last executing test programs: 10m6.776594067s ago: executing program 32 (id=987): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455050000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="200207"], 0x0, 0x0, 0x0, 0x0}, 0x0) 10m3.840352418s ago: executing program 33 (id=1005): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 9m56.177755105s ago: executing program 34 (id=1048): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x2080c2, &(0x7f000000b640)=ANY=[@ANYBLOB="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"], 0x1, 0xa9f, &(0x7f0000002000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80086e8a, 0x0) 9m24.321245919s ago: executing program 35 (id=1196): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) 8m43.851182565s ago: executing program 36 (id=1428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x1c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) 2m0.81743958s ago: executing program 7 (id=4616): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 1m58.678016651s ago: executing program 7 (id=4634): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 1m58.237845664s ago: executing program 7 (id=4638): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=@newqdisc={0x14c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7ff9}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x8, 0x30, 0x0, 0x2, 0x20, 0x7}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m57.922525136s ago: executing program 7 (id=4642): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xe, &(0x7f00000004c0)={[{@init_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@stripe}]}, 0x3, 0x44e, &(0x7f0000000540)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m57.178372308s ago: executing program 7 (id=4649): r0 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f0000000000), &(0x7f00000005c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) 1m56.713516828s ago: executing program 7 (id=4654): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x80, 0x41b, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2={0xff, 0x5}}}) 1m55.798635139s ago: executing program 37 (id=4654): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x80, 0x41b, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2={0xff, 0x5}}}) 1m54.692888118s ago: executing program 6 (id=4668): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x0) 1m54.058887085s ago: executing program 6 (id=4672): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x30, 0x1f, {0x1f, 0x1, "a97b3135f97d55d7c62180267af010767ebbb1ce54b10941b8ff995559"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m52.106103027s ago: executing program 6 (id=4682): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000600)={0x1, 0x1}) 1m51.714712503s ago: executing program 6 (id=4684): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@test_dummy_encryption}, {@dioread_lock}, {@test_dummy_encryption}, {@dax_never}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xd, 0x5e9, &(0x7f0000001340)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f00000000c0)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 1m50.579835725s ago: executing program 6 (id=4691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000000800000006"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), 0x0}, 0x20) 1m50.074682158s ago: executing program 9 (id=4696): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x182, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000000c0)={0x18, 0x1, 0x0, 0x0, r1, 0x8}) 1m49.611632217s ago: executing program 9 (id=4698): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000600)={0x8, {"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", 0x1000}}, 0x1006) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3deffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a40000000000900010073797a30000000000900020073797a31000000002c00058008000140000086dd080001400000002c080001400000001608000140000000736afd014000008100080009"], 0x248}}, 0x0) 1m49.142647437s ago: executing program 9 (id=4701): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @dev, 0x9}, 0x80, 0x0}, 0x20000000) 1m48.668937324s ago: executing program 9 (id=4704): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@test_dummy_encryption}, {@dioread_lock}, {@test_dummy_encryption}, {@dax_never}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xd, 0x5e9, &(0x7f0000001340)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f00000000c0)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 1m48.171331146s ago: executing program 9 (id=4706): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x4008032, 0xffffffffffffffff, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1m46.389326809s ago: executing program 6 (id=4711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 1m45.72729856s ago: executing program 38 (id=4711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 1m45.721356276s ago: executing program 9 (id=4713): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000000e}) 1m45.049351294s ago: executing program 39 (id=4713): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000000e}) 1m34.229042368s ago: executing program 2 (id=4768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x40880) 1m34.007449568s ago: executing program 2 (id=4769): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d69a17707e859d35af809cabc3e7b83736f383835392d392c73686f72746e616d653d77696e6e742c636f6465706167653d313235352c757466383d302c636f6465706167653d3836332c756e695f786c6174653d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c726f6469722c726f6469722c696f636861727365743d6b6f69382d72752c00", @ANYRES32=0x0, @ANYRES64, @ANYBLOB=' \t', @ANYRES16], 0x81, 0x2c0, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) rmdir(&(0x7f0000005a40)='./file0\x00') 1m33.542000122s ago: executing program 2 (id=4773): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1a4, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="080000000100010003"], 0x0) 1m33.169214808s ago: executing program 2 (id=4776): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m32.926792482s ago: executing program 2 (id=4778): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 1m32.651947565s ago: executing program 2 (id=4781): chdir(&(0x7f0000000080)='./file0\x00') r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 1m18.196949482s ago: executing program 40 (id=4781): chdir(&(0x7f0000000080)='./file0\x00') r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 5.3059957s ago: executing program 8 (id=5300): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4ff, 0x7, 0x1}) 5.275878115s ago: executing program 0 (id=5301): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@dioread_nolock}, {@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x790, &(0x7f0000000800)="$eJzs3M9rHGUYAOB3ptmmP6IbwYNeqtBCC6WbpLm0J+NFvBQKBa81JJsQMsmW7KYmsdDUmyDU5qIiiN49ehVK/QO8SUHBuyBa40G9rOxms23T3c223XRrfB6Y7PfNzDfv+85uvsxAZgP433q99iOJGIqIixGRb6xPI+JgvXUoYn1rv81716ZqSxLV6qXfktqw2Kzmm8dKGq9Hoz4kXomIO7mI0x88Gre8ujY/mWXFpUZ/pLJwZaS8unZmbmFytjhbXBwbPz96bnz83Oh4z2o98c75w7e+f2tj44dvKjePDZxJYqJedzRq61mgB2ydk1xM7Fi/uBfB+ijpYp+BZ5AHAACd1a7zDzSuzXKRjwOdrtJcwAEAAMB/UnWw2q2/u94TAAAAeM4k0e8MAAAAgL21/X8A28/27tVzsO38+mZEDLeKP1B/hjjiUOQi4shm8tDjB8nWMHgq6zci4vZEi89fN080dzZ6v3m4N0ek127X5p+JVvNP2px/osX8M7D93QlPqf38dz/+gTbz38UuY3z7xau5tvFvlFc+PNYqftKMn7SJ/26X8W9ufHSr3bbqVxEnW/79SR6K1eH7IUZm5rJWv1rNdO/8c+pu+/ojjjwSP0nqUZPO9V/psv73N/+YX+8Q/9Txzu//VvzBh8bVPhMfN/JII+JW47XW39gR4/jCj989GjlZ344/3eb8t37/327W/2WX9f/89eBKl7sCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAXRoRQ5GkhWY7TQuFiKMR8XIcSbNSuXJ6prS8OF3bFjEcuXRmLiuORkR+q5/U+mP19v3+2R398Yh46afDW0HnsmJhqpRN97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmo5GxFAkaSEi0oj4M5+mhUK/swIAAAB6brjfCQAAAAB7zv0/AAAA7H9Pev+f9DgPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYF+7eOFCbalu3rs2VetPX11dni9dPTNdLM8XFpanClOlpSuF2VJpNisWpkoLux0vjYix87G8MlIplisj5dW1ywul5cXK5bmFydni5WLumVQFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA4xqqL0laiIi03k7TQiHihYgYjlwyM5cVRyPixYi4m88N1vpj/U4aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAniuvrs1PZllxaWfjavtNz2Gjuls5+7QRScRzkEabxmeNd6XTPsl6RN9TTRuJPs1xIh5n1PVdTkunxsHY+9PyWp/mIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+qu8ujY/mWXFpXK/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKC/0l+SiKgtJ/MnhnZuPZj8la+/RsR7n1/6ZGWyUlkaq63/vbm+8mlj/dkHBl5/ljUAAADAvvfGbjs8eFu+fZ++fR8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQrfLq2vxklhWXHqdRbehyVNzod5UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCT+DcAAP//Fy29WA==") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.896223004s ago: executing program 8 (id=5304): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 4.755868561s ago: executing program 3 (id=5305): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 4.329940053s ago: executing program 0 (id=5307): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000001080)={0x1f, 0x4, 0x1}, 0x6) 4.226367374s ago: executing program 3 (id=5309): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000000)) 4.1940268s ago: executing program 5 (id=5310): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40012042) 4.193071043s ago: executing program 8 (id=5311): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f0000000200)={[{@barrier}, {@part={'part', 0x3d, 0x9}}, {@nls={'nls', 0x3d, 'macturkish'}}, {@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@part={'part', 0x3d, 0x4}}]}, 0x20, 0x6f5, &(0x7f0000000480)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4090, 0xffa) 3.66012274s ago: executing program 0 (id=5313): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.65863885s ago: executing program 3 (id=5314): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x0, 0x0, 0x1bb, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x45}, 0x4000) 3.581863958s ago: executing program 5 (id=5315): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) 3.372264825s ago: executing program 8 (id=5316): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000006,\x00\x00\x00\x00\x00'], 0x1, 0x489, &(0x7f0000000580)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00') 3.16804182s ago: executing program 5 (id=5318): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x5}}, 0x1}, 0x90) 3.125945679s ago: executing program 4 (id=5319): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000000)) 3.063975667s ago: executing program 3 (id=5320): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 2.701730939s ago: executing program 4 (id=5322): r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r1]) 2.598035777s ago: executing program 3 (id=5323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x8001}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 2.551263824s ago: executing program 8 (id=5324): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="00221d0000001d08a1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.358003102s ago: executing program 1 (id=5325): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x10, 0x9}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) 2.249154096s ago: executing program 3 (id=5326): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) 2.088075532s ago: executing program 5 (id=5327): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x60}, 0x0) 2.08162283s ago: executing program 1 (id=5328): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000001180)={0x10, 0xfffffff5, 0x3}, 0x10) 1.817861363s ago: executing program 1 (id=5329): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./bus\x00', 0x3200004, &(0x7f0000000380)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723dbd3c66f52c6e6c733d6d616363726f617469616e2c6769643d", @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x3, 0x6a6, &(0x7f0000002500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 1.77033642s ago: executing program 5 (id=5330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000002a00), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250200000005000d00280000000800020001000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4040080) 1.607583864s ago: executing program 4 (id=5331): r0 = socket$kcm(0x2, 0x3, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 1.342065953s ago: executing program 0 (id=5332): io_setup(0x1fd, &(0x7f0000000480)=0x0) io_submit(r0, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) 1.332620496s ago: executing program 1 (id=5333): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40204706, 0x0) 1.331591531s ago: executing program 5 (id=5334): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r0, &(0x7f00000001c0)="480847bb5a", 0x5) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1.178340147s ago: executing program 4 (id=5335): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffe, 0x40000, 0x0, 0xfffffffc}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) 824.832145ms ago: executing program 1 (id=5336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 747.788956ms ago: executing program 4 (id=5337): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabb, &(0x7f0000000340)="$eJzs3U2MW0fhAPCxd73JJuk/Tv8JXdLQJhTa8tFNs1nCRwRJlQiJqKkQl0oVlyhNS0QIEkUCqkokOXGjVRUkTnyIUy9VQUj0gqKeuFSikSqkngoHDkRBVOIAgcQo3hmvPbHzbO/Hs9e/nzQ7njfzPPO8z8/vcyYAE6va/Lu4OFcJ4fKbrx7/28N/nb095UirRL35d7otVQshVGJ6Onu/96eW4psfvHS6W1wJC82/KR2eut6ad2sI4ULYG66Eeth9+eorby88efLiiUv73nnt8LW1WXoAAJgsX71yeHHXn/94/44brz9wNGxqTU/75/WY3hb3+4/GHf+0/18NnelKW2g3k5WbjqE621luqku59npqWbnpHvXPZPXXepTbFO5e/1TbtG7LDeMsrcf1UKnOd6Sr1fn5pWPy0Dyun6nMnz977rkXSmoosOr++WAIYW9bOHapMz1q4cgItGHI0BiBNoxlOLp+dd1oLCl9mdcpNLaXvQUCWJJfL7zDhfzMwsq03m26v/qvP1HtPj+sgvVe/weqf6bk+sPk1p+2Or+6aIvD6tmoa1NarvQ92hbT+XWE/P6l3t///EpH59T8ekStz3b2uo4wLtcXerVzap3bMaxe7c/Xi43qizFOn8OXsvz270/+Px2X/zHQ3b/y8/+TEGoj0AZBGDaEjnRtJe/VKHn7A4yu/L65Rro+GuX39eX5mwryNxfkzxbkbynI31qQD5PsN9/9cXi5snycnx/TD3o+PJ1nuyfG/zdge/LzkYPWn9/3O6iV1p/fTwyj7Hennj7zuWefubp0/3+ltf7fiut7Otyox+/WlVggnS/Mz6u37v2vd9ZT7VHu3qw993Qp33y9s7NcZefy+4S27cwd7ZjrnG97Xm5bLLens1w9Kzcbw+asvfn+yZZsvrT/kbar6fOazpa3li3HTNaOtF3ZEeO8HTCMtD72uv8/rZ9zoVZ57uy5M4/HdFpP/zBV23R7+oF1bjewcv0+/zMXOp//mWlNr1Xbtwvbl6dXlrYLb8T365y+0Kqnc/rBmE6/c9+Ymm1Onz/97XPPrv7iw0R74QcvfvPUuXNnvuPF0C++PBrNGORFOmwZlfas9YvJWdJVe1HyhglYc/t/uLQT8NjZb516/szzZ84fPHTo4MLCoc8fXNzf3K/f37533+5CCa0FVtPyj37ZLQEAAAAAAAAAAAD69b0Tx6+++9Zn31t6/n/5+b/0/H+68zc9//+j7Pn//Dn59Bx8eg5wR5f8Zpmsg9WZrFwthv/P2rszq2dXNt+HYtwaxy8+/5+qy/t1Te25L5te65HMuhO4o7+UmawPkny8wI/G+FKMfxmgRJXZ7pNjXNS/dVrXU/8Ubf1SNPQPPD7S/y2tDakfk/T8d9d+ndr+2TvWoY2svvV4nLDsZQS6+/tE9f/9j+UFL70tGyVMj8l73iX8dHLXiUbPvfR+R7ABWB1lj/+Zznum+Pzvv7L5dkjFrj/Rub3M+y+FQfzp3c70qI4/uV715+P2rXf9ZS9/Uf2rPf5na/y7vrd/2Yh59eHq/ffPrr3XVm3Y3W/9+fKnfqB3Dlb/jVh/WppHQn/1N36R1Z9fEOrTf7L6t/RZ/x3Lv2e4+v8b608f26MP9Vv/Uosr1c525OeN0/W//LxxcjNb/tS3513q/9qL3ZZ/yIEab8X6YZKNyzizg8r2I1o77cOP/xtdWN3xf1uNzTZr+X0Yn4nptCFO9znk450M2v50f0X6HdiVvX+l4PfN+L/j7QsxLvo+pPF/0/pYjz/5benmZ5nStS6f7Ubd1sC4en+irv+NRdg8Am0Q+g+NqSHma40TV3L7G43G2p7QKlBq5ZT++Zd9nFB2/WV//kXy8X/zffh8/N88Px//N8/Px//N82fjf6hXfj7+b/555uP/5vn3Ze+bjw88V5D/4YL83d3zW4ft9xfMv6cg/yMF+fta+Uc6SqT8Bwrmf7Ag/96C/IcK8j9WkP/xgvyHC/IfbctvHwM65X+iYP6NLj2PMqnLD5Msfz7P9x8mR7r+0+v7v7MgHxhfP3n9wLFnfv31+tLz/zOt8yHpOt7RmK7F46fvx3R+3Tu0pW/nvRXTf8nyR/18B0ySvP+M/Pf9kYJ8YHyl+7x8v2ECVTZ3nxzjon6reu3nM14+GeNPxfjTMX4sxvMx3h/jAzFeWKf2sTaOvfHbwy9Xlo/3t2f5/d5Pnj8P1NFPVAjhYJ/tyc8PDHo/e96P36BWWv+Qj4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACUptr8u7g4Vwnh8puvHn/65Nn9t6ccaZWoN/9Ot6VqrflCeDzGUzH+eXxx84OXTrfHt2JcCQuhEiqt6eGp662atoYQLoS94Uqoh92Xr77y9sKTJy+euLTvndcOX1u7TwAAAAA2vv8FAAD//xEiDi0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x40186e8d, &(0x7f0000000180)={@desc={0x1, 0x0, @auto="3f000000190e00"}}) 582.098952ms ago: executing program 0 (id=5338): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000140)={0x5}) 531.968311ms ago: executing program 1 (id=5339): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x1, 0x20e, &(0x7f0000000380)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0x80000) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) 288.538189ms ago: executing program 8 (id=5340): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) 272.050325ms ago: executing program 0 (id=5341): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) 0s ago: executing program 4 (id=5342): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x84, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRESOCT], 0x89, 