last executing test programs: 1m3.177546557s ago: executing program 2 (id=688): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000b40)={0x0, 0x4, 0xea}) 1m2.997040945s ago: executing program 2 (id=690): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) readv(r0, &(0x7f0000002540)=[{&(0x7f0000000280)=""/34, 0x22}, {0x0, 0x18}], 0x2) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000009, 0x11, r0, 0x0) 1m2.317542516s ago: executing program 2 (id=697): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$tipc(r0, 0x0, 0x0) 1m2.106376754s ago: executing program 2 (id=700): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x1, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m1.599828977s ago: executing program 2 (id=704): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "e68a6863"}, @local=@item_4={0x3, 0x2, 0x1, "91ffea6c"}]}}, 0x0}, 0x0) 1m1.013841354s ago: executing program 2 (id=708): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x48) r1 = socket$inet6(0xa, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000180)=@udp6=r1}, 0x20) 1m0.468870587s ago: executing program 32 (id=708): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x48) r1 = socket$inet6(0xa, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000180)=@udp6=r1}, 0x20) 52.866490256s ago: executing program 0 (id=737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "6005"}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 52.680023874s ago: executing program 0 (id=738): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)={[{@gid}, {@discard}, {@gid={'gid', 0x3d, 0xee00}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@errors_continue}, {@discard}, {@umask={'umask', 0x3d, 0x7}}, {@discard}, {@dmask={'dmask', 0x3d, 0x5}}]}, 0x1, 0x1541, &(0x7f0000000840)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 52.32769788s ago: executing program 0 (id=739): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x700}}}, &(0x7f0000000680)='syzkaller\x00', 0x2, 0xfff, &(0x7f0000001880)=""/4095, 0x41100, 0x28}, 0x94) 52.142967698s ago: executing program 0 (id=740): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 52.032260713s ago: executing program 0 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, &(0x7f0000001cc0)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}}) 51.312106315s ago: executing program 0 (id=748): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1517, &(0x7f00000019c0)="$eJzs3AuYTlX7MPD7XmttxjTxNMlhWGvdmycNlkOSHJLkkCTJK0lOCaFJkoTEOEsakiTHSXIYQnKYxqRxPh9yTpKkSZKQkLC+S3993rf30Pf+/32f63vn/l3Xvqz72c+99r2fez/2s/dzPfNdj1F1mtWt2YSI4H8E/+ufZACIAYBhAJAPAAIAqBhfMf7y+jwSk/9nG2F/rofTrnUF7Fri/uds3P+cjfufs3H/czbuf87G/c/ZuP85G/efsZxs2+zCN/CScxe+/5+T8fn/P0h2mUlfbShzU89/I4X7n7Nx/3M27n/Oxv3P2bj/ORv3P2fj/uds3H/GcrL//r1j/u7gP2G51scfY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLGc4Zy/SgHAb+NrXRdjjDHGGGOMMcb+PD73ta6AMcYYY4wxxhhj//chCJCACJALckMM5IFYuA7i4HrIC/kgAjdAPNwI+eEmKAAFoRAUhgQoAkVBgwELBCEUg+IQhZuhBNwCiVASSkFpcFAGykI5KA+3QgW4DSrC7VAJ7oDKUAWqQjW4E6rDXVAD7oaacA/UgtpQB+rCvVAP7oP6cD80gAegITwIjeAhaAx/gSbwMDSFR6AZPArN4TFoAS2hFbSGNv+t/BehD7wEfaEfJEN/GAADYRAMhiEwFIbByzAcXoER8CqkwEgYBa/BaHgdxsAbMBbehHHwFoyHCTARJsFkmAKp8DZMhXdgGrwL02EGzIRZkAazYQ68B3NhHsyH92EBfAALYREshiWQDh9CBiyFTPgIlsHHkAXLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBp/AdtgBO2EX7IY9sBc+hX3wGeyHz+EAfPFv5p/9XX5PBAQUKFChwlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBQNGiQkVFeOpBJYAhMxEUthKXTosCyWxfJ4K1bAClgRK2IlrISVsQpWwWpYDatjdayBNbAm1sRaWAvrYB28F+/F+7A+1scG2AAbYkNshI2wMTbGJtgEm2JTbIbNsDk2xxbYAlthK2yDbbAttsV22A47YAfsiB2xM3bGJEzCLtgFu2JX7IbdsDt2xx7YA3tiL+yFL+KL+BK+hP2wluiPA3AADsJBOASH4lB8GYfjK/gKvoopOBJH4Wv4Gr6OY/AMjsU3cRyOw+piAk7ESUhiCqZiKk7FqTgNp+F0nIEzcBam4Wycg3NwLs7Defg+LsAP8ANchItwCaZjOmbgUszETFyGZzELl+MKXImrcDWuwrW4DtfiBtyIG3AzbsatuBU/wU9wB+7AXbgL91x+rfFT/Aw/wxQ8gAfwIB7EQ3gID+NhzMZsPIJH8CgexWN4DI/jcTyBJ/EUnsTTeBrP4Fk8h+fwPJ7HC/h8wjdN95RcnwLiMiWUyCVyiRgRI2JFrIgTcSKvyCsiIiLiRbzIL/KLAqKAKCQKiQSRIIqKosIII0iEopgoJqIiKkqIEiJRJIpSopRwwomyoqwoL8qLCqKCqChuF5XEHaKyqCLau2qimqguOrga4m5RU9QUtURtUUfUFXVFPVFP1Bf1RQPRQDQUDUUj8ZBoLPrjEHxYXO5MMzESm4tR2EK0FK1Ea/E6Pi7aijHYTrQXHcST4k0ci51FW5cknhZdxETsKp4Vk/A50V1MwR7iBdFT9BK9xYuij2jn+op+Yjr2FwPELBwkBoshYqiYi7XF5Y7VEa+KFDFSjBKviSX4uvjtGB8n3hLjxQQxUUwSk8UUkSreFlPFO2KaeFdMFzPETDFLpInZYo54T8wV88R88b5YID4QC8UisVgsEeniQ5EhlopM8ZFYJj4WWWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im3iE7Fd7BA7xS6xW+wRe8WnYp/4TOwXn4sD4gtxUHwpDomvxGHxtcgW34gj4ltxVHwnjonvxXHxgzghTopT4kdxWvwkzoiz4pz4WZwXv4gL4qK4JLwAiVJIKZUMZC6ZW8bIPDJWXifj5PUyr8wnI/IGGS9vlPnlTbKALCgLycIyQRaRRaWWRlpJMpTFZHEZlTfLEvIWmShLylKytHSyjCwry8ny8lZZQd4mK8rbZSV5h6wsq8iqspq8U1aXd8ka8m5ZU94ja8naso6sK++V9eR9sr68XzaQD8iG8kHZSD4kG8u/yCbyYdlUPiKbyUdlc/mYbCFbylaytWwjH5dt5ROynWwvO8gnZUfZSXaWT8kk+bTsIp+RXeWzspt8TnaXz8se8gXZU/aSveVFeUl62Vf2k8myvxwgB8pBcrAcIofKYfJlOVy+IkfIV2VKDADI1+Ro+bocI9+QY+Wbcpx8S46XE+REOUlOllNkqnxbTpXvyGnyXTldzpAz5SyZJmfLIVdmmv9/kP/OP8gfIVPkSLlVbpOfyO1yh9wpd8ndco/cK/fKfXKf3C/3ywPygDwoD8pD8pA8LA/LbJktj8gj8qg8Ko/JY/K4PC5PyJPyZ/mjPC1/kmfkWXlW/izPy/PywpXXABQqoaRSKlC5VG4Vo/KoWHWdilPXq7wqn4qoG1S8ulHlVzepAqqgKqQKqwRVRBVVWhllFalQFVPFVVTdjFfeIqqUKq2cKqPKqnL/Tr4qoW5Riark3+T/UX1tVBvVVrVV7VQ71UF1UB1VR9VZdVZJKkl1UV1UV9VVdVPdVHfVXfVQPVRP1VP1Vr1VH9VH9VV9VbJKVgPUQDVIDVZD1FA1rD+o4Wq4GqFGqBSVokapUWq0Gq3GqDFqrBqrxqlxarwaryaqiWqymqxSVaqaqqaqaWqamq6mq5lqpkpTaWqOmqPmqrlqvpqvFqgFaqFaqBarxSpdpasMlaEyVaZappapLLVcLVcr1Uq1Wq1Wa9VatV6tVxvVRrVZbVZZapvaprar7Wqn2ql2q91qr9qr9ql9ar/arw6oA+qgOqgOqUPqsDqsslW2OqKOqKPqqDqmjqnj6rg6oU6oU+qUOq1OqzPqjDqnzqnz6ry6oC6oS+qSggACEYhABSrIFeQKYoKYIDaIDeKCuCBvkDeIBJEgPogP8gc3BQWCgkGhoHCQEBQJigY6MIENKAiDYkHxIBrcHJQIbgkSg5JBqaB04IIyQdmgXFA+uDWoENwWVAxuDyoFdwSVgypB1aBacGdQPbgrqBHcHdQM7glqBbWDOkHd4N6gXnBfUD+4P2gQPBA0DB4MGgUPBY2DvwRNgoeDpsEjQbPg0aB58FjQImgZtApaB23+rPkVBE0D788UfML11f10su6vB+iBepAerIfooXqYflkP16/oEfpVnaJH6lH6NT1av67H6Df0WP2mHqff0uP1BD1RT9KT9RSdqt/WU/U7epp+V0/XM/RMPUun6dl6jn5Pz9Xz9Hz9vl6gP9AL9SK9WC/R6fpDnaGX6kz9kV6mP9ZZerleoVfqVXq1XqPX6nV6vd6gN+pNerPeorfqbfoTvV3v0Dv1Lr1b79F79ad6n/5M79ef6wP6C31Qf6kP6a/0Yf21ztbf6CP6W31Uf6eP6e/1cf2DPqFP6lP6R31a/6TP6LP6nP5Zn9e/6Av6or6k/eUP95dP70YZZXKZXCbGxJhYE2viTJzJa/KaiImYeBNv8pv8poApYAqZQibBJJiipqi5jAyZYqaYiZqoKWFKmESTaEqZUsYZZ8qasqa8KW8qmAqmoqloKplKprKpbKqaquZOc6e5y9xl7jZ3m3vMPaa2qW3qmrqmnqln6pv6poFpYBqahqaRaWQam8amiWlimpqmpplpZpqb5qaFaWFamVamjWlj2pq2pp1pZzqYDqaj6Wg6m84mySSZLqaL6Wq6mm6mm+luupsepofpaXqa3qa36WP6mL6mr0k2yWaAGWAGmUFmiBlihplhZrgZbkaYESbFpJhRZpQZbUabMWaMGWveNOPMW2a8mWAmmklmspliUk2qmWqmmmlmmpluppuZZqZJM2lmjplj5pq5Zr6ZbxaYBWahWWgWm8Um3aSbDJNhMk2mWWaWmSyTZVaYFWaVWWXWmDVmnVlnNpgNZpPZZLaYLWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W8OmAPmoDnoEcAcNodNtsk2R8wRc9QcNcfMMXPcHDcnzAlzypwyp81pc8acMefMOXPe/GIumIvmkvEmxuaxsfY6G2evt3ltPvv7uJAtbBNsEVvUalvAFvyb2FhrE21JW+q3S0xbziZePpfa0tbZMrasLWcr2yq2qq1m77TV7V22xu/jfGDvs/Xt/baBfcDWtffaen8VN7QP2kb2UdvYPmab2Ja2qW1tm9lHbXP7mG1hW9pWtrXtaDvZzvYpm2Sftl3sM38XZ9ildp1dbzfYjXaf/cyesz/bo/Y7e97+YvvafnaYfdkOt6/YEfZVm2JH/l08zr5lx9sJdqKdZCfbKX8Xz7SzbJqdbefY9+xcO+/v4nT7oV1gM+1Cu8gutkt+jS/XlGk/ssvsxzbLLrcr7Eq7yq62a+za/13rSrvZbrFb7V77qd1ud9iddpfdbff8Gl/ej/32c3vAfmGP2G/tIfuVPWyP2Wz7za/x5f07Zr+3x+0P9oQ9aU/ZH+1p+5M9Y89e3n9/ed9/tBftJestEJIgSYoCykW5KYbyUCxdR3F0PeWlfBShGyiebqT8dBMVoIJUiApTAhWhoqTJkCWikIpRcYrSzVSCbqFEKkmlqDQ5KkNlqRyVp1upAt1GFel2qkR3UGWqQlWpGt1J1ekuqkF3U026h2pRbapDdeleqkf3UX26nxrQA9SQHqRG9BA1pr9QE3qYmtIj1Iwepeb0GLWgltSKWlMbepza0hPUjtpTB3qSOlIn6kxPURI9TV3oGepKz1I3eo660/PUg16gntSLetOL1Ideor7Uj5KpPw2ggTSIBtMQGkrD6GUaTq/QCHqVUmgkjaLXaDS9TmPoDRpLb9I4eovG0wSaSJNoMk2hVHqbptI7NI3epek0g2bSLEqj2TSH3qO5NI/m0/u0gD6ghbSIFtMSSqcPKYOWUiZ9RMvoY8qi5bSCVtIqWk1raC2to/W0gTbSJtpMW2grbaNPaDvtoJ20i3bTHtpLn9I+ynPlDfcFHaQv6RB9RYfpa8qmb+gIfUtH6Ts6Rt/TcfqBTtBJOkU/0mn6ic7QWTpHP9N5+oUu0EW6RJ4gxFCEMlRhEOYKc4cxYZ4wNrwujAuvD/OG+cJIeEMYH94Y5g9vCguEBcNCYeEwISwSFg11aEIbUhiGxcLiYTS8OSwR3hImhiXDUmHp0IVlwrJhubB8eGtYIbwtrBjeHlYK7wgrh1XCRx+oFt4ZVg/vCmuEd4c1w3vCWmHtsE5YN7w3rBfeF9YP7w8bhA+EFcIHw0bhQyFc+b1K0/CRsFn4aNg8fCxsEbYMW4Wtwzbh42Hb8ImwXdg+7BA+GXYMO4Wdw6fCpPDpsEv4zB+uTw77hwPCgeHA0Pv75eLokmh69MNoRnRpNDP6UXRZ9ONoVnR5dEV0ZXRVdHV0TXRtdF10fXRDdGN0U3RzdEt0a9T7urnBoRNOOuUCl8vldjEuj4t117k4d73L6/K5iLvBxbsbXX53kyvgCrpCrrBLcEVcUaedcdaRC10xV9xF3c2uhLvFJbqSrpQr7Zwr48q61q6Na+PauidcO9fedXBPuiddJ9fJPeWeck+7Lu4Z19U967q551x397x73r3gerperrd70fVxL7m+rp9LdslugBvgBrlBbogb4oa5YW64G+5GuBEuxaW4UW6UG+1GuzFujBvrxrpxbpwb78a7iW6im+wmu1SX6qa6qW6am+YCAJjpZro0l+bmuDlurpvr5rv5bkHiArfQLXSL3WKX7tJdhstwmS7TLXPLXJbLcivcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXPb3Xa30+10u91ut9ftdfvcPrff7XcH3AF30B10h9whd9h97bLdN+6I+9Yddd+5Y+57d9z94E64k+6U+9Gddj+5M+6sO+d+dufdL+6Cu+guOe9SI29HpkbeiUyLvBuZHpkRmRmZFUmLzI7MibwXmRuZF5kfeT+yIPJBZGFkUWRxZEkkPfJhJCOyNJIZ+SiyLPJxJCuyPLIisjKyKrJagS+yPfTFfHEf9Tf7Ev4Wn+hL+lK+tHe+jM/ty/ny/lZfwd/mK/rbfSV/h6/sq/iq/jHfwrf0rXxr38Y/7tv6J3w739538E/6jr6T7+yf8kn+ad/FP+O7+md9N/+c7+6f9z38C76n7+V7+xd9H/+S7+v7+WTf3w/wA/0gP9gP8UP9MP+yH+5f8SP8qz7Fj/Sj/Gt+tH/dj/Fv+LH+TT/Ov+XH+wl+op/kJ/spPtW/7af6d/w0/66f7mf4mX6WT/Oz/Rz/np/r5/n5/n2/wH/gF/pFfrFf4tP9hz7DL/WZ/iO/zH/ss/xyv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8J3673+F3+l1+t9/j9/pP/T7/md/vP/cH/Bf+oP/SH/Jf+cP+a5/tv/FHsr71R/13/pj/3h/3P/gT/qQ/5X/0p/1P/ow/68/5n/15/4u/4C/6S//mb9Zq/xm3zhljjDHG/j808A/W9/8HjykAEFfGv3jvr99ROPuv10sA2FTgv8aDRULHCAA83a/Hw78ttWolJydfeW6WhKD4IgCI/G4DV+Ll0AE6QRK0h/L/sL7Botd5+hfzZ4yhydHbAWL/KicGrsZX5//yn8z/+JPjMiqF5+L/ef3RRQCJxa/mXL4K/y1eDh1+/eqwPVT4J/MXbPuv6s+SkOerVIB2f5UTBwDt8vy+/rLwBDwDSX/zzAb/cJuMMcYYY4wxxnKewaJqtz+4/vz1+jxBXc3JDVfjP7o+Z4wxxhhjjDHG2LX3XK/eTz2elNS+Gw94wIMcNuj0L55zrf9nYowxxhhjjP3Zrn7ov/pYnmtZEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlgP9v/hLY9d6HxljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLFr7X8FAAD//8HaM+M=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/85, 0x55) 50.849063206s ago: executing program 33 (id=748): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1517, &(0x7f00000019c0)="$eJzs3AuYTlX7MPD7XmttxjTxNMlhWGvdmycNlkOSHJLkkCTJK0lOCaFJkoTEOEsakiTHSXIYQnKYxqRxPh9yTpKkSZKQkLC+S3993rf30Pf+/32f63vn/l3Xvqz72c+99r2fez/2s/dzPfNdj1F1mtWt2YSI4H8E/+ufZACIAYBhAJAPAAIAqBhfMf7y+jwSk/9nG2F/rofTrnUF7Fri/uds3P+cjfufs3H/czbuf87G/c/ZuP85G/efsZxs2+zCN/CScxe+/5+T8fn/P0h2mUlfbShzU89/I4X7n7Nx/3M27n/Oxv3P2bj/ORv3P2fj/uds3H/GcrL//r1j/u7gP2G51scfY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLGc4Zy/SgHAb+NrXRdjjDHGGGOMMcb+PD73ta6AMcYYY4wxxhhj//chCJCACJALckMM5IFYuA7i4HrIC/kgAjdAPNwI+eEmKAAFoRAUhgQoAkVBgwELBCEUg+IQhZuhBNwCiVASSkFpcFAGykI5KA+3QgW4DSrC7VAJ7oDKUAWqQjW4E6rDXVAD7oaacA/UgtpQB+rCvVAP7oP6cD80gAegITwIjeAhaAx/gSbwMDSFR6AZPArN4TFoAS2hFbSGNv+t/BehD7wEfaEfJEN/GAADYRAMhiEwFIbByzAcXoER8CqkwEgYBa/BaHgdxsAbMBbehHHwFoyHCTARJsFkmAKp8DZMhXdgGrwL02EGzIRZkAazYQ68B3NhHsyH92EBfAALYREshiWQDh9CBiyFTPgIlsHHkAXLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBp/AdtgBO2EX7IY9sBc+hX3wGeyHz+EAfPFv5p/9XX5PBAQUKFChwlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBQNGiQkVFeOpBJYAhMxEUthKXTosCyWxfJ4K1bAClgRK2IlrISVsQpWwWpYDatjdayBNbAm1sRaWAvrYB28F+/F+7A+1scG2AAbYkNshI2wMTbGJtgEm2JTbIbNsDk2xxbYAlthK2yDbbAttsV22A47YAfsiB2xM3bGJEzCLtgFu2JX7IbdsDt2xx7YA3tiL+yFL+KL+BK+hP2wluiPA3AADsJBOASH4lB8GYfjK/gKvoopOBJH4Wv4Gr6OY/AMjsU3cRyOw+piAk7ESUhiCqZiKk7FqTgNp+F0nIEzcBam4Wycg3NwLs7Defg+LsAP8ANchItwCaZjOmbgUszETFyGZzELl+MKXImrcDWuwrW4DtfiBtyIG3AzbsatuBU/wU9wB+7AXbgL91x+rfFT/Aw/wxQ8gAfwIB7EQ3gID+NhzMZsPIJH8CgexWN4DI/jcTyBJ/EUnsTTeBrP4Fk8h+fwPJ7HC/h8wjdN95RcnwLiMiWUyCVyiRgRI2JFrIgTcSKvyCsiIiLiRbzIL/KLAqKAKCQKiQSRIIqKosIII0iEopgoJqIiKkqIEiJRJIpSopRwwomyoqwoL8qLCqKCqChuF5XEHaKyqCLau2qimqguOrga4m5RU9QUtURtUUfUFXVFPVFP1Bf1RQPRQDQUDUUj8ZBoLPrjEHxYXO5MMzESm4tR2EK0FK1Ea/E6Pi7aijHYTrQXHcST4k0ci51FW5cknhZdxETsKp4Vk/A50V1MwR7iBdFT9BK9xYuij2jn+op+Yjr2FwPELBwkBoshYqiYi7XF5Y7VEa+KFDFSjBKviSX4uvjtGB8n3hLjxQQxUUwSk8UUkSreFlPFO2KaeFdMFzPETDFLpInZYo54T8wV88R88b5YID4QC8UisVgsEeniQ5EhlopM8ZFYJj4WWWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im3iE7Fd7BA7xS6xW+wRe8WnYp/4TOwXn4sD4gtxUHwpDomvxGHxtcgW34gj4ltxVHwnjonvxXHxgzghTopT4kdxWvwkzoiz4pz4WZwXv4gL4qK4JLwAiVJIKZUMZC6ZW8bIPDJWXifj5PUyr8wnI/IGGS9vlPnlTbKALCgLycIyQRaRRaWWRlpJMpTFZHEZlTfLEvIWmShLylKytHSyjCwry8ny8lZZQd4mK8rbZSV5h6wsq8iqspq8U1aXd8ka8m5ZU94ja8naso6sK++V9eR9sr68XzaQD8iG8kHZSD4kG8u/yCbyYdlUPiKbyUdlc/mYbCFbylaytWwjH5dt5ROynWwvO8gnZUfZSXaWT8kk+bTsIp+RXeWzspt8TnaXz8se8gXZU/aSveVFeUl62Vf2k8myvxwgB8pBcrAcIofKYfJlOVy+IkfIV2VKDADI1+Ro+bocI9+QY+Wbcpx8S46XE+REOUlOllNkqnxbTpXvyGnyXTldzpAz5SyZJmfLIVdmmv9/kP/OP8gfIVPkSLlVbpOfyO1yh9wpd8ndco/cK/fKfXKf3C/3ywPygDwoD8pD8pA8LA/LbJktj8gj8qg8Ko/JY/K4PC5PyJPyZ/mjPC1/kmfkWXlW/izPy/PywpXXABQqoaRSKlC5VG4Vo/KoWHWdilPXq7wqn4qoG1S8ulHlVzepAqqgKqQKqwRVRBVVWhllFalQFVPFVVTdjFfeIqqUKq2cKqPKqnL/Tr4qoW5Riark3+T/UX1tVBvVVrVV7VQ71UF1UB1VR9VZdVZJKkl1UV1UV9VVdVPdVHfVXfVQPVRP1VP1Vr1VH9VH9VV9VbJKVgPUQDVIDVZD1FA1rD+o4Wq4GqFGqBSVokapUWq0Gq3GqDFqrBqrxqlxarwaryaqiWqymqxSVaqaqqaqaWqamq6mq5lqpkpTaWqOmqPmqrlqvpqvFqgFaqFaqBarxSpdpasMlaEyVaZappapLLVcLVcr1Uq1Wq1Wa9VatV6tVxvVRrVZbVZZapvaprar7Wqn2ql2q91qr9qr9ql9ar/arw6oA+qgOqgOqUPqsDqsslW2OqKOqKPqqDqmjqnj6rg6oU6oU+qUOq1OqzPqjDqnzqnz6ry6oC6oS+qSggACEYhABSrIFeQKYoKYIDaIDeKCuCBvkDeIBJEgPogP8gc3BQWCgkGhoHCQEBQJigY6MIENKAiDYkHxIBrcHJQIbgkSg5JBqaB04IIyQdmgXFA+uDWoENwWVAxuDyoFdwSVgypB1aBacGdQPbgrqBHcHdQM7glqBbWDOkHd4N6gXnBfUD+4P2gQPBA0DB4MGgUPBY2DvwRNgoeDpsEjQbPg0aB58FjQImgZtApaB23+rPkVBE0D788UfML11f10su6vB+iBepAerIfooXqYflkP16/oEfpVnaJH6lH6NT1av67H6Df0WP2mHqff0uP1BD1RT9KT9RSdqt/WU/U7epp+V0/XM/RMPUun6dl6jn5Pz9Xz9Hz9vl6gP9AL9SK9WC/R6fpDnaGX6kz9kV6mP9ZZerleoVfqVXq1XqPX6nV6vd6gN+pNerPeorfqbfoTvV3v0Dv1Lr1b79F79ad6n/5M79ef6wP6C31Qf6kP6a/0Yf21ztbf6CP6W31Uf6eP6e/1cf2DPqFP6lP6R31a/6TP6LP6nP5Zn9e/6Av6or6k/eUP95dP70YZZXKZXCbGxJhYE2viTJzJa/KaiImYeBNv8pv8poApYAqZQibBJJiipqi5jAyZYqaYiZqoKWFKmESTaEqZUsYZZ8qasqa8KW8qmAqmoqloKplKprKpbKqaquZOc6e5y9xl7jZ3m3vMPaa2qW3qmrqmnqln6pv6poFpYBqahqaRaWQam8amiWlimpqmpplpZpqb5qaFaWFamVamjWlj2pq2pp1pZzqYDqaj6Wg6m84mySSZLqaL6Wq6mm6mm+luupsepofpaXqa3qa36WP6mL6mr0k2yWaAGWAGmUFmiBlihplhZrgZbkaYESbFpJhRZpQZbUabMWaMGWveNOPMW2a8mWAmmklmspliUk2qmWqmmmlmmpluppuZZqZJM2lmjplj5pq5Zr6ZbxaYBWahWWgWm8Um3aSbDJNhMk2mWWaWmSyTZVaYFWaVWWXWmDVmnVlnNpgNZpPZZLaYLWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W8OmAPmoDnoEcAcNodNtsk2R8wRc9QcNcfMMXPcHDcnzAlzypwyp81pc8acMefMOXPe/GIumIvmkvEmxuaxsfY6G2evt3ltPvv7uJAtbBNsEVvUalvAFvyb2FhrE21JW+q3S0xbziZePpfa0tbZMrasLWcr2yq2qq1m77TV7V22xu/jfGDvs/Xt/baBfcDWtffaen8VN7QP2kb2UdvYPmab2Ja2qW1tm9lHbXP7mG1hW9pWtrXtaDvZzvYpm2Sftl3sM38XZ9ildp1dbzfYjXaf/cyesz/bo/Y7e97+YvvafnaYfdkOt6/YEfZVm2JH/l08zr5lx9sJdqKdZCfbKX8Xz7SzbJqdbefY9+xcO+/v4nT7oV1gM+1Cu8gutkt+jS/XlGk/ssvsxzbLLrcr7Eq7yq62a+za/13rSrvZbrFb7V77qd1ud9iddpfdbff8Gl/ej/32c3vAfmGP2G/tIfuVPWyP2Wz7za/x5f07Zr+3x+0P9oQ9aU/ZH+1p+5M9Y89e3n9/ed9/tBftJestEJIgSYoCykW5KYbyUCxdR3F0PeWlfBShGyiebqT8dBMVoIJUiApTAhWhoqTJkCWikIpRcYrSzVSCbqFEKkmlqDQ5KkNlqRyVp1upAt1GFel2qkR3UGWqQlWpGt1J1ekuqkF3U026h2pRbapDdeleqkf3UX26nxrQA9SQHqRG9BA1pr9QE3qYmtIj1Iwepeb0GLWgltSKWlMbepza0hPUjtpTB3qSOlIn6kxPURI9TV3oGepKz1I3eo660/PUg16gntSLetOL1Ideor7Uj5KpPw2ggTSIBtMQGkrD6GUaTq/QCHqVUmgkjaLXaDS9TmPoDRpLb9I4eovG0wSaSJNoMk2hVHqbptI7NI3epek0g2bSLEqj2TSH3qO5NI/m0/u0gD6ghbSIFtMSSqcPKYOWUiZ9RMvoY8qi5bSCVtIqWk1raC2to/W0gTbSJtpMW2grbaNPaDvtoJ20i3bTHtpLn9I+ynPlDfcFHaQv6RB9RYfpa8qmb+gIfUtH6Ts6Rt/TcfqBTtBJOkU/0mn6ic7QWTpHP9N5+oUu0EW6RJ4gxFCEMlRhEOYKc4cxYZ4wNrwujAuvD/OG+cJIeEMYH94Y5g9vCguEBcNCYeEwISwSFg11aEIbUhiGxcLiYTS8OSwR3hImhiXDUmHp0IVlwrJhubB8eGtYIbwtrBjeHlYK7wgrh1XCRx+oFt4ZVg/vCmuEd4c1w3vCWmHtsE5YN7w3rBfeF9YP7w8bhA+EFcIHw0bhQyFc+b1K0/CRsFn4aNg8fCxsEbYMW4Wtwzbh42Hb8ImwXdg+7BA+GXYMO4Wdw6fCpPDpsEv4zB+uTw77hwPCgeHA0Pv75eLokmh69MNoRnRpNDP6UXRZ9ONoVnR5dEV0ZXRVdHV0TXRtdF10fXRDdGN0U3RzdEt0a9T7urnBoRNOOuUCl8vldjEuj4t117k4d73L6/K5iLvBxbsbXX53kyvgCrpCrrBLcEVcUaedcdaRC10xV9xF3c2uhLvFJbqSrpQr7Zwr48q61q6Na+PauidcO9fedXBPuiddJ9fJPeWeck+7Lu4Z19U967q551x397x73r3gerperrd70fVxL7m+rp9LdslugBvgBrlBbogb4oa5YW64G+5GuBEuxaW4UW6UG+1GuzFujBvrxrpxbpwb78a7iW6im+wmu1SX6qa6qW6am+YCAJjpZro0l+bmuDlurpvr5rv5bkHiArfQLXSL3WKX7tJdhstwmS7TLXPLXJbLcivcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXPb3Xa30+10u91ut9ftdfvcPrff7XcH3AF30B10h9whd9h97bLdN+6I+9Yddd+5Y+57d9z94E64k+6U+9Gddj+5M+6sO+d+dufdL+6Cu+guOe9SI29HpkbeiUyLvBuZHpkRmRmZFUmLzI7MibwXmRuZF5kfeT+yIPJBZGFkUWRxZEkkPfJhJCOyNJIZ+SiyLPJxJCuyPLIisjKyKrJagS+yPfTFfHEf9Tf7Ev4Wn+hL+lK+tHe+jM/ty/ny/lZfwd/mK/rbfSV/h6/sq/iq/jHfwrf0rXxr38Y/7tv6J3w739538E/6jr6T7+yf8kn+ad/FP+O7+md9N/+c7+6f9z38C76n7+V7+xd9H/+S7+v7+WTf3w/wA/0gP9gP8UP9MP+yH+5f8SP8qz7Fj/Sj/Gt+tH/dj/Fv+LH+TT/Ov+XH+wl+op/kJ/spPtW/7af6d/w0/66f7mf4mX6WT/Oz/Rz/np/r5/n5/n2/wH/gF/pFfrFf4tP9hz7DL/WZ/iO/zH/ss/xyv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8J3673+F3+l1+t9/j9/pP/T7/md/vP/cH/Bf+oP/SH/Jf+cP+a5/tv/FHsr71R/13/pj/3h/3P/gT/qQ/5X/0p/1P/ow/68/5n/15/4u/4C/6S//mb9Zq/xm3zhljjDHG/j808A/W9/8HjykAEFfGv3jvr99ROPuv10sA2FTgv8aDRULHCAA83a/Hw78ttWolJydfeW6WhKD4IgCI/G4DV+Ll0AE6QRK0h/L/sL7Botd5+hfzZ4yhydHbAWL/KicGrsZX5//yn8z/+JPjMiqF5+L/ef3RRQCJxa/mXL4K/y1eDh1+/eqwPVT4J/MXbPuv6s+SkOerVIB2f5UTBwDt8vy+/rLwBDwDSX/zzAb/cJuMMcYYY4wxxnKewaJqtz+4/vz1+jxBXc3JDVfjP7o+Z4wxxhhjjDHG2LX3XK/eTz2elNS+Gw94wIMcNuj0L55zrf9nYowxxhhjjP3Zrn7ov/pYnmtZEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlgP9v/hLY9d6HxljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLFr7X8FAAD//8HaM+M=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/85, 