last executing test programs: 5m21.939565259s ago: executing program 2 (id=2907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000020101010000000000000000020000002400018014000180080001007f00"], 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 5m21.584049295s ago: executing program 2 (id=2912): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f00000010c0)) 5m21.445303637s ago: executing program 2 (id=2914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@setlink={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFLA_PROTO_DOWN={0x5}, @IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_LINK_NETNSID={0x8}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_EXT_MASK={0x8}, @IFLA_PROMISCUITY={0x8}]}, 0x5c}}, 0x0) 5m21.137565142s ago: executing program 2 (id=2920): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@dioread_lock}, {}, {@noauto_da_alloc}]}, 0xfe, 0x564, &(0x7f0000001180)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 5m20.545306682s ago: executing program 2 (id=2927): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='loginuid\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) 5m18.382207175s ago: executing program 2 (id=2958): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x48}}, 0x0) 5m18.130252499s ago: executing program 32 (id=2958): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x48}}, 0x0) 2m10.262815299s ago: executing program 4 (id=5547): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2m7.65153357s ago: executing program 4 (id=5593): prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2m7.525525392s ago: executing program 4 (id=5595): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0x6, @private0, 0x5}, {0xa, 0x4e23, 0x5, @mcast2, 0x56500}, 0xfffe, {[0x4, 0x3, 0x3, 0x1, 0x3, 0xffffffff, 0x9, 0xfffffffa]}}, 0x5c) 2m7.306976626s ago: executing program 4 (id=5599): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0xc02, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@keep_last_dots}, {@keep_last_dots}, {@namecase}, {@errors_continue}, {}]}, 0x1, 0x1524, &(0x7f0000007640)="$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") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) 2m6.889601972s ago: executing program 4 (id=5604): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8929, &(0x7f0000000840)={'wlan1\x00'}) 2m6.360645101s ago: executing program 4 (id=5612): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20854}, 0x0) 2m6.062379506s ago: executing program 33 (id=5612): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20854}, 0x0) 1m53.967373606s ago: executing program 6 (id=5615): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0xc02, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@keep_last_dots}, {@keep_last_dots}, {@namecase}, {@errors_continue}, {}]}, 0x1, 0x1524, &(0x7f0000007640)="$eJzs3AuYjtXaOPD7Xms9Y0h6m+QwrLXuhzc5LJMkOSTJIUmSJMkpIWmSLQmJIaekIQnJYUgOQ0gOE5PG+Xw+JCRJkyQhOSXrf0342+3a3977233bd31z/67ruaz7Xc+9nvW89/u8z8HMfNdlaM3Gtao1JCL4t+DFf5IAIBYABgLAdQAQAEC5uHJxWf05JSb9exthf65HUq/2DNjVxPXP3rj+2RvXP3vj+mdvXP/sjeufvXH9szeuP2PZ2ebpBa/nJfsu/Pw/O+Pz//8hmaXHfrW29I1dAWL+2RSuf/bG9f8/K/hnVuL6Z29c/+wq9mpPgP0vwMd/dpDj7/Zw/bM3rj9j2dnVfv58tReIZO/34Gp//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZQ9n/BUKAC63r/a8GGOMMcYYY4wx9ufxOa72DBhjjDHGGGOMMfY/D0GABAUBxEAOiIWckAsEAFwLeeA6iMD1EAc3QF64EfJBfigABSEeCkFh0GAgBghCKAJFIQo3QTG4GYpDCSgJpcBBaUiAW6AM3Apl4TYoB7dDebgDKkBFqASV4U6oAndBVbgbqsE9UB1qQE2oBfdCbbgP6sD9UBcegHrwINSHh6ABPAwN4RFoBI9CY3gMmsDj0BSaQXNoAS3/W/kvQQ94GXpCL0iC3tAHXoG+0A/6wwAYCK/CIHgNBsPrkAxDYCi8AcPgTRgOb8EIGAmj4G0YDe/AGBgL42A8pMAEmAjvwiR4DybDFJgK0yAVpsMMeB9mwiyYDR/AHPgQ5sI8mA8LIA0+goWwCNLhY1gMn0AGLIGlsAyWwwpYCatgNayBtbAO1sMG2AibYDNsga2wDbbDDtgJn8Iu+Ax2wx7YC5/DPvjiX8w//Tf5XREQUKBAhQpjMAZjMRZzYS7MjbkxD+bBCEYwDuMwL+bFfJgPC2ABjMd4LIyF0aBBQsIiWASjGMViWAyLY3EsiSXRocMETMAyeCuWxbJYDstheSyPFbAiVsTKWBmrYBWsilWxGlbD6lgda2JNvBfvxd5YB+tgXayL9bDe5cdT2BAbYiNshI2xMTbBJtgUm2JzbI4tsSW2wlbYGltjW2yL7bAdtsf2mIiJ2AE7YEfsiJ2wE3bGztgFu2BX7IbdMl/KAfgyvoy9sLrojX2wD/bF5Bz9cQAOwFdxEL6Gr+HrmIxDcCi+gW/gmzgcT+EIHImjcBRWEe/gGByLJMZjCqbgRJyIk3ASTsYpOAWnYSpOxxk4A2fiLJyFH+Ac/BA/xHk4DxdgGqbhQlyE6ZiOi/E0ZuASXIrLcDmuwOW4ClfjKlyL63AtbsANuAk34RbcgttwG+7AHfgpKgD8DPfgHkzGfbgP9+N+PIAH8CAexEzMxEN4CA/jYTyCR/AoHsVjeBxP4HE8iSfxFJ7GM3gGz+E5PI8vxH/T6NMSa5JBZFFCiRgRI2JFrMglconcIrfII/KIiIiIOBEn8oq8Ip/IJwqIAiJexIvCorAwwggSYQwAiKiIimKimCguiouSoqRwwokEkSDKiDKirCgryonbRXlxh6ggKoo2rrKoLKqItq6quFtUE9VEdVFD1BS1RC1RW9QWdUQdUVfUFfVEPVFfPCQaiN7YHx8RWZVpLIZgEzEUm4pmQl76BmslhmNr0Ua0FU+JkTgC24tWLlE8KzqIMdhR/EWMxedFZzEeu4gXRVfRTXQXL4keorXrKXqJydhb9BHTsK/oJ/qLAWIm1hAf4JycNcXrIlkMEUPFG2IBvimGi7fECDFSjBJvi9HiHTFGjBXjxHiRIiaIieJdMUm8JyaLKWKqmCZSxXQxQ7wvZopZYrb4QMwRH4q5Yp6YLxaINPGRWCgWiXTxsVgsPhEZYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih9gpPhW7xGdit9gj9orPxT7xhdgvvhQHxFfioPhaZIpvxCHxrTgsvhNHxPfiqPhBHBPHxQnxozgpfhKnxGlxRpwV58TP4rz4RVwQXoBEKaSUSgYyRuaQsTKnzCWvkbllcOndvV7GyRtkXnmjzCfzywKyoIyXhWRhqaWRVpIMZRFZVEblTbKYvFkWlyVkSVlKOllaJshbZBl5qywrb5Pl5O2yvLxDVpAVZSVZWd4pq8i7JEQubqO6rCFrylryXpkE98k68n5ZVz4g68kHZX35kGwgH5YN5SOykXxUNpaPySbycdlUNpPNZQvZUj4hW8knZWvZRraVT8l28mnZXj4jE+WzsoP0lz4iz8vO8gXZRb4ou8pusrv8RV6QXvaUvST0BtlHviL7yn6yvxwgB8pX5SD5mhwsX5fJcogcKt+Qw+Sbcrh8S46QI+Uo+bYcLd+RY+RYOU6Olylygpwo35WT5Htyspwip8ppMlVOl/0vjTRbyn+Y/+4f5A/+deub5Ga5RW6V2+R2uUPulJ/KXXKX3C13y71yr9wn98n9cr88IA/Ig/KgzJSZ8pA8JA/Lw/KIPCKPyqPymDwuz8of5Un5kzwlT8vT8qw8J8/J85feA1CohJJKqUDFqBwqVuVUudQ1Kre6VuVR16mIul7FqRtUXnWjyqfyqwKqoIpXhVRhpZVRVpEKVRFVVEXVTXjpA6NKqlLKqdIqQd3yr+SrYupmVVyV+E3+5fkl/Z35tVQtVSvVSrVWrVVb1Va1U+1Ue9VeJapE1UF1UB1VR9VJdVKdVWfVRXVRXVVX1V11Vz1UD9VT9VRJKkn1Ua+ovqqf6q8GqIHqVTVIDVKD1WCVrJLVUDVUDVPD1HA1XI1QI9QoNUqNVqPVGDVGjVPjVIpKURPVRDVJTVKT1WQ1VU1VqSpVzVAz1Ew1U81Ws9UcNUfNVXPVfDVfpak0tVAtVOkqXS1Wi1WGWqKWqGVqmVqhVqhVapVao9aodWqd2qA2qAy1WW1WW9VWtV1tVzvVTrVL7VK71W61V+1V+9Q+tV/tVwfUAXVQHVSZKlMdUofUYXVYHVFH1FF1VB1Tx9QJdUKdVCfVKXVKnVFn1Dl1Tp1X59UFdSHrsi8QgQhUkHWmjQlig9ggV5AryB3kDvIEeYJIEAnigrggb3BjkC/IHxQICgbxQaGgcKADE9hAXCp6NLgpKBbcHBQPSgQlg1KBC0oHCcEtQZng1qBscFtQLrg9KB/cEVQIKgaVgsrBnUGV4K6ganB3UC24J6ge1AhqBrWCe4PawX1BneD+oG7wQFAveDCoHzwUNAgeDhoGjwSNgkeDxsFjQZPg8aBp0CxoHrQIWv6p43t/Kv+TrqfupZN0b91Hv6L76n66vx6gB+pX9SD9mh6sX9fJeogeqt/Qw/Sberh+S4/QI/Uo/bYerd/RY/RYPU6P1yl6gp6o39WT9Ht6sp6ip+ppOlVP1zP0+3qmnqVn6w/0HP2hnqvn6fl6gU7TH+mFepFO1x/rxfoTnaGX6KV6mV6uV+iVepVerdfotXqdXq836I16k96st+itepvernfonfpTvUt/pnfrPXqv/lzv01/o/fpLfUB/pQ/qr3Wm/kYf0t/qw/o7fUR/r4/qH/QxfVyf0D/qk/onfUqf1mf0WX1O/6zP61/0Be2zLu6zTu9GGWViTIyJNbEml8llcpvcJo/JYyImYuJMnMlr8pp8Jp8pYAqYeBNvCpvCJgsZMkVMERM1UVPMFDPFTXFT0pQ0zjiTYBJMGVPGlDVlTTlTzpQ35U0FU8FUMpXMneZOc5e5y9xt7jb3mHtMDVPD1DK1TG1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MU9PUNDfNTUvT0rQyrUxr09q0NW1NO9POtDftTaJJNB1MB9PRdDSdTCfT2XQ2XUwX09V0Nd1Nd9PD9DA9TU+TZJJMH9PH9DV9TX/T3ww0A80gM8gMNoNNskk2Q81QM8wMM8PNcDPCjDSjsg4f844ZY8aacWa8STEpZqKZaCaZSWaymWymmqkm1aSaGWaGmWlmmtlmtplj5pi5Zq6Zb+abNJNmFpqFJt2km8VmsckwGWapWWqWm+VmpVlpVpvVZq1Za9bDerPRbDSbzWaz1Ww12812s9PsNLvMLrPb7DZ7zV6zz+wz+81+c8AcMAfNQZNpMs0hc8gcNofNEXPEHDVHzTFzzJwwJ8xJc9KcMqfMGXPGnDP5L50vvYm1OW0ue43Nba+1eex19m/jAragjbeFbGGrbT6b/zexsdYWtyVsSVvKOlvaJthbfhdXsBVtJVvZ3mmr2Lts1d/Fte19to6939a1D9ha9t7fxPXsg7a+fcw2QASwzWwj28I2to/ZJvZx29Q2s81tC9vOPm3b22dson3WdrDP/S5eaBfZ1XaNXWvX2d12jz1jz9rD9jt7zv5se9pedqB91Q6yr9nB9nWbbIf8Lh5l37aj7Tt2jB1rx9nxv4un2mk21U63M+z7dqad9bs4zX5k59h0O9fOs/Ptgl/jrDml24/tYvuJzbABLLXL7HK7wq60q/7/XJfZDXaj3WR32c/sVrvNbrc77M7LF8J2j91rP7f77Bf2kP3WHrBf2YP2iM203/waZ+3fEfu9PWp/sMfscXvC/mhP2p/U5eysff/R/mIvWG+BkIAkKQoohnJQLOWkXHQN5aZrKQ9dRxG6nuLoBspLN1I+yk8FqCDFUyEqTJoMWSIKqQgVpSjdRJenV5JKkaPSlEC3UBm6lcrSbVSObqfydAdVoIpUiSrTnVSF7qKqdDdVo3uoOtWgmlSL7qXadB/VofupLjxA9ehBqk8PUQN6mBrSI9SIHqXG9Bg1ocepKTWj5tSCWtIT1IqepNbUhtrSU9SOnqb29Awl0rPUgZ6jjvQX6kTPU2d6gbrQi9SVulF3eol60MvUk3pREvWmPvQK9aV+1J8G0EB6lQbRazSYXqdkGkJD6Q0aRm/ScHqLRtBIGkVv02h6h8bQWBpH4ymFJtBEepcm0Xs0mabQVJpGqTSdZtD7NJNm0Wz6gObQhzSX5tF8WkBp9BEtpEWUTh/TYvqEMmgJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQTvqUdtFntJv20F76nPbRF7SfvqQD9BUdpK8pk76hQ/QtHabv6Ah973vRD3SMjtMJ+pFO0k90ik7TGTpL5+hnOk+/0AXyBCGGIpShCoMwJswRxoY5w1zhNWHu8NowT3hdGAmvD+PCG8K84Y1hvjB/WCAsGMaHhcLCoQ5NaEMKw7BIWDSMhjeFxcKbw+JhibBkWCp0YekwIbwlLBPeGpYNbwvLhbeH5cM7wgphxfCxByqHd4ZVwrvCquHdYbXwnrB6WCOsGdYK7w1rh/eFdcL7w7rhA2HZ8MGwfvhQ2CB8OGwYPhI2Ch8NG4ePhU3Cx8OmYbOwedgibBk+EbYKnwxbh23CtuFTYbvw6bB9+EyYGD4bdgif+7X/wUV/vz8p7B32CV8JXwm9v1/Ojy6IpkU/ii6MLoqmRz+OLo5+Es2ILokujS6LLo+uiK6Mroqujq6Jro2ui66PbohujG6Kel8rBzh0wkmnXOBiXA4X63K6XO4al9td6/K461zEXe/i3A0ur7vR5XP5XQFX0MW7Qq6w084468iFrogr6qLuJlfM3eyKuxKupCvlnCvtElwL19K1dK3ck661a+PauqfcU+5p97R7xj3jnnUd3HOuo/uL6+Sed53dC+4F96Lr6rq57u4l18NNyHPxmExyfVwf19f1df1dfzfQDXSD3CA32A12yS7ZDXVD3TA3zA13w90IN8KNcqPcaDfajXFj3Dg3zqW4FDfRTXST3CQ32U12U91Ul+pS3Qw3w810M12VWRe3MtfNdfPdfJfm0txCl3XNmO4Wu8Uuw2W4pW6pW+6Wu5VupVvtVru1bq1b79a7jW6j2+w2u61uq9vutrudbqfb5Xa53f66i4O6fW6/2+8OuAPuoPvaZbpv3CH3rTvsvnNH3PfuqPvBHXPH3Qn3ozvpfnKn3Gl3xp1159zP7rz7xV1w3qVEJkQmRt6NTIq8F5kcmRKZGpkWSY1Mj8yIvB+ZGZkVmR35IDIn8mFkbmReZH5kQSQt8lFkYWRRJD3ycWRx5JNIRmRJZGlkWWR5ZEXE+0JbQ1/EF/VRf5Mv5m/2xX0JX9KX8s6X9gn+Fl/G3+rL+tt8OX+7L+/v8BV8RV/JP+6b+ma+uW/hW/onfCv/pG/t2/i2/infzj/t2/tnfKJ/1nfwz/mO/i++k3/ed/Yv+C7+Rd/Vd/Pd/Uu+h3/Z9/S9fJLv7fv4V3xf38/39wP8QP+qH+Rf84P96z7ZD/FD/Rt+mH/TD/dv+RF+pB8V87YfffkWGcb7FD/BT/Tv+kn+PbjbT/FT/TSf6qf7Gf59P9PP8rP9B36O/9DP9fP8fL/Ap/mP/EK/yKf7j/1i/4nP8EsuP1T2K/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v93v8Dv9p36X/8zv9nv8Xv+53+e/8Pv9l/6A/8of9F/7TP+NP+S/9Yf9d/6I/94f9T/4Y/64P+F/9Cf9T/6UP+3P+LP+nP/Zn/e/+Av8O2uMMcYYY/+UCVea4rc9Fx/n9/6DHPFXK/cBgGu3Fcz86/6sK8r1+S62+4n4dhEAeLZXl0cuL9WrJyUlXVo3Q0JQdB7A5f8JyhIDV+Il0BaehkRoA2X+cP79RLdz9A/Gj94OkOuvcmLhSnxl/C8BMOkPxn/iqVELy4dn4v6L8ecBFC96JScnXImXQNtfn6+0gbJ/Z/75W/2D+ef8KgWg9V/l5IYr8ZX5J8CT8Bwk/mZNxhhjjDHGGGPson6iUqfL95+Xf+Lzj+7P49WVnBxwJf5H9+eMMcYYY4wxxhi7+p7v1v2ZJxIT23T61xtV/1tZ/3SjCfxPjcyNP2x4D3D5FQUA/+aAAFkN+Z/ciy3/kW0lXzp0/rZr+VkfwP+OUv4Zjav8xcQYY4wxxhj701256P/t6+pqTYgxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/Tuxq7yNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//8BsgGO") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) 1m53.602730312s ago: executing program 6 (id=5679): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 1m51.332901398s ago: executing program 6 (id=5721): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) sendto$ax25(r0, 0x0, 0x0, 0x20008001, 0x0, 0x0) 1m50.896248564s ago: executing program 34 (id=5721): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) sendto$ax25(r0, 0x0, 0x0, 0x20008001, 0x0, 0x0) 32.556097678s ago: executing program 5 (id=6614): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000025680)=[{{&(0x7f00000205c0)={0xa, 0x4e24, 0xe8, @remote, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000020700)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @dstopts={{0x18, 0x29, 0x37, {0x2c}}}, @hoplimit={{0x18, 0x29, 0x34, 0xe}}, @hoplimit={{0x14, 0x29, 0x34, 0x5c}}], 0x70}}], 0x1, 0x4000800) 32.223974393s ago: executing program 5 (id=6619): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e1f, 0x7, @private1, 0x21}, 0x6) 31.951654117s ago: executing program 5 (id=6623): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x181, 0x0) 31.678979342s ago: executing program 5 (id=6628): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 31.374757027s ago: executing program 5 (id=6631): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="eae535d4c5cd41b584d3bdb8d3fb3e37666220165c8aec9c235bc9af137d4058a50551a5b228bbbcf6cd1275ef3732adfeaebdf711988cbe9d1da671f8bbaac371392e227f548006163fc9aaf3d55e97410ccacb7df3444c03ac4170da3fbc69ae1c8a590318a7a33a774debbcc54bb6d6025bc65458b94791d5a8bcd898b75cce569e2c6fd55928c5084aab22c8196fb436916cff76302fd8c4b69ca674271f5db630ffad103ad9286287759d0d5470d0b54f701a713e8803665b87799065f31bb0cff21d9c109c1fbfffb640facdacd569f158f694c34ffb4c405b186aa90e8be7b47c56e6e439ae953605d89c131c711ff56f0adb96e5ee0d269b4cfc9d089794f60bdd06e845b5ffdccfefee032ecfd92f6cba5920130f685e807f88de4a2e595ea37f39a92dcbaeb2de15dab62a5a199d4666578eb1707e88ebb0b98140fdb62d60005fd6721f18a2054b2ba2ed308813164f8dbc7e1d26a11a707adc6978a25cca2fca5d62e51794447f656b92f8372ebf98934a0bc057b901080da81ef02ccfa18a29c9b82c90fd38eb554b83428948f3608cd8fd5845bed25a0d96b146f09bd4cce20efc1ecc7bf64bd88e7a460b372a298cb776eb1d78cc334da71dc6056b2d1119cdad3af9092a42c184e9d487076399f0be65a442fdc06901089e6b5178ecb57aa4b98ff1f538696e8510551dbb5cbd36b125efa2a3e719f22b96eeec80a178dae9c894a7dd170419c33817baedfc132cde868a1c55192b9c8a332772fc40fed9f6fee1aea0e2001752caeb58afb55ea7c421cd0eb5e6ea301f8e2f6b68484849f5d3e7bd1b4aa865d2cd049dfc773bb4281f5f8dd2a3f1563c8cd3655dd9e391424151dadf7415afb242cb99b9b9541b6780beafc6a8c2c0bd109749dde1e8535040d8d2cda8393abaa6cdae24e13917e867d6d301f6f39619bcbd70acc747e093ef3c22f0b1a8b8a4d8bd11bc19c7102e11a8603d563507423c96d1653a42d02ff1ee390934927f037d2022cbbf86cb605e82e2b6e2c2fa1d523f72b47738f318836defed1f898271bdd4fcbe7863e5aa7c7e468d9bad908de3c6851c696df710da87771840f46e63fc4c3d5d9b13b663ed2fef2e56a8690cdee9e6ac0a9824c9fe458ad29614f9485f9c18caf2d5c229f24a220ab84daa26ddb2a0d4059b43e073b703148d82fe4d91ae24db7224df2ee4e10d596846466d6a62faa9da7d24f9dd1e3b5cc291f4840b6603d1173204a452a9b05a5efcf4f9e09c2a3c38f2fd49322e718ddc8278ea182a359043387705c0be61be7e62ba7bb85dfa0f24400f89087f78d84d2296844944d186fb55045eb016dd3d602c85211d7b19dbebe3247313283da5bcbba09a3a74c590fdce8cdbef49a73b11413a9df4aaefc356e94f838cef801ba2380d7e5fdc8865140311f071c82bc1482c2033b8ad70d08a5a71e1c949f93cd8743b0bd4eefdaf45f5246efcf800444c8e9b8c2a01b76b6eb4e0639ee7381971172c53e165f14946fb56896e40424a3b981d97b4b01504806d797bb9e3405a7326d2ba7bfa6efc923c4c68d0165aea2d80ae953c7e2ec6534d0da7c28bbe255d81097e84254ff7bd065caa84fa7455885e1b28ab7d6243d0f02903860049935a764ebfe5384bdf9ae0b71f1641e457780da2071a84937dd88d2e4aec7ddaab66e335887f555a724ad9692ee996521ccaa35e2358aea1ab6a8c9845af8af552520fdec7ecb635d230074aa532c3efe6677c79b1328451a779501eccb4c11750744cfce16ba2ced0fc6dd2b75a5ff1770f3851c93bcf8850adf496012d94b8dd6a00d1f9f0c96989979b89838a29875072e0b678a2a55338f21625165c350134d7cb9119ac4dcc77f13a153fe6819d1bdc6b357e93531a68813913daf65d2e62d4bd09da6bb16e8d686518f6faff70dc0804b4b6810117d8698a4d27f0482f9adf9be3aae179dbcad90ab1fbd6b1ba15cdc78ee7686bd15a8fe1cf5af00fcc0a6981a77ac5c3485518921a1b4ea90b02e0059c2c71850d517bddc12bd61a5571da765a34b53e5f06a2b8bb122bf9d642f1ad50a0eb7afe34ef6fd2474d25f314adbf276a895b80b8de6e31eaee5fe4544f4709bf6416f26ec52d517dd3a350cb68df6791dc671495e0f056de8b158095b32ec8b43f65b1f3110cf7da37d2383e99a5bd9a0e0d5684a5b15246170bd11909ef22ee740aa5556dbc0f9dacc8ce440c137bf0ec673651067ef1146004701376116986c49b10226141bea12f679c3f53eaea945b1bb92e6c922a85a2221f768ff4f1c188dc82f9e8d947e140f43c4950430f88a47fb15dcd8ef8491ff08d7b287b280eab99e44a7fba6d4fe20fcb2c2cfa1a6f4d59b51755e66a3d9a325a08a286185c2bdac8c8c2910ed3ff8e047f28b2bf1827e0829f8ec8459241300583f1880c96b2e405b253af5f7e9ee91e34c3fa2cd5c53a71bc3b4b1a5741c17a7b73c8e7d3e8ec9e51a90772b8eb38f23fcb9e07eff8b0f68d4f7d4d68bfb8fbc8d90be681166fe5ed220e3a425c65c0e678e8b7470a99d7fccc7a3be07189ee02e1f8c81549b0b8c0113ef602d10d5d2429e8b60fa5aaddd55cb86141609bae35c185c5ad743d0fb0a1244ba6d67755e46073f3d428926c0d9033f8180120deab78a4b42664e36b6723039457195bff897760ede28bf2661a95715dd20bc744ae2a06bcb12ef8b7a373f3a5557f20256446ba95d45b7810d68494f954d1802aa8986279adc368c2365168c0619bc8952ec6ac60840d9968302edb8809d36f6b0c83dc6941193fb8eb2adcef36db70cbe51fd533ee108eaedebc05ab363058feecfb51e294419695019d0ba50a660ecbe3fd1b43ac973141b7e4c423c062f63ad24468ca79740502716b10a823821429d53f34409cc0757587a5de21663c33a8b194c988a3c209cec76b9fc18805649d9cc109635271c968972f4328e561b562ad6c32a71b269718a303ae3635e5b06717152817a11589d3efa0f803d7bb560c08132827333ada867d1a870e2feb3a5e7851363fc333bb681018764aab63eb740978994f62ec3147d4d6a40e099ada0c50c1a5f6a8196549be226508055aef349c76af40596f6c9b7217423628bb6dc07d9382f6d4c87c962ec97bee6384ba3e2522b76ee8619093500a75bcc8fd0fb9bb5093650ec0ca9c867a22260e2668ecf46047e3df87f5d82d992a558e45fb852be616c030edf6aeeae70848403dc1166e6a16776e8660f90449f297224f667563850480f259f6a59039b1a3ea5488971b5e4bcbf380c527c937055dbf4f5a676bacc09f4dde33c50a1286f6024980df1064a9dc4b3f101b129fa1fc141e54f52d4b7322a0cb1c2567205016f5ede0794122fcaa2d11fa77f5fddb3a5f3c7b3d85f0cb6f32cd11d752f755687fb8d93d40711a4c8873ec7c794f0f781bb9c10f9df22fa8f40cca06a48c37e66ea4480fcdd686526be62915ebe36e0bdf7dafd3940f698469ecdc792ca6105a37499a19382247a85bb734e4ba325dd307be8444b5860f99f9dbc7aa28c26747c89041bde3c10c459406786e10792078a52f4bcc32aff61b3f5798cb5dc2927f260f70a41d8e5fc38498b02d0053a86ae408d2efdc1aca9a8508ef9128dfd1fc6a92ba72f940ee469a3111e2cf6c28e77e5a206db6f09139db812fa4e4cfe33c8d184e4763bd8e54e0e473346215b8905d101463dd2ca855747c81c7ffd6c2625e0b59273a9516ec96a5cd8d9078c974980a16b6b87563986ba287821cd41f417792e42dd24e796e313b9cd943f1b9dd6ee35676ff4ad46dbd52db83abbc78f5dad11b6e7bd09a4ace8c246d0a52c36dcb1f0c6025f6ed2868f4b918b6e4e645c63689b7e7bc369dbe44725993b3b43f4572a7136b6e610adc161f45fc307c0937f2338ebc4fd571852b229b80ccd071e1a29c927f88b8b45efa503691758125d29463e742e2ef508babf30ae39ff8bb3a94cfee379f84348c002fdef77b410bee9f47f8119388b3fc159b409b9d9c9af97a4b75c38ca5fc0665cd975df293370de64714cefdd470c1d05a5d3e0f257182889d7a2d797ebf42d6935d1c6b5ef8cd1e2783cef3a316dbd4768510f26ee5b1c481bcac3e1608458d4b5ec6411cb3c921a131140440561931ca51b92231de91d1f950d992eec74c6500a6ecc9e8bc26eec367dba82720accd6dee234db88c132ec649baeef23a16ebb18c8e5b68b95aac984d8322a01b39636baf16911e458242730ea8b22c686bd01bc451e91c34f81fafe88485bbe97ec99299940ca897c3f802d080ecf8ca7e5032c728b8b33f162ab26a6805db239b88103c19ff8160a28268f8f7ac66593c67251fb0f3fa3004d5ad08107f48e0ecc1e4e910554f49ca72e3fd7e212d828fc3c0c40203e4642a3a372f36cfd13a037fd4dd107d6b386659b379c4c41813c8599cb71fd08e4b80f22dbb088d3d0257f30493b1c4d54201a00e049d998d291ecb659e65e2eed9776b367afc9b84b03957701bcbef289b0eea8e5722a63e1bd748d5af209c5ebff7df185d0d68e7ceabbf9a63bba55946cd3b52a09383fd9b9d2d956dc4e5af16986c5600dfd0db89e0e478420557d001c3716350c3e6ba0bbec1e5888435d296d8666f455d22205ea407a95eb60bc68a184e95ae3259f3783c594d3e550c018369df677ea11a37c757a3bd3c19eb257f5e228ad760562e431754a0c620004548962c3a4fb42d49259dafc1b9d365323fa2ace81876728a24f70b06e1198d5f863bfd00a04d5393b3adb15f4191d374c607c7ccb6b7ef84303454b6655392a23dccca41f55cb314a3bfbb637f57178cc9df4fe0645a8dc1ca0386d1fb0ff2cfc3e149991f97264d893fba0b013c027ce753c3e1f907a2988b1507eecd0e5e26368155ff5c55f616ffec31a613be450ee048955a46d68c272aa53f1db6ce199e2765f4be20933799d96f13b3a65f33cb60da1929023ff5d820172c423f83210a992264a37854033cd43c88129fabb5146367d2b748d84be96dc3a4ad95279ec7ed78dcb57056597a9f46a948708b0e9915b22f28216d94554db2082f4b9782a5802bf6700ef9017168a68304b6573f46c78a0a3be302e096b4f5b87313a2ef9a2b5f51956d9e315b08ee89a59aeec225227f3ece808c451e1103df7887f944138af1b93235bc93121fb84591d065d5f245c035c238a1c30d510be5db14725148919e8d57f1e3a36ead8be870e2505e3c9935c4461741c4a8dc4dff7e0e042167a7228bf218c9d8dd9c0be9e5ff4a79968d8f34cfc3206e0ade5889e9c5e44c918ed3755063d4148e7f1da9d2ce7aa45b9fc873f85cb92160b8a4d5b219884d0c43cc1194259ec4a6127887470d2fabbc1983b1bcc51e931f131d1238333c09740b43802fc5b1c01a942c5d08693b81e59429cb7d49f454f517cddc160d563a243182083008f2481e35312b4b35a2688468f18f4733f4b40d2f298c0b88ec2ad51e2efa509905233e3bbb9e172a1e697ab379f500c8c791aa97623bc8faa7f0468e02e6bc6f9bc40c75b4c01b92731fc371ad7c90928bead62a74580bb2d0aa1d8972fa857766ebe8aa00cd9eae79a591ea3e87a5ce636dc865b992c98a6fafe478973665936ad477558dac400fe179e86e6fef41aa074d0812f0c14f3992edb76358d02a2b763512ca9abc0940dd711670deb4d9abf196de9106efa5e1c14a673de86193908206ab9f72afd6ef1b05355f06ad0b9bc83750bb196654566b56e13e6e820d12bc34920b45c3"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 