last executing test programs: 2m23.394164124s ago: executing program 0 (id=435): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1f, 0x8, 0x4, 0x7cb4, 0x40000, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 2m19.396107643s ago: executing program 0 (id=441): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsmount(r0, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) preadv(r5, &(0x7f00000015c0), 0x0, 0x0, 0x0) 2m17.847088086s ago: executing program 0 (id=445): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000003c0)={0x2, 0x1, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064", 0x14}, {&(0x7f0000000100)="174640b6d80fb2eedc81ba60ccbb9df1", 0x10}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5825be57aff9352b356be67ca2746357d1787935589db15a23319e3f64fdf5", 0x1f}], 0x1}}], 0x2, 0x840) 2m17.267268274s ago: executing program 0 (id=446): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7, 0x0, 0xfffffffd, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00', 0x400, 0x2000, 0x1}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) 2m15.348588302s ago: executing program 0 (id=448): syz_open_dev$loop(0x0, 0x10, 0x4a003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(r1, 0x0, 0x0) io_setup(0x6, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r2, 0x0, 0x0) 2m14.374873187s ago: executing program 0 (id=450): accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x40000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x44880, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x3, 0x2, 0x3}, 0x10) 1m58.966192073s ago: executing program 32 (id=450): accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x40000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x44880, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x3, 0x2, 0x3}, 0x10) 8.335587447s ago: executing program 5 (id=791): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file1\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 6.027212071s ago: executing program 2 (id=797): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4001, &(0x7f0000000040)=ANY=[], 0x5, 0x6a0, &(0x7f0000000140)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, 0x0, 0x0) 5.814917544s ago: executing program 5 (id=799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000e00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000480)) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x4000001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendfile(r5, r4, 0x0, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 5.596102697s ago: executing program 2 (id=800): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x18, 0x1, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x8000000004) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 5.566986948s ago: executing program 5 (id=801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001080)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 5.487441359s ago: executing program 1 (id=802): r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x8}}, 0x20) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) unshare(0x8000600) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) 5.487288659s ago: executing program 3 (id=803): mknod(&(0x7f0000000100)='./file0\x00', 0x8000422, 0x7fbbfd) r0 = socket$unix(0x1, 0x5, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 4.74154052s ago: executing program 2 (id=804): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5825be57aff9352b356be67ca2746357d1787935589db15a23319e3f64fd", 0x1e}], 0x1}}], 0x1, 0x840) 4.71278203s ago: executing program 3 (id=805): openat$dir(0xffffffffffffff9c, 0x0, 0x119880, 0xc3) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) add_key$user(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) 4.430123125s ago: executing program 5 (id=806): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001580), r0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf25050000000800010001b0"], 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x90) 4.429501194s ago: executing program 2 (id=807): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x7005, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) 4.344111746s ago: executing program 3 (id=808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val, @void, @eth={@random="ad30660a1dca", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x2, 0x5c, 0x64, 0x0, 0x1, 0x11, 0x0, @rand_addr=0x64010102, @remote}, {0x4e22, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "c029ea76ee9a86f07ceb3cde30a31d6b4fad41ea388a21ad", "25896276f9db7b9faa0f40ab7a8b55bc7f5da7d358330ca39fdfb5b6a7fb6955"}}}}}}}, 0x6e) 4.07548027s ago: executing program 5 (id=809): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x5513, &(0x7f0000004440)="$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") 3.904793252s ago: executing program 3 (id=810): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4001, &(0x7f0000000040)=ANY=[], 0x5, 0x6a0, &(0x7f0000000140)="$eJzs3c1rHOcdB/DvrFay5IKjJHbilkBFDGmpqS1Z2K17idtD8SGU4B5CoRdhy7Hw2gmyUpRQilr6cu0hf0B60KGQU6F3Qwo9tb3lqlMJFHrJSTeXmZ19keWVdhVpFTWfD8zsM/O8zPP8ZuaZXS1iA3xl3byY5uMUuXnxjfVye2tzsbW1uXiqzm4lKdONpNl+SfEwKT5JbqS95Ovlzrp8Meg4H65cv/Xp51uftbea9VKVb+xVb1/T5WqjXjKXZKJ+3W1y2EZ3tHd7YHt7W+qmiu4Iy4Bd6AQOjtuTXTZGqX7w+xb40ijaz81dZpPT9VO2ek9Qzw6N8fbu8I00ywEAAMAJ9dx2trOeM8fdDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhJ6t//L+ql0UnPpej8/n+z3leaSnKrccx9Hl3RTT0+1n4AAAAAAAAAwOH45na2s54zne0n7a/GX63WZ6v11/JeHmU5q7mU9SxlLWtZzUKS2b6GptaX1tZWF4aoeeWZNa+MY7QAAAAAAAAA8H/rN7nZ+/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+DIpkov1SLWc76dk0mkmmk0yV5TaSf3XSJ0TxrJ2Px98PAAAA+EKmD1Dnue1sZz1nOttPiuoz/0vV5+XpvJeHWctK1tLKcu7Un6HLT/2Nrc3F1tbm4oOtzcXqwD9/0tZu54f/HakbVYtp/+3h2Uc+X5WYyd2sVHsu5XbVmTtpVDVL5+v+dJedB/l12aeZ12tD9uxO/Voe7I+D/opwGBqjVpitKk12IzJf961s6Pm9I7Hv2WnueaSFNLp/+Tm7x5E6QypGjPnpTr0kv38q5q//+88/G7KZI9CNRCNVJK70XX0v7R3z5Ft//fite62H9+/dfXTxyC6jcXn6mljsi8TLJzoSzRHLz3ev9PZQbubH+WkuZi5vZjUr+UVOJVlOPTNmqS5Xrmf7opTsitSNHVtv7teTqfq8tGfRRs51c3b3aSlrWc5cTlWppbxa1T2TlRR5J3eynGu51r31ruZqrved4XMDz3BVoZppG6Pd9Re+3Qth/lDO1MPVS/4+bMHRtR+pZVyf74tr/5w7W+X17+lF6YUhnkcjzo3Nb5TrJ71n7ciPjSPzdCQW+iLx4t6R+FN1bzxqPby/em/p3QHtbzy1/dpkL/27wU/myQMP6MDK6+WFTNczyc6ro8x7sTvL7IzXVP2NSzuvsSvvXJVXFJ079Sd9d+q1XMlCvlffqVP1e7jdLV2p8l7enTfR6fn5vrwd77fyzj/GH0sADuD0d05Pzfxn5p8zH838dubezBvTPzr1/VOvTGXyb5M/aM5PvNZ4pfhLPsqvep//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAg3v0/gf3l1qt5dVnJxqDsw43UdQ/5DOoTDMzOcJuTOZQG+z8/NF+Q9449OFkTOfriyWmhonPEIm3boyhzxPJOKOa2X3vykNNlMPr7JlIL6s+RQf5cVHgRLi89uDdy4/e/+C7Kw+W3l5+e/nh5NWr1+evX722ePnuSmt5vr0+7l4CR6H3fmBQiY/H2yEAAAAAAAAAAABgX+P4T4O+w80d41ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAE+rmxTQnU2Rh/tJ8ub21udgql066V7KZpNFIil8mxSfJjbSXzPY1Vww6zocr1299+vnWZ722mp3yjU69qQOPYqNeMpdkon7dZfj2d7R3e1B7Qyu6kSkDdqETODhu/wsAAP//WvEELA==") r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, 0x0, 0x0) 3.607523247s ago: executing program 3 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000e00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000480)) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x4000001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendfile(r6, r5, 0x0, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 2.950145676s ago: executing program 2 (id=812): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.767334469s ago: executing program 1 (id=813): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0x499, &(0x7f0000001900)={0x0, 0xb803, 0x0, 0x214, 0x2a3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 2.7257625s ago: executing program 4 (id=814): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x18, 0x1, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x8000000004) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 2.620509031s ago: executing program 1 (id=815): mknod(&(0x7f0000000100)='./file0\x00', 0x8000422, 0x7fbbfd) r0 = socket$unix(0x1, 0x5, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2.442220654s ago: executing program 4 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001080)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 2.426936504s ago: executing program 1 (id=817): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x1000000, 0x0}) 1.847528822s ago: executing program 1 (id=818): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5825be57aff9352b356be67ca2746357d1787935589db15a23319e3f64fdf5", 0x1f}], 0x1}}], 0x1, 0x840) 1.366792649s ago: executing program 4 (id=819): openat$dir(0xffffffffffffff9c, 0x0, 0x119880, 0xc3) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) add_key$user(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) 1.33910336s ago: executing program 1 (id=820): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "9d826f20"}]}}, 0x0}, 0x0) 1.232295941s ago: executing program 4 (id=821): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0xff, 0x5f35, &(0x7f0000006180)="$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") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c696f636861727365743d63703433372c757365667265652c726f6469722c7569643e74353a7bd912f41b207e4bc4478b479f5a21373fd412d72f65702b57308921a665e19ef4cc41aac5e7c09d211fd4c1fbf43833c769c6b16297c14d0d92df4f0371acd1b184d6", @ANYRES16=0x0, @ANYRES8], 0x6, 0x2aa, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) setresuid(0xee00, 0xee01, 0x0) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 839.422997ms ago: executing program 5 (id=822): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x7005, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) 533.965502ms ago: executing program 3 (id=823): r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x8}}, 0x20) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) unshare(0x8000600) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) 463.063383ms ago: executing program 4 (id=824): openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB="747970653d25c2506b2c6e6f626172726965722c63726561746f723dbd3c66f52c6e6c733d69736f383835392d352c756d61736b3d30303030303030303030303030303030303030303033372c756d61736b3d30303030303030303030303030303030303030303030302c00118467e4c2bc915b8214a76410d8c106c8e94cd477fa867e8d7defd3fee1ddf11043edc9c69b5f32ba8740f2df79cf01d4b39e7deb49cab640d6f8dc7b4a25a8c1f2b17a54a03712cd4bf5f917d65505bd7b8559"], 0x13, 0x6bf, &(0x7f0000005440)="$eJzs3U2InHcdB/DvM5nMZlJIt22aRhG6NFC0wWQ3Q00EoVFEcggS9NLrkmyaJZu0bLaSFjETtRU8eZIePFRKPPQkKkI9ifUsCF48xXPAm4cc1C3PM8/Mzu5MNrt52dm2nw88+/yf+b/9nl+el5lns0yAz60zr2ZvN0XOHD17vdy+XSS51blSlW91lpJMJWkkzd4qRTspPk5Op7fkC+WL9XDFveZ5+c5HRfO9Dzu9rWa9VO0bm/UbMbZlN9k32NiTZKZX/O+Whx0Zr1qqcc6vjfeAikHcZcKO9BMHk7Y6ortW2bhv962ft8CudaN33xwxnexP7+5avg9IfXW4/5Vh8ja9NnV3Lg4AAAB4XMZ+lh/25N3czfUc2JlwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LOh6H1nYFEvjX55JkX/+/9bQ9+p35pwuA/pnYvV6ntPTjoQAAAAAAAAAHgoz9/N3VzPgf72alH9zv+FauNg9fOJvJlrWchyjuV65rOSlSxnLsn00ECt6/MrK8tzoz1/mbLn6urqjbrnibE9T6yPq7sx0HH/02CkEQAAAAAAAAB8bv04Z9Z+/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALtBkezprarlYL88nUYzyb4kreRfH9TNWxMOd9Tvn9hW8z8/tkAAAABg12jX6wPF/3uF1aL6zH+o+ty/L2/malaymJUsZSEXqmcBvU/9jb93O0u3b3WulMvowN/897biqEZM79nD+JlnqxbP9prfTM7kO/l+jmYm57Kcxfwg81nJQmby7ZlkJfMpMl0/vZi+faudfqyj8Z5et3VuY2zPD5XL+A5XkbRzMYtVbMdyvtUPvVG3Ozw02x9bqfM2cLPMTvFKbYs5ulCvy7F+kZExJ2i62vO9g4zM1rkvs/HUcN5Hc7/N42TjTHNpDJ5BHVybpdzcONMD5Xx/vS5z/e7jzfk2H6Wtz0T35+VW/+g7tHnOk6/84y/nLjWuXr508drR3XMYPaCNx0RnKBPPbSkTS2Umug+RiX0PE/+j06qz0buKDq6W2fRqWZXm80LV90AW8928ngtZyMnMZi6nMpuv50Q6OTGU12c3z2t1rjW2d64d+XJdKO9JPxu6N+2YqXtVlHl9aiivw1e66apu+JW1LD29hSwVrYzP0j/HhtL8Yl0o5/jJ0B1n8jZmYm4oE89snolf/281ybWlq5eXL82/scX5XqzX5Wn7zvpr8wePZIe2pZm1f4zyeHm6/9q7WXd0lHXP9Os25KusK5r9Edff51qtVOdzr/p+Z2o50qGb/dbDI/Xqnsu4uk5Vd3iobt27nLyepcG7EAB2sf0v7W+177T/1n6//dP2pfbZfd+aOjX1pVb2/rX5pz2/bfym8Y3ipbyfH+XApCMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDPgmtvvX15fmlpYXkXFtJ4xAPeHFvVT0Xvldbu2PdPa2FqsyPqd0k26d6aRMztJLsidWnuwFxTGVN1dvBKO2kM4klyeZd8wR3wOBxfufLG8Wtvvf3VxSvzry28tnD1xKmTr5zsfG3uxvGLi0sLs72fk44SeBzW3gZMOhIAAAAAAAAAAABgqzb8hUArGfcXAg9eaI2ftuju9I4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn1pnXs3eborMzR6bLbdv3+oslUu/vNaymaSRpPhhUnycnE5vyfTQcMW95nn5zke/evG9DztrYzX77Rsb+v3hP6ur29yLbr1kJsmeen1/U1sa7/zQeN1tBtZTDPawTNiRfuJg0j4JAAD//8L4BDE=") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f0000000140)) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 222.542167ms ago: executing program 4 (id=825): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100}, 0x0) close(r0) 0s ago: executing program 2 (id=826): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x18, 0x1, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x8000000004) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) kernel console output (not intermixed with test programs): gured BSSID 50:50:50:50:50:50 [ 101.919626][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.950253][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.979461][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.994465][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.031159][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.038341][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.051298][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.071742][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.085476][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.112105][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.157997][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.182626][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.214961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.441906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.454275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.464970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 102.473794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 102.483573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 102.494035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 102.503171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 102.846172][ T4346] syz.3.