0x2c9, &(0x7f0000000640)="$eJzs3c1qE10cx/HfmUmT9GmfOtqKIC6kWnQlbd2Im4AU8RLcKGoToRharBXUjcG1eAHu3XgBXoQrEVzrypUX0F3knJw0Z5KZpGlJpsXvB9JMzpzXecmc/0A6AvDPurPx89PN3/ZlpFixpNtSZFddVknSeV2ovtze29prNurDKoqlqtzLSK6kGcizud3IKmrLuRJeYj+VNB+mYTLa7XL7V9GdQJGq/j3OWhlJFX92xmHm02Sm73MrlloF9eWkMPva1ystFN0PAECxTOf6Hvnr/Lyfv0eRtOIv++H1/8f/Bff3eK5pv+guFCy4/rsoq23s/j3jVvXiPRfC2fVRN0octx07eSyrc2SlJpgmHVUOBouuL9Hs061m48bmTrMe6Z1qjgnjwiVJNdV9zOqlejtY9XJGWlpZebWNZc6NYcaOYb3X/1otyLKY1ejRWxzNfDXfzEOT6KPqB/O/UtuEY/Z76u5Mr/+redXtPH9g35NOrpxRnnWNXExv2KGjjPMiEvkt1Y6VvkGQpPtZzixVVl+pzujW8lry9SxmllofUWrJlvoclOodzfklJ818MPfNsv7oizaC+X9kt/aKBs/M7EpcTn9kDB1PyeVMwqTWpcyc0fhjwZh62/i9nuiWFl68fvPscbPZ2LUL9nzbTaVMbkFTbIuFvoXuQXBS+nO0BfsdG6YoaeyWJtJW1J9SPvamq2pUnkqYORjp+r3Ozgsyd0/rQ7TevYE3sofT/FpCUXo7PT/P22l2CNNmvzxMJ/4L4pVVFyLZP8mQeXp71LQtqHEtIzaoHGT8L6jJ+Pvz+RHQXGYE19IYMdeV69LVIHFEzJXonDQ7dKynidnQdz3i/j8AAAAAAAAAAAAAAAAAAMBpM41fawTN8R99AAAAAAAAAAAAAAAAAAAAAAA4gvzn/1Y1wef/pn4HcOjn/1aOMVAAA/4GAAD//7eZbNg=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x26) getdents(r0, 0x0, 0x58) kernel console output (not intermixed with test programs): [T18600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.143353][T13517] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 711.196460][ T12] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.241702][ T5841] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 711.280118][T18787] loop5: detected capacity change from 0 to 4096 [ 711.314510][T18787] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 711.338670][T13517] usb 5-1: Using ep0 maxpacket: 16 [ 711.386904][T13517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.417749][T13517] usb 5-1: New USB device found, idVendor=046d, idProduct=c713, bcdDevice= 0.00 [ 711.454798][T18787] ntfs3(loop5): ino=19, mi_enum_attr [ 711.466165][T13517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.506147][T18787] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 711.537394][T13517] usb 5-1: config 0 descriptor?? [ 711.624245][ T12] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.014442][ T12] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.074107][T18600] hsr_slave_0: entered promiscuous mode [ 712.099596][T18600] hsr_slave_1: entered promiscuous mode [ 712.116114][T18600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 712.125340][T18600] Cannot create hsr debugfs directory [ 712.171780][T13517] usb 5-1: USB disconnect, device number 36 [ 712.258911][ T12] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.324415][ T5845] Bluetooth: hci0: command tx timeout [ 712.857929][ T5845] Bluetooth: hci1: command tx timeout [ 713.212853][ T5910] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 713.409749][ T5910] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 713.417813][ T5910] usb 5-1: config 0 has no interface number 0 [ 713.488110][ T5910] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 713.568109][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.627745][ T12] bridge_slave_1: left allmulticast mode [ 713.636077][ T5910] usb 5-1: config 0 descriptor?? [ 713.648076][ T12] bridge_slave_1: left promiscuous mode [ 713.653902][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.682035][ T5910] usb 5-1: selecting invalid altsetting 1 [ 713.690198][ T5910] dvb_ttusb_budget: ttusb_init_controller: error [ 713.704881][ T5910] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 713.734714][ T12] bridge_slave_0: left allmulticast mode [ 713.752308][ T12] bridge_slave_0: left promiscuous mode [ 713.760944][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.863822][ T5910] DVB: Unable to find symbol cx22700_attach() [ 714.010138][ T5910] DVB: Unable to find symbol tda10046_attach() [ 714.016357][ T5910] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 714.113902][ T5910] usb 5-1: USB disconnect, device number 37 [ 714.305742][ T5845] Bluetooth: hci0: command tx timeout [ 714.395082][T18841] PKCS7: Unknown OID: [5] (bad) [ 714.413451][T18841] PKCS7: Only support pkcs7_signedData type [ 714.699135][T18818] loop2: detected capacity change from 0 to 32768 [ 714.788462][T18818] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 714.788462][T18818] [ 714.825598][T18818] ERROR: (device loop2): remounting filesystem as read-only [ 714.838398][ T5845] Bluetooth: hci1: command tx timeout [ 715.179565][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.194756][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.269390][ T12] bond0 (unregistering): Released all slaves [ 715.942036][T18760] chnl_net:caif_netlink_parms(): no params data found [ 715.949330][ T1201] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 716.136783][ T1201] usb 6-1: Using ep0 maxpacket: 16 [ 716.148587][ T1201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.171889][ T1201] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 716.180986][ T1201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.194268][T18866] loop2: detected capacity change from 0 to 4096 [ 716.237415][ T1201] usb 6-1: config 0 descriptor?? [ 716.285991][ T5845] Bluetooth: hci0: command tx timeout [ 716.655211][ T1201] corsair-psu 0003:1B1C:1C07.005D: unknown main item tag 0x0 [ 716.664116][ T1201] corsair-psu 0003:1B1C:1C07.005D: unknown main item tag 0x0 [ 716.690318][ T1201] corsair-psu 0003:1B1C:1C07.005D: unknown main item tag 0x0 [ 716.701532][ T1201] corsair-psu 0003:1B1C:1C07.005D: unknown main item tag 0x0 [ 716.727476][ T1201] corsair-psu 0003:1B1C:1C07.005D: unknown main item tag 0x0 [ 716.761328][T18775] chnl_net:caif_netlink_parms(): no params data found [ 716.776504][ T1201] corsair-psu 0003:1B1C:1C07.005D: hidraw0: USB HID v0.00 Device [HID 1b1c:1c07] on usb-dummy_hcd.5-1/input0 [ 716.819346][ T5845] Bluetooth: hci1: command tx timeout [ 716.857239][ T1201] corsair-psu 0003:1B1C:1C07.005D: unable to initialize device (-38) [ 716.875996][ T1201] corsair-psu 0003:1B1C:1C07.005D: probe with driver corsair-psu failed with error -38 [ 716.898743][ T1201] usb 6-1: USB disconnect, device number 33 [ 716.911155][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4751'. [ 716.924156][T18878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4751'. [ 716.960431][T18878] netlink: 'syz.2.4751': attribute type 5 has an invalid length. [ 717.691805][T18892] nbd: must specify at least one socket [ 717.878712][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 717.955633][T18760] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.973214][T18760] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.992176][T18760] bridge_slave_0: entered allmulticast mode [ 718.012570][T18760] bridge_slave_0: entered promiscuous mode [ 718.052601][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.077536][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.096002][ T10] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 718.111206][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.119827][ T12] hsr_slave_0: left promiscuous mode [ 718.167078][ T12] hsr_slave_1: left promiscuous mode [ 718.176271][ T10] usb 3-1: config 0 descriptor?? [ 718.177152][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.188984][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.226180][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.235164][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.264467][ T12] veth1_macvtap: left promiscuous mode [ 718.270452][ T5845] Bluetooth: hci0: command tx timeout [ 718.275998][ T12] veth0_macvtap: left promiscuous mode [ 718.282032][ T12] veth1_vlan: left promiscuous mode [ 718.285997][ T5906] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 718.287876][ T12] veth0_vlan: left promiscuous mode [ 718.451120][ T12] pim6reg (unregistering): left allmulticast mode [ 718.458434][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 718.463147][ T5906] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 718.483989][ T5906] usb 6-1: config 0 has no interface number 0 [ 718.497143][ T5906] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 718.514203][ T5906] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 718.539566][ T5906] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 718.557367][ T5906] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 718.580575][ T5906] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 718.593900][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.608376][ T5906] usb 6-1: config 0 descriptor?? [ 718.621397][ T10] uclogic 0003:5543:0064.005E: reserved main item tag 0xd [ 718.648775][ T5906] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 718.658840][ T10] uclogic 0003:5543:0064.005E: No inputs registered, leaving [ 718.702975][ T10] uclogic 0003:5543:0064.005E: hidraw0: USB HID v0.02 Device [HID 5543:0064] on usb-dummy_hcd.2-1/input0 [ 718.802519][ T5845] Bluetooth: hci1: command tx timeout [ 718.854605][ T10] usb 3-1: USB disconnect, device number 44 [ 718.929075][ T5906] usb 6-1: USB disconnect, device number 34 [ 718.941490][ T5906] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 719.313253][ T12] team0 (unregistering): Port device team_slave_1 removed [ 719.364181][ T12] team0 (unregistering): Port device team_slave_0 removed [ 719.493594][T18905] loop2: detected capacity change from 0 to 512 [ 719.519931][T18905] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 719.573379][T18905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.685356][T18905] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.4763: corrupted inode contents [ 719.711617][T18905] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.4763: mark_inode_dirty error [ 719.778039][T18905] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.4763: corrupted inode contents [ 720.003056][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.140696][T18916] loop2: detected capacity change from 0 to 256 [ 720.171337][T18916] exfat: Deprecated parameter 'utf8' [ 720.194509][T18916] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 720.587221][T18760] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.596673][T18760] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.606722][T18760] bridge_slave_1: entered allmulticast mode [ 720.631919][T18760] bridge_slave_1: entered promiscuous mode [ 720.852318][T18925] loop2: detected capacity change from 0 to 256 [ 721.126440][T18760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.165849][T18760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.190460][T18775] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.213199][T18775] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.224198][T18775] bridge_slave_0: entered allmulticast mode [ 721.232957][T18775] bridge_slave_0: entered promiscuous mode [ 721.334459][T18932] loop2: detected capacity change from 0 to 8 [ 721.415478][T18775] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.432832][T18937] loop4: detected capacity change from 0 to 512 [ 721.435057][T18775] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.456910][T18937] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 721.468451][T18775] bridge_slave_1: entered allmulticast mode [ 721.476569][T18775] bridge_slave_1: entered promiscuous mode [ 721.525599][T18937] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc128, mo2=0002] [ 721.567060][T18937] System zones: 1-12 [ 721.579962][T18937] EXT4-fs (loop4): 1 truncate cleaned up [ 721.610832][T18937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.640287][T18760] team0: Port device team_slave_0 added [ 721.655624][T18760] team0: Port device team_slave_1 added [ 721.805378][ T9665] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.938661][T18950] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4787'. [ 722.053619][T18775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.095488][T18775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.144995][T18760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.152001][T18760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.220441][T18760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.248961][T18760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.255994][T18760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.337967][T18760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.557612][ T12] IPVS: stop unused estimator thread 0... [ 722.636236][T18964] loop4: detected capacity change from 0 to 4096 [ 722.677705][T18964] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 722.717013][T18775] team0: Port device team_slave_0 added [ 722.838520][T18760] hsr_slave_0: entered promiscuous mode [ 722.869063][T18760] hsr_slave_1: entered promiscuous mode [ 722.875539][T18760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 722.928690][T18760] Cannot create hsr debugfs directory [ 722.984417][T18775] team0: Port device team_slave_1 added [ 723.251544][T18600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 723.429564][ T24] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 723.632360][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.659423][T18600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 723.676859][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.707434][ T24] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 723.710249][T18600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 723.741034][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.766114][ T24] usb 6-1: config 0 descriptor?? [ 723.811677][T18775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.818690][T18775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.852029][T18775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.869740][T18775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.883934][T18775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.921011][T18775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.933698][T18600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 724.086541][ T1201] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 724.168394][ T24] cypress 0003:04B4:DE61.005F: item fetching failed at offset 5/7 [ 724.187748][ T24] cypress 0003:04B4:DE61.005F: parse failed [ 724.195218][ T24] cypress 0003:04B4:DE61.005F: probe with driver cypress failed with error -22 [ 724.229495][ T1201] usb 5-1: Using ep0 maxpacket: 16 [ 724.248808][ T1201] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.278474][ T1201] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.306025][ T1201] usb 5-1: config 0 interface 0 has no altsetting 0 [ 724.320397][ T1201] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 724.333181][ T1201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.347241][T18775] hsr_slave_0: entered promiscuous mode [ 724.355894][ T1201] usb 5-1: config 0 descriptor?? [ 724.378708][T18775] hsr_slave_1: entered promiscuous mode [ 724.385131][ T5913] usb 6-1: USB disconnect, device number 35 [ 724.385471][T18775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 724.416922][T18775] Cannot create hsr debugfs directory [ 724.779643][ T1201] uclogic 0003:5543:0522.0060: item fetching failed at offset 2/5 [ 724.793366][ T1201] uclogic 0003:5543:0522.0060: parse failed [ 724.809314][ T1201] uclogic 0003:5543:0522.0060: probe with driver uclogic failed with error -22 [ 724.969860][ T24] usb 5-1: USB disconnect, device number 38 [ 725.732249][T18985] loop4: detected capacity change from 0 to 2048 [ 725.815337][T18985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 725.854047][T18987] loop5: detected capacity change from 0 to 1024 [ 725.864305][ T30] audit: type=1800 audit(1745412118.818:217): pid=18985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4791" name="file2" dev="loop4" ino=1416 res=0 errno=0 [ 725.878825][T18987] EXT4-fs: Ignoring removed orlov option [ 725.902940][T18987] EXT4-fs: Ignoring removed nomblk_io_submit option [ 726.066261][T18987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.159206][T18987] EXT4-fs (loop5): resizing filesystem from 512 to 0 blocks [ 726.167680][T18987] EXT4-fs warning (device loop5): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 726.299215][T18600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.346523][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.522903][T18600] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.539318][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.546541][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.590309][T18998] loop4: detected capacity change from 0 to 256 [ 726.684353][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.691637][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.819940][T18760] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 