30.251580965s ago: executing program 5 (id=6645): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x1490, 0x0, 0x11, 0x148, 0x1340, 0x10, 0x13f8, 0x2a8, 0x2a8, 0x13f8, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_team\x00'}, 0x10, 0x12d0, 0x1340, 0x1c, {0x6}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x2, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "3027851d572baec918d14e79584558b361139090a42fe5fdfaacee38e43f6e7bf8a58e41363c09ee585cd87590517c3539bccbf1de93ba4d0b7ca0972c475b6f"}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x14f0) 15.150104573s ago: executing program 35 (id=6645): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x1490, 0x0, 0x11, 0x148, 0x1340, 0x10, 0x13f8, 0x2a8, 0x2a8, 0x13f8, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_team\x00'}, 0x10, 0x12d0, 0x1340, 0x1c, {0x6}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x2, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "3027851d572baec918d14e79584558b361139090a42fe5fdfaacee38e43f6e7bf8a58e41363c09ee585cd87590517c3539bccbf1de93ba4d0b7ca0972c475b6f"}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x14f0) 2.727378177s ago: executing program 3 (id=7061): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced090012000adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.666141047s ago: executing program 0 (id=7063): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000076000d0b002c000000000002030000400000000408"], 0x20}}, 0x0) 2.407042722s ago: executing program 3 (id=7067): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) 2.363482923s ago: executing program 0 (id=7068): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080)=0xa, 0x4) 2.183377146s ago: executing program 0 (id=7072): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r0, 0x309f6000) 2.183317806s ago: executing program 3 (id=7073): r0 = socket(0x2, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x88, 0x68, 0x0, 0x20000000) 1.985142519s ago: executing program 0 (id=7075): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0x7fffffff, 0x55}]}}) 1.985041639s ago: executing program 3 (id=7076): r0 = io_uring_setup(0x7aa6, &(0x7f0000000b00)={0x0, 0xfffffffc, 0x0, 0xfffffff9, 0x140}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) 1.928828639s ago: executing program 1 (id=7077): open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) mount(&(0x7f0000000200)=@filename='.\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x1000000, &(0x7f0000000300)='trans=rdma,') 1.687485663s ago: executing program 3 (id=7080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x20}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) 1.685914603s ago: executing program 0 (id=7081): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) 1.627611154s ago: executing program 1 (id=7082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x0) 1.486861786s ago: executing program 0 (id=7084): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 1.478669696s ago: executing program 3 (id=7085): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c6c6f63616c666c6f636b732c696e6f646536342c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c6e6f61636c2c6572726f72733d636f6e74696e75652c00edc97523793b5022d016bb24c65ba594abbd38fd9c301bfa101e61d574eb5cc84215aa20846b6f33df6281eaedb4b4afaaacd321e4df0d16b4f5a8a992efe2554b52ec9c980e5544cd4b8df3e1ba594d07e0bfe3471c164430a36b7ebddc35caf2959224d8330f1807117fc520d8ff5660c5691afd66a8e397bb802ed69df198008fb799cc37"], 0x1, 0x470e, &(0x7f0000008f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 1.415528317s ago: executing program 1 (id=7086): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) 1.2272148s ago: executing program 1 (id=7089): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89e0, 0x1000000000000) 1.22707732s ago: executing program 8 (id=7090): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x10) 1.042476143s ago: executing program 1 (id=7092): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 1.032793454s ago: executing program 8 (id=7093): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@newtaction={0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 1.004779374s ago: executing program 7 (id=7094): mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) munlock(&(0x7f0000004000/0x3000)=nil, 0x3000) 795.317127ms ago: executing program 8 (id=7095): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x298, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'wg1\x00'}, 0x0, 0x230, 0x298, 0x52020000, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [], @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, {@ipv4=@private, [], @ipv4=@private}, {@ipv6=@private0, [], @ipv4=@broadcast}, {@ipv6=@mcast2, [], @ipv4=@broadcast}], 0x2}}, @common=@frag={{0x30}, {[], 0x0, 0x0, 0x7}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) 794.351027ms ago: executing program 7 (id=7096): syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x1004491, &(0x7f0000000380)=ANY=[], 0x2, 0x826, &(0x7f00000012c0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) 648.43565ms ago: executing program 8 (id=7097): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 521.173882ms ago: executing program 7 (id=7098): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x5410, &(0x7f00000010c0)=""/4096) 419.473463ms ago: executing program 8 (id=7099): r0 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r0, 0x0, 0x40000061) 292.647296ms ago: executing program 7 (id=7100): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@t={0x81, 0x4, 0x1, 0x3, @generic=0x600}) 217.369017ms ago: executing program 7 (id=7101): r0 = memfd_create(&(0x7f0000000300)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r0, 0x400000) 139.527438ms ago: executing program 8 (id=7102): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x800, 0x2}}) 77.512559ms ago: executing program 1 (id=7103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 7 (id=7104): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x8, 0x4) kernel console output (not intermixed with test programs): FS info (device loop3): enabling ssd optimizations [ 471.342887][T17184] BTRFS info (device loop3): rebuilding free space tree [ 471.375372][T17184] BTRFS info (device loop3): disabling free space tree [ 471.382412][T17184] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 471.393524][ T4268] Bluetooth: hci1: command 0x0409 tx timeout [ 471.394163][T17184] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 471.616919][T17153] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.616923][T17220] loop5: detected capacity change from 0 to 64 [ 471.669552][T17153] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.681483][ T4251] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 471.696667][T17153] device bridge_slave_0 entered promiscuous mode [ 471.746157][T17153] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.754897][T17153] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.765339][T17153] device bridge_slave_1 entered promiscuous mode [ 472.192266][T17222] device batadv2 entered promiscuous mode [ 472.258938][T17153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.362539][T17153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.463753][ T8237] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 472.587243][T17153] team0: Port device team_slave_0 added [ 472.619035][T17153] team0: Port device team_slave_1 added [ 472.653273][ T8237] usb 6-1: Using ep0 maxpacket: 8 [ 472.658460][ T8233] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 472.668610][ T8237] usb 6-1: unable to get BOS descriptor or descriptor too short [ 472.691489][ T8237] usb 6-1: config 4 interface 0 has no altsetting 0 [ 472.712505][ T8237] usb 6-1: string descriptor 0 read error: -22 [ 472.724221][ T8237] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 472.767610][ T8237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.817710][ T8237] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 472.847709][ T8233] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 472.860060][ T8237] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 472.890993][ T8233] usb 4-1: config 0 interface 0 has no altsetting 0 [ 472.923728][ T8237] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 472.935378][ T8233] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 472.954845][ T8237] usb 6-1: media controller created [ 472.973475][ T8233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.996258][ T8233] usb 4-1: Product: syz [ 473.000480][ T8233] usb 4-1: Manufacturer: syz [ 473.015449][ T8233] usb 4-1: SerialNumber: syz [ 473.026515][ T8237] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.037157][ T8233] usb 4-1: config 0 descriptor?? [ 473.054324][ T8233] usb 4-1: selecting invalid altsetting 0 [ 473.202963][T17153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.215748][T17153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.269434][T17153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.295614][ T8238] usb 4-1: USB disconnect, device number 19 [ 473.320176][ T8237] usb 6-1: USB disconnect, device number 12 [ 473.374807][ T4342] udevd[4342]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.391498][T17258] xt_nat: multiple ranges no longer supported [ 473.434011][ T4734] device hsr_slave_0 left promiscuous mode [ 473.455489][ T4734] device hsr_slave_1 left promiscuous mode [ 473.473348][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 473.541577][ T4734] device veth1_macvtap left promiscuous mode [ 473.553571][ T4734] device veth0_macvtap left promiscuous mode [ 473.575512][ T4734] device veth1_vlan left promiscuous mode [ 473.737128][T17251] loop1: detected capacity change from 0 to 32768 [ 473.785876][T17251] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 473.868092][T17271] loop3: detected capacity change from 0 to 1024 [ 473.877303][T17251] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 473.957339][T17271] hfsplus: bad catalog entry type [ 473.975652][T17251] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 2 [ 474.062543][T17251] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 474.094330][ T4734] infiniband syz2: set down [ 474.132620][T17251] OCFS2: File system is now read-only. [ 474.154345][ T46] hfsplus: b-tree write err: -5, ino 4 [ 474.174269][T17251] (syz.1.5653,17251,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 474.182259][T17251] (syz.1.5653,17251,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 474.236590][ T4734] bond4 (unregistering): Released all slaves [ 474.241214][T17251] (syz.1.5653,17251,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 474.283496][T17251] (syz.1.5653,17251,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 474.292086][T17251] (syz.1.5653,17251,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 474.340554][T17251] (syz.1.5653,17251,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 474.368502][T17278] loop3: detected capacity change from 0 to 512 [ 474.374041][T17251] (syz.1.5653,17251,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 474.388411][ T4734] bond3 (unregistering): Released all slaves [ 474.409179][T17251] (syz.1.5653,17251,0):ocfs2_mknod:385 ERROR: status = -30 [ 474.424174][T17278] EXT4-fs: Ignoring removed mblk_io_submit option [ 474.447288][T17251] (syz.1.5653,17251,0):ocfs2_mknod:502 ERROR: status = -30 [ 474.464406][T17278] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 474.481149][T17251] (syz.1.5653,17251,0):ocfs2_create:676 ERROR: status = -30 [ 474.526714][T17278] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.5661: attempt to clear invalid blocks 2 len 1 [ 474.571193][T17278] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 474.677160][T17278] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.5661: invalid indirect mapped block 1819239214 (level 0) [ 474.692236][ T4260] ocfs2: Unmounting device (7,1) on (node local) [ 474.709487][T17288] netlink: 'syz.0.5665': attribute type 1 has an invalid length. [ 474.752136][T17278] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.5661: invalid indirect mapped block 1819239214 (level 1) [ 474.759567][T17288] netlink: 'syz.0.5665': attribute type 2 has an invalid length. [ 474.823269][T17288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5665'. [ 474.869079][T17278] EXT4-fs (loop3): 1 truncate cleaned up [ 474.913498][T17278] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 474.967473][T17278] EXT4-fs (loop3): unmounting filesystem. [ 475.228956][T17298] loop5: detected capacity change from 0 to 1024 [ 475.311286][T17298] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 475.448239][T10783] EXT4-fs (loop5): unmounting filesystem. [ 475.449196][ T4734] bond2 (unregistering): Released all slaves [ 475.492406][ T4734] bond1 (unregistering): Released all slaves [ 475.553286][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 475.694999][T17309] loop1: detected capacity change from 0 to 764 [ 475.731898][T17309] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 475.761030][T17309] Symlink component flag not implemented [ 475.779202][T17309] Symlink component flag not implemented (122) [ 476.521207][ T8237] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 476.719628][ T8237] usb 1-1: Using ep0 maxpacket: 8 [ 476.753906][ T8237] usb 1-1: config 0 has an invalid interface number: 63 but max is 0 [ 476.762054][ T8237] usb 1-1: config 0 has no interface number 0 [ 476.768734][ T8237] usb 1-1: New USB device found, idVendor=f65e, idProduct=3868, bcdDevice=c6.17 [ 476.778227][ T8237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.788477][ T8237] usb 1-1: config 0 descriptor?? [ 476.795621][ T8237] usb-storage 1-1:0.63: USB Mass Storage device detected [ 476.821350][ T11] smc: removing ib device syz2 [ 477.003395][ T8233] usb 1-1: USB disconnect, device number 22 [ 477.462574][ T4734] bond0 (unregistering): Released all slaves [ 477.618626][T17153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.626043][T17153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.651933][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.653663][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 477.658392][T17153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.723337][ T4305] vxcan1 speed is unknown, defaulting to 1000 [ 477.882910][T17153] device hsr_slave_0 entered promiscuous mode [ 477.920461][T17153] device hsr_slave_1 entered promiscuous mode [ 478.166863][T17153] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 478.177087][T17153] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 478.196004][T17153] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 478.213026][T17153] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 478.364583][T17153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.390612][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 478.414575][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 478.426035][T17153] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.456931][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 478.468738][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 478.478445][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.485616][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.493577][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 478.502458][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 478.511949][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.519120][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.534898][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 478.557097][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 478.595931][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 478.611397][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 478.631830][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 478.641481][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 478.657551][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 478.669933][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 478.682092][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 478.705154][T17153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.724834][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 478.744046][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 479.076411][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 479.091042][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 479.106333][T17153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.640234][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 479.651458][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 479.680736][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 479.690988][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 479.700057][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 479.707988][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 