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 102.926677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.011953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.131467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 104.314080][ T4346] loop3: detected capacity change from 0 to 256 [ 104.444287][ T4346] FAT-fs (loop3): Directory bread(block 1285) failed [ 104.585880][ T4346] FAT-fs (loop3): Directory bread(block 1285) failed [ 104.620138][ T4346] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 105.571882][ T4300] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.835005][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.968255][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.981947][ T4300] usb 3-1: Using ep0 maxpacket: 8 [ 106.080030][ T4300] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 106.381910][ T4300] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 106.440103][ T4300] usb 3-1: config 6 has no interface number 0 [ 106.575150][ T4300] usb 3-1: config 6 interface 2 altsetting 0 has an invalid endpoint with address 0xAA, skipping [ 106.592706][ T4378] loop0: detected capacity change from 0 to 256 [ 106.625832][ T4378] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 106.659178][ T4378] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 106.674482][ T4378] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 106.683258][ T4378] UDF-fs: Scanning with blocksize 512 failed [ 106.697228][ T4378] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 106.732178][ T4378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.831083][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.919370][ T4378] overlayfs: upper fs needs to support d_type. [ 106.941998][ T4300] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.980442][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.021954][ T4378] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 107.033012][ T4378] overlayfs: failed to set xattr on upper [ 107.039773][ T4378] overlayfs: ...falling back to index=off,metacopy=off. [ 107.113656][ T4259] device veth0_vlan entered promiscuous mode [ 107.136391][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.232957][ T4300] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 108.364290][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.413536][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.564627][ T4300] usb 3-1: Product: syz [ 108.623592][ T4259] device veth1_vlan entered promiscuous mode [ 108.638930][ T4300] usb 3-1: Manufacturer: syz [ 108.714534][ T4300] usb 3-1: SerialNumber: syz [ 108.728200][ T4259] device veth0_macvtap entered promiscuous mode [ 108.745192][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.784662][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.806257][ T4259] device veth1_macvtap entered promiscuous mode [ 108.816604][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.845929][ T4300] usb 3-1: can't set config #6, error -71 [ 108.882697][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.913922][ T4300] usb 3-1: USB disconnect, device number 2 [ 108.961088][ T4386] udevd[4386]: setting mode of /dev/bus/usb/003/002 to 020664 failed: No such file or directory [ 108.982201][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.065800][ T4386] udevd[4386]: setting owner of /dev/bus/usb/003/002 to uid=0, gid=0 failed: No such file or directory [ 109.122372][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.184007][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.292296][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.341474][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.382680][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.405499][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.431665][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.480094][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.535422][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.583549][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.648341][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.687150][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.784485][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.985604][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.009869][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.437686][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.497395][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.658333][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.675945][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.743567][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.763562][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.815583][ T4259] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.900682][ T4259] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.940811][ T4259] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.971876][ T4259] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.017749][ T4412] loop3: detected capacity change from 0 to 512 [ 112.140192][ T4412] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.222532][ T4412] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.238550][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.272892][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.336001][ T4412] EXT4-fs (loop3): 1 truncate cleaned up [ 112.345436][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.417563][ T4412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 112.571694][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.588443][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.647043][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.484932][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 113.713831][ T4426] loop3: detected capacity change from 0 to 64 [ 114.066396][ T4429] loop0: detected capacity change from 0 to 512 [ 114.152661][ T4429] EXT4-fs: inline encryption not supported [ 115.015584][ T4429] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.25: inode #1: comm syz.0.25: iget: illegal inode # [ 115.116264][ T4440] lo speed is unknown, defaulting to 1000 [ 115.136773][ T4429] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.25: error while reading EA inode 1 err=-117 [ 115.162845][ T4429] EXT4-fs (loop0): 1 orphan inode deleted [ 115.169234][ T4440] lo speed is unknown, defaulting to 1000 [ 115.181846][ T4429] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 115.210832][ T4440] lo speed is unknown, defaulting to 1000 [ 115.245080][ T4440] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 115.289584][ T4440] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 115.449586][ T4440] lo speed is unknown, defaulting to 1000 [ 115.458703][ T4440] lo speed is unknown, defaulting to 1000 [ 115.468953][ T4440] lo speed is unknown, defaulting to 1000 [ 115.476822][ T4440] lo speed is unknown, defaulting to 1000 [ 115.486613][ T4440] lo speed is unknown, defaulting to 1000 [ 116.279268][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 116.424041][ T4455] capability: warning: `syz.3.33' uses 32-bit capabilities (legacy support in use) [ 116.767738][ T4455] program syz.3.33 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.486830][ T4442] loop1: detected capacity change from 0 to 32768 [ 117.600195][ T4442] XFS (loop1): Mounting V5 Filesystem [ 117.661443][ T4472] loop3: detected capacity change from 0 to 64 [ 117.918891][ T4442] XFS (loop1): Ending clean mount [ 118.192222][ T4370] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.393607][ T4370] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 118.404559][ T4370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.441133][ T4370] usb 3-1: config 0 descriptor?? [ 118.470909][ T4370] cp210x 3-1:0.0: cp210x converter detected [ 118.584009][ T4252] XFS (loop1): Unmounting Filesystem [ 118.627287][ T4484] loop0: detected capacity change from 0 to 64 [ 118.720491][ T4486] loop4: detected capacity change from 0 to 128 [ 118.761414][ T4486] ======================================================= [ 118.761414][ T4486] WARNING: The mand mount option has been deprecated and [ 118.761414][ T4486] and is ignored by this kernel. Remove the mand [ 118.761414][ T4486] option from the mount to silence this warning. [ 118.761414][ T4486] ======================================================= [ 118.881425][ T4486] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 118.894363][ T4370] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 118.932038][ T4370] cp210x 3-1:0.0: GPIO initialisation failed: -524 [ 118.945273][ T4486] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.986409][ T4370] usb 3-1: cp210x converter now attached to ttyUSB0 [ 119.279429][ T4370] usb 3-1: USB disconnect, device number 3 [ 120.376546][ T4486] sched: RT throttling activated [ 120.384240][ T4489] netlink: 32 bytes leftover after parsing attributes in process `syz.4.42'. [ 120.808203][ T4482] loop3: detected capacity change from 0 to 32768 [ 120.891412][ T4482] JBD2: Ignoring recovery information on journal [ 121.012940][ T4482] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 121.078612][ T4370] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 121.122430][ T4370] cp210x 3-1:0.0: device disconnected [ 122.648496][ T4502] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 122.651988][ T26] audit: type=1800 audit(1749342887.783:2): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.45" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 122.659491][ T4502] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 122.692800][ T4502] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 122.747595][ T4253] ocfs2: Unmounting device (7,3) on (node local) [ 122.818761][ T4502] syz.2.45 (4502) used greatest stack depth: 20200 bytes left [ 123.000814][ T4512] loop2: detected capacity change from 0 to 64 [ 123.068264][ T4513] loop3: detected capacity change from 0 to 16 [ 123.159957][ T4513] erofs: (device loop3): mounted with root inode @ nid 36. [ 123.279666][ T4515] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.295911][ T4515] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 123.309597][ T4515] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 123.337027][ T4515] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.348872][ T4515] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.359882][ T4515] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 123.370102][ T4515] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.382219][ T4515] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 123.392908][ T4515] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.403997][ T4515] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 123.415867][ T4515] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 123.426172][ T4515] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 123.440356][ T4515] erofs: (device loop3): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 123.459158][ T4515] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.469822][ T4515] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 123.481426][ T4515] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 123.492154][ T4515] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 123.503472][ T4515] erofs: (device loop3): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 123.522149][ T4515] syz.3.47: attempt to access beyond end of device [ 123.522149][ T4515] loop3: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 123.538036][ T4515] syz.3.47: attempt to access beyond end of device [ 123.538036][ T4515] loop3: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 123.556379][ T4515] syz.3.47: attempt to access beyond end of device [ 123.556379][ T4515] loop3: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 123.575091][ T4515] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[2639] [ 123.588558][ T4515] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.599430][ T4515] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 123.609416][ T4515] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.621267][ T4515] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 123.631915][ T4515] erofs: (device loop3): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 123.642863][ T4515] syz.3.47: attempt to access beyond end of device [ 123.642863][ T4515] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 123.674090][ T4515] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[3537] [ 124.765516][ T4526] loop4: detected capacity change from 0 to 64 [ 124.811118][ T4527] netlink: 'syz.3.57': attribute type 12 has an invalid length. [ 124.841440][ T4527] netlink: 'syz.3.57': attribute type 29 has an invalid length. [ 124.876667][ T4527] netlink: 148 bytes leftover after parsing attributes in process `syz.3.57'. [ 124.961020][ T4527] netlink: 'syz.3.57': attribute type 1 has an invalid length. [ 125.009254][ T4533] Trying to free block not in datazone [ 125.053888][ T4527] Zero length message leads to an empty skb [ 126.374884][ T4546] loop3: detected capacity change from 0 to 64 [ 126.928499][ T3680] kernel read not supported for file /dsp1 (pid: 3680 comm: kworker/1:3) [ 129.185671][ T4559] loop0: detected capacity change from 0 to 32768 [ 129.494389][ T4565] vivid-001: disconnect [ 129.769888][ T26] audit: type=1326 audit(1749342894.903:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9bf8e929 code=0x7fc00000 [ 129.854395][ T4555] vivid-001: reconnect [ 129.907624][ T4559] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 129.918948][ T4559] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 129.958421][ T4559] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 129.972932][ T4523] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 129.981831][ T4523] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 129.986347][ T4567] loop1: detected capacity change from 0 to 64 [ 130.060643][ T4523] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 78ms [ 130.108497][ T4567] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 130.135327][ T26] audit: type=1326 audit(1749342894.903:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdc9bf8e929 code=0x7fc00000 [ 130.165567][ T4523] gfs2: fsid=syz:syz.0: jid=0: Done [ 130.206902][ T4559] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 130.333073][ T26] audit: type=1326 audit(1749342894.933:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9bf8e929 code=0x7fc00000 [ 130.358944][ T26] audit: type=1326 audit(1749342894.933:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9bf8e929 code=0x7fc00000 [ 130.386356][ T26] audit: type=1326 audit(1749342894.933:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9bf8e929 code=0x7fc00000 [ 130.412801][ T26] audit: type=1326 audit(1749342894.933:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9bf8e929 code=0x7fc00000 [ 130.448510][ T26] audit: type=1326 audit(1749342894.933:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9bf8e929 code=0x7fc00000 [ 130.571699][ T26] audit: type=1326 audit(1749342894.933:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9bf8e929 code=0x7fc00000 [ 130.601924][ T26] audit: type=1326 audit(1749342894.933:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9bf8e929 code=0x7fc00000 [ 130.629412][ T26] audit: type=1326 audit(1749342894.933:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9bf8e929 code=0x7fc00000 [ 130.658342][ T4559] gfs2: fsid=syz:syz.0: can't start quotad thread: -4 [ 131.583125][ T4582] loop3: detected capacity change from 0 to 32768 [ 131.662297][ T4582] JBD2: Ignoring recovery information on journal [ 131.770326][ T4582] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 131.839354][ T4582] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 131.859611][ T4582] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 131.871011][ T4582] OCFS2: File system is now read-only. [ 131.877167][ T4582] (syz.3.71,4582,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 131.885800][ T4582] (syz.3.71,4582,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 131.894191][ T4582] (syz.3.71,4582,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 131.903839][ T4582] (syz.3.71,4582,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 131.913204][ T4582] (syz.3.71,4582,0):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 131.922226][ T4582] (syz.3.71,4582,0):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 131.930723][ T4582] (syz.3.71,4582,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 131.940489][ T4582] (syz.3.71,4582,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 131.949900][ T4582] (syz.3.71,4582,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 131.959647][ T4582] (syz.3.71,4582,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 131.969456][ T4582] (syz.3.71,4582,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 131.980236][ T4582] (syz.3.71,4582,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 131.991970][ T4582] (syz.3.71,4582,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 132.004154][ T4582] (syz.3.71,4582,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 132.015497][ T4582] (syz.3.71,4582,0):ocfs2_lock_allocators:2672 ERROR: status = -30 [ 132.024381][ T4582] (syz.3.71,4582,1):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 132.033334][ T4582] (syz.3.71,4582,0):ocfs2_write_begin:1907 ERROR: status = -30 [ 132.876541][ T4253] ocfs2: Unmounting device (7,3) on (node local) [ 132.985156][ T4600] loop2: detected capacity change from 0 to 64 [ 133.664495][ T4619] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 