last executing test programs: 49.535024055s ago: executing program 0 (id=590): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000110000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r1, 0x0) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 49.150921541s ago: executing program 0 (id=595): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002600)=@delchain={0x50c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x3d0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x394, 0x1, [@m_simple={0x240, 0x1e, 0x0, 0x0, {{0xb}, {0x1ac, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x140, 0x3, '\xd5\xe9Ji\'\xc9\xb2\xcfE\xcdRO\xbd\xfd\xc8\xbd\x9f\xbb\'q}qqx\xdf\xf8\x82\xfd\x1c(\xafU\n\xeaP\xa1\xf3\x92\xa9\x16)\xb4i\xcf\x81\xb4\x0e\x8a\xa0Ou:\x18z\xad\xb8\x97\x038\xbd\x12lw\xcb\xea\xed\xad\x14E-\x91U\xa5R-\xb5\xb6\x0ehba\ar\xb0N\x9ek\xff}\x00\v\x86\xb9op\xe8\xd7\xd9\xf4\x1a\a\xb3\xce\x1d\xe3fI\x1f\xdc\xab0G\xc5b\xa3gF\xd5\x9f\xde\t\xcc\xaf*\x90\xea\a\f3l\xf2g?\x9b\x96\xb2\x9b\r\x98\x83\'T\xc4\x810]\xbf4\x8a\x10\x92I\x19\xa5\xa4\x90\xe9u\xc2\xf7\xed\x15\xf9\n6\x98\x85\'\xfb\x00\x00\x00\x00\x00\xe8\xa54*\v&\n\xbb-\x81\xa9\x91E\x94\t\xdew1^hZ\xe5{\x1f\xcb\vzG&\xf1xj\x10\x020\\\xde\\\xdc:\x8aL\xd1\x0e\xbd\xf7F\xce\x88\xd9\xd9\x1a\xc7\vD.\xf9);j}\x8fRY\xae\x01\xeb\xbduw~\xf9\xd1\xd1\x85\xa0\x16%\xb1\x97f\xca\xf2=\'\xb57\x94\xff\x92u\xb8\xa8\xect0\x1d\xb8\xd1\xa6F4\x934M\xe2\x9d\x94I\vf}U\x9f\xbcq\x92\xe8\xd3\xfe\xa3\xd7\xb1\xe3gi<\x00\x98\xaf7,\xec\xca\xfcU\x9f\x83\xb7\xec\'\xde'}, @TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x3, 0x20000000, 0x7f7, 0x2}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x5}}, @TCA_DEF_DATA={0x7, 0x3, '#/\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1, 0x20000000, 0x2, 0x10}}]}, {0x69, 0x6, "5719917cb8105b22946505febf0e0aa3a6a3c936bc58c12ca05b5b72f14eca9f4839c0a627a1ee3e7c02d3627befa20be28fae39b4e5923ee1f2eaaa556383b018f71019599cb045e5c24c8d18f72a313727dd4becc4896b5eda9f91778d4f49d8c3b96412"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x48, 0x19, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x80, 0x5, 0x6, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x70, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x41, 0x6, "65043db23614b2c5fe6d4d2637153bef7fcb38ba2040f5376fbbf34046602d42485015244ee993e7d633adcdf4954d21ec98f6d52e84490da7b9bcfe6b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x98, 0x13, 0x0, 0x0, {{0xd}, {0x4}, {0x65, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded7fbb0c799f243d3827c1ff7060f9d56b77b6373212745232c734d9b45311b3eceeeb16cae2bfd77942d880d60c94991d896d67e1bf08b6ace5ba70ca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xec, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xd8, 0x6, [@m_mirred={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x29, 0x6, "b9e6cb743efb5818279b291a7d56a99d728d0d3c5750442cdd89714a7135052ff6aa167b6d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x7c, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x4d, 0x6, "216194e50e7faa7649d1c06839be3b59a7f1bb6c7fbd0e7344b4e9b561d4b406f4a7a0c7e6ebe935ccd4c10fd3ff9357cc52da0d5a0f390e738e2309dae089a4a01ae1f8d77e0d976b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x50c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 48.883505335s ago: executing program 0 (id=597): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000019c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x4, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="e9", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)='T', 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x6, 0x30}, &(0x7f0000000280)=0xc) 48.272505364s ago: executing program 0 (id=604): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4be, &(0x7f0000000a00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 47.465931577s ago: executing program 0 (id=613): syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x200200, &(0x7f00000001c0)=ANY=[], 0x1, 0x1ab, &(0x7f00000004c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x0, 0x0) 46.781189547s ago: executing program 0 (id=621): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000380)={0x0, 0x0, 0x80004, 0x4}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) 46.357363534s ago: executing program 32 (id=621): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000380)={0x0, 0x0, 0x80004, 0x4}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) 43.239907531s ago: executing program 4 (id=646): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) 42.231756056s ago: executing program 4 (id=651): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000640)={[{@dots}, {@dots}, {@fat=@dos1xfloppy}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@fat=@fmask={'fmask', 0x3d, 0x1}}, {@fat=@usefree}, {@dots}, {@fat=@nfs}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@fat=@nfs}, {@nodots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@fat=@quiet}, {@nodots}, {@dots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 41.639641635s ago: executing program 4 (id=653): sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0xc800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 40.973992246s ago: executing program 4 (id=657): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 40.473104573s ago: executing program 4 (id=658): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000400)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x6) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 38.900249517s ago: executing program 4 (id=663): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 38.411615745s ago: executing program 33 (id=663): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.368020563s ago: executing program 5 (id=894): syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2287, &(0x7f0000000000)) 4.167886786s ago: executing program 5 (id=899): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 4.076074747s ago: executing program 6 (id=901): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000200)=0x33) read$dsp(r0, &(0x7f0000000500)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 3.683336864s ago: executing program 6 (id=907): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0xfe, 0xf44, &(0x7f00000054c0)="$eJzs3U9sHNX9APA367+JTbwGfmDgR0ihFYGCHZJITW9BoB4Rl95BIaERhqKGHoiAhB4QVRFFQpwqDlRcKEgpUpFAlSrUU9tTq956Qr1QqUqloB5apHir2O+td8c72fV4Pbve/Xykr5/fvNn5fmftbGbGs28DMLZq61+PH1/KQnjns7cfffmp7JNry+5qrnFo/WsWe/UQwlRLP8tt74u44OqVl051arNwdP1r6ofHLjcfOxdCuBgOhc9DPXy4svrVB+8+cvjj12ZvefP8M6/s0u435fcDAABG0aU/rf7tvn/88YHFry8dPBlmmsvT8Xk99uficf+ReKCcjpdrob2ftUSr6dx6EzFqufUmcutN5vJMFuSbym1nqmC96S75JlqWddpPAAAA2IvSeW09ZLXltn6ttry8cd5/zRcL09nyc2dXz5wbUKEAAABAaf++sH7TrRhYxDsSBl6HuG7MDkEN/Yl9Q1CDqDhqXmOE2NU4OQQ1CCGEEFsi27qssTDgCxAAAADA2MnPF7bFxf7O1NXcWr23/JcfrnV+PPRB1b//188/O+D8HYx5/vdf9YoDAEB5o3o0mfYrHUeneQzy8whO5B633eP/Wm47k9uss2hewb0y32BRnfnndVgV1b/dn+OgFNWfnw9zWBXVn5+nc1gV1T9TcR1lFdXf4crPUCqqf1/FdZRVVP/+iusoq6j+uYrrKKuo/vmK6yirqP4bKq6jrKL6D1RcR1lF9e+V22qL6q9XXEdZRfUvVlxHWUX131hxHWUV1X9TxXWUVVT/zRXXMSh3xjY9DwcL1pvrcE63V87xAAAAYNz91/x/4xgfvTP4GoQQfYt4NXbgdYxMzHo+hRBCCNExfjYENewgLgz28gMAAAAwBNL7AtK73htRGp/oMj7ZOj67uUIan+ry+Oku4zNdxgEAAIAQfvv6mdveyjbnu9vpfHhp3qh94ZO1UGIeo/x8hNvNv9N5z3aaf6/MWwYAAMB4yb73+dr9j773wuLXlw6ebDn7XYvnu2ke0Ml4beDT2E/3Bczn+lk6hz7ZnqdWsF7++sANRdt7fIc7CgAAAGMsnb/XQ1ZbbjnvrodabXl583x8KUxlZ86unj4S++nzWf6wMDVzbflDFdcNAAAA9G7zfL/z+X/6HN+lMJ0tP3d29cy5jf58c/lUrfW6wMLm8qz1ukA9t/xowfJjsZ8+v/MHC/vWly+f+uHqU/3eeQAAABgT5148/8yTq6unf+Qb3/jGN81vBv3KBAAA9NuXX7499eNj87/beP//5vx3a/GbQ7Ffj3P7/TkuT/cJpPcBbHm//hPteRaK1nu+fb16br2JGDO5umdbthPW5xtsf9xiUb56+3amC/LN5fLN5/Ll5ymYzK2fdZhLMHSYnzCtt5Bbnp+HcTKXI8vlv7tDLgAAAEhWXnj2+ZVzL55/8OyzTz59+unTzx07euK7J04ceeg7D62s39e/0np3PwAAALAXbd70O+hKAAAAAAAAAAAAAAAAAAAAYHxV8XFig95HAAAAGHf/uhBCuChEQaQPGBx0HWKYozEz+BpGO4J/h0KI7cek1w4hRGuM3nlfNgQ17LloNPKfNA8AAACwu65eeelUa7vFxayv+Zpbq280azFvaucf/OvitUirXX64/XrJ/r5Ww7ir+vdf/mHNP9Nx/P1X+5t/Nmy+9oWeXv9q7Rs42dbb12vee1d+tdTMH0K4fbLH/Pn9f7zXjO0O5/LfG3rL33gvl/+Jtl6t1/z35fLv7zH/lv1/vteM7e6P+Zdi//A9veZv38X0W5r2o9dfgG/n9v+p0Gv+3P7Xe0yY80DMDwDjqPm/eePCYAvps3SUkI6n52I/7W+6Jy5/98N2j/9rue1M7rjy9u2m46BbY3+2WUd73mS79afnZT6EMB1CuKFknXl75a6Sovr79XPcbUX1T1VcR1lF9U9XXEdZRfV3PnsfPkX1z1ZcR1lF9fd8IWLAiurfK9eVi+qfq7iOsorqn6+4jrKK6t/u/+ODUlT/gYrrKKuo/oWK6yirqP6Sl9UqV1T/YsV1lFVU/40V11FWUf03VVxHWUX131xxHYNyR2yLzofT+edCHEv9eq4/0+G57PmPIQAAAMCu+udQzgPRcuVg4LUIIYQQQggx+vGfxoZB1yHGNNYajcagaxiDaDQGefWBQdvddzMDMKy8/o83P//x5uc/3vz8uZ70l/gs108muoxPdhmf6jI+nRvP/77OdBm/KbfdRrquGd3cZfz/4h4UjR/o8vhbu4wvdRm/rcv47V3G7+gyDgAAwHi4JbbODwEAAGB0vfzRp2/85t4nrix+fengyTC9Zd75I7E/E/+2/nrs5+e9T6bi3/x/Evu/jO3vY/v33PruPwEAAIDdlz4nxt//AQAAYHSlzyl1/g8AAACjazG2zv8BAABgdN0YW+f/AAAAMMKy2c6LY5uuC9wd217n9QMAht//x/bO2B6M7V2x/UZs03HAPbH9ZkX1AQD984vv//TEW9nmfP/HcuNX4/LUbnFx40pBVmufyX9fbPfH9ls91pP/PIBe8ycHesyzW/kXdpgfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgdtfWvx48vZSG889nbj/58+o2/XFt2V3ONQ+tfs9irhxCmmo9Lo5v9X8cVr1556VRruxbbLBwNWciay8Njl5uZ5kIIF8Oh8Hmohw9XVr/64N1HDn/82uwtb55/5pVdfAra9g8AAABG0f8CAAD//99TIp0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x105042, 0x150) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x19b5013, 0x0, 0x4, 0x0, &(0x7f0000000180)) writev(r0, &(0x7f0000000480)=[{&(0x7f00000001c0)='X', 0xffea}], 0x1) 3.060741363s ago: executing program 3 (id=913): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 2.823413866s ago: executing program 6 (id=915): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000001940)="4a843ac2d564b9c57e1967c70e49ad66d3fabdc7f8137691173166a4c462ca137e2e5b0db1050148c1", 0x29, 0x8010, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.545772611s ago: executing program 6 (id=918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2a, 0x9, 0x9, 0x6, 0x8084, 0x3, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}]}, 0x40}}, 0x0) 2.525915041s ago: executing program 5 (id=919): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x380000, @empty}, 0x1c) 2.300059335s ago: executing program 6 (id=921): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000640)='./file0\x00', 0x200000, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x5e2, &(0x7f0000000900)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') rmdir(&(0x7f0000000080)='./file0\x00') 2.299750505s ago: executing program 2 (id=922): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000300)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x401}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c200000000000000000086dd609a83c900482f00fe880000000000000000000000000001fe8000000000000000000000000000aa042088be"], 0x0) 2.285648295s ago: executing program 1 (id=923): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x2020, 0x0, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="110000", 0x3}, 0x1, 0x0, 0x0, 0x4000081}, 0x4c0e4) 2.127786597s ago: executing program 2 (id=924): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) 2.024685699s ago: executing program 3 (id=925): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000001c0)={[{@utf8}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@discard}, {@errors_continue}, {}, {@errors_remount}, {@errors_remount}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000001f80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 2.024445219s ago: executing program 1 (id=926): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x8000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x5b76c000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) 1.989124789s ago: executing program 2 (id=927): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 1.865095191s ago: executing program 6 (id=928): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.687912024s ago: executing program 3 (id=929): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800010, &(0x7f0000001040)={[{@uid_forget}, {@nostrict}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@session}, {@gid}, {@rootdir={'rootdir', 0x3d, 0xce5}}, {@adinicb}, {@partition={'partition', 0x3d, 0x2000001}}, {@unhide}, {}]}, 0x1, 0xc43, &(0x7f00000001c0)="$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") syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c407, &(0x7f0000000500)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e394456", @ANYRES16, @ANYBLOB="5fc5e0cc89f89fb398e023abba4b76a7c3068519a1a4d35631da3ac1da1498ccbed34b45633d4cecc0ce311f7adfa5ee00b0ede9ce477b0717355c8145c254b208e7b26c8704f414550ccfcd9f78ef990092397d833e49136c5ad000"], 0xff, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.685611724s ago: executing program 2 (id=930): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000200)=0x8a, 0x100000500) 1.548760586s ago: executing program 5 (id=931): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000003c0)={0x10000000006, 0xffff1000, 0x1, r2, 0x6}) 1.539619326s ago: executing program 2 (id=932): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x100000, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)="ee", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x8000005}, 0x1c) 1.340062039s ago: executing program 3 (id=933): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000002540)=0x1) 1.197293661s ago: executing program 5 (id=934): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x101801e, &(0x7f0000000100)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@nointegrity}, {@discard}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x82}}, {@errors_continue}, {@nodiscard}, {@errors_remount}]}, 0x24, 0x6293, &(0x7f0000009000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 1.127984432s ago: executing program 3 (id=935): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x4, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) eventfd2(0x0, 0x0) 1.020038774s ago: executing program 1 (id=936): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @multicast}) 877.108796ms ago: executing program 1 (id=937): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}]}]}, 0x28}}, 0x0) 768.405538ms ago: executing program 1 (id=938): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_es_lookup_extent_exit\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x2, 0x56a, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x183341, 0x0) 495.968402ms ago: executing program 2 (id=939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x20, r1, 0x5, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x40048}, 0x4) 402.538344ms ago: executing program 3 (id=940): r0 = openat$audio(0xffffff9c, &(0x7f00000001c0), 0x2002, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000200)=0x2) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000240)=0x10) read$dsp(r0, &(0x7f0000000040)=""/194, 0xc2) 282.599515ms ago: executing program 1 (id=941): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x410, &(0x7f0000000240)=ANY=[], 0x11, 0x489, &(0x7f0000000a40)="$eJzs29trHOUfx/HPd7K72Wz7+3XbpmmVgquCSsWaQ4/Gix5iqNCkOTQiRYWYbOLSnMimkhTR4o233ngjIgoKUkULIt54pb3zD1AQBL3wQgT3wgMIgszszM5ks2nS7iHd9v2CdifPfGfmOewzz7M7zwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEinnjrZ2WVbnQsAANBIg6Mjnd2M/wAA3FXO8/kfAADgbmJy9L1MfSMFG/D+Lkqezc1dWh7r6698WJt5R7Z48e6/ZFd3z6HDR44eC15vfHyt3aNzo+dPZk7Pzy4sZvP57GRmbC43MT+Z3fQZqj2+3AGvAjKzFy9NTk3lM90He1btXk7/0rqtI917tOOEE8SO9fX3j0ZiYvFbvvoa683wE3K0T6bfHvrUBiU5qr4uNnjv1FubV4gDXiHG+vq9gszkxueW3J1DQUU4fll9iaCOGtAWVWmX3HxZojaf2eJydEKmjp8Ldk5SS1APj3pfDK9/YKwml79lbj6fl/SAmqDNbmOtcvSjTLM7khra+mZFg8XkaFmmP3oLNuzdD9z+5N42zz6TeXpuaj4SO2R+j2r28aGRbvN7U1KOBr07fsFGtjozaDh3svSWTHs+ftmbV8ibl+7oPfrEcE90hrF3g/O4sQf9+eNmxuS4HztkQ2ZO7csFAAAAAAAAQGo1R9/JVPgqEyamTU7kkXFSxQdDma3JIoB6MUdvyzQ8UvC+ho+uS2mJrO8pafZnf/XNf1vy9PzCymJu+qWlivtTyZMv5pcWxycq71abe59tiaZstI6lSnFzlJDpuT8/stJ1i/d/fylAmJsPnwzXzCTLr++9b/5fXM8UPEM6fmFvdLtilm/i+ah7TTNHSzKd2rXPX6uS0po6UzHuc5l+f2+/H+ck3MwHp00XzziVm8l2urFfy/T+v0GstyxK2/zY3WFslxtrMr05sDp2ux/bHsZ2u7H9Ml1/oXLsnjC2x419XaaFXzNBbMqNvc+P7QhjD07Mz0xWqkrgZrn9/yeZ3m3PWNA3YsX339r+/0o4FlwpP9E6fb7a/p+OpF3x+/UFt///tc/ry17/dyr3/zdk+uSL/X5cse8l/P07vf/D/v+sTNPfro5N+bG7wtiuTVdsk3Dbf79MZ/ZcK9WN3/5+C4StFm3/e8vfHXVq/52RtLR/3dbaFB2S8iuXL47PzGQX2WCDDTZKG1t9Z0IjuOP/Z+4s6ssfSvMdf/z3P6aEM6u/Xw3H/97yE9Vp/N8VSev1ZyPxmJRcml2I75WS+ZXLj+Vmx6ez09m5Q51HOg8fOt51/Fg8EUzuwq2q6+pO5Lb/NzL9s+1q6fPu6vlf5fl/qvxEdWr/3ZG01Kr5StVFh9/+V2W6//q10vcSN5r/B9//PPJg8bXUP+vU/u2RtLR/3f/VpugAAAAAAAAAAAAAAAAA0NTi5ugDmc48HrPgt2abWf+35gdodVr/1RFJm2zQ7xWqrlQAaAKOHL0j08Mq2GtuwnZpIPqKO9p/AQAA//9HASOO") execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) 