479.728967][T17153] device veth0_vlan entered promiscuous mode [ 479.742821][T17153] device veth1_vlan entered promiscuous mode [ 479.788782][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 479.801421][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 479.815480][T17153] device veth0_macvtap entered promiscuous mode [ 479.828151][T17153] device veth1_macvtap entered promiscuous mode [ 479.855209][T17153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.872893][T17153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.885493][T17153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.894725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 479.903985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 479.912202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 479.921227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 479.942741][T17153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.960267][T17153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.972688][T17153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.989613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 480.000760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 480.021036][T17153] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.038002][T17153] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.048485][T17153] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.062732][T17153] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.151884][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.163936][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.186477][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 480.227903][ T4734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.238843][ T4734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.252746][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 480.458759][T17378] loop6: detected capacity change from 0 to 256 [ 480.501114][T17378] exfat: Deprecated parameter 'namecase' [ 480.581164][T17378] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 481.138890][T17399] loop1: detected capacity change from 0 to 64 [ 481.162261][T17395] loop5: detected capacity change from 0 to 1764 [ 481.520586][T17411] loop1: detected capacity change from 0 to 512 [ 481.540782][T17410] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 481.601788][T17411] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 481.613568][T17411] ext4 filesystem being mounted at /1152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.697981][T17411] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 481.871325][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 482.483609][T17449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5711'. [ 483.097847][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.758204][T17492] loop3: detected capacity change from 0 to 2048 [ 483.766387][T17497] netlink: 1033 bytes leftover after parsing attributes in process `syz.5.5732'. [ 483.831900][T17492] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 483.945881][ T27] audit: type=1800 audit(1750472569.794:102): pid=17492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5730" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 484.341136][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.386093][T17512] netlink: 'syz.0.5738': attribute type 5 has an invalid length. [ 484.519016][ T4266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 484.543433][ T4266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 484.555988][ T4266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 484.565736][ T4266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 484.566156][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.584053][ T4270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 484.591479][ T4266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 484.851735][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.388358][T17546] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 485.450274][T17548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5751'. [ 485.701453][T17555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5753'. [ 485.717166][T17560] loop5: detected capacity change from 0 to 256 [ 485.724038][T17555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5753'. [ 486.673361][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 486.752854][T17518] chnl_net:caif_netlink_parms(): no params data found [ 486.862220][T17607] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 486.883987][T17608] loop3: detected capacity change from 0 to 512 [ 486.899599][T17607] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 486.917471][T17607] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 486.927368][T17607] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 486.960110][T17607] device geneve2 entered promiscuous mode [ 486.995973][T17607] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 487.010755][T17608] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.5764: bad orphan inode 11862016 [ 487.021988][T17608] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 487.031090][T17608] ext4 filesystem being mounted at /1082/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.050649][T17607] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 487.063567][T17607] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 487.109734][T17607] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 487.423865][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 487.850270][T17634] xt_CT: No such helper "pptp" [ 487.855324][T17518] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.891136][T17518] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.934773][T17518] device bridge_slave_0 entered promiscuous mode [ 488.011526][T17518] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.022560][T17518] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.055126][T17518] device bridge_slave_1 entered promiscuous mode [ 488.131099][T17645] netlink: 'syz.5.5776': attribute type 1 has an invalid length. [ 488.584605][T17518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.655610][T17518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.753502][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 488.928165][T17518] team0: Port device team_slave_0 added [ 489.050177][T17518] team0: Port device team_slave_1 added [ 489.077308][T17678] netlink: 'syz.0.5790': attribute type 1 has an invalid length. [ 489.126464][T17678] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.5790'. [ 489.196303][T17682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5792'. [ 489.261674][T17518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.273386][T17518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.299310][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.372871][T17686] loop1: detected capacity change from 0 to 1024 [ 489.445295][T17686] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 489.464333][T17518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.504487][ T11] device hsr_slave_0 left promiscuous mode [ 489.552430][ T11] device hsr_slave_1 left promiscuous mode [ 489.569380][T17686] EXT4-fs warning (device loop1): ext4_rmdir:3243: inode #11: comm syz.1.5793: empty directory 'file1' has too many links (111) [ 489.593918][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.601476][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.644204][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.651671][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.704379][ T11] device bridge_slave_1 left promiscuous mode [ 489.713760][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.754974][ T11] device bridge_slave_0 left promiscuous mode [ 489.781673][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.794019][ T8233] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 489.837594][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 489.993278][ T8233] usb 4-1: Using ep0 maxpacket: 32 [ 490.000252][ T8233] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 490.019667][ T11] device veth1_macvtap left promiscuous mode [ 490.029259][ T8233] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.033990][ T11] device veth0_macvtap left promiscuous mode [ 490.066617][ T8233] usb 4-1: config 0 has no interface number 0 [ 490.073417][ T27] audit: type=1400 audit(1750472575.914:103): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=17707 comm="syz.5.5800" [ 490.073808][ T11] device veth1_vlan left promiscuous mode [ 490.105270][ T8233] usb 4-1: config 0 interface 200 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 490.133893][ T8233] usb 4-1: config 0 interface 200 has no altsetting 0 [ 490.143636][ T11] device veth0_vlan left promiscuous mode [ 490.151216][ T8233] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=d3.fc [ 490.167926][ T8233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.185674][ T8233] usb 4-1: Product: syz [ 490.195908][ T8233] usb 4-1: Manufacturer: syz [ 490.207334][ T8233] usb 4-1: SerialNumber: syz [ 490.229445][ T8233] usb 4-1: config 0 descriptor?? [ 490.472476][ T8233] qmi_wwan: probe of 4-1:0.200 failed with error -22 [ 490.490117][ T8233] usb 4-1: USB disconnect, device number 20 [ 490.834500][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 491.269975][T17727] loop3: detected capacity change from 0 to 164 [ 491.311697][T17727] rock: directory entry would overflow storage [ 491.344231][T17727] rock: sig=0x4543, size=28, remaining=18 [ 491.359030][ T11] team0 (unregistering): Port device team_slave_1 removed [ 491.461115][ T11] team0 (unregistering): Port device team_slave_0 removed [ 491.572349][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.646607][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.222175][ T11] bond0 (unregistering): Released all slaves [ 492.310193][T17518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.317747][T17518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.344903][T17518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.372992][T17715] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5802'. [ 492.554179][T17518] device hsr_slave_0 entered promiscuous mode [ 492.587631][T17518] device hsr_slave_1 entered promiscuous mode [ 492.591468][T17739] loop1: detected capacity change from 0 to 256 [ 492.896980][T17739] loop1: detected capacity change from 0 to 4096 [ 492.919554][T17739] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 492.943261][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 492.953624][T17739] ntfs: (device loop1): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 493.067084][T17739] ntfs: (device loop1): parse_options(): Unrecognized mount option uni_xlate. [ 493.094003][T17739] ntfs: (device loop1): parse_options(): Unrecognized mount option uni_xlate. [ 493.104736][T17739] ntfs: (device loop1): parse_options(): Unrecognized mount option shortname. [ 493.135875][T17739] ntfs: (device loop1): parse_options(): Unrecognized mount option shortname. [ 493.164164][T17739] ntfs: (device loop1): parse_options(): Unrecognized mount option uni_xlate. [ 493.180135][T17739] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 493.273650][T17739] ntfs: (device loop1): parse_options(): Unrecognized mount option tz. [ 493.566916][T17518] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 493.604638][T17518] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 493.674505][T17518] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 493.715577][T17518] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 494.143975][T17518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.201023][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 494.210056][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 494.242812][T17518] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.291434][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 494.309596][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 494.360417][T17581] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.367631][T17581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.404028][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 494.498743][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 494.514020][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 494.541597][T17581] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.548863][T17581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.624790][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 494.636922][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 494.687016][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 494.707947][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 494.742424][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 494.759060][T17786] xt_NFQUEUE: number of total queues is 0 [ 494.816728][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 494.846124][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 494.880943][T17518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 494.926790][T17518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.947709][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 494.970369][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5831'. [ 494.979758][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 495.015355][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 495.061010][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 495.090808][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 495.392873][T17805] loop3: detected capacity change from 0 to 256 [ 495.424595][T17805] exfat: Deprecated parameter 'utf8' [ 495.462178][T17805] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 495.785977][T17815] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 495.835503][T17815] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 495.873516][T17815] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 495.904718][T17815] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 495.940022][T17815] device geneve2 entered promiscuous mode [ 495.952453][T17815] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 495.990824][T17815] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 496.021156][T17815] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 496.057365][T17815] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 496.167197][T17575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 496.186971][T17575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 496.216244][T17822] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5841'. [ 496.236981][T17822] 0ªX¹¦À: renamed from caif0 [ 496.249783][T17822] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 496.300205][T17518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.270291][T17857] loop3: detected capacity change from 0 to 8 [ 497.411076][T17861] loop1: detected capacity change from 0 to 512 [ 497.504900][T17857] SQUASHFS error: Failed to read block 0x1ec: -5 [ 497.518488][T17861] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 497.533624][T17857] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 497.552257][T17861] ext4 filesystem being mounted at /1178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 497.855179][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 497.923595][T17575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 497.952485][T17575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 498.026620][T17518] device veth0_vlan entered promiscuous mode [ 498.064284][T17575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 498.101007][T17575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 498.144372][T17518] device veth1_vlan entered promiscuous mode [ 498.185200][T17575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 498.206148][T17575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 498.234059][T17575] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 498.330709][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 498.354488][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 498.380733][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 498.433592][T17518] device veth0_macvtap entered promiscuous mode [ 498.472900][T17518] device veth1_macvtap entered promiscuous mode [ 498.507247][T17894] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 498.560283][T17518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.624410][T17518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.660053][T17518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.685966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 498.707197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 498.731022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 498.764935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.796641][T17518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.808155][T17518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.844055][T17518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.869759][T17518] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.891070][T17518] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.916160][T17518] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.955666][T17518] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.016857][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 499.044210][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 499.305969][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.341938][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.411007][T17575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 499.540679][T17581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.576270][T17581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.673842][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 499.850046][T17938] xt_TCPMSS: Only works on TCP SYN packets [ 499.997435][T17942] loop3: detected capacity change from 0 to 2048 [ 500.123499][T17952] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 500.190358][T17942] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18374686479671623682, rec_len=65535, name_len=255 [ 500.265972][T17942] Remounting filesystem read-only [ 500.803881][T17974] netlink: 'syz.0.5895': attribute