134.700678][ T4627] tc_dump_action: action bad kind [ 135.362457][ T4266] Bluetooth: hci5: command 0x1003 tx timeout [ 135.766956][ T4269] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 135.791070][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 136.006175][ T4637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.107847][ T4637] bond0: (slave rose0): Enslaving as an active interface with an up link [ 136.144973][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 136.847819][ T4649] loop3: detected capacity change from 0 to 512 [ 136.946765][ T4649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.179961][ T4649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.433649][ T4649] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.590881][ T4667] loop2: detected capacity change from 0 to 128 [ 138.622208][ T4667] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 138.667964][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 138.679958][ T4667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.108283][ T4671] loop0: detected capacity change from 0 to 32768 [ 141.357640][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.364587][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.681697][ T4523] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 141.785874][ T4688] loop2: detected capacity change from 0 to 256 [ 141.800219][ T4688] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 141.817598][ T4688] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 141.829477][ T4688] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 141.837562][ T4688] UDF-fs: Scanning with blocksize 512 failed [ 141.936559][ T4688] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 141.961261][ T4688] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.010378][ T4688] overlayfs: upper fs needs to support d_type. [ 142.021621][ T4688] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 142.029718][ T4688] overlayfs: failed to set xattr on upper [ 142.035878][ T4688] overlayfs: ...falling back to index=off,metacopy=off. [ 142.644973][ T4523] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 142.731609][ T4523] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.802099][ T4523] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.845542][ T4523] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.897259][ T4523] usb 4-1: config 0 descriptor?? [ 142.949302][ T4523] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 143.257405][ T4708] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.267823][ T4708] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.278199][ T4708] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.287813][ T4708] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.834790][ T4708] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 144.431274][ T4717] loop4: detected capacity change from 0 to 512 [ 144.526356][ T4717] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.747902][ T4717] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 145.324138][ T4717] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.741129][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 145.752691][ T951] usb 4-1: USB disconnect, device number 2 [ 145.923111][ T4733] process 'syz.2.112' launched './file0' with NULL argv: empty string added [ 147.078228][ T4741] loop3: detected capacity change from 0 to 256 [ 147.128365][ T4741] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 147.181421][ T4741] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 147.835403][ T4741] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 147.909032][ T4741] UDF-fs: Scanning with blocksize 512 failed [ 148.024884][ T4741] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 148.132357][ T4741] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.052416][ T4768] loop0: detected capacity change from 0 to 512 [ 149.114489][ T4325] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 149.134242][ T4741] overlayfs: upper fs needs to support d_type. [ 149.175016][ T4741] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 149.213208][ T4741] overlayfs: failed to set xattr on upper [ 149.219912][ T4741] overlayfs: ...falling back to index=off,metacopy=off. [ 149.230936][ T4768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.305480][ T4768] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 149.322123][ T4768] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.369836][ T4325] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.421701][ T4325] usb 5-1: config 0 has no interface number 0 [ 149.455372][ T4325] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 149.496377][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.528318][ T4325] usb 5-1: config 0 descriptor?? [ 149.579638][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 149.590571][ T4325] usb 5-1: selecting invalid altsetting 1 [ 149.692928][ T4325] dvb_ttusb_budget: ttusb_init_controller: error [ 149.740209][ T4325] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 151.685200][ T4325] DVB: Unable to find symbol cx22700_attach() [ 152.021707][ T4325] DVB: Unable to find symbol tda10046_attach() [ 152.028388][ T4325] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 152.110452][ T4325] usb 5-1: USB disconnect, device number 2 [ 153.280226][ T4811] loop0: detected capacity change from 0 to 4096 [ 153.403808][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 153.413397][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 153.652512][ T4811] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 153.758636][ T4811] ntfs3: loop0: Failed to load $Extend. [ 154.663437][ T4802] loop3: detected capacity change from 0 to 32768 [ 154.798719][ T4802] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.129 (4802) [ 154.906179][ T4825] loop2: detected capacity change from 0 to 256 [ 155.011907][ T4825] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 155.019899][ T4827] loop1: detected capacity change from 0 to 512 [ 155.044342][ T4802] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.154036][ T4827] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.169792][ T4825] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 155.173427][ T4802] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 155.272187][ T4802] BTRFS info (device loop3): doing ref verification [ 155.284750][ T4825] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 155.302005][ T4802] BTRFS info (device loop3): disabling tree log [ 155.331013][ T4827] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 155.331047][ T4825] UDF-fs: Scanning with blocksize 512 failed [ 155.354040][ T4827] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.361984][ T4802] BTRFS info (device loop3): metadata ratio 9 [ 155.432442][ T4825] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 155.471670][ T4802] BTRFS info (device loop3): max_inline at 4096 [ 155.499272][ T4825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.541666][ T4802] BTRFS info (device loop3): using free space tree [ 155.617183][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 155.809429][ T4837] loop0: detected capacity change from 0 to 128 [ 155.857029][ T4837] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 155.881695][ T26] kauditd_printk_skb: 74 callbacks suppressed [ 155.881714][ T26] audit: type=1800 audit(1749342921.013:87): pid=4837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.138" name="file1" dev="loop0" ino=1048595 res=0 errno=0 [ 156.554822][ T4802] BTRFS error (device loop3): open_ctree failed: -12 [ 156.637329][ T9] kworker/u4:0: attempt to access beyond end of device [ 156.637329][ T9] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 156.737264][ T9] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 157.068743][ T4874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 157.078457][ T4874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 157.213968][ T4487] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4487) [ 158.704568][ T4894] loop0: detected capacity change from 0 to 128 [ 158.738699][ T4894] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 158.787726][ T4894] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.518861][ T4896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.149'. [ 161.814019][ T4907] loop0: detected capacity change from 0 to 256 [ 161.867842][ T4907] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 161.930395][ T4907] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 161.980713][ T4907] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 161.988757][ T4907] UDF-fs: Scanning with blocksize 512 failed [ 162.012173][ T4907] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 162.111112][ T4907] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.201252][ T4907] overlayfs: upper fs needs to support d_type. [ 162.221028][ T4907] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 162.278122][ T4907] overlayfs: failed to set xattr on upper [ 162.288202][ T4907] overlayfs: ...falling back to index=off,metacopy=off. [ 162.457190][ T4925] loop3: detected capacity change from 0 to 64 [ 163.295667][ T4934] loop0: detected capacity change from 0 to 1024 [ 163.503459][ T4942] loop2: detected capacity change from 0 to 512 [ 163.900091][ T4306] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 164.561892][ T4306] usb 4-1: Using ep0 maxpacket: 8 [ 164.647353][ T4354] hfsplus: b-tree write err: -5, ino 4 [ 164.672216][ T4306] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 164.726099][ T4306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.801791][ T4306] usb 4-1: Product: syz [ 164.806680][ T4306] usb 4-1: Manufacturer: syz [ 164.845662][ T4306] usb 4-1: SerialNumber: syz [ 164.889550][ T4306] usb 4-1: config 0 descriptor?? [ 164.924455][ T4306] gspca_main: se401-2.14.0 probing 047d:5003 [ 164.991396][ T4958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 165.003351][ T4958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 165.291940][ T4964] loop1: detected capacity change from 0 to 256 [ 165.310081][ T4964] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 165.329452][ T4964] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 165.345676][ T4964] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 165.354425][ T4964] UDF-fs: Scanning with blocksize 512 failed [ 165.369339][ T4964] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 165.402315][ T4964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.479940][ T4964] overlayfs: upper fs needs to support d_type. [ 165.499878][ T4964] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 165.578551][ T4964] overlayfs: failed to set xattr on upper [ 165.586722][ T4964] overlayfs: ...falling back to index=off,metacopy=off. [ 166.015960][ T4970] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.027111][ T4970] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.038459][ T4970] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.048783][ T4970] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.161124][ T4970] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 166.768928][ T4306] gspca_se401: Wrong descriptor type [ 167.028737][ T4306] usb 4-1: USB disconnect, device number 3 [ 167.031160][ T4977] loop2: detected capacity change from 0 to 128 [ 167.092137][ T4977] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 167.142390][ T4977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.196218][ T4984] loop1: detected capacity change from 0 to 64 [ 168.550777][ T4987] netlink: 32 bytes leftover after parsing attributes in process `syz.2.177'. [ 169.571697][ T4302] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 169.629283][ T5000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 169.639326][ T5000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 170.463692][ T4302] usb 5-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 170.500530][ T5010] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.518580][ T5010] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.531217][ T5010] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.542729][ T5010] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.565883][ T4302] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 170.597433][ T4302] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 170.623330][ T5010] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 170.662146][ T4302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.673966][ T4302] usb 5-1: Product: syz [ 170.680386][ T4302] usb 5-1: Manufacturer: syz [ 170.691366][ T4302] usb 5-1: SerialNumber: syz [ 170.734652][ T4302] usb 5-1: config 0 descriptor?? [ 171.789476][ T5029] loop3: detected capacity change from 0 to 128 [ 171.861000][ T4302] usb 5-1: USB disconnect, device number 3 [ 171.884985][ T5029] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 172.500446][ T5029] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.344732][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 175.354612][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 176.999114][ T5062] loop0: detected capacity change from 0 to 2048 [ 177.007419][ T5062] EXT4-fs: Ignoring removed bh option [ 177.099547][ T5062] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 178.852766][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 179.197123][ T5090] loop4: detected capacity change from 0 to 4096 [ 179.205727][ T5090] ntfs3: Unknown parameter 'hide_dot_files' [ 179.275765][ T4386] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.854683][ T5095] loop0: detected capacity change from 0 to 128 [ 179.885342][ T5092] loop1: detected capacity change from 0 to 2048 [ 179.905055][ T5095] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 179.948934][ T5092] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.011047][ T5095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.073825][ T5092] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 181.844118][ T5067] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 182.098944][ T5067] EXT4-fs (loop1): Remounting filesystem read-only [ 183.137649][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 184.844496][ T5123] loop0: detected capacity change from 0 to 256 [ 184.969165][ T5123] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 187.404138][ T5150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 188.337649][ T5150] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 191.076095][ T5184] loop4: detected capacity change from 0 to 256 [ 191.094452][ T5184] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 191.113662][ T5184] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 191.126068][ T5184] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 191.134100][ T5184] UDF-fs: Scanning with blocksize 512 failed [ 191.145918][ T5184] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 191.166789][ T5184] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.220532][ T5184] overlayfs: upper fs needs to support d_type. [ 191.231404][ T5184] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 191.239055][ T5184] overlayfs: failed to set xattr on upper [ 191.245152][ T5184] overlayfs: ...falling back to index=off,metacopy=off. [ 195.019509][ T5211] loop4: detected capacity change from 0 to 128 [ 195.106890][ T5211] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 195.224703][ T5211] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.976029][ T5239] input: syz1 as /devices/virtual/input/input5 [ 199.651480][ T5246] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.661146][ T5246] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.670411][ T5246] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.679568][ T5246] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.730805][ T5248] loop0: detected capacity