last executing test programs: 37.22969211s ago: executing program 4 (id=277): syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000002c0)="$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") syz_io_uring_setup(0x5583, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 36.734585636s ago: executing program 4 (id=279): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0xfffffffffffffe09}, 0x8}], 0x4000173, 0x40012102, 0x0) 36.501838158s ago: executing program 4 (id=281): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x4}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x3f, r1, &(0x7f0000000040)={0x20000001}) 36.291839599s ago: executing program 4 (id=284): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f00000001c0)={[{@nodiscard}, {@nocheckpoint_merge}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@background_gc_off}, {@noflush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@inlinecrypt}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@grpjquota}, {@checkpoint_diasble}]}, 0x4, 0x5510, &(0x7f00000020c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 33.906789965s ago: executing program 4 (id=304): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x4, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x0, 0xfffffffc}}]}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000000) 32.616560953s ago: executing program 4 (id=313): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x4, 0x2, 0x8d, 0x4, 0x2, 0x6, 0x4, 0x19, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x4, 0x5, 0x3ff, 0x200}, [{0x70000000, 0x37da, 0x5, 0xc75d, 0xe2c4, 0x4, 0x1, 0x5}, {0x2, 0x2, 0x7, 0x1, 0x5, 0x10, 0xe, 0x2}, {0x4, 0x5, 0x20, 0x8080000, 0x80, 0x6, 0x8612, 0x7}, {0x70000000, 0x5bb, 0x0, 0x1, 0x6, 0x5, 0x7c, 0xb19}]}, 0xb8) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 32.511492938s ago: executing program 32 (id=313): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x4, 0x2, 0x8d, 0x4, 0x2, 0x6, 0x4, 0x19, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x4, 0x5, 0x3ff, 0x200}, [{0x70000000, 0x37da, 0x5, 0xc75d, 0xe2c4, 0x4, 0x1, 0x5}, {0x2, 0x2, 0x7, 0x1, 0x5, 0x10, 0xe, 0x2}, {0x4, 0x5, 0x20, 0x8080000, 0x80, 0x6, 0x8612, 0x7}, {0x70000000, 0x5bb, 0x0, 0x1, 0x6, 0x5, 0x7c, 0xb19}]}, 0xb8) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4.458382476s ago: executing program 1 (id=600): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 3.765418882s ago: executing program 2 (id=610): sysinfo(&(0x7f0000000000)=""/196) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x12, "3eccd8fd0000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) ioctl$TIOCSTI(r0, 0x5412, 0x0) 2.830225801s ago: executing program 2 (id=617): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac3(0x4, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x211, 0x0, 0x0, 0x0, 0x8, 0xd8c, 0x201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0x0, 0x9, {0x8, 0xb, 0x0, 0x0, 0x1, 0x11, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf4, 0xa, 0x1000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x80, 0x7a, 0x5, {0xa, 0x25, 0x25, 0x200, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x7, 0x4, {0xa, 0x25, 0x25, 0x6, 0xfc, 0x8}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x1, "ff8d"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821d"}, @main=@item_4={0x3, 0x0, 0x8, "ae211361"}, @local=@item_4={0x3, 0x2, 0x1, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.10097189s ago: executing program 5 (id=621): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000001d0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) 2.08716094s ago: executing program 1 (id=622): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x4, 0xfffbfffd, 0x2, 0x0, "0c41920887e8d2b791f805000000000000006b", 0x4, 0x203}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x8) 1.932731349s ago: executing program 1 (id=624): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000000040)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@usrjquota}, {@resuid}, {@lazytime}, {@noblock_validity}, {@usrquota}]}, 0x1, 0x443, &(0x7f0000001040)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 1.860298693s ago: executing program 5 (id=625): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f00000000c0)={[{}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@test_dummy_encryption}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@bh}, {@data_journal}]}, 0x1, 0x45d, &(0x7f0000000740)="$eJzs28uPFMUfAPBv98wuP547P4IPHioRjcTHwi6IHLxoNPGgiYke8LjuLgQZWMOuiRCiYAweDYl349GEv8CTXox6MvGqng0JMVxAT2N6ppudbWbWfc3Oynw+SUNVd/VUfbu7Zqq7tgMYWPuzf5KIbRHxa0SMtLILC+xv/Xfn1qXJv25dmkyi0Xjrz6RZ7vatS5NF0WK/rUWmGpF+msTeDvXOXrh4ZqJenz6f5w/NnX3/0OyFi8+dPjtxavrU9Lnx48ePHhl74dj482sSZxbX7T0fzezb/do7196YPHHt3R+vJ0X8pThWrxptH93Rk43G2lW3AWxvSyfVPjaEZankV+tQs/+PRCXmT95IvPpJXxsH9FSj0Wg82H3z5QZwH0ui3y0A+qP4oc/uf4tlnYYeG8LNl1o3QFncd/KltaUaaV5mqHR/u5b2R8SJy39/mS1Rfg6xuUeVAgAD7dts/PNsp/FfGu3PhXbkcyi1iPh/ROyMiGMRsSsiHoholn0oIh5eZv3lSZJ7x5/pjRUFtkTZ+O/FfG5r4fivGP1FrZLntjfjH0pOnq5PH86PycEY2pTlxxap47tXfvm827b28V+2ZPUXY8G8HTeqmxbuMzUxN7GamNvdvBKxp9op/uTuTEASEbsjYs8K6zj99Nf7um3rEv/wkj54DeaZGl9FPNU6/5ejFH8hWXx+8tD/oj59eFPkV8W9fvr56pvd6v/3899b2fnf0vH6L+L/vZa0z9fOLr+Oq7991vWecqXX/3Dy9oJ1H07MzZ0fixhOXm/ma+3rx0vlxufLZ/EfPNC5/++M+SOxNyKyi/iRiHg0Ih5r++56PCIOLBL/Dy8/8d7K4++tLP6pRc9/lM7/fGI4ymsunsn2O18qXDnz/TcLKq0tJ/7s/B9tpg7ma5by/VduV5YoImrftJpjBwAAAP8VaURsiyQdvZtO09HR1t/w74otaX1mdu6ZkzMfnJtqvSNQi6G0eP450vY8dCy/rS/y46X8kfy58ReVzc386ORMfarfwcOA29ql/2f+qPS7dUDPeV8LBpf+D4NL/4fBpf/D4OrQ/716BgOi0+//x31oB7D+Sv1/0Wk/AwO4v7j/h8Gl/8Pg0v9hIF2JuOe9/vVLXM9bsS6VphGx4t0jVln7jjzUvhznXiQi3RDNkOhRoo9fSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGvonwAAAP//UP3YqQ==") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x20) 1.601312807s ago: executing program 1 (id=628): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000280)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x8002, 0xb4, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) listen(r0, 0x100101) accept4(r0, 0x0, 0x0, 0x80000) 1.589665887s ago: executing program 3 (id=629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 1.551910529s ago: executing program 0 (id=630): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97454800", "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"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@generic={0x0, 0x0, 0x18}, 0x18) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 1.441066164s ago: executing program 1 (id=631): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='./bus\x00', 0x1c802, &(0x7f0000000000)=ANY=[], 0x5, 0x5f74, &(0x7f0000002040)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc48, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x40) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 1.386724508s ago: executing program 3 (id=632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x34, r1, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x0) 1.225444926s ago: executing program 3 (id=633): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000f59ffc)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 1.218716236s ago: executing program 0 (id=643): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) 1.074166174s ago: executing program 0 (id=634): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004005}, 0x20000000) 1.068518664s ago: executing program 3 (id=635): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x84, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @loopback, [], [], 'veth1\x00', 'wlan1\x00', {}, {0x1fe}}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x3], 0xff, 0x0, 0x24dc13b7d730343}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4199fc6505f93cb13d0617f57700e5dba5afc775234fe52cca718b1ef125"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000200)={0x5, 0x6, 0x420f, 0xd, 0xfffffffe, 0x32f35c29, 0xff, 0x4}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 967.76878ms ago: executing program 0 (id=636): openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 922.509742ms ago: executing program 3 (id=637): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400000000000000000000004e1e64098786ebaed50c775e6ab396705cadd49c94d79774cb87acdcb42810dd6a0d", @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 852.321596ms ago: executing program 0 (id=638): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x20, 0x3b}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffd}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 759.653581ms ago: executing program 5 (id=639): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 750.646471ms ago: executing program 0 (id=640): getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 661.690836ms ago: executing program 5 (id=641): r0 = socket$unix(0x1, 0x1, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) fchdir(r2) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 564.121581ms ago: executing program 5 (id=642): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf8", 0x6e}], 0x1}}], 0x2, 0x2090) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/4110, 0x100e, 0x1, 0x0}, &(0x7f0000000040)=0x40) 542.381402ms ago: executing program 2 (id=644): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) 482.981795ms ago: executing program 5 (id=645): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) pipe2$9p(&(0x7f0000004680)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000004600)='./file0\x00', &(0x7f0000004640), 0x0, &(0x7f0000004780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 347.803692ms ago: executing program 2 (id=646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x54, r2, 0x609, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x48}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x24004884) 117.833984ms ago: executing program 2 (id=647): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000001c0)=""/44, 0x2c) getdents64(r1, 0xfffffffffffffffe, 0x29) 8.55303ms ago: executing program 3 (id=648): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@grpquota}, {@nogrpid}, {@orlov}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) 696.31µs ago: executing program 1 (id=658): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000001c0)={0x7, 0x2, 0x8001, 0x1, "a09fc910bb060bdc0d40cfcd10bf99f7a0f281ca7cbeb8216bef5c543cf861aa"}) 0s ago: executing program 2 (id=649): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0118020003110000280012800b00010065727370616e000018000280040012000600020007000000050016"], 0x48}}, 0x4000020) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x20000084) kernel console output (not intermixed with test programs): eth1_vlan: link becomes ready [ 67.221892][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.259541][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.275499][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.283451][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.294387][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.303310][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.311152][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.319156][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.327976][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.339377][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.350275][ T4191] device veth0_vlan entered promiscuous mode [ 67.361834][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.370190][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.383181][ T4193] device veth1_vlan entered promiscuous mode [ 67.392292][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.400989][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.410886][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.422304][ T4184] device veth0_vlan entered promiscuous mode [ 67.435402][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.443984][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.470625][ T4191] device veth1_vlan entered promiscuous mode [ 67.484124][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.492453][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.502260][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.512982][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.522795][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.532250][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.540164][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.580968][ T4184] device veth1_vlan entered promiscuous mode [ 67.590138][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.599248][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.607886][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.616362][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.627084][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.636000][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.643993][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.652395][ T4190] device veth0_vlan entered promiscuous mode [ 67.671011][ T4193] device veth0_macvtap entered promiscuous mode [ 67.680914][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.703264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.719397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.730949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.749495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.763112][ T4193] device veth1_macvtap entered promiscuous mode [ 67.782742][ T4190] device veth1_vlan entered promiscuous mode [ 67.801118][ T4184] device veth0_macvtap entered promiscuous mode [ 67.832459][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.847753][ T4184] device veth1_macvtap entered promiscuous mode [ 67.858967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.873426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.882634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.892149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.900864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.909321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.920935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.929944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.939192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.951858][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.968176][ T4190] device veth0_macvtap entered promiscuous mode [ 67.981694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.001148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.012121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.029398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.040784][ T4191] device veth0_macvtap entered promiscuous mode [ 68.052666][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.066714][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.078305][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.087792][ T4190] device veth1_macvtap entered promiscuous mode [ 68.098073][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.107433][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.116550][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.126073][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.138443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.153497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.161976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.170334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.179224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.192532][ T4191] device veth1_macvtap entered promiscuous mode [ 68.207310][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.219216][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.231195][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.252682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.276160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.293500][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.303064][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.312158][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.320935][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.346002][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.358724][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.369839][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.380910][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.392630][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.424728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.438494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.452169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.461757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.475945][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.487089][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.497243][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.508069][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.519704][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.528575][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.539382][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.550959][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.561468][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.571410][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.582106][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.593947][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.606968][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.619543][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.629525][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.640256][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.650454][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.661444][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.672673][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.694194][ T4226] Bluetooth: hci1: command 0x040f tx timeout [ 68.700392][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.708694][ T4226] Bluetooth: hci0: command 0x040f tx timeout [ 68.711562][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.726336][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.735199][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.743987][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.752555][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.761303][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.769933][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.779810][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.788099][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 68.796116][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.805903][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.814705][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.823426][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.832479][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.848067][ T4188] device veth0_vlan entered promiscuous mode [ 68.854816][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 68.860948][ T4227] Bluetooth: hci3: command 0x040f tx timeout [ 68.892805][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.902051][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.911442][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.920733][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.956951][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.965622][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.972112][ T4188] device veth1_vlan entered promiscuous mode [ 69.000483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.009721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.066965][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.100302][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.120490][ T4188] device veth0_macvtap entered promiscuous mode [ 69.130044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.141973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.149907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.158778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.167825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.192015][ T4188] device veth1_macvtap entered promiscuous mode [ 69.209487][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.225784][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.233624][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.237914][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.244222][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.260994][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.272514][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.281618][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.292312][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.303472][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.314177][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.325381][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.337527][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.357075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.366429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.375259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.384635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.395196][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.406822][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.417178][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.431981][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.441869][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.452577][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.462605][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.473114][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.485307][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.512234][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.514265][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.522043][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.551344][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.556255][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.563228][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.584931][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.594262][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.614454][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.640390][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.654672][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.723087][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.759621][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.774612][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.781082][ T3066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.791976][ T4265] loop1: detected capacity change from 0 to 256 [ 69.799177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.818118][ T4265] exfat: Deprecated parameter 'utf8' [ 69.825139][ T4265] exfat: Deprecated parameter 'utf8' [ 69.850575][ T3066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.876520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.939908][ T3066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.976153][ T3066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.006812][ T4265] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 70.029773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.061373][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.104619][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.122426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.158368][ T4275] loop0: detected capacity change from 0 to 128 [ 70.256228][ T4278] process 'syz.2.7' launched '/dev/fd/3' with NULL argv: empty string added [ 70.674894][ T4291] loop2: detected capacity change from 0 to 256 [ 70.750612][ T4291] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.785389][ T4227] Bluetooth: hci0: command 0x0419 tx timeout [ 70.805143][ T4227] Bluetooth: hci1: command 0x0419 tx timeout [ 70.864050][ T4227] Bluetooth: hci2: command 0x0419 tx timeout [ 70.944463][ T1111] Bluetooth: hci3: command 0x0419 tx timeout [ 70.956062][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 71.206128][ T4283] loop0: detected capacity change from 0 to 40427 [ 71.228854][ T4283] ======================================================= [ 71.228854][ T4283] WARNING: The mand mount option has been deprecated and [ 71.228854][ T4283] and is ignored by this kernel. Remove the mand [ 71.228854][ T4283] option from the mount to silence this warning. [ 71.228854][ T4283] ======================================================= [ 71.315619][ T4283] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 71.360336][ T4283] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 71.398317][ T4304] loop4: detected capacity change from 0 to 256 [ 71.404005][ T4283] F2FS-fs (loop0): invalid crc value [ 71.430514][ T4304] exfat: Deprecated parameter 'utf8' [ 71.458570][ T4283] F2FS-fs (loop0): Found nat_bits in checkpoint [ 71.469563][ T4304] exfat: Deprecated parameter 'utf8' [ 71.496658][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.503422][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.541100][ T4304] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 71.677291][ T4283] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 71.695136][ T4283] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 71.930516][ T26] audit: type=1800 audit(1776706227.728:2): pid=4283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 72.012102][ T4283] attempt to access beyond end of device [ 72.012102][ T4283] loop0: rw=34817, want=77952, limit=40427 [ 72.066593][ T4313] attempt to access beyond end of device [ 72.066593][ T4313] loop0: rw=0, want=77896, limit=40427 [ 72.080700][ T4298] loop2: detected capacity change from 0 to 32768 [ 72.092500][ T4302] loop3: detected capacity change from 0 to 32768 [ 72.120560][ T4301] loop1: detected capacity change from 0 to 40427 [ 72.167321][ T4301] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 72.195162][ T4301] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 72.223718][ T4301] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x1ffff [ 72.232335][ T4301] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 72.288126][ T4301] F2FS-fs (loop1): invalid crc value [ 72.295139][ T4302] XFS (loop3): Mounting V5 Filesystem [ 72.325729][ T4298] XFS (loop2): Mounting V5 Filesystem [ 72.333037][ T4301] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.448928][ T4301] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 72.455140][ T4302] XFS (loop3): Ending clean mount [ 72.471289][ T4301] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 72.504940][ T4302] XFS (loop3): Quotacheck needed: Please wait. [ 72.522151][ T4298] XFS (loop2): Ending clean mount [ 72.558396][ T4298] XFS (loop2): Quotacheck needed: Please wait. [ 72.629729][ T4302] XFS (loop3): Quotacheck: Done. [ 72.701201][ T4301] attempt to access beyond end of device [ 72.701201][ T4301] loop1: rw=2049, want=45112, limit=40427 [ 72.711307][ T4298] XFS (loop2): Quotacheck: Done. [ 72.992916][ T4191] XFS (loop3): Unmounting Filesystem [ 73.148464][ T4190] XFS (loop2): Unmounting Filesystem [ 73.670227][ T4233] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.699731][ T4366] syz.1.28 uses obsolete (PF_INET,SOCK_PACKET) [ 73.860230][ T4373] loop3: detected capacity change from 0 to 128 [ 73.984137][ T4233] usb 5-1: Using ep0 maxpacket: 16 [ 74.144305][ T4233] usb 5-1: config 4 has an invalid interface number: 9 but max is 0 [ 74.153085][ T4233] usb 5-1: config 4 has no interface number 0 [ 74.176246][ T4233] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 74.187342][ T4233] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64 [ 74.199025][ T4233] usb 5-1: config 4 interface 9 has no altsetting 0 [ 74.336435][ T1108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.424061][ T4233] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 74.440028][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.459397][ T4233] usb 5-1: Product: syz [ 74.465868][ T4233] usb 5-1: Manufacturer: syz [ 74.476359][ T4233] usb 5-1: SerialNumber: syz [ 74.525214][ T4355] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 74.532664][ T4355] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 74.605982][ T4233] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 74.614715][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 74.734665][ T1108] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 74.742901][ T1108] usb 1-1: config 0 has no interface number 0 [ 74.798289][ T1108] usb 1-1: config 0 interface 32 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.822572][ T1111] usb 5-1: USB disconnect, device number 2 [ 74.833320][ T1108] usb 1-1: config 0 interface 32 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.843740][ T9] usb 5-1: Failed to submit usb control message: -71 [ 74.853784][ T9] usb 5-1: unable to send the bmi data to the device: -71 [ 74.870079][ T1108] usb 1-1: config 0 interface 32 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 74.870128][ T9] usb 5-1: unable to get target info from device [ 74.907290][ T9] usb 5-1: could not get target info (-71) [ 74.919816][ T1108] usb 1-1: config 0 interface 32 has no altsetting 0 [ 74.920088][ T9] usb 5-1: could not probe fw (-71) [ 74.942536][ T1108] usb 1-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 74.969954][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.027791][ T1108] usb 1-1: config 0 descriptor?? [ 75.283180][ T4415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.52'. [ 75.343143][ T26] audit: type=1326 audit(1776706231.138:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4e72819 code=0x7ffc0000 [ 75.362363][ T4399] ODEBUG: Out of memory. ODEBUG disabled [ 75.392783][ T4415] netlink: 'syz.1.52': attribute type 12 has an invalid length. [ 75.405791][ T4415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.52'. [ 75.421002][ T26] audit: type=1326 audit(1776706231.138:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4e72819 code=0x7ffc0000 [ 75.443297][ C0] vkms_vblank_simulate: vblank timer overrun [ 75.532529][ T26] audit: type=1326 audit(1776706231.208:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41a4e72819 code=0x7ffc0000 [ 75.548119][ T1108] uclogic 0003:5543:0047.0001: unknown main item tag 0x0 [ 75.584579][ T1108] uclogic 0003:5543:0047.0001: unknown main item tag 0x0 [ 75.623692][ T1108] uclogic 0003:5543:0047.0001: unknown main item tag 0x0 [ 75.640112][ T1108] uclogic 0003:5543:0047.0001: unknown main item tag 0x0 [ 75.643612][ T26] audit: type=1326 audit(1776706231.208:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4e72819 code=0x7ffc0000 [ 75.663652][ T1108] uclogic 0003:5543:0047.0001: unknown main item tag 0x0 [ 75.696869][ T1108] uclogic 0003:5543:0047.0001: unknown main item tag 0x0 [ 75.699229][ T4424] loop1: detected capacity change from 0 to 128 [ 75.723039][ T4420] loop3: detected capacity change from 0 to 4096 [ 75.729706][ T1108] uclogic 0003:5543:0047.0001: unknown main item tag 0x0 [ 75.741399][ T26] audit: type=1326 audit(1776706231.208:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4e72819 code=0x7ffc0000 [ 75.753630][ T1108] uclogic 0003:5543:0047.0001: item fetching failed at offset 10/40 [ 75.763316][ C0] vkms_vblank_simulate: vblank timer overrun [ 75.774341][ T26] audit: type=1326 audit(1776706231.218:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f41a4e72819 code=0x7ffc0000 [ 75.798315][ T1108] uclogic 0003:5543:0047.0001: parse failed [ 75.806099][ T26] audit: type=1326 audit(1776706231.218:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4e72819 code=0x7ffc0000 [ 75.814093][ T1108] uclogic: probe of 0003:5543:0047.0001 failed with error -22 [ 75.828214][ C0] vkms_vblank_simulate: vblank timer overrun [ 75.865971][ T26] audit: type=1326 audit(1776706231.218:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4e72819 code=0x7ffc0000 [ 75.925044][ T26] audit: type=1326 audit(1776706231.218:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f41a4e72819 code=0x7ffc0000 [ 75.947072][ C0] vkms_vblank_simulate: vblank timer overrun [ 75.949916][ T1108] usb 1-1: USB disconnect, device number 2 [ 76.029585][ T4420] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 76.074210][ T4420] ntfs3: loop3: Failed to load $Extend. [ 76.219558][ T4420] ntfs3: loop3: ino=1b, "file0" directory corrupted [ 76.536385][ T4430] loop3: detected capacity change from 0 to 512 [ 76.591948][ T4430] EXT4-fs (loop3): Ignoring removed orlov option [ 76.620376][ T4430] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 76.676875][ T4430] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 76.766376][ T4430] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.59: corrupted in-inode xattr [ 76.809717][ T4430] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.59: couldn't read orphan inode 15 (err -117) [ 76.830408][ T4434] capability: warning: `syz.0.60' uses 32-bit capabilities (legacy support in use) [ 76.861504][ T4430] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,debug,noblock_validity,noload,nombcache,orlov,min_batch_time=0x0000000000000002,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 77.015172][ T4428] loop1: detected capacity change from 0 to 131072 [ 77.039635][ T4430] EXT4-fs error (device loop3): ext4_check_dx_root:2266: inode #2: comm syz.3.59: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 77.098188][ T4428] F2FS-fs (loop1): invalid crc value [ 77.129840][ T4428] F2FS-fs (loop1): Found nat_bits in checkpoint [ 77.172791][ T4428] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 77.180206][ T4194] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.193718][ T4428] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 77.209860][ T4439] loop0: detected capacity change from 0 to 512 [ 77.232197][ T4439] EXT4-fs (loop0): inline encryption not supported [ 77.249484][ T4439] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.285714][ T4439] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.345123][ T4439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 77.445283][ T4439] System zones: 1-12 [ 77.491600][ T4439] EXT4-fs (loop0): 1 truncate cleaned up [ 77.523122][ T4439] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,inlinecrypt,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 77.573859][ T4194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.590405][ T4194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.600723][ T4194] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.653823][ T4194] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.662921][ T4194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.759102][ T4194] usb 5-1: config 0 descriptor?? [ 77.818597][ T4446] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.266783][ T4194] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 78.322576][ T4194] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 78.597180][ T1111] usb 5-1: USB disconnect, device number 3 [ 78.846043][ T4399] Set syz1 is full, maxelem 65536 reached [ 78.943138][ T4458] loop3: detected capacity change from 0 to 32768 [ 79.027024][ T4458] XFS (loop3): Mounting V5 Filesystem [ 79.071881][ T4456] loop0: detected capacity change from 0 to 40427 [ 79.077862][ T4458] XFS (loop3): Ending clean mount [ 79.143639][ T4456] F2FS-fs (loop0): Invalid log_blocksize (64), supports only 12 [ 79.154886][ T4456] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 79.160217][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 79.160230][ T26] audit: type=1800 audit(1776706234.948:17): pid=4458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.70" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 79.168090][ T4456] F2FS-fs (loop0): invalid crc value [ 79.207179][ T4194] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.219340][ T4456] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 79.287925][ T4456] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 79.294996][ T4191] XFS (loop3): Unmounting Filesystem [ 79.317037][ T4456] F2FS-fs (loop0): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 79.453815][ T4194] usb 3-1: Using ep0 maxpacket: 32 [ 79.464171][ T4456] overlayfs: invalid origin (0000) [ 79.483794][ T1108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.583258][ T4194] usb 3-1: config 5 has an invalid interface number: 12 but max is 0 [ 79.599145][ T4194] usb 3-1: config 5 has no interface number 0 [ 79.613176][ T4194] usb 3-1: config 5 interface 12 has no altsetting 0 [ 79.730123][ T4482] loop1: detected capacity change from 0 to 256 [ 79.737012][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 79.761906][ T4482] exfat: Deprecated parameter 'utf8' [ 79.794019][ T4194] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=89.53 [ 79.816515][ T4482] exfat: Deprecated parameter 'utf8' [ 79.821930][ T4482] exfat: Deprecated parameter 'utf8' [ 79.827967][ T4478] loop0: detected capacity change from 0 to 4096 [ 79.834676][ T4194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.847353][ T4194] usb 3-1: Product: syz [ 79.853811][ T1108] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 79.862216][ T1108] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.879943][ T4194] usb 3-1: Manufacturer: syz [ 79.884874][ T4194] usb 3-1: SerialNumber: syz [ 79.890991][ T1108] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.904853][ T4478] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 79.919011][ T4482] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d) [ 79.931344][ T1108] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.963013][ T1108] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.009317][ T4478] ntfs: volume version 3.1. [ 80.023807][ T1108] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 80.033395][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.090049][ T4478] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1255. You might want to try to use the mount option nls=utf8. [ 80.115565][ T4478] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 80.188692][ T4484] loop1: detected capacity change from 0 to 64 [ 80.310089][ T4194] speedtch 3-1:5.12: speedtch_bind: wrong device class 71 [ 80.317454][ T1108] usb 5-1: usb_control_msg returned -32 [ 80.323061][ T1108] usbtmc 5-1:16.0: can't read capabilities [ 80.332232][ T4194] speedtch 3-1:5.12: usbatm_usb_probe: bind failed: -19! [ 80.360273][ T4194] usb 3-1: USB disconnect, device number 2 [ 80.427837][ T4480] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 80.453118][ T4480] JBD2: Ignoring recovery information on journal [ 80.503959][ T1111] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.555142][ T4480] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 80.736371][ T4495] 9pnet: p9_errstr2errno: server reported unknown error 000000000000000000000040x0000000000000003.c,i Qכ [ 80.759357][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 80.773743][ T1111] usb 1-1: Using ep0 maxpacket: 16 [ 80.924204][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.947715][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.962430][ T1111] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.990236][ T1111] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 81.000033][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.041787][ T1111] usb 1-1: config 0 descriptor?? [ 81.562945][ T1111] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input5 [ 81.660918][ T1111] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 81.737258][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.817782][ T1111] usb 1-1: USB disconnect, device number 3 [ 81.848734][ T150] block nbd2: Attempted send on invalid socket [ 81.855968][ T150] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.871093][ T150] block nbd2: Attempted send on invalid socket [ 81.877553][ T150] blk_update_request: I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.918469][ T4539] fido_id[4539]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 81.983724][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 82.098305][ T4546] set_capacity_and_notify: 1 callbacks suppressed [ 82.098321][ T4546] loop2: detected capacity change from 0 to 512 [ 82.103746][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.133806][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.144161][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.173639][ T1108] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 82.183010][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.219735][ T4225] usb 5-1: USB disconnect, device number 4 [ 82.226797][ T1108] usb 2-1: config 0 descriptor?? [ 82.303818][ T4546] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.337550][ T4546] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.104: inode has both inline data and extents flags [ 82.378091][ T4546] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.104: couldn't read orphan inode 15 (err -117) [ 82.411119][ T4546] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,block_validity,debug_want_extra_isize=0x0000000000000068,usrjquota=,resuid=0x0000000000000000,lazytime,noblock_validity,usrquota,,errors=continue. Quota mode: writeback. [ 82.411798][ T4553] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.696108][ T1108] zydacron 0003:13EC:0006.0004: unknown main item tag 0x7 [ 82.714026][ T1108] zydacron 0003:13EC:0006.0004: unknown main item tag 0x6 [ 82.742441][ T1108] zydacron 0003:13EC:0006.0004: item fetching failed at offset 36/37 [ 82.770139][ T1108] zydacron 0003:13EC:0006.0004: parse failed [ 82.782640][ T1108] zydacron: probe of 0003:13EC:0006.0004 failed with error -22 [ 82.936378][ T1108] usb 2-1: USB disconnect, device number 2 [ 82.957223][ T4574] loop0: detected capacity change from 0 to 512 [ 83.011253][ T4576] loop2: detected capacity change from 0 to 8192 [ 83.047243][ T4574] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.112: iget: bad i_size value: 38620345925642 [ 83.061075][ T4574] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.112: couldn't read orphan inode 15 (err -117) [ 83.078224][ T4574] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 83.112575][ T4576] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 83.138950][ T4576] REISERFS (device loop2): using ordered data mode [ 83.145726][ T4576] reiserfs: using flush barriers [ 83.153034][ T4576] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.175773][ T4576] REISERFS (device loop2): checking transaction log (loop2) [ 83.202705][ T4576] REISERFS (device loop2): Using r5 hash to sort names [ 83.215401][ T4576] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 83.438893][ T4589] loop4: detected capacity change from 0 to 256 [ 83.464025][ T4586] loop2: detected capacity change from 0 to 64 [ 83.498244][ T4591] tipc: Started in network mode [ 83.574074][ T4589] FAT-fs (loop4): Directory bread(block 1285) failed [ 83.580954][ T4589] FAT-fs (loop4): Directory bread(block 1286) failed [ 83.583389][ T4591] tipc: Node identity ac14142f, cluster identity 4711 [ 83.626939][ T4589] FAT-fs (loop4): Directory bread(block 1287) failed [ 83.630638][ T4591] tipc: New replicast peer: 0.0.0.0 [ 83.644452][ T4591] tipc: Enabled bearer , priority 10 [ 83.684261][ T4596] netlink: 64 bytes leftover after parsing attributes in process `syz.3.118'. [ 83.700491][ T4589] FAT-fs (loop4): Directory bread(block 