type 3 has an invalid length. [ 500.836731][T17974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.903012][T17979] loop7: detected capacity change from 0 to 2048 [ 500.996826][T17979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 501.359798][T17989] netlink: 'syz.5.5902': attribute type 16 has an invalid length. [ 501.396417][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.402873][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.407162][T17989] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.5902'. [ 501.810173][T17968] loop3: detected capacity change from 0 to 32768 [ 501.882200][T17968] ERROR: (device loop3): diAllocBit: iag inconsistent [ 501.882200][T17968] [ 501.935000][T17968] ERROR: (device loop3): remounting filesystem as read-only [ 501.967647][T17968] ialloc: diAlloc returned -5! [ 502.019364][T18018] loop1: detected capacity change from 0 to 64 [ 502.068292][T18020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5913'. [ 503.183354][ T4298] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 503.393652][ T4298] usb 4-1: Using ep0 maxpacket: 16 [ 503.402869][ T4298] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 503.441683][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.473676][ T4298] usb 4-1: Product: syz [ 503.493031][ T4298] usb 4-1: Manufacturer: syz [ 503.513582][ T4298] usb 4-1: SerialNumber: syz [ 503.540885][ T4298] usb 4-1: config 0 descriptor?? [ 503.583805][ T4298] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 503.789740][ T4298] usb 4-1: clie_3_5_startup: get config number bad return length: 0 [ 503.803327][ T4298] visor: probe of 4-1:0.0 failed with error -5 [ 504.012471][ T4298] usb 4-1: USB disconnect, device number 21 [ 504.570932][T18110] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5948'. [ 504.676681][T18085] loop1: detected capacity change from 0 to 32768 [ 504.750160][T18085] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 504.822755][T18085] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 505.236810][ T4260] ocfs2: Unmounting device (7,1) on (node local) [ 505.394326][T18134] netlink: 'syz.0.5956': attribute type 7 has an invalid length. [ 505.701112][T18147] netlink: 'syz.0.5961': attribute type 4 has an invalid length. [ 506.081599][T18164] cgroup: Unexpected value for 'cpuset_v2_mode' [ 506.087370][T18160] loop7: detected capacity change from 0 to 1024 [ 506.123311][ T4332] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 506.214167][T18160] hfsplus: keylen 65060 too large [ 506.298585][T18168] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 506.334842][ T4332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.363575][ T4332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.404016][ T4332] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 506.457655][ T4332] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 506.512002][ T4332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.561704][ T4332] usb 6-1: config 0 descriptor?? [ 506.584272][ T4332] hub 6-1:0.0: USB hub found [ 506.788298][ T4332] hub 6-1:0.0: 14 ports detected [ 506.799933][ T4332] hub 6-1:0.0: insufficient power available to use all downstream ports [ 506.863209][ T4298] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 506.948556][T18158] loop1: detected capacity change from 0 to 32768 [ 506.999445][ T4332] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 507.012044][ T4332] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 507.045453][ T4298] usb 1-1: unable to get BOS descriptor or descriptor too short [ 507.075423][ T4298] usb 1-1: not running at top speed; connect to a high speed hub [ 507.091273][T18158] ERROR: (device loop1): dbAlloc: unable to allocate blocks [ 507.091273][T18158] [ 507.094268][ T4332] usb 6-1: USB disconnect, device number 13 [ 507.111101][ T4298] usb 1-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 507.146305][ T4298] usb 1-1: config 219 interface 0 has no altsetting 0 [ 507.154815][T18158] ERROR: (device loop1): remounting filesystem as read-only [ 507.162191][T18158] jfs_rename: dtInsert returned -EIO [ 507.165203][ T4298] usb 1-1: config 219 interface 0 has no altsetting 1 [ 507.208449][ T4298] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 507.273074][ T4298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.309025][ T4298] usb 1-1: Product: syz [ 507.320711][ T4298] usb 1-1: Manufacturer: syz [ 507.341532][ T4298] usb 1-1: SerialNumber: syz [ 507.496543][T18197] loop1: detected capacity change from 0 to 1024 [ 507.600049][ T4298] usb 1-1: selecting invalid altsetting 0 [ 507.716355][ T4298] snd-usb-audio: probe of 1-1:219.0 failed with error -22 [ 507.764434][ T4298] usb 1-1: USB disconnect, device number 23 [ 507.829449][T18204] loop5: detected capacity change from 0 to 512 [ 507.860305][T18207] loop3: detected capacity change from 0 to 64 [ 507.895819][T18204] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 508.005958][T18204] EXT4-fs (loop5): 1 truncate cleaned up [ 508.011682][T18204] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 508.051493][ T6109] udevd[6109]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.131990][T18204] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.5983: corrupted in-inode xattr [ 508.161448][T18204] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1732: inode #15: comm syz.5.5983: unable to update i_inline_off [ 508.229323][T18204] EXT4-fs error (device loop5): ext4_xattr_ibody_get:603: inode #15: comm syz.5.5983: corrupted in-inode xattr [ 508.280003][T18222] netlink: 'syz.7.5989': attribute type 3 has an invalid length. [ 508.365306][T18222] netlink: 'syz.7.5989': attribute type 3 has an invalid length. [ 508.455070][T10783] EXT4-fs (loop5): unmounting filesystem. [ 508.690567][T18234] loop3: detected capacity change from 0 to 256 [ 508.717918][T18235] netlink: 'syz.7.5994': attribute type 1 has an invalid length. [ 508.752490][T18232] loop1: detected capacity change from 0 to 1764 [ 508.763963][T18235] netlink: 134744 bytes leftover after parsing attributes in process `syz.7.5994'. [ 508.793451][T18234] FAT-fs (loop3): Directory bread(block 64) failed [ 508.819727][T18234] FAT-fs (loop3): Directory bread(block 65) failed [ 508.881637][T18234] FAT-fs (loop3): Directory bread(block 66) failed [ 508.902457][T18238] loop5: detected capacity change from 0 to 256 [ 508.929430][T18234] FAT-fs (loop3): Directory bread(block 67) failed [ 508.939624][T18234] FAT-fs (loop3): Directory bread(block 68) failed [ 508.987048][T18234] FAT-fs (loop3): Directory bread(block 69) failed [ 508.989956][T18238] UBIFS error (pid: 18238): cannot open "ubifs", error -22 [ 509.036305][T18234] FAT-fs (loop3): Directory bread(block 70) failed [ 509.115239][T18234] FAT-fs (loop3): Directory bread(block 71) failed [ 509.143346][T18234] FAT-fs (loop3): Directory bread(block 72) failed [ 509.175814][T18234] FAT-fs (loop3): Directory bread(block 73) failed [ 509.189681][T18244] loop1: detected capacity change from 0 to 64 [ 509.468082][T18252] netlink: 56537 bytes leftover after parsing attributes in process `syz.7.6001'. [ 510.231796][T18282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6010'. [ 510.367286][T18289] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 510.422626][T18289] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 510.472892][T18289] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 510.513303][T18289] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 510.609578][T18298] netlink: 'syz.0.6018': attribute type 12 has an invalid length. [ 510.808583][T18305] (unnamed net_device) (uninitialized): peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms [ 510.901887][T18305] device bond1 entered promiscuous mode [ 510.913864][T18305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.942257][T18313] loop5: detected capacity change from 0 to 1764 [ 510.951958][T18308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.290093][T18307] loop3: detected capacity change from 0 to 8192 [ 511.352131][T18307] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 511.436339][T18307] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 511.500701][T18307] FAT-fs (loop3): Filesystem has been set read-only [ 511.691990][ T4251] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 511.702354][T18334] loop7: detected capacity change from 0 to 1024 [ 511.842498][T18334] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 512.011272][T17518] EXT4-fs (loop7): unmounting filesystem. [ 512.495587][T18359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6042'. [ 513.060880][T18381] loop5: detected capacity change from 0 to 64 [ 513.075719][T18380] UBIFS error (pid: 18380): cannot open "ubifs", error -22 [ 513.383444][ T4298] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 513.613228][ T4298] usb 2-1: Using ep0 maxpacket: 8 [ 513.624828][ T4298] usb 2-1: unable to get BOS descriptor or descriptor too short [ 513.675220][ T4298] usb 2-1: config 4 interface 0 has no altsetting 0 [ 513.710511][ T4298] usb 2-1: string descriptor 0 read error: -22 [ 513.745917][ T4298] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 513.773219][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.800380][T18406] loop7: detected capacity change from 0 to 512 [ 513.814590][ T4298] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 513.863786][ T4298] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 513.905274][ T4298] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 513.912550][ T4298] usb 2-1: media controller created [ 513.961194][T18406] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 514.006517][ T4298] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 514.013341][T18406] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.202376][T18406] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 514.331466][ T4332] usb 2-1: USB disconnect, device number 26 [ 514.376684][T17518] EXT4-fs (loop7): unmounting filesystem. [ 514.533223][ T4298] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 514.723392][ T4298] usb 4-1: Using ep0 maxpacket: 8 [ 514.736249][ T4298] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 514.765177][ T4298] usb 4-1: config 179 has no interface number 0 [ 514.771546][ T4298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 514.809150][ T4298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 514.840403][T18444] netlink: 'syz.7.6073': attribute type 12 has an invalid length. [ 514.852818][ T4298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 514.893275][ T4298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 514.933191][ T4298] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 514.974890][ T4298] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 515.043336][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.072072][T18449] loop5: detected capacity change from 0 to 256 [ 515.101950][T18423] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 515.187558][T18449] FAT-fs (loop5): Directory bread(block 64) failed [ 515.229716][T18449] FAT-fs (loop5): Directory bread(block 65) failed [ 515.277667][T18449] FAT-fs (loop5): Directory bread(block 66) failed [ 515.315730][T18449] FAT-fs (loop5): Directory bread(block 67) failed [ 515.384082][T18449] FAT-fs (loop5): Directory bread(block 68) failed [ 515.404121][T18423] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 515.411646][T18423] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 515.429691][T18449] FAT-fs (loop5): Directory bread(block 69) failed [ 515.453590][T18449] FAT-fs (loop5): Directory bread(block 70) failed [ 515.489753][T18423] vhci_hcd vhci_hcd.0: Device attached [ 515.496423][T18449] FAT-fs (loop5): Directory bread(block 71) failed [ 515.535875][T18457] vhci_hcd: connection closed [ 515.536379][ T8237] usb 4-1: USB disconnect, device number 22 [ 515.536971][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 515.542554][T18449] FAT-fs (loop5): Directory bread(block 72) failed [ 515.548309][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 515.605451][T17581] vhci_hcd: stop threads [ 515.610705][T17581] vhci_hcd: release socket [ 515.645201][T18449] FAT-fs (loop5): Directory bread(block 73) failed [ 515.661194][T17581] vhci_hcd: disconnect device [ 515.749337][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 515.749352][ T27] audit: type=1800 audit(1750472601.594:104): pid=18449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6075" name="file1" dev="loop5" ino=1048671 res=0 errno=0 [ 515.989409][T18473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.108453][T18478] netlink: 'syz.5.6089': attribute type 12 has an invalid length. [ 516.508172][T18494] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 516.557507][T18494] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 516.587114][T18494] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 516.616434][T18494] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 516.933532][T18509] loop5: detected capacity change from 0 to 512 [ 517.001109][T18509] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 517.009530][T18515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.053835][T18509] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 517.061935][T18509] System zones: 0-1, 15-15, 18-18, 34-34 [ 517.107977][T18519] Invalid option length (1048180) for dns_resolver key [ 517.147399][T18509] EXT4-fs (loop5): orphan cleanup on readonly fs [ 517.190328][T18509] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 517.253277][T18509] EXT4-fs warning (device loop5): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 517.319295][T18509] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 517.345364][T18509] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.6098: bad orphan inode 16 [ 517.395204][T18509] ext4_test_bit(bit=15, block=18) = 1 [ 517.400660][T18509] is_bad_inode(inode)=0 [ 517.439868][T18509] NEXT_ORPHAN(inode)=0 [ 517.444125][T18509] max_ino=32 [ 517.447359][T18509] i_nlink=2 [ 517.459556][T18509] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 517.529509][T18509] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 517.656174][T10783] EXT4-fs (loop5): unmounting filesystem. [ 517.685309][T18537] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 517.685421][T18537] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 517.685454][T18537] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 517.685484][T18537] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 517.895322][ T4305] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 518.085024][ T4305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.119661][ T4305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.153347][ T4305] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 518.213666][ T4305] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 518.243184][ T4305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.272671][ T4305] usb 1-1: config 0 descriptor?? [ 518.314696][ T4305] hub 1-1:0.0: USB hub found [ 518.525465][ T4305] hub 1-1:0.0: 14 ports detected [ 518.531582][ T4305] hub 1-1:0.0: insufficient power available to use all downstream ports [ 518.732183][ T4305] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 518.741405][T18574] netlink: 1033 bytes leftover after parsing attributes in process `syz.1.6124'. [ 518.762164][ T4305] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 518.834442][ T4305] usb 1-1: USB disconnect, device number 24 [ 518.871922][T18578] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 518.978501][T18582] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 519.002229][T18582] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 519.014785][T18582] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 519.058957][T18582] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 519.524260][T18601] loop5: detected capacity change from 0 to 128 [ 519.590918][T18601] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 519.630281][T18601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 520.040612][T18615] loop5: detected capacity change from 0 to 512 [ 520.112107][ T27] audit: type=1326 audit(1750472605.954:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18621 comm="syz.1.6139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feff0d8e929 code=0x0 [ 520.189927][T18615] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 520.207128][T18628] loop3: detected capacity change from 0 to 256 [ 520.233278][T18615] ext4 filesystem being mounted at /620/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.431961][T18620] xt_CT: No such helper "pptp" [ 520.515041][T10783] EXT4-fs (loop5): unmounting filesystem. [ 520.700095][T18639] loop7: detected capacity change from 0 to 128 [ 520.762032][T18639] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 520.868901][T18639] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 521.320429][T18661] loop1: detected capacity change from 0 to 512 [ 521.482220][T18668] loop3: detected capacity change from 0 to 764 [ 521.509409][T18661] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 521.550887][T18672] loop5: detected capacity change from 0 to 256 [ 521.566283][T18661] ext4 filesystem being mounted at /1237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.617669][T18668] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 521.639131][T18668] Symlink component flag not implemented [ 521.656437][T18668] Symlink component flag not implemented (122) [ 521.722148][T18672] FAT-fs (loop5): Directory bread(block 64) failed [ 521.762207][T18672] FAT-fs (loop5): Directory bread(block 65) failed [ 521.824361][T18672] FAT-fs (loop5): Directory bread(block 66) failed [ 521.830958][T18672] FAT-fs (loop5): Directory bread(block 67) failed [ 521.861183][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 521.883492][T18672] FAT-fs (loop5): Directory bread(block 68) failed [ 521.949272][T18672] FAT-fs (loop5): Directory bread(block 69) failed [ 521.986878][T18672] FAT-fs (loop5): Directory bread(block 70) failed [ 522.063066][T18672] FAT-fs (loop5): Directory bread(block 71) failed [ 522.093639][T18672] FAT-fs (loop5): Directory bread(block 72) failed [ 522.124623][T18672] FAT-fs (loop5): Directory bread(block 73) failed [ 522.273391][ T4332] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 522.493205][ T4332] usb 4-1: Using ep0 maxpacket: 8 [ 522.501814][ T4332] usb 4-1: unable to get BOS descriptor or descriptor too short [ 522.529382][ T4332] usb 4-1: config 4 interface 0 has no altsetting 0 [ 522.590700][ T4332] usb 4-1: string descriptor 0 read error: -22 [ 522.649243][ T4332] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 522.708334][ T4332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.741599][ T4332] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 522.776908][ T4332] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 522.813455][ T4332] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 522.856316][ T4332] usb 4-1: media controller created [ 522.900297][ T4332] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.040520][T18677] loop7: detected capacity change from 0 to 32768 [ 523.072662][T18710] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6169'. [ 523.153728][T18677] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 523.220547][T18677] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 523.280378][T18677] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 2 [ 523.328195][T18677] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 523.342742][ T4298] usb 4-1: USB disconnect, device number 23 [ 523.382272][T18677] OCFS2: File system is now read-only. [ 523.392429][T18677] (syz.7.6160,18677,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 523.418220][T18677] (syz.7.6160,18677,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 523.448653][T18677] (syz.7.6160,18677,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 523.460911][ T27] audit: type=1326 audit(1750472609.314:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18721 comm="syz.1.