last executing test programs: 1m7.388674764s ago: executing program 1 (id=668): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m7.111888151s ago: executing program 1 (id=670): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) 1m7.090392531s ago: executing program 1 (id=671): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7f}}}}}}, 0x0) 1m6.915032906s ago: executing program 1 (id=673): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 1m6.622620703s ago: executing program 1 (id=675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000002100)={0x40, r1, 0xb97534d5fe9704cf, 0x0, 0x20000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x800}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 1m5.551195919s ago: executing program 1 (id=679): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x73af1245f84d7000, 0xff, 0x11}, 0x2c) 1m4.855961626s ago: executing program 32 (id=679): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x73af1245f84d7000, 0xff, 0x11}, 0x2c) 3.439784986s ago: executing program 4 (id=1193): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 3.192229382s ago: executing program 4 (id=1197): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 2.897566909s ago: executing program 3 (id=1202): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.835588431s ago: executing program 0 (id=1203): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22060600) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000640), &(0x7f00000000c0)=""/130}, 0x20) 2.627711846s ago: executing program 0 (id=1205): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.530043668s ago: executing program 3 (id=1207): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x84, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @loopback, [], [], 'veth1\x00', 'wlan1\x00', {}, {0x1fe}}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x3], 0xff, 0x0, 0x24dc13b7d730343}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4199fc6505f93cb13d0617f57700e5dba5afc775234fe52cca718b1ef125"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 2.405340801s ago: executing program 3 (id=1209): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000004a00)='./file1\x00', 0x4000, &(0x7f0000004a80)=ANY=[@ANYBLOB="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"], 0xff, 0x5e5c, &(0x7f0000005d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x84042, 0x1ff) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f00000025c0)=ANY=[], 0xff9, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x8, 0x9}, {0x1000}]}, 0x18, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x10) 2.172309137s ago: executing program 4 (id=1212): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socket$kcm(0xa, 0x1, 0x106) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.172141957s ago: executing program 5 (id=1213): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r3}}]}}) 2.006850241s ago: executing program 5 (id=1214): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x2000c12, &(0x7f0000000500)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@map_off}, {@hide}, {@nocompress}, {@overriderock}, {@check_strict}, {@overriderock}, {@map_off}, {@unhide}, {@dmode={'dmode', 0x3d, 0x7fff}}, {@check_relaxed}, {@dmode={'dmode', 0x3d, 0xe565}}, {@nojoliet}, {@map_acorn}]}, 0x3, 