727.341152][T19011] loop5: detected capacity change from 0 to 256 [ 727.560165][T18760] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 727.679261][T18760] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 727.758372][T18760] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 728.157508][T19027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 729.180875][T18600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.556258][T19033] loop5: detected capacity change from 0 to 32768 [ 729.579648][T19033] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4805 (19033) [ 729.614935][T18760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.622539][T19035] loop4: detected capacity change from 0 to 32768 [ 729.639035][T19033] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 729.661201][T19033] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 729.664153][T19035] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 729.670440][T19033] BTRFS info (device loop5): using free-space-tree [ 729.760793][T19035] (syz.4.4806,19035,0):ocfs2_load_local_alloc:334 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 729.760793][T19035] found = 5, set = 0, taken = 0, off = 0 [ 729.766187][T18600] veth0_vlan: entered promiscuous mode [ 729.813989][T19035] (syz.4.4806,19035,0):ocfs2_load_local_alloc:356 ERROR: status = -22 [ 729.835075][T18775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 729.919419][T19035] (syz.4.4806,19035,0):ocfs2_check_volume:2401 ERROR: status = -22 [ 729.948412][T18775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 729.972122][T19035] (syz.4.4806,19035,0):ocfs2_check_volume:2429 ERROR: status = -22 [ 730.005380][T18775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 730.030910][T19035] (syz.4.4806,19035,0):ocfs2_mount_volume:1764 ERROR: status = -22 [ 730.069641][T18600] veth1_vlan: entered promiscuous mode [ 730.081620][T19035] (syz.4.4806,19035,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 730.141895][T18760] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.186046][T18775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 730.203091][ T5843] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 730.309865][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.317102][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.521014][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.528293][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.589564][T18600] veth0_macvtap: entered promiscuous mode [ 730.662157][T18600] veth1_macvtap: entered promiscuous mode [ 730.852453][T18600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.915744][T18600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.953893][T18600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.989773][T18600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.016114][T18600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.058649][T18600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.114458][T18600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.352459][T18600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.392321][T18600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.458702][T18600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.487306][T18600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.515817][T18600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.554011][T18600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.600944][T18600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.660037][T18600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.687746][T18600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.696524][T18600] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.734933][T18600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.823600][T19068] loop4: detected capacity change from 0 to 4096 [ 731.877821][T19068] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 732.272800][T19072] macvlan1: entered promiscuous mode [ 732.289020][T19072] macvlan1: entered allmulticast mode [ 732.336874][T18775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.518498][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.578204][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.584354][T18775] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.775409][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.782738][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.808410][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.815646][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.902534][T19080] loop4: detected capacity change from 0 to 1024 [ 732.944773][T19080] EXT4-fs: Ignoring removed nobh option [ 732.967838][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.971043][T18760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.017342][T19080] EXT4-fs: Ignoring removed bh option [ 733.031335][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.166913][T19080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.421268][T19080] EXT4-fs: can't change dax mount option while remounting [ 733.453617][T18760] veth0_vlan: entered promiscuous mode [ 733.533029][T18760] veth1_vlan: entered promiscuous mode [ 733.617894][T19089] loop0: detected capacity change from 0 to 2048 [ 733.689319][ T9665] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.723461][T18760] veth0_macvtap: entered promiscuous mode [ 733.758017][T19093] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 733.805165][T18760] veth1_macvtap: entered promiscuous mode [ 733.901041][T18760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.973502][T18760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.015318][T18760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.049607][T18760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.091065][T18760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.111814][T18760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.128977][T18760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.148754][T18760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.172147][T18760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.238667][T18760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.284304][T18760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.323489][T18760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.351847][T18760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.373347][ T1201] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 734.400997][T18760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.433758][T18760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.474248][T18760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.523062][T18760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.546296][ T1201] usb 5-1: config 4 has an invalid interface number: 156 but max is 0 [ 734.570287][T18760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.597862][ T1201] usb 5-1: config 4 has no interface number 0 [ 734.618916][ T1201] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 734.634886][ T1201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.658982][ T1201] usb 5-1: Product: syz [ 734.674454][ T1201] usb 5-1: Manufacturer: syz [ 734.693742][T18760] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.703316][ T1201] usb 5-1: SerialNumber: syz [ 734.739343][ T1201] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 734.750102][T18760] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.769825][T18760] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.781198][ T1201] usb 5-1: setting power ON [ 734.786104][T18760] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.815323][ T1201] dvb-usb: bulk message failed: -22 (2/0) [ 734.859213][ T1201] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 734.906206][T18775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.968552][ T1201] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 735.004306][ T1201] dvb_usb_cxusb 5-1:4.156: probe with driver dvb_usb_cxusb failed with error -22 [ 735.064583][ T1201] usb 5-1: USB disconnect, device number 39 [ 735.217375][T19110] vlan2: entered allmulticast mode [ 735.511564][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.548181][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.646596][T18775] veth0_vlan: entered promiscuous mode [ 735.720186][T18775] veth1_vlan: entered promiscuous mode [ 735.804515][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.863020][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.960813][T18775] veth0_macvtap: entered promiscuous mode [ 735.981114][T19117] loop5: detected capacity change from 0 to 4096 [ 736.021740][T18775] veth1_macvtap: entered promiscuous mode [ 736.130357][T19117] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 736.145353][T18775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.198285][T18775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.256887][T18775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.291093][T18775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.308732][T18775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.345045][T18775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.371894][T18775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.420979][T18775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.461395][T18775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.479012][ T1201] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 736.509075][T18775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.540941][T18775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.634113][T18775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.679074][T18775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.701347][ T1201] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 736.714259][ T1201] usb 5-1: config 0 has no interface number 0 [ 736.731267][T18775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.744512][ T1201] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.764520][T18775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.791747][ T1201] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.815999][T18775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.836274][ T1201] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 736.878306][T18775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.890058][ T1201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.906661][T18775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.929099][ T1201] usb 5-1: config 0 descriptor?? [ 736.947247][T18775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.966969][T18775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.030356][T18775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.058829][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 737.078000][T19116] loop0: detected capacity change from 0 to 32768 [ 737.081147][T18775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.195470][T18775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.204505][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 737.236032][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 737.261656][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.270538][T18775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.270601][T19116] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 737.325690][ T10] usb 4-1: Product: syz [ 737.329445][T18775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.343758][ T10] usb 4-1: Manufacturer: syz [ 737.346049][ T1201] hid (null): global environment stack underflow [ 737.362758][ T10] usb 4-1: SerialNumber: syz [ 737.363946][T18775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.397928][ T1201] uclogic 0003:5543:0522.0061: global environment stack underflow [ 737.402947][ T10] usb 4-1: config 0 descriptor?? [ 737.435259][ T10] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 737.440847][ T1201] uclogic 0003:5543:0522.0061: item 0 1 1 11 parsing failed [ 737.490055][ T1201] uclogic 0003:5543:0522.0061: parse failed [ 737.496186][ T1201] uclogic 0003:5543:0522.0061: probe with driver uclogic failed with error -22 [ 737.572277][ T1201] usb 5-1: USB disconnect, device number 40 [ 737.720513][T18600] ocfs2: Unmounting device (7,0) on (node local) [ 737.891646][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.926784][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.049890][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 738.065332][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 738.077051][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 738.086154][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 738.094138][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 738.094451][ T10] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 738.128812][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 738.146916][ T10] usb 4-1: USB disconnect, device number 6 [ 738.405491][T19139] loop4: detected capacity change from 0 to 64 [ 738.643920][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.697002][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.100291][T19148] loop3: detected capacity change from 0 to 512 [ 739.106621][T19150] loop0: detected capacity change from 0 to 512 [ 739.223829][T19150] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 739.261884][T19148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 739.322048][T19150] EXT4-fs (loop0): 1 truncate cleaned up [ 739.346252][T19135] loop5: detected capacity change from 0 to 32768 [ 739.381942][T19150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.412825][T19148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.507849][T19148] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.559061][T19150] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 739.631142][T19150] EXT4-fs error (device loop0): ext4_ext_remove_space:2951: inode #15: comm syz.0.4841: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 739.734138][T19148] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 739.995284][T18600] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.144841][ T5845] Bluetooth: hci5: command tx timeout [ 740.249519][T19136] chnl_net:caif_netlink_parms(): no params data found [ 740.296679][T18760] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.592018][T19145] loop4: detected capacity change from 0 to 32768 [ 740.743969][ T36] bridge_slave_1: left allmulticast mode [ 740.789405][T19145] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 740.796253][ T36] bridge_slave_1: left promiscuous mode [ 740.839064][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.930147][ T36] bridge_slave_0: left allmulticast mode [ 740.964224][ T36] bridge_slave_0: left promiscuous mode [ 740.971707][T19145] (syz.4.4839,19145,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 740.981577][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.022211][T19171] loop0: detected capacity change from 0 to 2048 [ 741.022411][T19145] (syz.4.4839,19145,0):ocfs2_trim_mainbm:7629 ERROR: status = -12 [ 741.057386][T19171] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 741.162629][T19171] UDF-fs: error (device loop0): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 741.303614][T19175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4847'. [ 741.442496][ T9665] ocfs2: Unmounting device (7,4) on (node local) [ 741.912099][ T36] batman_adv: batadv0: Removing interface: gretap1 [ 742.117088][ T5845] Bluetooth: hci5: command tx timeout [ 742.406567][T19177] loop5: detected capacity change from 0 to 32768 [ 742.496257][T19177] ERROR: (device loop5): dbAllocAG: unable to allocate blocks [ 742.496257][T19177] [ 742.518967][T19177] ERROR: (device loop5): remounting filesystem as read-only [ 742.535606][T19177] ERROR: (device loop5): dbDiscardAG: -EIO [ 742.535606][T19177] [ 742.579035][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.612917][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.632701][ T36] bond0 (unregistering): Released all slaves [ 742.996210][T19190] program syz.5.4854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 743.211566][ T36] tipc: Left network mode [ 743.498201][ T36] IPVS: stopping backup sync thread 16769 ... [ 743.606421][T19136] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.632500][T19136] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.659499][T19136] bridge_slave_0: entered allmulticast mode [ 