1288) failed [ 83.758022][ T4589] FAT-fs (loop4): Directory bread(block 1285) failed [ 83.798630][ T4589] FAT-fs (loop4): Directory bread(block 1286) failed [ 83.834874][ T4589] FAT-fs (loop4): Directory bread(block 1287) failed [ 83.873324][ T4603] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.918423][ T4589] FAT-fs (loop4): Directory bread(block 1288) failed [ 83.962736][ T4606] loop3: detected capacity change from 0 to 64 [ 83.964057][ T4604] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 84.034867][ T4610] loop2: detected capacity change from 0 to 128 [ 84.042652][ T4589] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 84.116001][ T4610] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.187835][ T4613] loop0: detected capacity change from 0 to 512 [ 84.276232][ T4618] loop8: detected capacity change from 0 to 7 [ 84.285421][ T4613] EXT4-fs (loop0): Ignoring removed orlov option [ 84.313267][ T4618] Dev loop8: unable to read RDB block 7 [ 84.353844][ T4618] loop8: unable to read partition table [ 84.367828][ T4613] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,orlov,,errors=continue. Quota mode: writeback. [ 84.385592][ T4618] loop8: partition table beyond EOD, truncated [ 84.392288][ T4618] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 84.502563][ T4613] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.534168][ T4624] loop2: detected capacity change from 0 to 4096 [ 84.734757][ T4633] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.802918][ T4225] tipc: Node number set to 2886997039 [ 84.892670][ T4624] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 524288 [ 84.945248][ T4624] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 84.992528][ T4642] attempt to access beyond end of device [ 84.992528][ T4642] loop2: rw=524288, want=2097328, limit=4096 [ 84.993994][ T4643] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 85.042526][ T4646] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 1 [ 85.043629][ T1111] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 85.066318][ T4645] erofs: (device loop3): mounted with root inode @ nid 36. [ 85.066529][ T4647] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 2 [ 85.105107][ T4648] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 3 [ 85.123940][ T4624] Remounting filesystem read-only [ 85.141741][ T4642] attempt to access beyond end of device [ 85.141741][ T4642] loop2: rw=0, want=2097328, limit=4096 [ 85.184971][ T4624] NILFS (loop2): error -5 truncating bmap (ino=15) [ 85.231622][ T26] audit: type=1800 audit(1776706241.028:18): pid=4642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.133" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 85.293241][ T4642] syz.2.133 (4642) used greatest stack depth: 20656 bytes left [ 85.407956][ T4190] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 85.533864][ T1111] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 85.594379][ T1111] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 85.638967][ T4630] JBD2: Ignoring recovery information on journal [ 85.687868][ T1111] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 85.783110][ T4630] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 85.809885][ T1111] usb 1-1: config 0 interface 0 has no altsetting 0 [ 85.859839][ T1111] usb 1-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 85.905966][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.912028][ T4630] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 85.915892][ T4630] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 85.927706][ T1111] usb 1-1: config 0 descriptor?? [ 85.952279][ T4630] OCFS2: File system is now read-only. [ 85.958539][ T4630] (syz.4.136,4630,0):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 85.968850][ T4637] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 85.978492][ T4630] (syz.4.136,4630,0):ocfs2_mknod:334 ERROR: status = -117 [ 85.993477][ T4630] (syz.4.136,4630,0):ocfs2_mknod:502 ERROR: status = -117 [ 86.002068][ T4630] (syz.4.136,4630,0):ocfs2_create:676 ERROR: status = -117 [ 86.072543][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 86.131731][ T4674] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.201923][ T4674] UDF-fs: unknown compression code (195) [ 86.221542][ T4671] JBD2: Ignoring recovery information on journal [ 86.397667][ T4671] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 86.414421][ T1111] hid (null): unknown global tag 0xe [ 86.419788][ T1111] hid (null): unknown global tag 0xe [ 86.443950][ T1111] lg-g15 0003:046D:0A07.0005: unknown main item tag 0x3 [ 86.473980][ T1111] lg-g15 0003:046D:0A07.0005: unknown global tag 0xe [ 86.491027][ T1111] lg-g15 0003:046D:0A07.0005: item 0 1 1 14 parsing failed [ 86.514890][ T1111] lg-g15: probe of 0003:046D:0A07.0005 failed with error -22 [ 86.571416][ T4683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.154'. [ 86.603497][ T4683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.154'. [ 86.624019][ T4683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.154'. [ 86.674517][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 86.681179][ T4683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.154'. [ 86.707309][ T4683] Zero length message leads to an empty skb [ 86.717523][ T1111] usb 1-1: USB disconnect, device number 4 [ 86.856528][ T21] cfg80211: failed to load regulatory.db [ 87.028298][ T4685] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 87.086148][ T4685] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 87.236680][ T4680] set_capacity_and_notify: 6 callbacks suppressed [ 87.236699][ T4680] loop3: detected capacity change from 0 to 40427 [ 87.382369][ T4680] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x1ffff [ 87.415366][ T4680] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 87.480936][ T4680] F2FS-fs (loop3): invalid crc value [ 87.548676][ T4680] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.591858][ T4695] loop1: detected capacity change from 0 to 4096 [ 87.727924][ T4680] F2FS-fs (loop3): Start checkpoint disabled! [ 87.821727][ T4695] ntfs3: loop1: ino=5, "/" directory corrupted [ 87.844002][ T4680] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 87.853410][ T4695] ntfs3: loop1: ino=5, "/" directory corrupted [ 88.050736][ T4717] loop0: detected capacity change from 0 to 1024 [ 88.283700][ T4728] netlink: 'syz.2.176': attribute type 2 has an invalid length. [ 88.452266][ T4246] attempt to access beyond end of device [ 88.452266][ T4246] loop3: rw=2049, want=40984, limit=40427 [ 88.461408][ T4729] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.482888][ T4729] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.545277][ T4729] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.559645][ T4729] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.625516][ T4731] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.671576][ T4731] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.723742][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.817946][ T4244] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.831870][ T4744] loop2: detected capacity change from 0 to 16 [ 88.842027][ T4244] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.894405][ T4744] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 89.144126][ T7] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 89.162573][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.185411][ T7] usb 2-1: config 0 descriptor?? [ 89.268078][ T4761] loop3: detected capacity change from 0 to 136 [ 89.371339][ T4767] loop4: detected capacity change from 0 to 128 [ 89.452375][ T4767] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 89.481747][ T4767] System zones: 1-3, 19-19, 35-36 [ 89.518244][ T4767] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 89.531591][ T4767] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.563716][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.617607][ T4767] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 131073 (only 1 groups) [ 89.845894][ T4785] sp0: Synchronizing with TNC [ 89.851920][ T4787] vxcan1: MTU too low for tipc bearer [ 89.858823][ T4787] tipc: Enabling of bearer rejected, failed to enable media [ 89.992509][ T4790] loop4: detected capacity change from 0 to 1024 [ 90.113639][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.172814][ T9] hfsplus: b-tree write err: -5, ino 8 [ 90.313790][ T7] usb 2-1: Cannot set autoneg [ 90.324996][ T7] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 90.352371][ T7] usb 2-1: USB disconnect, device number 3 [ 90.494030][ T1108] usb 4-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 16 [ 90.514872][ T1108] usb 4-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.567270][ T1108] usb 4-1: config 1 interface 0 has no altsetting 0 [ 90.576181][ T26] audit: type=1326 audit(1776706246.378:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.211" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c8a8de819 code=0x0 [ 90.749648][ T4823] loop0: detected capacity change from 0 to 128 [ 90.773938][ T1108] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.783274][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.791442][ T1108] usb 4-1: Product: syz [ 90.795806][ T1108] usb 4-1: Manufacturer: syz [ 90.800447][ T1108] usb 4-1: SerialNumber: syz [ 90.823953][ T4777] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 91.101603][ T4833] loop0: detected capacity change from 0 to 512 [ 91.143792][ T1111] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.144043][ T1108] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 91.166871][ T1108] usb 4-1: USB disconnect, device number 2 [ 91.200408][ T4833] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c09d, mo2=0102] [ 91.209016][ T4833] System zones: 0-2, 18-18, 34-35 [ 91.230811][ T4833] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,nombcache,acl,grpid,debug,abort,,errors=continue. Quota mode: writeback. [ 91.246061][ T4833] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.466945][ T4841] loop2: detected capacity change from 0 to 16 [ 91.522749][ T4841] erofs: (device loop2): mounted with root inode @ nid 36. [ 91.584023][ T1111] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.614980][ T1111] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.764708][ T1111] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 91.785121][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 91.807595][ T4848] EXT4-fs (loop0): Ignoring removed oldalloc option [ 91.823693][ T1111] usb 2-1: SerialNumber: syz [ 91.893921][ T4848] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c018, mo2=0002] [ 91.903180][ T4848] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,nodioread_nolock,barrier=0x0000000000000007,oldalloc,nojournal_checksum,min_batch_time=0x000000000000c619,noblock_validity,,errors=continue. Quota mode: none. [ 92.001405][ T4848] EXT4-fs error (device loop0): ext4_ext_precache:626: inode #2: comm syz.0.227: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 92.118946][ T1111] usb 2-1: 0:2 : does not exist [ 92.144757][ T4868] device syzkaller1 entered promiscuous mode [ 92.215844][ T4872] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.233768][ T4872] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.238389][ T1111] usb 2-1: USB disconnect, device number 4 [ 92.267410][ T4872] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 1: comm syz.2.238: lblock 1 mapped to illegal pblock 1 (length 5) [ 92.441411][ T4872] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.238: lblock 3 mapped to illegal pblock 3 (length 3) [ 92.459988][ T4872] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 92.493697][ T4872] EXT4-fs (loop2): This should not happen!! Data will be lost [ 92.493697][ T4872] [ 92.694477][ T1108] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.465208][ T4882] set_capacity_and_notify: 2 callbacks suppressed [ 93.465225][ T4882] loop1: detected capacity change from 0 to 131072 [ 93.486741][ T9] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 93.506689][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 93.523923][ T4882] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 93.532107][ T4882] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 93.542327][ T4882] F2FS-fs (loop1): invalid crc value [ 93.573701][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 93.573701][ T9] [ 93.610185][ T4882] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.674277][ T4882] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 93.681534][ T4882] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 93.734782][ T1108] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 93.763629][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.783837][ T4882] F2FS-fs (loop1): sanity_check_inode: corrupted inode footer i_ino=7, ino,nid: [2055, 7] run fsck to fix. [ 93.834965][ T1108] usb 1-1: config 0 descriptor?? [ 93.885923][ T1108] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 94.221058][ T4904] loop1: detected capacity change from 0 to 4096 [ 94.313369][ T4904] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 94.563321][ T4904] loop1: detected capacity change from 0 to 256 [ 94.835488][ T1108] gspca_stv06xx: I2C: Read error writing address: -71 [ 94.885912][ T4912] loop4: detected capacity change from 0 to 4096 [ 94.896644][ T1108] usb 1-1: USB disconnect, device number 5 [ 94.970833][ T4912] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 95.084597][ T4912] ntfs: volume version 3.1. [ 95.223714][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.489213][ T4931] loop4: detected capacity change from 0 to 128 [ 95.623896][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.655269][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.702476][ T7] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 95.739784][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.740239][ T4931] loop4: detected capacity change from 0 to 8192 [ 95.757291][ T7] usb 3-1: config 0 descriptor?? [ 95.838783][ T4923] loop1: detected capacity change from 0 to 32768 [ 95.940766][ T4923] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 95.980394][ T4193] (syz-executor,4193,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 95.997601][ T4193] ocfs2: Unmounting device (7,1) on (node local) [ 96.296731][ T7] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 96.319100][ T7] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 