last executing test programs: 2m53.090374835s ago: executing program 4 (id=449): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r2, 0x0, 0x0, 0x0}, 0x30) 2m52.903714725s ago: executing program 4 (id=451): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x3ec2}}]}]}}}]}, 0x4c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 2m52.779503334s ago: executing program 4 (id=454): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x3, 0x8, &(0x7f00000002c0)='\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m52.507621954s ago: executing program 4 (id=457): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x62a3, &(0x7f000000efc0)="$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") mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) 2m51.422145s ago: executing program 4 (id=469): io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000100)=' ', 0x1}]) 2m50.490393696s ago: executing program 4 (id=482): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) 2m50.336458866s ago: executing program 32 (id=482): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) 1m48.465469272s ago: executing program 2 (id=1033): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = eventfd(0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x8) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/61, 0x3d}], 0x1) 1m48.17256468s ago: executing program 2 (id=1039): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf30, 0x111, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x800, &(0x7f0000000440)=ANY=[], 0x1, 0x1d2, &(0x7f0000000080)="$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") syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002208000000aa8cc8a9"], 0x0}, 0x0) 1m44.981165669s ago: executing program 2 (id=1071): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be0", 0x48, 0x0, 0x0, 0x0) 1m44.887408939s ago: executing program 2 (id=1073): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'default'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6b7, &(0x7f0000000c40)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x38]}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000023c0)={0x2020}, 0x2020) 1m44.616509868s ago: executing program 2 (id=1078): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0x34}}, 0x0) 1m44.087634716s ago: executing program 2 (id=1086): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x0, 0xfffffff9, 0x0, 0xede, 0xff, "00000008000000fe630500000000000000001f"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) 1m43.806060395s ago: executing program 33 (id=1086): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x0, 0xfffffff9, 0x0, 0xede, 0xff, "00000008000000fe630500000000000000001f"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) 1m21.905142756s ago: executing program 1 (id=1267): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000004780)=""/4107, 0x100b}], 0x1}}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x0, 0x0) 1m21.611292285s ago: executing program 1 (id=1272): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 1m21.248568374s ago: executing program 1 (id=1286): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xc1000504) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0), 0x4, 0x0) 1m21.143278273s ago: executing program 1 (id=1280): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x62a3, &(0x7f000000efc0)="$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") mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) 1m19.668391538s ago: executing program 1 (id=1292): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 1:23'], 0xa) 1m18.276198043s ago: executing program 1 (id=1300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x1000, &(0x7f0000090000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000040)={0x1}) 1m17.974999581s ago: executing program 34 (id=1300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x1000, &(0x7f0000090000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000040)={0x1}) 4.185373905s ago: executing program 3 (id=2032): syz_mount_image$exfat(&(0x7f0000001f80), &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x810, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@flushoncommit}, {@nossd_spread}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xca289435, &(0x7f0000000400)={0x0, 0x0, {0x1, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) 3.148868532s ago: executing program 5 (id=2045): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c0002800800", @ANYRES32=r2], 0x4c}}, 0x4000004) 3.052971461s ago: executing program 5 (id=2048): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x101, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') read$char_usb(r0, &(0x7f0000000000)=""/178, 0xb2) 2.9253179s ago: executing program 5 (id=2049): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000480)={0x20, 0x10, 0x2, {0x2, 0x7e8e703122aff25f}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.554527459s ago: executing program 7 (id=2056): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0x3, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xff1, &(0x7f0000001300)=""/4081, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.420511079s ago: executing program 7 (id=2057): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0xb73d) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) unlink(&(0x7f0000000000)='./file1\x00') 2.062901327s ago: executing program 3 (id=2061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002600000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a0006"], 0x44}}, 0x0) 2.031746097s ago: executing program 7 (id=2062): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfffffff8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x200}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x4c}}, 0x0) 1.214453794s ago: executing program 6 (id=2064): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x2}) 1.131829614s ago: executing program 7 (id=2066): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x400000, 0x10, {{@in=@multicast2, @in6=@remote, 0x0, 0x2, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffb, 0x101}, {0x5, 0x0, 0x9}, 0x0, 0x80}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004940)=ANY=[@ANYBLOB="b8000000140001000000000000000000e0000002000000000000000000000000fe80000000000000e7ffffff9ad4001300000000000000000a"], 0xb8}}, 0x0) 997.583394ms ago: executing program 3 (id=2067): mbind(&(0x7f00004b2000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x200002, &(0x7f0000000140)={[{@numtail}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@fat=@quiet}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@shortname_win95}, {@shortname_winnt}]}, 0x1, 0x21d, &(0x7f0000000240)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 863.655173ms ago: executing program 7 (id=2069): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, 0xffffffffffffffff) 860.669513ms ago: executing program 0 (id=2070): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aea00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) 844.710673ms ago: executing program 5 (id=2071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x94, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x69, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_b, @random="a57c0398f3a0", {0x3, 0x4}, @value=@ver_80211n={0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x40, @default, 0x61c, @val, @val, @void, @val={0x4, 0x6, {0x8, 0x9, 0x7fff, 0xf0}}, @val={0x6, 0x2, 0x4}, @val={0x2d, 0x1a, {0x2, 0x0, 0x7, 0x0, {0x8, 0xcd, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x4, 0x6}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x2}}}}]}, 0x94}}, 0x0) 839.479963ms ago: executing program 6 (id=2072): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) 708.337973ms ago: executing program 0 (id=2073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x81}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x9e}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 673.021012ms ago: executing program 6 (id=2074): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x4, 0xd9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 635.588792ms ago: executing program 5 (id=2075): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0/file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000100)=""/155, 0x9b) 630.991842ms ago: executing program 3 (id=2076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0xb8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 574.563072ms ago: executing program 7 (id=2077): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5558, &(0x7f0000000a00)="$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") open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, 0x0) 567.906492ms ago: executing program 0 (id=2078): r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', r1, 0x29, 0x0, 0x0, 0x9, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, @mcast2, 0x0, 0x0, 0x4}}) 483.624252ms ago: executing program 6 (id=2079): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000504000000000800e30000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b00010065727370616e00001800028006000200800000000500160008000000040012"], 0x48}}, 0x0) 421.875222ms ago: executing program 6 (id=2080): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) 374.518321ms ago: executing program 3 (id=2081): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(r0, 0x0, 0x20000000, 0x0) wait4(r0, 0x0, 0x20000000, 0x0) 299.159861ms ago: executing program 0 (id=2082): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f00000001c0)={[{@auto_da_alloc_val}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x463, &(0x7f0000000880)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes128, 0x1, @desc2}) 290.720421ms ago: executing program 6 (id=2083): timer_create(0x2, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 91.59585ms ago: executing program 0 (id=2084): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='ipvlan1\x00', 0x10) connect$phonet_pipe(r0, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x500) 91.21028ms ago: executing program 5 (id=2085): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) 90.59129ms ago: executing program 0 (id=2086): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 0s ago: executing program 3 (id=2087): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000100)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/108, 0x6c) getdents64(r0, 0xfffffffffffffffe, 0x29) kernel console output (not intermixed with test programs): QUASHFS error: Failed to read block 0x9b: -5 [ 179.672684][ T7611] SQUASHFS error: Unable to read metadata cache entry [99] [ 179.710284][ T7611] SQUASHFS error: Unable to read inode 0x127 [ 179.908971][ T4215] pantherlord 0003:0F30:0111.000C: nested delimiters [ 179.926452][ T4215] pantherlord 0003:0F30:0111.000C: item 0 1 2 10 parsing failed [ 179.953395][ T4215] pantherlord 0003:0F30:0111.000C: parse failed [ 179.974944][ T4215] pantherlord: probe of 0003:0F30:0111.000C failed with error -22 [ 180.184015][ T4642] usb 3-1: USB disconnect, device number 7 [ 180.650395][ T7692] loop5: detected capacity change from 0 to 4096 [ 180.653391][ T7696] loop3: detected capacity change from 0 to 2048 [ 180.833678][ T7696] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.840128][ T7709] loop2: detected capacity change from 0 to 1024 [ 180.851462][ T7692] NILFS (loop5): invalid segment: Checksum error in segment payload [ 180.860900][ T7692] NILFS (loop5): trying rollback from an earlier position [ 180.891146][ T7692] NILFS (loop5): recovery complete [ 180.911818][ T7696] EXT4-fs (loop3): shut down requested (2) [ 180.932847][ T7712] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.075806][ T4184] hfsplus: bad catalog entry type [ 181.364046][ T4184] bond0: (slave syz_tun): Releasing backup interface [ 181.417415][ T7733] loop0: detected capacity change from 0 to 64 [ 181.474745][ T5928] hfsplus: b-tree write err: -5, ino 4 [ 181.525601][ T1471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.563049][ T4184] syz-executor (4184) used greatest stack depth: 18560 bytes left [ 181.667567][ T7733] overlayfs: upper fs needs to support d_type. [ 181.689398][ T1471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.725258][ T7733] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 181.753264][ T7733] overlayfs: failed to set xattr on upper [ 181.760961][ T7733] overlayfs: ...falling back to index=off,metacopy=off. [ 181.777968][ T1471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.911107][ T1471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.968505][ T7743] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 181.987385][ T154] attempt to access beyond end of device [ 181.987385][ T154] loop0: rw=1, want=268435470, limit=64 [ 182.016840][ T154] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 182.105885][ T4179] Trying to free block not in datazone [ 182.441955][ T7725] loop3: detected capacity change from 0 to 32768 [ 182.555785][ T7763] loop5: detected capacity change from 0 to 512 [ 182.586256][ T7725] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1077 (7725) [ 182.651114][ T7763] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 182.694030][ T7725] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 182.736766][ T7725] BTRFS info (device loop3): setting nodatacow, compression disabled [ 182.767017][ T7725] BTRFS info (device loop3): force clearing of disk cache [ 182.774313][ T7725] BTRFS info (device loop3): setting datacow [ 182.806849][ T7725] BTRFS info (device loop3): doing ref verification [ 182.864254][ T7725] BTRFS info (device loop3): disabling free space tree [ 182.880887][ T7763] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.1096: corrupted inode contents [ 182.893996][ T7725] BTRFS info (device loop3): turning on async discard [ 182.894135][ T7763] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #16: comm syz.5.1096: mark_inode_dirty error [ 182.900891][ T7725] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 182.900922][ T7725] BTRFS info (device loop3): use zstd compression, level 3 [ 182.900947][ T7725] BTRFS info (device loop3): enabling ssd optimizations [ 182.900970][ T7725] BTRFS info (device loop3): using spread ssd allocation scheme [ 182.900992][ T7725] BTRFS info (device loop3): not using ssd optimizations [ 182.901009][ T7725] BTRFS info (device loop3): not using spread ssd allocation scheme [ 182.901026][ T7725] BTRFS info (device loop3): has skinny extents [ 182.967770][ T7779] loop1: detected capacity change from 0 to 8192 [ 182.983714][ T7763] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.1096: corrupted inode contents [ 183.078356][ T7779] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 183.126550][ T7779] REISERFS (device loop1): using journaled data mode [ 183.167257][ T7779] reiserfs: using flush barriers [ 183.172388][ T7763] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.1096: mark_inode_dirty error [ 183.226944][ T7779] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 183.261993][ T7763] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.1096: corrupted inode contents [ 183.278684][ T7725] BTRFS info (device loop3): clearing free space tree [ 183.297159][ T7779] REISERFS (device