0x55) 26.73684418s ago: executing program 1 (id=883): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) 26.527083509s ago: executing program 1 (id=885): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x9, 0x2}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x1, 0x7, 0x10}) 26.298588849s ago: executing program 1 (id=895): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000200), 0x4) 26.177754555s ago: executing program 1 (id=889): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1af, &(0x7f0000000580)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 25.559921192s ago: executing program 1 (id=896): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000001300)=""/4100, 0x1004}], 0x1, 0x8c0, 0x2bd6) 25.040171095s ago: executing program 1 (id=899): unshare(0x2020480) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000001dc0)=""/4088, 0xfffffd6f}, {&(0x7f00000000c0)=""/116, 0x74}, {&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/128, 0x80}], 0x10000000000002fe, 0x8, 0x0) 24.529154628s ago: executing program 34 (id=899): unshare(0x2020480) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000001dc0)=""/4088, 0xfffffd6f}, {&(0x7f00000000c0)=""/116, 0x74}, {&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/128, 0x80}], 0x10000000000002fe, 0x8, 0x0) 5.723846465s ago: executing program 5 (id=1024): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e45451870f05bc3323fff441abf20ec979657e03dd9d01284d1e064b524e36686fb3de9a1649d08264ed39abd6a95b5b8b832d51f76db4058e8f623d5b38e8463639f3a2e7499e2ba9b3a777f4e3cf28af8df8e043318c89eb61d7c8b5f98815f4123dbd0f2284af4a88b6542b8e3f6b9cca466278e208ad4c58d370f9989fad78a256adeb3ffaa6588abac776b393867d6318e80e9129df67dfb06ef41d95cfc74c319d4eec99fecc0b5a498048d897da0017f51785e673d2709"], 0x2d, 0x443f, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40046f01, 0x0) 4.616991744s ago: executing program 3 (id=1031): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x20c802, &(0x7f0000000cc0)=ANY=[], 0x1, 0x5f5b, &(0x7f0000003100)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0xf2) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./bus\x00') 4.171544664s ago: executing program 5 (id=1033): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c0001"], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 3.676881427s ago: executing program 5 (id=1038): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x43, 0x2}}}, 0x10) 3.434612297s ago: executing program 3 (id=1041): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_ep_write(r0, 0x8d, 0x2, &(0x7f0000000340)="cba8") 3.36288692s ago: executing program 5 (id=1042): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0x1f, 0xd, "db00a3853b6d697ae9572c0791"}, 0x0, 0x0, 0x0, 0x0}) 3.020052296s ago: executing program 4 (id=1045): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010025bd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="10080400220002001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB="08000800a9"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 2.836323564s ago: executing program 4 (id=1047): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x3, &(0x7f0000000f80)={[{@nombcache}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@resgid}]}, 0x8, 0x625, &(0x7f0000002ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000600)=ANY=[]) 2.836074214s ago: executing program 6 (id=1048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x40804) 2.626355633s ago: executing program 6 (id=1049): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500000000ff"], 0xd0}}, 0x0) 2.47228777s ago: executing program 4 (id=1050): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x15d}}, [@jmp={0x5, 0x0, 0x3, 0x9, 0x0, 0xfffffffffffffffc, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='syzkaller\x00', 0x6, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) 2.353997815s ago: executing program 6 (id=1051): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xfe}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 2.184107913s ago: executing program 4 (id=1052): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x0, 0x2, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 2.161882404s ago: executing program 6 (id=1053): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000002d80)=[{0x0}, {&(0x7f0000000580)="3be8", 0x2}], 0x2}}], 0x1, 0x9200000000000000) 1.963119103s ago: executing program 6 (id=1054): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xea, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xb, 0x80, 0x9}}}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.962728372s ago: executing program 4 (id=1055): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x2, 0x5515, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000240)={0x2c3, 0x5}) 1.35186905s ago: executing program 5 (id=1056): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000000480)=ANY=[@ANYBLOB='quota,noquota,discard=0x0000000000000007,discard=0x00000000000004e5,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nointegrity,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=koi8-u,uid=', @ANYRESHEX=0xee01, @ANYBLOB='\x00'], 0x24, 0x61b6, &(0x7f00000075c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 1.199470127s ago: executing program 3 (id=1057): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000240)=0x2, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) 941.516618ms ago: executing program 3 (id=1058): setresuid(0xee01, 0xee00, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000200ffffffff", 0x58}], 0x1) 736.212367ms ago: executing program 4 (id=1059): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2cc, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x0, 0xcc02, 0x722, 0xed, 0x7, 0x7f, 0x3f, 0xb763599953cb091f, {0x10000, 0x4}, 0x1, 0x4}}) 707.527048ms ago: executing program 3 (id=1060): creat(&(0x7f00000002c0)='./file0\x00', 0x109) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) creat(&(0x7f0000000200)='./file0\x00', 0x0) 471.185819ms ago: executing program 3 (id=1061): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206070002030109022a00010000000009040000db09"], 0x0) close(0x3) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) 258.11µs ago: executing program 6 (id=1062): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x40, 0x4, 0x0, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 0s ago: executing program 5 (id=1063): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x1804818, &(0x7f0000000180)=ANY=[], 0xfc, 0x6b7, &(0x7f0000000d80)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) setxattr$incfs_metadata(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): (loop2): revision level too high, forcing read-only mode [ 125.223256][ T7128] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0080] [ 125.232331][ T7128] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.239138][ T5843] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.274313][ T7128] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.483: bg 0: block 34: padding at end of block bitmap is not set [ 125.291240][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.345152][ T7128] Quota error (device loop2): write_blk: dquota write failed [ 125.376369][ T7128] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 125.399316][ T7128] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.483: Failed to acquire dquot type 1 [ 125.429025][ T7128] EXT4-fs (loop2): 1 truncate cleaned up [ 125.437003][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 125.452248][ T7128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.483810][ T5843] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 125.494274][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.517482][ T5843] usb 2-1: config 0 descriptor?? [ 125.625717][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.953333][ T5843] magicmouse 0003:05AC:0324.000A: hidraw0: USB HID v0.05 Device [HID 05ac:0324] on usb-dummy_hcd.1-1/input0 [ 126.090311][ T7153] loop3: detected capacity change from 0 to 1024 [ 126.123951][ T7153] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.161589][ T7153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.247549][ T5874] usb 2-1: USB disconnect, device number 5 [ 126.330526][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.735398][ T7173] loop2: detected capacity change from 0 to 128 [ 126.743366][ T7173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.751842][ T5874] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 126.775655][ T7173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.798193][ T7173] EXT4-fs (loop2): Test dummy encryption mode enabled [ 126.828152][ T7173] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.894752][ T7173] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.957186][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 126.972912][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 127.000747][ T7173] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 127.015281][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.038296][ T5874] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.052845][ T7186] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 127.053249][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 127.077364][ T5874] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 127.080722][ T7183] loop0: detected capacity change from 0 to 4096 [ 127.093246][ T5874] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 127.104872][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.115947][ T7183] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 127.140462][ T5874] usb 4-1: config 0 descriptor?? [ 127.147745][ T7162] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 127.181874][ T5799] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.251419][ T7183] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 127.287080][ T7183] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 127.296648][ T5843] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 127.298179][ T7183] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 127.361628][ T7188] ALSA: seq fatal error: cannot create timer (-19) [ 127.474750][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.493043][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.504795][ T5843] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 127.517125][ T5793] Bluetooth: hci4: unexpected event 0x12 length: 1 < 8 [ 127.526190][ T5793] Bluetooth: hci4: Malformed Event: 0x02 [ 127.532245][ T5793] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 127.532409][ T5793] Bluetooth: hci4: connection err: -111 [ 127.548455][ T5843] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 127.559393][ T5843] usb 2-1: config 220 has no interface number 2 [ 127.565800][ T5843] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 127.579364][ T5843] usb 2-1: config 220 interface 0 has no altsetting 0 [ 127.586206][ T5843] usb 2-1: config 220 interface 76 has no altsetting 0 [ 127.593259][ T5843] usb 2-1: config 220 interface 1 has no altsetting 0 [ 127.606413][ T5843] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 127.616551][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.624603][ T5843] usb 2-1: Product: syz [ 127.628931][ T5843] usb 2-1: Manufacturer: syz [ 127.633589][ T5843] usb 2-1: SerialNumber: syz [ 127.719516][ T5856] usb 4-1: USB disconnect, device number 7 [ 127.722053][ T5797] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 127.882255][ T5843] usb 2-1: selecting invalid altsetting 0 [ 127.889602][ T7199] loop0: detected capacity change from 0 to 16 [ 127.897521][ T5843] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 127.912734][ T5843] usb 2-1: No valid video chain found. [ 127.921293][ T7199] erofs: (device loop0): mounted with root inode @ nid 36. [ 127.933923][ T5843] usb 2-1: selecting invalid altsetting 0 [ 127.949526][ T5843] usbtest: probe of 2-1:220.1 failed with error -22 [ 127.966371][ T28] audit: type=1800 audit(1764169691.044:14): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.515" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 127.993124][ T5843] usb 2-1: USB disconnect, device number 6 [ 128.115703][ T7203] loop0: detected capacity change from 0 to 2048 [ 128.184655][ T7203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.299059][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.319474][ T7209] MTD: Couldn't look up 'memory.events': -15 [ 128.427115][ T7213] loop0: detected capacity change from 0 to 16 [ 128.447543][ T7213] erofs: (device loop0): mounted with root inode @ nid 36. [ 128.474886][ T7213] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 128.610099][ T7215] loop2: detected capacity change from 0 to 2048 [ 129.419857][ T7221] loop0: detected capacity change from 0 to 32768 [ 129.427619][ T7221] XFS: noikeep mount option is deprecated. [ 129.504755][ T7221] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.555732][ T7249] loop3: detected capacity change from 0 to 64 [ 129.626218][ T7221] XFS (loop0): Ending clean mount [ 129.685291][ T7221] XFS (loop0): Quotacheck needed: Please wait. [ 129.784250][ T7239] loop1: detected capacity change from 0 to 32768 [ 129.801531][ T7221] XFS (loop0): Quotacheck: Done. [ 129.833513][ T7239] MetaData crosses page boundary!! [ 129.843527][ T7239] lblock = 621d00, size = 28672 [ 129.850845][ T7239] CPU: 1 PID: 7239 Comm: syz.1.533 Not tainted syzkaller #0 [ 129.858166][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.868248][ T7239] Call Trace: [ 129.871552][ T7239] [ 129.874515][ T7239] dump_stack_lvl+0x16c/0x230 [ 129.879250][ T7239] ? show_regs_print_info+0x20/0x20 [ 129.884493][ T7239] ? load_image+0x3b0/0x3b0 [ 129.889041][ T7239] __get_metapage+0xaac/0xfa0 [ 129.893759][ T7239] dtSearch+0x591/0x21b0 [ 129.898088][ T7239] jfs_lookup+0x156/0x380 [ 129.902474][ T7239] ? jfs_get_parent+0xb0/0xb0 [ 129.907228][ T7239] ? __rwlock_init+0x150/0x150 [ 129.912041][ T7239] ? _raw_spin_unlock+0x28/0x40 [ 129.916923][ T7239] ? d_alloc+0x1eb/0x250 [ 129.921239][ T7239] lookup_one_qstr_excl+0x112/0x250 [ 129.926512][ T7239] filename_create+0x222/0x460 [ 129.931336][ T7239] ? kern_path_create+0x50/0x50 [ 129.936231][ T7239] ? __virt_addr_valid+0x18c/0x540 [ 129.941390][ T7239] ? __virt_addr_valid+0x18c/0x540 [ 129.946559][ T7239] do_mknodat+0x183/0x4f0 [ 129.950936][ T7239] ? do_o_path+0x1f0/0x1f0 [ 129.955392][ T7239] __x64_sys_mknod+0x8e/0xa0 [ 129.960024][ T7239] do_syscall_64+0x55/0xb0 [ 129.964477][ T7239] ? clear_bhb_loop+0x40/0x90 [ 129.969180][ T7239] ? clear_bhb_loop+0x40/0x90 [ 129.973893][ T7239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.979819][ T7239] RIP: 0033:0x7f399fb8f749 [ 129.984276][ T7239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.003913][ T7239] RSP: 002b:00007f39a09e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 130.012351][ T7239] RAX: ffffffffffffffda RBX: 00007f399fde5fa0 RCX: 00007f399fb8f749 [ 130.020340][ T7239] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000000080 [ 130.028328][ T7239] RBP: 00007f399fc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 130.036333][ T7239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.044338][ T7239] R13: 00007f399fde6038 R14: 00007f399fde5fa0 R15: 00007ffc71f6fd68 [ 130.052388][ T7239] [ 130.068074][ T7239] bread failed! [ 130.077147][ T7239] jfs_lookup: dtSearch returned -5 [ 130.136417][ T5795] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 130.754477][ T7267] loop3: detected capacity change from 0 to 8192 [ 130.775940][ T7271] loop0: detected capacity change from 0 to 2048 [ 130.835239][ T7267] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 130.910500][ T7273] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.922857][ T7267] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 130.933885][ T7267] REISERFS (device loop3): using journaled data mode [ 130.942085][ T7267] reiserfs: using flush barriers [ 130.963429][ T7267] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.010813][ T7267] REISERFS (device loop3): checking transaction log (loop3) [ 131.090913][ T7267] REISERFS (device loop3): Using r5 hash to sort names [ 131.117361][ T7267] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 131.179212][ T7263] loop2: detected capacity change from 0 to 40427 [ 131.196629][ T7267] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 131.272922][ T7267] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 131.273569][ T7263] F2FS-fs (loop2): invalid crc value [ 131.311093][ T7267] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 131.330538][ T7267] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 131.350184][ T7263] F2FS-fs (loop2): Found nat_bits in checkpoint [ 131.429905][ T7279] loop1: detected capacity change from 0 to 4096 [ 131.468586][ T7279] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 131.497181][ T7263] F2FS-fs (loop2): Start checkpoint disabled! [ 131.538323][ T7263] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 131.548716][ T7279] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 131.590338][ T7279] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 131.688059][ T7279] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 131.751984][ T7279] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 131.769831][ T7279] ntfs: volume version 3.1. [ 131.789704][ T7279] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 131.839370][ T7279] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 131.890801][ T7279] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 131.934348][ T7279] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 131.997415][ T7279] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 132.100566][ T7291] loop3: detected capacity change from 0 to 512 [ 132.119715][ T7291] EXT4-fs: Ignoring removed oldalloc option [ 132.240013][ T7291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.310917][ T7291] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.328501][ T7300] loop2: detected capacity change from 0 to 64 [ 132.356720][ T7294] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 132.445959][ T7291] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.553: bg 0: block 217: padding at end of block bitmap is not set [ 132.500499][ T7291] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 132.633490][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.773766][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.780236][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.994371][ T7319] tipc: Enabling of bearer rejected, failed to enable media [ 133.256860][ T5843] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 133.456718][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 133.461528][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.461556][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.461591][ T5843] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 133.461613][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.469224][ T5843] usb 3-1: config 0 descriptor?? [ 133.731334][ T7343] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 133.749752][ T7343] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 133.899378][ T5843] kone 0003:1E7D:2CED.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 134.006975][ T5857] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.093604][ T5843] kone 0003:1E7D:2CED.000B: couldn't init struct kone_device [ 134.101222][ T5843] kone 0003:1E7D:2CED.000B: couldn't install mouse [ 134.112805][ T5843] kone: probe of 0003:1E7D:2CED.000B failed with error -5 [ 134.124857][ T5843] usb 3-1: USB disconnect, device number 5 [ 134.186727][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 134.194496][ T5857] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 134.203089][ T5857] usb 4-1: config 0 has no interface number 0 [ 134.212041][ T5857] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 134.225549][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.233947][ T5857] usb 4-1: Product: syz [ 134.238454][ T5857] usb 4-1: Manufacturer: syz [ 134.243059][ T5857] usb 4-1: SerialNumber: syz [ 134.250162][ T5857] usb 4-1: config 0 descriptor?? [ 134.260037][ T5857] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.69/input/input5 [ 134.474661][ T5146] bcm5974 4-1:0.69: could not read from device [ 134.491644][ T5146] bcm5974 4-1:0.69: could not read from device [ 134.500272][ T5857] usb 4-1: USB disconnect, device number 8 [ 135.059005][ T7371] loop2: detected capacity change from 0 to 1024 [ 135.318823][ T3005] hfsplus: b-tree write err: -5, ino 4 [ 135.668911][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.600'. [ 135.699204][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.600'. [ 135.842002][ T7399] netlink: 180 bytes leftover after parsing attributes in process `syz.3.603'. [ 135.867952][ T7399] xt_time: unknown flags 0xf4 [ 136.052850][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'. [ 136.147311][ T7405] ipvlan2: entered promiscuous mode [ 136.152565][ T7405] ipvlan2: entered allmulticast mode [ 136.168535][ T7385] loop2: detected capacity change from 0 to 32768 [ 136.185724][ T7405] dummy0: entered allmulticast mode [ 136.193670][ T7385] XFS (loop2): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 136.273652][ T5787] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.351666][ T7413] raw_sendmsg: syz.0.610 forgot to set AF_INET. Fix it! [ 136.629408][ T7421] loop3: detected capacity change from 0 to 16 [ 136.642747][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 136.657406][ T7421] erofs: (device loop3): mounted with root inode @ nid 36. [ 136.849973][ T7425] netlink: 92 bytes leftover after parsing attributes in process `syz.0.616'. [ 136.877000][ T7425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.912820][ T7431] loop3: detected capacity change from 0 to 1024 [ 136.956153][ T7431] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.968572][ T7429] loop1: detected capacity change from 0 to 4096 [ 136.977371][ T7427] loop2: detected capacity change from 0 to 4096 [ 136.997564][ T7429] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.010647][ T7429] EXT4-fs (loop1): Test dummy encryption mode enabled [ 137.020370][ T7431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.047209][ T7429] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 137.063664][ T7431] EXT4-fs error (device loop3): ext4_xattr_inode_iget:444: inode #11: comm syz.3.618: missing EA_INODE flag [ 137.096202][ T7431] EXT4-fs (loop3): Remounting filesystem read-only [ 137.120442][ T7429] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 137.132872][ T7429] System zones: 0-5 [ 137.169435][ T7429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.280898][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.293777][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.317889][ T7440] loop0: detected capacity change from 0 to 512 [ 137.419271][ T7440] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.621: iget: bad i_size value: 38620345925642 [ 137.442241][ T7440] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.621: couldn't read orphan inode 15 (err -117) [ 137.581667][ T7440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.653522][ T7440] EXT4-fs error (device loop0): ext4_check_all_de:666: inode #12: block 7: comm syz.0.621: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0 [ 137.821042][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.893786][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 138.223776][ T7445] loop3: detected capacity change from 0 to 32768 [ 138.329583][ T7445] ialloc: diAlloc returned -5! [ 138.363306][ T7445] ialloc: diAlloc returned -5! [ 138.739330][ T7454] loop1: detected capacity change from 0 to 32768 [ 138.762891][ T7454] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.628 (7454) [ 138.802865][ T7452] loop2: detected capacity change from 0 to 40427 [ 138.814394][ T7454] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 138.839176][ T7452] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 138.853340][ T7454] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 138.862360][ T7452] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 138.875287][ T7454] BTRFS info (device loop1): enabling disk space caching [ 138.885598][ T7454] BTRFS info (device loop1): force clearing of disk cache [ 138.902773][ T7454] BTRFS info (device loop1): turning off barriers [ 138.912054][ T7452] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.925712][ T7456] loop0: detected capacity change from 0 to 40427 [ 138.940051][ T7454] BTRFS info (device loop1): setting nodatasum [ 138.969372][ T7456] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 138.970344][ T7454] BTRFS info (device loop1): enabling ssd optimizations [ 138.998727][ T7456] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 139.012020][ T7454] BTRFS info (device loop1): using spread ssd allocation scheme [ 139.051911][ T7454] BTRFS info (device loop1): disk space caching is enabled [ 139.057036][ T7456] F2FS-fs (loop0): invalid crc value [ 139.075402][ T7463] loop3: detected capacity change from 0 to 1024 [ 139.082088][ T7452] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 139.091087][ T7452] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 139.125430][ T7463] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 139.149175][ T7456] F2FS-fs (loop0): Found nat_bits in checkpoint [ 139.152971][ T7463] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.209321][ T7452] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 139.264085][ T7454] BTRFS info (device loop1): rebuilding free space tree [ 139.304814][ T7463] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 139.345896][ T7454] BTRFS info (device loop1): disabling free space tree [ 139.354502][ T7463] EXT4-fs (loop3): orphan cleanup on readonly fs [ 139.366555][ T7454] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 139.376247][ T7454] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 139.416280][ T7456] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 139.426307][ T7463] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.630: Inode bitmap for bg 0 marked uninitialized [ 139.447126][ T7456] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 139.458991][ T7463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.755589][ T5792] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.774460][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.787642][ T5795] syz-executor: attempt to access beyond end of device [ 139.787642][ T5795] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 139.875954][ T5795] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 140.285581][ T7498] netlink: 5 bytes leftover after parsing attributes in process `syz.1.636'. [ 140.452612][ T7501] loop1: detected capacity change from 0 to 1024 [ 140.520507][ T7501] hfsplus: bad catalog entry type [ 140.556750][ T5857] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 140.748185][ T5857] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 140.757447][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.767515][ T5857] usb 4-1: config 0 descriptor?? [ 140.945782][ T7507] loop1: detected capacity change from 0 to 4096 [ 140.966606][ T968] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.010034][ T7510] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.176638][ T968] usb 1-1: Using ep0 maxpacket: 16 [ 141.184350][ T968] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.216787][ T968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.237203][ T5857] cypress 0003:04B4:0001.000C: hidraw0: USB HID v0.06 Device [HID 04b4:0001] on usb-dummy_hcd.3-1/input0 [ 141.254165][ T968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 141.276861][ T968] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 141.290579][ T968] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.305116][ T968] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 141.334921][ T968] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 141.363263][ T968] usb 1-1: Manufacturer: syz [ 141.393146][ T968] usb 1-1: config 0 descriptor?? [ 141.458049][ T5836] usb 4-1: USB disconnect, device number 9 [ 141.619750][ T7509] loop2: detected capacity change from 0 to 32768 [ 141.679481][ T7509] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 141.756337][ T7512] loop1: detected capacity change from 0 to 32768 [ 141.765623][ T7509] XFS (loop2): Ending clean mount [ 141.768029][ T7512] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.641 (7512) [ 141.797802][ T7509] XFS (loop2): Quotacheck needed: Please wait. [ 141.813411][ T7512] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 141.840698][ T7512] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 141.864594][ T7512] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 141.874865][ T968] rc_core: IR keymap rc-hauppauge not found [ 141.887307][ T968] Registered IR keymap rc-empty [ 141.900313][ T7509] XFS (loop2): Quotacheck: Done. [ 141.908044][ T968] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 141.915485][ T7512] BTRFS info (device loop1): use zstd compression, level 3 [ 141.954276][ T7512] BTRFS info (device loop1): using free space tree [ 141.966821][ T968] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 142.009741][ T968] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 142.035676][ T968] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 142.130416][ T968] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 142.138821][ T7512] BTRFS info (device loop1): enabling ssd optimizations [ 142.157059][ T7512] BTRFS info (device loop1): auto enabling async discard [ 142.179817][ T5799] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 142.196685][ T968] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 142.261853][ T968] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 142.336581][ T968] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 142.407387][ T968] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 142.447113][ T968] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 142.500791][ T5792] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 142.516730][ T968] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 142.556615][ T968] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 142.598243][ T968] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 142.648245][ T968] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 142.748635][ T968] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 142.775222][ T7549] netlink: 'syz.1.645': attribute type 1 has an invalid length. [ 142.783795][ T968] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 142.836417][ T968] usb 1-1: USB disconnect, device number 5 [ 142.858613][ T7552] loop3: detected capacity change from 0 to 128 [ 142.886075][ T7552] UDF-fs: bad mount option "Í[CX§.ìÓìú-½ö¾ðF(?