96.366178][ T7] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0006/input/input6 [ 96.441351][ T7] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 96.622436][ T1111] usb 3-1: USB disconnect, device number 3 [ 96.648453][ T4927] loop3: detected capacity change from 0 to 40427 [ 96.713634][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.715427][ T4948] fido_id[4948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 96.815700][ T4927] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 96.822149][ T4927] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 96.852888][ T4927] F2FS-fs (loop3): invalid crc value [ 96.918620][ T4927] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 97.080647][ T4927] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 97.096759][ T4927] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 97.133875][ T7] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 97.154964][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.213748][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.253765][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 97.403808][ T7] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 97.408264][ T4968] loop2: detected capacity change from 0 to 128 [ 97.412934][ T7] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 97.412961][ T7] usb 2-1: Manufacturer: syz [ 97.436430][ T7] usb 2-1: config 0 descriptor?? [ 97.448700][ T4191] attempt to access beyond end of device [ 97.448700][ T4191] loop3: rw=2049, want=45104, limit=40427 [ 97.542021][ T4972] loop4: detected capacity change from 0 to 512 [ 97.590281][ T4968] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.604776][ T4968] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.765758][ T4968] syz.2.274 (pid 4968) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 97.949476][ T7] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 97.964073][ T7] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 97.996094][ T7] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 98.257483][ T4978] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 98.289057][ T7] usb 2-1: USB disconnect, device number 5 [ 98.576716][ T5001] set_capacity_and_notify: 1 callbacks suppressed [ 98.576734][ T5001] loop0: detected capacity change from 0 to 1024 [ 98.642856][ T4191] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 98.749850][ T5001] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.869179][ T5001] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000001,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xffffff. Quota mode: none. [ 98.992998][ T5011] loop1: detected capacity change from 0 to 256 [ 99.107853][ T5011] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 99.448153][ T5019] loop0: detected capacity change from 0 to 512 [ 99.494867][ T5021] loop3: detected capacity change from 0 to 256 [ 99.546368][ T5019] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.292: iget: bad i_size value: 38620345925642 [ 99.554132][ T5021] exfat: Deprecated parameter 'utf8' [ 99.565376][ T5021] exfat: Deprecated parameter 'utf8' [ 99.569317][ T5015] loop1: detected capacity change from 0 to 8192 [ 99.583658][ T5021] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 99.602904][ T5024] loop2: detected capacity change from 0 to 256 [ 99.673290][ T5019] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.292: couldn't read orphan inode 15 (err -117) [ 99.683691][ T4998] loop4: detected capacity change from 0 to 40427 [ 99.701993][ T5019] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 99.729083][ T4998] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 99.758101][ T5024] FAT-fs (loop2): Directory bread(block 64) failed [ 99.763689][ T4998] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 99.766712][ T5015] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 99.779429][ T5019] EXT4-fs (loop0): shut down requested (2) [ 99.784738][ T4998] F2FS-fs (loop4): inline encryption not supported [ 99.806732][ T5024] FAT-fs (loop2): Directory bread(block 65) failed [ 99.816186][ T5024] FAT-fs (loop2): Directory bread(block 66) failed [ 99.825658][ T5024] FAT-fs (loop2): Directory bread(block 67) failed [ 99.832311][ T5024] FAT-fs (loop2): Directory bread(block 68) failed [ 99.843793][ T5015] REISERFS (device loop1): using ordered data mode [ 99.850358][ T5015] reiserfs: using flush barriers [ 99.851629][ T5024] FAT-fs (loop2): Directory bread(block 69) failed [ 99.864681][ T4998] F2FS-fs (loop4): invalid crc value [ 99.875622][ T5024] FAT-fs (loop2): Directory bread(block 70) failed [ 99.876280][ T4998] F2FS-fs (loop4): Found nat_bits in checkpoint [ 99.882306][ T5024] FAT-fs (loop2): Directory bread(block 71) failed [ 99.895217][ T5024] FAT-fs (loop2): Directory bread(block 72) failed [ 99.899379][ T5015] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.901898][ T5024] FAT-fs (loop2): Directory bread(block 73) failed [ 100.034093][ T5015] REISERFS (device loop1): checking transaction log (loop1) [ 100.086396][ T5015] REISERFS (device loop1): Using r5 hash to sort names [ 100.100571][ T5015] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 100.133097][ T4998] F2FS-fs (loop4): Start checkpoint disabled! [ 100.165043][ T4998] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 100.363202][ T5015] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 100.400087][ T5015] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 100.437689][ T5015] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 100.473310][ T5034] input: syz0 as /devices/virtual/input/input7 [ 100.506471][ T5035] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 100.511975][ T4998] F2FS-fs (loop4) : inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_page+0x1dd/0x8f0 [ 100.577164][ T5039] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 100.793617][ T4225] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.825830][ T4188] F2FS-fs (loop4): access invalid blkaddr:4043309056 [ 100.872629][ T4188] CPU: 0 PID: 4188 Comm: syz-executor Not tainted syzkaller #0 [ 100.880340][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 100.890424][ T4188] Call Trace: [ 100.893760][ T4188] [ 100.896820][ T4188] dump_stack_lvl+0x188/0x250 [ 100.901537][ T4188] ? show_regs_print_info+0x20/0x20 [ 100.906860][ T4188] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 100.912728][ T4188] f2fs_is_valid_blkaddr+0xc7e/0x1250 [ 100.918246][ T4188] f2fs_map_blocks+0xbcd/0x3300 [ 100.923185][ T4188] ? f2fs_force_buffered_io+0x680/0x680 [ 100.928802][ T4188] ? xa_load+0x276/0x2a0 [ 100.933090][ T4188] f2fs_mpage_readpages+0xc95/0x2260 [ 100.938564][ T4188] ? dquot_release_reservation_block+0xa0/0xa0 [ 100.944773][ T4188] ? f2fs_is_compress_backend_ready+0x99/0x120 [ 100.951077][ T4188] ? f2fs_readahead+0x163/0x2f0 [ 100.955962][ T4188] ? f2fs_set_data_page_dirty+0xad0/0xad0 [ 100.961729][ T4188] read_pages+0x175/0x930 [ 100.966110][ T4188] ? page_cache_ra_unbounded+0x940/0x940 [ 100.971807][ T4188] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 100.977305][ T4188] page_cache_ra_unbounded+0x838/0x940 [ 100.983112][ T4188] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 100.989679][ T4188] f2fs_readdir+0x496/0xda0 [ 100.994239][ T4188] ? f2fs_fill_dentries+0xd10/0xd10 [ 100.999484][ T4188] ? end_current_label_crit_section+0x14b/0x170 [ 101.005971][ T4188] ? iterate_dir+0x10d/0x560 [ 101.010606][ T4188] ? down_read_killable+0x1ce/0x340 [ 101.015837][ T4188] ? fsnotify_perm+0x254/0x560 [ 101.020824][ T4188] iterate_dir+0x218/0x560 [ 101.025272][ T4188] ? f2fs_fill_dentries+0xd10/0xd10 [ 101.030515][ T4188] __se_sys_getdents64+0xf2/0x270 [ 101.035583][ T4188] ? __x64_sys_getdents64+0x80/0x80 [ 101.040905][ T4188] ? filldir+0x720/0x720 [ 101.043649][ T4225] usb 3-1: Using ep0 maxpacket: 32 [ 101.045188][ T4188] ? vtime_user_exit+0x2c8/0x3e0 [ 101.055381][ T4188] ? lockdep_hardirqs_on+0x94/0x140 [ 101.060739][ T4188] do_syscall_64+0x4c/0xa0 [ 101.065401][ T4188] ? clear_bhb_loop+0x30/0x80 [ 101.070115][ T4188] ? clear_bhb_loop+0x30/0x80 [ 101.074941][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.080878][ T4188] RIP: 0033:0x7fe40f8181b3 [ 101.085329][ T4188] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 101.105167][ T4188] RSP: 002b:00007ffe9ba01448 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 101.113626][ T4188] RAX: ffffffffffffffda RBX: 0000555590deca30 RCX: 00007fe40f8181b3 [ 101.121631][ T4188] RDX: 0000000000008000 RSI: 0000555590deca60 RDI: 0000000000000005 [ 101.127256][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 101.129720][ T4188] RBP: 0000555590deca60 R08: 00007fe40fa3fe20 R09: 0000000000000001 [ 101.129739][ T4188] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555590deca34 [ 101.129752][ T4188] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffe9ba036f0 [ 101.161544][ T4188] [ 101.164624][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.167305][ T23] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.185031][ T4225] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 101.197788][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 101.209096][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.214633][ T4188] attempt to access beyond end of device [ 101.214633][ T4188] loop4: rw=524288, want=45072, limit=40427 [ 101.245790][ T4225] usb 3-1: config 0 descriptor?? [ 101.292626][ T4188] attempt to access beyond end of device [ 101.292626][ T4188] loop4: rw=0, want=45072, limit=40427 [ 101.305897][ T4225] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 101.392945][ T9] attempt to access beyond end of device [ 101.392945][ T9] loop4: rw=2049, want=40984, limit=40427 [ 101.738301][ T5059] loop0: detected capacity change from 0 to 32768 [ 101.775707][ T5059] XFS: attr2 mount option is deprecated. [ 101.848614][ T5059] XFS (loop0): Mounting V5 Filesystem [ 101.880001][ T5059] XFS (loop0): Ending clean mount [ 101.908234][ T5059] XFS (loop0): Quotacheck needed: Please wait. [ 101.981976][ T5059] XFS (loop0): Quotacheck: Done. [ 102.014337][ T26] audit: type=1800 audit(1776706257.818:20): pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.309" name="file2" dev="loop0" ino=4423 res=0 errno=0 [ 102.076636][ T4188] syz-executor (4188) used greatest stack depth: 20592 bytes left [ 102.207592][ T4184] XFS (loop0): Unmounting Filesystem [ 102.393804][ T4225] gspca_vc032x: reg_w err -71 [ 102.398552][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.409000][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.420837][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.438420][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.458654][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.482172][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.536218][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.563769][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.585931][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.615404][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.643905][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.659512][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.665145][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.671060][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.676858][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.682488][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.687914][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.694266][ T4225] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.699669][ T4225] gspca_vc032x: Unknown sensor... [ 102.709324][ T4225] vc032x: probe of 3-1:0.0 failed with error -22 [ 102.717461][ T4225] usb 3-1: USB disconnect, device number 4 [ 102.786550][ T5080] chnl_net:caif_netlink_parms(): no params data found [ 102.799517][ T5076] loop3: detected capacity change from 0 to 32768 [ 102.845942][ T26] audit: type=1326 audit(1776706258.648:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a57f9a819 code=0x7ffc0000 [ 102.868187][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.898876][ T26] audit: type=1326 audit(1776706258.648:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a57f9a819 code=0x7ffc0000 [ 102.917855][ T5076] XFS (loop3): Mounting V5 Filesystem [ 102.923433][ T26] audit: type=1326 audit(1776706258.648:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a57f9a819 code=0x7ffc0000 [ 102.948956][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.103114][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.161413][ T5076] XFS (loop3): Ending clean mount [ 103.169541][ T26] audit: type=1326 audit(1776706258.668:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0a57f9a819 code=0x7ffc0000 [ 103.195197][ T5080] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.204591][ T5080] device bridge_slave_0 entered promiscuous mode [ 103.226294][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.232657][ T5087] loop0: detected capacity change from 0 to 32768 [ 103.247761][ T5080] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.275549][ T5080] device bridge_slave_1 entered promiscuous mode [ 103.303781][ T26] audit: type=1326 audit(1776706258.678:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a57f9a819 code=0x7ffc0000 [ 103.327433][ T5076] XFS (loop3): User initiated shutdown received. [ 103.363808][ T26] audit: type=1326 audit(1776706258.698:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a57f9a819 code=0x7ffc0000 [ 103.376281][ T5080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.386033][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.390561][ T26] audit: type=1326 audit(1776706258.698:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a57f9a819 code=0x7ffc0000 [ 103.417513][ T5076] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 103.443727][ T5076] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 103.486801][ T5080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.491851][ T26] audit: type=1326 audit(1776706258.698:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a57f9a819 code=0x7ffc0000 [ 103.522880][ T5087] attempt to access beyond end of device [ 103.522880][ T5087] loop0: rw=1, want=4680040, limit=32768 [ 103.528275][ T26] audit: type=1326 audit(1776706258.698:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0a57f9a819 code=0x7ffc0000 [ 103.579556][ T5080] team0: Port device team_slave_0 added [ 103.587983][ T5080] team0: Port device team_slave_1 added [ 103.590147][ T5087] metapage_write_end_io: I/O error [ 103.608822][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.615855][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.632191][ T5087] blkno = 8ed2c, nblocks = 1 [ 103.641992][ T278] blkno = 8ed2c, nblocks = 1 [ 103.654052][ T278] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 103.654052][ T278] [ 103.664851][ T5080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.682806][ T278] ERROR: (device loop0): remounting filesystem as read-only [ 103.683715][ T4191] XFS (loop3): Unmounting Filesystem [ 103.706273][ T5087] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 103.706273][ T5087] [ 103.741569][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.765372][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.803964][ T5087] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 103.803964][ T5087] [ 103.835154][ T5087] jfs_mkdir: dtSearch returned -5 [ 103.842500][ T5080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.965479][ T5087] ERROR: (device loop0): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 103.965479][ T5087] [ 103.999874][ T5087] jfs_readdir: unexpected rc = -5 from dtReadNext [ 104.002949][ T5080] device hsr_slave_0 entered promiscuous mode [ 104.071826][ T5080] device hsr_slave_1 entered promiscuous mode [ 104.084287][ T5080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.109981][ T4184] attempt to access beyond end of device [ 104.109981][ T4184] loop0: rw=1, want=4680040, limit=32768 [ 104.113598][ T5080] Cannot create hsr debugfs directory [ 104.173780][ T4184] metapage_write_end_io: I/O error [ 104.180483][ T4184] JFS: metapage_get_blocks failed [ 104.186101][ T4184] JFS: metapage_get_blocks failed [ 104.191171][ T4184] JFS: metapage_get_blocks failed [ 104.215560][ T4184] JFS: metapage_get_blocks failed [ 104.363400][ T5110] loop2: detected capacity change from 0 to 32768 [ 104.422273][ T5110] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.320 (5110) [ 104.525536][ T5110] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 104.535808][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 104.556426][ T5080] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.578450][ T5110] BTRFS info (device loop2): force clearing of disk cache [ 104.587277][ T5110] BTRFS info (device loop2): enabling auto defrag [ 104.596673][ T5080] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.613870][ T5110] BTRFS info (device loop2): max_inline at 727 [ 104.626694][ T5110] BTRFS info (device loop2): enabling disk space caching [ 104.636742][ T5080] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.658262][ T5110] BTRFS info (device loop2): disk space caching is enabled [ 104.667582][ T5080] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.685641][ T5110] BTRFS info (device loop2): has skinny extents [ 104.969410][ T5080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.988930][ T5080] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.001574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.021628][ T5110] BTRFS info (device loop2): enabling ssd optimizations [ 105.035005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.052422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.080442][ T5110] BTRFS info (device loop2): clearing free space tree [ 105.105172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.109545][ T5110] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.127138][ T5110] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 105.152005][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.159282][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.174562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.218788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.232904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.259448][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.266624][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.295503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.327728][ T5160] netlink: 'syz.0.331': attribute type 39 has an invalid length. [ 105.390823][ T3066] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 105.439879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.471235][ T5110] syz.2.320 (5110) used greatest stack depth: 19960 bytes left [ 105.480309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.522807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.532184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.575005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.609197][ T5165] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 105.609197][ T5165] The task syz.3.332 (5165) triggered the difference, watch for misbehavior. [ 105.630286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.640278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.675094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.695022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.720968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.732419][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.011364][ T5175] loop1: detected capacity change from 0 to 1024 [ 106.044226][ T5176] loop0: detected capacity change from 0 to 2048 [ 106.069531][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.102929][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.144606][ T5080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.163333][ T5175] EXT4-fs (loop1): Ignoring removed bh option [ 106.208848][ T5176] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 106.248592][ T5175] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #3: block 1: comm syz.1.335: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.334909][ T5175] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.335: Failed to acquire dquot type 0 [ 106.379903][ T5175] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.335: Freeing blocks not in datazone - block = 0, count = 4096 [ 106.449515][ T5175] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.335: Invalid inode bitmap blk 0 in block_group 0 [ 106.466431][ T3066] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.498739][ T5175] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 106.527585][ T3066] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0 [ 106.534093][ T5175] EXT4-fs (loop1): 1 orphan inode deleted [ 106.580414][ T5175] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; delalloc,dioread_lock,bh,nodiscard,nouid32,barrier,,errors=continue. Quota mode: writeback. [ 106.637333][ T5185] Bluetooth: hci1: command 0x041b tx timeout [ 106.653916][ T5080] device veth0_vlan entered promiscuous mode [ 106.666050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.733377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.734688][ T5205] syz.0.337 sent an empty control message without MSG_MORE. [ 106.770291][ T5175] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm syz.1.335: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.790868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.799281][ T5175] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.335: Failed to acquire dquot type 0 [ 106.814700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.860905][ T5080] device veth1_vlan entered promiscuous mode [ 106.882069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.915360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.924905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.961540][ T9] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.971028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.988967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.992268][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:0: Failed to release dquot type 0 [ 107.011140][ T5212] loop2: detected capacity change from 0 to 2048 [ 107.025062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.040163][ T5080] device veth0_macvtap entered promiscuous mode [ 107.060214][ T5080] device veth1_macvtap entered promiscuous mode [ 107.149746][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.164451][ T5212] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.192484][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.202654][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.207886][ T5212] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.219421][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.234481][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.238085][ T5219] capability: warning: `syz.3.343' uses deprecated v2 capabilities in a way that may be insecure [ 107.245548][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.274584][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.285235][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.295307][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.305901][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.326839][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.343228][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.364799][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.389438][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.404057][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.418611][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.432006][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.443035][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.453278][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.483066][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.504441][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.521862][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.532225][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.544086][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.582008][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.597409][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.630280][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.680553][ T5228] loop0: detected capacity change from 0 to 64 [ 107.691438][ T5080] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.693941][ T21] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.711711][ T5080] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.752490][ T21] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.759189][ T5080] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.822266][ T5080] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.895418][ T5235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.351'. [ 108.172822][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.202508][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.284834][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.329205][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.363501][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.392084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.557887][ T5253] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.566467][ T5254] binder: 5251:5254 ioctl 4018620d 0 returned -22 [ 108.697948][ T5260] loop5: detected capacity change from 0 to 256 [ 108.704459][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 108.777427][ T5265] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.826550][ T5260] FAT-fs (loop5): Directory bread(block 64) failed [ 108.854008][ T5260] FAT-fs (loop5): Directory bread(block 65) failed [ 108.860808][ T5260] FAT-fs (loop5): Directory bread(block 66) failed [ 108.878333][ T5260] FAT-fs (loop5): Directory bread(block 67) failed [ 108.888822][ T5260] FAT-fs (loop5): Directory bread(block 68) failed [ 108.900941][ T5260] FAT-fs (loop5): Directory bread(block 69) failed [ 108.912789][ T5260] FAT-fs (loop5): Directory bread(block 70) failed [ 108.921569][ T5260] FAT-fs (loop5): Directory bread(block 71) failed [ 108.974300][ T5260] FAT-fs (loop5): Directory bread(block 72) failed [ 108.996799][ T5260] FAT-fs (loop5): Directory bread(block 73) failed [ 109.113696][ T4225] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.484569][ T4225] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 109.507957][ T4225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.541730][ T4225] usb 2-1: config 0 descriptor?? [ 109.615266][ T4225] cp210x 2-1:0.0: cp210x converter detected [ 109.838172][ T4225] usb 2-1: cp210x converter now attached to ttyUSB0 [ 109.855937][ T5303] device syzkaller1 entered promiscuous mode [ 110.050465][ T5185] usb 2-1: USB disconnect, device number 6 [ 110.084576][ T5185] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 110.112040][ T5185] cp210x 2-1:0.0: device disconnected [ 110.153787][ T4227] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 110.252331][ T5317] netlink: 72 bytes leftover after parsing attributes in process `syz.3.384'. [ 110.433710][ T4227] usb 6-1: Using ep0 maxpacket: 16 [ 110.528207][ T5332] netlink: 32 bytes leftover after parsing attributes in process `syz.2.391'. [ 110.554869][ T5329] UBIFS error (pid: 5329): cannot open "./file0", error -22 [ 110.571240][ T4227] usb 6-1: config 251 has an invalid interface number: 202 but max is 0 [ 110.595244][ T4227] usb 6-1: config 251 has no interface number 0 [ 110.601656][ T4227] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.660446][ T4227] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 110.701122][ T4227] usb 6-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 110.754154][ T4227] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 110.801985][ T4227] usb 6-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 110.840862][ T4227] usb 6-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.916083][ T4227] usb 6-1: config 251 interface 202 has no altsetting 0 [ 110.926623][ T5185] Bluetooth: hci1: command 0x0419 tx timeout [ 111.054463][ T4227] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 111.075905][ T4227] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 111.089779][ T4227] usb 6-1: Product: syz [ 111.102525][ T4227] usb 6-1: SerialNumber: syz [ 111.169006][ T5353] loop2: detected capacity change from 0 to 8192 [ 111.200312][ T5353] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 111.215222][ T5353] REISERFS (device loop2): using ordered data mode [ 111.222847][ T5353] reiserfs: using flush barriers [ 111.232089][ T5353] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 111.267884][ T5353] REISERFS (device loop2): checking transaction log (loop2) [ 111.348342][ T5363] loop0: detected capacity change from 0 to 764 [ 111.453858][ T4227] cxacru 6-1:251.202: usbatm_usb_probe: bind failed: -19! [ 111.515177][ T4227] usb 6-1: USB disconnect, device number 2 [ 111.601546][ T5353] REISERFS (device loop2): Using tea hash to sort names [ 111.623004][ T5353] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 111.969911][ T5373] loop1: detected capacity change from 0 to 512 [ 112.178676][ T5381] loop5: detected capacity change from 0 to 256 [ 112.193825][ T5373] EXT4-fs (loop1): 1 truncate cleaned up [ 112.201817][ T5373] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 112.285217][ T5381] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.544336][ T5390] loop0: detected capacity change from 0 to 512 [ 112.591191][ T5392] loop1: detected capacity change from 0 to 512 [ 112.777493][ T5392] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.416: inode has both inline data and extents flags [ 112.822607][ T5392] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.416: couldn't read orphan inode 15 (err -117) [ 112.862095][ T5392] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.068789][ T5407] loop2: detected capacity change from 0 to 2048 [ 113.189730][ T5407] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,inode_readahead_blks=0x0000000000000800,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 113.480728][ T5424] loop1: detected capacity change from 0 to 256 [ 113.521545][ T3066] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 113.559327][ T3066] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 113.582460][ T3066] EXT4-fs (loop2): This should not happen!! Data will be lost [ 113.582460][ T3066] [ 113.593223][ T5424] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.605999][ T3066] EXT4-fs (loop2): Total free blocks count 0 [ 113.652182][ T3066] EXT4-fs (loop2): Free/Dirty block details [ 113.663902][ T3066] EXT4-fs (loop2): free_blocks=2415919504 [ 113.669739][ T3066] EXT4-fs (loop2): dirty_blocks=16 [ 113.699441][ T3066] EXT4-fs (loop2): Block reservation details [ 113.713807][ T3066] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 113.762345][ T5420] loop5: detected capacity change from 0 to 40427 [ 113.841794][ T5420] F2FS-fs (loop5): Found nat_bits in checkpoint [ 114.004934][ T5420] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 114.072580][ T5420] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 114.364091][ T5080] attempt to access beyond end of device [ 114.364091][ T5080] loop5: rw=2049, want=45104, limit=40427 [ 114.576433][ T4227] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 114.644417][ T4227] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.844844][ T5426] loop0: detected capacity change from 0 to 32768 [ 115.022502][ T5426] JBD2: Ignoring recovery information on journal [ 115.164630][ T5426] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 115.216351][ T5440] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 115.223402][ T5440] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 115.233121][ T5440] F2FS-fs (loop3): invalid crc value [ 115.304981][ T5440] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.363876][ T5440] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 115.370983][ T5440] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 115.469617][ T5457] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 115.577708][ T5440] F2FS-fs (loop3): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0 [ 116.242973][ T5474] set_capacity_and_notify: 2 callbacks suppressed [ 116.242991][ T5474] loop5: detected capacity change from 0 to 1024 [ 116.600766][ T4244] hfsplus: b-tree write err: -5, ino 25 [ 116.607183][ T4244] hfsplus: b-tree write err: -5, ino 4 [ 116.634070][ T4244] hfsplus: b-tree write err: -5, ino 2 [ 116.639898][ T4244] hfsplus: b-tree write err: -5, ino 26 [ 116.650774][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 116.841168][ T1108] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.905191][ T5483] netlink: 136 bytes leftover after parsing attributes in process `syz.3.444'. [ 116.931646][ T5483] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 117.122693][ T5476] loop2: detected capacity change from 0 to 32768 [ 117.181535][ T5476] (syz.2.450,5476,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.203947][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.216861][ T5476] (syz.2.450,5476,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.227086][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.297149][ T5476] JBD2: Ignoring recovery information on journal [ 117.301243][ T5488] loop5: detected capacity change from 0 to 4096 [ 117.310524][ T5185] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.343828][ T1108] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 117.363431][ T1108] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 117.381431][ T1108] usb 2-1: Manufacturer: syz [ 117.397583][ T1108] usb 2-1: config 0 descriptor?? [ 117.423779][ T5490] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.491921][ T5476] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 117.721942][ T5185] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.756681][ T5185] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.773858][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 117.781275][ T5185] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 117.793338][ T5185] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.808604][ T5185] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 118.013854][ T5185] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.023049][ T5185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.056686][ T5185] usb 1-1: Product: syz [ 118.060905][ T5185] usb 1-1: Manufacturer: syz [ 118.082636][ T5185] usb 1-1: SerialNumber: syz [ 118.318924][ T1108] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000B/input/input8 [ 118.393952][ T5512] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 118.421701][ T1108] input: syz Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000B/input/input9 [ 118.441648][ T5512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.474620][ T1108] uclogic 0003:256C:006D.000B: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 118.522469][ T1108] usb 2-1: USB disconnect, device number 7 [ 118.596329][ T5497] loop5: detected capacity change from 0 to 32768 [ 118.668212][ T5515] fido_id[5515]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 118.694165][ T26] kauditd_printk_skb: 109 callbacks suppressed [ 118.694181][ T26] audit: type=1800 audit(1776706274.498:133): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.457" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 119.086363][ T5530] sctp: [Deprecated]: syz.2.471 (pid 5530) Use of int in max_burst socket option deprecated. [ 119.086363][ T5530] Use struct sctp_assoc_value instead [ 119.243840][ T5185] cdc_ncm 1-1:1.0: bind() failure [ 119.257439][ T5185] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 119.276001][ T5185] cdc_ncm 1-1:1.1: bind() failure [ 119.481690][ T5185] usb 1-1: USB disconnect, device number 6 [ 119.534057][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.476'. [ 120.125568][ T5575] loop0: detected capacity change from 0 to 256 [ 120.185812][ T5575] exfat: Deprecated parameter 'utf8' [ 120.209488][ T5575] exfat: Deprecated parameter 'utf8' [ 120.243815][ T5185] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.263176][ T5575] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 120.514817][ T5185] usb 4-1: Using ep0 maxpacket: 32 [ 120.624078][ T5597] loop1: detected capacity change from 0 to 256 [ 120.649939][ T5185] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 120.660904][ T5185] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 120.675992][ T5597] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.679310][ T5185] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 120.713387][ T5185] usb 4-1: config 1 has no interface number 0 [ 120.720838][ T5185] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.732920][ T5185] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 120.747122][ T5185] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 120.764080][ T5185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.827324][ T5185] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 120.870030][ T5606] loop5: detected capacity change from 0 to 256 [ 120.897317][ T1108] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 120.934244][ T5606] exfat: Deprecated parameter 'utf8' [ 120.939844][ T5606] exfat: Deprecated parameter 'utf8' [ 120.994928][ T5606] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 121.045994][ T5185] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 121.158920][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 121.283739][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.294276][ T1108] usb 1-1: config 0 has no interfaces? [ 121.299787][ T1108] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 121.309143][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.319585][ T1108] usb 1-1: config 0 descriptor?? [ 121.553798][ T5185] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 121.611160][ T1108] usb 1-1: USB disconnect, device number 7 [ 121.833936][ T5185] usb 6-1: Using ep0 maxpacket: 8 [ 121.962442][ T5621] loop2: detected capacity change from 0 to 32768 [ 121.984435][ T5185] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.999896][ T5185] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 122.011898][ T5185] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.027993][ T5185] usb 6-1: config 0 descriptor?? [ 122.031047][ T5621] XFS (loop2): Mounting V5 Filesystem [ 122.045391][ T5620] loop1: detected capacity change from 0 to 40427 [ 122.056111][ T4227] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 122.088446][ T5185] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 122.092775][ T5621] XFS (loop2): Ending clean mount [ 122.113859][ T5620] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 122.148718][ T5621] XFS (loop2): Quotacheck needed: Please wait. [ 122.164272][ T5620] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 122.211776][ T5621] XFS (loop2): Quotacheck: Done. [ 122.229188][ T5620] F2FS-fs (loop1): invalid crc value [ 122.238093][ T5620] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.309528][ T5620] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 122.319799][ T5620] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 122.371536][ T26] audit: type=1800 audit(1776706278.168:134): pid=5620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.511" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 122.377058][ T5620] attempt to access beyond end of device [ 122.377058][ T5620] loop1: rw=34817, want=77952, limit=40427 [ 122.493758][ T5620] attempt to access beyond end of device [ 122.493758][ T5620] loop1: rw=0, want=77896, limit=40427 [ 122.552945][ T4190] XFS (loop2): Unmounting Filesystem [ 122.602796][ T5641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'. [ 122.731398][ T5643] loop0: detected capacity change from 0 to 64 [ 122.976488][ T5189] usb 4-1: USB disconnect, device number 3 [ 122.985100][ T5189] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 123.168808][ T5653] loop1: detected capacity change from 0 to 256 [ 123.275024][ T5653] FAT-fs (loop1): Directory bread(block 64) failed [ 123.310935][ T5653] FAT-fs (loop1): Directory bread(block 65) failed [ 123.319939][ T5653] FAT-fs (loop1): Directory bread(block 66) failed [ 123.340899][ T5653] FAT-fs (loop1): Directory bread(block 67) failed [ 123.373922][ T5653] FAT-fs (loop1): Directory bread(block 68) failed [ 123.381819][ T5653] FAT-fs (loop1): Directory bread(block 69) failed [ 123.393754][ T5185] gspca_vc032x: reg_w err -71 [ 123.398678][ T5185] vc032x: probe of 6-1:0.0 failed with error -71 [ 123.417867][ T5653] FAT-fs (loop1): Directory bread(block 70) failed [ 123.433593][ T5185] usb 6-1: USB disconnect, device number 3 [ 123.436806][ T5653] FAT-fs (loop1): Directory bread(block 71) failed [ 123.470717][ T5653] FAT-fs (loop1): Directory bread(block 72) failed [ 123.520442][ T5660] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 123.524196][ T5653] FAT-fs (loop1): Directory bread(block 73) failed [ 123.551532][ T5656] loop0: detected capacity change from 0 to 4096 [ 123.648011][ T5656] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 123.787896][ T154] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 123.803737][ T5645] loop3: detected capacity change from 0 to 32768 [ 123.827103][ T4184] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 123.833944][ T4184] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 123.841324][ T4184] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 123.866929][ T4246] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 123.874205][ T4184] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 123.903122][ T5645] XFS (loop3): Mounting V5 Filesystem [ 124.074094][ T5645] XFS (loop3): Ending clean mount [ 124.081740][ T5645] XFS (loop3): Quotacheck needed: Please wait. [ 124.178829][ T5645] XFS (loop3): Quotacheck: Done. [ 124.332517][ T4191] XFS (loop3): Unmounting Filesystem [ 125.054689][ T5714] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.541'. [ 125.140153][ T26] audit: type=1326 audit(1776706280.938:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe509960819 code=0x7ffc0000 [ 125.241464][ T26] audit: type=1326 audit(1776706280.938:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe509960819 code=0x7ffc0000 [ 125.284367][ T5722] loop2: detected capacity change from 0 to 512 [ 125.312850][ T26] audit: type=1326 audit(1776706280.968:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe509960819 code=0x7ffc0000 [ 125.343043][ T26] audit: type=1326 audit(1776706280.968:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe509960819 code=0x7ffc0000 [ 125.406916][ T5722] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.423918][ T5722] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.483599][ T5189] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 125.497396][ T26] audit: type=1326 audit(1776706280.968:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe509960819 code=0x7ffc0000 [ 125.567766][ T5722] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.545: corrupted xattr block 33 [ 125.638847][ T26] audit: type=1326 audit(1776706280.988:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fe509960819 code=0x7ffc0000 [ 125.672007][ T26] audit: type=1326 audit(1776706280.988:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe509960819 code=0x7ffc0000 [ 125.713670][ T26] audit: type=1326 audit(1776706280.988:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe509960819 code=0x7ffc0000 [ 125.766529][ T26] audit: type=1326 audit(1776706280.988:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe509960819 code=0x7ffc0000 [ 125.793704][ T5189] usb 6-1: Using ep0 maxpacket: 8 [ 125.859160][ T26] audit: type=1326 audit(1776706280.988:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe509960819 code=0x7ffc0000 [ 125.862113][ T5736] loop1: detected capacity change from 0 to 512 [ 125.943719][ T5189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.985586][ T5189] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 126.015941][ T5189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.028914][ T5736] EXT4-fs (loop1): inline encryption not supported [ 126.052519][ T5189] usb 6-1: config 0 descriptor?? [ 126.063938][ T5736] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.141043][ T5736] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 126.149895][ T5736] System zones: 1-12 [ 126.164123][ T5736] EXT4-fs (loop1): 1 truncate cleaned up [ 126.169808][ T5736] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,inlinecrypt,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 126.225369][ T5746] loop3: detected capacity change from 0 to 2048 [ 126.243283][ T5753] loop2: detected capacity change from 0 to 512 [ 126.306187][ T5753] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.331412][ T5746] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 126.345458][ T5189] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 126.372937][ T4347] udevd[4347]: incorrect nilfs2 checksum on /dev/loop3 [ 126.387744][ T5753] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 126.495434][ T5761] bond0: (slave bond_slave_1): Releasing backup interface [ 126.503005][ T5753] EXT4-fs (loop2): 1 truncate cleaned up [ 126.519378][ T5764] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.577914][ T5753] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 126.832714][ T4225] usb 6-1: USB disconnect, device number 4 [ 127.193739][ T5787] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004 [ 127.330757][ T5794] set_capacity_and_notify: 1 callbacks suppressed [ 127.330773][ T5794] loop2: detected capacity change from 0 to 1024 [ 127.498110][ T5794] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,noblock_validity,auto_da_alloc,auto_da_alloc=0x0000000000000005,,errors=continue. Quota mode: none. [ 127.520994][ T5794] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.186392][ T5792] loop1: detected capacity change from 0 to 32768 [ 128.263834][ T4225] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.279719][ T5792] XFS (loop1): Mounting V5 Filesystem [ 128.452916][ T5792] XFS (loop1): Ending clean mount [ 128.535764][ T5798] loop5: detected capacity change from 0 to 40427 [ 128.573843][ T5798] F2FS-fs (loop5): Invalid log_blocksize (64), supports only 12 [ 128.581543][ T5798] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 128.633835][ T4225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 128.649688][ T5806] loop3: detected capacity change from 0 to 32768 [ 128.651834][ T4225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 128.668400][ T5798] F2FS-fs (loop5): invalid crc value [ 128.676791][ T4193] XFS (loop1): Unmounting Filesystem [ 128.686153][ T4225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 128.697501][ T4225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 128.773320][ T5798] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 128.875642][ T4225] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 128.906656][ T5798] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 128.914851][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.922990][ T4225] usb 3-1: Product: syz [ 128.927534][ T5798] F2FS-fs (loop5): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 128.941057][ T4225] usb 3-1: Manufacturer: syz [ 128.953836][ T4225] usb 3-1: SerialNumber: syz [ 128.961696][ T5806] XFS (loop3): Mounting V5 Filesystem [ 128.979253][ T4225] usb 3-1: config 0 descriptor?? [ 129.237167][ T5806] XFS (loop3): Ending clean mount [ 129.246906][ T4225] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 129.279864][ T5837] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 129.280058][ T5806] XFS (loop3): Quotacheck needed: Please wait. [ 129.445458][ T5806] XFS (loop3): Quotacheck: Done. [ 129.562299][ T4225] usb 3-1: USB disconnect, device number 5 [ 129.734230][ T4191] XFS (loop3): Unmounting Filesystem [ 129.743389][ T5798] overlayfs: invalid origin (0000) [ 130.005932][ T5855] netlink: 'syz.5.593': attribute type 3 has an invalid length. [ 130.177526][ T5860] "syz.2.597" (5860) uses obsolete ecb(arc4) skcipher [ 130.349242][ T5867] loop2: detected capacity change from 0 to 2048 [ 130.475259][ T5867] NILFS (loop2): corrupt root inode [ 130.587283][ T5867] loop2: detected capacity change from 0 to 1024 [ 130.645080][ T5867] hfsplus: unable to parse mount options [ 131.290375][ T5902] loop5: detected capacity change from 0 to 16 [ 131.349652][ T5902] erofs: (device loop5): mounted with root inode @ nid 36. [ 132.088175][ T5914] loop3: detected capacity change from 0 to 256 [ 132.233641][ T4194] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.249756][ T5914] FAT-fs (loop3): codepage cp9 not found [ 132.483809][ T4194] usb 3-1: Using ep0 maxpacket: 16 [ 132.552561][ T5902] attempt to access beyond end of device [ 132.552561][ T5902] loop5: rw=0, want=34359738368, limit=16 [ 132.604080][ T4194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.622395][ T4194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.659030][ T4194] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 132.711501][ T4194] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 132.747569][ T4194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.845624][ T4194] usb 3-1: config 0 descriptor?? [ 132.850085][ T5926] loop1: detected capacity change from 0 to 512 [ 132.907174][ T5926] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.936179][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.942554][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.978833][ T5926] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.624: inode has both inline data and extents flags [ 132.983995][ T5928] loop5: detected capacity change from 0 to 512 [ 132.998161][ T5926] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.624: couldn't read orphan inode 15 (err -117) [ 133.018246][ T5926] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,block_validity,debug_want_extra_isize=0x0000000000000068,usrjquota=,resuid=0x0000000000000000,lazytime,noblock_validity,usrquota,,errors=continue. Quota mode: writeback. [ 133.284243][ T5928] EXT4-fs (loop5): Test dummy encryption mode enabled [ 133.311834][ T5928] EXT4-fs (loop5): Ignoring removed bh option [ 133.331821][ T5928] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 133.341159][ T4194] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000C/input/input10 [ 133.405217][ T5928] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.625: inode has both inline data and extents flags [ 133.430818][ T5928] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.625: couldn't read orphan inode 15 (err -117) [ 133.437908][ T4194] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 133.446300][ T5928] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,init_itable=0x0000000000000001,test_dummy_encryption,nouid32,max_dir_size_kb=0x0000000000000003,bh,data=journal,,errors=continue. Quota mode: none. [ 133.561655][ T4194] usb 3-1: USB disconnect, device number 6 [ 133.802809][ T5956] fido_id[5956]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 133.903702][ T5928] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 133.966946][ T5967] loop3: detected capacity change from 0 to 2048 [ 134.050024][ T5947] loop1: detected capacity change from 0 to 32768 [ 134.105546][ T5967] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 134.164921][ T5967] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 134.192429][ T5967] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 134.207236][ T5967] UDF-fs: Scanning with blocksize 512 failed [ 134.238245][ T5967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.265153][ T5947] UFO tlock:0xffffc900028f2090 [ 134.283009][ T5947] MetaData crosses page boundary!! [ 134.304095][ T5947] lblock = 6300000010, size = -820051968 [ 134.321588][ T5947] CPU: 0 PID: 5947 Comm: syz.1.631 Not tainted syzkaller #0 [ 134.328948][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 134.339127][ T5947] Call Trace: [ 134.342437][ T5947] [ 134.345397][ T5947] dump_stack_lvl+0x188/0x250 [ 134.350190][ T5947] ? show_regs_print_info+0x20/0x20 [ 134.355442][ T5947] ? load_image+0x400/0x400 [ 134.359978][ T5947] ? unlock_page+0x17c/0x1f0 [ 134.364606][ T5947] ? release_metapage+0x2f7/0xe10 [ 134.369670][ T5947] ? unlock_page+0x17c/0x1f0 [ 134.374391][ T5947] __get_metapage+0xbfa/0x1060 [ 134.379209][ T5947] dtReadFirst+0xd5/0x8f0 [ 134.383594][ T5947] jfs_readdir+0x97e/0x3cf0 [ 134.388236][ T5947] ? __lock_acquire+0x7d10/0x7d10 [ 134.393418][ T5947] ? dtInitRoot+0x660/0x660 [ 134.398061][ T5947] ? end_current_label_crit_section+0x14b/0x170 [ 134.404519][ T5947] ? common_file_perm+0x171/0x1c0 [ 134.409590][ T5947] iterate_dir+0x218/0x560 [ 134.414048][ T5947] __se_sys_getdents64+0xf2/0x270 [ 134.419113][ T5947] ? __x64_sys_getdents64+0x80/0x80 [ 134.424354][ T5947] ? filldir+0x720/0x720 [ 134.429066][ T5947] ? vtime_user_exit+0x2c8/0x3e0 [ 134.434051][ T5947] ? lockdep_hardirqs_on+0x94/0x140 [ 134.439289][ T5947] do_syscall_64+0x4c/0xa0 [ 134.443741][ T5947] ? clear_bhb_loop+0x30/0x80 [ 134.448449][ T5947] ? clear_bhb_loop+0x30/0x80 [ 134.453162][ T5947] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.459124][ T5947] RIP: 0033:0x7f0a57f9a819 [ 134.463570][ T5947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.483386][ T5947] RSP: 002b:00007f0a561f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 134.491847][ T5947] RAX: ffffffffffffffda RBX: 00007f0a58213fa0 RCX: 00007f0a57f9a819 [ 134.499853][ T5947] RDX: 00000000000000e0 RSI: 0000200000000fc0 RDI: 0000000000000004 [ 134.507854][ T5947] RBP: 00007f0a58030c91 R08: 0000000000000000 R09: 0000000000000000 [ 134.515864][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.523882][ T5947] R13: 00007f0a58214038 R14: 00007f0a58213fa0 R15: 00007ffc395330d8 [ 134.531917][ T5947] [ 134.534195][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 134.534211][ T26] audit: type=1800 audit(1776706290.308:207): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.637" name="file1" dev="loop3" ino=838 res=0 errno=0 [ 134.623833][ T5947] bread failed! [ 134.629030][ T5947] jfs_readdir: unexpected rc = -5 from dtReadNext [ 134.749050][ T277] general protection fault, probably for non-canonical address 0xfbd59c0000000021: 0000 [#1] PREEMPT SMP KASAN [ 134.760822][ T277] KASAN: maybe wild-memory-access in range [0xdead000000000108-0xdead00000000010f] [ 134.770120][ T277] CPU: 0 PID: 277 Comm: jfsCommit Not tainted syzkaller #0 [ 134.777344][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 134.787510][ T277] RIP: 0010:__list_add_valid+0x39/0xe0 [ 134.792994][ T277] Code: 00 00 00 48 89 d3 48 85 d2 0f 84 8c 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 78 fc d5 fd 49 8b 14 24 4c 39 f2 [ 134.812613][ T277] RSP: 0018:ffffc900026bfbd0 EFLAGS: 00010806 [ 134.818711][ T277] RAX: 1bd5a00000000021 RBX: dead000000000100 RCX: ffff88801e3f0000 [ 134.826698][ T277] RDX: dead000000000100 RSI: ffffc900026d1230 RDI: ffff8880570794e8 [ 134.834712][ T277] RBP: ffff88802a68b21c R08: 0000000000000003 R09: 0000000000000004 [ 134.842965][ T277] R10: dffffc0000000000 R11: fffff520004d7f5c R12: dead000000000108 [ 134.850969][ T277] R13: dffffc0000000000 R14: ffffc900026d1230 R15: ffff8880570794e8 [ 134.858965][ T277] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 134.868082][ T277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.874669][ T277] CR2: 0000555574aeda28 CR3: 000000002a3e9000 CR4: 00000000003506f0 [ 134.882647][ T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 134.890622][ T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 134.898592][ T277] Call Trace: [ 134.901882][ T277] [ 134.904811][ T277] dbUpdatePMap+0x6da/0xdb0 [ 134.909598][ T277] txAllocPMap+0x57d/0x6b0 [ 134.914032][ T277] txUpdateMap+0x706/0x890 [ 134.918448][ T277] jfs_lazycommit+0x435/0xb40 [ 134.923129][ T277] ? txFreelock+0x5a0/0x5a0 [ 134.927633][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 134.933616][ T277] ? sched_dynamic_update+0x210/0x210 [ 134.938990][ T277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 134.944976][ T277] ? __kthread_parkme+0x157/0x1b0 [ 134.950004][ T277] kthread+0x436/0x520 [ 134.954074][ T277] ? txFreelock+0x5a0/0x5a0 [ 134.958577][ T277] ? kthread_blkcg+0xd0/0xd0 [ 134.963174][ T277] ret_from_fork+0x1f/0x30 [ 134.967602][ T277] [ 134.970630][ T277] Modules linked in: [ 134.974560][ T277] ---[ end trace f790cd01c8e23388 ]--- [ 134.980105][ T277] RIP: 0010:__list_add_valid+0x39/0xe0 [ 134.985566][ T277] Code: 00 00 00 48 89 d3 48 85 d2 0f 84 8c 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 78 fc d5 fd 49 8b 14 24 4c 39 f2 [ 135.005263][ T277] RSP: 0018:ffffc900026bfbd0 EFLAGS: 00010806 [ 135.011340][ T277] RAX: 1bd5a00000000021 RBX: dead000000000100 RCX: ffff88801e3f0000 [ 135.019339][ T277] RDX: dead000000000100 RSI: ffffc900026d1230 RDI: ffff8880570794e8 [ 135.027408][ T277] RBP: ffff88802a68b21c R08: 0000000000000003 R09: 0000000000000004 [ 135.035382][ T277] R10: dffffc0000000000 R11: fffff520004d7f5c R12: dead000000000108 [ 135.043558][ T277] R13: dffffc0000000000 R14: ffffc900026d1230 R15: ffff8880570794e8 [ 135.051549][ T277] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 135.060490][ T277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.067076][ T277] CR2: 0000555574aeda28 CR3: 000000002a3e9000 CR4: 00000000003506f0 [ 135.075140][ T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 135.083149][ T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 135.091308][ T277] Kernel panic - not syncing: Fatal exception [ 135.098810][ T277] Kernel Offset: disabled [ 135.103132][ T277] Rebooting in 86400 seconds..