0s ago: executing program 5 (id=942): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f000069d000/0x2000)=nil, 0x2000) kernel console output (not intermixed with test programs): (loop2): Small segment_count (9 < 1 * 24) [ 101.002245][ T4638] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 101.015763][ T4260] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop4 scanned by udevd (4260) [ 101.032152][ T4507] usb 1-1: config 0 descriptor?? [ 101.052548][ T4638] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.162560][ T4638] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 101.224754][ T4638] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.676242][ T4507] uclogic 0003:28BD:0071.0001: pen parameters not found [ 101.686969][ T4507] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 101.905438][ T4259] syz-executor: attempt to access beyond end of device [ 101.905438][ T4259] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.931271][ T4507] usb 1-1: USB disconnect, device number 2 [ 101.936857][ T4724] loop3: detected capacity change from 0 to 8192 [ 102.020824][ T4724] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 102.084346][ T4724] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 102.104044][ T4724] REISERFS (device loop3): using ordered data mode [ 102.111322][ T4724] reiserfs: using flush barriers [ 102.143593][ T4724] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.180999][ T4724] REISERFS (device loop3): checking transaction log (loop3) [ 102.229245][ T4724] REISERFS (device loop3): Using r5 hash to sort names [ 102.249322][ T4724] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 102.305308][ T4724] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 102.432327][ T4724] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 102.485610][ T4724] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 102.563397][ T4724] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 102.891099][ T4745] netlink: 44 bytes leftover after parsing attributes in process `syz.2.115'. [ 102.931643][ T4747] loop1: detected capacity change from 0 to 1024 [ 102.955666][ T4745] netlink: 44 bytes leftover after parsing attributes in process `syz.2.115'. [ 102.996530][ T4745] Zero length message leads to an empty skb [ 103.110236][ T4747] hfsplus: xattr searching failed [ 103.517684][ T4759] loop2: detected capacity change from 0 to 64 [ 103.546473][ T4754] loop1: detected capacity change from 0 to 4096 [ 103.591866][ T4759] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 103.641061][ T4762] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.718873][ T4759] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 103.765843][ T4759] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 103.875513][ T4764] kernel read not supported for file / (pid: 4764 comm: syz.3.128) [ 103.936409][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 103.936425][ T26] audit: type=1800 audit(1748916502.791:53): pid=4764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.128" name=0D dev="mqueue" ino=34968 res=0 errno=0 [ 104.353526][ T4773] loop0: detected capacity change from 0 to 2048 [ 104.688206][ T4780] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.894003][ T4766] loop1: detected capacity change from 0 to 32768 [ 104.929732][ T4766] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 105.274127][ T4260] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 105.541580][ T4798] loop2: detected capacity change from 0 to 4096 [ 105.573378][ T4805] device netdevsim0 entered promiscuous mode [ 105.618538][ T4798] NILFS (loop2): invalid segment: Checksum error in segment payload [ 105.635735][ T4805] device macvtap1 entered promiscuous mode [ 105.648070][ T4798] NILFS (loop2): trying rollback from an earlier position [ 105.667042][ T4805] team0: Device macvtap1 is up. Set it down before adding it as a team port [ 105.718328][ T4805] device netdevsim0 left promiscuous mode [ 105.724973][ T4798] NILFS (loop2): recovery complete [ 105.741213][ T4807] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.261020][ T4820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 106.389539][ T4321] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 106.483058][ T4813] loop2: detected capacity change from 0 to 32768 [ 106.605756][ T4321] usb 1-1: config 7 has an invalid interface number: 34 but max is 0 [ 106.614893][ T4321] usb 1-1: config 7 has no interface number 0 [ 106.642350][ T4813] XFS (loop2): Mounting V5 Filesystem [ 106.693254][ T4321] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35 [ 106.753839][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.805161][ T4321] usb 1-1: Product: syz [ 106.809429][ T4321] usb 1-1: Manufacturer: syz [ 106.812380][ T4813] XFS (loop2): Ending clean mount [ 106.814071][ T4321] usb 1-1: SerialNumber: syz [ 106.869953][ T4813] XFS (loop2): Quotacheck needed: Please wait. [ 106.937931][ T4821] loop3: detected capacity change from 0 to 40427 [ 106.944504][ T4813] XFS (loop2): Quotacheck: Done. [ 106.993297][ T4821] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 107.013174][ T4821] F2FS-fs (loop3): invalid crc value [ 107.055926][ T4821] F2FS-fs (loop3): Found nat_bits in checkpoint [ 107.166011][ T4259] XFS (loop2): Unmounting Filesystem [ 107.198689][ T4821] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 107.475441][ T4257] syz-executor: attempt to access beyond end of device [ 107.475441][ T4257] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.633442][ T4321] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 107.685606][ T4321] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 107.722410][ T4321] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19) [ 107.742912][ T4321] dvb_usb_cxusb: probe of 1-1:7.34 failed with error -22 [ 107.889875][ T4321] usb 1-1: USB disconnect, device number 3 [ 108.593160][ T4876] loop4: detected capacity change from 0 to 1024 [ 108.647947][ T4870] loop2: detected capacity change from 0 to 8192 [ 108.692630][ T4870] FAT-fs (loop2): Directory bread(block 22913) failed [ 108.704954][ T4870] FAT-fs (loop2): Directory bread(block 22914) failed [ 108.711806][ T4870] FAT-fs (loop2): Directory bread(block 22915) failed [ 108.735800][ T4870] FAT-fs (loop2): Directory bread(block 22916) failed [ 108.738088][ T4876] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.747338][ T4870] FAT-fs (loop2): Directory bread(block 22917) failed [ 108.776121][ T4870] FAT-fs (loop2): Directory bread(block 22918) failed [ 108.795007][ T4870] FAT-fs (loop2): Directory bread(block 22919) failed [ 108.802072][ T4870] FAT-fs (loop2): Directory bread(block 22920) failed [ 108.835059][ T4263] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 108.849550][ T4870] FAT-fs (loop2): Directory bread(block 22921) failed [ 108.868163][ T4870] FAT-fs (loop2): Directory bread(block 22922) failed [ 108.983630][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 109.137118][ T4892] loop4: detected capacity change from 0 to 512 [ 109.249059][ T4892] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.270898][ T4892] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.522748][ T26] audit: type=1800 audit(1748916508.281:54): pid=4892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.174" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 109.648587][ T4903] loop0: detected capacity change from 0 to 512 [ 109.680396][ T26] audit: type=1800 audit(1748916508.441:55): pid=4892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.174" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 109.700707][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.753035][ T4903] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 109.817566][ T4903] EXT4-fs (loop0): invalid journal inode [ 109.832460][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 109.852122][ T4903] EXT4-fs (loop0): can't get journal size [ 109.963914][ T4903] EXT4-fs (loop0): 1 truncate cleaned up [ 109.990254][ T4903] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 110.213973][ T4903] EXT4-fs warning (device loop0): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 110.513517][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 111.253480][ T4921] loop4: detected capacity change from 0 to 256 [ 111.327587][ T4921] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 111.454896][ T4901] loop1: detected capacity change from 0 to 262144 [ 111.466747][ T26] audit: type=1800 audit(1748916510.321:56): pid=4921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.187" name="file1" dev="loop4" ino=1048598 res=0 errno=0 [ 111.467225][ T4901] F2FS-fs (loop1): invalid crc value [ 111.523850][ T4901] F2FS-fs (loop1): Found nat_bits in checkpoint [ 111.588782][ T4921] syz.4.187: attempt to access beyond end of device [ 111.588782][ T4921] loop4: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 111.604284][ T4921] syz.4.187: attempt to access beyond end of device [ 111.604284][ T4921] loop4: rw=524288, sector=696, nr_sectors = 256 limit=256 [ 111.618403][ T4901] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 111.648239][ T4931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 112.304722][ T4947] mmap: syz.2.196 (4947) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.436642][ T4953] ALSA: mixer_oss: invalid OSS volume 'A1é4ó1Ø=w”ÄVe]' [ 112.475005][ T4953] ALSA: mixer_oss: invalid OSS volume 'ÊÒ±BËÂì;T`¿@$™¿¾E÷ócXÆMYdŸè,' [ 112.514775][ T4953] ALSA: mixer_oss: invalid OSS volume 'b«Ž@hé#' [ 112.521107][ T4953] ALSA: mixer_oss: invalid OSS volume '•‘h4¿–ÐX¬„S4v=0_>¤&äÏ' [ 112.550799][ T4950] loop4: detected capacity change from 0 to 4096 [ 112.610084][ T4953] ALSA: mixer_oss: invalid OSS volume '|œ/"tj' [ 112.674371][ T4953] ALSA: mixer_oss: invalid OSS volume '-z5²Šc^÷Jƒå6$̹' [ 112.721232][ T4953] ALSA: mixer_oss: invalid OSS volume '0ÉóT„®°yòÝäî¬ó‰´ª‡—‚j–P&†³aït' [ 112.780189][ T4953] ALSA: mixer_oss: invalid OSS volume '÷|á¥ó~‚\' [ 112.814980][ T4953] ALSA: mixer_oss: invalid OSS volume '­É@ô^3bÉœ‘}˜ÔG$º#\Ä("/øoúLÛ' [ 112.846218][ T4953] ALSA: mixer_oss: invalid OSS volume '' [ 113.004860][ T127] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.030350][ T4963] loop2: detected capacity change from 0 to 1024 [ 113.153477][ T4963] hfsplus: bad catalog entry type [ 113.204716][ T127] usb 1-1: Using ep0 maxpacket: 32 [ 113.211890][ T127] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 113.248676][ T127] usb 1-1: config 0 has no interface number 0 [ 113.279828][ T127] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 113.311586][ T9] hfsplus: b-tree write err: -5, ino 4 [ 113.323406][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.352119][ T127] usb 1-1: Product: syz [ 113.363567][ T127] usb 1-1: Manufacturer: syz [ 113.372379][ T127] usb 1-1: SerialNumber: syz [ 113.405366][ T127] usb 1-1: config 0 descriptor?? [ 113.432311][ T127] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 113.457584][ T4972] netlink: 'syz.3.207': attribute type 3 has an invalid length. [ 113.544746][ T4509] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.624781][ T127] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 113.656406][ T127] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 113.734795][ T4509] usb 5-1: Using ep0 maxpacket: 16 [ 113.742250][ T4509] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.803454][ T4509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.850345][ T4509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 113.866593][ T4509] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 113.877339][ T4509] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.911816][ T4509] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 113.931416][ T4509] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 113.950064][ T4509] usb 5-1: Manufacturer: syz [ 113.972407][ T4509] usb 5-1: config 0 descriptor?? [ 114.067954][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 114.086312][ T127] usb 1-1: USB disconnect, device number 4 [ 114.121904][ T127] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 114.173156][ T127] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 114.221312][ T127] quatech2 1-1:0.51: device disconnected [ 114.464752][ T4509] rc_core: IR keymap rc-hauppauge not found [ 114.470861][ T4509] Registered IR keymap rc-empty [ 114.497116][ T4509] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.554764][ T4509] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.596055][ T4509] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 114.653527][ T4509] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 114.758624][ T4509] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.794774][ T4509] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.838705][ T4509] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.885165][ T4509] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.927087][ T4509] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.974964][ T4509] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 115.015830][ T4509] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 115.048808][ T4978] loop3: detected capacity change from 0 to 32768 [ 115.054871][ T4509] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 115.094749][ T4509] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 115.112682][ T4978] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.209 (4978) [ 115.124775][ T4509] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 115.157452][ T4509] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 115.176857][ T4509] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 115.232699][ T4978] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 115.247522][ T4509] usb 5-1: USB disconnect, device number 3 [ 115.264899][ T4978] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 115.274385][ T4978] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 115.374739][ T4978] BTRFS info (device loop3): use zstd compression, level 3 [ 115.395911][ T4978] BTRFS info (device loop3): using free space tree [ 115.401481][ T5003] loop2: detected capacity change from 0 to 1024 [ 115.584941][ T4978] BTRFS info (device loop3): enabling ssd optimizations [ 115.684363][ T26] audit: type=1800 audit(1748916514.531:57): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.209" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 115.705361][ T127] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 115.713599][ T46] hfsplus: b-tree write err: -5, ino 8 [ 115.901266][ T127] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.933928][ T127] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.964239][ T127] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.984519][ T127] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 116.005540][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.045022][ T4257] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 116.081252][ T127] usb 2-1: config 0 descriptor?? [ 116.431538][ T5039] device bridge0 entered promiscuous mode [ 116.470457][ T5039] bridge0: port 4(macsec1) entered blocking state [ 116.494859][ T5039] bridge0: port 4(macsec1) entered disabled state [ 116.515700][ T127] hid-steam 0003:28DE:1102.0002: item fetching failed at offset 4/5 [ 116.536515][ T127] hid-steam 0003:28DE:1102.0002: steam_probe:parse of hid interface failed [ 116.552235][ T127] hid-steam: probe of 0003:28DE:1102.0002 failed with error -22 [ 116.580512][ T5039] device bridge0 left promiscuous mode [ 116.649268][ T5043] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 116.761432][ T4506] usb 2-1: USB disconnect, device number 2 [ 117.773709][ T5071] loop1: detected capacity change from 0 to 1024 [ 117.833658][ T5071] EXT4-fs: Ignoring removed nobh option [ 117.862572][ T5071] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.929786][ T5063] loop2: detected capacity change from 0 to 32768 [ 117.982320][ T5058] loop4: detected capacity change from 0 to 32768 [ 117.987320][ T5071] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 118.009294][ T5063] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.233 (5063) [ 118.044494][ T5063] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.089330][ T5058] XFS (loop4): Mounting V5 Filesystem [ 118.098426][ T5063] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 118.144821][ T5063] BTRFS info (device loop2): use zlib compression, level 3 [ 118.173691][ T5063] BTRFS info (device loop2): using free space tree [ 118.330436][ T5071] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.237: Allocating blocks 497-513 which overlap fs metadata [ 118.356333][ T5071] EXT4-fs (loop1): pa ffff8880741e9540: logic 256, phys. 385, len 8 [ 118.365121][ T5071] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 118.386434][ T5058] XFS (loop4): Ending clean mount [ 118.426884][ T5058] XFS (loop4): Quotacheck needed: Please wait. [ 118.547683][ T5058] XFS (loop4): Quotacheck: Done. [ 118.604850][ T5063] BTRFS info (device loop2): enabling ssd optimizations [ 118.639228][ T5088] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 118.807552][ T4256] XFS (loop4): Unmounting Filesystem [ 118.885742][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 118.989162][ T4259] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.719794][ T5130] tap0: tun_chr_ioctl cmd 1074025677 [ 119.755326][ T5130] tap0: linktype set to 6 [ 119.909030][ T5134] loop4: detected capacity change from 0 to 256 [ 119.978617][ T5134] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 120.099510][ T5138] loop2: detected capacity change from 0 to 4096 [ 120.135806][ T5141] capability: warning: `syz.0.241' uses 32-bit capabilities (legacy support in use) [ 120.218970][ T5143] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.263054][ T5145] process 'syz.3.256' launched './file1' with NULL argv: empty string added [ 120.297567][ T26] audit: type=1800 audit(1748916519.151:58): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.255" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 120.419339][ T5138] syz.2.255 (5138) used greatest stack depth: 19488 bytes left [ 120.439099][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'. [ 120.471994][ T5149] netlink: 'syz.4.257': attribute type 20 has an invalid length. [ 120.504840][ T5149] netlink: 'syz.4.257': attribute type 21 has an invalid length. [ 120.880056][ T5159] loop3: detected capacity change from 0 to 256 [ 120.952406][ T5159] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 121.052461][ T5163] loop4: detected capacity change from 0 to 1024 [ 121.059065][ T4303] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 121.107279][ T5163] EXT4-fs: Ignoring removed nobh option [ 121.148548][ T5163] EXT4-fs: Ignoring removed bh option [ 121.230187][ T5163] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.296290][ T4303] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 121.321456][ T4303] usb 3-1: config 7 has no interface number 0 [ 121.325986][ T5163] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.382836][ T5163] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.264: bg 0: block 328: padding at end of block bitmap is not set [ 121.406341][ T4303] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 121.416866][ T4303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.447700][ T4303] usb 3-1: Product: syz [ 121.451936][ T4303] usb 3-1: Manufacturer: syz [ 121.458234][ T5175] loop1: detected capacity change from 0 to 512 [ 121.480552][ T5175] EXT4-fs (loop1): Test dummy encryption mode enabled [ 121.487622][ T5175] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.503054][ T5175] EXT4-fs (loop1): 1 truncate cleaned up [ 121.509216][ T5175] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 121.524149][ T4303] usb 3-1: SerialNumber: syz [ 121.708640][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 121.890971][ T5185] sctp: [Deprecated]: syz.4.272 (pid 5185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.890971][ T5185] Use struct sctp_sack_info instead [ 121.981678][ T5187] loop3: detected capacity change from 0 to 2048 [ 122.107945][ T5187] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 122.261924][ T5175] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 122.314255][ T5175] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.269: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 122.337013][ T4303] as10x_usb: device has been detected [ 122.342870][ T4303] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 122.353233][ T5175] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 122.366295][ T5175] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.269: Deleting old file: nlink 6, error=-117 [ 122.411390][ T4303] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 122.472450][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 122.538652][ T4303] as10x_usb: error during firmware upload part1 [ 122.585211][ T4303] Registered device Elgato EyeTV DTT Deluxe [ 122.610972][ T4303] usb 3-1: USB disconnect, device number 3 [ 122.678885][ T5211] loop4: detected capacity change from 0 to 16 [ 122.717357][ T5211] erofs: (device loop4): mounted with root inode @ nid 36. [ 122.735824][ T4303] Unregistered device Elgato EyeTV DTT Deluxe [ 122.744489][ T4303] as10x_usb: device has been disconnected [ 122.905708][ T46] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 122.938778][ T46] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 122.953342][ T46] EXT4-fs (loop3): This should not happen!! Data will be lost [ 122.953342][ T46] [ 122.994032][ T46] EXT4-fs (loop3): Total free blocks count 0 [ 123.001581][ T46] EXT4-fs (loop3): Free/Dirty block details [ 123.017047][ T46] EXT4-fs (loop3): free_blocks=4096 [ 123.023570][ T46] EXT4-fs (loop3): dirty_blocks=896 [ 123.043746][ T46] EXT4-fs (loop3): Block reservation details [ 123.073194][ T46] EXT4-fs (loop3): i_reserved_data_blocks=56 [ 123.119199][ T46] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 864 with error 28 [ 123.494453][ T5230] netlink: 64 bytes leftover after parsing attributes in process `syz.1.289'. [ 123.679677][ T5237] device dummy0 entered promiscuous mode [ 123.708711][ T5231] loop0: detected capacity change from 0 to 4096 [ 123.716886][ T5237] device dummy0 left promiscuous mode [ 123.787732][ T5231] ntfs: volume version 3.1. [ 124.011665][ T5247] netlink: 96 bytes leftover after parsing attributes in process `syz.0.296'. [ 124.035256][ T5247] netlink: 'syz.0.296': attribute type 5 has an invalid length. [ 124.089598][ T5247] netlink: 44 bytes leftover after parsing attributes in process `syz.0.296'. [ 124.951913][ T4303] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.164259][ T4303] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.189307][ T4303] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 125.212726][ T4303] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 125.241434][ T4303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.287855][ T5263] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.457973][ T5274] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 125.638881][ T4303] usb 3-1: USB disconnect, device number 4 [ 125.768107][ T5278] loop0: detected capacity change from 0 to 4096 [ 125.824028][ T5278] ntfs: volume version 3.1. [ 126.240985][ T5294] loop4: detected capacity change from 0 to 2048 [ 126.303492][ T5294] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 126.371032][ T5294] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.571241][ T5302] loop0: detected capacity change from 0 to 16 [ 126.608510][ T5302] erofs: (device loop0): mounted with root inode @ nid 36. [ 126.653296][ T5302] erofs: (device loop0): erofs_read_inode: unsupported i_format 36 of nid 37 [ 126.792280][ T5304] loop2: detected capacity change from 0 to 4096 [ 126.910062][ T5304] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 127.003918][ T5304] ntfs3: loop2: Failed to load $Extend. [ 127.218294][ T4339] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.284514][ T5317] loop1: detected capacity change from 0 to 4096 [ 127.437157][ T5321] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.447979][ T4339] usb 1-1: Using ep0 maxpacket: 32 [ 127.457828][ T4339] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 127.480604][ T5322] loop2: detected capacity change from 0 to 512 [ 127.486586][ T4339] usb 1-1: config 0 has no interface number 0 [ 127.526828][ T26] audit: type=1800 audit(1748916526.381:59): pid=5317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.328" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 127.563810][ T4339] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 127.592224][ T5322] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.329: invalid indirect mapped block 10 (level 1) [ 127.593222][ T5317] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 127.634903][ T5322] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.329: invalid indirect mapped block 8 (level 1) [ 127.652238][ T5328] sp0: Synchronizing with TNC [ 127.695497][ T4339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.703540][ T4339] usb 1-1: Product: syz [ 127.726627][ T5322] EXT4-fs (loop2): 1 truncate cleaned up [ 127.732351][ T5322] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.795125][ T4339] usb 1-1: Manufacturer: syz [ 127.799787][ T4339] usb 1-1: SerialNumber: syz [ 127.801642][ T5317] Remounting filesystem read-only [ 127.839991][ T4339] usb 1-1: config 0 descriptor?? [ 127.879265][ T4339] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 127.955807][ T4272] Bluetooth: hci1: command 0x0405 tx timeout [ 127.985911][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 128.100076][ T4253] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 128.111521][ T4339] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 128.157197][ T4339] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 128.375153][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 128.577098][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 128.577759][ T4303] usb 1-1: USB disconnect, device number 5 [ 128.623334][ T4303] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 128.653632][ T4303] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 128.703487][ T4303] quatech2 1-1:0.51: device disconnected [ 129.320332][ T5365] netlink: 32 bytes leftover after parsing attributes in process `syz.3.350'. [ 130.745279][ T5371] loop0: detected capacity change from 0 to 40427 [ 130.770479][ T5371] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 130.785099][ T5392] loop1: detected capacity change from 0 to 1024 [ 130.816053][ T5371] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 130.890963][ T5392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 130.913854][ T5399] loop3: detected capacity change from 0 to 256 [ 130.930908][ T5392] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.944023][ T5371] F2FS-fs (loop0): Found nat_bits in checkpoint [ 131.040124][ T5391] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 131.154749][ T5371] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 131.162452][ T5401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.363'. [ 131.182413][ T5371] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 131.304166][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 131.426093][ T5371] F2FS-fs (loop0): switch extent_cache option is not allowed [ 131.574970][ T4254] syz-executor: attempt to access beyond end of device [ 131.574970][ T4254] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 131.699541][ T5413] loop3: detected capacity change from 0 to 8 [ 131.719053][ T5407] loop2: detected capacity change from 0 to 4096 [ 131.758473][ T5407] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 131.893350][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'. [ 131.926775][ T5417] netlink: 2 bytes leftover after parsing attributes in process `syz.4.372'. [ 132.400250][ T5425] loop3: detected capacity change from 0 to 1024 [ 132.476276][ T5425] EXT4-fs: Ignoring removed orlov option [ 132.482190][ T5425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.557232][ T5425] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 132.574479][ T5435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 132.758913][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.766398][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.798849][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 133.134823][ T5446] loop0: detected capacity change from 0 to 4096 [ 133.910678][ T5448] loop1: detected capacity change from 0 to 32768 [ 134.059388][ T5448] XFS (loop1): Mounting V5 Filesystem [ 134.246613][ T5448] XFS (loop1): Ending clean mount [ 134.532842][ T4253] XFS (loop1): Unmounting Filesystem [ 135.140170][ T5506] loop3: detected capacity change from 0 to 2048 [ 135.187017][ T5506] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 135.188777][ T5498] loop2: detected capacity change from 0 to 32768 [ 135.200471][ T5506] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.273670][ T5498] XFS (loop2): Mounting V5 Filesystem [ 135.280490][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 135.407926][ T5498] XFS (loop2): Ending clean mount [ 135.470137][ T5526] netlink: 60 bytes leftover after parsing attributes in process `syz.3.410'. [ 135.489556][ T5526] netlink: 60 bytes leftover after parsing attributes in process `syz.3.410'. [ 135.507147][ T5525] netlink: 60 bytes leftover after parsing attributes in process `syz.3.410'. [ 135.529989][ T5526] netlink: 60 bytes leftover after parsing attributes in process `syz.3.410'. [ 135.541812][ T4259] XFS (loop2): Unmounting Filesystem [ 136.248835][ T4263] Bluetooth: hci4: unexpected event 0x03 length: 17 > 11 [ 136.248875][ T4263] Bluetooth: hci4: Invalid handle: 0x2000 > 0x0eff [ 136.323627][ T5537] loop0: detected capacity change from 0 to 8192 [ 136.567477][ T5544] sp0: Synchronizing with TNC [ 136.750568][ T5546] loop0: detected capacity change from 0 to 8192 [ 136.870755][ T5546] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 136.911235][ T5551] loop1: detected capacity change from 0 to 512 [ 136.974860][ T5546] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 137.024134][ T5546] REISERFS (device loop0): using ordered data mode [ 137.032911][ T5546] reiserfs: using flush barriers [ 137.104530][ T5546] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.162369][ T5546] REISERFS (device loop0): checking transaction log (loop0) [ 137.222875][ T5551] EXT4-fs (loop1): 1 orphan inode deleted [ 137.230824][ T11] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 137.274821][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:1: Failed to release dquot type 1 [ 137.285070][ T5551] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 137.353053][ T5551] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.495462][ T5546] REISERFS (device loop0): Using tea hash to sort names [ 137.530925][ T5546] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 137.581243][ T5546] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 137.637101][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 137.694414][ T5569] loop2: detected capacity change from 0 to 512 [ 137.724791][ T5569] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.823869][ T5569] EXT4-fs (loop2): 1 truncate cleaned up [ 137.899911][ T5569] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 138.057217][ T26] audit: type=1800 audit(1748916536.911:60): pid=5569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.428" name="file1" dev="loop2" ino=16 res=0 errno=0 [ 138.059770][ T5569] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.428: bg 0: block 307: padding at end of block bitmap is not set [ 138.188858][ T5576] xt_CT: No such helper "snmp" [ 138.255254][ T5569] EXT4-fs (loop2): Remounting filesystem read-only [ 138.282453][ T4263] Bluetooth: hci4: command 0x0409 tx timeout [ 138.302165][ T5569] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 138.357453][ T5569] EXT4-fs (loop2): Remounting filesystem read-only [ 138.381216][ T5569] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.428: invalid indirect mapped block 3489660928 (level 0) [ 138.440598][ T26] audit: type=1326 audit(1748916537.291:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5587 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e6d8e969 code=0x7ffc0000 [ 138.452377][ T5569] EXT4-fs (loop2): Remounting filesystem read-only [ 138.497604][ T5591] loop4: detected capacity change from 0 to 512 [ 138.515118][ T26] audit: type=1326 audit(1748916537.341:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5587 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41e6d8e969 code=0x7ffc0000 [ 138.535791][ T5591] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.586136][ T5591] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.616174][ T5591] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 138.684669][ T26] audit: type=1326 audit(1748916537.341:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5587 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e6d8e969 code=0x7ffc0000 [ 138.713247][ T5591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 138.788165][ T5591] System zones: 1-12 [ 138.793424][ T5591] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.437: corrupted in-inode xattr [ 138.861020][ T26] audit: type=1326 audit(1748916537.341:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5587 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e6d8e969 code=0x7ffc0000 [ 138.895865][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 138.923940][ T5591] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.437: couldn't read orphan inode 15 (err -117) [ 138.974398][ T26] audit: type=1326 audit(1748916537.341:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5587 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41e6d8e969 code=0x7ffc0000 [ 139.005010][ T5591] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 139.051611][ T26] audit: type=1326 audit(1748916537.341:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5587 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e6d8e969 code=0x7ffc0000 [ 139.095995][ T5601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 139.163697][ T26] audit: type=1326 audit(1748916537.341:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5587 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e6d8e969 code=0x7ffc0000 [ 139.243302][ T26] audit: type=1326 audit(1748916537.351:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5587 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f41e6d8e969 code=0x7ffc0000 [ 139.434154][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 139.476697][ T5611] loop3: detected capacity change from 0 to 1764 [ 140.044400][ T5624] loop4: detected capacity change from 0 to 256 [ 140.271053][ T5628] device vlan2 entered promiscuous mode [ 140.285228][ T5628] device virt_wifi0 entered promiscuous mode [ 140.302886][ T5628] team0: Port device vlan2 added [ 141.390665][ T5630] loop0: detected capacity change from 0 to 40427 [ 141.427319][ T5634] loop4: detected capacity change from 0 to 32768 [ 141.452266][ T5630] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 141.500590][ T5634] XFS (loop4): Mounting V5 Filesystem [ 141.503083][ T5630] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 141.564228][ T5630] F2FS-fs (loop0): invalid crc value [ 141.582925][ T5630] F2FS-fs (loop0): Found nat_bits in checkpoint [ 141.663211][ T5634] XFS (loop4): Ending clean mount [ 141.844959][ T5630] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 141.852072][ T5630] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 141.864706][ T4339] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.904830][ T4256] XFS (loop4): Unmounting Filesystem [ 142.057528][ T4339] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.090146][ T4339] usb 3-1: config 0 has no interface number 0 [ 142.122973][ T4339] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 142.152735][ T4339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.171734][ T4339] usb 3-1: Product: syz [ 142.181860][ T4339] usb 3-1: Manufacturer: syz [ 142.189669][ T5648] loop1: detected capacity change from 0 to 32768 [ 142.192001][ T4339] usb 3-1: SerialNumber: syz [ 142.240364][ T4254] syz-executor: attempt to access beyond end of device [ 142.240364][ T4254] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 142.241201][ T4339] usb 3-1: config 0 descriptor?? [ 142.494540][ T4339] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 142.517761][ T5668] loop3: detected capacity change from 0 to 4096 [ 142.530795][ T4339] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 142.569816][ T5668] __ntfs_error: 2 callbacks suppressed [ 142.569832][ T5668] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 142.598168][ T4339] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 142.621624][ T4339] usb 3-1: media controller created [ 142.686838][ T5668] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 142.710518][ T4339] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.744555][ T5668] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 142.788432][ T5668] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 142.826977][ T4339] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 142.855894][ T5668] ntfs: volume version 3.1. [ 142.874054][ T5670] vivid-004: disconnect [ 142.917199][ T5670] vivid-004: reconnect [ 142.946711][ T4339] usb 3-1: USB disconnect, device number 5 [ 143.042301][ T5668] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 143.115069][ T5668] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 144.209584][ T5682] loop4: detected capacity change from 0 to 32768 [ 144.262890][ T26] audit: type=1800 audit(1748916543.111:71): pid=5682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.474" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 144.617928][ T5701] loop0: detected capacity change from 0 to 2048 [ 144.680589][ T5701] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.814851][ T127] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.867715][ T5696] loop3: detected capacity change from 0 to 32768 [ 145.016003][ T127] usb 5-1: Using ep0 maxpacket: 32 [ 145.029447][ T127] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 145.086770][ T5696] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 145.091001][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.121124][ T127] usb 5-1: config 0 descriptor?? [ 145.208015][ T5696] (syz.3.480,5696,0):ocfs2_clear_journal_error:1114 ERROR: File system error -318767104 recorded in journal 0. [ 145.244221][ T5696] (syz.3.480,5696,0):ocfs2_clear_journal_error:1116 ERROR: File system on device loop3 needs checking. [ 145.267442][ T5710] loop1: detected capacity change from 0 to 1024 [ 145.330401][ T5696] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 145.351995][ T127] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 145.376071][ T127] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.396288][ T127] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 145.403569][ T127] usb 5-1: media controller created [ 145.423001][ T5713] loop2: detected capacity change from 0 to 4096 [ 145.432960][ T5710] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.461816][ T5713] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 145.462401][ T127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.499905][ T5710] EXT4-fs (loop1): shut down requested (2) [ 145.561860][ T127] az6027: usb out operation failed. (-71) [ 145.568678][ T127] az6027: usb out operation failed. (-71) [ 145.574450][ T127] stb0899_attach: Driver disabled by Kconfig [ 145.601502][ T127] az6027: no front-end attached [ 145.601502][ T127] [ 145.619302][ T127] az6027: usb out operation failed. (-71) [ 145.629094][ T127] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 145.665367][ T127] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 145.712568][ T127] dvb-usb: schedule remote query interval to 400 msecs. [ 145.739164][ T127] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 145.771604][ T127] usb 5-1: USB disconnect, device number 4 [ 145.788689][ T26] audit: type=1800 audit(1748916544.641:72): pid=5696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.480" name="file2" dev="loop3" ino=17058 res=0 errno=0 [ 145.855619][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 145.873935][ T26] audit: type=1800 audit(1748916544.681:73): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.488" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 145.998616][ T127] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 146.187832][ T4257] ocfs2: Unmounting device (7,3) on (node local) [ 146.458755][ T5735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 146.460997][ T5733] loop0: detected capacity change from 0 to 2048 [ 146.550262][ T5733] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.131758][ T5751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 147.576651][ T5763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 147.624717][ T4700] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.814845][ T4700] usb 1-1: Using ep0 maxpacket: 16 [ 147.822428][ T4700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.885108][ T4700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.913491][ T4700] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 147.923921][ T4700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.944527][ T4700] usb 1-1: config 0 descriptor?? [ 148.018430][ T5775] device wlan1 entered promiscuous mode [ 148.042709][ T5775] device macvtap1 entered promiscuous mode [ 148.060822][ T5775] device wlan1 left promiscuous mode [ 148.082767][ T5782] loop1: detected capacity change from 0 to 256 [ 148.380385][ T5787] loop4: detected capacity change from 0 to 256 [ 148.417750][ T4700] corsair 0003:1B1C:1B02.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 148.497393][ T5787] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x00949fb8, utbl_chksum : 0x7319d30d) [ 148.598173][ T4700] corsair 0003:1B1C:1B02.0003: Read invalid backlight brightness: 56. [ 148.607894][ T5796] loop2: detected capacity change from 0 to 512 [ 148.645603][ T5796] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 148.830453][ T5796] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 148.882165][ T5796] EXT4-fs warning (device loop2): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 148.919208][ T4303] usb 1-1: USB disconnect, device number 6 [ 148.958356][ T5804] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 149.069093][ T5804] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 149.112628][ T5804] EXT4-fs warning (device loop2): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 149.137090][ T5802] fido_id[5802]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 149.355838][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 149.439943][ T5810] loop1: detected capacity change from 0 to 128 [ 149.501758][ T5810] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 149.532664][ T5810] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.629076][ T26] audit: type=1800 audit(1748916548.481:74): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.528" name="file1" dev="loop1" ino=104 res=0 errno=0 [ 150.020232][ T5807] loop4: detected capacity change from 0 to 32768 [ 150.028459][ T4303] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 150.121819][ T5807] XFS (loop4): Mounting V5 Filesystem [ 150.243784][ T5807] XFS (loop4): Ending clean mount [ 150.255081][ T4303] usb 4-1: Using ep0 maxpacket: 32 [ 150.262185][ T4303] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 150.281149][ T5807] XFS (loop4): Quotacheck needed: Please wait. [ 150.326307][ T4303] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 150.349238][ T4303] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 150.384101][ T4303] usb 4-1: config 1 has no interface number 0 [ 150.405843][ T4303] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.443089][ T4303] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 150.471960][ T4303] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 150.484112][ T4303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.497904][ T5807] XFS (loop4): Quotacheck: Done. [ 150.503141][ T4303] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 150.570884][ T26] audit: type=1800 audit(1748916549.421:75): pid=5807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.526" name="bus" dev="loop4" ino=9290 res=0 errno=0 [ 150.653198][ T4256] XFS (loop4): Unmounting Filesystem [ 150.722540][ T4303] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 151.193161][ T5843] mkiss: ax0: crc mode is auto. [ 151.237988][ T14] usb 4-1: USB disconnect, device number 2 [ 151.266940][ T14] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 151.289148][ T5841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.538'. [ 151.578258][ T5854] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 151.593724][ T5854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 151.806731][ T5862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.547'. [ 152.002297][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 152.073845][ T5872] sp0: Synchronizing with TNC [ 152.164982][ T4513] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 152.304813][ T5882] loop0: detected capacity change from 0 to 1024 [ 152.363982][ T4513] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.395123][ T4513] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 152.424771][ T4513] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72 [ 152.486500][ T4513] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 152.519264][ T4513] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.544079][ T4513] usb 2-1: Product: syz [ 152.571282][ T4513] usb 2-1: Manufacturer: syz [ 152.579935][ T4513] usb 2-1: SerialNumber: syz [ 152.601686][ T5866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.862863][ T4513] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 153.098911][ C1] usblp0: nonzero read bulk status received: -71 [ 153.148219][ T5866] usblp0: error -71 reading from printer [ 153.170335][ C0] usblp0: nonzero read bulk status received: -71 [ 153.194091][ T4303] usb 2-1: USB disconnect, device number 3 [ 153.211209][ T4303] usblp0: removed [ 153.232736][ T5908] loop3: detected capacity change from 0 to 512 [ 153.277433][ T5908] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.290242][ T5908] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 153.316357][ T4700] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 153.341244][ T5908] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec01c, mo2=0002] [ 