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff0d8e929 code=0x7ffc0000 [ 523.514614][T18677] (syz.7.6160,18677,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 523.533210][ T27] audit: type=1326 audit(1750472609.314:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18721 comm="syz.1.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff0d8e929 code=0x7ffc0000 [ 523.566028][T18677] (syz.7.6160,18677,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 523.596446][T18677] (syz.7.6160,18677,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 523.623309][ T27] audit: type=1326 audit(1750472609.334:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18721 comm="syz.1.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7feff0d8e929 code=0x7ffc0000 [ 523.645612][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.662924][T18677] (syz.7.6160,18677,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 523.704530][T18677] (syz.7.6160,18677,1):ocfs2_mknod:385 ERROR: status = -30 [ 523.732458][T18677] (syz.7.6160,18677,1):ocfs2_mknod:502 ERROR: status = -30 [ 523.763432][ T27] audit: type=1326 audit(1750472609.334:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18721 comm="syz.1.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff0d8e929 code=0x7ffc0000 [ 523.796336][T18677] (syz.7.6160,18677,1):ocfs2_create:676 ERROR: status = -30 [ 523.847164][T18735] loop5: detected capacity change from 0 to 1024 [ 523.889133][ T27] audit: type=1326 audit(1750472609.334:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18721 comm="syz.1.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff0d8e929 code=0x7ffc0000 [ 523.911502][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.975221][T18737] loop1: detected capacity change from 0 to 256 [ 524.019249][T17518] ocfs2: Unmounting device (7,7) on (node local) [ 524.051930][T18737] FAT-fs (loop1): Directory bread(block 64) failed [ 524.071101][T18737] FAT-fs (loop1): Directory bread(block 65) failed [ 524.137379][T18737] FAT-fs (loop1): Directory bread(block 66) failed [ 524.173338][T18737] FAT-fs (loop1): Directory bread(block 67) failed [ 524.180004][T18737] FAT-fs (loop1): Directory bread(block 68) failed [ 524.213526][T18737] FAT-fs (loop1): Directory bread(block 69) failed [ 524.248691][T18737] FAT-fs (loop1): Directory bread(block 70) failed [ 524.276397][T17581] hfsplus: b-tree write err: -5, ino 8 [ 524.312388][T18737] FAT-fs (loop1): Directory bread(block 71) failed [ 524.372014][T18737] FAT-fs (loop1): Directory bread(block 72) failed [ 524.410294][T18737] FAT-fs (loop1): Directory bread(block 73) failed [ 524.860867][T18757] loop5: detected capacity change from 0 to 512 [ 524.933616][T18759] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6189'. [ 524.998810][T18757] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.6187: bad orphan inode 11862016 [ 525.030267][T18742] loop3: detected capacity change from 0 to 32768 [ 525.043244][T18757] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 525.052252][T18757] ext4 filesystem being mounted at /630/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.099826][T18767] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6190'. [ 525.181057][T18742] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 525.401982][T18776] loop7: detected capacity change from 0 to 512 [ 525.470881][T10783] EXT4-fs (loop5): unmounting filesystem. [ 525.514816][T18776] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 525.565760][T18776] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.594058][ T4251] ocfs2: Unmounting device (7,3) on (node local) [ 525.788355][T18785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6196'. [ 525.831896][T17518] EXT4-fs (loop7): unmounting filesystem. [ 526.217306][T18803] loop5: detected capacity change from 0 to 1024 [ 526.263425][ T8237] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 526.374530][T18803] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 526.446196][T18803] EXT4-fs warning (device loop5): ext4_rmdir:3243: inode #11: comm syz.5.6202: empty directory 'file1' has too many links (111) [ 526.463293][ T8237] usb 1-1: Using ep0 maxpacket: 8 [ 526.470200][ T8237] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 526.511495][ T8237] usb 1-1: config 179 has no interface number 0 [ 526.518797][ T8237] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 526.534038][ T8237] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 526.555844][ T8237] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 526.591670][ T8237] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 526.633654][ T8237] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 526.683863][ T8237] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 526.699711][ T8237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.733486][T18794] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 526.756245][T10783] EXT4-fs (loop5): unmounting filesystem. [ 527.071136][T18830] loop3: detected capacity change from 0 to 512 [ 527.075923][T18794] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 527.083970][T18794] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 527.109147][T18794] vhci_hcd vhci_hcd.0: Device attached [ 527.160048][T18831] vhci_hcd: connection closed [ 527.163183][T17575] vhci_hcd: stop threads [ 527.172175][T17575] vhci_hcd: release socket [ 527.213047][ T4298] usb 1-1: USB disconnect, device number 25 [ 527.213096][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 527.227937][T17575] vhci_hcd: disconnect device [ 527.233042][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 527.278707][T18830] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 527.323904][T18830] ext4 filesystem being mounted at /1169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 527.487544][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 527.676536][T18852] program syz.3.6222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.021019][T18864] loop7: detected capacity change from 0 to 164 [ 528.108664][T18864] rock: directory entry would overflow storage [ 528.122768][T18864] rock: sig=0x66, size=4, remaining=3 [ 528.155788][T18839] loop5: detected capacity change from 0 to 32768 [ 528.284734][T18839] XFS (loop5): Mounting V5 Filesystem [ 528.473575][ T4332] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 528.563938][T18839] XFS (loop5): Ending clean mount [ 528.613637][T18839] XFS (loop5): Quotacheck needed: Please wait. [ 528.707194][ T4332] usb 8-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 528.723204][ T4332] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.731413][T18839] XFS (loop5): Quotacheck: Done. [ 528.749823][ T4332] usb 8-1: config 0 descriptor?? [ 528.764544][ T4332] usb 8-1: selecting invalid altsetting 1 [ 528.795746][ T4332] snd-usb-audio: probe of 8-1:0.0 failed with error -22 [ 528.860388][T18893] loop1: detected capacity change from 0 to 1024 [ 528.899516][ T6097] udevd[6097]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.940060][T10783] XFS (loop5): Unmounting Filesystem [ 528.981484][ T8237] usb 8-1: USB disconnect, device number 2 [ 529.144422][ T11] hfsplus: b-tree write err: -5, ino 4 [ 529.316790][T18905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6250'. [ 529.363273][T18905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6250'. [ 529.372453][T18905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6250'. [ 529.423317][T18905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6250'. [ 529.911470][T18913] loop1: detected capacity change from 0 to 4096 [ 530.006857][T18913] ntfs: volume version 3.1. [ 530.433328][ T4266] Bluetooth: hci1: command 0x0405 tx timeout [ 530.780826][T18942] xt_TCPMSS: Only works on TCP SYN packets [ 531.903304][T18975] loop1: detected capacity change from 0 to 64 [ 531.982206][T18975] Trying to free block not in datazone [ 532.023706][T18975] Trying to free block not in datazone [ 532.029240][T18975] Trying to free block not in datazone [ 532.076085][T18975] Trying to free block not in datazone [ 532.084583][T18975] Trying to free block not in datazone [ 533.167855][T19017] program syz.7.6280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 533.426583][T19026] loop1: detected capacity change from 0 to 64 [ 533.626399][T19027] loop3: detected capacity change from 0 to 4096 [ 533.687863][T17575] kworker/u4:9: attempt to access beyond end of device [ 533.687863][T17575] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 533.745799][T17575] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 533.760314][T19027] ntfs: volume version 3.1. [ 533.899848][T19040] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 534.054625][T19046] loop7: detected capacity change from 0 to 256 [ 534.097586][T19046] exfat: Bad value for 'uid' [ 534.513165][T19061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6300'. [ 534.846525][T19074] netlink: 'syz.3.6306': attribute type 5 has an invalid length. [ 535.177067][T19078] loop5: detected capacity change from 0 to 4096 [ 535.272632][T19078] ntfs: volume version 3.1. [ 535.307377][T19046] loop7: detected capacity change from 0 to 32768 [ 535.340411][T19046] JFS: Invalid value of umask [ 535.918401][T19102] loop7: detected capacity change from 0 to 256 [ 535.984098][T19102] exfat: Deprecated parameter 'namecase' [ 536.049320][T19102] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 537.317407][T19111] loop1: detected capacity change from 0 to 32768 [ 537.444953][T19111] XFS (loop1): Mounting V5 Filesystem [ 537.560087][T19148] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6328'. [ 537.681495][T19111] XFS (loop1): Ending clean mount [ 537.690758][T19111] XFS (loop1): Quotacheck needed: Please wait. [ 537.808349][T19111] XFS (loop1): Quotacheck: Done. [ 537.962786][T19126] loop5: detected capacity change from 0 to 32768 [ 537.977471][ T4260] XFS (loop1): Unmounting Filesystem [ 538.093083][T19126] ERROR: (device loop5): dbAlloc: unable to allocate blocks [ 538.093083][T19126] [ 538.174611][T19126] ERROR: (device loop5): remounting filesystem as read-only [ 538.187618][T19126] jfs_rename: dtInsert returned -EIO [ 538.923370][ T4299] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 539.123295][ T4299] usb 6-1: Using ep0 maxpacket: 16 [ 539.135685][ T4299] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 539.176143][ T4299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.210102][ T4299] usb 6-1: Product: syz [ 539.230507][ T4299] usb 6-1: Manufacturer: syz [ 539.247770][ T4299] usb 6-1: SerialNumber: syz [ 539.270272][ T4299] usb 6-1: config 0 descriptor?? [ 539.290609][ T4299] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 539.452515][T19189] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 539.493913][ T4299] usb 6-1: clie_3_5_startup: get config number bad return length: 0 [ 539.512689][ T4299] visor: probe of 6-1:0.0 failed with error -5 [ 539.719370][ T4299] usb 6-1: USB disconnect, device number 14 [ 539.901608][T19207] netlink: 'syz.7.6349': attribute type 4 has an invalid length. [ 540.446175][T19232] netlink: 'syz.1.6367': attribute type 4 has an invalid length. [ 540.715775][T19241] loop1: detected capacity change from 0 to 64 [ 540.846678][T19246] IPVS: length: 110 != 8 [ 541.075043][T19253] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 541.302450][T19265] device vlan0 entered promiscuous mode [ 541.557769][T19272] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6385'. [ 541.605506][T19272] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6385'. [ 541.619474][T19277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6376'. [ 541.662927][T19279] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6377'. [ 541.936232][T19287] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6380'. [ 541.957504][T19292] usb usb1: usbfs: process 19292 (syz.1.6382) did not claim interface 0 before use [ 542.144891][T19295] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 542.441491][T19307] netlink: get zone limit has 8 unknown bytes [ 542.926621][T19319] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6392'. [ 543.251218][T19328] (syz.5.6397,19328,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 543.308135][T19328] (syz.5.6397,19328,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 543.399388][T19332] loop3: detected capacity change from 0 to 256 [ 543.421739][T19332] exfat: Bad value for 'uid' [ 543.492864][T19303] loop7: detected capacity change from 0 to 32768 [ 543.687949][T19303] XFS (loop7): Mounting V5 Filesystem [ 543.914950][T19303] XFS (loop7): Ending clean mount [ 543.926208][T19303] XFS (loop7): Quotacheck needed: Please wait. [ 544.087690][T19303] XFS (loop7): Quotacheck: Done. [ 544.133427][T19361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6407'. [ 544.184458][T19361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6407'. [ 544.225540][T19363] netlink: 'syz.1.6408': attribute type 6 has an invalid length. [ 544.290887][T17518] XFS (loop7): Unmounting Filesystem [ 544.502317][T19371] IPVS: length: 110 != 8 [ 544.506976][T19373] netlink: 'syz.0.6420': attribute type 32 has an invalid length. [ 544.549056][T19373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6420'. [ 544.621719][T19332] loop3: detected capacity change from 0 to 32768 [ 544.657944][T19332] JFS: Invalid value of umask [ 545.476231][T19399] netlink: 'syz.1.6421': attribute type 2 has an invalid length. [ 545.513329][T19399] netlink: 'syz.1.6421': attribute type 1 has an invalid length. [ 545.680235][T19404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6424'. [ 546.359765][T19429] (syz.0.6432,19429,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 546.402813][T19429] (syz.0.6432,19429,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 546.663229][ T4298] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 546.795456][ T8233] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 546.863311][ T4298] usb 2-1: Using ep0 maxpacket: 16 [ 546.875824][ T4298] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 546.907811][ T4298] usb 2-1: config 0 has no interface number 0 [ 546.928665][ T4298] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 546.961149][T19449] device netdevsim0 entered promiscuous mode [ 546.970504][ T4298] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 546.989655][T19449] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 547.000856][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 547.007788][ T8233] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 547.039342][ T4298] usb 2-1: Product: syz [ 547.043254][ T8233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.059590][ T4298] usb 2-1: SerialNumber: syz [ 547.065231][ T8233] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 547.085264][ T8233] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 547.100735][ T4298] usb 2-1: config 0 descriptor?? [ 547.113349][ T8233] usb 4-1: Manufacturer: syz [ 547.133740][ T8233] usb 4-1: config 0 descriptor?? [ 547.137649][ T4298] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input25 [ 547.349174][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 547.359282][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 547.369820][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 547.377048][ T4298] usb 2-1: USB disconnect, device number 27 [ 547.383612][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 547.390621][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 547.413205][ T8233] rc_core: IR keymap rc-hauppauge not found [ 547.419161][ T8233] Registered IR keymap rc-empty [ 547.423300][ T4298] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 547.462788][ T8233] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 547.515054][ T8233] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input26 [ 547.630243][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 547.643177][ T8233] usb 4-1: USB disconnect, device number 24 [ 548.416984][T19491] xt_l2tp: v2 doesn't support IP mode [ 548.597370][T19496] (unnamed net_device) (uninitialized): option ad_select: invalid value (105) [ 549.373378][ T4332] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 549.381710][T19528] device netdevsim0 entered promiscuous mode [ 549.435584][T19528] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 549.502445][T19533] (unnamed net_device) (uninitialized): option