743.683683][T19136] bridge_slave_0: entered promiscuous mode [ 743.701848][T19198] loop1: detected capacity change from 0 to 4096 [ 743.710392][T19136] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.751191][T19136] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.764307][T19198] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 743.783827][T19136] bridge_slave_1: entered allmulticast mode [ 743.804805][T19136] bridge_slave_1: entered promiscuous mode [ 744.098446][ T5845] Bluetooth: hci5: command tx timeout [ 744.200434][T19208] loop0: detected capacity change from 0 to 2048 [ 744.275571][T19208] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 100: 0xeb != 0x00 [ 744.365684][T19208] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 744.514593][T19136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.550767][T19214] netlink: 504 bytes leftover after parsing attributes in process `syz.1.4863'. [ 744.847703][T19136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.057063][T19192] loop5: detected capacity change from 0 to 40427 [ 745.102477][T19192] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3fffff [ 745.160541][T19192] F2FS-fs (loop5): Image doesn't support compression [ 745.174876][T19192] F2FS-fs (loop5): Image doesn't support compression [ 745.186204][T19136] team0: Port device team_slave_0 added [ 745.216934][T19222] loop4: detected capacity change from 0 to 4096 [ 745.237076][T19192] F2FS-fs (loop5): invalid crc value [ 745.244079][T19222] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 745.287877][ T36] hsr_slave_0: left promiscuous mode [ 745.365477][ T36] hsr_slave_1: left promiscuous mode [ 745.372011][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.437093][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.470755][T19222] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 745.547449][T19233] loop1: detected capacity change from 0 to 1024 [ 745.577752][T19233] EXT4-fs: Ignoring removed i_version option [ 745.657913][T19233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 745.804492][T19192] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 746.012838][T18775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.068293][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4873'. [ 746.079553][ T5845] Bluetooth: hci5: command tx timeout [ 746.101266][T19242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4873'. [ 746.224251][ T5977] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 746.307806][ T5843] syz-executor: attempt to access beyond end of device [ 746.307806][ T5843] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 746.390123][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 746.390176][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 746.390200][ T5843] Call Trace: [ 746.390212][ T5843] [ 746.390228][ T5843] dump_stack_lvl+0x16c/0x1f0 [ 746.390291][ T5843] f2fs_handle_critical_error+0x621/0x9f0 [ 746.390345][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.390391][ T5843] ? __asan_memset+0x23/0x50 [ 746.390441][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.390499][ T5843] f2fs_write_end_io+0x73d/0xac0 [ 746.390562][ T5843] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 746.390627][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.390684][ T5843] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 746.390741][ T5843] bio_endio+0x6d2/0x810 [ 746.390803][ T5843] submit_bio_noacct+0x56d/0x1ec0 [ 746.390857][ T5843] __submit_merged_bio+0x33c/0x770 [ 746.390922][ T5843] __submit_merged_write_cond+0x319/0x3f0 [ 746.391001][ T5843] f2fs_write_cache_pages+0x2139/0x2680 [ 746.391098][ T5843] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 746.391167][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.391213][ T5843] ? __lock_acquire+0x5ca/0x1ba0 [ 746.391257][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.391302][ T5843] ? __lock_acquire+0x5ca/0x1ba0 [ 746.391438][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.391484][ T5843] ? lock_acquire+0x179/0x350 [ 746.391524][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.391579][ T5843] f2fs_write_data_pages+0x4ad/0xd90 [ 746.391627][ T5843] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 746.391706][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.391756][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.391803][ T5843] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 746.391872][ T5843] do_writepages+0x1b5/0x820 [ 746.391934][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.391987][ T5843] ? __pfx_do_writepages+0x10/0x10 [ 746.392044][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.392092][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.392138][ T5843] ? do_raw_spin_lock+0x12c/0x2b0 [ 746.392181][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.392226][ T5843] ? find_held_lock+0x2b/0x80 [ 746.392278][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.392330][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.392375][ T5843] ? do_raw_spin_unlock+0x172/0x230 [ 746.392421][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.392475][ T5843] filemap_fdatawrite_wbc+0x104/0x160 [ 746.392537][ T5843] __filemap_fdatawrite_range+0xb2/0xf0 [ 746.392580][ T5843] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 746.392685][ T5843] ? find_held_lock+0x2b/0x80 [ 746.392737][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.392788][ T5843] ? do_raw_spin_unlock+0x172/0x230 [ 746.392834][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.392887][ T5843] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 746.392952][ T5843] block_operations+0x2a3/0xfd0 [ 746.393011][ T5843] ? __pfx_block_operations+0x10/0x10 [ 746.393113][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.393160][ T5843] ? down_write+0x14d/0x200 [ 746.393196][ T5843] ? __pfx_down_write+0x10/0x10 [ 746.393233][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.393279][ T5843] ? rcu_is_watching+0x12/0xc0 [ 746.393335][ T5843] f2fs_write_checkpoint+0x2b8/0x45b0 [ 746.393392][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.393437][ T5843] ? rcu_is_watching+0x12/0xc0 [ 746.393485][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.393529][ T5843] ? kthread_stop+0x273/0x650 [ 746.393575][ T5843] kill_f2fs_super+0x3c2/0x470 [ 746.393618][ T5843] ? __pfx_kill_f2fs_super+0x10/0x10 [ 746.393659][ T5843] ? lockdep_hardirqs_on+0x7c/0x110 [ 746.393736][ T5843] deactivate_locked_super+0xc1/0x1a0 [ 746.393794][ T5843] deactivate_super+0xde/0x100 [ 746.393849][ T5843] cleanup_mnt+0x225/0x450 [ 746.393909][ T5843] task_work_run+0x150/0x240 [ 746.393958][ T5843] ? __pfx_task_work_run+0x10/0x10 [ 746.394008][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.394059][ T5843] ? __pfx___x64_sys_umount+0x10/0x10 [ 746.394131][ T5843] syscall_exit_to_user_mode+0x27b/0x2a0 [ 746.394194][ T5843] do_syscall_64+0xda/0x260 [ 746.394259][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.394298][ T5843] RIP: 0033:0x7f706778fc97 [ 746.394329][ T5843] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 746.394367][ T5843] RSP: 002b:00007ffdb318fcd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 746.394404][ T5843] RAX: 0000000000000000 RBX: 00007f706781089d RCX: 00007f706778fc97 [ 746.394429][ T5843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb318fd90 [ 746.394454][ T5843] RBP: 00007ffdb318fd90 R08: 0000000000000000 R09: 0000000000000000 [ 746.394478][ T5843] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdb3190e20 [ 746.394504][ T5843] R13: 00007f706781089d R14: 00000000000b8282 R15: 00007ffdb3190e60 [ 746.394558][ T5843] [ 746.913171][T19244] loop1: detected capacity change from 0 to 2048 [ 746.944876][T19228] loop0: detected capacity change from 0 to 32768 [ 746.947228][ T5845] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 746.962765][ T5977] usb 4-1: Using ep0 maxpacket: 16 [ 746.964240][ T5843] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 747.043647][ T5977] usb 4-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 747.052854][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.061012][ T5977] usb 4-1: Product: syz [ 747.065253][ T5977] usb 4-1: Manufacturer: syz [ 747.070128][ T5977] usb 4-1: SerialNumber: syz [ 747.079032][ T5977] usb 4-1: config 0 descriptor?? [ 747.117078][T19249] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 747.351868][ T5977] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 747.598710][ T5906] usb 4-1: USB disconnect, device number 7 [ 747.774390][T19253] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4880'. [ 748.191911][T19257] loop0: detected capacity change from 0 to 2048 [ 748.286043][T19257] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 748.320810][T19257] UDF-fs: Scanning with blocksize 512 failed [ 748.432559][T19257] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 748.446821][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.446907][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.523367][ T5906] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 748.526425][ T1201] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 748.696692][ T1201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 748.708689][ T1201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 748.737992][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.756080][ T1201] usb 6-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 748.757608][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.802791][ T1201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.845267][ T1201] usb 6-1: config 0 descriptor?? [ 748.855247][ T5906] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 748.866026][T19263] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 748.898229][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.960802][ T5906] usb 5-1: config 0 descriptor?? [ 749.020602][T19271] openvswitch: netlink: IP tunnel dst address not specified [ 749.029843][ T36] team0 (unregistering): Port device team_slave_1 removed [ 749.293864][ T36] team0 (unregistering): Port device team_slave_0 removed [ 749.319052][ T1201] waltop 0003:172F:0032.0062: item fetching failed at offset 5/7 [ 749.362641][ T1201] waltop 0003:172F:0032.0062: probe with driver waltop failed with error -22 [ 749.441827][ T5906] hid-led 0003:0FC5:B080.0063: item fetching failed at offset 2/3 [ 749.455193][T19265] loop3: detected capacity change from 0 to 32768 [ 749.481121][ T5906] hid-led 0003:0FC5:B080.0063: probe with driver hid-led failed with error -22 [ 749.520064][T19265] (syz.3.4884,19265,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 749.561676][ T5906] usb 6-1: USB disconnect, device number 36 [ 749.588312][T19265] (syz.3.4884,19265,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 749.654842][ T1201] usb 5-1: USB disconnect, device number 41 [ 749.755526][T19265] JBD2: Ignoring recovery information on journal [ 749.862128][T19265] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 750.203394][ T5906] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 750.263073][T19283] loop5: detected capacity change from 0 to 512 [ 750.276797][T19283] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 750.337965][T18760] ocfs2: Unmounting device (7,3) on (node local) [ 750.366477][T19283] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c019, mo2=0002] [ 750.386811][T19283] System zones: 1-12 [ 750.395390][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 750.421834][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 750.442946][T19283] EXT4-fs (loop5): 1 truncate cleaned up [ 750.472417][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 750.487442][T19283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.529120][T19287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4893'. [ 750.561445][ T5906] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 750.590258][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.653257][ T5906] usb 1-1: config 0 descriptor?? [ 750.669446][T19281] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 750.743809][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.831339][ T5845] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 750.843165][ T5845] Bluetooth: hci2: Injecting HCI hardware error event [ 750.855617][ T5845] Bluetooth: hci2: hardware error 0x00 [ 751.006793][T19289] loop5: detected capacity change from 0 to 1024 [ 751.077878][T19289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 751.107148][ T5906] aureal 0003:0755:2626.0064: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 751.134159][ T5906] aureal 0003:0755:2626.0064: unknown main item tag 0x6 [ 751.149646][ T5906] aureal 0003:0755:2626.0064: report_id 29495 is invalid [ 751.159988][ T5906] aureal 0003:0755:2626.0064: item 0 2 1 8 parsing failed [ 751.173827][ T5906] aureal 0003:0755:2626.0064: probe with driver aureal failed with error -22 [ 751.364828][T18873] usb 1-1: USB disconnect, device number 10 [ 751.483685][T19136] team0: Port device team_slave_1 added [ 752.136013][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.171409][T19297] loop0: detected capacity change from 0 to 256 [ 752.202710][T19293] loop3: detected capacity change from 0 to 32768 [ 752.297767][T19293] [ 752.297767][T19293] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 752.297767][T19293] [ 752.316879][T19297] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 752.481899][T19299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4899'. [ 752.521689][T19299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4899'. [ 752.601407][T18760] [ 752.601407][T18760] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 752.601407][T18760] [ 752.636883][T18760] [ 752.636883][T18760] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 752.636883][T18760] [ 752.868002][ T5845] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 752.996576][T19136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.041411][T19136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.155918][T19136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.214579][T19136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.237867][T19136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.347084][T19136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.611530][T19319] loop5: detected capacity change from 0 to 256 [ 753.814219][T19136] hsr_slave_0: entered promiscuous mode [ 753.852107][T19136] hsr_slave_1: entered promiscuous mode [ 753.884525][T19136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 753.894362][T19323] loop1: detected capacity change from 0 to 256 [ 753.906234][T19136] Cannot create hsr debugfs directory [ 753.997892][T19323] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 754.302520][ T36] IPVS: stop unused estimator thread 0... [ 754.393595][ T1201] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 754.509042][T19334] loop0: detected capacity change from 0 to 2048 [ 754.575555][ T1201] usb 6-1: Using ep0 maxpacket: 8 [ 754.597333][ T1201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.631706][ T1201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.654854][ T1201] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 754.669653][ T1201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.678201][T19334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 754.681871][ T1201] usb 6-1: config 0 descriptor?? [ 754.759312][T19308] loop4: detected capacity change from 0 to 32768 [ 754.819967][T19308] (syz.4.4904,19308,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 754.865939][T18600] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.892407][T19308] (syz.4.4904,19308,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 755.064552][T19308] JBD2: Ignoring recovery information on journal [ 755.127785][ T1201] koneplus 0003:1E7D:2E22.0065: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 755.263511][T19308] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 755.384160][ T1201] usb 6-1: USB disconnect, device number 37 [ 755.765822][ T9665] ocfs2: Unmounting device (7,4) on (node local) [ 757.063845][T19387] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4932'. [ 757.425286][T19392] xt_CT: No such helper "snmp" [ 757.638357][T19136] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 757.714073][T19136] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 757.830648][T19136] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 757.908359][ T5977] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 757.918548][T19136] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 758.100454][ T5977] usb 1-1: Using ep0 maxpacket: 32 [ 758.141633][ T5977] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 758.184941][ T5977] usb 1-1: config 0 has no interface number 0 [ 758.191123][ T5977] usb 1-1: config 0 interface 184 has no altsetting 0 [ 758.276996][ T5977] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 758.288589][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.337005][ T5977] usb 1-1: Product: syz [ 758.341240][ T5977] usb 1-1: Manufacturer: syz [ 758.345953][ T5977] usb 1-1: SerialNumber: syz [ 758.479825][ T5977] usb 1-1: config 0 descriptor?? [ 758.539486][T19136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.549522][ T5977] smsc75xx v1.0.0 [ 758.730607][T19136] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.854026][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.861283][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.963965][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.971279][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.148009][ T5977] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 759.185674][ T5977] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 759.232471][ T5977] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 759.255088][T19136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 759.281803][ T5977] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 759.495488][ T5977] usb 1-1: USB disconnect, device number 11 [ 759.531423][T19444] loop5: detected capacity change from 0 to 1024 [ 759.576375][T19444] EXT4-fs: Ignoring removed orlov option [ 759.627526][T19444] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 759.735589][T19444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.055421][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.434311][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4961'. [ 760.478199][T19136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.519162][T19470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4961'. [ 760.584877][T19470] netlink: 'syz.3.4961': attribute type 13 has an invalid length. [ 761.232302][T19491] loop0: detected capacity change from 0 to 1024 [ 761.400881][T19491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 761.551706][T19506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4970'. [ 762.045339][T19136] veth0_vlan: entered promiscuous mode [ 762.149341][T19136] veth1_vlan: entered promiscuous mode [ 762.393496][T19136] veth0_macvtap: entered promiscuous mode [ 762.455321][T19136] veth1_macvtap: entered promiscuous mode [ 762.478542][T18600] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.488400][T19529] Bluetooth: MGMT ver 1.23 [ 762.561678][T19136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.575848][ T968] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 762.615796][T19136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.626142][T19136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.636972][T19136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.649311][T19136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.659933][T19136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.669964][T19136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.723484][T19136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.747326][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4981'. [ 762.769313][T19136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.802167][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.822819][T19136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.856834][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.878565][T19136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.887474][ T968] usb 5-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 762.926411][T19136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.946863][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.990046][T19136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.023127][ T968] usb 5-1: config 0 descriptor?? [ 763.066794][T19136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.147883][T19136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.202894][T19136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.270598][T19136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.319795][T19136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.380946][T19136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.424249][T19136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.466961][T19136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.475731][ T968] hid_mf 0003:0079:1843.0066: unknown main item tag 0x0 [ 763.498961][T19136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.519095][ T968] hid_mf 0003:0079:1843.0066: unknown main item tag 0x0 [ 763.526097][ T968] hid_mf 0003:0079:1843.0066: unknown main item tag 0x0 [ 763.565682][T19136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.576608][ T968] hid_mf 0003:0079:1843.0066: unknown main item tag 0x0 [ 763.583608][ T968] hid_mf 0003:0079:1843.0066: unknown main item tag 0x0 [ 763.601608][T19136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.639197][T19136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.651361][ T968] hid_mf 0003:0079:1843.0066: unknown main item tag 0x0 [ 763.658375][ T968] hid_mf 0003:0079:1843.0066: unknown main item tag 0x0 [ 763.703906][T19136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.719902][ T968] hid_mf 0003:0079:1843.0066: hidraw0: USB HID v0.00 Device [HID 0079:1843] on usb-dummy_hcd.4-1/input0 [ 763.760946][ T968] hid_mf 0003:0079:1843.0066: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 763.899764][ T968] usb 5-1: USB disconnect, device number 42 [ 763.946582][T19136] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.016739][T19136] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.061128][T19136] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.080371][T19136] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.702776][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.737963][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.758849][T19569] loop3: detected capacity change from 0 to 2048 [ 764.892556][T19581] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 765.113990][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.162208][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.183311][T19586] loop0: detected capacity change from 0 to 512 [ 765.349452][T19586] EXT4-fs (loop0): 1 orphan inode deleted [ 765.406778][T19586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.571386][T19586] EXT4-fs error (device loop0): ext4_add_entry:2419: inode #2: comm syz.0.4997: Directory hole found for htree leaf block 0 [ 765.693575][T19601] loop1: detected capacity change from 0 to 512 [ 765.730208][T19601] EXT4-fs: Ignoring removed i_version option [ 765.781506][T19594] xt_CT: No such helper "snmp" [ 765.795424][T19601] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 765.900782][T19601] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 765.908913][T19601] System zones: [ 765.952636][T18600] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.013849][T19601] 1-12 [ 766.046195][T19601] EXT4-fs (loop1): orphan cleanup on readonly fs [ 766.137522][T19601] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.5002: invalid indirect mapped block 12 (level 1) [ 766.242902][T19601] EXT4-fs (loop1): Remounting filesystem read-only [ 766.338049][T19601] EXT4-fs (loop1): 1 truncate cleaned up [ 766.375295][T19601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 766.612256][T19625] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5008'. [ 766.764752][T18775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 766.998252][ T5977] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 767.102471][T19642] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5012'. [ 767.156628][ T5977] usb 6-1: Using ep0 maxpacket: 32 [ 767.169618][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5012'. [ 767.196619][ T5977] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 767.205178][T18873] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 767.230811][ T5977] usb 6-1: config 0 has no interface number 0 [ 767.246693][ T5977] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 767.263578][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.275532][ T5977] usb 6-1: Product: syz [ 767.285638][ T5977] usb 6-1: Manufacturer: syz [ 767.297285][ T5977] usb 6-1: SerialNumber: syz [ 767.319774][ T5977] usb 6-1: config 0 descriptor?? [ 767.346564][ T5977] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 767.375386][T18873] usb 5-1: Using ep0 maxpacket: 32 [ 767.383423][T18873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 767.410400][T18873] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 767.450402][T18873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.483104][T18873] usb 5-1: Product: syz [ 767.487356][T18873] usb 5-1: Manufacturer: syz [ 767.530399][T18873] usb 5-1: SerialNumber: syz [ 767.568285][T18873] usb 5-1: config 0 descriptor?? [ 767.574217][T19637] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 767.606203][ T5977] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 767.636749][T18873] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 767.667312][ T5977] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 767.877335][T18873] usb 5-1: USB disconnect, device number 43 [ 767.909543][T19657] loop3: detected capacity change from 0 to 1024 [ 768.075939][T19657] hfsplus: bad catalog entry type [ 768.091095][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 768.091645][T13517] usb 6-1: USB disconnect, device number 38 [ 768.149067][T19661] loop8: detected capacity change from 0 to 1024 [ 768.203739][T13517] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 768.233847][T19661] hfsplus: bad catalog entry type [ 768.266306][T13517] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 768.278553][T19664] loop1: detected capacity change from 0 to 64 [ 768.287859][ T62] hfsplus: b-tree write err: -5, ino 4 [ 768.326483][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 768.352465][T13517] quatech2 6-1:0.51: device disconnected [ 768.366275][ T30] audit: type=1800 audit(1745412163.429:218): pid=19664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5021" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 768.463821][T19218] hfsplus: b-tree write err: -5, ino 4 [ 768.917685][T19676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5026'. [ 769.016570][T19676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5026'. [ 769.110712][T19676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5026'. [ 769.158071][T19676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5026'. [ 769.499232][T19680] loop4: detected capacity change from 0 to 4096 [ 769.586608][T19691] loop5: detected capacity change from 0 to 2048 [ 769.700497][T19695] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 769.707080][T19695] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 769.729290][T19699] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(6) [ 769.735878][T19699] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 769.753601][T19691] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 769.800493][T19703] loop1: detected capacity change from 0 to 128 [ 769.833639][T19695] vhci_hcd vhci_hcd.0: Device attached [ 769.845921][T19705] loop0: detected capacity change from 0 to 256 [ 769.852055][T19680] ntfs3(loop4): ino=1e, mi_enum_attr [ 769.852283][T19680] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 769.860193][T19699] vhci_hcd vhci_hcd.0: Device attached [ 769.959763][T19705] exfat: Deprecated parameter 'namecase' [ 769.965524][T19705] exfat: Deprecated parameter 'utf8' [ 770.013858][T18873] vhci_hcd: vhci_device speed not set [ 770.046140][T19700] vhci_hcd: connection closed [ 770.047100][ T2931] vhci_hcd: stop threads [ 770.049064][T19696] vhci_hcd: connection closed [ 770.062420][ T2931] vhci_hcd: release socket [ 770.076354][T18873] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 770.124204][ T2931] vhci_hcd: disconnect device [ 770.140488][T19697] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 770.157086][ T2931] vhci_hcd: stop threads [ 770.161716][ T2931] vhci_hcd: release socket [ 770.171717][T19705] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 770.229388][ T2931] vhci_hcd: disconnect device [ 770.335071][ T30] audit: type=1800 audit(1745412165.508:219): pid=19705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5035" name="file1" dev="loop0" ino=247 res=0 errno=0 [ 770.491272][T19714] loop1: detected capacity change from 0 to 256 [ 770.632105][T19714] FAT-fs (loop1): Directory bread(block 64) failed [ 770.674923][T19714] FAT-fs (loop1): Directory bread(block 65) failed [ 770.712777][T19714] FAT-fs (loop1): Directory bread(block 66) failed [ 770.728062][T19714] FAT-fs (loop1): Directory bread(block 67) failed [ 770.756255][T19714] FAT-fs (loop1): Directory bread(block 68) failed [ 770.775457][T19714] FAT-fs (loop1): Directory bread(block 69) failed [ 770.848416][T19714] FAT-fs (loop1): Directory bread(block 70) failed [ 770.909125][T19714] FAT-fs (loop1): Directory bread(block 71) failed [ 770.915946][T19714] FAT-fs (loop1): Directory bread(block 72) failed [ 770.952976][T19714] FAT-fs (loop1): Directory bread(block 73) failed [ 771.357155][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5046'. [ 771.366064][T19735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5046'. [ 771.748090][T19745] Bluetooth: MGMT ver 1.23 [ 772.253139][ T30] audit: type=1326 audit(1745412167.523:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19757 comm="syz.4.5056" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad7d18e969 code=0x0 [ 772.320716][T19744] loop1: detected capacity change from 0 to 8192 [ 772.697970][T19773] loop8: detected capacity change from 0 to 1024 [ 772.779562][T19776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 772.822469][T19777] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5061'. [ 772.919439][T19773] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 773.837701][T19136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.017449][T19806] loop4: detected capacity change from 0 to 4096 [ 774.260600][T19806] ntfs3(loop4): failed to convert "0080" to macturkish [ 774.304178][T19806] ntfs3(loop4): failed to convert name for inode 1e. [ 774.326280][T19806] ntfs3(loop4): ino=1f, mi_enum_attr [ 774.354989][T19806] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 774.420373][T19806] ntfs3(loop4): ino=1f, mi_enum_attr [ 774.805403][ T5845] Bluetooth: hci0: command tx timeout [ 774.926836][T19828] loop4: detected capacity change from 0 to 128 [ 774.948269][T19798] loop5: detected capacity change from 0 to 32768 [ 775.014480][T19828] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 775.022811][T19828] FAT-fs (loop4): Filesystem has been set read-only [ 775.033625][T18873] vhci_hcd: vhci_device speed not set [ 775.049412][T19828] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 775.078439][T19798] non-latin1 character 0xffff found in JFS file name [ 775.108160][T19798] mount with iocharset=utf8 to access [ 775.144087][T19831] ptrace attach of "./syz-executor exec"[18760] was attempted by "./syz-executor exec"[19831] [ 775.288989][T19833] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.5080'. [ 776.136397][T19849] ipip0: entered promiscuous mode [ 776.289010][T19847] loop3: detected capacity change from 0 to 4096 [ 776.337245][T19855] loop8: detected capacity change from 0 to 2048 [ 776.379137][T19855] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 776.389564][ T968] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 776.447361][T19855] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 776.576537][ T968] usb 6-1: Using ep0 maxpacket: 8 [ 776.594110][ T968] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 776.648876][ T968] usb 6-1: config 0 has no interface number 0 [ 776.674616][T19820] loop0: detected capacity change from 0 to 40427 [ 776.677105][ T30] audit: type=1800 audit(1745412172.164:221): pid=19847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5086" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 776.686457][ T968] usb 6-1: config 0 interface 1 has no altsetting 0 [ 776.768524][ T968] usb 