 1358.663142][T23102] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1358.726250][T23102] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1358.745202][T23102] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 1358.753067][T23102] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1358.759998][T23102] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 1358.766865][T23102] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1358.775066][T23102] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 1358.784746][T23102] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 1358.792548][T23102] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1358.807898][T23102] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1358.825772][T23102] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1358.885441][T23102] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1358.940947][T23102] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 1358.947530][T23102] comedi comedi3: 8255: I/O port conflict (0x402,4) [ 1358.958943][ T26] audit: type=1326 audit(1291.712:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23125 comm="syz.7.23699" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f591d5cceb9 code=0x0 [ 1359.803211][T23122] loop5: detected capacity change from 0 to 32768 [ 1359.860123][T23122] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.23697 (23122) [ 1359.954486][T23122] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1359.996161][T23122] BTRFS info (device loop5): using free space tree [ 1360.007770][T23165] tipc: Invalid UDP bearer configuration [ 1360.007808][T23165] tipc: Enabling of bearer rejected, failed to enable media [ 1360.033931][T23122] BTRFS info (device loop5): has skinny extents [ 1360.380307][T23196] loop1: detected capacity change from 0 to 1024 [ 1360.412881][T23122] BTRFS info (device loop5): enabling ssd optimizations [ 1360.591026][T19555] hfsplus: b-tree write err: -5, ino 4 [ 1360.844363][T23221] loop7: detected capacity change from 0 to 1024 [ 1360.987237][T23221] EXT4-fs (loop7): Ignoring removed orlov option [ 1361.048119][T23221] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,max_dir_size_kb=0x0000000000010000,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1361.415369][T23238] loop7: detected capacity change from 0 to 1764 [ 1361.472914][T23240] loop0: detected capacity change from 0 to 1024 [ 1361.545385][T23240] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1361.573485][ T4274] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 1361.581761][T23240] EXT4-fs (loop0): group descriptors corrupted! [ 1361.630366][T23238] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1361.816327][T23223] loop1: detected capacity change from 0 to 32768 [ 1361.896709][T23223] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.23728 (23223) [ 1362.085342][T13013] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1362.213953][T23259] loop0: detected capacity change from 0 to 512 [ 1362.341326][T23259] EXT4-fs (loop0): mounted filesystem without journal. Opts: dax=never,bsddf,,errors=continue. Quota mode: writeback. [ 1362.433001][T23269] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.23740: invalid size [ 1362.543854][T13013] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1362.563960][T23261] loop7: detected capacity change from 0 to 32768 [ 1362.575687][T13013] usb 5-1: New USB device found, idVendor=056a, idProduct=012c, bcdDevice= 0.00 [ 1362.595944][T13013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.651863][T13013] usb 5-1: config 0 descriptor?? [ 1362.833744][T23261] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop7 scanned by syz.7.23741 (23261) [ 1362.853865][T23223] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1362.879101][T23223] BTRFS info (device loop1): using free space tree [ 1362.916966][T23223] BTRFS info (device loop1): has skinny extents [ 1362.960617][T23261] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 1363.006607][T23261] BTRFS info (device loop7): using free space tree [ 1363.014228][T23261] BTRFS info (device loop7): has skinny extents [ 1363.135130][T23223] BTRFS info (device loop1): enabling ssd optimizations [ 1363.188480][T13013] wacom 