£ê-Ôƃ+ ° þ[è“cnùÿ€7Í [ 142.886075][ T7552]  +ÑÉ ‚Ít+K3¼Ê‚˜ñ¶&sFðç" or missing value [ 143.150239][ T7554] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.441815][ T7561] loop1: detected capacity change from 0 to 128 [ 143.627007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 143.635586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 143.644258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 143.653719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 143.662450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 143.671095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 143.679728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 143.807222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 143.866083][ T7550] loop2: detected capacity change from 0 to 32768 [ 143.883594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 143.892539][ T7550] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 143.957256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 144.202527][ T5785] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 144.735583][ T7563] loop3: detected capacity change from 0 to 32768 [ 144.978233][ T7582] netlink: 165 bytes leftover after parsing attributes in process `syz.2.661'. [ 145.289887][ T7588] tipc: Enabling of bearer rejected, failed to enable media [ 146.294943][ T7614] loop2: detected capacity change from 0 to 47 [ 146.383005][ T7614] Trying to free block not in datazone [ 146.404099][ T7614] Trying to free block not in datazone [ 146.422030][ T7614] Trying to free block not in datazone [ 146.439297][ T7614] Trying to free block not in datazone [ 146.460112][ T7614] Trying to free block not in datazone [ 146.478603][ T7614] Trying to free block not in datazone [ 146.488897][ T7614] Trying to free block not in datazone [ 146.504598][ T7614] Trying to free block not in datazone [ 146.517259][ T7614] Trying to free block not in datazone [ 146.536091][ T7614] Trying to free block not in datazone [ 146.546801][ T7614] Trying to free block not in datazone [ 146.565642][ T7614] Trying to free block not in datazone [ 146.571862][ T7614] Trying to free block not in datazone [ 146.578977][ T7614] Trying to free block not in datazone [ 146.595490][ T7614] Trying to free block not in datazone [ 146.611721][ T7614] Trying to free block not in datazone [ 146.621876][ T7614] Trying to free block not in datazone [ 146.642068][ T7614] Trying to free block not in datazone [ 146.652183][ T7614] Trying to free block not in datazone [ 146.672927][ T7614] Trying to free block not in datazone [ 146.683587][ T7614] minix_free_block (loop2:5): bit already cleared [ 146.703554][ T7614] Trying to free block not in datazone [ 146.717004][ T7614] Trying to free block not in datazone [ 146.734186][ T7614] Trying to free block not in datazone [ 146.747022][ T7614] Trying to free block not in datazone [ 146.764164][ T7614] Trying to free block not in datazone [ 146.774310][ T7614] Trying to free block not in datazone [ 146.794513][ T7614] Trying to free block not in datazone [ 146.800838][ T7614] Trying to free block not in datazone [ 146.817030][ T7614] Trying to free block not in datazone [ 146.826881][ T7614] Trying to free block not in datazone [ 146.847529][ T7614] minix_free_block (loop2:6): bit already cleared [ 146.875389][ T7614] minix_free_block (loop2:6): bit already cleared [ 147.793500][ T7619] loop1: detected capacity change from 0 to 32768 [ 147.833957][ T7619] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.678 (7619) [ 147.897268][ T7619] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.914304][ T7619] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 147.930590][ T7619] BTRFS info (device loop1): use zlib compression, level 3 [ 147.956495][ T7619] BTRFS info (device loop1): allowing degraded mounts [ 147.964808][ T7619] BTRFS info (device loop1): force zlib compression, level 3 [ 147.979833][ T7619] BTRFS info (device loop1): metadata ratio 4 [ 147.996505][ T7619] BTRFS info (device loop1): setting nodatacow [ 148.037439][ T7619] BTRFS info (device loop1): force clearing of disk cache [ 148.044628][ T7619] BTRFS info (device loop1): enabling ssd optimizations [ 148.076488][ T7619] BTRFS info (device loop1): using free space tree [ 148.137635][ T5856] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 148.258305][ T7619] BTRFS info (device loop1): auto enabling async discard [ 148.287755][ T7619] BTRFS info (device loop1): rebuilding free space tree [ 148.367912][ T5856] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 148.386555][ T5856] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 148.429539][ T5856] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 148.451972][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.481049][ T5856] usb 3-1: Product: syz [ 148.485252][ T5856] usb 3-1: Manufacturer: syz [ 148.507066][ T5856] usb 3-1: SerialNumber: syz [ 148.537969][ T5856] usb 3-1: config 0 descriptor?? [ 148.739059][ T5792] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.779772][ T5856] mos7840 3-1:0.0: required endpoints missing [ 149.002909][ T5856] usb 3-1: USB disconnect, device number 6 [ 149.924538][ T7662] program syz.2.688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.302294][ T7680] netlink: 'syz.1.692': attribute type 10 has an invalid length. [ 150.343393][ T7680] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 150.394743][ T7680] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 150.406046][ T7680] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 150.421800][ T7680] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 150.629228][ T7689] loop0: detected capacity change from 0 to 64 [ 150.844013][ T7696] netlink: 'syz.0.698': attribute type 10 has an invalid length. [ 150.912933][ T7696] team0: Device dummy0 failed to register rx_handler [ 150.986200][ T7697] netlink: 'syz.0.698': attribute type 10 has an invalid length. [ 151.053116][ T7701] loop2: detected capacity change from 0 to 2048 [ 151.081935][ T7701] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.165095][ T7701] overlayfs: upper fs needs to support d_type. [ 151.199743][ T7701] overlayfs: cleanup of 'work/#1' failed (-2) [ 151.212081][ T7701] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 151.238919][ T7701] overlayfs: failed to set xattr on upper [ 151.244829][ T7701] overlayfs: ...falling back to redirect_dir=nofollow. [ 151.265084][ T7701] overlayfs: ...falling back to index=off. [ 151.280752][ T7701] overlayfs: ...falling back to uuid=null. [ 151.425225][ T7713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.703'. [ 151.463481][ T5799] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 151.487350][ T5799] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 151.692963][ T7719] sg_read: process 344 (syz.0.705) changed security contexts after opening file descriptor, this is not allowed. [ 151.934010][ T7725] netlink: 'syz.1.707': attribute type 10 has an invalid length. [ 152.076300][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.197781][ T7729] netlink: 64 bytes leftover after parsing attributes in process `syz.1.710'. [ 152.335087][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.528373][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.679827][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.722059][ T7706] loop3: detected capacity change from 0 to 32768 [ 152.823966][ T7727] loop0: detected capacity change from 0 to 32768 [ 152.857575][ T7727] XFS: ikeep mount option is deprecated. [ 152.979758][ T7727] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 153.142862][ T7727] XFS (loop0): Ending clean mount [ 153.169549][ T7727] XFS (loop0): Quotacheck needed: Please wait. [ 153.279339][ T7727] XFS (loop0): Quotacheck: Done. [ 153.478024][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.507112][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.517141][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.543923][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.557311][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.564761][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.773694][ T5795] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 154.487161][ T7762] loop3: detected capacity change from 0 to 8 [ 154.559572][ T5787] udevd[5787]: incorrect cramfs checksum on /dev/loop3 [ 154.968757][ T7771] loop1: detected capacity change from 0 to 4096 [ 155.048052][ T7771] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 155.096308][ T7777] loop0: detected capacity change from 0 to 512 [ 155.129178][ T7777] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 155.171658][ T7777] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.720: bad orphan inode 16 [ 155.205403][ T7777] EXT4-fs (loop0): Remounting filesystem read-only [ 155.246690][ T7777] ext4_test_bit(bit=15, block=4) = 0 [ 155.252036][ T7777] EXT4-fs (loop0): 1 orphan inode deleted [ 155.274355][ T7771] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 155.301338][ T7777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.349753][ T7771] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 155.430752][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.646995][ T5793] Bluetooth: hci3: command tx timeout [ 155.941424][ T7748] chnl_net:caif_netlink_parms(): no params data found [ 156.191981][ T7772] loop3: detected capacity change from 0 to 32768 [ 156.236959][ T7802] loop0: detected capacity change from 0 to 1024 [ 156.278953][ T7772] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 156.450261][ T7802] hfsplus: bad catalog entry type [ 156.471070][ T7772] XFS (loop3): Ending clean mount [ 156.511166][ T7772] XFS (loop3): Quotacheck needed: Please wait. [ 156.575009][ T42] hfsplus: b-tree write err: -5, ino 4 [ 156.640389][ T7748] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.659988][ T7748] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.672172][ T7772] XFS (loop3): Quotacheck: Done. [ 156.687202][ T7748] bridge_slave_0: entered allmulticast mode [ 156.731042][ T7748] bridge_slave_0: entered promiscuous mode [ 156.760896][ T7748] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.796641][ T7748] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.803851][ T7748] bridge_slave_1: entered allmulticast mode [ 156.827960][ T7748] bridge_slave_1: entered promiscuous mode [ 156.989288][ T5798] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 157.210337][ T7748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.269975][ T7748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.573553][ T12] hsr_slave_0: left promiscuous mode [ 157.597055][ T12] hsr_slave_1: left promiscuous mode [ 157.726975][ T5793] Bluetooth: hci3: command tx timeout [ 157.741145][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.751087][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.792526][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.846806][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.877444][ T12] bridge_slave_1: left allmulticast mode [ 157.883146][ T12] bridge_slave_1: left promiscuous mode [ 157.900170][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.968178][ T12] bridge_slave_0: left allmulticast mode [ 157.973991][ T12] bridge_slave_0: left promiscuous mode [ 157.991170][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.078706][ T12] veth1_macvtap: left promiscuous mode [ 158.096967][ T12] veth0_macvtap: left promiscuous mode [ 158.104919][ T12] veth1_vlan: left promiscuous mode [ 158.122272][ T12] veth0_vlan: left promiscuous mode [ 158.248060][ T7847] loop3: detected capacity change from 0 to 8192 [ 158.285354][ T7847] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 158.321603][ T7847] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 158.332522][ T7847] REISERFS (device loop3): using journaled data mode [ 158.344509][ T7847] reiserfs: using flush barriers [ 158.362507][ T7847] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 158.403022][ T7847] REISERFS (device loop3): checking transaction log (loop3) [ 158.449978][ T7847] REISERFS (device loop3): Using r5 hash to sort names [ 158.488905][ T7847] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 158.537491][ T7847] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 158.664754][ T7847] REISERFS error (device loop3): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 158.708154][ T7847] REISERFS (device loop3): Remounting filesystem read-only [ 159.806835][ T5793] Bluetooth: hci3: command tx timeout [ 159.812777][ T12] team0 (unregistering): Port device team_slave_1 removed [ 159.913578][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.988544][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.379901][ T7864] loop0: detected capacity change from 0 to 256 [ 160.389683][ T7864] exfat: Deprecated parameter 'utf8' [ 160.513722][ T7864] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x40a90196, utbl_chksum : 0xe619d30d) [ 160.804853][ T12] bond0 (unregistering): Released all slaves [ 160.955035][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 161.135580][ T7748] team0: Port device team_slave_0 added [ 161.164106][ T7748] team0: Port device team_slave_1 added [ 161.173764][ T7870] loop1: detected capacity change from 0 to 2048 [ 161.229145][ T7870] loop1: p3 p4 < > [ 161.233592][ T7870] loop1: p3 start 11362048 is beyond EOD, truncated [ 161.596770][ T7879] loop3: detected capacity change from 0 to 256 [ 161.717338][ T7748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.724347][ T7748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.750236][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.765486][ T7748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.792877][ T7879] FAT-fs (loop3): Directory bread(block 64) failed [ 161.806825][ T7879] FAT-fs (loop3): Directory bread(block 65) failed [ 161.813876][ T7748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.833056][ T7879] FAT-fs (loop3): Directory bread(block 66) failed [ 161.840612][ T7748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.866799][ T7879] FAT-fs (loop3): Directory bread(block 67) failed [ 161.873425][ T7879] FAT-fs (loop3): Directory bread(block 68) failed [ 161.880151][ T7879] FAT-fs (loop3): Directory bread(block 69) failed [ 161.886684][ T5793] Bluetooth: hci3: command tx timeout [ 161.892572][ T7748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.904420][ T7879] FAT-fs (loop3): Directory bread(block 70) failed [ 161.917016][ T7879] FAT-fs (loop3): Directory bread(block 71) failed [ 161.923651][ T7879] FAT-fs (loop3): Directory bread(block 72) failed [ 161.937794][ T5843] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 161.956535][ T7879] FAT-fs (loop3): Directory bread(block 73) failed [ 162.071255][ T7748] hsr_slave_0: entered promiscuous mode [ 162.100925][ T7748] hsr_slave_1: entered promiscuous mode [ 162.125764][ T7748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.144281][ T7748] Cannot create hsr debugfs directory [ 162.153104][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.180090][ T5843] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 162.216505][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.255287][ T5843] usb 2-1: config 0 descriptor?? [ 162.617986][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.713068][ T5843] nintendo 0003:057E:200E.000D: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.1-1/input0 [ 162.782952][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.808056][ T5843] nintendo 0003:057E:200E.000D: Failed charging grip handshake [ 162.816069][ T5843] nintendo 0003:057E:200E.000D: Failed to initialize controller; ret=-110 [ 162.849019][ T5843] nintendo 0003:057E:200E.000D: probe - fail = -110 [ 162.886688][ T5843] nintendo: probe of 0003:057E:200E.000D failed with error -110 [ 162.949180][ T5843] usb 2-1: USB disconnect, device number 7 [ 163.021068][ T7905] loop3: detected capacity change from 0 to 512 [ 163.051623][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.066944][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.074794][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.089839][ T7905] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 163.094499][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.106205][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 163.115549][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.139445][ T7905] EXT4-fs (loop3): orphan cleanup on readonly fs [ 163.151693][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.173122][ T7905] __quota_error: 4 callbacks suppressed [ 163.173133][ T7905] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 163.205278][ T7905] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 163.222214][ T7905] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.753: Failed to acquire dquot type 1 [ 163.244210][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.255324][ T7905] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.753: bg 0: block 40: padding at end of block bitmap is not set [ 163.280817][ T7905] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 163.293638][ T7748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.304163][ T7905] EXT4-fs (loop3): 1 truncate cleaned up [ 163.311916][ T7905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.382106][ T7748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.394870][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.439491][ T7748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.504461][ T7748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.027567][ T5874] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 164.179826][ T7906] chnl_net:caif_netlink_parms(): no params data found [ 164.202790][ T7748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.258775][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 164.267296][ T5874] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 164.275891][ T5874] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 164.296167][ T5874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 164.310738][ T5874] usb 2-1: config 1 has no interface number 0 [ 