0xa00, &(0x7f0000000d00)="$eJzs3c1vXOW9B/Dv8UtiDEoCRFxuBGQSboLh+jq2c0luxOKS2JPEXL9c2Y5EdBeES5wqwoUWWgloqwap6qqolVp10e5QV10hsSmbil27a1ddVKr4F1BX6crVOTN2xvb4LfIb4fOxZua8/M7z/M48Z86jGZ+ZJ3y1LBxeNrewUN3uc/7ab3chY/axS6NffPzJR+Xtwzs5kM68WPwu6UlSS7qSPJl0j4xOT02sX06R5EaSzxuTB5uLNuVGip/mkXvzn6f4dVnvmg5stmQ2ssDX2l4ffwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsB8VI6ODg0PFgYxNXnu11pDUVhkZnZ4qsrCwes3iNg2fVaN+F59tVG3RvKWnZ3Go7yeP3lv/RJLayTzVmHuqGpA8Pfng4SeOvPR4V0c1uHhRtMlzGxzcfLHvvv/Bm6/Pz8+9syOJ7H9X6pNjM1NjExev1GtjM1O1C+fODZ65enmmdnlsvD5zfWa2PlEbma5fnJ2arvWNPF8bunDhbK0+cH3q2uSV0YHx+uLC8/8xPDh4rvbKwP/WL07PTE2eeWVgZuTq2Pj42OSVKqZcXcacLw/E/xmbrc3WL07Uarduz8+dXZFTZ1Ycv2XQ0EZ7UgYNbxQ0PDg8PDQ0PDz0YXP07KUF51688OL5wcGuwRWyKmKHDlr2l4fWbuYdOIvD/elo9P/JeMYymWt5NbW2fyMZzXSmMrHG+qbF/v/Umfq69bb2/81evqtl9bHy7mSeac72rNH/r5HL7v29m/fzQd7M65nPfObyzp5ntLt/V1LPZMYyk6mMZSIXqyW15pJaLuRczmUwr+VqjmcmtVzOWMZTz0yuZyazqVdH1EimU8/FzGYq06mlLyN5PrUM5UIu5GxqqWcg1zOVa5nMlYzmYlXKrdyunvez6+S4FDS0maDhdYJWdeZb7P8//EHjcN7Vnoh9ZpvP4HD/Fpr9/4GNQ/tGdiMhAAAAYNv96x9z6Ohjf/hbUuTp6nP5y2Pj9cG9TgsAAADYRtXlek+VD93l1NMpvP8HAACAB01RfceuSNKb442pxW9C+RAAAAAAHhDV//+fSXH83gLv/wEAAOABs/Fv7G8YUfQv/vxv7Wbj8WYzojFX9F4eG68PjEyNvzSU09WvDFTfNFhVWmdSdFdfP3ghJxpRJ3obj733Sizr7CmjhgZeGsoLOdnckb5ny4dn+9pEDjcin2tEPtca2ZllkWfLSAB40J1cpz/ebP//QvobEf3Hqi6/61hrH1xuVPbpelYA2C+Wxtj5R3NIszb9fzPimbX6//9c5/1/GfFYbh1vXFIwkDfyduZzM/3Vtw2+lxxvV+riaASNyxD6N/g0oLd5ycKfz3ekf9XnAT1L+9oaO5fh9Lf9RKCl3GIxh7ONuM4dawYA2FUn07zyr20/vLn+v3/d9/+tfa5LCgFgP1gawX4HJ/Z6HwGA5fTSAAAAAAAAAAAAAAAAAAAAAAAAAAAAsP029QP+fzqdzM/PJbswWMDSRM9WMlx/oiO7lPOeT3Qm2ava/ztb3Co9ZRvvl6fOxIrWAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GugSDrbLe9IDiYZTHJm97PaOXf2OoHtUru/zYq7uZv3cmi70wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Lpr/v5/RxqPDzcWpasjOZXkRpL/2+sct9PdvU5gz3yzum/5/f+OpDsLRboazZ6ie2R0emqibP7iYLn+i48/+ai8bVz2neStnmVLygLKGpYNLtGsoWVJ9/JyHq226h2de/fN77z9rdroperAvDR7eXx04sr0y/cCnyg+bQyB0DoMwmK+3z/1+5+1LD7QrPzTck/bW1nv5are0dX1/ku7rdeodxNuz88NlzXN1l+d/e5bt99rWfVYTiTP9iV9y2v6Rnlbo6YTK5/P5Yovix8Xh/LL3Kjav3w2ioWibKLD1f4/dOv2/NzAG2/P31zK6YfLcjqS40luJj2bz+l4dT5p6+FyTUd3WetgFVTeHd2gvHVVx3GjxKE1ntdHq0Omd0v7UFt7HyobPO/NjM62zejn3348p7fc0qc3qLGt4svir8XV/CU/ahn/o6Ns/1Np++psU0QV2XKktK5b9vLqaERWez7cuuK1lWWu+aps66EtRT/gXt76Jj/J/+e/ltq/o+X832yr3TkftdTY/nWRbP118ZvDq3qUe6oe6eiKHql59llrm2aeRxtRbfNc7B2PbemM8u8bnFF26vX/q6Ivf88d4/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7X5F0tlvekZxKciTJ4XK+liysjLlzH/V19Bb3k+a2uZ+cv3qKNXe0uJu7eS+HdjsjAAAAAAAAAHbGpdEvPv7ko/JW/T++M//W0VxTS7qSHCl+0T0yOj01sUFB3cmNxX/p92wthxvl3SP35j8v557cYKO9vXwAAL7S/hkAAP//9ehu7g==") write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.006122391s ago: executing program 0 (id=1224): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x2, 0x15a, &(0x7f00000007c0)="$eJzs2z+r01AYB+C33l6NutxZHAIuTkX9BIpUEAOK0kEnherSSsEu0cV+FL+gIJ26HdFoS/9JK/QGkudZ8sLvHDgnkLycQN7e/jgaTqYfJi/mkXU60X0YeSw6cRFX4iwqswAAmmSRUvxIKaVrs7j+LVJKW0O+1rIwAOBkDuj/AEDD6P8A0D76PwC0z6vXb549Kor+yzzPIr7PykE5qK5V/uRp0b+X/3axmjUvy8HZMr9f5fl6fh43/uQPduZX4+6dKv+VPX5ebOQ3Y3j67QMAAEAr9PKl9fP937y3J9/+PrBxfu/Gre4lbQIAOMr085fRu/H4/aejioj/mdWI4jwidkdZtPi2KJpW1P1mAk5t9dDXvRIAAAAAAAAAAAAAAGCfg/8Hyv49eJH2T697jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDpZwAAAP//iBFNOg==") mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0xa0, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1cc) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) 1.704802148s ago: executing program 0 (id=1216): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000440)=[{&(0x7f0000002740)=""/4110, 0x100e}], 0x1, 0xa, 0x9) 1.656305019s ago: executing program 2 (id=1217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r1, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x3c}}, 0x0) 1.63279835s ago: executing program 5 (id=1218): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000013c0)={0x58, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x31, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @device_b, @initial, {0x7, 0xa}}, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0xad}, @void, @val={0x72, 0x6}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x7ff]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.474719814s ago: executing program 5 (id=1219): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 1.412365995s ago: executing program 2 (id=1220): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) ftruncate(r0, 