0003:056A:012C.001C: unknown main item tag 0x0 [ 1363.206817][T13013] wacom 0003:056A:012C.001C: hidraw0: USB HID v0.00 Device [HID 056a:012c] on usb-dummy_hcd.4-1/input0 [ 1363.304831][T23261] BTRFS info (device loop7): enabling ssd optimizations [ 1363.417441][T27847] usb 5-1: USB disconnect, device number 32 [ 1363.608633][T23325] fido_id[23325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1363.711012][T23333] tipc: Started in network mode [ 1363.715965][T23333] tipc: Node identity , cluster identity 4711 [ 1364.112453][T23341] loop5: detected capacity change from 0 to 4096 [ 1364.237658][T23341] ntfs: volume version 3.1. [ 1364.299636][T23341] ntfs: (device loop5): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because this attribute type is not defined on the NTFS volume. Possible corruption! You should run chkdsk! [ 1364.404598][T23341] ntfs: (device loop5): ntfs_prepare_file_for_write(): Cannot perform write to inode 0x43, attribute type 0x80, because extending the allocation failed (error 5). [ 1364.580823][T23371] loop1: detected capacity change from 0 to 2048 [ 1364.624440][T23374] exfat: Deprecated parameter 'namecase' [ 1364.755203][T23374] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1364.781388][ T4344] udevd[4344]: incorrect nilfs2 checksum on /dev/loop1 [ 1364.846802][T23371] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1364.891772][ T4342] udevd[4342]: incorrect nilfs2 checksum on /dev/loop1 [ 1364.997551][T23371] attempt to access beyond end of device [ 1364.997551][T23371] loop1: rw=524288, want=33554432, limit=2048 [ 1365.009269][T23386] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1365.596229][T23405] program syz.5.23776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1365.842443][T23417] set_capacity_and_notify: 1 callbacks suppressed [ 1365.842460][T23417] loop1: detected capacity change from 0 to 1024 [ 1365.997342][T23427] netlink: 'syz.5.23771': attribute type 10 has an invalid length. [ 1366.039985][T23427] batman_adv: batadv0: Adding interface: team0 [ 1366.060882][T23427] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.176541][ T154] hfsplus: b-tree write err: -5, ino 4 [ 1366.296202][T23427] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1366.317583][T23372] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1366.366589][T23432] netlink: 'syz.5.23771': attribute type 10 has an invalid length. [ 1366.442874][T23432] __nla_validate_parse: 2 callbacks suppressed [ 1366.442895][T23432] netlink: 2 bytes leftover after parsing attributes in process `syz.5.23771'. [ 1366.467527][T23432] device team0 entered promiscuous mode [ 1366.473174][T23432] device team_slave_0 entered promiscuous mode [ 1366.503505][T23432] device team_slave_1 entered promiscuous mode [ 1366.519178][T23432] 8021q: adding VLAN 0 to HW filter on device team0 [ 1366.534218][T23432] batman_adv: batadv0: Interface activated: team0 [ 1366.565776][T23432] batman_adv: batadv0: Interface deactivated: team0 [ 1366.582472][T23454] loop7: detected capacity change from 0 to 16 [ 1366.592055][T23432] batman_adv: batadv0: Removing interface: team0 [ 1366.604306][T23432] bridge0: port 3(team0) entered blocking state [ 1366.611159][T23432] bridge0: port 3(team0) entered disabled state [ 1366.620819][T23432] bridge0: port 3(team0) entered blocking state [ 1366.627172][T23432] bridge0: port 3(team0) entered forwarding state [ 1366.628128][T23372] usb 5-1: Using ep0 maxpacket: 16 [ 1366.643709][T23453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23778'. [ 1366.675253][T23453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23778'. [ 1366.695819][T23453] netlink: 'syz.0.23778': attribute type 6 has an invalid length. [ 1366.703996][T23454] erofs: (device loop7): mounted with root inode @ nid 36. [ 1366.744377][T23453] netlink: 'syz.0.23778': attribute type 5 has an invalid length. [ 1366.777494][T23372] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.795894][T23372] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1366.879141][T23460] loop7: detected capacity change from 0 to 256 [ 1366.947169][T23460] FAT-fs (loop7): Directory bread(block 64) failed [ 1366.993865][T23460] FAT-fs (loop7): Directory