153.352775][ T5908] System zones: 0-2, 18-18, 34-34 [ 153.367505][ T5914] netlink: 277 bytes leftover after parsing attributes in process `syz.2.569'. [ 153.393046][ T5908] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 153.471770][ T5908] EXT4-fs (loop3): 1 truncate cleaned up [ 153.483794][ T5908] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 153.528053][ T4700] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 153.548120][ T4700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.550637][ T5908] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.3.566: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 153.580558][ T5919] loop0: detected capacity change from 0 to 1024 [ 153.592151][ T4700] usb 5-1: config 0 descriptor?? [ 153.603986][ T4700] cp210x 5-1:0.0: cp210x converter detected [ 153.621769][ T5908] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 153.643956][ T5917] loop2: detected capacity change from 0 to 4096 [ 153.651137][ T5908] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.566: Deleting old file: nlink 4, error=-117 [ 153.652072][ T5919] hfsplus: failed to load attributes file [ 153.805594][ T5919] loop0: detected capacity change from 0 to 1024 [ 153.844855][ T5919] hfsplus: unable to parse mount options [ 153.880958][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 153.890784][ T5917] ntfs3: loop2: try to read out of volume at offset 0x3fffffc7000 [ 154.236752][ T4700] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 154.256598][ T4700] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 154.285859][ T4700] usb 5-1: cp210x converter now attached to ttyUSB0 [ 154.310811][ T4700] usb 5-1: USB disconnect, device number 5 [ 154.361465][ T4700] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 154.380461][ T4700] cp210x 5-1:0.0: device disconnected [ 154.419471][ T5931] loop3: detected capacity change from 0 to 8 [ 154.529148][ T5933] loop2: detected capacity change from 0 to 64 [ 154.705176][ T5933] hfs: request for non-existent node 131072 in B*Tree [ 154.776806][ T5933] hfs: request for non-existent node 131072 in B*Tree [ 154.915173][ T5945] netlink: 36 bytes leftover after parsing attributes in process `syz.1.583'. [ 154.996553][ T5949] loop3: detected capacity change from 0 to 256 [ 154.996575][ T5948] loop8: detected capacity change from 0 to 7 [ 155.015576][ T5948] Dev loop8: unable to read RDB block 7 [ 155.021246][ T5948] loop8: unable to read partition table [ 155.081927][ T5948] loop8: partition table beyond EOD, truncated [ 155.164318][ T5948] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 155.773913][ T5972] loop2: detected capacity change from 0 to 256 [ 155.927758][ T5972] FAT-fs (loop2): Directory bread(block 64) failed [ 155.934372][ T5972] FAT-fs (loop2): Directory bread(block 65) failed [ 155.959285][ T5972] FAT-fs (loop2): Directory bread(block 66) failed [ 156.010348][ T5972] FAT-fs (loop2): Directory bread(block 67) failed [ 156.035013][ T5972] FAT-fs (loop2): Directory bread(block 68) failed [ 156.054770][ T5972] FAT-fs (loop2): Directory bread(block 69) failed [ 156.082050][ T5972] FAT-fs (loop2): Directory bread(block 70) failed [ 156.102148][ T5972] FAT-fs (loop2): Directory bread(block 71) failed [ 156.122491][ T5972] FAT-fs (loop2): Directory bread(block 72) failed [ 156.152836][ T5972] FAT-fs (loop2): Directory bread(block 73) failed [ 156.231180][ T5982] loop1: detected capacity change from 0 to 512 [ 156.313228][ T5982] EXT4-fs: Ignoring removed orlov option [ 156.530029][ T5982] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.599: bg 0: block 411: padding at end of block bitmap is not set [ 156.572665][ T5982] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.599: inode #1: comm syz.1.599: iget: illegal inode # [ 156.624833][ T5982] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.599: error while reading EA inode 1 err=-117 [ 156.665425][ T5994] loop0: detected capacity change from 0 to 512 [ 156.731942][ T5982] EXT4-fs (loop1): 1 orphan inode deleted [ 156.737565][ T5994] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 156.754946][ T5994] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.783645][ T6001] loop4: detected capacity change from 0 to 512 [ 156.792632][ T5982] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 156.803456][ T5997] loop3: detected capacity change from 0 to 2048 [ 156.830305][ T5994] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 156.892385][ T6001] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 156.990033][ T5997] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 156.999441][ T6001] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.001941][ T5982] EXT4-fs (loop1): shut down requested (2) [ 157.248559][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 157.249522][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 157.256352][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 157.302322][ T4254] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 157.413535][ T4254] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 157.913928][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 158.159466][ T4332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.284864][ T4513] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 158.364472][ T4332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.474742][ T4513] usb 4-1: Using ep0 maxpacket: 16 [ 158.481880][ T4513] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.511196][ T4513] usb 4-1: config 0 has no interface number 0 [ 158.558832][ T4513] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 158.588535][ T4513] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.609080][ T4513] usb 4-1: Product: syz [ 158.613398][ T4513] usb 4-1: Manufacturer: syz [ 158.625673][ T4513] usb 4-1: SerialNumber: syz [ 158.640838][ T4513] usb 4-1: config 0 descriptor?? [ 158.657319][ T4332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.698701][ T4513] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 158.815692][ T4332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.006583][ T6043] loop2: detected capacity change from 0 to 8192 [ 159.042360][ T6043] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 159.084998][ T6043] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 159.094944][ T6043] REISERFS (device loop2): using ordered data mode [ 159.101491][ T6043] reiserfs: using flush barriers [ 159.116206][ T6043] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 159.155810][ T6043] REISERFS (device loop2): checking transaction log (loop2) [ 159.177370][ T6043] REISERFS (device loop2): Using r5 hash to sort names [ 159.185733][ T6043] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 159.250013][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.275845][ T4270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.286386][ T4270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.301362][ T6043] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 159.311591][ T4270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.321003][ T4270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 159.329927][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.417030][ T6043] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 159.431857][ T6043] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 159.446864][ T6043] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 159.501220][ T4513] gspca_spca1528: reg_w err -71 [ 159.534866][ T4513] spca1528: probe of 4-1:0.1 failed with error -71 [ 159.560764][ T4513] usb 4-1: USB disconnect, device number 3 [ 160.440769][ T6084] loop3: detected capacity change from 0 to 512 [ 160.465647][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 160.490392][ T6084] EXT4-fs: Ignoring removed orlov option [ 160.617435][ T6084] EXT4-fs error (device loop3): __ext4_iget:5076: inode #15: block 1803188595: comm syz.3.639: invalid block [ 160.649871][ T6052] chnl_net:caif_netlink_parms(): no params data found [ 160.721860][ T6084] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.639: couldn't read orphan inode 15 (err -117) [ 160.767589][ T6084] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 161.003294][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 161.251049][ T6106] program syz.3.644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.292613][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.310171][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.319210][ T6052] device bridge_slave_0 entered promiscuous mode [ 161.394954][ T4263] Bluetooth: hci1: command 0x0409 tx timeout [ 161.427362][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.434545][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.454077][ T6052] device bridge_slave_1 entered promiscuous mode [ 161.598971][ T6052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.652838][ T6093] loop2: detected capacity change from 0 to 32768 [ 161.722555][ T6093] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 161.771351][ T6116] loop3: detected capacity change from 0 to 512 [ 161.784357][ T6116] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 161.818160][ T6093] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 161.909157][ T6052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.959374][ T6116] EXT4-fs (loop3): invalid journal inode [ 161.999690][ T6116] EXT4-fs (loop3): can't get journal size [ 162.032513][ T6116] EXT4-fs (loop3): 1 truncate cleaned up [ 162.060598][ T6116] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 162.109486][ T6052] team0: Port device team_slave_0 added [ 162.244521][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 162.301009][ T6052] team0: Port device team_slave_1 added [ 162.316352][ T6099] loop1: detected capacity change from 0 to 40427 [ 162.379068][ T6099] F2FS-fs (loop1): invalid crc value [ 162.435567][ T4259] ocfs2: Unmounting device (7,2) on (node local) [ 162.452629][ T4332] device hsr_slave_0 left promiscuous mode [ 162.492164][ T6099] F2FS-fs (loop1): Found nat_bits in checkpoint [ 162.521834][ T4332] device hsr_slave_1 left promiscuous mode [ 162.568221][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.593261][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.641910][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.679825][ T6127] loop4: detected capacity change from 0 to 256 [ 162.686270][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.705637][ T4332] device batadv1 left promiscuous mode [ 162.713833][ T4332] bridge0: port 3(batadv1) entered disabled state [ 162.766414][ T6099] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 162.837459][ T4332] device bridge_slave_1 left promiscuous mode [ 162.874273][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.896312][ T6099] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 162.914495][ T4332] device bridge_slave_0 left promiscuous mode [ 162.974868][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.001480][ T6099] syz.1.643: attempt to access beyond end of device [ 163.001480][ T6099] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 163.191261][ T4332] device veth1_macvtap left promiscuous mode [ 163.224058][ T4332] device veth0_macvtap left promiscuous mode [ 163.246491][ T4332] device veth1_vlan left promiscuous mode [ 163.254195][ T4332] device veth0_vlan left promiscuous mode [ 163.475804][ T4263] Bluetooth: hci1: command 0x041b tx timeout [ 163.880640][ T6154] loop4: detected capacity change from 0 to 512 [ 163.997781][ T6154] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 164.011347][ T6154] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.130928][ T6154] EXT4-fs: Cannot change journaled quota options when quota turned on [ 164.221877][ T4256] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 164.243137][ T4256] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 164.330460][ T5028] EXT4-fs (loop4): unmounting filesystem. [ 164.674050][ T4332] team0 (unregistering): Port device team_slave_1 removed [ 164.729936][ T4332] team0 (unregistering): Port device team_slave_0 removed [ 164.782059][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.839947][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.431071][ T4332] bond0 (unregistering): Released all slaves [ 165.500928][ T6052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.508193][ T6052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.534908][ T6052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.547369][ T6052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.554346][ T6052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.581013][ T4263] Bluetooth: hci1: command 0x040f tx timeout [ 165.588905][ T6052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.892698][ T6171] loop2: detected capacity change from 0 to 164 [ 165.939981][ T6171] Unable to read rock-ridge attributes [ 165.958111][ T6171] Unable to read rock-ridge attributes [ 166.050968][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'. [ 166.118130][ T6052] device hsr_slave_0 entered promiscuous mode [ 166.212824][ T6052] device hsr_slave_1 entered promiscuous mode [ 166.228998][ T6052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.259326][ T6052] Cannot create hsr debugfs directory [ 166.714401][ T6177] loop3: detected capacity change from 0 to 8192 [ 166.788585][ T6177] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 166.833447][ T6177] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 166.843732][ T6177] REISERFS (device loop3): using ordered data mode [ 166.864956][ T6177] reiserfs: using flush barriers [ 166.879228][ T6177] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.922272][ T6052] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.993606][ T6177] REISERFS (device loop3): checking transaction log (loop3) [ 167.033125][ T6177] REISERFS (device loop3): Using r5 hash to sort names [ 167.081777][ T6177] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 167.103356][ T4332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.190563][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.206547][ T6052] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.216396][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.225979][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.233893][ T4270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.243244][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.253470][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.408839][ T4332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.460971][ T6052] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.485885][ T6052] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.584003][ T6201] loop1: detected capacity change from 0 to 1024 [ 167.607265][ T4332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.634727][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 167.721436][ T6201] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.845625][ T6201] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.854352][ T6201] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.888942][ T4332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.972902][ T6201] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 168.082989][ T6201] EXT4-fs (loop1): Remounting filesystem read-only [ 168.319168][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 168.367945][ T6052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.410724][ T6191] chnl_net:caif_netlink_parms(): no params data found [ 168.506187][ T6217] loop3: detected capacity change from 0 to 4096 [ 168.563891][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.577158][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.623707][ T6217] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 