ad_select: invalid value (105) [ 549.564923][ T4332] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 549.588798][ T4332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.599967][ T27] audit: type=1326 audit(1750472635.454:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19534 comm="syz.3.6474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0838e929 code=0x7ffc0000 [ 549.622441][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.649690][ T4332] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 549.673258][ T4332] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 549.703226][ T27] audit: type=1326 audit(1750472635.454:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19534 comm="syz.3.6474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0838e929 code=0x7ffc0000 [ 549.725633][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.742011][ T4332] usb 2-1: Manufacturer: syz [ 549.754945][ T4332] usb 2-1: config 0 descriptor?? [ 549.782244][ T27] audit: type=1326 audit(1750472635.484:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19534 comm="syz.3.6474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f2d0838e929 code=0x7ffc0000 [ 549.893296][ T27] audit: type=1326 audit(1750472635.484:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19534 comm="syz.3.6474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0838e929 code=0x7ffc0000 [ 550.000445][ T27] audit: type=1326 audit(1750472635.484:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19534 comm="syz.3.6474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0838e929 code=0x7ffc0000 [ 550.022872][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.093201][ T4332] rc_core: IR keymap rc-hauppauge not found [ 550.099519][ T4332] Registered IR keymap rc-empty [ 550.146253][ T4332] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 550.185803][ T4332] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29 [ 550.264433][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 550.283311][ T4332] usb 2-1: USB disconnect, device number 28 [ 550.755492][T19578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6490'. [ 551.033682][ T8233] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 551.223220][ T8233] usb 6-1: Using ep0 maxpacket: 32 [ 551.231041][ T8233] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.242726][ T8233] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.252738][ T8233] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 551.263454][ T4298] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 551.273289][ T8233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.284549][ T8233] usb 6-1: config 0 descriptor?? [ 551.297277][ T8233] hub 6-1:0.0: USB hub found [ 551.465797][ T4298] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 551.483163][ T4298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.500762][ T8233] hub 6-1:0.0: 5 ports detected [ 551.503990][ T4298] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 551.506654][ T8233] hub 6-1:0.0: insufficient power available to use all downstream ports [ 551.523175][ T4298] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 551.523200][ T4298] usb 1-1: Manufacturer: syz [ 551.534638][ T4298] usb 1-1: config 0 descriptor?? [ 551.663364][ T4298] rc_core: IR keymap rc-hauppauge not found [ 551.669334][ T4298] Registered IR keymap rc-empty [ 551.684847][ T4298] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 551.704341][ T4298] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input30 [ 551.708099][ T8233] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 551.740777][ T8233] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 551.779635][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 551.780085][ T8233] usbhid 6-1:0.0: can't add hid device: -71 [ 551.788204][ T4305] usb 1-1: USB disconnect, device number 26 [ 551.815578][ T8233] usbhid: probe of 6-1:0.0 failed with error -71 [ 551.876125][ T8233] usb 6-1: USB disconnect, device number 15 [ 552.443908][T19628] device vlan0 entered promiscuous mode [ 552.458114][T19632] gfs2: not a GFS2 filesystem [ 553.813233][T19678] No such timeout policy "syz0" [ 554.027619][T19681] loop3: detected capacity change from 0 to 128 [ 554.202062][T19656] loop5: detected capacity change from 0 to 32768 [ 554.259952][T19656] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 554.316309][T19656] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 554.443580][T19656] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid bg_blkno of 4278207136 [ 554.510871][T19656] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 554.566641][T19656] OCFS2: File system is now read-only. [ 554.587199][T19656] (syz.5.6508,19656,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 554.631004][T19656] (syz.5.6508,19656,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 554.680234][T19656] (syz.5.6508,19656,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 554.710772][T19656] (syz.5.6508,19656,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 554.744703][T19656] (syz.5.6508,19656,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 554.783305][T19656] (syz.5.6508,19656,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 554.822178][T19656] (syz.5.6508,19656,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 554.842420][T19656] (syz.5.6508,19656,1):ocfs2_mknod:385 ERROR: status = -30 [ 554.907202][T19656] (syz.5.6508,19656,1):ocfs2_mknod:502 ERROR: status = -30 [ 554.959169][T19656] (syz.5.6508,19656,1):ocfs2_create:676 ERROR: status = -30 [ 554.984400][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6527'. [ 555.087263][T19670] loop7: detected capacity change from 0 to 40427 [ 555.109037][T10783] ocfs2: Unmounting device (7,5) on (node local) [ 555.144147][T19670] F2FS-fs (loop7): invalid crc value [ 555.176076][T19670] F2FS-fs (loop7): Found nat_bits in checkpoint [ 555.397025][T19670] F2FS-fs (loop7): Start checkpoint disabled! [ 555.462824][T19670] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 555.771589][T19725] loop5: detected capacity change from 0 to 16 [ 555.834076][T19726] block device autoloading is deprecated and will be removed. [ 555.885316][T19725] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 555.994112][T19728] device vlan0 entered promiscuous mode [ 556.155477][T19731] loop3: detected capacity change from 0 to 65 [ 556.199003][T19731] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 556.923551][T19749] loop7: detected capacity change from 0 to 1024 [ 557.408453][T19768] MPI: mpi too large (124808 bits) [ 557.445207][T19765] loop3: detected capacity change from 0 to 1764 [ 557.771497][T19747] loop1: detected capacity change from 0 to 32768 [ 557.823992][T19747] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 557.900389][ T27] audit: type=1326 audit(1750472643.744:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19784 comm="syz.5.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751938e929 code=0x7ffc0000 [ 557.923040][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.935434][ T27] audit: type=1326 audit(1750472643.784:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19784 comm="syz.5.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751938e929 code=0x7ffc0000 [ 558.019781][T19747] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 558.097223][ T27] audit: type=1326 audit(1750472643.854:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19784 comm="syz.5.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f751938e929 code=0x7ffc0000 [ 558.164108][T19747] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid bg_blkno of 4278207136 [ 558.191874][ T27] audit: type=1326 audit(1750472643.854:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19784 comm="syz.5.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751938e929 code=0x7ffc0000 [ 558.253200][T19747] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 558.273227][T19747] OCFS2: File system is now read-only. [ 558.303245][T19747] (syz.1.6540,19747,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 558.320665][ T27] audit: type=1326 audit(1750472643.854:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19784 comm="syz.5.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751938e929 code=0x7ffc0000 [ 558.343543][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.351301][T19747] (syz.1.6540,19747,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 558.411780][T19747] (syz.1.6540,19747,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 558.443205][T19747] (syz.1.6540,19747,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 558.451799][T19799] loop5: detected capacity change from 0 to 64 [ 558.473481][T19747] (syz.1.6540,19747,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 558.559623][T19797] loop3: detected capacity change from 0 to 4096 [ 558.563865][T19747] (syz.1.6540,19747,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 558.595173][T19797] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 558.628801][T19747] (syz.1.6540,19747,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 558.673595][T19747] (syz.1.6540,19747,0):ocfs2_mknod:385 ERROR: status = -30 [ 558.681043][T19747] (syz.1.6540,19747,0):ocfs2_mknod:502 ERROR: status = -30 [ 558.691487][T19797] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 558.731517][T19747] (syz.1.6540,19747,0):ocfs2_create:676 ERROR: status = -30 [ 558.767041][T19797] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 558.819169][T19797] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 558.827315][T19807] usb usb8: usbfs: process 19807 (syz.0.6570) did not claim interface 8 before use [ 558.863275][ T4260] ocfs2: Unmounting device (7,1) on (node local) [ 558.870934][T19797] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 558.952813][T19797] ntfs: volume version 3.1. [ 559.763939][T19839] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.6586'. [ 559.783384][T19839] netlink: zone id is out of range [ 560.030869][T19849] loop1: detected capacity change from 0 to 64 [ 560.333675][T19855] xt_TPROXY: Can be used only with -p tcp or -p udp [ 560.397608][T19858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6595'. [ 560.418107][T19859] loop5: detected capacity change from 0 to 256 [ 560.423301][T19858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6595'. [ 560.427511][T19824] loop7: detected capacity change from 0 to 32768 [ 560.447610][T19859] exfat: Deprecated parameter 'utf8' [ 560.455729][T19859] exfat: Deprecated parameter 'utf8' [ 560.462865][T19824] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 scanned by syz.7.6579 (19824) [ 560.496315][T19859] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7bac8b1f, utbl_chksum : 0xe619d30d) [ 560.523761][T19824] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 560.578265][T19824] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 560.636021][T19824] BTRFS info (device loop7): force zlib compression, level 3 [ 560.653497][T19824] BTRFS info (device loop7): force clearing of disk cache [ 560.696364][T19824] BTRFS info (device loop7): setting nodatasum [ 560.702612][T19824] BTRFS info (device loop7): allowing degraded mounts [ 560.763325][T19824] BTRFS info (device loop7): enabling disk space caching [ 560.770463][T19824] BTRFS info (device loop7): disk space caching is enabled [ 560.889423][T19843] loop3: detected capacity change from 0 to 32768 [ 560.966067][T19872] loop1: detected capacity change from 0 to 1024 [ 561.009440][T19872] EXT4-fs: Ignoring removed oldalloc option [ 561.057597][T19872] EXT4-fs: Ignoring removed orlov option [ 561.216815][T19872] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 561.356251][T19897] netlink: 'syz.5.6606': attribute type 4 has an invalid length. [ 561.410415][T19824] BTRFS info (device loop7): rebuilding free space tree [ 561.503425][T19824] BTRFS info (device loop7): disabling free space tree [ 561.511749][T19824] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 561.526786][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 561.564064][T19824] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 561.910810][T17518] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 562.393769][ T6109] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop7 scanned by udevd (6109) [ 562.699824][T19943] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 562.837299][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.843704][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.984907][T19951] loop3: detected capacity change from 0 to 1024 [ 563.001489][T19953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6632'. [ 563.070353][T19955] loop5: detected capacity change from 0 to 8 [ 563.396676][T19955] SQUASHFS error: Failed to read block 0x106: -5 [ 563.958959][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 563.958975][ T27] audit: type=1800 audit(1750472649.804:121): pid=19955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6631" name="file2" dev="loop5" ino=6 res=0 errno=0 [ 564.157257][T19981] netlink: 'syz.1.6646': attribute type 12 has an invalid length. [ 564.198384][T19981] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6646'. [ 564.424517][T19977] loop3: detected capacity change from 0 to 32768 [ 565.136787][T20012] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 565.790054][T20039] loop1: detected capacity change from 0 to 64 [ 566.458623][T16719] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 566.563296][T20073] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.6687'. [ 566.572679][T20073] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.6687'. [ 566.653243][T16719] usb 8-1: Using ep0 maxpacket: 16 [ 566.666960][T16719] usb 8-1: config 8 has an invalid interface number: 39 but max is 0 [ 566.701047][T16719] usb 8-1: config 8 has no interface number 0 [ 566.718090][T16719] usb 8-1: config 8 interface 39 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 521 [ 566.729859][T16719] usb 8-1: config 8 interface 39 has no altsetting 0 [ 566.739872][T16719] usb 8-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 566.750488][T16719] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.759135][T16719] usb 8-1: Product: syz [ 566.773215][T16719] usb 8-1: Manufacturer: syz [ 566.777999][T16719] usb 8-1: SerialNumber: syz [ 566.806465][T20057] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 567.033620][T16719] ipheth 8-1:8.39: Unable to find endpoints [ 567.062158][T16719] usb 8-1: USB disconnect, device number 3 [ 567.191705][T20096] raw_sendmsg: syz.3.6696 forgot to set AF_INET. Fix it! [ 568.294995][T20148] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.6721'. [ 568.544991][T20157] binder: 20155:20157 ioctl c018620c 200000000040 returned -1 [ 568.727825][T20130] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 568.854235][T20170] autofs4:pid:20170:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 568.906498][T20172] loop7: detected capacity change from 0 to 4096 [ 568.929746][T20172] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 568.963399][T16719] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 569.159099][T16719] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 569.183421][T16719] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.203376][T16719] usb 4-1: config 0 has no interface number 0 [ 569.219743][T16719] usb 4-1: config 0 interface 52 has no altsetting 0 [ 569.251304][T16719] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 569.281046][T16719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 569.302295][T16719] usb 4-1: SerialNumber: syz [ 569.340804][T16719] usb 4-1: config 0 descriptor?? [ 569.778960][ T1168] usb 4-1: USB disconnect, device number 25 [ 569.801516][T20177] loop1: detected capacity change from 0 to 32768 [ 570.212530][T20208] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6754'. [ 570.435055][ T27] audit: type=1326 audit(1750472656.284:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20217 comm="syz.7.6756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 570.464008][T20216] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 570.539988][ T27] audit: type=1326 audit(1750472656.284:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20217 comm="syz.7.6756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 570.617087][ T27] audit: type=1326 audit(1750472656.284:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20217 comm="syz.7.6756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 570.639456][ C1] vkms_vblank_simulate: vblank timer overrun [ 570.978747][T20238] xt_TPROXY: Can be used only with -p tcp or -p udp [ 571.331164][T20254] loop3: detected capacity change from 0 to 512 [ 571.408478][T20254] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.6773: iget: bad extended attribute block 1 [ 571.499803][T20266] loop1: detected capacity change from 0 to 256 [ 571.578446][T20254] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.6773: couldn't read orphan inode 15 (err -117) [ 571.624949][T20266] FAT-fs (loop1): Directory bread(block 64) failed [ 571.631651][T20254] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 571.670178][T20266] FAT-fs (loop1): Directory bread(block 65) failed [ 571.690271][T20266] FAT-fs (loop1): Directory bread(block 66) failed [ 571.698168][T20266] FAT-fs (loop1): Directory bread(block 67) failed [ 571.718225][T20266] FAT-fs (loop1): Directory bread(block 68) failed [ 571.740341][T20266] FAT-fs (loop1): Directory bread(block 69) failed [ 571.754854][T20266] FAT-fs (loop1): Directory bread(block 70) failed [ 571.771700][T20266] FAT-fs (loop1): Directory bread(block 71) failed [ 571.813558][T20266] FAT-fs (loop1): Directory bread(block 72) failed [ 571.820175][T20266] FAT-fs (loop1): Directory bread(block 73) failed [ 571.870212][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 572.672629][T20306] loop1: detected capacity change from 0 to 64 [ 573.015748][T20318] xt_limit: Overflow, try lower: 65536/2147483648 [ 573.513366][T16719] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 573.713298][T16719] usb 4-1: Using ep0 maxpacket: 16 [ 573.720405][T16719] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 