6-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 776.805094][ T968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.814097][T19820] F2FS-fs (loop0): invalid crc value [ 776.826355][ T30] audit: type=1804 audit(1745412172.227:222): pid=19847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5086" name=2F6E6577726F6F742F35372F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop3" ino=33 res=1 errno=0 [ 776.833264][ T968] usb 6-1: Product: syz [ 776.862203][ C1] vkms_vblank_simulate: vblank timer overrun [ 777.070185][ T968] usb 6-1: Manufacturer: syz [ 777.097740][ T968] usb 6-1: SerialNumber: syz [ 777.145605][ T968] usb 6-1: config 0 descriptor?? [ 777.190030][T19870] loop8: detected capacity change from 0 to 1024 [ 777.253912][T19870] EXT4-fs: Ignoring removed bh option [ 777.259462][T19870] EXT4-fs: inline encryption not supported [ 777.349405][T19820] F2FS-fs (loop0): Start checkpoint disabled! [ 777.365300][T19870] EXT4-fs: Ignoring removed i_version option [ 777.406565][ T968] i2c-cp2615 6-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 777.416976][T19820] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 777.427113][T19870] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 777.513074][T19870] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e028, mo2=0000] [ 777.688744][T19870] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 2: comm syz.8.5092: lblock 2 mapped to illegal pblock 2 (length 1) [ 777.788959][T19870] EXT4-fs (loop8): Remounting filesystem read-only [ 777.817575][T13517] usb 6-1: USB disconnect, device number 39 [ 777.819657][T19870] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 777.851978][T19870] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 777.885499][T19870] EXT4-fs (loop8): 1 orphan inode deleted [ 777.918589][T19870] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.967259][T19885] loop4: detected capacity change from 0 to 2048 [ 778.071213][T19885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.140863][T19870] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.212604][T19861] loop1: detected capacity change from 0 to 32768 [ 778.353378][ T30] audit: type=1800 audit(1745412173.928:223): pid=19885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5096" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 778.373064][ C1] vkms_vblank_simulate: vblank timer overrun [ 778.673965][T19895] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 778.893847][T19861] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 778.893847][T19861] allowing incompatible features above 0.0: (unknown version) [ 778.920668][ C1] vkms_vblank_simulate: vblank timer overrun [ 779.028975][T19861] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 779.057288][T19861] bcachefs (loop1): Version upgrade required: [ 779.057288][T19861] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 779.057288][T19861] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 779.057288][T19861] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 779.196262][T19861] bcachefs (loop1): dropping and reconstructing all alloc info [ 779.204136][T19916] loop8: detected capacity change from 0 to 64 [ 779.217623][ T9665] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.329276][ T30] audit: type=1800 audit(1745412174.904:224): pid=19916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5102" name="file2" dev="loop8" ino=6 res=0 errno=0 [ 779.524860][T19861] bcachefs (loop1): accounting_read... done [ 779.589869][T19919] loop0: detected capacity change from 0 to 4096 [ 779.612494][T19861] bcachefs (loop1): alloc_read... done [ 779.651492][T19861] bcachefs (loop1): snapshots_read... done [ 779.665077][T19919] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 779.686757][T19861] bcachefs (loop1): done starting filesystem [ 780.005958][T18775] bcachefs (loop1): shutting down [ 780.125602][T19936] loop5: detected capacity change from 0 to 512 [ 780.139051][T19937] loop4: detected capacity change from 0 to 1024 [ 780.217852][T19936] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 780.300864][T19937] hfsplus: bad catalog entry type [ 780.306630][T19936] System zones: 0-2, 18-18, 34-34 [ 780.393981][T19936] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.5108: bg 0: block 248: padding at end of block bitmap is not set [ 780.427449][T18775] bcachefs (loop1): shutdown complete [ 780.486175][T19945] loop3: detected capacity change from 0 to 1024 [ 780.523316][T19936] Quota error (device loop5): write_blk: dquota write failed [ 780.538407][T19945] EXT4-fs: Ignoring removed bh option [ 780.570326][T19945] EXT4-fs: inline encryption not supported [ 780.579470][T19936] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 780.606533][T19945] EXT4-fs: Ignoring removed i_version option [ 780.614331][ T62] hfsplus: b-tree write err: -5, ino 4 [ 780.638210][T19936] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5108: Failed to acquire dquot type 1 [ 780.642419][T19945] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 780.710284][T19936] EXT4-fs (loop5): 1 truncate cleaned up [ 780.720147][T13517] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 780.758679][T19945] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e028, mo2=0000] [ 780.785394][T19936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.849229][T19945] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.5113: lblock 2 mapped to illegal pblock 2 (length 1) [ 780.877017][T19955] use of bytesused == 0 is deprecated and will be removed in the future, [ 780.910596][T19936] ext4 filesystem being mounted at /931/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.933631][T13517] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 780.947917][T19945] EXT4-fs (loop3): Remounting filesystem read-only [ 780.962458][T19955] use the actual size instead. [ 780.964750][T13517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.980020][T19945] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 780.995859][T19945] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 781.014223][T13517] usb 1-1: Product: syz [ 781.028723][T13517] usb 1-1: Manufacturer: syz [ 781.033385][T13517] usb 1-1: SerialNumber: syz [ 781.043136][T19945] EXT4-fs (loop3): 1 orphan inode deleted [ 781.069743][T19945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.082169][T19960] loop4: detected capacity change from 0 to 16 [ 781.083413][T19960] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 781.111189][T13517] usb 1-1: config 0 descriptor?? [ 781.325556][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.382328][T19945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.389049][T19963] loop8: detected capacity change from 0 to 1024 [ 781.710716][T13517] usb 1-1: Firmware version (0.0) predates our first public release. [ 781.729775][T13517] usb 1-1: Please update to version 0.2 or newer [ 781.894641][T13517] usb 1-1: USB disconnect, device number 12 [ 782.422552][T19981] loop8: detected capacity change from 0 to 4096 [ 782.505246][T19989] loop5: detected capacity change from 0 to 512 [ 782.540321][T19981] ntfs3(loop8): It is recommened to use chkdsk. [ 782.588919][T19981] ntfs3(loop8): try to read out of volume at offset 0x3fffffc0c00 [ 782.631632][T19981] ntfs3(loop8): try to read out of volume at offset 0x3fffffc0c00 [ 782.688581][T19996] ALSA: mixer_oss: invalid OSS volume 'u' [ 782.698746][T19989] EXT4-fs (loop5): 1 orphan inode deleted [ 782.700924][T19981] ntfs3(loop8): try to read out of volume at offset 0x3fffffc0c00 [ 782.714369][T19989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.750031][ T13] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 782.763044][T19989] ext4 filesystem being mounted at /934/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 782.786595][T19981] ntfs3(loop8): try to read out of volume at offset 0x3fffffc0c00 [ 782.805669][T19981] ntfs3(loop8): try to read out of volume at offset 0x3fffffc1c00 [ 782.813602][T19981] ntfs3(loop8): try to read out of volume at offset 0x3fffffc2c00 [ 782.852146][ T13] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 782.863631][T19999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5128'. [ 782.871992][T19999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5128'. [ 782.921834][T19981] ntfs3(loop8): try to read out of volume at offset 0x3fffffc4c00 [ 782.945546][T19981] ntfs3(loop8): try to read out of volume at offset 0x3fffffc8c00 [ 782.972877][T19981] ntfs3(loop8): try to read out of volume at offset 0x3fffffd0c00 [ 783.324886][ T36] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 783.364972][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.400109][ T36] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 783.705330][T20016] loop0: detected capacity change from 0 to 64 [ 783.856230][T20016] syz.0.5134: attempt to access beyond end of device [ 783.856230][T20016] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 783.928676][T20016] Buffer I/O error on dev loop0, logical block 512, async page read [ 783.967734][T20016] syz.0.5134: attempt to access beyond end of device [ 783.967734][T20016] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 784.036598][T20016] Buffer I/O error on dev loop0, logical block 56576, async page read [ 784.849708][T20031] loop4: detected capacity change from 0 to 2048 [ 784.925727][T20034] loop5: detected capacity change from 0 to 256 [ 784.934566][T20031] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 785.045638][ T5903] udevd[5903]: incorrect nilfs2 checksum on /dev/loop4 [ 785.063444][T20034] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 785.122238][T20038] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 785.257132][T20008] loop3: detected capacity change from 0 to 32768 [ 785.409406][T20031] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 785.473160][T20031] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16) [ 785.593425][T20031] Remounting filesystem read-only [ 785.626501][T20031] NILFS (loop4): error -5 truncating bmap (ino=16) [ 785.817762][T20051] loop0: detected capacity change from 0 to 512 [ 785.894095][ T9665] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 785.919799][T20051] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 786.055285][T20051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 786.091341][T20051] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.326493][T20064] loop1: detected capacity change from 0 to 512 [ 786.405078][T20064] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 786.472528][T20064] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 786.554872][T20064] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 786.652228][T20064] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 786.683017][T18600] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 786.706808][T20064] System zones: 0-2, 18-18, 34-34 [ 786.719729][T20074] netlink: 'syz.5.5151': attribute type 1 has an invalid length. [ 786.743472][T20064] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1129: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 786.831200][T20064] EXT4-fs (loop1): 1 truncate cleaned up [ 786.917751][T20064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.321354][T20088] loop4: detected capacity change from 0 to 16 [ 787.376461][T20088] erofs (device loop4): mounted with root inode @ nid 36. [ 787.379123][T18775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.566211][T20093] loop0: detected capacity change from 0 to 512 [ 787.784186][T20093] EXT4-fs (loop0): 1 orphan inode deleted [ 787.825373][ T2931] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 787.897630][T20093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.938166][ T2931] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 788.015718][T20093] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.404167][T18600] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.731454][T20072] loop8: detected capacity change from 0 to 32768 [ 788.867639][T20072] MetaData crosses page boundary!! [ 788.901092][T20072] lblock = 631500, size = 28672 [ 788.929582][T20072] CPU: 0 UID: 0 PID: 20072 Comm: syz.8.5150 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 788.929637][T20072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 788.929682][T20072] Call Trace: [ 788.929695][T20072] [ 788.929710][T20072] dump_stack_lvl+0x16c/0x1f0 [ 788.929773][T20072] __get_metapage+0x6cf/0x1030 [ 788.929862][T20072] dtSearch+0x17ba/0x24c0 [ 788.929924][T20072] ? __kmalloc_noprof+0x242/0x510 [ 788.930010][T20072] jfs_lookup+0x1ac/0x380 [ 788.930068][T20072] ? __pfx_jfs_lookup+0x10/0x10 [ 788.930128][T20072] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.930186][T20072] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.930233][T20072] ? d_alloc_parallel+0x6ae/0x12e0 [ 788.930315][T20072] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.930362][T20072] ? lockdep_init_map_type+0x5c/0x280 [ 788.930402][T20072] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.930448][T20072] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.930495][T20072] ? lockdep_init_map_type+0x5c/0x280 [ 788.930533][T20072] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.930589][T20072] __lookup_slow+0x251/0x460 [ 788.930636][T20072] ? __pfx___lookup_slow+0x10/0x10 [ 788.930695][T20072] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.930759][T20072] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.930818][T20072] ? lookup_fast+0x156/0x610 [ 788.930878][T20072] walk_component+0x353/0x5b0 [ 788.930934][T20072] path_lookupat+0x17e/0x780 [ 788.930998][T20072] filename_lookup+0x224/0x5f0 [ 788.931058][T20072] ? __pfx_filename_lookup+0x10/0x10 [ 788.931161][T20072] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.931208][T20072] ? getname_flags.part.0+0x1c5/0x550 [ 788.931264][T20072] user_path_at+0x3a/0x60 [ 788.931321][T20072] __x64_sys_mount+0x1fc/0x310 [ 788.931360][T20072] ? __pfx___x64_sys_mount+0x10/0x10 [ 788.931396][T20072] ? rcu_is_watching+0x12/0xc0 [ 788.931446][T20072] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.931507][T20072] do_syscall_64+0xcd/0x260 [ 788.931572][T20072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.931611][T20072] RIP: 0033:0x7fcc1f18e969 [ 788.931640][T20072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.931679][T20072] RSP: 002b:00007fcc1ff9b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 788.931716][T20072] RAX: ffffffffffffffda RBX: 00007fcc1f3b5fa0 RCX: 00007fcc1f18e969 [ 788.931742][T20072] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 788.931766][T20072] RBP: 00007fcc1f210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 788.931797][T20072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.931821][T20072] R13: 0000000000000000 R14: 00007fcc1f3b5fa0 R15: 00007ffdb4f16de8 [ 788.931872][T20072] [ 789.225681][T20072] bread failed! [ 789.229237][T20072] jfs_lookup: dtSearch returned -5 [ 789.301855][T20117] loop1: detected capacity change from 0 to 4096 [ 789.341181][T20097] loop5: detected capacity change from 0 to 32768 [ 789.495498][T20117] ntfs3(loop1): ino=1a, mi_enum_attr [ 789.518509][T20109] loop4: detected capacity change from 0 to 32768 [ 789.551649][T20117] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 789.675936][T20109] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 789.933843][T20138] loop3: detected capacity change from 0 to 1024 [ 789.951740][T20109] XFS (loop4): Ending clean mount [ 789.974072][T20109] XFS (loop4): Quotacheck needed: Please wait. [ 790.055907][T20138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.412493][T20109] XFS (loop4): Quotacheck: Done. [ 790.518267][T20156] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 790.864731][ T9665] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 791.202690][T18760] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.233645][T20166] team_slave_0: entered promiscuous mode [ 791.240342][T20166] team_slave_1: entered promiscuous mode [ 791.860724][T20173] loop0: detected capacity change from 0 to 4096 [ 791.890011][T20179] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5182'. [ 791.929942][T20173] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 792.106254][T20173] ntfs3(loop0): ino=19, mi_enum_attr [ 792.106308][T20173] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 792.121556][T20173] ntfs3(loop0): ino=18, mi_enum_attr [ 792.329164][ T5845] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 