0x20000000003) 1.305646228s ago: executing program 0 (id=1221): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0xff, 0x1f5, &(0x7f0000000600)="$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") syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 1.20572109s ago: executing program 2 (id=1222): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 1.144363452s ago: executing program 3 (id=1223): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000a}) 1.134877012s ago: executing program 5 (id=1225): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @empty}}, 0x3, 0xd13}, &(0x7f00000001c0)=0x90) 1.123787812s ago: executing program 4 (id=1226): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000001540), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c}) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 832.26585ms ago: executing program 0 (id=1227): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 769.388461ms ago: executing program 4 (id=1228): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x2, 0x15a, &(0x7f00000007c0)="$eJzs2z+r01AYB+C33l6NutxZHAIuTkX9BIpUEAOK0kEnherSSsEu0cV+FL+gIJ26HdFoS/9JK/QGkudZ8sLvHDgnkLycQN7e/jgaTqYfJi/mkXU60X0YeSw6cRFX4iwqswAAmmSRUvxIKaVrs7j+LVJKW0O+1rIwAOBkDuj/AEDD6P8A0D76PwC0z6vXb549Kor+yzzPIr7PykE5qK5V/uRp0b+X/3axmjUvy8HZMr9f5fl6fh43/uQPduZX4+6dKv+VPX5ebOQ3Y3j67QMAAEAr9PKl9fP937y3J9/+PrBxfu/Gre4lbQIAOMr085fRu/H4/aejioj/mdWI4jwidkdZtPi2KJpW1P1mAk5t9dDXvRIAAAAAAAAAAAAAAGCfg/8Hyv49eJH2T697jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDpZwAAAP//iBFNOg==") mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0xa0, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1cc) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) 768.561181ms ago: executing program 3 (id=1238): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000740)={[{@test_dummy_encryption_v1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@inlinecrypt}, {@lazytime}, {@data_journal}, {@noload}, {@oldalloc}]}, 0x3, 0x440, &(0x7f0000000280)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000300)='./bus\x00') r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, 0x0, 0x0) 424.42541ms ago: executing program 2 (id=1229): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 269.361903ms ago: executing program 3 (id=1230): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 242.425884ms ago: executing program 4 (id=1231): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) 168.308166ms ago: executing program 2 (id=1232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) write$tun(r0, &(0x7f0000000300)={@void, @void, @eth={@remote, @empty, @void, {@llc_tr={0x11, {@llc={0x2, 0xff, "cc"}}}}}}, 0x11) 97.638658ms ago: executing program 5 (id=1233): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) 0s ago: executing program 2 (id=1234): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000000, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1) kernel console output (not intermixed with test programs): peed USB device number 7 using dummy_hcd [ 132.167913][ T5762] input: syz1 as /devices/virtual/input/input12 [ 132.183947][ T5762] input: failed to attach handler leds to device input12, error: -6 [ 132.326321][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.336928][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.349327][ T7] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 132.359547][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 132.374418][ T7] usb 1-1: SerialNumber: syz [ 132.435837][ T4316] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 132.520765][ T5770] loop4: detected capacity change from 0 to 128 [ 132.571856][ T5770] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 132.602913][ T7] usb 1-1: 0:2 : does not exist [ 132.646194][ T5773] netlink: 'syz.3.479': attribute type 1 has an invalid length. [ 132.665602][ T5770] System