168.665335][ T26] audit: type=1800 audit(1748916567.521:76): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.676" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 168.811052][ T6052] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.851308][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 169.151838][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.176265][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.225293][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.232454][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.274342][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.294442][ T6230] loop1: detected capacity change from 0 to 32768 [ 169.307273][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.315508][ T4263] Bluetooth: hci2: command 0x0409 tx timeout [ 169.324580][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.331857][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.345392][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.354973][ T6230] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.679 (6230) [ 169.438185][ T6230] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.451194][ T6230] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 169.480214][ T6230] BTRFS info (device loop1): turning on async discard [ 169.499411][ T6191] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.505826][ T6230] BTRFS info (device loop1): using free space tree [ 169.520256][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.560655][ T6191] device bridge_slave_0 entered promiscuous mode [ 169.633091][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.641108][ T3624] udevd[3624]: worker [4529] terminated by signal 33 (Unknown signal 33) [ 169.693982][ T3624] udevd[3624]: worker [4529] failed while handling '/devices/virtual/block/loop1' [ 169.698477][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.745176][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.757103][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.783989][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.802247][ T6230] BTRFS info (device loop1): enabling ssd optimizations [ 169.803500][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.823847][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.841373][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.860223][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.952166][ T6191] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.960973][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.015728][ T6191] device bridge_slave_1 entered promiscuous mode [ 170.030242][ T4253] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.034852][ T4517] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 170.127253][ T6265] ptrace attach of "./syz-executor exec"[4257] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ 0€  \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \ [ 170.144300][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.245973][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.258303][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.343351][ T4517] usb 3-1: Using ep0 maxpacket: 32 [ 170.350831][ T4517] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 170.392924][ T4517] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 170.440369][ T4517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.448901][ T4517] usb 3-1: Product: syz [ 170.453137][ T4517] usb 3-1: Manufacturer: syz [ 170.463674][ T4517] usb 3-1: SerialNumber: syz [ 170.489108][ T6191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.501565][ T4517] usb 3-1: config 0 descriptor?? [ 170.516187][ T6260] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.527158][ T4517] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 170.616217][ T6191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.814160][ T5121] usb 3-1: USB disconnect, device number 6 [ 170.820172][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 170.906359][ T6191] team0: Port device team_slave_0 added [ 170.934326][ T6191] team0: Port device team_slave_1 added [ 171.050768][ T6191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.060708][ T6191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.092924][ T6191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.139597][ T6191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.157472][ T6191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.219961][ T6191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.250563][ T6283] loop3: detected capacity change from 0 to 1024 [ 171.270082][ T6283] EXT4-fs: Ignoring removed bh option [ 171.303545][ T6283] EXT4-fs: inline encryption not supported [ 171.352930][ T6283] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c802e018, mo2=0000] [ 171.404895][ T4263] Bluetooth: hci2: command 0x041b tx timeout [ 171.456023][ T6283] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.690: lblock 2 mapped to illegal pblock 2 (length 1) [ 171.499869][ T6191] device hsr_slave_0 entered promiscuous mode [ 171.502834][ T6283] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 171.518597][ T6191] device hsr_slave_1 entered promiscuous mode [ 171.521769][ T6283] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.690: lblock 0 mapped to illegal pblock 48 (length 1) [ 171.541732][ T6191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.550416][ T6283] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 171.553612][ T6191] Cannot create hsr debugfs directory [ 171.562875][ T6283] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.690: Failed to acquire dquot type 0 [ 171.579267][ T6283] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 171.600351][ T6283] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.690: mark_inode_dirty error [ 171.637868][ T6283] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 171.654962][ T6283] EXT4-fs (loop3): 1 orphan inode deleted [ 171.661542][ T6283] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 171.679038][ T75] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 171.701892][ T75] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 171.711524][ T75] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:4: Failed to release dquot type 0 [ 171.730481][ T6283] EXT4-fs error (device loop3): __ext4_get_inode_loc:4507: comm syz.3.690: Invalid inode table block 1 in block_group 0 [ 171.768399][ T6283] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 171.789635][ T6283] EXT4-fs error (device loop3): ext4_setattr:5512: inode #2: comm syz.3.690: mark_inode_dirty error [ 171.857214][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.883436][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.898030][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 171.933496][ T75] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 171.964018][ T6052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.966786][ T75] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 172.011372][ T75] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:4: Failed to release dquot type 0 [ 172.056043][ T4257] EXT4-fs error (device loop3): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 172.110808][ T4257] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 172.128096][ T4257] EXT4-fs error (device loop3): ext4_quota_off:7108: inode #3: comm syz-executor: mark_inode_dirty error [ 172.354324][ T6303] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 172.354324][ T6303] The task syz.3.693 (6303) triggered the difference, watch for misbehavior. [ 172.387484][ T4339] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 172.430483][ T4332] device hsr_slave_0 left promiscuous mode [ 172.443417][ T4332] device hsr_slave_1 left promiscuous mode [ 172.458438][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.473962][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.493050][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.505599][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.529106][ T4332] device bridge_slave_1 left promiscuous mode [ 172.538929][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.561461][ T4332] device bridge_slave_0 left promiscuous mode [ 172.580768][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.587876][ T4339] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.613539][ T4339] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.642223][ T4339] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 172.661825][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.670705][ T4332] device veth1_macvtap left promiscuous mode [ 172.680126][ T4339] usb 2-1: Product: syz [ 172.684332][ T4339] usb 2-1: Manufacturer: syz [ 172.685935][ T4332] device veth0_macvtap left promiscuous mode [ 172.699430][ T4339] usb 2-1: SerialNumber: syz [ 172.702833][ T4332] device veth1_vlan left promiscuous mode [ 172.710823][ T4332] device veth0_vlan left promiscuous mode [ 172.715246][ T4339] usb 2-1: config 0 descriptor?? [ 172.728393][ T6296] loop2: detected capacity change from 0 to 32768 [ 172.737503][ T4339] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 172.761393][ T4339] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.774161][ T4339] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 172.784150][ T4339] usb 2-1: media controller created [ 172.805022][ T4339] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.866295][ T6296] XFS (loop2): Mounting V5 Filesystem [ 172.901554][ T4339] DVB: Unable to find symbol tda10046_attach() [ 172.920284][ T4339] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 172.946179][ T4339] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 172.991765][ T6296] XFS (loop2): Ending clean mount [ 173.016333][ T6296] XFS (loop2): Quotacheck needed: Please wait. [ 173.095360][ T6296] XFS (loop2): Quotacheck: Done. [ 173.249244][ T4259] XFS (loop2): Unmounting Filesystem [ 173.491657][ T4263] Bluetooth: hci2: command 0x040f tx timeout [ 173.607716][ T4339] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71 [ 173.632335][ T4339] usb 2-1: USB disconnect, device number 4 [ 174.079498][ T4332] team0 (unregistering): Port device team_slave_1 removed [ 174.138380][ T4332] team0 (unregistering): Port device team_slave_0 removed [ 174.226187][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.310744][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.574962][ T4702] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 174.784804][ T4702] usb 2-1: Using ep0 maxpacket: 32 [ 174.795083][ T4702] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.812192][ T4702] usb 2-1: config 0 has no interface number 0 [ 174.825424][ T4702] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.859186][ T4702] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.869271][ T4702] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 174.878645][ T4702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.905446][ T4702] usb 2-1: config 0 descriptor?? [ 174.932750][ T4332] bond0 (unregistering): Released all slaves [ 175.305237][ T6333] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 175.307175][ T6332] IPVS: stopping backup sync thread 6333 ... [ 175.335324][ T6191] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 175.362299][ T6191] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 175.403456][ T6191] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 175.452659][ T6191] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 175.482375][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.493856][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.550606][ T4702] uclogic 0003:28BD:0094.0004: pen parameters not found [ 175.558188][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 175.565815][ T4702] uclogic 0003:28BD:0094.0004: interface is invalid, ignoring [ 175.593526][ T6052] device veth0_vlan entered promiscuous mode [ 175.650496][ T6338] loop2: detected capacity change from 0 to 256 [ 175.660669][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.679889][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.695940][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.709611][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.755089][ T4704] usb 2-1: USB disconnect, device number 5 [ 175.801655][ T6052] device veth1_vlan entered promiscuous mode [ 175.953980][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.997214][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.006890][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.019980][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.031715][ T6052] device veth0_macvtap entered promiscuous mode [ 176.054547][ T6191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.066802][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.083467][ T6052] device veth1_macvtap entered promiscuous mode [ 176.138777][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.155643][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.178987][ T6191] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.192750][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.235374][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.254820][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.267812][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.284820][ T4339] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 176.302164][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.338095][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.352700][ T6052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.404970][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.426167][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.446004][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.458237][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.471136][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.479793][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.488151][ T4339] usb 3-1: config index 0 descriptor too short (expected 227, got 18) [ 176.490353][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.507327][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.517110][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.518113][ T4339] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 176.525504][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.529307][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.557496][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.569238][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.578413][ T4339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.582779][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.603319][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.609634][ T4339] usb 3-1: Product: syz [ 176.621250][ T4339] usb 3-1: Manufacturer: syz [ 176.627646][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.629760][ T4339] usb 3-1: SerialNumber: syz [ 176.644257][ T6052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.664036][ T4339] usb 3-1: config 0 descriptor?? [ 176.665645][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.684171][ T4339] ch341 3-1:0.0: ch341-uart converter detected [ 176.701385][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.714505][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.729679][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.758980][ T6052] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.779635][ T6052] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.800490][ T6052] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.824807][ T6052] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.865356][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.923822][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.964026][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.975529][ T6342] loop3: detected capacity change from 0 to 32768 [ 176.998250][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.031069][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.054858][ T6342] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 177.059644][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.100337][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.123072][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.180865][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.235983][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.238911][ T4257] ocfs2: Unmounting device (7,3) on (node local) [ 177.257251][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.483270][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.490078][ T4339] usb 3-1: failed to send control message: -71 [ 177.515297][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.529206][ T4339] ch341-uart: probe of ttyUSB0 failed with error -71 [ 177.596514][ T4339] usb 3-1: USB disconnect, device number 7 [ 177.607872][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.643316][ T4339] ch341 3-1:0.0: device disconnected [ 177.675548][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.684026][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.744323][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.785142][ T6359] netlink: 176 bytes leftover after parsing attributes in process `syz.3.713'. [ 178.312040][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.323730][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.337625][ T6191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.101802][ T6378] loop1: detected capacity change from 0 to 40427 [ 179.158142][ T6378] F2FS-fs (loop1): invalid crc value [ 179.170519][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.190855][ T6378] F2FS-fs (loop1): Found nat_bits in checkpoint [ 179.202226][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.289564][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.320018][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.355079][ T6191] device veth0_vlan entered promiscuous mode [ 179.378504][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.384916][ T6378] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 179.414116][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.441087][ T6191] device veth1_vlan entered promiscuous mode [ 179.532236][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.557703][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.583567][ T6191] device veth0_macvtap entered promiscuous mode [ 179.609200][ T4253] syz-executor: attempt to access beyond end of device [ 179.609200][ T4253] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.637849][ T6191] device veth1_macvtap entered promiscuous mode [ 179.703874][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.759956][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.792618][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.831593][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.874839][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.901130][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.919783][ T6391] loop5: detected capacity change from 0 to 32768 [ 179.944734][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.994820][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.032566][ T6191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.058015][ T6407] loop3: detected capacity change from 0 to 1024 [ 180.097914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.119310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.167540][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.225696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.266621][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.297872][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.303631][ T6407] hfsplus: xattr search failed [ 180.344688][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.388573][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.435331][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.473778][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.516603][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.564808][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.597141][ T6191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.689743][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.721108][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.756620][ T6191] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.787900][ T6413] loop5: detected capacity change from 0 to 8192 [ 180.798548][ T6191] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.831531][ T6191] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.875030][ T6191] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.099204][ T6052] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 181.118111][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.130112][ T6052] FAT-fs (loop5): Filesystem has been set read-only [ 181.140344][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.220470][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.228145][ T26] audit: type=1326 audit(1748916580.091:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6418 comm="syz.3.736" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41e6d8e969 code=0x0 [ 181.263004][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.276999][ T6409] loop2: detected capacity change from 0 to 32768 [ 181.291070][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.327083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.403437][ T6409] XFS (loop2): Mounting V5 Filesystem [ 181.482191][ T6409] XFS (loop2): Ending clean mount [ 181.546732][ T26] audit: type=1800 audit(1748916580.401:78): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.731" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 181.723322][ T4704] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 181.761031][ T4704] XFS (loop2): Unmount and run xfs_repair [ 181.769403][ T6415] loop1: detected capacity change from 0 to 32768 [ 181.776245][ T4704] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 181.832249][ T4704] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 181.840530][ T6415] XFS (loop1): Mounting V5 Filesystem [ 181.855858][ T4704] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 181.866361][ T4704] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 181.879457][ T4704] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 181.888045][ T4513] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 181.889358][ T4704] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 181.906276][ T4704] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 181.915705][ T4704] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 181.925086][ T4704] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 181.936232][ T6433] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x4 len 4 error 74 [ 181.981969][ T6415] XFS (loop1): Ending clean mount [ 182.005309][ T6415] XFS (loop1): Quotacheck needed: Please wait. [ 182.092486][ T4259] XFS (loop2): Unmounting Filesystem [ 182.098782][ T6415] XFS (loop1): Quotacheck: Done. [ 182.105068][ T4513] usb 6-1: Using ep0 maxpacket: 32 [ 182.118995][ T4513] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 182.132913][ T4513] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.169510][ T4513] usb 6-1: config 0 descriptor?? [ 182.320567][ T4253] XFS (loop1): Unmounting Filesystem [ 182.384712][ T4513] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 182.397590][ T4513] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.428124][ T4513] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 182.452458][ T4513] usb 6-1: media controller created [ 182.532823][ T4513] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.602804][ T4513] az6027: usb out operation failed. (-71) [ 182.631354][ T4513] az6027: usb out operation failed. (-71) [ 182.646670][ T4513] stb0899_attach: Driver disabled by Kconfig [ 182.663651][ T4513] az6027: no front-end attached [ 182.663651][ T4513] [ 182.683133][ T4513] az6027: usb out operation failed. (-71) [ 182.694044][ T4513] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 182.710754][ T4513] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 182.759654][ T4513] dvb-usb: schedule remote query interval to 400 msecs. [ 182.785383][ T4513] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 182.853102][ T4513] usb 6-1: USB disconnect, device number 2 [ 182.878513][ T6435] loop6: detected capacity change from 0 to 40427 [ 182.917715][ T6435] F2FS-fs (loop6): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 182.950762][ T6435] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 182.973627][ T6435] F2FS-fs (loop6): invalid crc value [ 182.974053][ T4513] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 183.027582][ T6435] F2FS-fs (loop6): Found nat_bits in checkpoint [ 183.185667][ T6435] F2FS-fs (loop6): Start checkpoint disabled! [ 183.253510][ T6435] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 183.267041][ T6435] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 183.446748][ T6456] loop1: detected capacity change from 0 to 16 [ 183.481972][ T6456] erofs: (device loop1): mounted with root inode @ nid 36. [ 183.538605][ T26] audit: type=1800 audit(1748916582.391:79): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.742" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 183.708175][ T4332] kworker/u4:7: attempt to access beyond end of device [ 183.708175][ T4332] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 184.052596][ T6465] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.748' sets config #0 [ 184.172774][ T6448] loop2: detected capacity change from 0 to 32768 [ 184.275248][ T6448] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.738 (6448) [ 184.361160][ T6448] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.374093][ T6448] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 184.389125][ T6448] BTRFS info (device loop2): using free space tree [ 184.568563][ T6484] loop5: detected capacity change from 0 to 512 [ 184.614857][ T6484] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.820985][ T6484] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.753: bg 0: block 5: invalid block bitmap [ 184.845352][ T6484] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 184.855816][ T6484] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.753: invalid indirect mapped block 3 (level 2) [ 184.890613][ T6448] BTRFS info (device loop2): enabling ssd optimizations [ 184.925521][ T6484] EXT4-fs (loop5): 2 truncates cleaned up [ 184.974863][ T6484] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 185.020220][ T6470] loop6: detected capacity change from 0 to 32768 [ 185.099591][ T4259] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.101663][ T6470] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12 [ 185.248677][ T6052] EXT4-fs (loop5): unmounting filesystem. [ 185.645444][ T4258] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12 [ 186.032067][ T6491] loop1: detected capacity change from 0 to 32768 [ 186.123293][ T6491] XFS: noikeep mount option is deprecated. [ 186.377828][ T6491] XFS (loop1): Mounting V5 Filesystem [ 186.563650][ T6491] XFS (loop1): Ending clean mount [ 186.631315][ T6491] XFS (loop1): Quotacheck needed: Please wait. [ 186.772388][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.796020][ T6544] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 186.838205][ T6491] XFS (loop1): Quotacheck: Done. [ 187.031000][ T4253] XFS (loop1): Unmounting Filesystem [ 187.723480][ T6569] loop5: detected capacity change from 0 to 256 [ 187.791099][ T6569] FAT-fs (loop5): Directory bread(block 64) failed [ 187.821044][ T6569] FAT-fs (loop5): Directory bread(block 65) failed [ 187.870169][ T6569] FAT-fs (loop5): Directory bread(block 66) failed [ 187.890279][ T6569] FAT-fs (loop5): Directory bread(block 67) failed [ 187.917577][ T6569] FAT-fs (loop5): Directory bread(block 68) failed [ 187.930040][ T6575] syz.2.784[6575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.930154][ T6575] syz.2.784[6575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.953672][ T5121] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 187.973291][ T6569] FAT-fs (loop5): Directory bread(block 69) failed [ 187.981313][ T6569] FAT-fs (loop5): Directory bread(block 70) failed [ 187.993304][ T6569] FAT-fs (loop5): Directory bread(block 71) failed [ 188.000588][ T6569] FAT-fs (loop5): Directory bread(block 72) failed [ 188.009319][ T6569] FAT-fs (loop5): Directory bread(block 73) failed [ 188.131597][ T6569] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 188.166862][ T5121] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 188.180907][ T5121] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 188.206730][ T6569] FAT-fs (loop5): Filesystem has been set read-only [ 188.216000][ T6580] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 188.224800][ T5121] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 188.246181][ T5121] usb 7-1: config 220 has no interface number 2 [ 188.252529][ T5121] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 188.316823][ T5121] usb 7-1: config 220 interface 0 has no altsetting 0 [ 188.349622][ T5121] usb 7-1: config 220 interface 76 has no altsetting 0 [ 188.364827][ T5121] usb 7-1: config 220 interface 1 has no altsetting 0 [ 188.380058][ T5121] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 188.392805][ T5121] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.401686][ T5121] usb 7-1: Product: syz [ 188.406301][ T5121] usb 7-1: Manufacturer: syz [ 188.410923][ T5121] usb 7-1: SerialNumber: syz [ 188.675049][ T5121] usb 7-1: selecting invalid altsetting 0 [ 188.708237][ T5121] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 188.741923][ T5121] usb 7-1: No valid video chain found. [ 188.796958][ T5121] usb 7-1: selecting invalid altsetting 0 [ 188.802764][ T5121] usbtest: probe of 7-1:220.1 failed with error -22 [ 188.844943][ T5121] usb 7-1: USB disconnect, device number 2 [ 188.950118][ T6601] loop5: detected capacity change from 0 to 64 [ 189.031249][ T6605] loop3: detected capacity change from 0 to 64 [ 189.033317][ T6601] hfs: hfs: Invalid key length: 94 [ 189.158671][ T6052] hfs: node 4:3 still has 1 user(s)! [ 189.759419][ T6624] loop6: detected capacity change from 0 to 1024 [ 189.811104][ T6624] EXT4-fs: Ignoring removed bh option [ 189.935625][ T6624] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 190.059990][ T6191] EXT4-fs (loop6): unmounting filesystem. [ 190.191348][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.812'. [ 190.230273][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.812'. [ 190.507938][ T6652] loop6: detected capacity change from 0 to 512 [ 190.528937][ T6652] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.579815][ T6652] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 2: comm syz.6.817: invalid block [ 190.619206][ T6652] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.817: invalid indirect mapped block 10 (level 1) [ 190.658699][ T6657] loop1: detected capacity change from 0 to 256 [ 190.674816][ T6657] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.694711][ T6657] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 190.708231][ T6652] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.817: invalid indirect mapped block 8 (level 1) [ 190.759395][ T6657] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 190.785619][ T6652] EXT4-fs (loop6): 1 truncate cleaned up [ 190.787620][ T6659] loop5: detected capacity change from 0 to 1024 [ 190.791341][ T6652] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 190.866408][ T6652] EXT4-fs (loop6): shut down requested (2) [ 190.884735][ T4513] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 190.909901][ T6659] hfsplus: catalog name length corrupted [ 191.045938][ T6191] EXT4-fs (loop6): unmounting filesystem. [ 191.079825][ T4513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.119121][ T4513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.165080][ T4513] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.208643][ T4513] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 191.238429][ T4513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.263836][ T4513] usb 4-1: config 0 descriptor?? [ 191.323972][ T6666] loop6: detected capacity change from 0 to 4096 [ 191.386980][ T6666] NILFS (loop6): invalid segment: Checksum error in segment payload [ 191.424718][ T4704] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 191.436728][ T6666] NILFS (loop6): trying rollback from an earlier position [ 191.484987][ T4513] usbhid 4-1:0.0: can't add hid device: -71 [ 191.491054][ T4513] usbhid: probe of 4-1:0.0 failed with error -71 [ 191.493814][ T6666] NILFS (loop6): recovery complete [ 191.531833][ T4513] usb 4-1: USB disconnect, device number 4 [ 191.532239][ T6674] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.616618][ T4704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.655325][ T4704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.684714][ T4704] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 191.711659][ T4704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.750589][ T4704] usb 2-1: config 0 descriptor?? [ 192.109599][ T6671] loop5: detected capacity change from 0 to 32768 [ 192.181102][ T4704] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 192.269430][ T4704] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 192.381112][ T6671] XFS (loop5): Mounting V5 Filesystem [ 192.440446][ T4704] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 192.518830][ T6671] XFS (loop5): Ending clean mount [ 192.577319][ T6671] XFS (loop5): Quotacheck needed: Please wait. [ 192.641590][ T4704] cp2112 0003:10C4:EA90.0005: error requesting SMBus config [ 192.663081][ T4704] cp2112: probe of 0003:10C4:EA90.0005 failed with error -71 [ 192.681524][ T6671] XFS (loop5): Quotacheck: Done. [ 192.689460][ T4704] usb 2-1: USB disconnect, device number 6 [ 192.709533][ T6677] loop6: detected capacity change from 0 to 32768 [ 192.936244][ T6677] ERROR: (device loop6): duplicateIXtree: [ 192.936244][ T6677] [ 192.998347][ T6052] XFS (loop5): Unmounting Filesystem [ 193.018505][ T6677] ERROR: (device loop6): remounting filesystem as read-only [ 193.080569][ T6694] fido_id[6694]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 193.352803][ T6690] loop2: detected capacity change from 0 to 32768 [ 193.387532][ T6704] loop1: detected capacity change from 0 to 16 [ 193.412929][ T6690] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.831 (6690) [ 193.447785][ T6704] erofs: (device loop1): mounted with root inode @ nid 36. [ 193.495288][ T6690] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.516919][ T6704] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-22] [ 193.557898][ T6690] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 193.621588][ T6690] BTRFS info (device loop2): force clearing of disk cache [ 193.653319][ T6690] BTRFS info (device loop2): force zlib compression, level 3 [ 193.688747][ T6690] BTRFS info (device loop2): enabling auto defrag [ 193.714731][ T6690] BTRFS info (device loop2): metadata ratio 257 [ 193.754705][ T6690] BTRFS info (device loop2): enabling disk space caching [ 193.761811][ T6690] BTRFS info (device loop2): disk space caching is enabled [ 194.004414][ T6723] netlink: 96 bytes leftover after parsing attributes in process `syz.5.834'. [ 194.186129][ T6690] BTRFS info (device loop2): enabling ssd optimizations [ 194.197928][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.204363][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.288062][ T6690] BTRFS info (device loop2): rebuilding free space tree [ 194.348622][ T6690] BTRFS info (device loop2): disabling free space tree [ 194.378534][ T6690] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 194.420106][ T6690] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 194.519784][ T6690] BTRFS info (device loop2): Snapshot src from another FS [ 194.645660][ T4259] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.730056][ T6739] loop5: detected capacity change from 0 to 256 [ 194.854368][ T6712] loop1: detected capacity change from 0 to 32768 [ 194.893441][ T6709] loop3: detected capacity change from 0 to 32768 [ 195.037795][ T6709] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 195.112386][ T6709] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 195.199126][ T6712] XFS (loop1): Mounting V5 Filesystem [ 195.317199][ T6752] (syz.3.838,6752,0):ocfs2_verify_group_and_input:420 ERROR: add a group which is in the current volume. [ 195.339677][ T6752] (syz.3.838,6752,0):ocfs2_group_add:503 ERROR: status = -22 [ 195.398906][ T6712] XFS (loop1): Ending clean mount [ 195.461646][ T6712] XFS (loop1): Quotacheck needed: Please wait. [ 195.481237][ T4257] ocfs2: Unmounting device (7,3) on (node local) [ 195.529972][ T6718] loop6: detected capacity change from 0 to 40427 [ 195.606382][ T6718] F2FS-fs (loop6): invalid crc value [ 195.616581][ T6712] XFS (loop1): Quotacheck: Done. [ 195.713545][ T6718] F2FS-fs (loop6): Found nat_bits in checkpoint [ 195.799409][ T4253] XFS (loop1): Unmounting Filesystem [ 195.977369][ T6718] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 196.034908][ T6718] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 196.843695][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.856'. [ 196.901843][ T6759] loop3: detected capacity change from 0 to 32768 [ 197.323781][ T6796] loop2: detected capacity change from 0 to 64 [ 197.398516][ T6800] kAFS: unparsable volume name [ 197.415851][ T6798] loop1: detected capacity change from 0 to 256 [ 197.472128][ T6798] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 197.595583][ T4699] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 197.787123][ T4699] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.817924][ T4699] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.852870][ T4699] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 197.882229][ T4699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 197.910586][ T4699] usb 7-1: SerialNumber: syz [ 198.080947][ T6815] loop1: detected capacity change from 0 to 512 [ 198.118467][ T6815] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.150387][ T4699] usb 7-1: 0:2 : does not exist [ 198.163942][ T4699] usb 7-1: unit 252 not found! [ 198.229804][ T4699] usb 7-1: USB disconnect, device number 3 [ 198.248805][ T6815] EXT4-fs (loop1): 1 truncate cleaned up [ 198.262395][ T6818] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 198.328452][ T6815] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 198.339827][ T6821] loop3: detected capacity change from 0 to 2048 [ 198.381424][ T6821] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.495395][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.638373][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 198.846963][ T6828] loop3: detected capacity change from 0 to 4096 [ 198.903024][ T6828] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 198.944735][ T6828] ntfs3: loop3: Failed to load $Extend. [ 199.287076][ T6838] loop3: detected capacity change from 0 to 16 [ 199.368366][ T6838] erofs: (device loop3): mounted with root inode @ nid 36. [ 199.541474][ T6842] loop6: detected capacity change from 0 to 2048 [ 199.662603][ T6842] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 199.690486][ T6850] device bridge0 entered promiscuous mode [ 199.706245][ T6852] loop3: detected capacity change from 0 to 512 [ 199.714569][ T6842] EXT4-fs (loop6): shut down requested (2) [ 199.722765][ T6850] bridge0: port 3(macsec1) entered blocking state [ 199.752612][ T6850] bridge0: port 3(macsec1) entered disabled state [ 199.815029][ T6852] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.885: invalid indirect mapped block 10 (level 1) [ 199.862538][ T6852] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.885: invalid indirect mapped block 8 (level 1) [ 199.864116][ T6191] EXT4-fs (loop6): unmounting filesystem. [ 199.885051][ T6850] device bridge0 left promiscuous mode [ 199.955463][ T6852] EXT4-fs (loop3): 1 truncate cleaned up [ 199.961185][ T6852] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 200.252131][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 200.260856][ T6865] netlink: 32 bytes leftover after parsing attributes in process `syz.1.890'. [ 200.471801][ T6871] netlink: 'syz.6.893': attribute type 1 has an invalid length. [ 200.533867][ T6871] netlink: 24 bytes leftover after parsing attributes in process `syz.6.893'. [ 200.915493][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'. [ 200.924347][ T6889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.974800][ T6889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.996774][ T6889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.024774][ T6889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.309581][ T6899] loop1: detected capacity change from 0 to 2048 [ 201.361280][ T6902] loop2: detected capacity change from 0 to 64 [ 201.391576][ T6897] loop6: detected capacity change from 0 to 4096 [ 201.404724][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 201.410790][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 201.424793][ T4270] Bluetooth: hci0: command 0x0406 tx timeout [ 201.532996][ T6905] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.555219][ T6899] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 201.632542][ T26] audit: type=1800 audit(1748916600.481:80): pid=6897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.907" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 201.692277][ T6897] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 201.742085][ T6897] Remounting filesystem read-only [ 201.836021][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 201.942987][ T6191] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 202.556081][ T6934] loop6: detected capacity change from 0 to 1024 [ 202.820154][ T6943] loop3: detected capacity change from 0 to 256 [ 202.876901][ T6943] exfat: Deprecated parameter 'utf8' [ 202.898136][ T6943] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 203.196483][ T6951] loop3: detected capacity change from 0 to 2048 [ 203.251593][ T6951] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.284728][ T4699] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 203.487801][ T4699] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 203.505100][ T4699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.531925][ T4699] usb 7-1: config 0 descriptor?? [ 203.549518][ T4699] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 204.104076][ T6971] loop1: detected capacity change from 0 to 1024 [ 204.130774][ T6971] EXT4-fs: Ignoring removed orlov option [ 204.153715][ T6971] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.240103][ T6971] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 204.292261][ T6963] loop5: detected capacity change from 0 to 32768 [ 204.350334][ T4699] gspca_sunplus: reg_w_riv err -71 [ 204.364819][ T4699] sunplus: probe of 7-1:0.0 failed with error -71 [ 204.422102][ T4699] usb 7-1: USB disconnect, device number 4 [ 204.490187][ T6963] read_mapping_page failed! [ 204.501486][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 204.516771][ T6963] ERROR: (device loop5): txCommit: [ 204.516771][ T6963] [ 204.551311][ T6963] ERROR: (device loop5): remounting filesystem as read-only [ 204.708797][ T6982] loop1: detected capacity change from 0 to 128 [ 204.741711][ T6982] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 204.759985][ T108] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0) [ 204.772136][ T108] ------------[ cut here ]------------ [ 204.777987][ T108] kernel BUG at fs/jfs/jfs_txnmgr.c:931! [ 204.810886][ T108] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 204.817047][ T108] CPU: 1 PID: 108 Comm: jfsCommit Not tainted 6.1.140-syzkaller #0 [ 204.824973][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.835156][ T108] RIP: 0010:txUnlock+0xc87/0xcb0 [ 204.840138][ T108] Code: 7f d3 14 07 0f 0b e8 e8 84 91 fe 48 c7 c7 80 59 a6 8a 48 c7 c6 79 55 a6 8a ba a3 03 00 00 48 c7 c1 60 66 a6 8a e8 59 d3 14 07 <0f> 0b e8 c2 84 91 fe 48 c7 c7 80 59 a6 8a 48 c7 c6 79 55 a6 8a ba [ 204.859787][ T108] RSP: 0018:ffffc90002d17d28 EFLAGS: 00010246 [ 204.865888][ T108] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 25bdedf1fbb9b500 [ 204.873891][ T108] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 204.881890][ T108] RBP: ffffc9000288a0d8 R08: dffffc0000000000 R09: fffff520005a2f45 [ 204.889891][ T108] R10: fffff520005a2f45 R11: 1ffff920005a2f44 R12: ffff888076e724d8 [ 204.897886][ T108] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802fa20694 [ 204.905882][ T108] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 204.914836][ T108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.917140][ T6982] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.921425][ T108] CR2: 00007f4b7d222000 CR3: 0000000064e65000 CR4: 00000000003506e0 [ 204.921448][ T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 204.921461][ T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 204.954259][ T108] Call Trace: [ 204.957596][ T108] [ 204.960562][ T108] ? lockdep_hardirqs_on+0x94/0x140 [ 204.965811][ T108] jfs_lazycommit+0x56c/0xa50 [ 204.970516][ T108] ? txFreelock+0x5a0/0x5a0 [ 204.975038][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 204.980965][ T108] ? do_task_dead+0xd0/0xd0 [ 204.985503][ T108] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 204.991437][ T108] ? __kthread_parkme+0x162/0x1c0 [ 204.996503][ T108] kthread+0x29d/0x330 [ 205.000617][ T108] ? txFreelock+0x5a0/0x5a0 [ 205.005175][ T108] ? kthread_blkcg+0xd0/0xd0 [ 205.009805][ T108] ret_from_fork+0x1f/0x30 [ 205.014262][ T108] [ 205.017312][ T108] Modules linked in: [ 205.036137][ T108] ---[ end trace 0000000000000000 ]--- [ 205.042099][ T108] RIP: 0010:txUnlock+0xc87/0xcb0 [ 205.048543][ T108] Code: 7f d3 14 07 0f 0b e8 e8 84 91 fe 48 c7 c7 80 59 a6 8a 48 c7 c6 79 55 a6 8a ba a3 03 00 00 48 c7 c1 60 66 a6 8a e8 59 d3 14 07 <0f> 0b e8 c2 84 91 fe 48 c7 c7 80 59 a6 8a 48 c7 c6 79 55 a6 8a ba [ 205.053028][ T6982] overlayfs: upper fs needs to support d_type. [ 205.069207][ T108] RSP: 0018:ffffc90002d17d28 EFLAGS: 00010246 [ 205.076858][ T6982] overlayfs: upper fs does not support tmpfile. [ 205.091861][ T108] [ 205.114462][ T108] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 25bdedf1fbb9b500 [ 205.128244][ T108] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 205.136814][ T108] RBP: ffffc9000288a0d8 R08: dffffc0000000000 R09: fffff520005a2f45 [ 205.145191][ T108] R10: fffff520005a2f45 R11: 1ffff920005a2f44 R12: ffff888076e724d8 [ 205.153201][ T108] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802fa20694 [ 205.161420][ T108] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 205.175626][ T108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.182783][ T108] CR2: 00007f41e6f80178 CR3: 000000007e5e2000 CR4: 00000000003506f0 [ 205.191786][ T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 205.200330][ T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 205.208461][ T108] Kernel panic - not syncing: Fatal exception [ 205.214866][ T108] Kernel Offset: disabled [ 205.219194][ T108] Rebooting in 86400 seconds..