bread(block 65) failed [ 1367.002825][T23372] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1367.011934][T23372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.022704][T23460] FAT-fs (loop7): Directory bread(block 66) failed [ 1367.031634][T23465] netlink: 'syz.1.23783': attribute type 4 has an invalid length. [ 1367.044878][T23460] FAT-fs (loop7): Directory bread(block 67) failed [ 1367.060050][T23372] usb 5-1: Product: syz [ 1367.064293][T23372] usb 5-1: Manufacturer: syz [ 1367.082333][T23460] FAT-fs (loop7): Directory bread(block 68) failed [ 1367.085847][T23372] usb 5-1: SerialNumber: syz [ 1367.100185][T23465] netlink: 3649 bytes leftover after parsing attributes in process `syz.1.23783'. [ 1367.114549][T23460] FAT-fs (loop7): Directory bread(block 69) failed [ 1367.140605][T23460] FAT-fs (loop7): Directory bread(block 70) failed [ 1367.172782][T23460] FAT-fs (loop7): Directory bread(block 71) failed [ 1367.180592][T23460] FAT-fs (loop7): Directory bread(block 72) failed [ 1367.235359][T23460] FAT-fs (loop7): Directory bread(block 73) failed [ 1367.464501][T23481] loop5: detected capacity change from 0 to 764 [ 1367.551865][T23481] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 1367.568684][T23481] UDF-fs: Scanning with blocksize 512 failed [ 1367.621377][T23481] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 1367.643367][T23372] usb 5-1: cannot find UAC_HEADER [ 1367.650667][T23481] UDF-fs: Scanning with blocksize 1024 failed [ 1367.685138][T23372] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1367.707464][T23481] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 1367.714956][T23481] UDF-fs: Scanning with blocksize 2048 failed [ 1367.783516][T23481] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 1367.796566][ T4342] udevd[4342]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1367.814592][T23481] UDF-fs: Scanning with blocksize 4096 failed [ 1367.896964][ T1325] usb 5-1: USB disconnect, device number 33 [ 1367.918438][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.086945][T23470] loop0: detected capacity change from 0 to 32768 [ 1368.097606][T23499] loop5: detected capacity change from 0 to 256 [ 1368.194104][T23470] (syz.0.23782,23470,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1368.265748][T23470] (syz.0.23782,23470,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1368.347272][T23506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23797'. [ 1368.401212][T23470] JBD2: Ignoring recovery information on journal [ 1368.557706][T23470] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1368.590387][T23513] loop5: detected capacity change from 0 to 1024 [ 1368.608075][T23516] loop1: detected capacity change from 0 to 64 [ 1368.655002][ T144] ocfs2: Finishing quota recovery on device (7,0) for slot 0 [ 1368.679170][T23484] loop7: detected capacity change from 0 to 32768 [ 1368.973721][ T4274] hfsplus: b-tree write err: -5, ino 8 [ 1368.983314][T23484] JBD2: Ignoring recovery information on journal [ 1369.064718][T23533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23805'. [ 1369.077916][T23533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23805'. [ 1369.183169][T23484] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1369.202925][T23470] [ 1369.205300][T23470] ====================================================== [ 1369.212436][T23470] WARNING: possible circular locking dependency detected [ 1369.219537][T23470] syzkaller #0 Not tainted [ 1369.223975][T23470] ------------------------------------------------------ [ 1369.231104][T23470] syz.0.23782/23470 is trying to acquire lock: [ 1369.237385][T23470] ffff888060db4e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x307/0x770 [ 1369.246750][T23470] [ 1369.246750][T23470] but task is already holding lock: [ 1369.254230][T23470] ffff888062e60990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x134c/0x15c0 [ 1369.263623][T23470] [ 1369.263623][T23470] which lock already depends on the new lock. [ 1369.263623][T23470] [ 1369.274056][T23470] [ 1369.274056][T23470] the existing dependency chain (in reverse order) is: [ 1369.283104][T23470] [ 1369.283104][T23470] -> #2 (jbd2_handle){++++}-{0:0}: [ 