change from 0 to 256 [ 199.774376][ T5246] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 199.962313][ T5248] FAT-fs (loop0): Directory bread(block 64) failed [ 200.385014][ T5248] FAT-fs (loop0): Directory bread(block 65) failed [ 200.422236][ T5248] FAT-fs (loop0): Directory bread(block 66) failed [ 200.451836][ T5248] FAT-fs (loop0): Directory bread(block 67) failed [ 200.520248][ T5248] FAT-fs (loop0): Directory bread(block 68) failed [ 200.574877][ T5248] FAT-fs (loop0): Directory bread(block 69) failed [ 200.621802][ T5248] FAT-fs (loop0): Directory bread(block 70) failed [ 200.711789][ T5248] FAT-fs (loop0): Directory bread(block 71) failed [ 200.742182][ T5248] FAT-fs (loop0): Directory bread(block 72) failed [ 200.795242][ T5248] FAT-fs (loop0): Directory bread(block 73) failed [ 202.469585][ T5270] loop2: detected capacity change from 0 to 128 [ 202.515297][ T5272] loop0: detected capacity change from 0 to 1024 [ 203.142496][ T5270] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 203.225331][ T5272] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 203.293317][ T5270] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.323751][ T5281] loop3: detected capacity change from 0 to 64 [ 205.073384][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 205.124381][ T5289] 9pnet_fd: Insufficient options for proto=fd [ 205.614660][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.621498][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.322154][ T4865] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 208.611965][ T4865] usb 2-1: Using ep0 maxpacket: 8 [ 208.657729][ T4865] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 208.819959][ T4865] usb 2-1: config 179 has no interface number 0 [ 208.830663][ T4865] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 208.894122][ T4865] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 208.923846][ T4865] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 208.948305][ T4865] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 209.041276][ T5326] loop0: detected capacity change from 0 to 128 [ 209.057081][ T4865] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 209.111723][ T4865] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 209.111860][ T4865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.251883][ T5306] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 209.292774][ T5326] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 209.314670][ T5327] futex_wake_op: syz.2.271 tries to shift op by 144; fix this program [ 209.401981][ T5326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.689233][ T5334] loop3: detected capacity change from 0 to 128 [ 212.764134][ T4306] usb 2-1: USB disconnect, device number 2 [ 212.771625][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 212.780186][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 212.799348][ T5335] 9pnet_fd: Insufficient options for proto=fd [ 212.839449][ T5334] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 212.867152][ T5334] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.113766][ T5341] loop0: detected capacity change from 0 to 256 [ 213.204600][ T5341] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 213.260349][ T5341] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 213.273938][ T5341] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 213.282642][ T5341] UDF-fs: Scanning with blocksize 512 failed [ 213.296829][ T5341] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 213.322060][ T5341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.364143][ T5341] overlayfs: upper fs needs to support d_type. [ 213.374892][ T5341] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 213.382170][ T5341] overlayfs: failed to set xattr on upper [ 213.388039][ T5341] overlayfs: ...falling back to index=off,metacopy=off. [ 215.975818][ T5374] loop4: detected capacity change from 0 to 128 [ 216.535599][ T5374] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 216.682053][ T5374] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.556267][ T4260] Bluetooth: hci0: command 0x0406 tx timeout [ 218.568365][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 218.574640][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 218.574733][ T4264] Bluetooth: hci3: command 0x0406 tx timeout [ 218.581000][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 219.614872][ T5396] loop0: detected capacity change from 0 to 128 [ 219.831611][ T5396] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 221.203462][ T5396] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.282753][ T5407] 9pnet_fd: Insufficient options for proto=fd [ 222.468223][ T5422] loop4: detected capacity change from 0 to 128 [ 222.629561][ T5422] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 222.824182][ T5422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.446215][ T5427] sctp: failed to load transform for md5: -2 [ 226.639521][ T5449] loop4: detected capacity change from 0 to 16 [ 226.885861][ T5449] erofs: (device loop4): mounted with root inode @ nid 36. [ 227.897627][ T5460] 9pnet_fd: Insufficient options for proto=fd [ 228.080922][ T5463] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 228.880204][ T5463] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 228.951822][ T5463] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 230.024506][ T5481] loop4: detected capacity change from 0 to 128 [ 230.120978][ T5481] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 230.188798][ T5481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.439586][ T5491] netlink: 32 bytes leftover after parsing attributes in process `syz.4.315'. [ 232.122461][ T5502] loop1: detected capacity change from 0 to 256 [ 232.136829][ T5502] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 232.153844][ T5502] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 232.175956][ T5502] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 232.184248][ T5502] UDF-fs: Scanning with blocksize 512 failed [ 232.197286][ T5502] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 232.226231][ T5502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.274170][ T5502] overlayfs: upper fs needs to support d_type. [ 232.287182][ T5502] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 232.296065][ T5502] overlayfs: failed to set xattr on upper [ 232.302686][ T5502] overlayfs: ...falling back to index=off,metacopy=off. [ 232.521752][ T5478] loop0: detected capacity change from 0 to 2048 [ 233.161444][ T5478] Dev loop0: unable to read RDB block 8 [ 233.172331][ T5478] loop0: unable to read partition table [ 233.203205][ T5478] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 233.227070][ T5512] 9pnet_fd: Insufficient options for proto=fd [ 233.593945][ T5518] IPVS: length: 91 != 24 [ 234.182188][ T5524] loop3: detected capacity change from 0 to 16 [ 234.192361][ T26] audit: type=1326 audit(1749342999.333:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.1.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce08d8e929 code=0x7ffc0000 [ 234.268659][ T5524] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 234.286630][ T26] audit: type=1326 audit(1749342999.363:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.1.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce08d8e929 code=0x7ffc0000 [ 234.451793][ T26] audit: type=1326 audit(1749342999.363:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.1.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce08d8e929 code=0x7ffc0000 [ 234.552024][ T26] audit: type=1326 audit(1749342999.363:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.1.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce08d8e929 code=0x7ffc0000 [ 235.130391][ T5535] loop4: detected capacity change from 0 to 128 [ 235.156657][ T5535] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 235.191854][ T26] audit: type=1326 audit(1749342999.363:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.1.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fce08d8e929 code=0x7ffc0000 [ 235.235634][ T5535] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.458611][ T26] audit: type=1326 audit(1749342999.363:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.1.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce08d8e929 code=0x7ffc0000 [ 235.628759][ T26] audit: type=1326 audit(1749342999.363:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.1.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce08d8e929 code=0x7ffc0000 [ 236.225688][ T5544] netlink: 32 bytes leftover after parsing attributes in process `syz.4.332'. [ 238.830163][ T5553] loop2: detected capacity change from 0 to 256 [ 238.842846][ T5553] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 240.425806][ T5553] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 240.520182][ T5553] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 240.541893][ T5560] loop3: detected capacity change from 0 to 1024 [ 240.571646][ T5553] UDF-fs: Scanning with blocksize 512 failed [ 240.743039][ T5553] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 240.754307][ T5560] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 240.772707][ T5560] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.123466][ T5553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.169239][ T5560] syz.3.339 (5560) used greatest stack depth: 18896 bytes left [ 242.401333][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 246.682730][ T3680] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 246.693406][ T5626] loop3: detected capacity change from 0 to 256 [ 246.748729][ T5626] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 246.789024][ T5626] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 246.813701][ T5626] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 246.823361][ T5626] UDF-fs: Scanning with blocksize 512 failed [ 246.837427][ T5626] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 246.872527][ T5626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.923639][ T5626] overlayfs: failed to resolve './file2': -2 [ 247.301884][ T3680] usb 2-1: Using ep0 maxpacket: 8 [ 247.494547][ T3680] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.516622][ T3680] usb 2-1: config 0 has no interfaces? [ 247.543048][ T3680] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 247.571598][ T3680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 247.600381][ T3680] usb 2-1: Product: syz [ 247.620763][ T3680] usb 2-1: Manufacturer: syz [ 247.645220][ T3680] usb 2-1: SerialNumber: syz [ 247.674603][ T3680] usb 2-1: config 0 descriptor?? [ 247.917434][ T5631] loop4: detected capacity change from 0 to 2048 [ 247.987851][ T3680] usb 2-1: can't set config #0, error -71 [ 248.017298][ T3680] usb 2-1: USB disconnect, device number 3 [ 248.149555][ T5631] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.166147][ T5633] loop0: detected capacity change from 0 to 128 [ 248.208882][ T5633] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 248.425494][ T26] audit: type=1800 audit(1749343013.563:95): pid=5633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.359" name="file1" dev="loop0" ino=1048601 res=0 errno=0 [ 250.805706][ T5664] loop4: detected capacity change from 0 to 16 [ 250.882357][ T5664] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 251.036682][ T5670] loop1: detected capacity change from 0 to 1024 [ 251.091033][ T5670] EXT4-fs: Ignoring removed nobh option [ 251.110258][ T5670] EXT4-fs: Ignoring removed bh option [ 251.179020][ T5670] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 252.064330][ T5670] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 252.284874][ T5667] loop3: detected capacity change from 0 to 32768 [ 252.334730][ T5667] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.372 (5667) [ 252.342088][ T26] audit: type=1800 audit(1749343017.473:96): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.373" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 252.404418][ T5685] EXT4-fs (loop1): shut down requested (2) [ 252.418755][ T5667] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 252.452867][ T5678] loop0: detected capacity change from 0 to 128 [ 252.482442][ T5667] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 252.515614][ T5678] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 252.561711][ T5667] BTRFS info (device loop3): enabling auto defrag [ 252.601005][ T5667] BTRFS info (device loop3): doing ref verification [ 252.618122][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 252.631724][ T5667] BTRFS info (device loop3): max_inline at 0 [ 252.651791][ T26] audit: type=1800 audit(1749343017.783:97): pid=5678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.374" name="file1" dev="loop0" ino=1048602 res=0 errno=0 [ 252.657446][ T5667] BTRFS info (device loop3): force clearing of disk cache [ 252.787328][ T5667] BTRFS info (device loop3): turning on sync discard [ 252.823917][ T5667] BTRFS info (device loop3): disabling free space tree [ 252.965470][ T4359] kworker/u4:11: attempt to access beyond end of device [ 252.965470][ T4359] loop0: rw=1, sector=145, nr_sectors = 792 limit=128 [ 252.976202][ T5689] loop1: detected capacity change from 0 to 1024 [ 253.042422][ T4359] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 253.325602][ T3680] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 253.356075][ T5667] BTRFS info (device loop3): enabling ssd optimizations [ 253.414572][ T5667] BTRFS info (device loop3): rebuilding free space tree [ 253.440250][ T3680] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 253.534996][ T3680] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 253.848958][ T3680] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 254.022751][ T4339] hfsplus: b-tree write err: -5, ino 4 [ 254.237012][ T5667] BTRFS info (device loop3): disabling free space tree [ 254.307794][ T5667] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 254.475974][ T5667] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 254.742345][ T5718] fido_id[5718]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 255.091080][ T5732] loop0: detected capacity change from 0 to 16 [ 255.108656][ T4253] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 255.154533][ T5732] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 255.264856][ T4301] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 255.397744][ T5737] loop1: detected capacity change from 0 to 1024 [ 255.541646][ T4301] usb 3-1: Using ep0 maxpacket: 8 [ 255.548977][ T4301] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 255.573405][ T4301] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 255.593178][ T5737] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 255.601651][ T4301] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 255.621650][ T4301] usb 3-1: Product: syz [ 255.627499][ T4301] usb 3-1: Manufacturer: syz [ 255.633377][ T4301] usb 3-1: SerialNumber: syz [ 255.638534][ T5737] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.813603][ T5737] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 3: comm syz.1.389: lblock 3 mapped to illegal pblock 3 (length 1) [ 255.859225][ T5737] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 255.863956][ T4301] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 255.881738][ T4301] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 255.890357][ T4301] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 255.900143][ T4301] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 255.921686][ T5737] EXT4-fs (loop1): This should not happen!! Data will be lost [ 255.921686][ T5737] [ 255.981434][ T5746] loop0: detected capacity change from 0 to 128 [ 256.178592][ T5751] loop3: detected capacity change from 0 to 256 [ 256.316732][ T4301] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 256.468261][ T5737] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 4: comm syz.1.389: lblock 4 mapped to illegal pblock 4 (length 4) [ 256.508835][ T5746] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 256.519349][ T5751] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 256.542078][ T5751] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 256.558930][ T5751] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 256.567164][ T5751] UDF-fs: Scanning with blocksize 512 failed [ 256.582938][ T5751] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 256.621331][ T5751] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.665707][ T5751] overlayfs: failed to resolve './file2': -2 [ 256.923248][ T4301] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 256.937336][ T4301] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 256.949294][ T4301] usb 3-1: USB disconnect, device number 4 [ 256.968509][ T5737] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 4 with error 117 [ 256.982968][ T4301] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 257.001702][ T5737] EXT4-fs (loop1): This should not happen!! Data will be lost [ 257.001702][ T5737] [ 257.014162][ T4301] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 257.024731][ T4301] visor 3-1:1.0: device disconnected [ 257.092054][ T26] audit: type=1800 audit(1749343022.233:98): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.390" name="file1" dev="loop0" ino=1048603 res=0 errno=0 [ 257.316928][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 257.469916][ T9] kworker/u4:0: attempt to access beyond end of device [ 257.469916][ T9] loop0: rw=1, sector=145, nr_sectors = 672 limit=128 [ 257.515027][ T9] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 259.037654][ T5780] loop1: detected capacity change from 0 to 16 [ 259.089077][ T5780] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 261.333821][ T5791] loop1: detected capacity change from 0 to 256 [ 261.437644][ T5791] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 261.486815][ T5791] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 261.517630][ T5791] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 261.558729][ T5791] UDF-fs: Scanning with blocksize 512 failed [ 261.599540][ T5791] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 261.664076][ T5791] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.710455][ T5791] overlayfs: './file2' not a directory [ 261.869762][ T5805] loop0: detected capacity change from 0 to 1024 [ 261.971654][ T4303] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 262.146113][ T5805] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 262.196092][ T4303] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 262.475996][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=9, SerialNumber=3 [ 262.486057][ T4303] usb 4-1: Product: syz [ 262.491168][ T4303] usb 4-1: Manufacturer: syz [ 262.496696][ T4303] usb 4-1: SerialNumber: syz [ 262.506108][ T4303] usb 4-1: config 0 descriptor?? [ 262.520570][ T4303] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 262.889926][ T5819] loop4: detected capacity change from 0 to 128 [ 263.401837][ T4303] usb 4-1: USB disconnect, device number 4 [ 263.414309][ T5819] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 263.558834][ T5819] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.005489][ T5828] netlink: 32 bytes leftover after parsing attributes in process `syz.4.412'. [ 265.689159][ T5833] loop3: detected capacity change from 0 to 16 [ 265.779240][ T5833] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 265.880135][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 265.907557][ T5835] loop4: detected capacity change from 0 to 128 [ 265.928855][ T5835] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 265.951070][ T26] audit: type=1800 audit(1749343031.083:99): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.415" name="file1" dev="loop4" ino=1048604 res=0 errno=0 [ 266.124036][ T46] kworker/u4:3: attempt to access beyond end of device [ 266.124036][ T46] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 266.194013][ T46] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 267.044118][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.051135][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.520351][ T5870] loop1: detected capacity change from 0 to 128 [ 268.566475][ T5870] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 268.633961][ T5870] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.499770][ T5877] netlink: 32 bytes leftover after parsing attributes in process `syz.1.426'. [ 270.808395][ T5888] loop2: detected capacity change from 0 to 256 [ 270.821780][ T5888] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 270.837955][ T5888] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 270.850875][ T5888] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 270.859564][ T5888] UDF-fs: Scanning with blocksize 512 failed [ 270.874193][ T5888] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 270.895659][ T5888] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.924765][ T5888] overlayfs: './file2' not a directory [ 271.601400][ T5891] loop0: detected capacity change from 0 to 128 [ 271.609760][ T5891] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 271.623558][ T26] audit: type=1800 audit(1749343036.763:100): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.430" name="file1" dev="loop0" ino=1048605 res=0 errno=0 [ 272.223354][ T5896] loop1: detected capacity change from 0 to 128 [ 273.620056][ T5896] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 273.634870][ T4339] kworker/u4:7: attempt to access beyond end of device [ 273.634870][ T4339] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 273.706347][ T4339] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 273.818555][ T5896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.981738][ T4303] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 274.195842][ T4303] usb 3-1: unable to get BOS descriptor or descriptor too short [ 274.212149][ T4303] usb 3-1: config 6 has an invalid interface number: 144 but max is 0 [ 274.221147][ T4303] usb 3-1: config 6 has no interface number 0 [ 274.232024][ T4303] usb 3-1: config 6 interface 144 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 274.276269][ T4303] usb 3-1: config 6 interface 144 has no altsetting 0 [ 274.307255][ T4303] usb 3-1: New USB device found, idVendor=7f55, idProduct=02fc, bcdDevice=20.c2 [ 274.351612][ T4303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.489052][ T4303] usb 3-1: Product: syz [ 274.494604][ T4303] usb 3-1: Manufacturer: syz [ 274.499741][ T4303] usb 3-1: SerialNumber: syz [ 275.871851][ T5906] netlink: 32 bytes leftover after parsing attributes in process `syz.1.429'. [ 276.612383][ T4303] usb 3-1: MIDIStreaming interface descriptor not found [ 276.683423][ T4303] usb 3-1: USB disconnect, device number 5 [ 277.708271][ T5926] loop4: detected capacity change from 0 to 128 [ 277.799984][ T5926] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 277.860326][ T5926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.679190][ T5933] netlink: 32 bytes leftover after parsing attributes in process `syz.4.440'. [ 278.951724][ T4303] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 279.265128][ T4303] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.296505][ T4303] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 279.316631][ T4303] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 279.336618][ T4303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.412372][ T4303] usb 3-1: config 0 descriptor?? [ 279.656235][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.144/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.695406][ T5942] loop4: detected capacity change from 0 to 128 [ 279.757981][ T4303] usb 3-1: USB disconnect, device number 6 [ 279.785068][ T5942] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 279.835384][ T5942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.920307][ T5947] netlink: 32 bytes leftover after parsing attributes in process `syz.4.444'. [ 282.666714][ T5955] loop4: detected capacity change from 0 to 128 [ 282.719161][ T5955] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 282.849526][ T4862] Process accounting resumed [ 283.628149][ T5955] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.713853][ T5968] netlink: 32 bytes leftover after parsing attributes in process `syz.4.447'. [ 285.775005][ T5975] loop1: detected capacity change from 0 to 128 [ 285.799317][ T5975] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 285.850719][ T5975] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.789372][ T5981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.454'. [ 287.680295][ T5987] loop3: detected capacity change from 0 to 128 [ 287.874254][ T5987] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 288.027854][ T5987] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.274449][ T5997] netlink: 32 bytes leftover after parsing attributes in process `syz.3.457'. [ 291.011059][ T6006] loop3: detected capacity change from 0 to 128 [ 291.127963][ T6006] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 291.430431][ T6006] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.114036][ T6020] netlink: 32 bytes leftover after parsing attributes in process `syz.3.463'. [ 293.619992][ T6013] tipc: Enabling of bearer rejected, failed to enable media [ 294.155899][ T6033] loop3: detected capacity change from 0 to 128 [ 294.187192][ T6033] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 294.295757][ T6033] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.343056][ T6038] netlink: 32 bytes leftover after parsing attributes in process `syz.3.473'. [ 296.672672][ T6051] ubi31: attaching mtd0 [ 296.687720][ T6051] ubi31: scanning is finished [ 296.692904][ T6051] ubi31: empty MTD device detected [ 296.790367][ T6052] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.479' sets config #1 [ 297.920530][ T6051] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 297.988707][ T4301] libceph: connect (1)[c::]:6789 error -101 [ 298.032370][ T4301] libceph: mon0 (1)[c::]:6789 connect error [ 298.363633][ T4301] libceph: connect (1)[c::]:6789 error -101 [ 298.377507][ T4301] libceph: mon0 (1)[c::]:6789 connect error [ 298.686066][ T6049] ceph: No mds server is up or the cluster is laggy [ 298.867595][ T4268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.881373][ T4268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.890386][ T4268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.899884][ T4268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.909301][ T4268] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 298.916793][ T4301] libceph: connect (1)[c::]:6789 error -101 [ 298.923516][ T4266] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.982962][ T4301] libceph: mon0 (1)[c::]:6789 connect error [ 300.335527][ T4300] libceph: connect (1)[c::]:6789 error -101 [ 300.400866][ T6071] lo speed is unknown, defaulting to 1000 [ 300.708767][ T4300] libceph: mon0 (1)[c::]:6789 connect error [ 300.962620][ T4266] Bluetooth: hci5: command 0x0409 tx timeout [ 302.601100][ T6103] loop2: detected capacity change from 0 to 32768 [ 302.615251][ T6103] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.494 (6103) [ 302.631576][ T6103] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 302.642065][ T6103] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 302.652121][ T6103] BTRFS info (device loop2): using free space tree [ 302.781825][ T4301] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 303.011625][ T4301] usb 2-1: Using ep0 maxpacket: 32 [ 303.026261][ T4301] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 303.040814][ T4301] usb 2-1: config 0 has no interface number 0 [ 303.041804][ T4266] Bluetooth: hci5: command 0x041b tx timeout [ 303.061382][ T4301] usb 2-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 303.103547][ T4301] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 303.114028][ T4301] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 303.136922][ T4301] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 303.146396][ T4301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.155526][ T4301] usb 2-1: Product: syz [ 303.160948][ T6103] BTRFS info (device loop2): enabling ssd optimizations [ 303.168652][ T4301] usb 2-1: Manufacturer: syz [ 303.176799][ T4301] usb 2-1: SerialNumber: syz [ 303.187795][ T4301] usb 2-1: config 0 descriptor?? [ 303.198679][ T6099] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 303.412089][ T6071] chnl_net:caif_netlink_parms(): no params data found [ 303.424532][ T4301] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 303.975498][ T4262] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 304.129182][ T6071] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.137169][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.147799][ T6071] device bridge_slave_0 entered promiscuous mode [ 304.157500][ T6071] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.165223][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.176907][ T6071] device bridge_slave_1 entered promiscuous mode [ 304.564835][ T4353] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.603494][ T4353] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.759899][ T6071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.787068][ T6071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.106152][ T4353] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.131801][ T4266] Bluetooth: hci5: command 0x040f tx timeout [ 305.149396][ T4353] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.309189][ T6071] team0: Port device team_slave_0 added [ 305.309285][ T4865] usb 2-1: USB disconnect, device number 4 [ 305.358641][ T6071] team0: Port device team_slave_1 added [ 307.329813][ T4266] Bluetooth: hci5: command 0x0419 tx timeout [ 307.443956][ T4353] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.462210][ T4353] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.891385][ T4353] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.949643][ T4353] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.019011][ T6071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.063415][ T6071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.169810][ T6157] loop4: detected capacity change from 0 to 32768 [ 308.180382][ T6157] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.506 (6157) [ 308.227148][ T6157] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 308.239634][ T6157] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 308.248564][ T6157] BTRFS info (device loop4): enabling auto defrag [ 308.255222][ T6157] BTRFS info (device loop4): doing ref verification [ 308.262112][ T6157] BTRFS info (device loop4): use no compression [ 308.268419][ T6157] BTRFS info (device loop4): force clearing of disk cache [ 308.275852][ T6157] BTRFS info (device loop4): max_inline at 4096 [ 308.282273][ T6157] BTRFS info (device loop4): disabling free space tree [ 308.333496][ T6071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.429542][ T6071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.471823][ T6071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.501189][ T6071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.621223][ T6157] BTRFS info (device loop4): enabling ssd optimizations [ 308.630248][ T6157] BTRFS info (device loop4): rebuilding free space tree [ 308.652901][ T6157] BTRFS info (device loop4): disabling free space tree [ 308.659877][ T6157] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 308.670897][ T6157] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 