792.459134][T20199] sg_write: process 70 (syz.8.5188) changed security contexts after opening file descriptor, this is not allowed. [ 792.998771][T20211] loop4: detected capacity change from 0 to 1024 [ 793.077319][T20214] loop8: detected capacity change from 0 to 1024 [ 793.091478][T20211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.341696][ T30] audit: type=1800 audit(1745412189.666:225): pid=20214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5193" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 793.544747][ T13] hfsplus: b-tree write err: -5, ino 4 [ 793.749274][ T1201] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 793.949686][ T1201] usb 6-1: Using ep0 maxpacket: 32 [ 793.969188][ T1201] usb 6-1: config 0 interface 0 has no altsetting 0 [ 793.986388][ T1201] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 794.038068][ T1201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.080484][ T1201] usb 6-1: config 0 descriptor?? [ 794.199089][T20245] loop0: detected capacity change from 0 to 256 [ 794.277780][ T9665] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.282991][T20245] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 794.425409][T12635] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 794.515295][ T1201] corsair 0003:1B1C:1B34.0067: unknown main item tag 0x0 [ 794.559246][ T1201] corsair 0003:1B1C:1B34.0067: unknown main item tag 0x0 [ 794.577077][ T1201] corsair 0003:1B1C:1B34.0067: unknown main item tag 0x0 [ 794.603134][T12635] usb 9-1: Using ep0 maxpacket: 32 [ 794.636830][ T1201] corsair 0003:1B1C:1B34.0067: unknown main item tag 0x0 [ 794.664212][T12635] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 794.676591][ T1201] corsair 0003:1B1C:1B34.0067: unknown main item tag 0x0 [ 794.701747][T12635] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.724344][ T1201] corsair 0003:1B1C:1B34.0067: unknown main item tag 0x0 [ 794.738394][T12635] usb 9-1: Product: syz [ 794.754850][T12635] usb 9-1: Manufacturer: syz [ 794.767471][ T1201] corsair 0003:1B1C:1B34.0067: unknown main item tag 0x0 [ 794.787535][T12635] usb 9-1: SerialNumber: syz [ 794.828943][T12635] usb 9-1: config 0 descriptor?? [ 794.873007][ T1201] corsair 0003:1B1C:1B34.0067: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.5-1/input0 [ 794.885882][T12635] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 794.948630][ T1201] usb 6-1: USB disconnect, device number 40 [ 795.307284][T18873] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 795.445232][T12635] gspca_ov534_9: reg_w failed -71 [ 795.595987][T20270] loop1: detected capacity change from 0 to 2048 [ 795.606304][T18873] usb 5-1: Using ep0 maxpacket: 16 [ 795.663894][T18873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.679472][T18873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.697089][T20270] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 795.737024][T18873] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 795.759149][T12635] gspca_ov534_9: Unknown sensor 0000 [ 795.759260][T12635] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 795.791299][T20270] syz.1.5213: attempt to access beyond end of device [ 795.791299][T20270] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 795.791931][T20278] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 795.825467][T18873] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 795.863844][T12635] usb 9-1: USB disconnect, device number 3 [ 795.888906][T18873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.945491][T18873] usb 5-1: config 0 descriptor?? [ 795.962438][T20270] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 796.169751][T20283] loop0: detected capacity change from 0 to 128 [ 796.235719][T20283] EXT4-fs (loop0): Test dummy encryption mode enabled [ 796.259131][T20281] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 796.298918][T20283] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 796.332125][T20283] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 796.401841][T18873] microsoft 0003:045E:07DA.0068: ignoring exceeding usage max [ 796.464813][T18873] microsoft 0003:045E:07DA.0068: item 0 4 0 8 parsing failed [ 796.522501][T18873] microsoft 0003:045E:07DA.0068: parse failed [ 796.530278][T18873] microsoft 0003:045E:07DA.0068: probe with driver microsoft failed with error -22 [ 796.744358][T18873] usb 5-1: USB disconnect, device number 44 [ 796.789362][T18600] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 797.295279][T20313] loop8: detected capacity change from 0 to 2048 [ 797.427970][T20313] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 797.838018][ T30] audit: type=1800 audit(1745412194.391:226): pid=20313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5225" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 797.867468][T20328] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 797.910602][T20323] loop5: detected capacity change from 0 to 4096 [ 797.978261][T20323] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 798.189518][T20323] ntfs3(loop5): ino=19, mi_enum_attr [ 798.195671][T20331] loop4: detected capacity change from 0 to 512 [ 798.216492][T20323] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 798.303841][T19136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.327018][T20331] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.5231: bad orphan inode 15 [ 798.368567][T20323] ntfs3(loop5): failed to convert "c46c" to cp775 [ 798.392487][T20323] ntfs3(loop5): ino=20, mi_enum_attr [ 798.406355][T20331] ext4_test_bit(bit=14, block=18) = 1 [ 798.425965][T20331] is_bad_inode(inode)=0 [ 798.430227][T20331] NEXT_ORPHAN(inode)=1023 [ 798.481524][T20331] max_ino=32 [ 798.501661][T20331] i_nlink=0 [ 798.525644][T20331] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.5231: corrupted xattr block 19: invalid header [ 798.611038][T20331] EXT4-fs warning (device loop4): ext4_evict_inode:279: xattr delete (err -117) [ 798.713363][T20331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 798.769154][T20342] tipc: Started in network mode [ 798.774192][T20342] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 798.804079][T20307] loop3: detected capacity change from 0 to 32768 [ 798.821482][T20331] ext4 filesystem being mounted at /627/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 798.866548][T20342] tipc: Enabled bearer , priority 10 [ 799.101540][T20349] loop5: detected capacity change from 0 to 512 [ 799.155431][T20344] loop8: detected capacity change from 0 to 4096 [ 799.180736][ T9665] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 799.201737][T20349] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 799.350538][T20349] EXT4-fs warning (device loop5): ext4_enable_quotas:7166: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 799.371076][T20344] ntfs3(loop8): ino=1a, mi_enum_attr [ 799.376443][T20344] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 799.595850][T20349] EXT4-fs (loop5): mount failed [ 799.810373][ T30] audit: type=1800 audit(1745412196.449:227): pid=20344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5233" name="file0" dev="loop8" ino=0 res=0 errno=0 [ 799.830582][ T10] tipc: Node number set to 10005162 [ 800.171553][T20364] loop4: detected capacity change from 0 to 1024 [ 800.302664][T20364] hfsplus: Filesystem is marked locked, mounting read-only. [ 800.322272][T20367] loop5: detected capacity change from 0 to 1024 [ 800.406213][T20364] hfsplus: filesystem is marked locked, leaving read-only. [ 800.431483][T20367] hfsplus: bad catalog entry type [ 800.447296][T20373] netlink: 'syz.8.5242': attribute type 3 has an invalid length. [ 800.460238][ T30] audit: type=1326 audit(1745412197.142:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.3.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025118e969 code=0x7ffc0000 [ 800.613211][ T30] audit: type=1326 audit(1745412197.142:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.3.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025118e969 code=0x7ffc0000 [ 800.675656][ T30] audit: type=1326 audit(1745412197.194:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.3.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f025118e969 code=0x7ffc0000 [ 800.781505][T20378] loop1: detected capacity change from 0 to 1024 [ 800.805596][ T1033] hfsplus: b-tree write err: -5, ino 4 [ 800.852757][ T30] audit: type=1326 audit(1745412197.194:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.3.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025118e969 code=0x7ffc0000 [ 800.950804][T20378] hfsplus: bad catalog entry type [ 800.975201][T20338] loop0: detected capacity change from 0 to 40427 [ 801.018852][T20384] loop4: detected capacity change from 0 to 16 [ 801.035579][ T30] audit: type=1326 audit(1745412197.194:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.3.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025118e969 code=0x7ffc0000 [ 801.071992][T20338] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3fffff [ 801.113847][T20384] erofs (device loop4): mounted with root inode @ nid 36. [ 801.141228][T20338] F2FS-fs (loop0): Image doesn't support compression [ 801.178174][T20338] F2FS-fs (loop0): Image doesn't support compression [ 801.206936][ T30] audit: type=1326 audit(1745412197.215:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.3.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f025118e969 code=0x7ffc0000 [ 801.244915][T20338] F2FS-fs (loop0): invalid crc value [ 801.255702][T20338] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 801.286527][T19160] hfsplus: b-tree write err: -5, ino 4 [ 801.368491][ T30] audit: type=1326 audit(1745412197.215:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.3.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025118e969 code=0x7ffc0000 [ 801.508936][ T30] audit: type=1326 audit(1745412197.215:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.3.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025118e969 code=0x7ffc0000 [ 801.815209][T20402] loop4: detected capacity change from 0 to 256 [ 802.307326][T20412] loop5: detected capacity change from 0 to 2048 [ 802.464591][T20412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.754055][T20425] netlink: 'syz.3.5261': attribute type 2 has an invalid length. [ 802.871924][T20426] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 803.021859][T20433] loop0: detected capacity change from 0 to 47 [ 803.209701][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.348240][T20432] loop4: detected capacity change from 0 to 32768 [ 803.467170][T20432] XFS (loop4): Metadata CRC error detected at xfs_sb_read_verify+0x3b9/0x450, xfs_sb block 0x0 [ 803.477856][T20432] XFS (loop4): Unmount and run xfs_repair [ 803.483697][T20432] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 803.491126][T20432] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 803.500157][T20432] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 803.513126][T20432] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab ..*.w.B.....G.K. [ 803.522248][T20432] 00000030: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 04 20 ............... [ 803.531383][T20432] 00000040: 00 00 00 00 00 00 04 21 00 00 00 00 00 00 04 22 .......!......." [ 803.540262][T20432] 00000050: 00 00 00 03 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 803.549269][T20432] 00000060: 00 00 02 04 b4 b5 02 00 08 00 00 02 00 00 00 00 ................ [ 803.558266][T20432] 00000070: 00 00 00 00 00 00 00 00 0c 09 0b 01 0c 00 00 64 ...............d [ 803.567289][T20432] XFS (loop4): SB validate failed with error -74. [ 803.939448][T20448] loop5: detected capacity change from 0 to 2048 [ 804.071664][T20448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.321921][T20448] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 804.686204][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.869067][T20470] loop3: detected capacity change from 0 to 256 [ 804.982207][T20470] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 805.627099][T20482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5279'. [ 805.714691][T20478] loop1: detected capacity change from 0 to 4096 [ 805.764666][T20478] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 805.812883][ T8197] udevd[8197]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 805.904502][ T8197] udevd[8197]: symlink '../../loop1' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:1' failed: Read-only file system [ 806.126155][T20461] loop4: detected capacity change from 0 to 32768 [ 806.248634][T20461] JBD2: Ignoring recovery information on journal [ 806.312938][T20495] loop3: detected capacity change from 0 to 512 [ 806.412937][T20495] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 806.436522][ T8197] udevd[8197]: symlink '../../loop4' '/dev/disk/by-uuid/03e7aa51-a951-448e-b9eb-6dd609435e20.tmp-b7:4' failed: Read-only file system [ 806.463952][ T8868] udevd[8868]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 806.536337][T20461] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 806.567489][T20495] EXT4-fs (loop3): 1 truncate cleaned up [ 806.682287][ T8197] udevd[8197]: symlink '../../loop4' '/dev/disk/by-uuid/03e7aa51-a951-448e-b9eb-6dd609435e20.tmp-b7:4' failed: Read-only file system [ 806.698467][T20495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.732667][ T5903] udevd[5903]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 806.748774][T20461] (syz.4.5271,20461,1):ocfs2_check_dir_entry:321 ERROR: bad entry in directory #17: directory entry overrun - offset=312, inode=13845347915746889, rec_len=54648, name_len=18 [ 806.787549][T20475] loop8: detected capacity change from 0 to 32768 [ 806.889314][T20475] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 806.950990][T20495] EXT4-fs error (device loop3): ext4_generic_delete_entry:2669: inode #2: block 13: comm syz.3.5283: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 807.008381][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.014887][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 807.023321][T20510] loop1: detected capacity change from 0 to 1024 [ 807.040334][ T8197] udevd[8197]: symlink '../../loop8' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:8' failed: Read-only file system [ 807.064770][T20495] EXT4-fs (loop3): Remounting filesystem read-only [ 807.097287][T20511] (syz.8.5276,20511,1):ocfs2_check_dir_entry:321 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 807.127060][T20512] loop0: detected capacity change from 0 to 512 [ 807.138468][T20510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.145682][ T8197] udevd[8197]: symlink '../../loop8' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:8' failed: Read-only file system [ 807.192404][ T5903] udevd[5903]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 807.241794][T20511] (syz.8.5276,20511,1):__ocfs2_delete_entry:1162 ERROR: status = -5 [ 807.263978][ T9665] (syz-executor,9665,1):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 22 [ 807.302350][ T8868] udevd[8868]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 807.322097][T20511] (syz.8.5276,20511,0):ocfs2_unlink:990 ERROR: status = -5 [ 807.345709][T20512] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 807.372155][ T9665] ocfs2: Unmounting device (7,4) on (node local) [ 807.384005][T20512] EXT4-fs warning (device loop0): ext4_block_to_path:105: block 3279945729 > max in inode 13 [ 807.397656][T20511] (syz.8.5276,20511,0):ocfs2_unlink:1043 ERROR: status = -5 [ 807.427935][T20512] EXT4-fs warning (device loop0): ext4_block_to_path:105: block 3279945730 > max in inode 13 [ 807.455893][T20512] EXT4-fs (loop0): 1 truncate cleaned up [ 807.482245][T20512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.497221][T18760] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.552258][T18775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.751053][T20512] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 807.879224][T19136] ocfs2: Unmounting device (7,8) on (node local) [ 808.013903][T20522] loop3: detected capacity change from 0 to 2048 [ 808.099821][T18600] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.152700][T20522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.370104][T20522] cifs: Unknown parameter 'c936' [ 808.406501][T20532] loop1: detected capacity change from 0 to 1024 [ 808.553259][T20532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.683709][T20541] loop4: detected capacity change