164.318864][ T5874] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.329979][ T5874] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 164.343560][ T5874] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 164.353021][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.384169][ T5874] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 164.385539][ T7748] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.443364][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.450997][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.616109][ T5874] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 164.632210][ T2884] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.639396][ T2884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.687521][ T7906] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.694856][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.703599][ T7906] bridge_slave_0: entered allmulticast mode [ 164.711822][ T7906] bridge_slave_0: entered promiscuous mode [ 164.723890][ T7906] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.731665][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.740180][ T7906] bridge_slave_1: entered allmulticast mode [ 164.748814][ T7906] bridge_slave_1: entered promiscuous mode [ 164.853941][ T7906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.869969][ T7906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.004629][ T7906] team0: Port device team_slave_0 added [ 165.032797][ T7906] team0: Port device team_slave_1 added [ 165.060686][ T5836] usb 2-1: USB disconnect, device number 8 [ 165.078867][ T5836] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 165.143892][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.152956][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.181746][ T5797] Bluetooth: hci1: command tx timeout [ 165.188812][ T7906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.203575][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.210918][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.238323][ T7906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.464208][ T7906] hsr_slave_0: entered promiscuous mode [ 165.477619][ T7906] hsr_slave_1: entered promiscuous mode [ 165.496532][ T7906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.507947][ T7906] Cannot create hsr debugfs directory [ 165.530137][ T12] hsr_slave_0: left promiscuous mode [ 165.536247][ T12] hsr_slave_1: left promiscuous mode [ 165.542533][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.552424][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.563377][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.571795][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.583841][ T12] bridge_slave_1: left allmulticast mode [ 165.592654][ T12] bridge_slave_1: left promiscuous mode [ 165.602490][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.614241][ T12] bridge_slave_0: left allmulticast mode [ 165.636719][ T12] bridge_slave_0: left promiscuous mode [ 165.642576][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.741263][ T12] veth1_macvtap: left promiscuous mode [ 165.747640][ T12] veth0_macvtap: left promiscuous mode [ 165.753291][ T12] veth1_vlan: left promiscuous mode [ 165.758829][ T12] veth0_vlan: left promiscuous mode [ 166.905740][ T12] team0 (unregistering): Port device team_slave_1 removed [ 167.000724][ T12] team0 (unregistering): Port device team_slave_0 removed [ 167.099909][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.195554][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.247131][ T5797] Bluetooth: hci1: command tx timeout [ 167.775106][ T7987] loop1: detected capacity change from 0 to 4096 [ 167.821085][ T7987] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 167.861336][ T7987] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 167.902577][ T7988] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.408944][ T12] bond0 (unregistering): Released all slaves [ 168.731552][ T7748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.886775][ T5813] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 169.090830][ T7906] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 169.126757][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 169.146988][ T7906] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 169.155792][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 169.171319][ T7906] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 169.189859][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.197763][ T7906] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 169.236529][ T5813] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 169.263234][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.296379][ T5813] usb 4-1: config 0 descriptor?? [ 169.337916][ T5797] Bluetooth: hci1: command tx timeout [ 169.571981][ T7906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.595298][ T7748] veth0_vlan: entered promiscuous mode [ 169.653193][ T7906] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.678319][ T7748] veth1_vlan: entered promiscuous mode [ 169.739078][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.746341][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.757178][ T5813] logitech 0003:046D:C298.000E: item fetching failed at offset 4/5 [ 169.770664][ T5813] logitech 0003:046D:C298.000E: parse failed [ 169.791030][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.796782][ T5813] logitech: probe of 0003:046D:C298.000E failed with error -22 [ 169.798227][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.878003][ T7748] veth0_macvtap: entered promiscuous mode [ 169.893887][ T7748] veth1_macvtap: entered promiscuous mode [ 169.911669][ T7906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.942485][ T7748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.967104][ T7748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.975825][ T5813] usb 4-1: USB disconnect, device number 10 [ 169.987237][ T7748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.006746][ T5874] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 170.014715][ T7748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.028838][ T7748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.055379][ T7748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.071739][ T7748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.082974][ T7748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.093764][ T7748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.105874][ T7748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.140038][ T7748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.149383][ T7748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.159107][ T7748] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.168245][ T7748] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.232096][ T5874] usb 2-1: config 1 interface 0 has no altsetting 0 [ 170.264714][ T5874] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 170.284230][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.303032][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.312696][ T5874] usb 2-1: Product: syz [ 170.321603][ T5874] usb 2-1: Manufacturer: syz [ 170.326249][ T5874] usb 2-1: SerialNumber: syz [ 170.335045][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.364472][ T7906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.412185][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.429024][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.687398][ T8052] loop3: detected capacity change from 0 to 256 [ 170.875240][ T8052] FAT-fs (loop3): Directory bread(block 64) failed [ 170.897566][ T8052] FAT-fs (loop3): Directory bread(block 65) failed [ 170.904371][ T8052] FAT-fs (loop3): Directory bread(block 66) failed [ 170.945055][ T8052] FAT-fs (loop3): Directory bread(block 67) failed [ 170.954034][ T8052] FAT-fs (loop3): Directory bread(block 68) failed [ 170.966603][ T8052] FAT-fs (loop3): Directory bread(block 69) failed [ 170.983775][ T8052] FAT-fs (loop3): Directory bread(block 70) failed [ 170.999600][ T8052] FAT-fs (loop3): Directory bread(block 71) failed [ 171.017919][ T8052] FAT-fs (loop3): Directory bread(block 72) failed [ 171.032854][ T8052] FAT-fs (loop3): Directory bread(block 73) failed [ 171.191295][ T7906] veth0_vlan: entered promiscuous mode [ 171.233489][ T7906] veth1_vlan: entered promiscuous mode [ 171.323598][ T7906] veth0_macvtap: entered promiscuous mode [ 171.352566][ T7906] veth1_macvtap: entered promiscuous mode [ 171.407889][ T5797] Bluetooth: hci1: command tx timeout [ 171.445526][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.504805][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.520274][ T8067] loop3: detected capacity change from 0 to 512 [ 171.520807][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.540444][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.575399][ T8067] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.789: inode has both inline data and extents flags [ 171.601822][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.632726][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.660184][ T8067] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.789: couldn't read orphan inode 15 (err -117) [ 171.683386][ T7906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.725972][ T8067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.763777][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.807955][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.846494][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.863373][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.880794][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.909963][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.922323][ T7906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.924361][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.943290][ T7906] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.957552][ T7906] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.989444][ T7906] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.011546][ T7906] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.195920][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.790'. [ 172.213154][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.229491][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.299197][ T8059] loop4: detected capacity change from 0 to 65536 [ 172.315942][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.346502][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.364770][ T8059] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 172.526165][ T8059] XFS (loop4): Ending clean mount [ 172.720225][ T5813] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 172.799503][ T5874] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 172.845098][ T5874] usb 2-1: USB disconnect, device number 9 [ 172.867689][ T7748] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 172.878834][ T5874] usblp0: removed [ 172.956776][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 172.970870][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 172.978025][ T5813] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 172.996790][ T5813] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 173.012642][ T5813] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 173.034575][ T5813] usb 4-1: config 1 has no interface number 0 [ 173.062589][ T5813] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.134772][ T5813] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 173.159104][ T8] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 173.166572][ T5813] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 173.188005][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.201490][ T8100] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 173.212030][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.212058][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 173.213503][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.238166][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.260286][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.269924][ T8100] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 173.288026][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 173.293923][ T5813] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 173.310472][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.322446][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.364444][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 173.386833][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.396227][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.464949][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 173.481795][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.493719][ T5813] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 173.493937][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.534307][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 173.564536][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.565734][ T8105] loop1: detected capacity change from 0 to 64 [ 173.586070][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.607972][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 173.631306][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.656656][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.692149][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 173.726217][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.746674][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.773747][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 173.789377][ T8] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 173.807713][ T8] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 173.826405][ T8] usb 6-1: Product: syz [ 173.830686][ T8] usb 6-1: Manufacturer: syz [ 173.835301][ T8] usb 6-1: SerialNumber: syz [ 173.858341][ T5792] hfs: node 4:3 still has 1 user(s)! [ 173.863805][ T8] usb 6-1: config 0 descriptor?? [ 173.875263][ T8] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 174.024311][ T5836] usb 4-1: USB disconnect, device number 11 [ 174.051117][ T5836] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 174.051601][ T8113] loop1: detected capacity change from 0 to 1024 [ 174.224832][ T27] usb 6-1: USB disconnect, device number 2 [ 174.235271][ T11] hfsplus: b-tree write err: -5, ino 4 [ 174.244914][ T27] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 174.442611][ T8125] loop1: detected capacity change from 0 to 16 [ 174.457435][ T8125] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 174.477828][ T5813] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 174.676590][ T5813] usb 5-1: Using ep0 maxpacket: 16 [ 174.684813][ T5813] usb 5-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.707757][ T8132] loop3: detected capacity change from 0 to 1024 [ 174.723347][ T5813] usb 5-1: config 0 interface 0 altsetting 91 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.747129][ T5813] usb 5-1: config 0 interface 0 has no altsetting 0 [ 174.772292][ T8132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.777331][ T5813] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 174.797620][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.808186][ T5813] usb 5-1: config 0 descriptor?? [ 174.829750][ T8132] EXT4-fs error (device loop3): ext4_lookup:1858: comm syz.3.801: inode #12: comm syz.3.801: iget: illegal inode # [ 174.911920][ T8132] EXT4-fs (loop3): Remounting filesystem read-only [ 175.029907][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.241430][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 175.266025][ T5813] chicony 0003:04F2:1236.000F: unknown main item tag 0x0 [ 175.276551][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.804'. [ 175.295563][ T5813] chicony 0003:04F2:1236.000F: unknown main item tag 0x0 [ 175.303385][ T8150] netlink: 'syz.3.804': attribute type 12 has an invalid length. [ 175.311308][ T5813] chicony 0003:04F2:1236.000F: unknown main item tag 0x0 [ 175.334002][ T5813] chicony 0003:04F2:1236.000F: unknown main item tag 0x0 [ 175.342822][ T5813] chicony 0003:04F2:1236.000F: unknown main item tag 0x0 [ 175.365705][ T5813] chicony 0003:04F2:1236.000F: unknown main item tag 0x0 [ 175.383341][ T5813] chicony 0003:04F2:1236.000F: unknown main item tag 0x0 [ 175.402450][ T5813] chicony 0003:04F2:1236.000F: hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.4-1/input0 [ 175.436885][ T8153] loop5: detected capacity change from 0 to 4096 [ 175.483857][ T8153] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 175.534391][ T8153] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 175.544072][ T27] usb 5-1: USB disconnect, device number 2 [ 175.604079][ T8153] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 175.626676][ T8153] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 175.648062][ T8156] fido_id[8156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 175.668625][ T8153] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 175.731677][ T8153] ntfs: volume version 3.1. [ 175.743207][ T8153] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 175.780778][ T8153] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 175.816133][ T8153] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 175.827883][ T8153] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 175.857512][ T8153] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 176.390833][ T8181] loop3: detected capacity change from 0 to 64 [ 176.416563][ T5874] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 176.623929][ T5874] usb 6-1: Using ep0 maxpacket: 32 [ 176.635898][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.656538][ T5874] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 176.665630][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.702836][ T5874] usb 6-1: config 0 descriptor?? [ 177.068545][ T8185] loop4: detected capacity change from 0 to 32768 [ 177.085002][ T8185] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.814 (8185) [ 177.104394][ T8142] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 177.144460][ T5874] magicmouse 0003:05AC:0265.0010: item fetching failed at offset 2/5 [ 177.154705][ T8185] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 177.174138][ T5874] magicmouse 0003:05AC:0265.0010: magicmouse hid parse failed [ 177.182555][ T8185] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 177.192061][ T5874] magicmouse: probe of 0003:05AC:0265.0010 failed with error -22 [ 177.203409][ T8185] BTRFS info (device loop4): enabling disk space caching [ 177.226221][ T8185] BTRFS info (device loop4): use no compression [ 177.246555][ T8185] BTRFS info (device loop4): force clearing of disk cache [ 177.253727][ T8185] BTRFS info (device loop4): turning on sync discard [ 177.266486][ T8185] BTRFS info (device loop4): disabling disk space caching [ 177.400337][ T5843] usb 6-1: USB disconnect, device number 3 [ 177.422156][ T8185] BTRFS info (device loop4): enabling ssd optimizations [ 177.459928][ T8185] BTRFS info (device loop4): rebuilding free space tree [ 177.498799][ T8185] BTRFS info (device loop4): disabling free space tree [ 177.516346][ T8185] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 177.530669][ T8185] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 177.659769][ T8185] BTRFS info (device loop4): balance: start -sconvert=raid0,soft [ 177.699068][ T8185] BTRFS info (device loop4): relocating block group 1048576 flags system [ 177.782744][ T8185] BTRFS info (device loop4): balance: ended with status: 0 [ 178.009478][ T7748] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 178.385022][ T27] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 178.473698][ T27] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 178.767278][ T8247] fido_id[8247]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 178.789755][ T8252] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 178.818932][ T8251] [U] J"—E:ÀÆ" [ 178.933846][ T8255] sp0: Synchronizing with TNC [ 179.027465][ T8231] loop3: detected capacity change from 0 to 32768 [ 179.033049][ T8254] [U] è [ 179.049549][ T8231] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.817 (8231) [ 179.119092][ T8231] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 179.167386][ T8231] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 179.197433][ T8231] BTRFS info (device loop3): enabling disk space caching [ 179.217426][ T8231] BTRFS info (device loop3): force clearing of disk cache [ 179.224583][ T8231] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 179.296542][ T8231] BTRFS info (device loop3): use zstd compression, level 3 [ 179.303803][ T8231] BTRFS info (device loop3): disk space caching is enabled [ 179.506606][ T8231] BTRFS info (device loop3): enabling ssd optimizations [ 179.513622][ T8231] BTRFS info (device loop3): auto enabling async discard [ 179.531118][ T8283] loop4: detected capacity change from 0 to 256 [ 179.582071][ T8238] loop5: detected capacity change from 0 to 40427 [ 179.589957][ T8283] exfat: Deprecated parameter 'utf8' [ 179.595321][ T8283] exfat: Deprecated parameter 'namecase' [ 179.626793][ T8231] BTRFS info (device loop3): rebuilding free space tree [ 179.674319][ T8283] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 179.698287][ T8231] BTRFS info (device loop3): disabling free space tree [ 179.705263][ T8231] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 179.715299][ T8238] F2FS-fs (loop5): Image doesn't support compression [ 179.753881][ T8238] F2FS-fs (loop5): heap/no_heap options were deprecated [ 179.756732][ T8231] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 179.811633][ T8238] F2FS-fs (loop5): invalid crc value [ 179.819484][ T8259] loop1: detected capacity change from 0 to 32768 [ 179.887292][ T8238] F2FS-fs (loop5): Found nat_bits in checkpoint [ 179.929505][ T8259] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.010163][ T5798] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 180.025557][ T8298] loop4: detected capacity change from 0 to 16 [ 180.054779][ T8298] erofs: (device loop4): mounted with root inode @ nid 36. [ 180.153852][ T8259] XFS (loop1): Ending clean mount [ 180.198729][ T8238] F2FS-fs (loop5): Start checkpoint disabled! [ 180.277858][ T8238] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 180.420151][ T5792] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 181.236922][ T8321] loop1: detected capacity change from 0 to 22 [ 181.244059][ T8321] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 181.322471][ T8321] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 181.768902][ T8334] loop1: detected capacity change from 0 to 4096 [ 182.120101][ T8334] EXT4-fs (loop1): Test dummy encryption mode enabled [ 182.173794][ T8334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.241623][ T8309] loop4: detected capacity change from 0 to 32768 [ 182.345323][ T8309] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 182.374418][ T8309] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 182.436805][ T8337] loop3: detected capacity change from 0 to 40427 [ 182.483656][ T8337] F2FS-fs (loop3): Image doesn't support compression [ 182.496683][ T8337] F2FS-fs (loop3): heap/no_heap options were deprecated [ 182.536816][ T8337] F2FS-fs (loop3): invalid crc value [ 182.566130][ T8337] F2FS-fs (loop3): Found nat_bits in checkpoint [ 182.584050][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.642951][ T8309] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 182.715524][ T5874] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 182.736499][ T5874] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 182.785353][ T8337] F2FS-fs (loop3): Start checkpoint disabled! [ 182.868098][ T8337] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 182.977866][ T5874] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 241ms [ 183.013849][ T5874] gfs2: fsid=syz:syz.0: jid=0: Done [ 183.051004][ T8309] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 184.094454][ C1] sd 0:0:1:0: [sda] tag#2605 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 184.104941][ C1] sd 0:0:1:0: [sda] tag#2605 CDB: Read(6) 08 00 00 00 00 00 [ 184.319737][ T8409] loop5: detected capacity change from 0 to 2048 [ 184.443238][ T8415] loop1: detected capacity change from 0 to 128 [ 184.456479][ T8409] Alternate GPT is invalid, using primary GPT. [ 184.463306][ T8409] loop5: p2 p3 p7 [ 184.495693][ T8415] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 184.544669][ T8415] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.841160][ T8425] loop3: detected capacity change from 0 to 128 [ 184.923242][ T8425] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 184.938517][ T8428] netlink: 52 bytes leftover after parsing attributes in process `syz.5.869'. [ 184.977782][ T8425] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.051361][ T5923] udevd[5923]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 185.074357][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 185.074370][ T28] audit: type=1800 audit(1764169748.154:16): pid=8425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.867" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 185.130097][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 185.143393][ T6413] udevd[6413]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 185.272978][ T8436] loop4: detected capacity change from 0 to 256 [ 185.292076][ T8435] netlink: 16 bytes leftover after parsing attributes in process `syz.5.873'. [ 185.327391][ T8439] loop1: detected capacity change from 0 to 512 [ 185.425618][ T8439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.456819][ T8436] FAT-fs (loop4): Directory bread(block 64) failed [ 185.463403][ T8436] FAT-fs (loop4): Directory bread(block 65) failed [ 185.470850][ T8439] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.526001][ T8436] FAT-fs (loop4): Directory bread(block 66) failed [ 185.532961][ T8436] FAT-fs (loop4): Directory bread(block 67) failed [ 185.557469][ T8436] FAT-fs (loop4): Directory bread(block 68) failed [ 185.569401][ T8436] FAT-fs (loop4): Directory bread(block 69) failed [ 185.579651][ T8436] FAT-fs (loop4): Directory bread(block 70) failed [ 185.590726][ T8436] FAT-fs (loop4): Directory bread(block 71) failed [ 185.598571][ T8436] FAT-fs (loop4): Directory bread(block 72) failed [ 185.605252][ T8436] FAT-fs (loop4): Directory bread(block 73) failed [ 185.743144][ T27] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 185.768869][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.949232][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 185.965520][ T27] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 185.981588][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.003630][ T27] usb 6-1: Product: syz [ 186.020430][ T27] usb 6-1: Manufacturer: syz [ 186.025055][ T27] usb 6-1: SerialNumber: syz [ 186.048285][ T27] usb 6-1: config 0 descriptor?? [ 186.078293][ T27] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 186.692198][ T27] gspca_ov534_9: reg_w failed -71 [ 186.820289][ T8488] loop3: detected capacity change from 0 to 512 [ 186.828360][ T8489] loop4: detected capacity change from 0 to 64 [ 186.888750][ T8488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.921315][ T8488] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.928003][ T8494] loop1: detected capacity change from 0 to 64 [ 187.063716][ T8494] overlayfs: upper fs needs to support d_type. [ 187.116540][ T27] gspca_ov534_9: Unknown sensor 0000 [ 187.116642][ T27] ov534_9: probe of 6-1:0.0 failed with error -22 [ 187.138536][ T8494] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 187.145593][ T8494] overlayfs: failed to set xattr on upper [ 187.151103][ T27] usb 6-1: USB disconnect, device number 4 [ 187.163560][ T8494] overlayfs: ...falling back to redirect_dir=nofollow. [ 187.170419][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.195840][ T8494] overlayfs: ...falling back to index=off. [ 187.203009][ T8494] overlayfs: ...falling back to uuid=null. [ 187.463467][ T5792] Bad inode number on dev loop1: 4160749571 is out of range [ 187.482054][ T5792] Bad inode number on dev loop1: 4160749571 is out of range [ 187.621320][ T8502] loop3: detected capacity change from 0 to 8192 [ 187.716785][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 187.803079][ T8502] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 187.823877][ T8502] FAT-fs (loop3): Filesystem has been set read-only [ 187.833051][ T8502] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 2068) [ 187.857553][ T8502] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 2068) [ 187.923510][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.965181][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.990906][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 188.028954][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.070596][ T8] usb 6-1: config 0 descriptor?? [ 188.091640][ T3005] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.292919][ T3005] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.439112][ T3005] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.491433][ T8] logitech-djreceiver 0003:046D:C52F.0012: unknown main item tag 0x0 [ 188.524061][ T8] logitech-djreceiver 0003:046D:C52F.0012: unknown main item tag 0x0 [ 188.544971][ T8] logitech-djreceiver 0003:046D:C52F.0012: unknown main item tag 0x0 [ 188.577641][ T8] logitech-djreceiver 0003:046D:C52F.0012: unknown main item tag 0x0 [ 188.595443][ T8] logitech-djreceiver 0003:046D:C52F.0012: unknown main item tag 0x0 [ 188.605996][ T3005] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.626729][ T8] logitech-djreceiver 0003:046D:C52F.0012: unknown main item tag 0x0 [ 188.658505][ T8] logitech-djreceiver 0003:046D:C52F.0012: unknown main item tag 0x0 [ 188.703666][ T8] usb 6-1: USB disconnect, device number 5 [ 189.034554][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'. [ 189.079235][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.904'. [ 189.198163][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.211566][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.246599][ T5813] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 189.246614][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.288648][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.308830][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 189.318965][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.488991][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 189.518255][ T5813] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 189.542013][ T5813] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 189.560352][ T5813] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 189.580094][ T5813] usb 4-1: Product: syz [ 189.584386][ T5813] usb 4-1: Manufacturer: syz [ 189.590247][ T5813] usb 4-1: SerialNumber: syz [ 189.707649][ T5836] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 189.775826][ T8536] chnl_net:caif_netlink_parms(): no params data found [ 189.806196][ T5813] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 189.815524][ T5813] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 189.824942][ T5813] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 189.833137][ T5813] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 189.897404][ T5836] usb 6-1: Using ep0 maxpacket: 8 [ 189.910409][ T5836] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 189.923830][ T5836] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 189.933872][ T5836] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 189.942160][ T5836] usb 6-1: Product: syz [ 189.946680][ T5836] usb 6-1: Manufacturer: syz [ 189.951309][ T5836] usb 6-1: SerialNumber: syz [ 190.008322][ T5813] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 190.034481][ T5813] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 190.069130][ T5813] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 190.157761][ T8536] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.182939][ T8536] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.195361][ T5836] usb 6-1: Handspring Visor / Palm OS: port 255, is for unknown use [ 190.216950][ T5813] usb 4-1: USB disconnect, device number 12 [ 190.220579][ T8536] bridge_slave_0: entered allmulticast mode [ 190.235073][ T5836] usb 6-1: Handspring Visor / Palm OS: port 255, is for unknown use [ 190.244011][ T8536] bridge_slave_0: entered promiscuous mode [ 190.252119][ T5813] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 190.273176][ T8536] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.280645][ T5836] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 190.289843][ T5813] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 190.294968][ T8536] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.302016][ T5813] visor 4-1:1.0: device disconnected [ 190.316223][ T8536] bridge_slave_1: entered allmulticast mode [ 190.337409][ T8536] bridge_slave_1: entered promiscuous mode [ 190.397435][ T5836] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 190.412502][ T5836] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 190.433952][ T5836] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 190.453914][ T5836] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 190.466313][ T5836] usb 6-1: USB disconnect, device number 6 [ 190.494477][ T8536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.504501][ T5836] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 190.521264][ T8536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.537168][ T5836] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 190.559676][ T5836] visor 6-1:1.0: device disconnected [ 190.624466][ T8536] team0: Port device team_slave_0 added [ 190.651895][ T8536] team0: Port device team_slave_1 added [ 190.674644][ T3005] hsr_slave_0: left promiscuous mode [ 190.681330][ T3005] hsr_slave_1: left promiscuous mode [ 190.687442][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.694846][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.703270][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.710755][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.719611][ T3005] bridge_slave_1: left allmulticast mode [ 190.725253][ T3005] bridge_slave_1: left promiscuous mode [ 190.731046][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.739721][ T3005] bridge_slave_0: left allmulticast mode [ 190.745361][ T3005] bridge_slave_0: left promiscuous mode [ 190.752712][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.869922][ T8569] tmpfs: Unknown parameter 'usrquota,9' [ 190.878949][ T3005] veth1_macvtap: left promiscuous mode [ 190.884500][ T3005] veth0_macvtap: left promiscuous mode [ 190.894889][ T3005] veth1_vlan: left promiscuous mode [ 190.900520][ T3005] veth0_vlan: left promiscuous mode [ 191.361275][ T8580] loop3: detected capacity change from 0 to 64 [ 191.417539][ T5797] Bluetooth: hci0: command tx timeout [ 191.625006][ T8584] loop3: detected capacity change from 0 to 512 [ 191.642767][ T8584] EXT4-fs (loop3): Test dummy encryption mode enabled [ 191.660489][ T8584] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 191.693371][ T8584] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.916: bad orphan inode 131083 [ 191.706021][ T8568] Falling back ldisc for ttyprintk. [ 191.710787][ T8584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.986036][ T8584] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 192.040896][ T3005] team0 (unregistering): Port device team_slave_1 removed [ 192.082240][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.152606][ T3005] team0 (unregistering): Port device team_slave_0 removed [ 192.257686][ T3005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.338523][ T3005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.564758][ T8608] loop4: detected capacity change from 0 to 8 [ 192.594430][ T5836] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 192.620129][ T8608] SQUASHFS error: zlib decompression failed, data probably corrupt [ 192.635107][ T8608] SQUASHFS error: Failed to read block 0x9b: -5 [ 192.642413][ T8608] SQUASHFS error: Unable to read metadata cache entry [99] [ 192.649758][ T8608] SQUASHFS error: Unable to read inode 0x127 [ 192.786615][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 192.793830][ T5836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.810929][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.823043][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 192.851683][ T5836] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 192.880351][ T5836] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.903107][ T28] audit: type=1326 audit(1764169755.984:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a778f749 code=0x7ffc0000 [ 192.905505][ T5836] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 192.929143][ T28] audit: type=1326 audit(1764169755.984:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a778f749 code=0x7ffc0000 [ 192.964888][ T5836] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 192.982291][ T5836] usb 4-1: Manufacturer: syz [ 192.988427][ T28] audit: type=1326 audit(1764169756.014:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fd9a778f749 code=0x7ffc0000 [ 193.022836][ T5836] usb 4-1: config 0 descriptor?? [ 193.034272][ T28] audit: type=1326 audit(1764169756.014:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a778f749 code=0x7ffc0000 [ 193.062378][ T28] audit: type=1326 audit(1764169756.014:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a778f749 code=0x7ffc0000 [ 193.095363][ T28] audit: type=1326 audit(1764169756.044:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fd9a778f749 code=0x7ffc0000 [ 193.117967][ T28] audit: type=1326 audit(1764169756.044:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a778f749 code=0x7ffc0000 [ 193.147167][ T28] audit: type=1326 audit(1764169756.044:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a778f749 code=0x7ffc0000 [ 193.267713][ T3005] bond0 (unregistering): Released all slaves [ 193.350121][ T5836] rc_core: IR keymap rc-hauppauge not found [ 193.356038][ T5836] Registered IR keymap rc-empty [ 193.361254][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.374482][ T8536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.382176][ T8536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.414235][ T8536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.417172][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.448182][ T8536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.455145][ T8536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.487228][ T5797] Bluetooth: hci0: command tx timeout [ 193.491637][ T5836] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 193.538546][ T5836] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 193.625451][ T8536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.667138][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.708919][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.743099][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.787224][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.826671][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.868653][ T8536] hsr_slave_0: entered promiscuous mode [ 193.881760][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.890793][ T8536] hsr_slave_1: entered promiscuous mode [ 193.940111][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.995098][ T8627] loop4: detected capacity change from 0 to 1024 [ 193.996713][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 194.050372][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 194.121140][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 194.180200][ T5836] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 194.214575][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.221011][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.236487][ T5836] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 194.245388][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.934'. [ 194.260021][ T5836] usb 4-1: USB disconnect, device number 13 [ 194.494344][ T8637] loop5: detected capacity change from 0 to 128 [ 194.636866][ T8536] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 194.707039][ T8536] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 194.748081][ T8536] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 194.807832][ T8536] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 194.839268][ T8649] loop3: detected capacity change from 0 to 512 [ 194.889364][ T8649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.936681][ T8649] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.049185][ T8649] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #2: comm syz.3.939: corrupted inode contents [ 195.129361][ T8649] EXT4-fs error (device loop3): ext4_dirty_inode:6120: inode #2: comm syz.3.939: mark_inode_dirty error [ 195.166101][ T8536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.189065][ T8649] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #2: comm syz.3.939: corrupted inode contents [ 195.248284][ T8536] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.271194][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.278336][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.302776][ T8664] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #2: comm syz.3.939: corrupted inode contents [ 195.323804][ T28] audit: type=1326 audit(1764169758.404:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbad8f749 code=0x7ffc0000 [ 195.352470][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.359619][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.387071][ T28] audit: type=1326 audit(1764169758.404:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbad8f749 code=0x7ffc0000 [ 195.387365][ T8664] EXT4-fs error (device loop3): ext4_dirty_inode:6120: inode #2: comm syz.3.939: mark_inode_dirty error [ 195.455644][ T8664] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #2: comm syz.3.939: corrupted inode contents [ 195.507371][ T8664] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.939: mark_inode_dirty error [ 195.542247][ T8664] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #2: comm syz.3.939: corrupted inode contents [ 195.568023][ T5793] Bluetooth: hci0: command tx timeout [ 195.591297][ T8664] EXT4-fs error (device loop3): ext4_dirty_inode:6120: inode #2: comm syz.3.939: mark_inode_dirty error [ 195.664445][ T8677] loop4: detected capacity change from 0 to 512 [ 195.762810][ T8677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.818113][ T8677] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.820438][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.011295][ T7748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.241962][ T8536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.253402][ T8694] nbd: must specify an index to disconnect [ 196.286717][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 196.481027][ T8704] loop3: detected capacity change from 0 to 1024 [ 197.161138][ T8536] veth0_vlan: entered promiscuous mode [ 197.184814][ T8728] loop4: detected capacity change from 0 to 256 [ 197.192722][ T8730] loop5: detected capacity change from 0 to 22 [ 197.222609][ T8730] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 197.240333][ T8536] veth1_vlan: entered promiscuous mode [ 197.258688][ T8730] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 197.352435][ T8728] FAT-fs (loop4): Directory bread(block 64) failed [ 197.377658][ T8728] FAT-fs (loop4): Directory bread(block 65) failed [ 197.404476][ T8536] veth0_macvtap: entered promiscuous mode [ 197.411090][ T8728] FAT-fs (loop4): Directory bread(block 66) failed [ 197.446187][ T8728] FAT-fs (loop4): Directory bread(block 67) failed [ 197.470559][ T8536] veth1_macvtap: entered promiscuous mode [ 197.496984][ T8728] FAT-fs (loop4): Directory bread(block 68) failed [ 197.512157][ T8728] FAT-fs (loop4): Directory bread(block 69) failed [ 197.542561][ T8728] FAT-fs (loop4): Directory bread(block 70) failed [ 197.569142][ T8728] FAT-fs (loop4): Directory bread(block 71) failed [ 197.580524][ T8728] FAT-fs (loop4): Directory bread(block 72) failed [ 197.598327][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.598373][ T8728] FAT-fs (loop4): Directory bread(block 73) failed [ 197.637535][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.647506][ T5797] Bluetooth: hci0: command tx timeout [ 197.666263][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.676971][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.688051][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.698730][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.711327][ T8536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.786033][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.821410][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.837232][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.845296][ T8753] loop5: detected capacity change from 0 to 1024 [ 197.848323][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.867705][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.880478][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.908407][ T8536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.949323][ T8536] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.972992][ T8536] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.982597][ T8536] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.994098][ T8536] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.173076][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.185229][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.262716][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.295467][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.306537][ T5874] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 198.487273][ T8767] loop5: detected capacity change from 0 to 64 [ 198.528942][ T5874] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 198.555720][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 198.555733][ T28] audit: type=1800 audit(1764169761.634:30): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.967" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 198.557337][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.586307][ T28] audit: type=1800 audit(1764169761.634:31): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.967" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 198.646267][ T5874] usb 5-1: config 0 descriptor?? [ 198.863899][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 199.082120][ T5874] ath6kl: Unsupported hardware version: 0x0 [ 199.102903][ T5874] ath6kl: Failed to init ath6kl core: -22 [ 199.130502][ T5874] ath6kl_usb: probe of 5-1:0.0 failed with error -22 [ 199.225308][ T8790] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 199.289882][ T5874] usb 5-1: USB disconnect, device number 3 [ 199.737052][ T5856] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 199.841460][ T8812] loop3: detected capacity change from 0 to 4096 [ 199.934916][ T8812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.969117][ T5856] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 200.031754][ T5856] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 200.045065][ T8812] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #15: comm syz.3.981: corrupted inode contents [ 200.053183][ T8826] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 200.080926][ T8812] EXT4-fs error (device loop3): ext4_dirty_inode:6120: inode #15: comm syz.3.981: mark_inode_dirty error [ 200.080964][ T5856] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 200.133172][ T8812] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #15: comm syz.3.981: corrupted inode contents [ 200.170794][ T8812] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.981: mark_inode_dirty error [ 200.176466][ T5856] usb 7-1: config 220 has no interface number 2 [ 200.198256][ T8812] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #15: comm syz.3.981: corrupted inode contents [ 200.217231][ T5856] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 200.255972][ T5856] usb 7-1: config 220 interface 0 has no altsetting 0 [ 200.266670][ T5856] usb 7-1: config 220 interface 76 has no altsetting 0 [ 200.274685][ T5856] usb 7-1: config 220 interface 1 has no altsetting 0 [ 200.309581][ T5856] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 200.331536][ T8812] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.981: mark_inode_dirty error [ 200.352103][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.380716][ T5856] usb 7-1: Product: syz [ 200.395163][ T5856] usb 7-1: Manufacturer: syz [ 200.405278][ T5856] usb 7-1: SerialNumber: syz [ 200.411244][ T8812] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #15: comm syz.3.981: corrupted inode contents [ 200.467248][ T8812] EXT4-fs error (device loop3): ext4_truncate:4294: inode #15: comm syz.3.981: mark_inode_dirty error [ 200.524854][ T8812] EXT4-fs error (device loop3) in ext4_setattr:5659: Corrupt filesystem [ 200.539675][ T8837] loop5: detected capacity change from 0 to 64 [ 200.578798][ T8828] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #15: comm syz.3.981: corrupted inode contents [ 200.672123][ T5856] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 200.690409][ T5856] usb 7-1: No valid video chain found. [ 200.706174][ T5856] usb 7-1: selecting invalid altsetting 0 [ 200.738177][ T5856] usb 7-1: selecting invalid altsetting 0 [ 200.739238][ T5798] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 200.744352][ T5856] usbtest: probe of 7-1:220.1 failed with error -22 [ 200.786765][ T5856] usb 7-1: USB disconnect, device number 2 [ 200.825798][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.920699][ T8841] loop5: detected capacity change from 0 to 512 [ 200.990041][ T8841] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 201.031363][ T8841] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 201.058009][ T8841] System zones: 1-12 [ 201.062188][ T8841] EXT4-fs (loop5): orphan cleanup on readonly fs [ 201.078729][ T8841] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.990: attempt to clear invalid blocks 1024 len 1 [ 201.097796][ T8841] EXT4-fs (loop5): Remounting filesystem read-only [ 201.124866][ T8841] EXT4-fs (loop5): 1 truncate cleaned up [ 201.150883][ T8841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 201.368050][ T7906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 201.715545][ T8866] loop5: detected capacity change from 0 to 512 [ 201.821517][ T8866] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 201.847714][ T8866] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 201.900934][ T8866] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.996: Corrupt directory, running e2fsck is recommended [ 201.914503][ T8873] program syz.6.997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.001054][ T8866] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 202.029687][ T8866] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2249: inode #15: comm syz.5.996: corrupted in-inode xattr: e_name out of bounds [ 202.066381][ T8866] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.996: couldn't read orphan inode 15 (err -117) [ 202.114623][ T8845] loop3: detected capacity change from 0 to 40427 [ 202.137825][ T8866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.154380][ T8845] F2FS-fs (loop3): invalid crc value [ 202.178877][ T8845] F2FS-fs (loop3): Found nat_bits in checkpoint [ 202.393112][ T7906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.399757][ T8884] loop6: detected capacity change from 0 to 64 [ 202.408498][ T8845] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 202.753985][ T8891] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1005'. [ 202.798634][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 203.126762][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1007'. [ 203.513944][ T8882] loop4: detected capacity change from 0 to 40427 [ 203.524654][ T8913] loop3: detected capacity change from 0 to 4096 [ 203.556966][ T8913] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 203.570101][ T8882] F2FS-fs (loop4): heap/no_heap options were deprecated [ 203.597104][ T8882] F2FS-fs (loop4): Image doesn't support compression [ 203.603878][ T8882] F2FS-fs (loop4): heap/no_heap options were deprecated [ 203.642584][ T8882] F2FS-fs (loop4): invalid crc value [ 203.684961][ T8913] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 203.696306][ T8882] F2FS-fs (loop4): Found nat_bits in checkpoint [ 203.860891][ T8913] overlayfs: upper fs does not support tmpfile. [ 203.884368][ T8882] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 203.907523][ T8913] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 204.058196][ T7748] syz-executor: attempt to access beyond end of device [ 204.058196][ T7748] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 204.116564][ T7748] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 204.591332][ T8910] loop5: detected capacity change from 0 to 40427 [ 204.612750][ T8912] loop6: detected capacity change from 0 to 40427 [ 204.667548][ T8912] F2FS-fs (loop6): heap/no_heap options were deprecated [ 204.735465][ T8912] F2FS-fs (loop6): invalid crc value [ 204.736972][ T8910] F2FS-fs (loop5): invalid crc value [ 204.800543][ T8910] F2FS-fs (loop5): Found nat_bits in checkpoint [ 204.813483][ T8912] F2FS-fs (loop6): Found nat_bits in checkpoint [ 205.024575][ T8910] F2FS-fs (loop5): Start checkpoint disabled! [ 205.024577][ T8912] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 205.099044][ T8910] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 205.225195][ T8536] syz-executor: attempt to access beyond end of device [ 205.225195][ T8536] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 205.286536][ T8536] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 205.646482][ T8929] loop3: detected capacity change from 0 to 32768 [ 205.666560][ T3005] kworker/u4:12: attempt to access beyond end of device [ 205.666560][ T3005] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 205.718874][ T3005] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 205.748030][ T3005] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 205.750918][ T8929] JBD2: Ignoring recovery information on journal [ 205.956866][ T8929] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 206.197372][ T5798] ocfs2: Unmounting device (7,3) on (node local) [ 206.607989][ T8961] loop6: detected capacity change from 0 to 512 [ 206.657487][ T8961] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 206.697554][ T8961] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 206.760913][ T8966] loop3: detected capacity change from 0 to 128 [ 206.796537][ T8961] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 206.816278][ T8947] loop4: detected capacity change from 0 to 40427 [ 206.824753][ T8961] System zones: 0-2, 18-18, 34-34 [ 206.832651][ T8947] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 206.840180][ T8947] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 206.844155][ T8961] EXT4-fs error (device loop6): ext4_orphan_get:1399: comm syz.6.1020: inode #15: comm syz.6.1020: iget: illegal inode # [ 206.885525][ T8961] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1020: couldn't read orphan inode 15 (err -117) [ 206.933174][ T8961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.951938][ T8966] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.997755][ T8966] ext4 filesystem being mounted at /262/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 207.012921][ T8947] F2FS-fs (loop4): Found nat_bits in checkpoint [ 207.187163][ T8536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.232106][ T8947] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 207.277562][ T5798] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.290541][ T8947] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 207.345536][ T28] audit: type=1800 audit(1764169770.424:32): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1018" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 207.487633][ T7748] syz-executor: attempt to access beyond end of device [ 207.487633][ T7748] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 207.536314][ T7748] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 208.010697][ T8996] loop6: detected capacity change from 0 to 128 [ 208.056120][ T8996] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 208.145601][ T9002] loop3: detected capacity change from 0 to 16 [ 208.156660][ T8996] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 208.226189][ T9002] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 208.333731][ T8996] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.6.1029: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 208.402907][ T8996] EXT4-fs (loop6): Remounting filesystem read-only [ 208.445601][ T8982] loop5: detected capacity change from 0 to 32768 [ 208.545864][ T8536] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.621739][ T8982] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 208.895953][ T7906] ocfs2: Unmounting device (7,5) on (node local) [ 208.979100][ T9020] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1034'. [ 209.127891][ T9023] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1033'. [ 209.196616][ T9023] block nbd0: not configured, cannot reconfigure [ 209.284618][ T9009] loop3: detected capacity change from 0 to 32768 [ 209.652703][ T9040] program syz.4.1040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.986681][ T788] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 210.016673][ T5874] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 210.058931][ T9057] ubi31: attaching mtd0 [ 210.063490][ T9057] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 210.192145][ T788] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 210.222119][ T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.232143][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 210.245046][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 210.256728][ T9063] loop4: detected capacity change from 0 to 1024 [ 210.270318][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.289793][ T788] usb 6-1: config 0 descriptor?? [ 210.297062][ T9063] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 210.314265][ T5874] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 210.327781][ T788] cp210x 6-1:0.0: cp210x converter detected [ 210.336883][ T9063] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 210.377343][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 210.409515][ T9063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.444712][ T5874] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 210.479627][ T9070] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1049'. [ 210.496595][ T5874] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 210.508018][ T7748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.515921][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.575246][ T5874] usb 4-1: config 0 descriptor?? [ 210.584466][ T9046] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 210.780938][ T788] usb 6-1: cp210x converter now attached to ttyUSB0 [ 210.879477][ T9079] tipc: Started in network mode [ 210.884437][ T9079] tipc: Node identity 00000000000000000000ffffac141422, cluster identity 4711 [ 210.912157][ T9079] tipc: Enabling of bearer rejected, failed to enable media [ 210.938474][ T5793] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 211.032987][ T5874] usb 6-1: USB disconnect, device number 7 [ 211.051241][ T5874] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 211.119751][ T5874] cp210x 6-1:0.0: device disconnected [ 211.153666][ T5856] usb 4-1: USB disconnect, device number 14 [ 211.160091][ T5797] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 211.476588][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 211.673475][ T8] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 211.694035][ T9087] loop4: detected capacity change from 0 to 40427 [ 211.696118][ T8] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 211.752009][ T9087] F2FS-fs (loop4): invalid crc value [ 211.767641][ T8] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 211.790506][ T8] usb 7-1: config 220 has no interface number 2 [ 211.797748][ T9087] F2FS-fs (loop4): Found nat_bits in checkpoint [ 211.812063][ T8] usb 7-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 211.857005][ T8] usb 7-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 211.896685][ T8] usb 7-1: config 220 interface 0 has no altsetting 0 [ 211.906939][ T8] usb 7-1: config 220 interface 76 has no altsetting 0 [ 211.934976][ T8] usb 7-1: config 220 interface 1 has no altsetting 0 [ 211.979849][ T8] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 212.001290][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.020092][ T9087] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 212.027968][ T8] usb 7-1: Product: syz [ 212.072718][ T8] usb 7-1: Manufacturer: syz [ 212.084363][ T8] usb 7-1: SerialNumber: syz [ 212.205720][ T7748] syz-executor: attempt to access beyond end of device [ 212.205720][ T7748] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 212.231629][ T7748] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 212.346816][ T8] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 212.353241][ T8] usb 7-1: No valid video chain found. [ 212.377820][ T8] usb 7-1: selecting invalid altsetting 0 [ 212.397635][ T8] usb 7-1: selecting invalid altsetting 0 [ 212.403508][ T8] usbtest: probe of 7-1:220.1 failed with error -22 [ 212.443406][ T8] usb 7-1: USB disconnect, device number 3 [ 212.701120][ T9104] loop5: detected capacity change from 0 to 32768 [ 212.776001][ T9104] read_mapping_page failed! [ 212.794004][ T9104] ERROR: (device loop5): txCommit: [ 212.794004][ T9104] [ 212.825011][ T9104] ERROR: (device loop5): remounting filesystem as read-only [ 212.896549][ T968] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 212.951645][ T112] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 212.985039][ T112] ------------[ cut here ]------------ [ 212.990808][ T112] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 213.022671][ T112] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 213.028778][ T112] CPU: 1 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 213.035995][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.046080][ T112] RIP: 0010:txUnlock+0xc87/0xcb0 [ 213.051055][ T112] Code: 0f 53 62 07 0f 0b e8 48 08 84 fe 48 c7 c7 c0 0f e4 8a 48 c7 c6 b9 0b e4 8a ba a4 03 00 00 48 c7 c1 a0 1c e4 8a e8 e9 52 62 07 <0f> 0b e8 22 08 84 fe 48 c7 c7 c0 0f e4 8a 48 c7 c6 b9 0b e4 8a ba [ 213.070684][ T112] RSP: 0018:ffffc90002cb7d08 EFLAGS: 00010246 [ 213.076866][ T112] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 472fdf287e539400 [ 213.084858][ T112] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 213.092844][ T112] RBP: ffffc9000282a1b0 R08: ffffc90002cb7a07 R09: 1ffff92000596f40 [ 213.100820][ T112] R10: dffffc0000000000 R11: fffff52000596f41 R12: ffff88802458e0f8 [ 213.108793][ T112] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88801ce73494 [ 213.116770][ T112] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 213.125702][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.132314][ T112] CR2: 0000555559d2a808 CR3: 000000006be8c000 CR4: 00000000003506e0 [ 213.140291][ T112] Call Trace: [ 213.143578][ T112] [ 213.146531][ T112] ? lockdep_hardirqs_on+0x98/0x150 [ 213.151748][ T112] jfs_lazycommit+0x570/0xa60 [ 213.156438][ T112] ? txFreelock+0x5a0/0x5a0 [ 213.160948][ T112] ? do_task_dead+0xd0/0xd0 [ 213.165451][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 213.170401][ T112] kthread+0x2fa/0x390 [ 213.174468][ T112] ? txFreelock+0x5a0/0x5a0 [ 213.178978][ T112] ? kthread_blkcg+0xd0/0xd0 [ 213.183566][ T112] ret_from_fork+0x48/0x80 [ 213.187992][ T112] ? kthread_blkcg+0xd0/0xd0 [ 213.192587][ T112] ret_from_fork_asm+0x11/0x20 [ 213.197413][ T112] [ 213.200561][ T112] Modules linked in: [ 213.206949][ T968] usb 4-1: Using ep0 maxpacket: 16 [ 213.212828][ T112] ---[ end trace 0000000000000000 ]--- [ 213.226810][ T968] usb 4-1: config index 0 descriptor too short (expected 42, got 18) [ 213.234930][ T968] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 213.249759][ T112] RIP: 0010:txUnlock+0xc87/0xcb0 [ 213.254744][ T112] Code: 0f 53 62 07 0f 0b e8 48 08 84 fe 48 c7 c7 c0 0f e4 8a 48 c7 c6 b9 0b e4 8a ba a4 03 00 00 48 c7 c1 a0 1c e4 8a e8 e9 52 62 07 <0f> 0b e8 22 08 84 fe 48 c7 c7 c0 0f e4 8a 48 c7 c6 b9 0b e4 8a ba [ 213.280929][ T968] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 213.294295][ T112] RSP: 0018:ffffc90002cb7d08 EFLAGS: 00010246 [ 213.300622][ T112] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 472fdf287e539400 [ 213.309039][ T112] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 213.317419][ T112] RBP: ffffc9000282a1b0 R08: ffffc90002cb7a07 R09: 1ffff92000596f40 [ 213.325702][ T112] R10: dffffc0000000000 R11: fffff52000596f41 R12: ffff88802458e0f8 [ 213.334432][ T968] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 213.343685][ T968] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 213.354214][ T112] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88801ce73494 [ 213.362383][ T968] usb 4-1: Product: syz [ 213.367975][ T968] usb 4-1: SerialNumber: syz [ 213.373449][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 213.390488][ T968] r8152-cfgselector 4-1: config 0 descriptor?? [ 213.396738][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.403348][ T112] CR2: 00007fd9a79b7858 CR3: 0000000063b7d000 CR4: 00000000003506f0 [ 213.412852][ T112] Kernel panic - not syncing: Fatal exception [ 213.419230][ T112] Kernel Offset: disabled [ 213.423557][ T112] Rebooting in 86400 seconds..