308.737211][ T6071] device hsr_slave_0 entered promiscuous mode [ 308.807904][ T6182] loop3: detected capacity change from 0 to 1024 [ 308.839664][ T6071] device hsr_slave_1 entered promiscuous mode [ 309.826917][ T6071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.836382][ T5753] hfsplus: b-tree write err: -5, ino 4 [ 309.856274][ T6071] Cannot create hsr debugfs directory [ 310.093022][ T26] audit: type=1800 audit(1749343075.233:101): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.506" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 311.133296][ T4259] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 313.837520][ T6071] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 313.946067][ T6231] loop3: detected capacity change from 0 to 1024 [ 314.032191][ T6071] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 314.914178][ T75] hfsplus: b-tree write err: -5, ino 4 [ 314.969604][ T6071] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 315.185234][ T6071] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 316.503554][ T6253] mmap: syz.1.524 (6253) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 317.852732][ T6246] loop4: detected capacity change from 0 to 32768 [ 317.962486][ T6246] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 318.066789][ T6246] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 318.096671][ T6071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.557052][ T4259] ocfs2: Unmounting device (7,4) on (node local) [ 318.632394][ T6071] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.663845][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.532'. [ 318.673630][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.532'. [ 318.684501][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.705345][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.749492][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.780646][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.820367][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.827865][ T4354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.865050][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 318.939524][ T4353] device hsr_slave_0 left promiscuous mode [ 318.977439][ T4353] device hsr_slave_1 left promiscuous mode [ 319.017108][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.144090][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.187111][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.220270][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.254726][ T4353] device bridge_slave_1 left promiscuous mode [ 319.294799][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.389451][ T4353] device bridge_slave_0 left promiscuous mode [ 319.434514][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.612607][ T4353] device veth1_macvtap left promiscuous mode [ 319.641214][ T4353] device veth0_macvtap left promiscuous mode [ 319.696768][ T4353] device veth1_vlan left promiscuous mode [ 319.720804][ T4353] device veth0_vlan left promiscuous mode [ 320.534923][ T4353] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 322.383729][ T4353] team0 (unregistering): Port device team_slave_1 removed [ 322.474240][ T4353] team0 (unregistering): Port device team_slave_0 removed [ 322.545114][ T4353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.665618][ T4353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.755885][ T6322] loop3: detected capacity change from 0 to 128 [ 322.811836][ T6322] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 322.836891][ T6322] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.891440][ T6324] netlink: 32 bytes leftover after parsing attributes in process `syz.3.542'. [ 325.026344][ T6334] can: request_module (can-proto-5) failed. [ 325.686434][ T4353] bond0 (unregistering): Released all slaves [ 325.791676][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.800687][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.809553][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.816909][ T4354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.825216][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.931847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.975148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.021093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.086092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 326.106552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.168157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.193681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.222360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.245530][ T6071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.452445][ T6071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.685181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.726093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.304495][ T6368] loop4: detected capacity change from 0 to 256 [ 327.342348][ T6368] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 327.398426][ T6370] loop3: detected capacity change from 0 to 1024 [ 327.424285][ T6368] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 327.463635][ T6370] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 327.574655][ T6368] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 327.679833][ T6368] UDF-fs: Scanning with blocksize 512 failed [ 328.082088][ T6368] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 328.124082][ T6368] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.200180][ T6368] overlayfs: upper fs needs to support d_type. [ 328.250298][ T6368] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 328.259988][ T6368] overlayfs: failed to set xattr on upper [ 328.267493][ T6368] overlayfs: ...falling back to index=off,metacopy=off. [ 328.483889][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.490794][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.557517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.607063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.627935][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 328.700562][ T6071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.483098][ T4523] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 329.694838][ T4523] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 329.755235][ T4523] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.804555][ T4523] usb 3-1: Product: syz [ 329.808956][ T4523] usb 3-1: Manufacturer: syz [ 329.820752][ T4523] usb 3-1: SerialNumber: syz [ 329.878946][ T4523] usb 3-1: config 0 descriptor?? [ 329.958283][ T4523] ch341 3-1:0.0: ch341-uart converter detected [ 330.134542][ T4523] usb 3-1: failed to receive control message: -121 [ 330.141177][ T4523] ch341-uart: probe of ttyUSB0 failed with error -121 [ 330.725645][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 330.776871][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.873970][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.893002][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.914901][ T6071] device veth0_vlan entered promiscuous mode [ 330.923178][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.942766][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.957433][ T6071] device veth1_vlan entered promiscuous mode [ 330.972891][ T6424] loop1: detected capacity change from 0 to 1024 [ 331.076043][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 331.096710][ T6424] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 331.110473][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 331.190413][ T6424] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.230368][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.266132][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.302847][ T6071] device veth0_macvtap entered promiscuous mode [ 331.326495][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 331.357638][ T6071] device veth1_macvtap entered promiscuous mode [ 331.449654][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.486926][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.527629][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.561579][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.591710][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.665726][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.757250][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.794240][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.817351][ T6071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.992876][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'. [ 332.130661][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.223714][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.279096][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.531518][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.554579][ T5081] usb 3-1: USB disconnect, device number 7 [ 332.563106][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.574471][ T5081] ch341 3-1:0.0: device disconnected [ 332.623652][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.665844][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.687121][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.699761][ T6446] loop2: detected capacity change from 0 to 512 [ 332.708850][ T6071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.735154][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 332.752521][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.787676][ T6446] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 332.814145][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 332.854672][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 332.878084][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.957783][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.991809][ T6446] EXT4-fs (loop2): 1 truncate cleaned up [ 332.998357][ T6446] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 333.273469][ T6439] lo speed is unknown, defaulting to 1000 [ 333.279360][ T6439] lo speed is unknown, defaulting to 1000 [ 333.285730][ T6439] lo speed is unknown, defaulting to 1000 [ 333.298592][ T6439] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 333.319248][ T6439] lo speed is unknown, defaulting to 1000 [ 333.328206][ T6439] lo speed is unknown, defaulting to 1000 [ 333.335203][ T6439] lo speed is unknown, defaulting to 1000 [ 333.342084][ T6439] lo speed is unknown, defaulting to 1000 [ 333.350537][ T6439] lo speed is unknown, defaulting to 1000 [ 334.104461][ T6456] syz.2.567 (pid 6456) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 334.820873][ T6071] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.849059][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 334.891836][ T6071] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.901053][ T6071] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.928105][ T6071] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.715321][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.818321][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.174766][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 336.224321][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.257818][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.338667][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 336.661281][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'. [ 336.670446][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'. [ 340.719670][ T6520] can0: slcan on ttyS3. [ 341.122965][ T6515] can0 (unregistered): slcan off ttyS3. [ 341.322513][ T6524] loop2: detected capacity change from 0 to 4096 [ 341.491634][ T6524] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 342.863874][ T6542] loop5: detected capacity change from 0 to 16 [ 342.916721][ T6542] erofs: (device loop5): mounted with root inode @ nid 36. [ 343.087022][ T6545] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 343.103608][ T6545] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 343.114871][ T6545] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 343.146561][ T6545] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 343.156502][ T6545] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 343.166719][ T6545] erofs: (device loop5): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 343.176003][ T6545] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 343.185420][ T6545] erofs: (device loop5): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 343.204198][ T6545] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 343.214044][ T6545] erofs: (device loop5): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 343.223531][ T6545] erofs: (device loop5): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 343.232906][ T6545] erofs: (device loop5): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 343.242701][ T6545] erofs: (device loop5): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 343.252462][ T6545] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 343.263309][ T6545] erofs: (device loop5): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 343.273546][ T6545] erofs: (device loop5): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 343.283237][ T6545] erofs: (device loop5): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 343.292955][ T6545] erofs: (device loop5): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 343.306343][ T6545] syz.5.589: attempt to access beyond end of device [ 343.306343][ T6545] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 343.320505][ T6545] syz.5.589: attempt to access beyond end of device [ 343.320505][ T6545] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 343.335217][ T6545] syz.5.589: attempt to access beyond end of device [ 343.335217][ T6545] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 343.360341][ T6545] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[2639] [ 343.373713][ T6545] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 343.383841][ T6545] erofs: (device loop5): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 343.393298][ T6545] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 343.402901][ T6545] erofs: (device loop5): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 343.412545][ T6545] erofs: (device loop5): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 343.422335][ T6545] syz.5.589: attempt to access beyond end of device [ 343.422335][ T6545] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 343.445785][ T6545] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[3537] [ 343.980652][ T6552] loop1: detected capacity change from 0 to 128 [ 343.987683][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 344.022433][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 344.074697][ T6552] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 344.116729][ T6556] syz.3.593 uses obsolete (PF_INET,SOCK_PACKET) [ 344.131057][ T6552] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.413670][ T6559] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.422778][ T6559] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.431777][ T6559] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.440555][ T6559] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.508803][ T6563] netlink: 32 bytes leftover after parsing attributes in process `syz.1.592'. [ 344.839359][ T6559] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 345.532996][ T6569] loop5: detected capacity change from 0 to 32768 [ 345.566956][ T6569] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.597 (6569) [ 345.662744][ T6569] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 345.673154][ T6569] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 345.681905][ T6569] BTRFS info (device loop5): setting nodatacow, compression disabled [ 345.690113][ T6569] BTRFS info (device loop5): turning on sync discard [ 345.696882][ T6569] BTRFS info (device loop5): setting datacow [ 345.702954][ T6569] BTRFS info (device loop5): doing ref verification [ 345.709582][ T6569] BTRFS info (device loop5): turning off barriers [ 345.716218][ T6569] BTRFS info (device loop5): enabling ssd optimizations [ 345.723242][ T6569] BTRFS info (device loop5): using spread ssd allocation scheme [ 345.730916][ T6569] BTRFS info (device loop5): setting datasum [ 345.737076][ T6569] BTRFS info (device loop5): turning on barriers [ 345.743564][ T6569] BTRFS info (device loop5): not using ssd optimizations [ 345.750639][ T6569] BTRFS info (device loop5): not using spread ssd allocation scheme [ 345.758837][ T6569] BTRFS info (device loop5): using free space tree [ 346.286514][ T6573] loop1: detected capacity change from 0 to 32768 [ 346.314823][ T6573] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.598 (6573) [ 347.094299][ T6573] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 347.158991][ T6573] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 347.175707][ T6573] BTRFS info (device loop1): doing ref verification [ 347.191592][ T6573] BTRFS info (device loop1): disabling tree log [ 347.231986][ T6573] BTRFS info (device loop1): enabling auto defrag [ 347.268209][ T6071] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 347.279462][ T6573] BTRFS info (device loop1): max_inline at 0 [ 347.291763][ T6573] BTRFS info (device loop1): using free space tree [ 347.738678][ T6573] BTRFS info (device loop1): enabling ssd optimizations [ 348.391595][ T6643] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 348.581705][ T6643] usb 5-1: Using ep0 maxpacket: 8 [ 348.593662][ T6643] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 348.629702][ T6643] usb 5-1: config 0 has an invalid interface number: 150 but max is 64 [ 348.638675][ T4252] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 348.669699][ T6643] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.727736][ T6643] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 348.768938][ T6643] usb 5-1: config 0 has no interface number 0 [ 348.816014][ T6643] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.849719][ T6643] usb 5-1: config 0 interface 150 has no altsetting 0 [ 348.870023][ T6643] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 348.902219][ T6643] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.946741][ T6643] usb 5-1: config 0 descriptor?? [ 349.235628][ T6647] loop4: detected capacity change from 0 to 1024 [ 349.546892][ T6643] usb 5-1: USB disconnect, device number 4 [ 349.841591][ T6134] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 349.883354][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.150/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.071634][ T6134] usb 3-1: Using ep0 maxpacket: 8 [ 350.098131][ T6134] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 350.161694][ T6134] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.204650][ T6134] usb 3-1: Product: syz [ 350.241638][ T6134] usb 3-1: Manufacturer: syz [ 350.257244][ T6134] usb 3-1: SerialNumber: syz [ 350.288960][ T6134] usb 3-1: config 0 descriptor?? [ 350.313192][ T6134] gspca_main: sq930x-2.14.0 probing 2770:930c [ 350.521411][ T6684] loop5: detected capacity change from 0 to 256 [ 351.468348][ T6134] gspca_sq930x: ucbus_write failed -110 [ 351.514616][ T6684] FAT-fs (loop5): Directory bread(block 64) failed [ 351.582099][ T6684] FAT-fs (loop5): Directory bread(block 65) failed [ 351.629949][ T6684] FAT-fs (loop5): Directory bread(block 66) failed [ 351.680410][ T6684] FAT-fs (loop5): Directory bread(block 67) failed [ 351.702217][ T6684] FAT-fs (loop5): Directory bread(block 68) failed [ 351.709023][ T6684] FAT-fs (loop5): Directory bread(block 69) failed [ 351.721265][ T4862] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 351.753009][ T6684] FAT-fs (loop5): Directory bread(block 70) failed [ 351.760279][ T6684] FAT-fs (loop5): Directory bread(block 71) failed [ 351.781658][ T6684] FAT-fs (loop5): Directory bread(block 72) failed [ 351.788277][ T6684] FAT-fs (loop5): Directory bread(block 73) failed [ 351.795273][ T6134] gspca_sq930x: Sensor ov9630 not yet treated [ 351.809556][ T6134] sq930x: probe of 3-1:0.0 failed with error -22 [ 351.840777][ T6134] usb 3-1: USB disconnect, device number 8 [ 351.860377][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 351.922506][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 351.934978][ T4862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.955541][ T4862] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 351.971106][ T4862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 351.986985][ T4862] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 352.031420][ T4862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 352.068908][ T4862] usb 5-1: Product: syz [ 352.184390][ T4862] usb 5-1: Manufacturer: syz [ 352.192428][ T6701] loop1: detected capacity change from 0 to 256 [ 352.204640][ T6701] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 352.219681][ T6701] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 352.233745][ T6701] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 352.243318][ T6701] UDF-fs: Scanning with blocksize 512 failed [ 352.255335][ T6701] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 352.272769][ T6701] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 352.308204][ T6701] overlayfs: upper fs needs to support d_type. [ 352.319275][ T6701] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 352.326690][ T6701] overlayfs: failed to set xattr on upper [ 352.332808][ T6701] overlayfs: ...falling back to index=off,metacopy=off. [ 352.393008][ T4862] usb 5-1: SerialNumber: syz [ 352.593147][ T4862] usb 5-1: config 0 descriptor?? [ 352.790571][ T4862] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 352.971694][ T4862] radio-si470x: probe of 5-1:0.0 failed with error -5 [ 352.978808][ T4862] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 353.688320][ T6719] 9pnet_fd: Insufficient options for proto=fd [ 354.030943][ T6643] usb 5-1: USB disconnect, device number 5 [ 355.429662][ T6737] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.439081][ T6737] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.447878][ T6737] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.456751][ T6737] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.628989][ T6737] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 356.849251][ T6751] loop4: detected capacity change from 0 to 64 [ 357.682739][ T6757] ubi31: attaching mtd0 [ 357.781989][ T6757] ubi31: scanning is finished [ 358.145457][ T6757] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 358.162691][ T6771] 9pnet_fd: Insufficient options for proto=fd [ 358.593217][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'. [ 358.637769][ T6778] loop1: detected capacity change from 0 to 1024 [ 358.645201][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'. [ 358.734565][ T4487] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 358.835722][ T6783] loop5: detected capacity change from 0 to 2048 [ 359.792123][ T6783] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 364.079249][ T6838] loop4: detected capacity change from 0 to 32768 [ 364.145461][ T6838] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.648 (6838) [ 364.163970][ T6838] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 364.174207][ T6838] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 364.182905][ T6838] BTRFS info (device loop4): setting nodatacow, compression disabled [ 364.191219][ T6838] BTRFS info (device loop4): turning on sync discard [ 364.198264][ T6838] BTRFS info (device loop4): setting datacow [ 364.204334][ T6838] BTRFS info (device loop4): doing ref verification [ 364.210954][ T6838] BTRFS info (device loop4): turning off barriers [ 364.217473][ T6838] BTRFS info (device loop4): enabling ssd optimizations [ 364.224482][ T6838] BTRFS info (device loop4): using spread ssd allocation scheme [ 364.232224][ T6838] BTRFS info (device loop4): setting datasum [ 364.238340][ T6838] BTRFS info (device loop4): turning on barriers [ 364.244901][ T6838] BTRFS info (device loop4): not using ssd optimizations [ 364.252575][ T6838] BTRFS info (device loop4): not using spread ssd allocation scheme [ 364.260600][ T6838] BTRFS info (device loop4): using free space tree [ 365.588301][ T4259] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 366.131336][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 366.140438][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 369.855212][ T6926] loop1: detected capacity change from 0 to 32768 [ 370.005567][ T6926] XFS (loop1): Mounting V5 Filesystem [ 370.132487][ T6643] XFS (loop1): Metadata corruption detected at xfs_buf_ioend+0x27a/0x780, xfs_inode block 0x3000 xfs_inode_buf_verify [ 370.182395][ T6643] XFS (loop1): Unmount and run xfs_repair [ 370.272061][ T6643] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 370.295737][ T6643] 00000000: 49 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 I............... [ 370.306557][ T6643] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 370.316430][ T6643] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 370.334407][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.663'. [ 370.336441][ T6643] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 370.374292][ T6643] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 370.381583][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.663'. [ 370.392810][ T6643] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 370.392835][ T6643] 00000060: ff ff ff ff 34 42 28 19 00 00 00 00 00 00 00 00 ....4B(......... [ 370.392851][ T6643] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 370.482202][ T6926] XFS (loop1): metadata I/O error in "xfs_imap_to_bp+0x110/0x180" at daddr 0x3000 len 64 error 117 [ 370.493471][ T6926] XFS (loop1): Failed to read root inode 0x1800, error 117 [ 371.555431][ T6970] loop2: detected capacity change from 0 to 256 [ 371.610188][ T6970] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 371.711315][ T6970] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 371.801024][ T6970] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 371.865115][ T6970] UDF-fs: Scanning with blocksize 512 failed [ 371.928052][ T6970] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 372.007952][ T6970] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 372.094552][ T6963] overlayfs: upper fs needs to support d_type. [ 372.101426][ T6963] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 372.108528][ T6963] overlayfs: failed to set xattr on upper [ 372.114317][ T6963] overlayfs: ...falling back to index=off,metacopy=off. [ 372.671577][ T14] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 372.871781][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 372.880754][ T14] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 372.930736][ T14] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 372.961651][ T14] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 373.022553][ T14] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 373.093789][ T14] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.292491][ T7009] loop2: detected capacity change from 0 to 2048 [ 373.305518][ T7009] ext4: Unknown parameter 'noacl' [ 373.903379][ T14] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 373.913087][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.196263][ T14] usb 5-1: GET_CAPABILITIES returned 0 [ 374.202165][ T14] usbtmc 5-1:16.0: can't read capabilities [ 374.556731][ T14] usb 5-1: USB disconnect, device number 6 [ 376.066299][ T7028] loop4: detected capacity change from 0 to 128 [ 376.096972][ T7028] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 376.120269][ T7031] fuse: Bad value for 'fd' [ 376.198064][ T7028] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.728992][ T7035] netlink: 32 bytes leftover after parsing attributes in process `syz.4.692'. [ 377.453240][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 377.463497][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 377.484064][ T7047] loop3: detected capacity change from 0 to 256 [ 377.538601][ T7047] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 377.707064][ T7050] loop5: detected capacity change from 0 to 1024 [ 377.754164][ T7047] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 377.811855][ T7047] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 377.831697][ T7047] UDF-fs: Scanning with blocksize 512 failed [ 377.869104][ T7047] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 377.951099][ T7047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.996668][ T7045] overlayfs: upper fs needs to support d_type. [ 378.004460][ T7045] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 378.011994][ T7045] overlayfs: failed to set xattr on upper [ 378.018251][ T7045] overlayfs: ...falling back to index=off,metacopy=off. [ 378.188318][ T7061] binder: 7060:7061 ioctl c018620c 200000000700 returned -22 [ 378.399392][ T7070] fuse: Bad value for 'fd' [ 379.556655][ T7080] loop3: detected capacity change from 0 to 128 [ 379.598035][ T7080] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 379.655046][ T7080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.569544][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 381.580114][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 381.834412][ T7096] netlink: 32 bytes leftover after parsing attributes in process `syz.3.707'. [ 383.273283][ T7110] loop2: detected capacity change from 0 to 256 [ 383.286134][ T7110] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 383.302126][ T7110] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 383.315442][ T7110] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 383.323246][ T7110] UDF-fs: Scanning with blocksize 512 failed [ 383.335792][ T7110] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 383.354793][ T7110] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.396062][ T7110] overlayfs: upper fs needs to support d_type. [ 383.414415][ T7110] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 383.421817][ T7110] overlayfs: failed to set xattr on upper [ 383.427593][ T7110] overlayfs: ...falling back to index=off,metacopy=off. [ 385.013746][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 385.022858][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 385.596022][ T7138] loop4: detected capacity change from 0 to 128 [ 385.631769][ T7138] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 385.769885][ T7135] 9pnet: Could not find request transport: fd0x0000000000000004 [ 385.808586][ T7142] loop2: detected capacity change from 0 to 1024 [ 385.833692][ T7138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.613256][ T7150] netlink: 32 bytes leftover after parsing attributes in process `syz.4.726'. [ 387.726354][ T7166] loop4: detected capacity change from 0 to 256 [ 387.738822][ T7166] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 387.755379][ T7166] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 387.773549][ T7166] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 387.781596][ T7166] UDF-fs: Scanning with blocksize 512 failed [ 387.794736][ T7166] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 387.814086][ T7166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.856239][ T7166] overlayfs: upper fs needs to support d_type. [ 387.866453][ T7166] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 387.873796][ T7166] overlayfs: failed to set xattr on upper [ 387.879641][ T7166] overlayfs: ...falling back to index=off,metacopy=off. [ 389.641266][ T7184] loop4: detected capacity change from 