573.740640][T16719] usb 4-1: config 8 has no interface number 0 [ 573.747968][T16719] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 521 [ 573.771936][T16719] usb 4-1: config 8 interface 39 has no altsetting 0 [ 573.794474][T20341] xt_cgroup: invalid path, errno=-2 [ 573.811417][T16719] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 573.831005][T16719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.848533][T16719] usb 4-1: Product: syz [ 573.871665][T16719] usb 4-1: Manufacturer: syz [ 573.884778][T16719] usb 4-1: SerialNumber: syz [ 573.921324][T20327] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 574.013537][T20345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6815'. [ 574.150087][T16719] ipheth 4-1:8.39: Unable to find endpoints [ 574.166822][T16719] usb 4-1: USB disconnect, device number 26 [ 574.408656][ T27] audit: type=1326 audit(1750472660.254:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20355 comm="syz.7.6821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 574.455530][ T27] audit: type=1326 audit(1750472660.254:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20355 comm="syz.7.6821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 574.513483][ T27] audit: type=1326 audit(1750472660.254:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20355 comm="syz.7.6821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 574.545908][T20358] loop1: detected capacity change from 0 to 4096 [ 574.555801][T20358] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 574.580761][ T27] audit: type=1326 audit(1750472660.254:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20355 comm="syz.7.6821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 574.894130][T20373] loop1: detected capacity change from 0 to 512 [ 574.979233][T20377] loop7: detected capacity change from 0 to 256 [ 574.989024][T20373] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 574.998623][T20373] ext4 filesystem being mounted at /1389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.069236][T20377] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 575.085352][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 575.373459][ T14] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 575.563196][ T14] usb 8-1: Using ep0 maxpacket: 32 [ 575.570413][ T14] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 575.615753][ T14] usb 8-1: config 0 has no interface number 0 [ 575.629047][ T14] usb 8-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 575.663022][ T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.692686][ T14] usb 8-1: Product: syz [ 575.700029][ T14] usb 8-1: Manufacturer: syz [ 575.707481][ T14] usb 8-1: SerialNumber: syz [ 575.741402][ T14] usb 8-1: config 0 descriptor?? [ 575.758501][ T14] hub 8-1:0.89: bad descriptor, ignoring hub [ 575.777105][ T14] hub: probe of 8-1:0.89 failed with error -5 [ 575.810463][ T14] option 8-1:0.89: GSM modem (1-port) converter detected [ 575.867661][ T14] usb 8-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 576.014396][T20410] netlink: 'syz.0.6846': attribute type 10 has an invalid length. [ 576.023047][T20410] bridge0: port 1(batadv0) entered disabled state [ 576.084960][T20410] bridge0: port 1(batadv0) entered blocking state [ 576.091573][T20410] bridge0: port 1(batadv0) entered forwarding state [ 576.110030][ T14] usb 8-1: USB disconnect, device number 4 [ 576.120587][T20410] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 576.135477][ T14] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 576.162736][ T14] option 8-1:0.89: device disconnected [ 576.189358][T20415] loop3: detected capacity change from 0 to 16 [ 576.243789][T20415] erofs: (device loop3): mounted with root inode @ nid 36. [ 576.296291][T20415] syz.3.6858: attempt to access beyond end of device [ 576.296291][T20415] loop3: rw=524288, sector=4294967295, nr_sectors = 1 limit=16 [ 576.346462][T20415] syz.3.6858: attempt to access beyond end of device [ 576.346462][T20415] loop3: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 576.361949][ T27] audit: type=1800 audit(1750472662.214:129): pid=20415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6858" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 576.570769][T20426] No such timeout policy "syz0" [ 577.286030][T20451] netlink: 'syz.3.6867': attribute type 10 has an invalid length. [ 577.366231][T20451] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 577.449761][T20432] loop1: detected capacity change from 0 to 32768 [ 577.520792][T20432] XFS (loop1): Mounting V5 Filesystem [ 577.631489][T20432] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 577.637099][T20468] loop7: detected capacity change from 0 to 256 [ 577.695418][T20432] XFS (loop1): Starting recovery (logdev: internal) [ 577.731910][T20432] XFS (loop1): Ending recovery (logdev: internal) [ 577.765497][T20471] loop3: detected capacity change from 0 to 4096 [ 577.787949][T20471] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 577.810650][T20468] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb080095b, utbl_chksum : 0xe619d30d) [ 577.920306][ T4260] XFS (loop1): Unmounting Filesystem [ 578.180053][T20477] x_tables: duplicate entry at hook 2 [ 578.601850][T20491] MPI: mpi too large (124808 bits) [ 578.843368][ T14] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 578.878040][ T27] audit: type=1326 audit(1750472664.724:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.3.6888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0838e929 code=0x7ffc0000 [ 578.906153][ T27] audit: type=1326 audit(1750472664.754:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.3.6888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0838e929 code=0x7ffc0000 [ 578.930357][ T27] audit: type=1326 audit(1750472664.754:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.3.6888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f2d0838e929 code=0x7ffc0000 [ 578.960011][ T27] audit: type=1326 audit(1750472664.754:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.3.6888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0838e929 code=0x7ffc0000 [ 578.991110][ T27] audit: type=1326 audit(1750472664.754:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.3.6888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0838e929 code=0x7ffc0000 [ 579.083330][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 579.094436][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 579.110854][ T14] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 579.133245][ T4332] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 579.142587][ T14] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 579.194294][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.212722][ T14] usb 1-1: Product: syz [ 579.220534][ T14] usb 1-1: Manufacturer: syz [ 579.236049][ T14] usb 1-1: SerialNumber: syz [ 579.278396][ T14] usb 1-1: config 0 descriptor?? [ 579.298868][T20514] loop7: detected capacity change from 0 to 1024 [ 579.346331][ T4332] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 579.374245][ T4332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.407046][ T4332] usb 2-1: config 0 has no interface number 0 [ 579.433266][ T4332] usb 2-1: config 0 interface 52 has no altsetting 0 [ 579.462285][ T4332] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 579.492007][ T4332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 579.523226][ T4332] usb 2-1: SerialNumber: syz [ 579.530321][ T4332] usb 2-1: config 0 descriptor?? [ 579.709302][ T14] usb 1-1: USB disconnect, device number 27 [ 579.781261][ T4268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 579.813339][ T4270] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 579.822811][ T4270] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 579.832897][ T4270] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 579.841279][ T4270] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 579.849524][ T4270] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 579.977901][ T4298] usb 2-1: USB disconnect, device number 29 [ 580.461068][T20521] chnl_net:caif_netlink_parms(): no params data found [ 580.645944][T20552] loop1: detected capacity change from 0 to 8 [ 580.664927][T20521] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.682497][T20521] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.690926][T20521] device bridge_slave_0 entered promiscuous mode [ 580.725838][T20521] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.733006][T20521] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.739369][T20555] loop7: detected capacity change from 0 to 16 [ 580.793299][T20552] SQUASHFS error: Failed to read block 0x6a4: -5 [ 580.800653][T20552] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 580.809230][T20521] device bridge_slave_1 entered promiscuous mode [ 580.825604][T20555] erofs: (device loop7): mounted with root inode @ nid 36. [ 580.851043][T20552] SQUASHFS error: Unable to read inode 0x87 [ 580.859761][T20555] syz.7.6911: attempt to access beyond end of device [ 580.859761][T20555] loop7: rw=524288, sector=4294967295, nr_sectors = 1 limit=16 [ 580.913708][T20555] syz.7.6911: attempt to access beyond end of device [ 580.913708][T20555] loop7: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 580.936089][T20521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.963396][ T27] audit: type=1800 audit(1750472666.814:135): pid=20555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6911" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 580.970124][T20521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.139121][T20521] team0: Port device team_slave_0 added [ 581.167769][T20521] team0: Port device team_slave_1 added [ 581.289640][T20521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.310415][T20521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.393254][T20521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.498170][T20521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.506407][T20521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.562544][T20521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.733529][T20521] device hsr_slave_0 entered promiscuous mode [ 581.743053][T20521] device hsr_slave_1 entered promiscuous mode [ 581.751274][T20521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.765859][T20521] Cannot create hsr debugfs directory [ 581.877695][ T4270] Bluetooth: hci5: command 0x0409 tx timeout [ 582.297953][T20521] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 582.315110][T20579] loop7: detected capacity change from 0 to 32768 [ 582.346412][T20521] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 582.386002][T20521] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 582.400437][T20599] loop1: detected capacity change from 0 to 256 [ 582.445308][T20521] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 582.461408][T20599] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 582.732656][T20521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.793554][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 582.802547][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 582.822929][T20521] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.841163][ T22] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 582.856827][T20611] xt_HMARK: spi-set and port-set can't be combined [ 582.871430][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 582.881218][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 582.890648][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.897834][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.935238][T20610] netlink: 'syz.3.6939': attribute type 10 has an invalid length. [ 582.980982][T20610] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 583.033298][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 583.046849][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 583.073773][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 583.084400][ T22] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 583.096688][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 583.115063][ T22] usb 2-1: config 0 has no interface number 0 [ 583.125349][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.132544][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.166758][ T22] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 583.181041][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 583.189066][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.198667][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 583.208300][ T22] usb 2-1: Product: syz [ 583.212520][ T22] usb 2-1: Manufacturer: syz [ 583.242294][ T22] usb 2-1: SerialNumber: syz [ 583.251512][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 583.262661][ T22] usb 2-1: config 0 descriptor?? [ 583.280227][ T22] hub 2-1:0.89: bad descriptor, ignoring hub [ 583.286719][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 583.295724][ T22] hub: probe of 2-1:0.89 failed with error -5 [ 583.303878][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 583.317807][ T22] option 2-1:0.89: GSM modem (1-port) converter detected [ 583.325804][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 583.367632][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 583.376227][ T22] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 583.388458][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 583.427244][T20521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 583.447570][T20521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 583.461711][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 583.469483][ T27] audit: type=1107 audit(1750472669.294:136): pid=20620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 583.478126][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 583.565048][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.617773][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 583.733443][ T4332] usb 2-1: USB disconnect, device number 30 [ 583.750508][ T4332] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 583.786747][ T4332] option 2-1:0.89: device disconnected [ 583.956286][ T4270] Bluetooth: hci5: command 0x041b tx timeout [ 584.296077][T20643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6954'. [ 584.312627][T20643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6954'. [ 584.329521][T20643] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6954'. [ 584.339451][T20623] loop7: detected capacity change from 0 to 32768 [ 584.358968][T17583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 584.370795][T17583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 584.397701][T20521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.818496][T17583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 584.829868][T17583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 584.853491][T17583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 584.868319][T17583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 584.877329][T17583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 584.886190][T17583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 584.896866][T20521] device veth0_vlan entered promiscuous mode [ 584.910067][T20521] device veth1_vlan entered promiscuous mode [ 584.934783][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 584.943181][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 584.952498][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 584.961555][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 584.978540][T20521] device veth0_macvtap entered promiscuous mode [ 584.988543][T20521] device veth1_macvtap entered promiscuous mode [ 585.008613][T20521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.019407][T20521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.029448][T20521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.040327][T20521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.051932][T20521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.062995][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 585.071732][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 585.080723][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 585.090040][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 585.101192][T20521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.112276][T20521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.122244][T20521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.133859][T20521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.146211][T20521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.157856][T20521] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.166696][T20521] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.175941][T20521] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.184928][T20521] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.195952][T17579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 585.205839][T17579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 585.287672][T17583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.306849][T17583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.331777][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 585.345973][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.355415][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.372135][T17579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 585.983321][T20676] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6961'. [ 585.992768][T20676] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6961'. [ 586.033437][ T4270] Bluetooth: hci5: command 0x040f tx timeout [ 586.050895][T20676] netlink: 'syz.1.6961': attribute type 5 has an invalid length. [ 586.068781][T20679] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6968'. [ 586.088226][T20676] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6961'. [ 586.906459][T20715] netlink: 'syz.0.6985': attribute type 1 has an invalid length. [ 586.941097][T20716] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 587.001251][T20716] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.159440][T20722] loop8: detected capacity change from 0 