loop1): checking transaction log (loop1) [ 183.307397][ T7725] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 183.314378][ T7779] REISERFS (device loop1): Using r5 hash to sort names [ 183.317953][ T7725] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 183.324210][ T7763] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 183.344270][ T7779] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 183.406071][ T7779] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 183.431464][ T7763] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.1096: corrupted inode contents [ 183.461064][ T7814] misc userio: Begin command sent, but we're already running [ 183.496564][ T7763] EXT4-fs error (device loop5): ext4_truncate:4272: inode #16: comm syz.5.1096: mark_inode_dirty error [ 183.556101][ T7764] chnl_net:caif_netlink_parms(): no params data found [ 183.563282][ T7763] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 183.600125][ T7763] EXT4-fs (loop5): 1 truncate cleaned up [ 183.640908][ T7763] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.666929][ T7763] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.388178][ T1471] device hsr_slave_0 left promiscuous mode [ 184.452017][ T1471] device hsr_slave_1 left promiscuous mode [ 184.550262][ T1471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.566783][ T1471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.611258][ T1471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.642783][ T4523] kernel write not supported for file /snd/seq (pid: 4523 comm: kworker/1:9) [ 184.643051][ T1471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.689646][ T4523] Bluetooth: hci3: command 0x0409 tx timeout [ 184.713542][ T1471] device bridge_slave_1 left promiscuous mode [ 184.733878][ T1471] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.775903][ T1471] device bridge_slave_0 left promiscuous mode [ 184.784348][ T1471] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.805886][ T1471] device veth1_macvtap left promiscuous mode [ 184.812254][ T1471] device veth0_macvtap left promiscuous mode [ 184.818483][ T1471] device veth1_vlan left promiscuous mode [ 184.824300][ T1471] device veth0_vlan left promiscuous mode [ 185.060210][ T4523] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 185.144363][ T1471] team0 (unregistering): Port device team_slave_1 removed [ 185.164699][ T1471] team0 (unregistering): Port device team_slave_0 removed [ 185.180480][ T1471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.198591][ T1471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.289880][ T1471] bond0 (unregistering): Released all slaves [ 185.306872][ T4523] usb 4-1: Using ep0 maxpacket: 8 [ 185.367748][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 185.389730][ T7764] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.418553][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.437901][ T7764] device bridge_slave_0 entered promiscuous mode [ 185.456866][ T4523] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 185.466120][ T4523] usb 4-1: config 179 has no interface number 0 [ 185.485585][ T4523] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 185.505282][ T26] audit: type=1326 audit(1736481724.417:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.5.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa8887d29 code=0x7ffc0000 [ 185.526517][ T4523] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 185.530293][ T7764] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.569822][ T4523] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 185.587064][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.600033][ T26] audit: type=1326 audit(1736481724.467:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.5.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7effa8887d29 code=0x7ffc0000 [ 185.628142][ T4523] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 185.638037][ T7764] device bridge_slave_1 entered promiscuous mode [ 185.649469][ T7872] loop0: detected capacity change from 0 to 512 [ 185.664465][ T4523] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 185.687494][ T26] audit: type=1326 audit(1736481724.467:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.5.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa8887d29 code=0x7ffc0000 [ 185.716701][ T4523] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 185.729182][ T4523] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.759023][ T7855] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 185.792870][ T7872] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 185.835602][ T7764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.871670][ T7764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.903564][ T7872] EXT4-fs (loop0): 1 truncate cleaned up [ 185.916921][ T7872] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,minixdf,noblock_validity,,errors=continue. Quota mode: none. [ 186.042393][ T4652] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input15 [ 186.065588][ T7764] team0: Port device team_slave_0 added [ 186.134394][ T7764] team0: Port device team_slave_1 added [ 186.207236][ T4652] Bluetooth: hci0: command 0x0406 tx timeout [ 186.241504][ T1111] Bluetooth: hci2: command 0x0406 tx timeout [ 186.249373][ T1111] Bluetooth: hci1: command 0x0406 tx timeout [ 186.268390][ T4652] usb 4-1: USB disconnect, device number 7 [ 186.286818][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 186.295848][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 186.332825][ T4652] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 186.475989][ T7900] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 186.510284][ T7764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.542084][ T7764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.580521][ T7764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.618181][ T7764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.625171][ T7764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.767012][ T4652] Bluetooth: hci3: command 0x041b tx timeout [ 186.775040][ T7764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.127871][ T7764] device hsr_slave_0 entered promiscuous mode [ 187.157191][ T7764] device hsr_slave_1 entered promiscuous mode [ 187.192304][ T7924] netlink: 'syz.0.1140': attribute type 33 has an invalid length. [ 187.222667][ T7924] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1140'. [ 187.249063][ T7886] loop5: detected capacity change from 0 to 32768 [ 187.270095][ T7927] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 187.317044][ T7929] netlink: 'syz.0.1140': attribute type 10 has an invalid length. [ 187.344107][ T7886] XFS: ikeep mount option is deprecated. [ 187.372425][ T7931] loop1: detected capacity change from 0 to 4096 [ 187.391891][ T7886] XFS: noikeep mount option is deprecated. [ 187.420899][ T7929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.444479][ T7929] team0: Port device batadv0 added [ 187.540324][ T7931] NILFS (loop1): invalid segment: Checksum error in segment payload [ 187.578469][ T7938] loop3: detected capacity change from 0 to 64 [ 187.584908][ T7931] NILFS (loop1): trying rollback from an earlier position [ 187.593940][ T7886] XFS (loop5): Mounting V5 Filesystem [ 187.600441][ T7929] syz.0.1140 (7929) used greatest stack depth: 18200 bytes left [ 187.635329][ T7931] NILFS (loop1): recovery complete [ 187.758500][ T7944] loop0: detected capacity change from 0 to 2048 [ 187.767082][ T7945] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.795685][ T7886] XFS (loop5): Ending clean mount [ 187.813248][ T7938] overlayfs: upper fs needs to support d_type. [ 187.836178][ T7886] XFS (loop5): Quotacheck needed: Please wait. [ 187.869776][ T7938] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 187.899646][ T7944] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.934521][ T7938] overlayfs: failed to set xattr on upper [ 187.994448][ T7938] overlayfs: ...falling back to index=off,metacopy=off. [ 188.061638][ T7944] EXT4-fs (loop0): shut down requested (2) [ 188.127345][ T7886] XFS (loop5): Quotacheck: Done. [ 188.170889][ T155] attempt to access beyond end of device [ 188.170889][ T155] loop3: rw=1, want=268435470, limit=64 [ 188.218556][ T7764] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 188.235370][ T155] Buffer I/O error on dev loop3, logical block 134217734, lost async page write [ 188.266230][ T7764] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 188.314605][ T7954] loop1: detected capacity change from 0 to 2048 [ 188.368325][ T4173] Trying to free block not in datazone [ 188.385151][ T7764] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 188.422709][ T5738] XFS (loop5): Unmounting Filesystem [ 188.439102][ T7764] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 188.507592][ T7954] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.558519][ T7954] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.657792][ T7764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.678793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.687049][ T4630] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 188.689387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.711991][ T7764] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.731993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.765433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.812147][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.819429][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.838096][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 188.882892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.926877][ T4630] usb 1-1: Using ep0 maxpacket: 16 [ 188.941002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.972680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.987241][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.994354][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.047922][ T4630] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.057548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.061910][ T4630] usb 1-1: config 0 has no interface number 0 [ 189.067034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.091987][ T7976] loop1: detected capacity change from 0 to 4096 [ 189.092759][ T4630] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.140201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.154931][ T4630] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.165687][ T4630] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 189.181374][ T4630] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.230741][ T7976] NILFS (loop1): invalid segment: Checksum error in segment payload [ 189.246284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.263824][ T4630] usb 1-1: config 0 descriptor?? [ 189.270708][ T7976] NILFS (loop1): trying rollback from an earlier position [ 189.291075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.319739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.345790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.364864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.371586][ T7976] NILFS (loop1): recovery complete [ 189.395379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.426942][ T7979] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.439093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.467678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.478632][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.735960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.753871][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.778933][ T4630] corsair 0003:1B1C:1B02.000D: unknown main item tag 0x0 [ 189.787001][ T7764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.806480][ T4630] corsair 0003:1B1C:1B02.000D: unknown main item tag 0x0 [ 189.826791][ T4630] corsair 0003:1B1C:1B02.000D: unknown main item tag 0x0 [ 189.833904][ T4630] corsair 0003:1B1C:1B02.000D: unknown main item tag 0x0 [ 189.851537][ T4630] corsair 0003:1B1C:1B02.000D: unknown main item tag 0x0 [ 189.867868][ T4630] corsair 0003:1B1C:1B02.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input1 [ 189.982627][ T4630] usb 1-1: USB disconnect, device number 9 [ 190.096176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.114066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.160935][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.171172][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.182926][ T7764] device veth0_vlan entered promiscuous mode [ 190.190786][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.207188][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.221836][ T7764] device veth1_vlan entered promiscuous mode [ 190.280959][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 190.293780][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 190.304382][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.314249][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.327034][ T7764] device veth0_macvtap entered promiscuous mode [ 190.340927][ T7764] device veth1_macvtap entered promiscuous mode [ 190.374461][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.392880][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.404041][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.415320][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.425308][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.435887][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.445816][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.456376][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.467965][ T7764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.483141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.492836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.502070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.511426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.521989][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.538404][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.549215][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.560238][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.613128][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.676664][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.686551][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.712810][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.734679][ T7764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.755629][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.792108][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.848639][ T7764] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.882284][ T7764] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.892440][ T7764] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.917045][ T4630] Bluetooth: hci3: command 0x0419 tx timeout [ 190.924106][ T7764] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.113960][ T5753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.157525][ T5753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.202662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.230132][ T5753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.247066][ T5753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.280713][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 191.365000][ T8008] loop3: detected capacity change from 0 to 32768 [ 191.473917][ T8008] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1154 (8008) [ 191.520733][ T8031] loop6: detected capacity change from 0 to 64 [ 191.558323][ T8008] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 191.586088][ T8008] BTRFS info (device loop3): force clearing of disk cache [ 191.637581][ T8008] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 191.667078][ T8008] BTRFS info (device loop3): use zstd compression, level 3 [ 191.674354][ T8008] BTRFS info (device loop3): using free space tree [ 191.693864][ T8031] hfs: keylen 1794 too large [ 191.749140][ T8008] BTRFS info (device loop3): has skinny extents [ 191.824791][ T7764] hfs: node 4:3 still has 1 user(s)! [ 191.991531][ T8008] BTRFS info (device loop3): enabling ssd optimizations [ 192.002459][ T8008] BTRFS info (device loop3): clearing free space tree [ 192.012181][ T8008] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 192.031746][ T8008] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 192.061524][ T8008] BTRFS info (device loop3): creating free space tree [ 192.070231][ T8008] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 192.080557][ T8008] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 192.250165][ T4630] kernel write not supported for file /snd/seq (pid: 4630 comm: kworker/0:14) [ 192.544779][ T8086] misc userio: Begin command sent, but we're already running [ 193.143504][ T8106] loop5: detected capacity change from 0 to 128 [ 193.869996][ T4634] kernel write not supported for file /snd/seq (pid: 4634 comm: kworker/0:18) [ 194.099960][ T26] audit: type=1326 audit(1736481733.017:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8151 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d4c7dd29 code=0x7ffc0000 [ 194.232030][ T26] audit: type=1326 audit(1736481733.017:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8151 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d4c7dd29 code=0x7ffc0000 [ 194.338035][ T26] audit: type=1326 audit(1736481733.047:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8151 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f17d4c7dd29 code=0x7ffc0000 [ 194.363081][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.363133][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.440398][ T26] audit: type=1326 audit(1736481733.047:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8151 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d4c7dd29 code=0x7ffc0000 [ 194.474501][ T8169] loop6: detected capacity change from 0 to 128 [ 194.520339][ T26] audit: type=1326 audit(1736481733.047:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8151 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d4c7dd29 code=0x7ffc0000 [ 194.735942][ T8137] loop0: detected capacity change from 0 to 32768 [ 194.807019][ T8137] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1182 (8137) [ 194.883664][ T8137] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 194.921157][ T8137] BTRFS info (device loop0): force clearing of disk cache [ 194.970758][ T8137] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 195.017255][ T8137] BTRFS info (device loop0): use zstd compression, level 3 [ 195.044947][ T8137] BTRFS info (device loop0): using free space tree [ 195.079779][ T8137] BTRFS info (device loop0): has skinny extents [ 195.397911][ T8137] BTRFS info (device loop0): enabling ssd optimizations [ 195.421506][ T8137] BTRFS info (device loop0): clearing free space tree [ 195.437017][ T8137] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 195.486408][ T8137] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 195.526894][ T4218] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 195.569713][ T8137] BTRFS info (device loop0): creating free space tree [ 195.583254][ T8137] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 195.593718][ T8137] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 195.919085][ T4218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.937803][ T4218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.958126][ T4218] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 195.977845][ T4218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.006040][ T4218] usb 6-1: config 0 descriptor?? [ 196.509163][ T8200] loop5: detected capacity change from 0 to 8 [ 196.627221][ T8200] SQUASHFS error: zlib decompression failed, data probably corrupt [ 196.655962][ T8200] SQUASHFS error: Failed to read block 0x9b: -5 [ 196.678193][ T8200] SQUASHFS error: Unable to read metadata cache entry [99] [ 196.685683][ T8200] SQUASHFS error: Unable to read inode 0x127 [ 196.813152][ T8244] loop0: detected capacity change from 0 to 128 [ 196.858809][ T4218] pantherlord 0003:0F30:0111.000E: nested delimiters [ 196.875833][ T4218] pantherlord 0003:0F30:0111.000E: item 0 1 2 10 parsing failed [ 196.891346][ T8230] loop6: detected capacity change from 0 to 32768 [ 196.897448][ T4218] pantherlord 0003:0F30:0111.000E: parse failed [ 196.914328][ T4218] pantherlord: probe of 0003:0F30:0111.000E failed with error -22 [ 196.943179][ T8244] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 196.960107][ T8230] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 196.989321][ T8230] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 197.023453][ T8230] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 197.043493][ T4179] sysv_free_block: flc_count > flc_size [ 197.072520][ T4179] sysv_free_block: flc_count > flc_size [ 197.085729][ T4179] sysv_free_block: flc_count > flc_size [ 197.098334][ T4179] sysv_free_block: flc_count > flc_size [ 197.105880][ T4630] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 197.123538][ T4179] sysv_free_block: flc_count > flc_size [ 197.124535][ T4630] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 197.143119][ T4179] sysv_free_block: flc_count > flc_size [ 197.155548][ T4179] sysv_free_block: flc_count > flc_size [ 197.177049][ T1111] usb 6-1: USB disconnect, device number 4 [ 197.186957][ T4179] sysv_free_block: flc_count > flc_size [ 197.195270][ T4179] sysv_free_block: flc_count > flc_size [ 197.226559][ T4630] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 102ms [ 197.238285][ T4179] sysv_free_block: flc_count > flc_size [ 197.258284][ T4630] gfs2: fsid=syz:syz.0: jid=0: Done [ 197.265559][ T4179] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 197.273901][ T8230] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 197.930003][ T8263] loop3: detected capacity change from 0 to 128 [ 198.651948][ T8279] loop1: detected capacity change from 0 to 512 [ 198.766760][ T8279] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.804276][ T8279] EXT4-fs (loop1): 1 truncate cleaned up [ 198.810174][ T8279] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,minixdf,noblock_validity,,errors=continue. Quota mode: none. [ 198.870724][ T8285] netlink: 'syz.6.1224': attribute type 33 has an invalid length. [ 198.880419][ T8285] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1224'. [ 198.898708][ T8285] netlink: 'syz.6.1224': attribute type 10 has an invalid length. [ 198.951515][ T8285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.968275][ T8285] team0: Port device batadv0 added [ 199.075503][ T8289] loop0: detected capacity change from 0 to 4096 [ 199.194524][ T8289] NILFS (loop0): invalid segment: Checksum error in segment payload [ 199.215695][ T8294] Falling back ldisc for ptm0. [ 199.232853][ T8289] NILFS (loop0): trying rollback from an earlier position [ 199.274248][ T8289] NILFS (loop0): recovery complete [ 199.292415][ T8295] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.416747][ T4630] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 199.797210][ T4630] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.825861][ T8310] PKCS7: Unknown OID: [5] 0.0 [ 199.829121][ T4630] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.841713][ T8310] PKCS7: Only support pkcs7_signedData type [ 199.851623][ T4630] usb 7-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 199.872086][ T4630] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.912086][ T4630] usb 7-1: config 0 descriptor?? [ 200.103024][ T8290] loop5: detected capacity change from 0 to 32768 [ 200.193229][ T8290] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 200.215728][ T8290] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 200.243380][ T8290] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 200.264523][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 200.271537][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 200.349653][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 78ms [ 200.361258][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 200.369174][ T8290] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 200.396364][ T8292] loop6: detected capacity change from 0 to 8 [ 200.512886][ T8292] SQUASHFS error: zlib decompression failed, data probably corrupt [ 200.515082][ T8325] loop3: detected capacity change from 0 to 512 [ 200.533143][ T8292] SQUASHFS error: Failed to read block 0x9b: -5 [ 200.544847][ T8292] SQUASHFS error: Unable to read metadata cache entry [99] [ 200.552467][ T8292] SQUASHFS error: Unable to read inode 0x127 [ 200.612600][ T8325] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 200.630322][ T8331] netlink: 'syz.1.1244': attribute type 33 has an invalid length. [ 200.673611][ T8331] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1244'. [ 200.685050][ T4630] pantherlord 0003:0F30:0111.000F: nested delimiters [ 200.693084][ T8325] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000010,stripe=0x0000000000000004,dioread_nolock,mblk_io_submit,discard,nogrpid,,errors=continue. Quota mode: none. [ 200.693299][ T4630] pantherlord 0003:0F30:0111.000F: item 0 1 2 10 parsing failed [ 200.758527][ T26] audit: type=1800 audit(1736481739.677:2206): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1243" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 200.888137][ T4630] pantherlord 0003:0F30:0111.000F: parse failed [ 200.908149][ T4630] pantherlord: probe of 0003:0F30:0111.000F failed with error -22 [ 200.942732][ T4630] usb 7-1: USB disconnect, device number 2 [ 200.980904][ T8334] netlink: 'syz.1.1244': attribute type 10 has an invalid length. [ 201.097226][ T8334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.107067][ T8338] Falling back ldisc for ptm0. [ 201.119102][ T8334] team0: Port device batadv0 added [ 201.275330][ T8330] loop0: detected capacity change from 0 to 32768 [ 201.369169][ T8330] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 201.379412][ T8330] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 201.407677][ T8330] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 201.418467][ T4630] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 201.425278][ T4630] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 201.473728][ T4630] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 48ms [ 201.484609][ T4630] gfs2: fsid=syz:syz.0: jid=0: Done [ 201.490360][ T8330] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 201.586982][ T8345] loop3: detected capacity change from 0 to 64 [ 201.617336][ T8341] loop5: detected capacity change from 0 to 1024 [ 201.761945][ T8345] hfs: keylen 1794 too large [ 201.800149][ T8341] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 201.904687][ T4173] hfs: node 4:3 still has 1 user(s)! [ 202.241416][ T8344] loop1: detected capacity change from 0 to 32768 [ 202.284623][ T8344] XFS (loop1): Mounting V5 Filesystem [ 202.333489][ T8344] XFS (loop1): Ending clean mount [ 202.341003][ T8344] XFS (loop1): Quotacheck needed: Please wait. [ 202.396732][ T8344] XFS (loop1): Quotacheck: Done. [ 202.452897][ T4174] XFS (loop1): Unmounting Filesystem [ 203.023103][ T8387] loop6: detected capacity change from 0 to 64 [ 203.030683][ T8383] loop3: detected capacity change from 0 to 2048 [ 203.168974][ T8383] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.194268][ T8383] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.204008][ T8393] loop1: detected capacity change from 0 to 512 [ 203.366215][ T8393] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 203.425563][ T8393] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1263: invalid indirect mapped block 10 (level 1) [ 203.480287][ T8399] loop6: detected capacity change from 0 to 512 [ 203.493484][ T8393] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1263: invalid indirect mapped block 8 (level 1) [ 203.555357][ T8393] EXT4-fs (loop1): 1 truncate cleaned up [ 203.572046][ T8393] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 203.681423][ T8399] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.1266: corrupted inode contents [ 203.700328][ T8399] EXT4-fs error (device loop6): ext4_dirty_inode:6010: inode #16: comm syz.6.1266: mark_inode_dirty error [ 203.712630][ T8399] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.1266: corrupted inode contents [ 203.726912][ T8399] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #16: comm syz.6.1266: mark_inode_dirty error [ 203.753165][ T8399] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.1266: corrupted inode contents [ 203.783856][ T8399] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 203.796367][ T8399] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.1266: corrupted inode contents [ 203.846729][ T8399] EXT4-fs error (device loop6): ext4_truncate:4272: inode #16: comm syz.6.1266: mark_inode_dirty error [ 203.911081][ T8399] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 203.945448][ T8399] EXT4-fs (loop6): 1 truncate cleaned up [ 203.988374][ T8399] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 204.023941][ T8399] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.394256][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1275'. [ 204.559822][ T8426] loop0: detected capacity change from 0 to 64 [ 204.802264][ T8435] loop5: detected capacity change from 0 to 512 [ 204.879835][ T4642] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 204.887647][ T8435] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 204.953675][ T8435] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1281: invalid indirect mapped block 10 (level 1) [ 205.106104][ T8435] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1281: invalid indirect mapped block 8 (level 1) [ 205.176699][ T4642] usb 4-1: Using ep0 maxpacket: 16 [ 205.214091][ T8435] EXT4-fs (loop5): 1 truncate cleaned up [ 205.228870][ T8449] PKCS7: Unknown OID: [5] 0.0 [ 205.244057][ T8435] EXT4-fs (loop5): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 205.266803][ T8449] PKCS7: Only support pkcs7_signedData type [ 205.326980][ T4642] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.335037][ T4642] usb 4-1: config 0 has no interface number 0 [ 205.367724][ T4642] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.410652][ T4642] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.438409][ T4642] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 205.486918][ T4642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.517708][ T4642] usb 4-1: config 0 descriptor?? [ 205.803276][ T8432] loop1: detected capacity change from 0 to 32768 [ 205.998559][ T4642] corsair 0003:1B1C:1B02.0010: unknown main item tag 0x0 [ 206.005685][ T4642] corsair 0003:1B1C:1B02.0010: unknown main item tag 0x0 [ 206.029724][ T4642] corsair 0003:1B1C:1B02.0010: unknown main item tag 0x0 [ 206.036788][ T4174] non-latin1 character 0x2e66 found in JFS file name [ 206.036842][ T4174] mount with iocharset=utf8 to access [ 206.082326][ T4642] corsair 0003:1B1C:1B02.0010: unknown main item tag 0x0 [ 206.094065][ T4642] corsair 0003:1B1C:1B02.0010: unknown main item tag 0x0 [ 206.111874][ T4642] corsair 0003:1B1C:1B02.0010: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input1 [ 206.290007][ T4218] usb 4-1: USB disconnect, device number 8 [ 206.852647][ T8498] loop0: detected capacity change from 0 to 512 [ 206.869148][ T8503] loop3: detected capacity change from 0 to 64 [ 206.926038][ T8498] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 206.950949][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.974181][ T8498] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1305: invalid indirect mapped block 10 (level 1) [ 206.981473][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 2304 - 0 [ 207.048256][ T8508] loop5: detected capacity change from 0 to 190 [ 207.093793][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.145980][ T8498] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1305: invalid indirect mapped block 8 (level 1) [ 207.179888][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 2304 - 0 [ 207.186501][ T8508] ntfs: (device loop5): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 207.214599][ T8508] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 207.233832][ T8498] EXT4-fs (loop0): 1 truncate cleaned up [ 207.255844][ T8498] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 207.278710][ T8508] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 207.333980][ T8508] ntfs: volume version 0.0. [ 207.357427][ T8508] ntfs: (device loop5): load_system_files(): Disabling sparse support due to NTFS volume version 0.0 (need at least version 3.0). [ 207.401500][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.458712][ T8508] ntfs: (device loop5): ntfs_read_locked_inode(): Inode is not in use! [ 207.486382][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 2304 - 0 [ 207.499786][ T8508] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 207.585356][ T8508] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 207.623218][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.657604][ T8508] attempt to access beyond end of device [ 207.657604][ T8508] loop5: rw=0, want=560, limit=190 [ 207.693508][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 2304 - 0 [ 207.734636][ T8508] ntfs: (device loop5): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x45. [ 207.775260][ T8508] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 5. [ 207.801274][ T8502] loop6: detected capacity change from 0 to 32768 [ 207.809347][ T8508] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 208.018807][ T8525] loop3: detected capacity change from 0 to 4096 [ 208.092732][ T8502] XFS (loop6): Mounting V5 Filesystem [ 208.135261][ T8525] ntfs: volume version 3.1. [ 208.358223][ T8502] XFS (loop6): Ending clean mount [ 208.373573][ T8502] XFS (loop6): Quotacheck needed: Please wait. [ 208.500210][ T8502] XFS (loop6): Quotacheck: Done. [ 208.629980][ T7764] XFS (loop6): Unmounting Filesystem [ 208.680862][ T8539] chnl_net:caif_netlink_parms(): no params data found [ 208.866098][ T8539] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.875084][ T8539] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.883945][ T8539] device bridge_slave_0 entered promiscuous mode [ 208.892945][ T8539] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.900807][ T8539] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.909177][ T8539] device bridge_slave_1 entered promiscuous mode [ 208.968773][ T8539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.013284][ T8539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.122270][ T8539] team0: Port device team_slave_0 added [ 209.134532][ T8539] team0: Port device team_slave_1 added [ 209.193984][ T8539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.202392][ T8539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.230246][ T8539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.300025][ T144] device hsr_slave_0 left promiscuous mode [ 209.308681][ T144] device hsr_slave_1 left promiscuous mode [ 209.315215][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.323333][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.331739][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.340561][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.349145][ T144] device bridge_slave_1 left promiscuous mode [ 209.355747][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.365463][ T144] device bridge_slave_0 left promiscuous mode [ 209.372122][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.391651][ T144] device veth1_macvtap left promiscuous mode [ 209.400844][ T144] device veth0_macvtap left promiscuous mode [ 209.407461][ T144] device veth1_vlan left promiscuous mode [ 209.413295][ T144] device veth0_vlan left promiscuous mode [ 209.684223][ T144] team0 (unregistering): Port device team_slave_1 removed [ 209.699944][ T144] team0 (unregistering): Port device team_slave_0 removed [ 209.719501][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.738162][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.785416][ T144] team0 (unregistering): Port device batadv0 removed [ 209.827384][ T144] bond0 (unregistering): Released all slaves [ 209.886015][ T8539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.893135][ T8539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.919233][ T8539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.034852][ T8539] device hsr_slave_0 entered promiscuous mode [ 210.049091][ T8539] device hsr_slave_1 entered promiscuous mode [ 210.055866][ T8539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.064348][ T8539] Cannot create hsr debugfs directory [ 210.252051][ T8539] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 210.289140][ T4634] Bluetooth: hci1: command 0x0409 tx timeout [ 210.303023][ T8539] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 210.312609][ T8539] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 210.323077][ T8539] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 210.487070][ T8539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.516074][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.524831][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.542421][ T8539] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.569710][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.586197][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.598319][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.605433][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.650894][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.662255][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.678953][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.701918][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.709086][ T4264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.747405][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.767238][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.778772][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.798294][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.840841][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.851897][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.869604][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.897944][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.908516][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.935475][ T8539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.151728][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.167090][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.180787][ T8539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.458591][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.478140][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.528826][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.549242][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.565093][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.575968][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.605430][ T8539] device veth0_vlan entered promiscuous mode [ 211.640372][ T8539] device veth1_vlan entered promiscuous mode [ 211.690415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.699681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 211.737027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.745757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.769787][ T8539] device veth0_macvtap entered promiscuous mode [ 211.810665][ T8539] device veth1_macvtap entered promiscuous mode [ 211.863638][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.897183][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.932611][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.964072][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.993309][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.004938][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.027558][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.063963][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.084514][ T8539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.095806][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.105132][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.121642][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.133030][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.172308][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.196728][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.213344][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.225581][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.239417][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.249958][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.259837][ T8539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.271910][ T8539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.283502][ T8539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.296155][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.308334][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.327002][ T8539] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.335750][ T8539] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.346031][ T8539] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.355229][ T8539] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.374730][ T4634] Bluetooth: hci1: command 0x041b tx timeout [ 212.483133][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.506546][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.529510][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.547312][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.548930][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.588866][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 212.956993][ T4640] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 213.247390][ T8666] loop7: detected capacity change from 0 to 32768 [ 213.367345][ T4640] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.382084][ T4640] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 213.394881][ T4640] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 213.408197][ T4640] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.487973][ T8662] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 213.908471][ T23] usb 7-1: USB disconnect, device number 3 [ 214.438012][ T4630] Bluetooth: hci1: command 0x040f tx timeout [ 214.873471][ T8745] loop3: detected capacity change from 0 to 512 [ 214.899875][ T8749] loop7: detected capacity change from 0 to 64 [ 215.062523][ T8745] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 215.078010][ T8745] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.485471][ T8788] loop5: detected capacity change from 0 to 512 [ 215.608885][ T8788] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #17: comm syz.5.1331: iget: bogus i_mode (0) [ 215.624512][ T8788] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1331: couldn't read orphan inode 17 (err -117) [ 215.640273][ T8788] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.645920][ T8795] loop6: detected capacity change from 0 to 512 [ 215.713176][ T8788] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1331: bg 0: block 7: invalid block bitmap [ 215.717598][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 215.739930][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.748767][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.760758][ T8793] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 215.779506][ T8795] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 215.924911][ T8795] EXT4-fs (loop6): 1 truncate cleaned up [ 215.933372][ T8795] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,data_err=abort,init_itable,norecovery,noinit_itable,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: none. [ 215.988195][ T8802] loop3: detected capacity change from 0 to 1024 [ 216.564444][ T4634] Bluetooth: hci1: command 0x0419 tx timeout [ 217.425546][ T8865] loop7: detected capacity change from 0 to 4096 [ 217.571153][ T8880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1366'. [ 217.627164][ T8883] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.833588][ T8893] loop6: detected capacity change from 0 to 128 [ 217.950158][ T8893] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.976876][ T8893] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 218.640333][ T8928] loop7: detected capacity change from 0 to 128 [ 218.690241][ T1111] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 218.725041][ T8933] loop5: detected capacity change from 0 to 2048 [ 218.770617][ T8928] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.782135][ T8928] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 218.954026][ T8933] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.968076][ T8933] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.076312][ T1111] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.131478][ T1111] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 219.144785][ T1111] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.172658][ T1111] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.227436][ T8918] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 219.269445][ T8960] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 219.287812][ T8960] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.390050][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 219.579446][ T8974] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1403'. [ 219.583025][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1402'. [ 219.806757][ T4630] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 219.830078][ T8989] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1409'. [ 219.926343][ T8993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.934440][ T8993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.962669][ T8993] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 220.061865][ T4630] usb 6-1: Using ep0 maxpacket: 8 [ 220.109001][ T9001] loop7: detected capacity change from 0 to 512 [ 220.187012][ T4630] usb 6-1: unable to get BOS descriptor or descriptor too short [ 220.213838][ T9001] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.1416: casefold flag without casefold feature [ 220.251228][ T9001] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.1416: couldn't read orphan inode 15 (err -117) [ 220.266947][ T4630] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 220.279860][ T4630] usb 6-1: can't read configurations, error -71 [ 220.289628][ T9001] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 220.426427][ T9001] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #2: comm syz.7.1416: directory missing '.' [ 220.867209][ T4642] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 221.117330][ T4642] usb 4-1: Using ep0 maxpacket: 8 [ 221.253144][ T4642] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 221.275075][ T4642] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.ec [ 221.296392][ T4642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.344278][ T4642] usb 4-1: config 0 descriptor?? [ 221.395874][ T4642] ttusb_dec_send_command: command bulk message failed: error -22 [ 221.414377][ T4642] ttusb-dec: probe of 4-1:0.0 failed with error -22 [ 221.456170][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 221.486463][ T9045] bond0: option miimon: invalid value (18446744071562067972) [ 221.496147][ T9038] loop5: detected capacity change from 0 to 32768 [ 221.503929][ T9045] bond0: option miimon: allowed values 0 - 2147483647 [ 221.625745][ T4642] usb 4-1: USB disconnect, device number 9 [ 221.645301][ T9038] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 221.645301][ T9038] [ 221.658781][ T9034] loop7: detected capacity change from 0 to 40427 [ 221.675356][ T9038] ERROR: (device loop5): remounting filesystem as read-only [ 221.721573][ T9038] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 221.721573][ T9038] [ 221.759099][ T9034] F2FS-fs (loop7): Found nat_bits in checkpoint [ 221.773316][ T4640] usb 7-1: USB disconnect, device number 4 [ 221.926976][ T9034] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 222.066979][ T9058] xt_NFQUEUE: number of total queues is 0 [ 222.119829][ T8539] attempt to access beyond end of device [ 222.119829][ T8539] loop7: rw=2049, want=45104, limit=40427 [ 222.409867][ T9070] loop5: detected capacity change from 0 to 128 [ 222.471495][ T9070] befs: (loop5): No write support. Marking filesystem read-only [ 222.521491][ T9070] befs: (loop5): invalid magic header [ 222.712215][ T9074] loop6: detected capacity change from 0 to 8192 [ 222.802662][ T9074] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 222.823067][ T9074] REISERFS (device loop6): using ordered data mode [ 222.838208][ T9074] reiserfs: using flush barriers [ 222.845523][ T9074] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 222.870503][ T9074] REISERFS (device loop6): checking transaction log (loop6) [ 222.888777][ T9074] REISERFS (device loop6): Using r5 hash to sort names [ 222.901066][ T9074] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 223.253935][ T9064] loop3: detected capacity change from 0 to 32768 [ 223.297262][ T9090] loop7: detected capacity change from 0 to 2048 [ 223.392127][ T9090] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.505637][ T9064] XFS (loop3): Mounting V5 Filesystem [ 223.604731][ T9064] XFS (loop3): Ending clean mount [ 223.931134][ T9128] loop5: detected capacity change from 0 to 1024 [ 223.984517][ T4173] XFS (loop3): Unmounting Filesystem [ 224.077729][ T9128] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.961884][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 225.019747][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 225.045676][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 225.077873][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 225.116298][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 225.176904][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 225.205047][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 225.257144][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 225.290970][ T9163] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 225.387575][ T9145] loop6: detected capacity change from 0 to 32768 [ 225.450421][ T9175] ALSA: mixer_oss: invalid OSS volume '' [ 225.503295][ T9145] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1475 (9145) [ 225.560495][ T9178] loop5: detected capacity change from 0 to 256 [ 225.603812][ T9145] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 225.627400][ T9178] exfat: Deprecated parameter 'namecase' [ 225.644030][ T9145] BTRFS info (device loop6): metadata ratio 2 [ 225.658005][ T9145] BTRFS info (device loop6): metadata ratio 227 [ 225.693968][ T9145] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 225.705819][ T9178] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 225.724978][ T9145] BTRFS info (device loop6): use lzo compression, level 0 [ 225.745454][ T9145] BTRFS info (device loop6): enabling auto defrag [ 225.780532][ T9145] BTRFS info (device loop6): max_inline at 0 [ 225.803254][ T9156] loop3: detected capacity change from 0 to 32768 [ 225.809786][ T9145] BTRFS info (device loop6): using free space tree [ 225.809812][ T9145] BTRFS info (device loop6): has skinny extents [ 225.826206][ T9165] loop7: detected capacity change from 0 to 32768 [ 225.913604][ T9165] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1480 (9165) [ 225.958358][ T9156] xfs: Unknown parameter 'smackfstransmute' [ 226.199814][ T9145] BTRFS info (device loop6): enabling ssd optimizations [ 226.204062][ T9165] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 226.262573][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 226.262590][ T26] audit: type=1800 audit(1736481765.177:2207): pid=9145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1475" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 226.287099][ T9165] BTRFS info (device loop7): using free space tree [ 226.341338][ T9165] BTRFS info (device loop7): has skinny extents [ 226.737123][ T9165] BTRFS info (device loop7): enabling ssd optimizations [ 226.772195][ T4640] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 226.958474][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.227474][ T4640] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 227.258504][ T4640] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 227.289999][ T4640] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 227.336140][ T4640] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.455875][ T4640] usb 6-1: config 0 descriptor?? [ 227.524315][ T4640] gspca_main: spca561-2.14.0 probing abcd:cdee [ 227.613038][ T9256] loop6: detected capacity change from 0 to 256 [ 227.675157][ T9258] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 227.686859][ T9258] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 227.709670][ T9256] exfat: Deprecated parameter 'namecase' [ 227.806476][ T9256] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 227.819974][ T9260] loop3: detected capacity change from 0 to 1024 [ 227.945346][ T9260] EXT4-fs (loop3): Ignoring removed nobh option [ 227.966857][ T9260] EXT4-fs (loop3): Ignoring removed bh option [ 227.973043][ T9260] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 228.127523][ T4640] spca561: probe of 6-1:0.0 failed with error -22 [ 228.135144][ T4640] usb 6-1: MIDIStreaming interface descriptor not found [ 228.135176][ T9260] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,acl,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 228.328545][ T9278] loop7: detected capacity change from 0 to 128 [ 228.442651][ T9278] VFS: Found a Xenix FS (block size = 512) on device loop7 [ 228.466833][ T4640] usb 6-1: USB disconnect, device number 7 [ 228.579508][ T9278] attempt to access beyond end of device [ 228.579508][ T9278] loop7: rw=0, want=8767745, limit=128 [ 228.647725][ T9278] Buffer I/O error on dev loop7, logical block 8767744, async page read [ 228.708947][ T9278] attempt to access beyond end of device [ 228.708947][ T9278] loop7: rw=0, want=13269810, limit=128 [ 228.755915][ T9278] Buffer I/O error on dev loop7, logical block 13269809, async page read [ 228.785453][ T9278] attempt to access beyond end of device [ 228.785453][ T9278] loop7: rw=0, want=1158, limit=128 [ 228.865322][ T9278] Buffer I/O error on dev loop7, logical block 1157, async page read [ 228.897588][ T4640] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 228.917666][ T9278] attempt to access beyond end of device [ 228.917666][ T9278] loop7: rw=0, want=3211265, limit=128 [ 229.026184][ T9278] Buffer I/O error on dev loop7, logical block 3211264, async page read [ 229.026252][ T9310] program syz.6.1517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.062633][ T9315] loop3: detected capacity change from 0 to 512 [ 229.088604][ T9278] attempt to access beyond end of device [ 229.088604][ T9278] loop7: rw=0, want=8768636, limit=128 [ 229.115515][ T9278] Buffer I/O error on dev loop7, logical block 8768635, async page read [ 229.136962][ T9278] attempt to access beyond end of device [ 229.136962][ T9278] loop7: rw=0, want=13466418, limit=128 [ 229.177057][ T9278] Buffer I/O error on dev loop7, logical block 13466417, async page read [ 229.197522][ T4640] usb 6-1: Using ep0 maxpacket: 16 [ 229.218704][ T9315] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 229.227399][ T9278] attempt to access beyond end of device [ 229.227399][ T9278] loop7: rw=0, want=209286, limit=128 [ 229.234758][ T9315] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.289203][ T9278] Buffer I/O error on dev loop7, logical block 209285, async page read [ 229.358463][ T4640] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 229.386631][ T4640] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 229.399730][ T9294] sysv_free_block: trying to free block not in datazone [ 229.417196][ T26] audit: type=1800 audit(1736481768.337:2208): pid=9278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1507" name="/" dev="loop7" ino=2 res=0 errno=0 [ 229.427237][ T4640] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.536177][ T4640] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 229.556399][ T4640] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.588877][ T4640] usb 6-1: config 0 descriptor?? [ 229.597339][ T8539] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 229.631418][ T4640] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input17 [ 229.704127][ T4248] udevd[4248]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.179809][ T4642] usb 6-1: USB disconnect, device number 8 [ 230.448999][ T9356] loop3: detected capacity change from 0 to 1024 [ 230.542840][ T9356] EXT4-fs (loop3): Ignoring removed orlov option [ 230.622082][ T9356] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 230.927966][ T9350] loop7: detected capacity change from 0 to 32768 [ 231.006089][ T9367] loop3: detected capacity change from 0 to 8192 [ 231.014557][ T9347] loop6: detected capacity change from 0 to 40427 [ 231.077416][ T9350] XFS (loop7): Mounting V5 Filesystem [ 231.086134][ T9347] F2FS-fs (loop6): Found nat_bits in checkpoint [ 231.144853][ T9367] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 231.191524][ T9367] REISERFS (device loop3): using ordered data mode [ 231.200082][ T9367] reiserfs: using flush barriers [ 231.210211][ T9367] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 231.237295][ T9367] REISERFS (device loop3): checking transaction log (loop3) [ 231.257793][ T9367] REISERFS (device loop3): Using r5 hash to sort names [ 231.258867][ T9350] XFS (loop7): Ending clean mount [ 231.277384][ T9350] XFS (loop7): Quotacheck needed: Please wait. [ 231.284545][ T9347] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 231.328624][ T9367] reiserfs: enabling write barrier flush mode [ 231.352931][ T9367] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 231.423656][ T9350] XFS (loop7): Quotacheck: Done. [ 231.552999][ T7764] attempt to access beyond end of device [ 231.552999][ T7764] loop6: rw=2049, want=45104, limit=40427 [ 231.729398][ T8539] XFS (loop7): Unmounting Filesystem [ 231.941068][ T9418] loop3: detected capacity change from 0 to 164 [ 232.111175][ T9418] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 232.139391][ T4642] kernel write not supported for file /snd/seq (pid: 4642 comm: kworker/1:13) [ 232.368403][ T9424] loop5: detected capacity change from 0 to 4096 [ 232.435356][ T9433] loop3: detected capacity change from 0 to 4096 [ 232.566813][ T9424] ntfs: volume version 3.1. [ 232.583374][ T9442] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.951327][ T9458] vivid-001: disconnect [ 232.978842][ T9456] vivid-001: reconnect [ 232.994480][ T9459] loop5: detected capacity change from 0 to 512 [ 233.105504][ T9467] loop7: detected capacity change from 0 to 16 [ 233.176129][ T9459] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 233.194995][ T9467] erofs: (device loop7): mounted with root inode @ nid 36. [ 233.216787][ T9459] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.287195][ T9477] netlink: 'syz.6.1558': attribute type 21 has an invalid length. [ 233.340332][ T9477] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1558'. [ 233.380207][ T9467] overlayfs: failed to get redirect (-117) [ 233.519698][ T9490] loop6: detected capacity change from 0 to 8 [ 233.742571][ T9499] loop7: detected capacity change from 0 to 128 [ 234.060835][ T9499] EXT4-fs (loop7): Test dummy encryption mode enabled [ 234.101920][ T9499] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 234.231842][ T9499] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 234.422741][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 234.467539][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'. [ 234.541148][ T9499] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 234.623028][ T9550] loop5: detected capacity change from 0 to 1024 [ 234.668754][ T9558] loop3: detected capacity change from 0 to 8 [ 234.734827][ T9550] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,bsddf,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 234.761683][ T9558] SQUASHFS error: Failed to read block 0x6e6: -5 [ 234.778751][ T9558] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 234.787046][ T9558] SQUASHFS error: Unable to read directory block [6e4:0] [ 234.815574][ T9499] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 234.827999][ T9499] overlayfs: upper fs does not support tmpfile. [ 234.852132][ T9499] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 234.901107][ T9576] netlink: 'syz.6.1585': attribute type 2 has an invalid length. [ 234.953279][ T9576] netlink: 201400 bytes leftover after parsing attributes in process `syz.6.1585'. [ 235.115473][ T9585] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1586'. [ 235.308778][ T9595] loop5: detected capacity change from 0 to 1024 [ 235.488759][ T9595] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 235.546855][ T9595] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.855816][ T9589] loop7: detected capacity change from 0 to 32768 [ 235.922723][ T9621] loop5: detected capacity change from 0 to 128 [ 235.977532][ T9589] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.1587 (9589) [ 236.077282][ T9589] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 236.112147][ T9589] BTRFS info (device loop7): setting nodatacow, compression disabled [ 236.151962][ T9589] BTRFS info (device loop7): setting datacow [ 236.206831][ T9589] BTRFS info (device loop7): doing ref verification [ 236.213486][ T9589] BTRFS info (device loop7): force clearing of disk cache [ 236.313282][ T9589] BTRFS info (device loop7): turning off barriers [ 236.355838][ T9589] BTRFS info (device loop7): enabling ssd optimizations [ 236.403157][ T9589] BTRFS info (device loop7): using spread ssd allocation scheme [ 236.455684][ T9589] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 236.528436][ T9589] BTRFS info (device loop7): force lzo compression, level 0 [ 236.535808][ T9589] BTRFS info (device loop7): using free space tree [ 236.598428][ T9589] BTRFS info (device loop7): has skinny extents [ 236.718803][ T9659] netlink: 'syz.3.1607': attribute type 10 has an invalid length. [ 236.733291][ T9659] device syz_tun entered promiscuous mode [ 236.843053][ T9659] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 236.956890][ T9678] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1609'. [ 237.001177][ T9589] BTRFS info (device loop7): clearing free space tree [ 237.009251][ T9589] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 237.023761][ T9589] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 237.044770][ T9589] BTRFS info (device loop7): creating free space tree [ 237.055942][ T9589] BTRFS info (device loop7): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 237.066494][ T9589] BTRFS info (device loop7): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 237.618072][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1620'. [ 237.749496][ T9708] loop5: detected capacity change from 0 to 2048 [ 238.028463][ T9708] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,,errors=continue. Quota mode: none. [ 238.165454][ T9721] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 238.172138][ T9723] loop6: detected capacity change from 0 to 256 [ 238.272330][ T9723] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 238.273666][ T9721] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 16 with error 28 [ 238.313655][ T9723] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 238.359851][ T9723] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 238.393546][ T9723] UDF-fs: Scanning with blocksize 512 failed [ 238.409429][ T9721] EXT4-fs (loop5): This should not happen!! Data will be lost [ 238.409429][ T9721] [ 238.432249][ T9723] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 238.443942][ T9721] EXT4-fs (loop5): Total free blocks count 0 [ 238.476545][ T9721] EXT4-fs (loop5): Free/Dirty block details [ 238.484246][ T9723] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.497204][ T9721] EXT4-fs (loop5): free_blocks=2415919104 [ 238.503113][ T9721] EXT4-fs (loop5): dirty_blocks=16 [ 238.564121][ T9721] EXT4-fs (loop5): Block reservation details [ 238.584397][ T9721] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 238.830712][ T9740] loop3: detected capacity change from 0 to 512 [ 238.961124][ T9740] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1634: casefold flag without casefold feature [ 238.995289][ T9740] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1634: couldn't read orphan inode 15 (err -117) [ 239.019266][ T9740] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,,errors=continue. Quota mode: none. [ 239.035004][ T4260] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 239.056849][ T9740] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.119209][ T9740] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz.3.1634: Directory hole found for htree leaf block 0 [ 239.437550][ T9742] loop5: detected capacity change from 0 to 32768 [ 239.444214][ T4260] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 239.463838][ T4260] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.492404][ T9742] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1633 (9742) [ 239.495168][ T4260] usb 7-1: config 0 descriptor?? [ 239.548710][ T9742] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 239.578904][ T4260] cp210x 7-1:0.0: cp210x converter detected [ 239.590688][ T9742] BTRFS info (device loop5): using free space tree [ 239.608170][ T9742] BTRFS info (device loop5): has skinny extents [ 239.907947][ T9742] BTRFS info (device loop5): enabling ssd optimizations [ 240.014812][ T4260] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 240.067999][ T9760] loop3: detected capacity change from 0 to 32768 [ 240.073532][ T4260] usb 7-1: cp210x converter now attached to ttyUSB0 [ 240.160804][ T9760] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1641 (9760) [ 240.267098][ T9760] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 240.282834][ T9760] BTRFS info (device loop3): enabling disk space caching [ 240.294658][ T9760] BTRFS info (device loop3): force clearing of disk cache [ 240.308402][ T9760] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 240.347066][ T9760] BTRFS info (device loop3): use zstd compression, level 3 [ 240.354530][ T9760] BTRFS info (device loop3): disk space caching is enabled [ 240.363006][ T9760] BTRFS info (device loop3): has skinny extents [ 240.467084][ T9760] BTRFS info (device loop3): enabling ssd optimizations [ 240.488307][ T9760] BTRFS info (device loop3): clearing free space tree [ 240.509775][ T9760] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 240.546821][ T9760] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 240.588435][ T4523] usb 7-1: USB disconnect, device number 5 [ 240.610044][ T4523] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 240.735785][ T4523] cp210x 7-1:0.0: device disconnected [ 241.109476][ T9818] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 241.695980][ T9846] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1663'. [ 241.855776][ T9854] loop3: detected capacity change from 0 to 16 [ 241.935208][ T9854] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 10, please upgrade kernel version [ 242.027071][ T9864] loop7: detected capacity change from 0 to 1024 [ 242.430644][ T1471] hfsplus: b-tree write err: -5, ino 4 [ 242.567144][ T9888] tipc: Started in network mode [ 242.583963][ T9888] tipc: Node identity :, cluster identity 4711 [ 242.601442][ T9888] tipc: Enabling of bearer rejected, failed to enable media [ 242.795338][ T9900] syzkaller0: tun_chr_ioctl cmd 35108 [ 242.993637][ T9870] loop3: detected capacity change from 0 to 32768 [ 243.007384][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1691'. [ 243.043030][ T9870] XFS: attr2 mount option is deprecated. [ 243.059462][ T9870] XFS: ikeep mount option is deprecated. [ 243.065160][ T9870] XFS: noikeep mount option is deprecated. [ 243.177373][ T9870] XFS (loop3): Mounting V5 Filesystem [ 243.312169][ T9870] XFS (loop3): Ending clean mount [ 243.334356][ T9870] XFS (loop3): Quotacheck needed: Please wait. [ 243.382457][ T9901] loop7: detected capacity change from 0 to 40427 [ 243.403409][ T9899] loop6: detected capacity change from 0 to 32768 [ 243.438708][ T9901] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 243.445860][ T9901] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 243.489295][ T9870] XFS (loop3): Quotacheck: Done. [ 243.493152][ T9901] F2FS-fs (loop7): invalid crc value [ 243.528958][ T9899] (syz.6.1689,9899,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 243.565333][ T9901] F2FS-fs (loop7): Found nat_bits in checkpoint [ 243.573708][ T9899] (syz.6.1689,9899,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 243.668221][ T9899] (syz.6.1689,9899,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 243.701802][ T9899] JBD2: Ignoring recovery information on journal [ 243.763320][ T4173] XFS (loop3): Unmounting Filesystem [ 243.795501][ T9899] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 243.864116][ T9901] F2FS-fs (loop7): Start checkpoint disabled! [ 243.915160][ T9901] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 243.951993][ T9901] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 244.117643][ T7764] ocfs2: Unmounting device (7,6) on (node local) [ 244.154515][ T9901] attempt to access beyond end of device [ 244.154515][ T9901] loop7: rw=2049, want=53256, limit=40427 [ 244.517930][ T9] attempt to access beyond end of device [ 244.517930][ T9] loop7: rw=2049, want=40992, limit=40427 [ 244.552647][ T9940] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1697'. [ 245.395707][ T9968] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 245.675657][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1718'. [ 245.685347][ T9983] netlink: 'syz.7.1721': attribute type 12 has an invalid length. [ 245.697619][ T9981] loop3: detected capacity change from 0 to 22 [ 245.716305][ T9948] loop6: detected capacity change from 0 to 32768 [ 245.725206][ T9983] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1721'. [ 245.755302][ T9988] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1721'. [ 245.773340][ T9981] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 245.795997][ T9989] loop5: detected capacity change from 0 to 128 [ 245.812070][ T9981] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 245.865676][ T9948] XFS (loop6): Mounting V5 Filesystem [ 245.942932][ T9989] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 246.038079][T10007] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 246.087693][ T5738] sysv_free_block: trying to free block not in datazone [ 246.095581][ T5738] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 246.121812][T10011] program syz.7.1731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.140105][ T9948] XFS (loop6): Ending clean mount [ 246.362604][ T7764] XFS (loop6): Unmounting Filesystem [ 247.235716][T10014] loop3: detected capacity change from 0 to 32768 [ 247.349606][T10040] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 247.617325][T10051] loop5: detected capacity change from 0 to 47 [ 248.513338][T10014] XFS (loop3): Mounting V5 Filesystem [ 248.708279][T10014] XFS (loop3): Ending clean mount [ 248.729182][T10014] XFS (loop3): Quotacheck needed: Please wait. [ 248.990939][T10014] XFS (loop3): Quotacheck: Done. [ 249.090791][T10090] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 249.313776][ T4173] XFS (loop3): Unmounting Filesystem [ 249.640532][T10072] loop6: detected capacity change from 0 to 40427 [ 249.688472][T10108] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1772'. [ 250.286292][ T4260] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 250.544035][T10105] loop7: detected capacity change from 0 to 32768 [ 250.683104][ T4260] usb 6-1: Using ep0 maxpacket: 8 [ 250.882365][ T4260] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 250.894480][ T4260] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.917677][ T4260] usb 6-1: config 0 descriptor?? [ 251.220271][T10072] F2FS-fs (loop6): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 251.229633][T10072] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 251.275426][T10072] F2FS-fs (loop6): invalid crc value [ 251.324518][T10072] F2FS-fs (loop6): Found nat_bits in checkpoint [ 251.325076][T10120] loop3: detected capacity change from 0 to 32768 [ 251.387455][T10120] XFS: attr2 mount option is deprecated. [ 251.393175][T10120] XFS: ikeep mount option is deprecated. [ 251.424416][T10120] XFS: noikeep mount option is deprecated. [ 251.443514][T10072] F2FS-fs (loop6): recover fsync data on readonly fs [ 251.452172][T10072] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 251.466143][T10072] F2FS-fs (loop6): Try to recover 1th superblock, ret: -30 [ 251.473820][T10072] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 251.512289][T10120] XFS (loop3): Mounting V5 Filesystem [ 251.692824][T10120] XFS (loop3): Ending clean mount [ 251.697887][ T4260] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 251.698020][ T4260] asix: probe of 6-1:0.0 failed with error -71 [ 251.726612][ T4260] usb 6-1: USB disconnect, device number 9 [ 251.734814][T10120] XFS (loop3): Quotacheck needed: Please wait. [ 251.848728][T10120] XFS (loop3): Quotacheck: Done. [ 251.909277][T10120] XFS (loop3): User initiated shutdown received. [ 251.916287][T10120] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 251.936120][T10120] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 252.054512][ T4173] XFS (loop3): Unmounting Filesystem [ 252.076169][T10105] XFS: ikeep mount option is deprecated. [ 252.081929][T10105] XFS: ikeep mount option is deprecated. [ 252.173107][T10105] XFS (loop7): Mounting V5 Filesystem [ 252.746842][ T4633] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 253.062119][T10105] XFS (loop7): Ending clean mount [ 253.113599][T10105] XFS (loop7): Quotacheck needed: Please wait. [ 253.120598][ T4633] usb 6-1: unable to get BOS descriptor or descriptor too short [ 253.194047][T10164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1790'. [ 253.196794][ T4633] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 253.237551][ T4633] usb 6-1: can't read configurations, error -71 [ 253.296743][T10105] XFS (loop7): Quotacheck: Done. [ 253.364143][ T8539] XFS (loop7): Unmounting Filesystem [ 253.871202][T10174] loop5: detected capacity change from 0 to 1024 [ 254.359764][T10190] loop7: detected capacity change from 0 to 512 [ 254.926473][T10189] loop3: detected capacity change from 0 to 32768 [ 255.733119][T10208] loop5: detected capacity change from 0 to 512 [ 255.799651][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.806033][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.864735][T10212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.874453][T10212] bond0: (slave bond1): Enslaving as an active interface with an up link [ 256.158389][T10208] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.196180][T10208] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.290591][T10224] netlink: 'syz.6.1816': attribute type 6 has an invalid length. [ 256.491481][T10227] loop6: detected capacity change from 0 to 1024 [ 256.553141][T10190] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 256.574346][T10231] loop3: detected capacity change from 0 to 16 [ 256.656932][T10190] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.720273][T10227] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.775617][T10227] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 256.796158][T10227] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 256.810255][T10227] EXT4-fs (loop6): This should not happen!! Data will be lost [ 256.810255][T10227] [ 256.820347][T10227] EXT4-fs (loop6): Total free blocks count 0 [ 256.826367][T10227] EXT4-fs (loop6): Free/Dirty block details [ 256.834497][T10227] EXT4-fs (loop6): free_blocks=68451041280 [ 256.843904][T10227] EXT4-fs (loop6): dirty_blocks=16 [ 256.852355][T10227] EXT4-fs (loop6): Block reservation details [ 