0 to 256 [ 389.908999][ T7184] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 389.955381][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.962141][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.653625][ T7195] loop2: detected capacity change from 0 to 128 [ 391.293139][ T7195] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 391.336766][ T26] audit: type=1800 audit(1749343156.473:102): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.740" name="file1" dev="loop2" ino=1048611 res=0 errno=0 [ 391.532130][ T7198] 9pnet: Could not find request transport: fd0x0000000000000004 [ 391.590437][ T4382] kworker/u4:14: attempt to access beyond end of device [ 391.590437][ T4382] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 391.604880][ T7206] loop4: detected capacity change from 0 to 128 [ 391.647405][ T4382] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 391.773389][ T7206] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 391.934573][ T7206] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.409129][ T7213] netlink: 32 bytes leftover after parsing attributes in process `syz.4.742'. [ 393.175333][ T7230] loop5: detected capacity change from 0 to 128 [ 393.222670][ T7225] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 393.238702][ T7230] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 393.277827][ T7230] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 393.541826][ T5081] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 394.758419][ T7236] netlink: 32 bytes leftover after parsing attributes in process `syz.5.749'. [ 396.239663][ T5081] usb 3-1: device descriptor read/all, error -71 [ 396.497500][ T7255] loop2: detected capacity change from 0 to 128 [ 396.514506][ T7255] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 396.551238][ T26] audit: type=1800 audit(1749343161.683:103): pid=7255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.754" name="file1" dev="loop2" ino=1048612 res=0 errno=0 [ 396.724668][ T4266] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 396.734458][ T4266] Bluetooth: hci0: Injecting HCI hardware error event [ 396.746260][ T4268] Bluetooth: hci0: hardware error 0x00 [ 397.190335][ T7257] loop5: detected capacity change from 0 to 1024 [ 397.354500][ T5078] kworker/u4:20: attempt to access beyond end of device [ 397.354500][ T5078] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 397.436006][ T5078] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 397.662751][ T7259] 9pnet: Could not find request transport: fd0x0000000000000004 [ 397.818021][ T7271] loop1: detected capacity change from 0 to 24 [ 397.828861][ T7271] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 397.887964][ T7271] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 398.096722][ T7271] VFS: Lookup of 'file0' in romfs loop1 would have caused loop [ 398.678963][ T7278] loop3: detected capacity change from 0 to 128 [ 398.714517][ T7278] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 398.770164][ T7278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 398.801722][ T4268] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 399.545924][ T4266] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 401.695238][ T7294] netlink: 32 bytes leftover after parsing attributes in process `syz.3.764'. [ 402.361536][ T5081] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 402.566955][ T7310] loop3: detected capacity change from 0 to 128 [ 402.583624][ T7310] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 402.594156][ T5081] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 402.627029][ T26] audit: type=1800 audit(1749343167.763:104): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.770" name="file1" dev="loop3" ino=1048613 res=0 errno=0 [ 403.313019][ T5081] usb 6-1: config 0 has no interface number 0 [ 403.524488][ T5081] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 403.548610][ T7312] loop1: detected capacity change from 0 to 256 [ 403.589831][ T5081] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.607560][ T7312] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 403.656264][ T5081] usb 6-1: config 0 descriptor?? [ 403.683452][ T5081] usb 6-1: can't set config #0, error -71 [ 403.714698][ T7312] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 403.735175][ T5081] usb 6-1: USB disconnect, device number 2 [ 403.765345][ T7312] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 403.824751][ T7312] UDF-fs: Scanning with blocksize 512 failed [ 403.839227][ T7315] loop5: detected capacity change from 0 to 1024 [ 403.906501][ T7312] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 403.953304][ T7312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.090780][ T7309] overlayfs: upper fs needs to support d_type. [ 404.097685][ T7309] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 404.104792][ T7309] overlayfs: failed to set xattr on upper [ 404.110536][ T7309] overlayfs: ...falling back to index=off,metacopy=off. [ 404.263548][ T4382] kworker/u4:14: attempt to access beyond end of device [ 404.263548][ T4382] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 404.387805][ T4382] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 404.683127][ T7331] 9pnet_fd: Insufficient options for proto=fd [ 404.932116][ T7345] loop1: detected capacity change from 0 to 128 [ 404.944194][ T7345] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 404.987579][ T7345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.904813][ T7352] netlink: 32 bytes leftover after parsing attributes in process `syz.1.780'. [ 406.135685][ T7355] loop2: detected capacity change from 0 to 1024 [ 406.884345][ T4268] Bluetooth: hci1: command 0x1003 tx timeout [ 406.890853][ T4266] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 407.974429][ T7365] loop5: detected capacity change from 0 to 128 [ 408.070349][ T7365] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 408.231031][ T26] audit: type=1800 audit(1749343173.363:105): pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.785" name="file1" dev="loop5" ino=1048614 res=0 errno=0 [ 409.550086][ T7371] loop4: detected capacity change from 0 to 131072 [ 409.601205][ T5437] kworker/u4:21: attempt to access beyond end of device [ 409.601205][ T5437] loop5: rw=1, sector=145, nr_sectors = 600 limit=128 [ 409.670229][ T7382] 9pnet_fd: Insufficient options for proto=fd [ 409.679374][ T5437] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 409.711474][ T7371] F2FS-fs (loop4): Found nat_bits in checkpoint [ 409.767874][ T7371] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 410.040440][ T7371] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 410.152610][ T7393] loop5: detected capacity change from 0 to 256 [ 411.181168][ T7406] loop2: detected capacity change from 0 to 1024 [ 411.675795][ T7420] 9pnet_fd: Insufficient options for proto=fd [ 413.205049][ T7448] loop3: detected capacity change from 0 to 1024 [ 414.465801][ T7475] 9pnet_fd: Insufficient options for proto=fd [ 414.486400][ T7445] loop5: detected capacity change from 0 to 40427 [ 414.520834][ T7445] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 414.571498][ T7445] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 414.736990][ T7445] F2FS-fs (loop5): Found nat_bits in checkpoint [ 415.494869][ T7445] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 415.525763][ T7445] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 416.041576][ T4862] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 416.241908][ T4266] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 416.303772][ T7491] loop4: detected capacity change from 0 to 32768 [ 416.381532][ T4862] usb 2-1: Using ep0 maxpacket: 16 [ 416.391611][ T4862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.430040][ T4862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.442662][ T4862] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.456633][ T4862] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 416.481838][ T4862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.502932][ T4862] usb 2-1: config 0 descriptor?? [ 417.154831][ T4862] hid-u2fzero 0003:10C4:8ACF.0002: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.1-1/input0 [ 417.186491][ T4862] hid-u2fzero 0003:10C4:8ACF.0002: U2F Zero LED initialised [ 417.202822][ T4862] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 417.214702][ T4862] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 417.223176][ T4862] CPU: 1 PID: 4862 Comm: kworker/1:9 Not tainted 6.1.141-syzkaller #0 [ 417.231389][ T4862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 417.241487][ T4862] Workqueue: usb_hub_wq hub_event [ 417.246594][ T4862] RIP: 0010:u2fzero_rng_read+0x26c/0x6f0 [ 417.252262][ T4862] Code: 03 43 80 3c 2c 00 74 08 48 89 df e8 de 88 2d fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 36 89 2d fa 48 8d 84 24 80 00 00 00 [ 417.271919][ T4862] RSP: 0018:ffffc900056ce7c0 EFLAGS: 00010202 [ 417.278093][ T4862] RAX: 0000000000000015 RBX: ffff88807cd69030 RCX: dffffc0000000000 [ 417.286096][ T4862] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff88805723b969 [ 417.294108][ T4862] RBP: ffffc900056ce970 R08: 0000000000000001 R09: ffff88805723b92e [ 417.302105][ T4862] R10: ffffed100ae4772d R11: 1ffff1100ae47725 R12: 1ffff1100f9ad206 [ 417.310106][ T4862] R13: dffffc0000000000 R14: 1ffff1100f9ad205 R15: 00000000000000a8 [ 417.318273][ T4862] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 417.327222][ T4862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.333835][ T4862] CR2: 00007fce08bdcff0 CR3: 000000007e7d3000 CR4: 00000000003506e0 [ 417.341824][ T4862] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 417.349895][ T4862] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 417.357910][ T4862] Call Trace: [ 417.361202][ T4862] [ 417.364146][ T4862] ? rcu_is_watching+0x11/0xa0 [ 417.368938][ T4862] ? u2fzero_brightness_set+0x2c0/0x2c0 [ 417.374527][ T4862] ? mutex_lock_nested+0x10/0x10 [ 417.379521][ T4862] ? u2fzero_brightness_set+0x2c0/0x2c0 [ 417.385460][ T4862] add_early_randomness+0x7a/0x150 [ 417.390601][ T4862] hwrng_register+0x398/0x440 [ 417.395306][ T4862] devm_hwrng_register+0x43/0xb0 [ 417.400269][ T4862] u2fzero_probe+0x355/0x470 [ 417.405317][ T4862] ? twinhan_input_mapping+0x2210/0x2210 [ 417.410994][ T4862] hid_device_probe+0x25c/0x350 [ 417.416055][ T4862] ? hid_uevent+0x340/0x340 [ 417.420594][ T4862] really_probe+0x2aa/0xc70 [ 417.425126][ T4862] ? pm_runtime_barrier+0x147/0x1c0 [ 417.430361][ T4862] __driver_probe_device+0x18c/0x330 [ 417.435665][ T4862] driver_probe_device+0x4f/0x420 [ 417.440709][ T4862] __device_attach_driver+0x2c6/0x510 [ 417.446096][ T4862] ? coredump_store+0x90/0x90 [ 417.450881][ T4862] bus_for_each_drv+0x175/0x200 [ 417.455767][ T4862] ? _raw_spin_unlock+0x40/0x40 [ 417.460647][ T4862] ? subsys_find_device_by_id+0x350/0x350 [ 417.466407][ T4862] __device_attach+0x29b/0x460 [ 417.471281][ T4862] ? device_attach+0x20/0x20 [ 417.475891][ T4862] ? __kmem_cache_free+0xb6/0x1f0 [ 417.480940][ T4862] ? kobject_uevent_env+0x35f/0x8a0 [ 417.486163][ T4862] bus_probe_device+0xbc/0x1e0 [ 417.490987][ T4862] ? device_add+0x97c/0xfb0 [ 417.495621][ T4862] device_add+0xa00/0xfb0 [ 417.499977][ T4862] hid_add_device+0x389/0x530 [ 417.504679][ T4862] usbhid_probe+0xc09/0xfe0 [ 417.509207][ T4862] usb_probe_interface+0x5a0/0xaf0 [ 417.514436][ T4862] ? usb_register_driver+0x3d0/0x3d0 [ 417.519746][ T4862] really_probe+0x2aa/0xc70 [ 417.524264][ T4862] ? pm_runtime_barrier+0x147/0x1c0 [ 417.529581][ T4862] __driver_probe_device+0x18c/0x330 [ 417.534897][ T4862] driver_probe_device+0x4f/0x420 [ 417.539979][ T4862] __device_attach_driver+0x2c6/0x510 [ 417.545509][ T4862] ? coredump_store+0x90/0x90 [ 417.550210][ T4862] bus_for_each_drv+0x175/0x200 [ 417.555091][ T4862] ? _raw_spin_unlock+0x40/0x40 [ 417.559981][ T4862] ? subsys_find_device_by_id+0x350/0x350 [ 417.565750][ T4862] __device_attach+0x29b/0x460 [ 417.570620][ T4862] ? device_attach+0x20/0x20 [ 417.575230][ T4862] ? kobject_uevent_env+0x35f/0x8a0 [ 417.580458][ T4862] bus_probe_device+0xbc/0x1e0 [ 417.585330][ T4862] ? device_add+0x97c/0xfb0 [ 417.589866][ T4862] device_add+0xa00/0xfb0 [ 417.594249][ T4862] usb_set_configuration+0x1991/0x1fd0 [ 417.599763][ T4862] usb_generic_driver_probe+0x89/0x150 [ 417.605242][ T4862] usb_probe_device+0x139/0x270 [ 417.610239][ T4862] ? usb_register_device_driver+0x230/0x230 [ 417.616242][ T4862] really_probe+0x2aa/0xc70 [ 417.620774][ T4862] ? pm_runtime_barrier+0x147/0x1c0 [ 417.626002][ T4862] __driver_probe_device+0x18c/0x330 [ 417.631305][ T4862] driver_probe_device+0x4f/0x420 [ 417.636352][ T4862] __device_attach_driver+0x2c6/0x510 [ 417.641753][ T4862] ? coredump_store+0x90/0x90 [ 417.646461][ T4862] bus_for_each_drv+0x175/0x200 [ 417.651335][ T4862] ? _raw_spin_unlock+0x40/0x40 [ 417.656219][ T4862] ? subsys_find_device_by_id+0x350/0x350 [ 417.662086][ T4862] __device_attach+0x29b/0x460 [ 417.666959][ T4862] ? device_attach+0x20/0x20 [ 417.671580][ T4862] ? __kmem_cache_free+0xb6/0x1f0 [ 417.676806][ T4862] ? kobject_uevent_env+0x35f/0x8a0 [ 417.682021][ T4862] bus_probe_device+0xbc/0x1e0 [ 417.686894][ T4862] ? device_add+0x97c/0xfb0 [ 417.691413][ T4862] device_add+0xa00/0xfb0 [ 417.695769][ T4862] usb_new_device+0xd4d/0x1620 [ 417.700561][ T4862] ? lock_chain_count+0x20/0x20 [ 417.705439][ T4862] ? usb_disconnect+0x8a0/0x8a0 [ 417.710317][ T4862] ? _raw_spin_unlock_irq+0x1f/0x40 [ 417.715637][ T4862] ? lockdep_hardirqs_on+0x94/0x140 [ 417.720875][ T4862] hub_event+0x2b02/0x5210 [ 417.725530][ T4862] ? led_work+0x6e0/0x6e0 [ 417.729888][ T4862] ? read_lock_is_recursive+0x10/0x10 [ 417.735279][ T4862] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 417.741201][ T4862] ? _raw_spin_unlock+0x40/0x40 [ 417.746211][ T4862] ? _raw_spin_unlock_irq+0x1f/0x40 [ 417.751495][ T4862] ? process_one_work+0x7a1/0x1160 [ 417.756907][ T4862] process_one_work+0x898/0x1160 [ 417.761963][ T4862] ? worker_detach_from_pool+0x240/0x240 [ 417.767616][ T4862] ? _raw_spin_lock_irq+0xab/0xe0 [ 417.772666][ T4862] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 417.778075][ T4862] ? kthread_data+0x4b/0xc0 [ 417.782612][ T4862] worker_thread+0xaa2/0x1250 [ 417.787365][ T4862] kthread+0x29d/0x330 [ 417.791469][ T4862] ? worker_clr_flags+0x1a0/0x1a0 [ 417.796596][ T4862] ? kthread_blkcg+0xd0/0xd0 [ 417.801216][ T4862] ret_from_fork+0x1f/0x30 [ 417.805660][ T4862] [ 417.808709][ T4862] Modules linked in: [ 417.855537][ T4862] ---[ end trace 0000000000000000 ]--- [ 417.861153][ T4862] RIP: 0010:u2fzero_rng_read+0x26c/0x6f0 [ 417.868476][ T4862] Code: 03 43 80 3c 2c 00 74 08 48 89 df e8 de 88 2d fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 36 89 2d fa 48 8d 84 24 80 00 00 00 [ 417.896124][ T4862] RSP: 0018:ffffc900056ce7c0 EFLAGS: 00010202 [ 417.914787][ T4862] RAX: 0000000000000015 RBX: ffff88807cd69030 RCX: dffffc0000000000 [ 417.933474][ T4862] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff88805723b969 [ 417.950470][ T4862] RBP: ffffc900056ce970 R08: 0000000000000001 R09: ffff88805723b92e [ 417.960305][ T4862] R10: ffffed100ae4772d R11: 1ffff1100ae47725 R12: 1ffff1100f9ad206 [ 417.974409][ T4862] R13: dffffc0000000000 R14: 1ffff1100f9ad205 R15: 00000000000000a8 [ 417.983147][ T4862] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 417.992476][ T4862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.999282][ T4862] CR2: 00007fdc9c181178 CR3: 000000005c150000 CR4: 00000000003506e0 [ 418.007883][ T4862] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 418.017129][ T4862] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 418.025530][ T4862] Kernel panic - not syncing: Fatal exception [ 418.032056][ T4862] Kernel Offset: disabled [ 418.036495][ T4862] Rebooting in 86400 seconds..