to 256 [ 587.316677][T20726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6990'. [ 587.366708][T20726] netlink: 'syz.3.6990': attribute type 1 has an invalid length. [ 587.896951][T20707] loop1: detected capacity change from 0 to 32768 [ 588.008671][T20707] XFS (loop1): Mounting V5 Filesystem [ 588.062798][T20707] XFS (loop1): Ending clean mount [ 588.113301][ T4270] Bluetooth: hci5: command 0x0419 tx timeout [ 588.121646][T20758] program syz.8.7002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 588.174057][T20707] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 588.200312][T20707] XFS (loop1): Unmount and run xfs_repair [ 588.213400][T20707] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 588.231286][T20707] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 588.308774][T20707] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 588.340909][T20760] loop3: detected capacity change from 0 to 4096 [ 588.351904][T20760] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 588.372439][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.379435][T20707] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 588.413402][T20707] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 588.463026][T20707] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 588.523016][T20707] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 588.523998][T20760] ntfs: volume version 3.1. [ 588.592274][T20707] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 588.616376][T20707] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 588.663984][T20707] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x4 len 4 error 74 [ 588.773480][T20707] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1784/0x1e50 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 588.853142][T20707] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 588.961392][ T4260] XFS (loop1): Unmounting Filesystem [ 589.557656][T20805] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.7025'. [ 589.755590][T20813] openvswitch: netlink: Message has 1 unknown bytes. [ 590.042828][T20825] loop7: detected capacity change from 0 to 64 [ 590.353379][T20833] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7038'. [ 590.407489][T20839] loop1: detected capacity change from 0 to 256 [ 590.690917][T20849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7044'. [ 590.749781][T20848] loop8: detected capacity change from 0 to 2048 [ 590.830139][T20848] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 590.964642][T20858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7049'. [ 591.233797][T20867] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7055'. [ 591.242870][T20867] netlink: 43 bytes leftover after parsing attributes in process `syz.7.7055'. [ 591.284954][T20867] netlink: 'syz.7.7055': attribute type 5 has an invalid length. [ 591.316584][T20867] netlink: 43 bytes leftover after parsing attributes in process `syz.7.7055'. [ 591.333854][T20871] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7056'. [ 591.353364][T20871] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7056'. [ 591.421509][T20874] loop1: detected capacity change from 0 to 64 [ 591.421605][T20875] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.778110][T20886] loop8: detected capacity change from 0 to 2048 [ 591.849199][T20886] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 592.215900][T20905] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7070'. [ 592.253202][T20905] netlink: 'syz.8.7070': attribute type 5 has an invalid length. [ 592.346037][ T27] audit: type=1326 audit(1750472678.194:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20906 comm="syz.7.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 592.423846][T20909] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.451399][ T27] audit: type=1326 audit(1750472678.194:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20906 comm="syz.7.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 592.542668][ T27] audit: type=1326 audit(1750472678.194:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20906 comm="syz.7.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 592.601612][ T27] audit: type=1326 audit(1750472678.194:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20906 comm="syz.7.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 593.163670][ T4299] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 593.311120][T20943] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 593.350904][T20943] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 593.367694][ T4299] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 593.393433][ T4299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.417611][ T4299] usb 1-1: Product: syz [ 593.427005][ T4299] usb 1-1: Manufacturer: syz [ 593.437358][ T4299] usb 1-1: SerialNumber: syz [ 593.454796][ T4299] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 593.503976][ T4299] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 593.591574][T20951] loop7: detected capacity change from 0 to 764 [ 593.798022][T20928] loop3: detected capacity change from 0 to 32768 [ 593.883025][T20928] (syz.3.7085,20928,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 593.918343][T20928] (syz.3.7085,20928,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 593.945617][ T22] usb 1-1: USB disconnect, device number 28 [ 594.001070][T20928] (syz.3.7085,20928,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 594.085562][T20928] JBD2: Ignoring recovery information on journal [ 594.213649][T20928] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 594.336187][T20928] [ 594.338576][T20928] ====================================================== [ 594.345625][T20928] WARNING: possible circular locking dependency detected [ 594.352688][T20928] 6.1.141-syzkaller #0 Not tainted [ 594.357827][T20928] ------------------------------------------------------ [ 594.364867][T20928] syz.3.7085/20928 is trying to acquire lock: [ 594.370933][T20928] ffff888059f8df48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 594.383492][T20928] [ 594.383492][T20928] but task is already holding lock: [ 594.390878][T20928] ffff88804dbe40a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 594.400515][T20928] [ 594.400515][T20928] which lock already depends on the new lock. [ 594.400515][T20928] [ 594.410932][T20928] [ 594.410932][T20928] the existing dependency chain (in reverse order) is: [ 594.419955][T20928] [ 594.419955][T20928] -> #6 (&dquot->dq_lock){+.+.}-{3:3}: [ 594.427615][T20928] __mutex_lock+0x120/0xaf0 [ 594.432669][T20928] dquot_commit+0x5a/0x410 [ 594.437633][T20928] ext4_write_dquot+0x1f0/0x360 [ 594.443030][T20928] mark_all_dquot_dirty+0x1e3/0x400 [ 594.448773][T20928] __dquot_free_space+0x7ec/0xbc0 [ 594.454333][T20928] ext4_free_blocks+0x1bab/0x2640 [ 594.459905][T20928] ext4_ext_remove_space+0x1f0d/0x4490 [ 594.465895][T20928] ext4_ext_truncate+0x211/0x370 [ 594.471363][T20928] ext4_truncate+0xa0b/0x1230 [ 594.476569][T20928] ext4_evict_inode+0xb35/0x1100 [ 594.482032][T20928] evict+0x485/0x870 [ 594.486463][T20928] ext4_orphan_cleanup+0xbd3/0x1400 [ 594.492188][T20928] ext4_fill_super+0x7b78/0x8110 [ 594.497658][T20928] get_tree_bdev+0x3f1/0x610 [ 594.502780][T20928] vfs_get_tree+0x88/0x270 [ 594.507729][T20928] do_new_mount+0x24a/0xa40 [ 594.512768][T20928] __se_sys_mount+0x2d6/0x3c0 [ 594.517979][T20928] do_syscall_64+0x4c/0xa0 [ 594.522938][T20928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.529406][T20928] [ 594.529406][T20928] -> #5 (&ei->i_data_sem){++++}-{3:3}: [ 594.537060][T20928] down_write+0x36/0x60 [ 594.541752][T20928] ext4_truncate+0x987/0x1230 [ 594.546955][T20928] ext4_setattr+0x10cb/0x19f0 [ 594.552168][T20928] notify_change+0xc74/0xf40 [ 594.557295][T20928] do_truncate+0x197/0x220 [ 594.562238][T20928] do_sys_ftruncate+0x312/0x3c0 [ 594.567629][T20928] do_syscall_64+0x4c/0xa0 [ 594.572616][T20928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.579051][T20928] [ 594.579051][T20928] -> #4 (jbd2_handle){++++}-{0:0}: [ 594.586360][T20928] start_this_handle+0x1f49/0x2150 [ 594.592034][T20928] jbd2__journal_start+0x2b7/0x5a0 [ 594.597692][T20928] jbd2_journal_start+0x26/0x30 [ 594.603107][T20928] ocfs2_start_trans+0x372/0x6c0 [ 594.608591][T20928] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 594.614854][T20928] ocfs2_dismount_volume+0x1fc/0x930 [ 594.620674][T20928] generic_shutdown_super+0x130/0x340 [ 594.626585][T20928] kill_block_super+0x7c/0xe0 [ 594.631806][T20928] deactivate_locked_super+0x93/0xf0 [ 594.637624][T20928] cleanup_mnt+0x463/0x4f0 [ 594.642577][T20928] task_work_run+0x1ca/0x250 [ 594.647701][T20928] exit_to_user_mode_loop+0xe6/0x110 [ 594.653519][T20928] exit_to_user_mode_prepare+0xb1/0x140 [ 594.659609][T20928] syscall_exit_to_user_mode+0x16/0x40 [ 594.665696][T20928] do_syscall_64+0x58/0xa0 [ 594.670648][T20928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.677080][T20928] [ 594.677080][T20928] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 594.685600][T20928] down_read+0x42/0x2d0 [ 594.690288][T20928] ocfs2_start_trans+0x366/0x6c0 [ 594.695756][T20928] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 594.702011][T20928] ocfs2_dismount_volume+0x1fc/0x930 [ 594.707826][T20928] generic_shutdown_super+0x130/0x340 [ 594.713728][T20928] kill_block_super+0x7c/0xe0 [ 594.718951][T20928] deactivate_locked_super+0x93/0xf0 [ 594.724773][T20928] cleanup_mnt+0x463/0x4f0 [ 594.729717][T20928] task_work_run+0x1ca/0x250 [ 594.734834][T20928] exit_to_user_mode_loop+0xe6/0x110 [ 594.740645][T20928] exit_to_user_mode_prepare+0xb1/0x140 [ 594.746722][T20928] syscall_exit_to_user_mode+0x16/0x40 [ 594.752708][T20928] do_syscall_64+0x58/0xa0 [ 594.757662][T20928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.764094][T20928] [ 594.764094][T20928] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 594.771577][T20928] ocfs2_start_trans+0x267/0x6c0 [ 594.777058][T20928] ocfs2_write_info+0x117/0x350 [ 594.782437][T20928] dquot_set_dqinfo+0x459/0x6c0 [ 594.787823][T20928] quota_setinfo+0x2a4/0x2b0 [ 594.792959][T20928] __se_sys_quotactl+0x295/0x6b0 [ 594.798430][T20928] do_syscall_64+0x4c/0xa0 [ 594.803379][T20928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.809819][T20928] [ 594.809819][T20928] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 594.818691][T20928] down_write+0x36/0x60 [ 594.823379][T20928] ocfs2_lock_global_qf+0x1e5/0x270 [ 594.829105][T20928] ocfs2_write_info+0xd0/0x350 [ 594.834398][T20928] dquot_set_dqinfo+0x459/0x6c0 [ 594.839780][T20928] quota_setinfo+0x2a4/0x2b0 [ 594.844934][T20928] __se_sys_quotactl+0x295/0x6b0 [ 594.850412][T20928] do_syscall_64+0x4c/0xa0 [ 594.855357][T20928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.861789][T20928] [ 594.861789][T20928] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 594.872315][T20928] __lock_acquire+0x2cf8/0x7c50 [ 594.877716][T20928] lock_acquire+0x1b4/0x490 [ 594.882756][T20928] down_write+0x36/0x60 [ 594.887449][T20928] ocfs2_lock_global_qf+0x1c7/0x270 [ 594.893177][T20928] ocfs2_acquire_dquot+0x2a0/0xb10 [ 594.898814][T20928] dqget+0x778/0xeb0 [ 594.903237][T20928] __dquot_initialize+0x3b6/0xcb0 [ 594.908786][T20928] ocfs2_get_init_inode+0x138/0x1b0 [ 594.914510][T20928] ocfs2_mknod+0x8be/0x2350 [ 594.919537][T20928] ocfs2_mkdir+0x1b6/0x4a0 [ 594.924488][T20928] vfs_mkdir+0x387/0x570 [ 594.929255][T20928] do_mkdirat+0x1d0/0x430 [ 594.934107][T20928] __x64_sys_mkdirat+0x85/0x90 [ 594.939397][T20928] do_syscall_64+0x4c/0xa0 [ 594.944341][T20928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.950770][T20928] [ 594.950770][T20928] other info that might help us debug this: [ 594.950770][T20928] [ 594.960994][T20928] Chain exists of: [ 594.960994][T20928] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> &ei->i_data_sem --> &dquot->dq_lock [ 594.960994][T20928] [ 594.976921][T20928] Possible unsafe locking scenario: [ 594.976921][T20928] [ 594.984460][T20928] CPU0 CPU1 [ 594.989826][T20928] ---- ---- [ 594.995192][T20928] lock(&dquot->dq_lock); [ 594.999611][T20928] lock(&ei->i_data_sem); [ 595.006568][T20928] lock(&dquot->dq_lock); [ 595.013511][T20928] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 595.020893][T20928] [ 595.020893][T20928] *** DEADLOCK *** [ 595.020893][T20928] [ 595.029035][T20928] 4 locks held by syz.3.7085/20928: [ 595.034232][T20928] #0: ffff888026880460 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 595.043565][T20928] #1: ffff888059f8a648 (&type->i_mutex_dir_key#17/1){+.+.}-{3:3}, at: filename_create+0x1f2/0x450 [ 595.054294][T20928] #2: ffff88804d9fa648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 595.067967][T20928] #3: ffff88804dbe40a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 595.077985][T20928] [ 595.077985][T20928] stack backtrace: [ 595.083890][T20928] CPU: 1 PID: 20928 Comm: syz.3.7085 Not tainted 6.1.141-syzkaller #0 [ 595.092043][T20928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 595.102106][T20928] Call Trace: [ 595.105394][T20928] [ 595.108338][T20928] dump_stack_lvl+0x168/0x22e [ 595.113033][T20928] ? load_image+0x3b0/0x3b0 [ 595.117546][T20928] ? show_regs_print_info+0x12/0x12 [ 595.122754][T20928] ? print_circular_bug+0x12b/0x1a0 [ 595.127963][T20928] check_noncircular+0x274/0x310 [ 595.132931][T20928] ? add_chain_block+0x940/0x940 [ 595.137887][T20928] ? lockdep_lock+0xdc/0x1e0 [ 595.142491][T20928] ? lockdep_unlock+0x133/0x2d0 [ 595.147350][T20928] ? lockdep_lock+0x1e0/0x1e0 [ 595.152052][T20928] ? _find_first_zero_bit+0xcf/0x100 [ 595.157345][T20928] __lock_acquire+0x2cf8/0x7c50 [ 595.162221][T20928] ? verify_lock_unused+0x140/0x140 [ 595.167433][T20928] ? ocfs2_inode_lock_full_nested+0xcb3/0x1b20 [ 595.173607][T20928] lock_acquire+0x1b4/0x490 [ 595.178121][T20928] ? ocfs2_lock_global_qf+0x1c7/0x270 [ 595.183513][T20928] ? __might_sleep+0xd0/0xd0 [ 595.188124][T20928] ? read_lock_is_recursive+0x10/0x10 [ 595.193506][T20928] ? do_raw_spin_lock+0x11d/0x280 [ 595.198551][T20928] ? __rwlock_init+0x140/0x140 [ 595.203336][T20928] down_write+0x36/0x60 [ 595.207497][T20928] ? ocfs2_lock_global_qf+0x1c7/0x270 [ 595.212876][T20928] ocfs2_lock_global_qf+0x1c7/0x270 [ 595.218082][T20928] ? lock_buffer+0x80/0x80 [ 595.222508][T20928] ? trace_contention_end+0x5f/0x170 [ 595.227803][T20928] ocfs2_acquire_dquot+0x2a0/0xb10 [ 595.232928][T20928] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 595.238573][T20928] ? from_kuid+0x155/0x670 [ 595.243002][T20928] ? ocfs2_destroy_dquot+0x40/0x40 [ 595.248130][T20928] ? percpu_counter_add_batch+0x13b/0x160 [ 595.253856][T20928] dqget+0x778/0xeb0 [ 595.257766][T20928] __dquot_initialize+0x3b6/0xcb0 [ 595.262812][T20928] ? dquot_initialize+0x20/0x20 [ 595.267681][T20928] ? do_raw_spin_unlock+0x11d/0x230 [ 595.272902][T20928] ocfs2_get_init_inode+0x138/0x1b0 [ 595.278123][T20928] ? ocfs2_create_inode_in_orphan+0x1080/0x1080 [ 595.284379][T20928] ? __lock_acquire+0x13c0/0x7c50 [ 595.289420][T20928] ocfs2_mknod+0x8be/0x2350 [ 595.293948][T20928] ? ocfs2_mkdir+0x4a0/0x4a0 [ 595.298564][T20928] ? ocfs2_inode_lock_tracker+0x3e8/0x660 [ 595.304299][T20928] ? __lock_acquire+0x7c50/0x7c50 [ 595.309424][T20928] ? do_raw_spin_lock+0x11d/0x280 [ 595.314474][T20928] ? ocfs2_inode_unlock_tracker+0x26c/0x2e0 [ 595.320384][T20928] ? __lock_acquire+0x7c50/0x7c50 [ 595.325425][T20928] ? __rwlock_init+0x140/0x140 [ 595.330216][T20928] ? ocfs2_lookup+0x4d7/0xa60 [ 595.334909][T20928] ? do_raw_spin_unlock+0x11d/0x230 [ 595.340133][T20928] ? _raw_spin_unlock+0x24/0x40 [ 595.344997][T20928] ? put_pid+0xda/0x120 [ 595.349186][T20928] ocfs2_mkdir+0x1b6/0x4a0 [ 595.353623][T20928] ? make_kgid+0x640/0x640 [ 595.358054][T20928] ? ocfs2_symlink+0x2650/0x2650 [ 595.363006][T20928] ? HAS_UNMAPPED_ID+0x1d3/0x230 [ 595.367949][T20928] ? ocfs2_getattr+0x350/0x350 [ 595.372729][T20928] ? inode_permission+0xef/0x480 [ 595.377674][T20928] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 595.382712][T20928] ? security_inode_mkdir+0xb3/0x100 [ 595.388027][T20928] vfs_mkdir+0x387/0x570 [ 595.392278][T20928] do_mkdirat+0x1d0/0x430 [ 595.396611][T20928] ? vfs_mkdir+0x570/0x570 [ 595.401040][T20928] __x64_sys_mkdirat+0x85/0x90 [ 595.405812][T20928] do_syscall_64+0x4c/0xa0 [ 595.410241][T20928] ? clear_bhb_loop+0x60/0xb0 [ 595.414927][T20928] ? clear_bhb_loop+0x60/0xb0 [ 595.419615][T20928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.425525][T20928] RIP: 0033:0x7f2d0838e929 [ 595.429961][T20928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.449575][T20928] RSP: 002b:00007f2d092a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 595.457999][T20928] RAX: ffffffffffffffda RBX: 00007f2d085b5fa0 RCX: 00007f2d0838e929 [ 595.465982][T20928] RDX: 00000000000001c0 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 595.473960][T20928] RBP: 00007f2d08410b39 R08: 0000000000000000 R09: 0000000000000000 [ 595.481942][T20928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.489924][T20928] R13: 0000000000000000 R14: 00007f2d085b5fa0 R15: 00007fffec72c3c8 [ 595.497912][T20928] [ 595.501036][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.521701][ T4299] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 595.549556][ T4299] ath9k_htc: Failed to initialize the device [ 595.563772][ T22] usb 1-1: ath9k_htc: USB layer deinitialized [ 595.595996][T20928] (syz.3.7085,20928,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 595.633668][T20928] (syz.3.7085,20928,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 595.652985][T20928] (syz.3.7085,20928,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 595.661898][T20928] (syz.3.7085,20928,1):ocfs2_quota_read:201 ERROR: status = -5 [ 595.669877][T20928] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 5 [ 595.679171][T20928] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 595.691382][T20928] (syz.3.7085,20928,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 595.699422][T20928] (syz.3.7085,20928,1):ocfs2_mknod:314 ERROR: status = -5 [ 595.706782][T20928] (syz.3.7085,20928,1):ocfs2_mknod:502 ERROR: status = -5 [ 595.714259][T20928] (syz.3.7085,20928,1):ocfs2_mkdir:659 ERROR: status = -5 [ 595.739388][ T4251] ocfs2: Unmounting device (7,3) on (node local)