256.860653][T10227] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 257.018547][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1822'. [ 257.276622][T10254] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.286774][T10254] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.633671][ T3053] tipc: Subscription rejected, illegal request [ 257.825245][T10276] loop7: detected capacity change from 0 to 4096 [ 257.941016][T10276] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 258.324462][T10231] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 258.358750][T10282] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1839'. [ 258.471162][T10231] cramfs: Error -3 while decompressing! [ 258.519403][T10231] cramfs: ffffffff96bb92a8(27)->ffff88805b44c000(4096) [ 258.526434][T10231] cramfs: Error -3 while decompressing! [ 258.606359][T10231] cramfs: ffffffff96bb92a8(27)->ffff88805b44c000(4096) [ 258.669917][ T26] audit: type=1800 audit(1736481797.587:2209): pid=10231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1815" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 259.075449][T10309] loop6: detected capacity change from 0 to 512 [ 259.231241][T10309] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 259.277523][T10313] loop5: detected capacity change from 0 to 2048 [ 259.450966][T10309] EXT4-fs (loop6): 1 truncate cleaned up [ 259.456880][T10309] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,inode_readahead_blks=0x0000000000004000,grpquota,quota,,errors=continue. Quota mode: writeback. [ 259.600063][T10309] EXT4-fs error (device loop6): mb_free_blocks:1865: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 259.966912][T10327] loop6: detected capacity change from 0 to 512 [ 259.975619][T10316] loop7: detected capacity change from 0 to 32768 [ 260.063818][T10316] [ 260.063818][T10316] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.063818][T10316] [ 260.094575][T10316] non-latin1 character 0x3ff found in JFS file name [ 260.107705][T10316] mount with iocharset=utf8 to access [ 260.113282][T10316] ERROR: (device loop7): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 260.113282][T10316] [ 260.132549][T10316] ERROR: (device loop7): remounting filesystem as read-only [ 260.901938][T10313] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.111267][T10342] loop3: detected capacity change from 0 to 4096 [ 261.122316][T10335] loop7: detected capacity change from 0 to 32768 [ 261.535611][T10327] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1858: casefold flag without casefold feature [ 261.577999][T10327] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1858: couldn't read orphan inode 15 (err -117) [ 261.609643][T10327] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.520230][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.563584][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.616281][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.662748][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.699128][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.746619][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.756489][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.822796][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.842202][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.863422][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.044983][T10372] loop6: detected capacity change from 0 to 256 [ 263.161797][T10363] loop7: detected capacity change from 0 to 32768 [ 263.496477][T10383] loop6: detected capacity change from 0 to 256 [ 263.669646][T10383] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000005f) [ 264.184984][T10392] loop6: detected capacity change from 0 to 32768 [ 264.372337][T10392] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 264.410666][T10392] OCFS2: ERROR (device loop6): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 264.428171][T10392] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 264.438201][T10392] OCFS2: File system is now read-only. [ 264.444389][T10392] (syz.6.1885,10392,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 264.509717][T10392] OCFS2: ERROR (device loop6): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 264.526398][T10392] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 264.529502][T10403] loop5: detected capacity change from 0 to 64 [ 264.536317][T10392] (syz.6.1885,10392,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 264.590062][T10392] OCFS2: ERROR (device loop6): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 264.607299][T10392] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 264.617239][T10392] (syz.6.1885,10392,0):ocfs2_prepare_dx_dir_for_insert:4158 ERROR: status = -30 [ 264.626299][T10392] (syz.6.1885,10392,0):ocfs2_prepare_dir_for_insert:4283 ERROR: status = -30 [ 264.635151][T10392] (syz.6.1885,10392,0):ocfs2_mknod:298 ERROR: status = -30 [ 264.642450][T10392] (syz.6.1885,10392,0):ocfs2_mknod:502 ERROR: status = -30 [ 264.649724][T10392] (syz.6.1885,10392,0):ocfs2_create:676 ERROR: status = -30 [ 264.788240][ T7764] ocfs2: Unmounting device (7,6) on (node local) [ 265.288975][T10387] loop3: detected capacity change from 0 to 40427 [ 265.312629][T10417] loop6: detected capacity change from 0 to 64 [ 265.415315][T10387] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 265.430543][T10387] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 265.653881][T10387] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 265.738245][T10387] F2FS-fs (loop3): Found nat_bits in checkpoint [ 265.932697][T10432] loop6: detected capacity change from 0 to 2048 [ 266.112242][T10432] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 266.262412][T10437] loop7: detected capacity change from 0 to 4096 [ 266.307685][T10432] EXT4-fs (loop6): Online defrag not supported with bigalloc [ 266.315210][T10387] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 266.360361][T10387] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 266.452379][T10437] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 266.720229][T10453] netlink: 'syz.0.1908': attribute type 19 has an invalid length. [ 266.892277][T10456] netlink: 'syz.0.1910': attribute type 16 has an invalid length. [ 266.944749][T10456] netlink: 'syz.0.1910': attribute type 3 has an invalid length. [ 266.971707][T10456] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.1910'. [ 267.218372][T10466] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1914'. [ 268.132327][ T4634] Bluetooth: hci4: command 0x0406 tx timeout [ 268.380426][T10463] loop7: detected capacity change from 0 to 32768 [ 268.521917][T10494] loop3: detected capacity change from 0 to 256 [ 268.636498][T10496] read_mapping_page failed! [ 268.644718][T10496] ERROR: (device loop7): txCommit: [ 268.644718][T10496] [ 268.690049][T10496] ERROR: (device loop7): remounting filesystem as read-only [ 268.729761][T10497] loop5: detected capacity change from 0 to 2048 [ 269.753387][T10512] loop6: detected capacity change from 0 to 8192 [ 270.046894][ T4634] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 270.411091][T10494] exfat: Deprecated parameter 'utf8' [ 270.416488][T10494] exfat: Deprecated parameter 'namecase' [ 270.423043][T10494] exfat: Deprecated parameter 'namecase' [ 270.429494][ T4634] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.447125][T10494] exfat: Deprecated parameter 'utf8' [ 270.453216][ T4634] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.516119][T10497] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.559065][T10494] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 270.576934][ T4634] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 270.596352][ T4634] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 270.612880][ T4634] usb 8-1: SerialNumber: syz [ 270.796469][T10521] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1936'. [ 270.812145][T10521] openvswitch: netlink: Tunnel attr 8709 out of range max 16 [ 270.899723][ T4634] usb 8-1: 0:2 : does not exist [ 270.939086][ T4634] usb 8-1: USB disconnect, device number 2 [ 271.262622][T10512] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 271.272351][T10512] REISERFS (device loop6): using ordered data mode [ 271.289777][T10512] reiserfs: using flush barriers [ 271.316791][ T4259] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 271.324784][T10512] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 271.383626][T10512] REISERFS (device loop6): checking transaction log (loop6) [ 271.414389][T10512] REISERFS (device loop6): Using r5 hash to sort names [ 271.431712][ T4636] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 271.461399][T10512] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 271.506875][T10512] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 271.598215][ T4259] usb 6-1: Using ep0 maxpacket: 32 [ 271.634375][T10512] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 271.726971][ T4259] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 271.735212][ T4259] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 271.814601][ T4259] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 271.819503][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1945'. [ 271.832930][ T4636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.856464][ T4259] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 271.890875][ T4636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.935434][ T4259] usb 6-1: config 0 interface 0 has no altsetting 0 [ 271.944192][ T4636] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.979797][ T4274] udevd[4274]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.061798][ T4636] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 272.141886][ T4636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.150898][ T4259] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 272.186320][ T4259] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 272.230351][ T4636] usb 4-1: config 0 descriptor?? [ 272.239039][ T4259] usb 6-1: Product: syz [ 272.253257][T10546] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 272.259731][ T4259] usb 6-1: Manufacturer: syz [ 272.268451][ T4259] usb 6-1: SerialNumber: syz [ 272.329532][ T4259] usb 6-1: config 0 descriptor?? [ 272.364671][T10548] loop7: detected capacity change from 0 to 2048 [ 272.388619][ T4259] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 272.432231][T10552] loop6: detected capacity change from 0 to 8 [ 272.439989][ T4259] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 272.464664][T10548] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 272.509998][T10548] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.683731][ T4259] usb 6-1: USB disconnect, device number 12 [ 272.708982][ T4259] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 272.732392][ T4636] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0011/input/input19 [ 272.857985][ T4636] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0011/input/input20 [ 272.879689][ T4636] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0011/input/input21 [ 272.898990][ T4636] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0011/input/input22 [ 273.008250][ T4636] hid-udraw 0003:20D6:CB17.0011: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.3-1/input0 [ 273.059256][ T4636] usb 4-1: USB disconnect, device number 10 [ 273.890988][T10574] netlink: 'syz.3.1960': attribute type 15 has an invalid length. [ 273.949404][T10576] loop3: detected capacity change from 0 to 512 [ 274.007711][T10552] SQUASHFS error: zstd decompression error: 2 [ 274.023167][T10552] SQUASHFS error: zstd decompression failed, data probably corrupt [ 274.032331][T10552] SQUASHFS error: Failed to read block 0x62b: -5 [ 274.075948][T10577] SQUASHFS error: Unable to read metadata cache entry [629] [ 274.097677][T10552] SQUASHFS error: Unable to read metadata cache entry [629] [ 274.126714][T10577] SQUASHFS error: Unable to read directory block [629:ff26] [ 274.142929][T10576] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 274.162723][T10576] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.187007][T10552] SQUASHFS error: Unable to read directory block [629:ff26] [ 274.299153][ T26] audit: type=1800 audit(1736481813.217:2210): pid=10581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1961" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 274.387131][ T26] audit: type=1800 audit(1736481813.297:2211): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1961" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 274.701579][T10588] loop3: detected capacity change from 0 to 512 [ 274.785150][T10588] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 274.797399][T10588] UDF-fs: Scanning with blocksize 512 failed [ 274.838951][T10588] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 274.890809][T10588] UDF-fs: Scanning with blocksize 1024 failed [ 274.915851][T10588] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 274.925946][T10588] UDF-fs: Scanning with blocksize 2048 failed [ 274.956136][T10588] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 274.975693][T10588] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.386174][T10601] loop3: detected capacity change from 0 to 128 [ 275.476135][T10601] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.493224][T10601] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.654053][ T4218] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 276.117857][ T4218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.157706][ T4218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.181280][ T4218] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.246139][ T4218] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 276.287991][ T4218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.364092][ T4218] usb 6-1: config 0 descriptor?? [ 276.414918][T10616] loop3: detected capacity change from 0 to 4096 [ 276.445227][T10625] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.452767][T10625] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.481899][T10625] device bridge0 entered promiscuous mode [ 276.708652][T10633] loop6: detected capacity change from 0 to 2048 [ 276.803928][T10633] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 276.861436][ T4218] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0012/input/input23 [ 276.882885][T10633] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 276.913342][T10633] EXT4-fs (loop6): Remounting filesystem read-only [ 277.000586][ T4218] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0012/input/input24 [ 277.061086][ T4218] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0012/input/input25 [ 277.119098][ T4218] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0012/input/input26 [ 277.197448][ T4655] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 277.205510][ T4218] hid-udraw 0003:20D6:CB17.0012: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.5-1/input0 [ 277.250470][ T4218] usb 6-1: USB disconnect, device number 13 [ 277.305065][T10654] loop6: detected capacity change from 0 to 2048 [ 277.483345][T10616] ntfs: (device loop3): map_mft_record_page(): Mft record 0x1 is corrupt. Run chkdsk. [ 277.489763][ T4655] usb 8-1: Using ep0 maxpacket: 16 [ 277.513916][T10616] ntfs: (device loop3): map_mft_record(): Failed with error code 5. [ 277.536663][T10616] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 277.573209][T10616] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 277.587635][T10616] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 277.603523][T10616] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 277.628010][T10616] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 277.657621][ T4655] usb 8-1: config 0 has no interfaces? [ 277.735691][T10616] ntfs: volume version 3.1. [ 277.753683][T10616] ntfs: (device loop3): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 277.842761][ T4655] usb 8-1: New USB device found, idVendor=0525, idProduct=0800, bcdDevice= 0.00 [ 277.873470][ T4655] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.885514][ T4655] usb 8-1: Product: syz [ 277.904510][ T4655] usb 8-1: Manufacturer: syz [ 277.927672][ T4655] usb 8-1: SerialNumber: syz [ 277.949076][ T4655] usb 8-1: config 0 descriptor?? [ 278.247575][ T4655] usb 8-1: USB disconnect, device number 3 [ 278.411779][T10660] loop5: detected capacity change from 0 to 40427 [ 278.463689][T10660] F2FS-fs (loop5): Invalid segment/section count (24 != 24 * 3) [ 278.482419][T10660] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 278.495505][T10660] F2FS-fs (loop5): invalid crc value [ 278.550709][T10660] F2FS-fs (loop5): Found nat_bits in checkpoint [ 278.568923][T10654] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.626019][T10660] F2FS-fs (loop5): Start checkpoint disabled! [ 278.685484][T10660] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 278.694887][T10660] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 279.450352][T10677] loop6: detected capacity change from 0 to 40427 [ 279.542389][T10677] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 279.565275][T10677] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 279.700203][T10677] F2FS-fs (loop6): Found nat_bits in checkpoint [ 279.812346][T10677] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 279.903253][T10677] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 279.922410][T10677] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 279.943767][T10698] loop7: detected capacity change from 0 to 256 [ 280.059518][T10698] exfat: Deprecated parameter 'utf8' [ 280.064992][T10698] exfat: Deprecated parameter 'namecase' [ 280.107439][T10698] exfat: Deprecated parameter 'namecase' [ 280.124747][T10698] exfat: Deprecated parameter 'utf8' [ 280.179445][T10704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2013'. [ 280.192780][T10698] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 280.207810][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 280.308424][T10708] loop3: detected capacity change from 0 to 128 [ 280.892241][T10723] loop7: detected capacity change from 0 to 256 [ 281.040913][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 281.040931][ T26] audit: type=1326 audit(1736481819.957:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383c4fd29 code=0x7fc00000 [ 281.376689][T10708] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 281.391144][T10708] FAT-fs (loop3): Filesystem has been set read-only [ 281.427034][T10708] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 281.603886][T10748] loop3: detected capacity change from 0 to 256 [ 281.623882][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2034'. [ 281.624382][T10750] netlink: 'syz.6.2033': attribute type 1 has an invalid length. [ 281.691107][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2033'. [ 281.749822][ T26] audit: type=1326 audit(1736481820.667:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3383c4fd29 code=0x7fc00000 [ 281.831685][ T26] audit: type=1326 audit(1736481820.667:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383c4fd29 code=0x7fc00000 [ 281.920273][ T26] audit: type=1326 audit(1736481820.667:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383c4fd29 code=0x7fc00000 [ 281.999428][ T26] audit: type=1326 audit(1736481820.667:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383c4fd29 code=0x7fc00000 [ 282.062940][ T26] audit: type=1326 audit(1736481820.667:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383c4fd29 code=0x7fc00000 [ 282.076131][T10765] loop6: detected capacity change from 0 to 512 [ 282.114751][ T26] audit: type=1326 audit(1736481820.667:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383c4fd29 code=0x7fc00000 [ 282.156051][ T26] audit: type=1326 audit(1736481820.667:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383c4fd29 code=0x7fc00000 [ 282.186281][ T26] audit: type=1326 audit(1736481820.667:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383c4fd29 code=0x7fc00000 [ 282.211406][ T26] audit: type=1326 audit(1736481820.667:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3383c4fd29 code=0x7fc00000 [ 282.281449][T10765] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.2040: inode #1: comm syz.6.2040: iget: illegal inode # [ 282.308510][T10765] EXT4-fs (loop6): Remounting filesystem read-only [ 282.319461][T10765] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.2040: error while reading EA inode 1 err=-117 [ 282.394913][T10765] EXT4-fs (loop6): Remounting filesystem read-only [ 282.404658][T10765] EXT4-fs (loop6): 1 orphan inode deleted [ 282.412029][T10765] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,block_validity,debug_want_extra_isize=0x0000000000000006,grpid,resgid=0x0000000000000000,dioread_lock,usrjquota=,errors=remount-ro,. Quota mode: none. [ 282.498899][T10765] EXT4-fs error (device loop6): __ext4_expand_extra_isize:5826: inode #15: comm syz.6.2040: bad extra_isize 6 (inode size 256) [ 282.526907][T10748] loop3: detected capacity change from 0 to 32768 [ 282.583970][T10779] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2045'. [ 282.585995][T10765] EXT4-fs (loop6): Remounting filesystem read-only [ 282.641543][T10748] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2032 (10748) [ 282.663337][T10781] loop7: detected capacity change from 0 to 128 [ 282.729285][T10748] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 282.771399][T10748] BTRFS info (device loop3): setting nodatacow, compression disabled [ 282.809084][T10748] BTRFS info (device loop3): turning on flush-on-commit [ 282.858264][T10748] BTRFS info (device loop3): enabling auto defrag [ 282.893023][T10748] BTRFS info (device loop3): max_inline at 0 [ 282.928567][T10748] BTRFS info (device loop3): using free space tree [ 282.979591][T10748] BTRFS info (device loop3): has skinny extents [ 283.137560][ T4655] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 283.307712][T10817] loop7: detected capacity change from 0 to 256 [ 283.342792][T10817] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 283.357398][T10748] BTRFS info (device loop3): enabling ssd optimizations [ 283.368354][T10817] exFAT-fs (loop7): hint_cluster is invalid (17) [ 283.528393][ T4655] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 283.546863][ T4655] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.575700][ T4655] usb 6-1: config 0 descriptor?? [ 283.906008][T10833] loop6: detected capacity change from 0 to 128 [ 284.004019][T10833] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 284.118383][T10833] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 284.152078][T10833] ext2 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.193479][ T4655] [drm:udl_init] *ERROR* Selecting channel failed [ 284.220669][ T4655] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 284.228923][ T4655] [drm] Initialized udl on minor 2 [ 284.285698][ T4655] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 284.311558][ T4655] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 284.335744][ T4655] usb 6-1: USB disconnect, device number 14 [ 284.588924][T10837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2061'. [ 284.671367][T10841] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2066'. [ 284.789518][T10844] loop3: detected capacity change from 0 to 256 [ 285.150204][T10863] loop5: detected capacity change from 0 to 256 [ 285.300894][T10863] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 285.770036][ T3053] ------------[ cut here ]------------ [ 285.776194][ T3053] no supported rates for sta (null) (0xffffffff, band 1) in rate_mask 0x0 with flags 0x0 [ 285.786998][ T3053] WARNING: CPU: 0 PID: 3053 at net/mac80211/rate.c:376 __rate_control_send_low+0x653/0x890 [ 285.797087][ T3053] Modules linked in: [ 285.801024][ T3053] CPU: 0 PID: 3053 Comm: kworker/u4:5 Not tainted 5.15.176-syzkaller #0 [ 285.809433][ T3053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 285.815181][T10892] loop3: detected capacity change from 0 to 512 [ 285.819565][ T3053] Workqueue: phy15 ieee80211_roc_work [ 285.819702][ T3053] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 285.819736][ T3053] Code: 84 c0 48 8b 14 24 0f 85 d9 01 00 00 8b 0a 48 c7 c7 20 9b b8 8b 4c 89 f6 44 89 fa 44 8b 44 24 0c 44 8b 4c 24 08 e8 6d 6d 7d f7 <0f> 0b e9 75 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 285.819761][ T3053] RSP: 0018:ffffc9000cfcf5a8 EFLAGS: 00010246 [ 285.819784][ T3053] RAX: b1fddd388ae2da00 RBX: 0000000000000008 RCX: ffff88802b010000 [ 285.819801][ T3053] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 285.819817][ T3053] RBP: ffff888056905b68 R08: ffffffff8166aa6c R09: fffff520019f9df5 [ 285.819834][ T3053] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 285.819851][ T3053] R13: 0000000000000008 R14: 0000000000000000 R15: 00000000ffffffff [ 285.819867][ T3053] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 285.819887][ T3053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.819911][ T3053] CR2: 00007f17d4e6fbac CR3: 000000000c88e000 CR4: 00000000003506f0 [ 285.819931][ T3053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 285.819945][ T3053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 285.819961][ T3053] Call Trace: [ 285.819971][ T3053] [ 285.819981][ T3053] ? __warn+0x15b/0x300 [ 285.820011][ T3053] ? __rate_control_send_low+0x653/0x890 [ 285.820037][ T3053] ? report_bug+0x1b7/0x2e0 [ 285.820071][ T3053] ? handle_bug+0x3d/0x70 [ 285.820094][ T3053] ? exc_invalid_op+0x16/0x40 [ 285.820117][ T3053] ? asm_exc_invalid_op+0x16/0x20 [ 285.820150][ T3053] ? __wake_up_klogd+0xcc/0x100 [ 285.820177][ T3053] ? __rate_control_send_low+0x653/0x890 [ 285.820204][ T3053] ? __rate_control_send_low+0x653/0x890 [ 285.820245][ T3053] rate_control_send_low+0x1a8/0x770 [ 285.820277][ T3053] rate_control_get_rate+0x20a/0x5d0 [ 285.820314][ T3053] ieee80211_tx_h_rate_ctrl+0xc6e/0x1990 [ 286.011280][ T3053] ? ieee80211_tx_h_select_key+0x16a0/0x16a0 [ 286.017636][ T3053] invoke_tx_handlers_late+0xb2/0x17f0 [ 286.023153][ T3053] ? invoke_tx_handlers_early+0xa0d/0x1d00 [ 286.029087][ T3053] ieee80211_tx+0x2df/0x460 [ 286.033636][ T3053] ? ieee80211_skb_resize+0x640/0x640 [ 286.039128][ T3053] ? __bpf_trace_softirq+0x10/0x10 [ 286.044405][ T3053] __ieee80211_tx_skb_tid_band+0x164/0x200 [ 286.050484][ T3053] ieee80211_handle_roc_started+0x284/0x3e0 [ 286.056427][ T3053] _ieee80211_start_next_roc+0x705/0xa20 [ 286.062174][ T3053] ieee80211_roc_work+0x2b/0x40 [ 286.067090][ T3053] process_one_work+0x8a1/0x10c0 [ 286.072087][ T3053] ? worker_detach_from_pool+0x260/0x260 [ 286.077832][ T3053] ? _raw_spin_lock_irqsave+0x120/0x120 [ 286.083428][ T3053] ? kthread_data+0x4e/0xc0 [ 286.088042][ T3053] ? wq_worker_running+0x97/0x170 [ 286.093105][ T3053] worker_thread+0xaca/0x1280 [ 286.097549][T10868] loop7: detected capacity change from 0 to 40427 [ 286.097975][ T3053] kthread+0x3f6/0x4f0 [ 286.108422][ T3053] ? rcu_lock_release+0x20/0x20 [ 286.113313][ T3053] ? kthread_blkcg+0xd0/0xd0 [ 286.118079][ T3053] ret_from_fork+0x1f/0x30 [ 286.122552][ T3053] [ 286.125633][ T3053] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 286.132939][ T3053] CPU: 0 PID: 3053 Comm: kworker/u4:5 Not tainted 5.15.176-syzkaller #0 [ 286.141292][ T3053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.151380][ T3053] Workqueue: phy15 ieee80211_roc_work [ 286.156822][ T3053] Call Trace: [ 286.160130][ T3053] [ 286.163086][ T3053] dump_stack_lvl+0x1e3/0x2d0 [ 286.167797][ T3053] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 286.173461][ T3053] ? panic+0x860/0x860 [ 286.177573][ T3053] ? __rate_control_send_low+0x590/0x890 [ 286.183243][ T3053] ? __rate_control_send_low+0x590/0x890 [ 286.188930][ T3053] panic+0x318/0x860 [ 286.192860][ T3053] ? __warn+0x16a/0x300 [ 286.197050][ T3053] ? fb_is_primary_device+0xd0/0xd0 [ 286.202299][ T3053] ? ret_from_fork+0x1f/0x30 [ 286.206940][ T3053] ? __rate_control_send_low+0x653/0x890 [ 286.212614][ T3053] __warn+0x2b2/0x300 [ 286.214576][T10899] loop6: detected capacity change from 0 to 4096 [ 286.216627][ T3053] ? __rate_control_send_low+0x653/0x890 [ 286.216662][ T3053] report_bug+0x1b7/0x2e0 [ 286.216693][ T3053] handle_bug+0x3d/0x70 [ 286.216716][ T3053] exc_invalid_op+0x16/0x40 [ 286.241653][ T3053] asm_exc_invalid_op+0x16/0x20 [ 286.246530][ T3053] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 286.252795][ T3053] Code: 84 c0 48 8b 14 24 0f 85 d9 01 00 00 8b 0a 48 c7 c7 20 9b b8 8b 4c 89 f6 44 89 fa 44 8b 44 24 0c 44 8b 4c 24 08 e8 6d 6d 7d f7 <0f> 0b e9 75 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 286.272435][ T3053] RSP: 0018:ffffc9000cfcf5a8 EFLAGS: 00010246 [ 286.278525][ T3053] RAX: b1fddd388ae2da00 RBX: 0000000000000008 RCX: ffff88802b010000 [ 286.286514][ T3053] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 286.294500][ T3053] RBP: ffff888056905b68 R08: ffffffff8166aa6c R09: fffff520019f9df5 [ 286.302472][ T3053] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 286.310462][ T3053] R13: 0000000000000008 R14: 0000000000000000 R15: 00000000ffffffff [ 286.318441][ T3053] ? __wake_up_klogd+0xcc/0x100 [ 286.323325][ T3053] ? __rate_control_send_low+0x653/0x890 [ 286.328992][ T3053] rate_control_send_low+0x1a8/0x770 [ 286.334416][ T3053] rate_control_get_rate+0x20a/0x5d0 [ 286.339718][ T3053] ieee80211_tx_h_rate_ctrl+0xc6e/0x1990 [ 286.345374][ T3053] ? ieee80211_tx_h_select_key+0x16a0/0x16a0 [ 286.351381][ T3053] invoke_tx_handlers_late+0xb2/0x17f0 [ 286.356859][ T3053] ? invoke_tx_handlers_early+0xa0d/0x1d00 [ 286.362686][ T3053] ieee80211_tx+0x2df/0x460 [ 286.367200][ T3053] ? ieee80211_skb_resize+0x640/0x640 [ 286.372589][ T3053] ? __bpf_trace_softirq+0x10/0x10 [ 286.377717][ T3053] __ieee80211_tx_skb_tid_band+0x164/0x200 [ 286.383551][ T3053] ieee80211_handle_roc_started+0x284/0x3e0 [ 286.389541][ T3053] _ieee80211_start_next_roc+0x705/0xa20 [ 286.395185][ T3053] ieee80211_roc_work+0x2b/0x40 [ 286.400045][ T3053] process_one_work+0x8a1/0x10c0 [ 286.405032][ T3053] ? worker_detach_from_pool+0x260/0x260 [ 286.410808][ T3053] ? _raw_spin_lock_irqsave+0x120/0x120 [ 286.416497][ T3053] ? kthread_data+0x4e/0xc0 [ 286.421006][ T3053] ? wq_worker_running+0x97/0x170 [ 286.426122][ T3053] worker_thread+0xaca/0x1280 [ 286.430935][ T3053] kthread+0x3f6/0x4f0 [ 286.435011][ T3053] ? rcu_lock_release+0x20/0x20 [ 286.439878][ T3053] ? kthread_blkcg+0xd0/0xd0 [ 286.444477][ T3053] ret_from_fork+0x1f/0x30 [ 286.448995][ T3053] [ 286.452319][ T3053] Kernel Offset: disabled [ 286.457109][ T3053] Rebooting in 86400 seconds..