from 0 to 1024 [ 808.695892][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 808.695919][ T30] audit: type=1800 audit(1745412205.782:237): pid=20532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5294" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 808.771052][T18760] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.830064][T20541] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 808.924423][T20532] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 808.953930][T20532] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 400 with error 28 [ 808.980424][T20532] EXT4-fs (loop1): This should not happen!! Data will be lost [ 808.980424][T20532] [ 808.990910][T20541] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz.4.5287: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 809.049897][T20532] EXT4-fs (loop1): Total free blocks count 0 [ 809.111518][T20541] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.5287: couldn't read orphan inode 11 (err -117) [ 809.141662][T20532] EXT4-fs (loop1): Free/Dirty block details [ 809.208358][T20532] EXT4-fs (loop1): free_blocks=68451041280 [ 809.216684][T20541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 809.299370][T20532] EXT4-fs (loop1): dirty_blocks=400 [ 809.368849][T20532] EXT4-fs (loop1): Block reservation details [ 809.413412][T20532] EXT4-fs (loop1): i_reserved_data_blocks=25 [ 809.481006][T20541] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:482: comm syz.4.5287: Invalid block bitmap block 0 in block_group 0 [ 809.634478][T20541] Quota error (device loop4): write_blk: dquota write failed [ 809.680556][T20562] loop0: detected capacity change from 0 to 2048 [ 809.684300][T20541] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 809.776991][T20541] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5287: Failed to acquire dquot type 0 [ 809.819241][T20562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.859861][T20569] loop5: detected capacity change from 0 to 512 [ 809.873693][T18775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.893773][T20562] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.042319][T20569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.074441][T20569] ext4 filesystem being mounted at /969/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.196922][T20576] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5305'. [ 810.226427][ T9665] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.248455][ T36] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 810.298351][ T36] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 810.378627][T18600] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.533935][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.795347][T20595] loop4: detected capacity change from 0 to 256 [ 810.800649][T20592] loop8: detected capacity change from 0 to 1024 [ 810.904440][T20595] exfat: Deprecated parameter 'utf8' [ 810.945130][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-label/untitled.tmp-b7:8' failed: Read-only file system [ 810.960431][T20595] exfat: Deprecated parameter 'utf8' [ 810.963064][ T8868] udevd[8868]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 811.043933][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:8' failed: Read-only file system [ 811.105937][T20595] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 811.110603][T20592] hfsplus: bad catalog entry type [ 811.131726][T20598] netlink: 'syz.1.5312': attribute type 1 has an invalid length. [ 811.259237][ T5903] udevd[5903]: symlink '../../loop8' '/dev/disk/by-label/untitled.tmp-b7:8' failed: Read-only file system [ 811.316122][ T5903] udevd[5903]: symlink '../../loop8' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:8' failed: Read-only file system [ 811.384370][ T1033] hfsplus: b-tree write err: -5, ino 4 [ 811.550419][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 811.677975][T20614] loop8: detected capacity change from 0 to 128 [ 811.725756][T20614] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 811.765554][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 811.801173][ T10] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 811.822986][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.845068][ T10] usb 1-1: Product: syz [ 811.871008][ T10] usb 1-1: Manufacturer: syz [ 811.875817][T20614] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 811.931133][ T10] usb 1-1: SerialNumber: syz [ 811.994189][ T10] usb 1-1: config 0 descriptor?? [ 812.034381][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 812.432503][ T10] gspca_se401: Wrong descriptor type [ 812.664983][ T968] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 812.705216][T13517] usb 1-1: USB disconnect, device number 13 [ 812.845829][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 812.866722][ T968] usb 9-1: Using ep0 maxpacket: 32 [ 812.922102][ T968] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.941814][ T968] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.968566][ T968] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 812.988222][ T968] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.028934][ T968] usb 9-1: config 0 descriptor?? [ 813.044653][ T10] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 813.055265][T20646] loop1: detected capacity change from 0 to 1024 [ 813.072523][ T10] usb 4-1: config 0 has no interface number 0 [ 813.110290][ T10] usb 4-1: config 0 interface 98 has no altsetting 0 [ 813.129058][ T5903] udevd[5903]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system [ 813.152495][ T10] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 813.188529][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.199800][T20646] hfsplus: bad catalog entry type [ 813.207107][ T5903] udevd[5903]: symlink '../../loop1' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:1' failed: Read-only file system [ 813.216168][ T10] usb 4-1: Product: syz [ 813.245943][ T10] usb 4-1: Manufacturer: syz [ 813.254899][ T10] usb 4-1: SerialNumber: syz [ 813.285442][ T10] usb 4-1: config 0 descriptor?? [ 813.398367][ T62] hfsplus: b-tree write err: -5, ino 4 [ 813.538251][ T968] koneplus 0003:1E7D:2D51.0069: unknown main item tag 0x0 [ 813.556973][ T10] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 813.580529][ T968] koneplus 0003:1E7D:2D51.0069: unbalanced collection at end of report description [ 813.618972][ T968] koneplus 0003:1E7D:2D51.0069: parse failed [ 813.666384][ T968] koneplus 0003:1E7D:2D51.0069: probe with driver koneplus failed with error -22 [ 813.796680][ T968] usb 9-1: USB disconnect, device number 4 [ 814.074462][ T10] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 814.185813][T20671] loop4: detected capacity change from 0 to 2048 [ 814.283900][ T8197] udevd[8197]: symlink '../../loop4' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:4' failed: Read-only file system [ 814.326031][T20677] loop1: detected capacity change from 0 to 64 [ 814.362816][T20678] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 814.462360][ T8197] udevd[8197]: symlink '../../loop4' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:4' failed: Read-only file system [ 814.479840][ T10] usb 4-1: failed to restore interface 98 altsetting 4 (error=-71) [ 814.535798][T20677] Trying to free block not in datazone [ 814.555551][ T10] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 814.606481][ T10] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 814.615304][ T6022] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 814.659920][ T6022] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 814.662449][T20679] Trying to free block not in datazone [ 814.684798][ T10] usb 4-1: USB disconnect, device number 8 [ 814.738687][T20679] minix_free_inode: bit 3 already cleared [ 814.750071][ T6022] ------------[ cut here ]------------ [ 814.756796][ T6022] WARNING: CPU: 0 PID: 6022 at fs/kernfs/dir.c:537 kernfs_get.part.0+0x6e/0x80 [ 814.766418][ T6022] Modules linked in: [ 814.773817][ T6022] CPU: 0 UID: 0 PID: 6022 Comm: kworker/0:8 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 814.786704][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 814.797286][ T6022] Workqueue: events request_firmware_work_func [ 814.803996][ T6022] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 814.810455][ T6022] Code: e8 5b 5d ff 85 ed 74 1c e8 9f 60 5d ff be 04 00 00 00 48 89 df e8 42 ee c1 ff f0 ff 03 5b 5d e9 53 62 b2 fe e8 83 60 5d ff 90 <0f> 0b 90 eb d9 48 89 df e8 45 e6 c1 ff eb c0 0f 1f 00 90 90 90 90 [ 814.830120][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.839267][ T6022] RSP: 0018:ffffc900046ef798 EFLAGS: 00010293 [ 814.845395][ T6022] RAX: 0000000000000000 RBX: ffff88803512f000 RCX: ffffffff825dde98 [ 814.853550][ T6022] RDX: ffff88802c521e00 RSI: ffffffff825ddebd RDI: 0000000000000005 [ 814.861718][ T6022] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 814.869796][ T6022] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805cadc0b0 [ 814.878078][ T6022] R13: ffff888034cb2b30 R14: 0000000000000000 R15: ffff888034cb2b28 [ 814.886605][ T6022] FS: 0000000000000000(0000) GS:ffff8881249b8000(0000) knlGS:0000000000000000 [ 814.895825][ T6022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 814.902442][ T6022] CR2: 00007faf80440970 CR3: 00000000217ea000 CR4: 0000000000350ef0 [ 814.910658][ T6022] Call Trace: [ 814.914058][ T6022] [ 814.918300][ T6022] kernfs_get+0x1f/0x30 [ 814.923560][ T6022] kobject_add_internal+0x353/0x9b0 [ 814.928845][ T6022] kobject_add+0x16e/0x240 [ 814.933979][ T6022] ? __pfx_kobject_add+0x10/0x10 [ 814.939378][ T6022] get_device_parent+0x399/0x4e0 [ 814.944763][ T6022] device_add+0x1ad/0x1a70 [ 814.949241][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 814.955251][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 814.961563][ T6022] ? __pfx_device_add+0x10/0x10 [ 814.966458][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 814.972527][ T6022] ? __init_waitqueue_head+0xca/0x150 [ 814.978185][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 814.984203][ T6022] firmware_fallback_sysfs+0x2ec/0xbe0 [ 814.990156][ T6022] _request_firmware+0xfe9/0x1470 [ 814.995243][ T6022] ? __pfx__request_firmware+0x10/0x10 [ 815.000807][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.006537][ T6022] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 815.012513][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.019564][ T6022] ? debug_object_deactivate+0x1ec/0x3a0 [ 815.026372][ T6022] request_firmware_work_func+0xea/0x250 [ 815.032106][ T6022] ? __pfx_request_firmware_work_func+0x10/0x10 [ 815.038582][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.044270][ T6022] ? rcu_is_watching+0x12/0xc0 [ 815.049140][ T6022] process_one_work+0x9cf/0x1b70 [ 815.054181][ T6022] ? __pfx_process_one_work+0x10/0x10 [ 815.059633][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.065351][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.071065][ T6022] ? assign_work+0x1a0/0x250 [ 815.075765][ T6022] worker_thread+0x6c8/0xf10 [ 815.080422][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.086192][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.091884][ T6022] ? __kthread_parkme+0x19e/0x250 [ 815.097042][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.102852][ T6022] ? __pfx_worker_thread+0x10/0x10 [ 815.108041][ T6022] kthread+0x3c5/0x780 [ 815.113603][ T6022] ? __pfx_kthread+0x10/0x10 [ 815.119436][ T6022] ? __pfx_kthread+0x10/0x10 [ 815.124136][ T6022] ? __pfx_kthread+0x10/0x10 [ 815.129205][ T6022] ? __pfx_kthread+0x10/0x10 [ 815.133910][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.139589][ T6022] ? rcu_is_watching+0x12/0xc0 [ 815.144464][ T6022] ? __pfx_kthread+0x10/0x10 [ 815.149125][ T6022] ret_from_fork+0x48/0x80 [ 815.153659][ T6022] ? __pfx_kthread+0x10/0x10 [ 815.158292][ T6022] ret_from_fork_asm+0x1a/0x30 [ 815.163188][ T6022] [ 815.166266][ T6022] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 815.173572][ T6022] CPU: 0 UID: 0 PID: 6022 Comm: kworker/0:8 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 815.185710][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 815.195796][ T6022] Workqueue: events request_firmware_work_func [ 815.202016][ T6022] Call Trace: [ 815.205310][ T6022] [ 815.208256][ T6022] dump_stack_lvl+0x3d/0x1f0 [ 815.212899][ T6022] panic+0x71c/0x800 [ 815.216826][ T6022] ? __pfx_panic+0x10/0x10 [ 815.221275][ T6022] ? show_trace_log_lvl+0x29b/0x3e0 [ 815.226528][ T6022] ? check_panic_on_warn+0x1f/0xb0 [ 815.231675][ T6022] ? kernfs_get.part.0+0x6e/0x80 [ 815.236667][ T6022] check_panic_on_warn+0xab/0xb0 [ 815.241646][ T6022] __warn+0xf6/0x3c0 [ 815.245566][ T6022] ? kernfs_get.part.0+0x6e/0x80 [ 815.250556][ T6022] report_bug+0x3c3/0x580 [ 815.254974][ T6022] ? kernfs_get.part.0+0x6e/0x80 [ 815.259986][ T6022] handle_bug+0x184/0x210 [ 815.264342][ T6022] exc_invalid_op+0x17/0x50 [ 815.268875][ T6022] asm_exc_invalid_op+0x1a/0x20 [ 815.273754][ T6022] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 815.279361][ T6022] Code: e8 5b 5d ff 85 ed 74 1c e8 9f 60 5d ff be 04 00 00 00 48 89 df e8 42 ee c1 ff f0 ff 03 5b 5d e9 53 62 b2 fe e8 83 60 5d ff 90 <0f> 0b 90 eb d9 48 89 df e8 45 e6 c1 ff eb c0 0f 1f 00 90 90 90 90 [ 815.298992][ T6022] RSP: 0018:ffffc900046ef798 EFLAGS: 00010293 [ 815.305117][ T6022] RAX: 0000000000000000 RBX: ffff88803512f000 RCX: ffffffff825dde98 [ 815.313136][ T6022] RDX: ffff88802c521e00 RSI: ffffffff825ddebd RDI: 0000000000000005 [ 815.321151][ T6022] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 815.329157][ T6022] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805cadc0b0 [ 815.337155][ T6022] R13: ffff888034cb2b30 R14: 0000000000000000 R15: ffff888034cb2b28 [ 815.345180][ T6022] ? kernfs_get.part.0+0x48/0x80 [ 815.350186][ T6022] ? kernfs_get.part.0+0x6d/0x80 [ 815.355221][ T6022] ? kernfs_get.part.0+0x6d/0x80 [ 815.360252][ T6022] kernfs_get+0x1f/0x30 [ 815.364517][ T6022] kobject_add_internal+0x353/0x9b0 [ 815.369774][ T6022] kobject_add+0x16e/0x240 [ 815.374241][ T6022] ? __pfx_kobject_add+0x10/0x10 [ 815.379333][ T6022] get_device_parent+0x399/0x4e0 [ 815.384520][ T6022] device_add+0x1ad/0x1a70 [ 815.388994][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.394671][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.400352][ T6022] ? __pfx_device_add+0x10/0x10 [ 815.405264][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.410945][ T6022] ? __init_waitqueue_head+0xca/0x150 [ 815.416446][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.422154][ T6022] firmware_fallback_sysfs+0x2ec/0xbe0 [ 815.427676][ T6022] _request_firmware+0xfe9/0x1470 [ 815.432768][ T6022] ? __pfx__request_firmware+0x10/0x10 [ 815.438284][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.443962][ T6022] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 815.449850][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.455571][ T6022] ? debug_object_deactivate+0x1ec/0x3a0 [ 815.461446][ T6022] request_firmware_work_func+0xea/0x250 [ 815.467151][ T6022] ? __pfx_request_firmware_work_func+0x10/0x10 [ 815.473443][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.479210][ T6022] ? rcu_is_watching+0x12/0xc0 [ 815.484029][ T6022] process_one_work+0x9cf/0x1b70 [ 815.489033][ T6022] ? __pfx_process_one_work+0x10/0x10 [ 815.494459][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.500190][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.505889][ T6022] ? assign_work+0x1a0/0x250 [ 815.510533][ T6022] worker_thread+0x6c8/0xf10 [ 815.515182][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.520858][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.526530][ T6022] ? __kthread_parkme+0x19e/0x250 [ 815.531607][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.537309][ T6022] ? __pfx_worker_thread+0x10/0x10 [ 815.542462][ T6022] kthread+0x3c5/0x780 [ 815.546565][ T6022] ? __pfx_kthread+0x10/0x10 [ 815.551179][ T6022] ? __pfx_kthread+0x10/0x10 [ 815.555796][ T6022] ? __pfx_kthread+0x10/0x10 [ 815.560433][ T6022] ? __pfx_kthread+0x10/0x10 [ 815.565049][ T6022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.570720][ T6022] ? rcu_is_watching+0x12/0xc0 [ 815.575520][ T6022] ? __pfx_kthread+0x10/0x10 [ 815.580141][ T6022] ret_from_fork+0x48/0x80 [ 815.584586][ T6022] ? __pfx_kthread+0x10/0x10 [ 815.589203][ T6022] ret_from_fork_asm+0x1a/0x30 [ 815.594040][ T6022] [ 815.597349][ T6022] Kernel Offset: disabled [ 815.601682][ T6022] Rebooting in 86400 seconds..