1369.290440][T23470] jbd2_journal_lock_updates+0xa4/0x390 [ 1369.296598][T23470] __ocfs2_flush_truncate_log+0x2ba/0x1110 [ 1369.303177][T23470] ocfs2_truncate_log_shutdown+0x13e/0x2f0 [ 1369.309921][T23470] ocfs2_dismount_volume+0x1e9/0x8a0 [ 1369.315796][T23470] generic_shutdown_super+0x130/0x300 [ 1369.317529][T23533] netlink: 'syz.1.23805': attribute type 6 has an invalid length. [ 1369.321722][T23470] kill_block_super+0x7c/0xe0 [ 1369.321749][T23470] deactivate_locked_super+0x93/0xf0 [ 1369.321776][T23470] cleanup_mnt+0x42d/0x4e0 [ 1369.321796][T23470] task_work_run+0x125/0x1a0 [ 1369.321817][T23470] exit_to_user_mode_loop+0x10f/0x130 [ 1369.321836][T23470] exit_to_user_mode_prepare+0xee/0x180 [ 1369.321859][T23470] syscall_exit_to_user_mode+0x16/0x40 [ 1369.321880][T23470] do_syscall_64+0x58/0xa0 [ 1369.374280][T23470] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1369.380829][T23470] [ 1369.380829][T23470] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 1369.391481][T23470] down_write+0x38/0x60 [ 1369.396200][T23470] ocfs2_xattr_set+0xb92/0x13e0 [ 1369.401616][T23470] __vfs_setxattr+0x3e0/0x420 [ 1369.406852][T23470] __vfs_setxattr_noperm+0x129/0x5e0 [ 1369.412701][T23470] vfs_setxattr+0x167/0x2e0 [ 1369.417850][T23470] setxattr+0x36c/0x390 [ 1369.422666][T23470] path_setxattr+0x147/0x290 [ 1369.427848][T23470] __x64_sys_lsetxattr+0xb4/0xd0 [ 1369.433334][T23470] do_syscall_64+0x4c/0xa0 [ 1369.438305][T23470] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1369.444849][T23470] [ 1369.444849][T23470] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1369.452704][T23470] __lock_acquire+0x2c42/0x7d10 [ 1369.458120][T23470] lock_acquire+0x19e/0x400 [ 1369.463205][T23470] down_read+0x44/0x2e0 [ 1369.467922][T23470] ocfs2_init_acl+0x307/0x770 [ 1369.473167][T23470] ocfs2_mknod+0x15cb/0x2510 [ 1369.478521][T23470] ocfs2_create+0x192/0x420 [ 1369.483674][T23470] path_openat+0x11db/0x2fa0 [ 1369.488935][T23470] do_filp_open+0x1e2/0x410 [ 1369.493994][T23470] do_sys_openat2+0x150/0x4b0 [ 1369.499310][T23470] __x64_sys_openat+0x135/0x160 [ 1369.504715][T23470] do_syscall_64+0x4c/0xa0 [ 1369.509697][T23470] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1369.516147][T23470] [ 1369.516147][T23470] other info that might help us debug this: [ 1369.516147][T23470] [ 1369.526499][T23470] Chain exists of: [ 1369.526499][T23470] &oi->ip_xattr_sem --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> jbd2_handle [ 1369.526499][T23470] [ 1369.542283][T23470] Possible unsafe locking scenario: [ 1369.542283][T23470] [ 1369.549768][T23470] CPU0 CPU1 [ 1369.555270][T23470] ---- ---- [ 1369.560667][T23470] lock(jbd2_handle); [ 1369.564614][T23484] (syz.7.23789,23484,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 1369.564766][T23470] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 1369.591543][T23470] lock(jbd2_handle); [ 1369.598175][T23470] lock(&oi->ip_xattr_sem); [ 1369.602889][T23470] [ 1369.602889][T23470] *** DEADLOCK *** [ 1369.602889][T23470] [ 1369.611197][T23470] 8 locks held by syz.0.23782/23470: [ 1369.616510][T23470] #0: ffff88805b0e8460 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1369.625803][T23470] #1: ffff888060db5108 (&type->i_mutex_dir_key#24){++++}-{3:3}, at: path_openat+0x803/0x2fa0 [ 1369.636135][T23470] #2: ffff888045c23488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 1369.649947][T23470] #3: ffff888045c25f48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 1369.663773][T23470] #4: ffff888045c25108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x11c/0x25f0 [ 1369.677770][T23470] #5: ffff88805b0e8650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xf5a/0x2510 [ 1369.687076][T23470] #6: ffff88805fe1cce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 1369.697918][T23470] #7: ffff888062e60990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x134c/0x15c0 [ 1369.707637][T23470] [ 1369.707637][T23470] stack backtrace: [ 1369.713563][T23470] CPU: 1 PID: 23470 Comm: syz.0.23782 Not tainted syzkaller #0 [ 1369.721146][T23470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1369.731238][T23470] Call Trace: [ 1369.734631][T23470] [ 1369.737795][T23470] dump_stack_lvl+0x188/0x250 [ 1369.742514][T23470] ? load_image+0x400/0x400 [ 1369.747056][T23470] ? show_regs_print_info+0x20/0x20 [ 1369.752299][T23470] ? print_circular_bug+0x12b/0x1a0 [ 1369.757620][T23470] check_noncircular+0x296/0x330 [ 1369.762600][T23470] ? add_chain_block+0x940/0x940 [ 1369.768102][T23470] ? lockdep_lock+0xf1/0x1f0 [ 1369.772953][T23470] ? mark_lock+0x94/0x320 [ 1369.777461][T23470] ? _find_first_zero_bit+0xce/0xf0 [ 1369.782816][T23470] __lock_acquire+0x2c42/0x7d10 [ 1369.787724][T23470] ? verify_lock_unused+0x140/0x140 [ 1369.792972][T23470] ? __ocfs2_mknod_locked+0xc1a/0x1500 [ 1369.798473][T23470] ? __lock_acquire+0x7d10/0x7d10 [ 1369.803538][T23470] ? do_raw_spin_lock+0x128/0x2f0 [ 1369.808610][T23470] ? __rwlock_init+0x140/0x140 [ 1369.813414][T23470] lock_acquire+0x19e/0x400 [ 1369.817964][T23470] ? ocfs2_init_acl+0x307/0x770 [ 1369.822851][T23470] ? __might_sleep+0xf0/0xf0 [ 1369.827491][T23470] ? read_lock_is_recursive+0x10/0x10 [ 1369.832913][T23470] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 1369.839548][T23470] ? rcu_lock_release+0x5/0x20 [ 1369.844376][T23470] down_read+0x44/0x2e0 [ 1369.848568][T23470] ? ocfs2_init_acl+0x307/0x770 [ 1369.853463][T23470] ocfs2_init_acl+0x307/0x770 [ 1369.858176][T23470] ? ocfs2_mknod_locked+0x155/0x290 [ 1369.863417][T23470] ? ocfs2_acl_chmod+0x330/0x330 [ 1369.868503][T23470] ? dquot_alloc_inode+0x82e/0x9c0 [ 1369.873750][T23470] ? ocfs2_block_signals+0x97/0xe0 [ 1369.879169][T23470] ? ocfs2_init_security_get+0x135/0x1a0 [ 1369.884845][T23470] ocfs2_mknod+0x15cb/0x2510 [ 1369.889486][T23470] ? ocfs2_mkdir+0x420/0x420 [ 1369.894117][T23470] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1369.900048][T23470] ? __wake_up_common+0x5b/0x4e0 [ 1369.905149][T23470] ? ocfs2_inode_unlock+0xa1/0x140 [ 1369.910298][T23470] ? __lock_acquire+0x7d10/0x7d10 [ 1369.915367][T23470] ? __rwlock_init+0x140/0x140 [ 1369.920167][T23470] ? _raw_spin_unlock+0x24/0x40 [ 1369.925065][T23470] ? do_raw_spin_unlock+0x11d/0x230 [ 1369.930305][T23470] ? rcu_is_watching+0x11/0xa0 [ 1369.935108][T23470] ? ocfs2_lookup+0x490/0x950 [ 1369.939996][T23470] ocfs2_create+0x192/0x420 [ 1369.944539][T23470] ? ocfs2_update_inode_fsync_trans+0x200/0x200 [ 1369.950817][T23470] ? ocfs2_lookup+0x950/0x950 [ 1369.955614][T23470] ? inode_permission+0xef/0x480 [ 1369.960674][T23470] ? bpf_lsm_inode_create+0x5/0x10 [ 1369.965829][T23470] ? security_inode_create+0xb3/0x100 [ 1369.971257][T23470] ? ocfs2_lookup+0x950/0x950 [ 1369.975979][T23470] path_openat+0x11db/0x2fa0 [ 1369.980621][T23470] ? do_filp_open+0x410/0x410 [ 1369.985357][T23470] do_filp_open+0x1e2/0x410 [ 1369.989903][T23470] ? vfs_tmpfile+0x300/0x300 [ 1369.994835][T23470] ? _raw_spin_unlock+0x24/0x40 [ 1369.999832][T23470] ? alloc_fd+0x598/0x630 [ 1370.004201][T23470] do_sys_openat2+0x150/0x4b0 [ 1370.008915][T23470] ? __lock_acquire+0x7d10/0x7d10 [ 1370.013979][T23470] ? do_sys_open+0xe0/0xe0 [ 1370.018437][T23470] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1370.024457][T23470] ? lock_chain_count+0x20/0x20 [ 1370.029355][T23470] ? vtime_user_exit+0x2c8/0x3e0 [ 1370.034331][T23470] __x64_sys_openat+0x135/0x160 [ 1370.039214][T23470] do_syscall_64+0x4c/0xa0 [ 1370.043760][T23470] ? clear_bhb_loop+0x30/0x80 [ 1370.048623][T23470] ? clear_bhb_loop+0x30/0x80 [ 1370.053342][T23470] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1370.059278][T23470] RIP: 0033:0x7fdf08f66eb9 [ 1370.063848][T23470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1370.083853][T23470] RSP: 002b:00007fdf071c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1370.092305][T23470] RAX: ffffffffffffffda RBX: 00007fdf091e1fa0 RCX: 00007fdf08f66eb9 [ 1370.100324][T23470] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1370.108338][T23470] RBP: 00007fdf08fd4c1f R08: 0000000000000000 R09: 0000000000000000 [ 1370.116787][T23470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1370.124944][T23470] R13: 00007fdf091e2038 R14: 00007fdf091e1fa0 R15: 00007fff9bcb4448 [ 1370.132962][T23470] [ 1370.144303][T22379] ocfs2: Unmounting device (7,7) on (node local) [ 1370.228460][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 1370.238855][T23544] [U]  [ 1378.847172][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!