zones: 1-3, 19-19, 35-36 [ 132.672336][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.679820][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.697033][ T5776] loop2: detected capacity change from 0 to 256 [ 132.697943][ T4316] usb 2-1: USB disconnect, device number 5 [ 132.704375][ T7] usb 1-1: USB disconnect, device number 7 [ 132.724696][ T5770] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.742643][ T5770] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.759905][ T26] audit: type=1800 audit(1785211525.907:10): pid=5776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.481" name="file1" dev="loop2" ino=1048613 res=0 errno=0 [ 132.774496][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.900882][ T5780] loop3: detected capacity change from 0 to 16 [ 132.950583][ T5780] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 133.079979][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 133.432505][ T5796] [U]  [ 133.441539][ T5796] [U] .w}¡êSçǤ [ 133.448546][ T5796] [U] ®æ [ 133.454958][ T5795] [U]  [ 133.506522][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 133.705858][ T7] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 133.723963][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.732865][ T7] usb 3-1: Product: syz [ 133.738989][ T7] usb 3-1: Manufacturer: syz [ 133.747127][ T7] usb 3-1: SerialNumber: syz [ 133.754853][ T7] usb 3-1: config 0 descriptor?? [ 133.761263][ T7] hub 3-1:0.0: bad descriptor, ignoring hub [ 133.773980][ T7] hub: probe of 3-1:0.0 failed with error -5 [ 133.897821][ T5814] loop4: detected capacity change from 0 to 64 [ 133.962270][ T7] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 133.978328][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.988384][ T7] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 133.998311][ T7] usb 3-1: media controller created [ 134.040734][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.149904][ T7] DVB: Unable to find symbol dib7000p_attach() [ 134.156475][ T7] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 134.171764][ T5789] dib0700: tx buffer length is larger than 4. Not supported. [ 134.244097][ T7] rc_core: IR keymap rc-dib0700-rc5 not found [ 134.250349][ T7] Registered IR keymap rc-empty [ 134.255713][ T7] dvb-usb: could not initialize remote control. [ 134.262074][ T7] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 134.304735][ T7] usb 3-1: USB disconnect, device number 7 [ 134.357187][ T7] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 134.373921][ T127] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 134.569965][ T127] usb 5-1: Using ep0 maxpacket: 16 [ 134.585808][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.620095][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.631336][ T127] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 134.653097][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.683417][ T127] usb 5-1: config 0 descriptor?? [ 134.981043][ T5841] netlink: 132 bytes leftover after parsing attributes in process `syz.1.508'. [ 135.035210][ T5842] loop2: detected capacity change from 0 to 2048 [ 135.101043][ T5842] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.119599][ T127] wacom 0003:056A:0084.0008: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.4-1/input0 [ 135.178401][ T26] audit: type=1800 audit(1785211528.327:11): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.509" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 135.327305][ T127] usb 5-1: USB disconnect, device number 7 [ 135.479502][ T5856] program syz.3.515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.501103][ T5849] fido_id[5849]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 136.079550][ T5873] loop4: detected capacity change from 0 to 1024 [ 136.099341][ T5873] EXT4-fs: Ignoring removed oldalloc option [ 136.111956][ T5873] ext4: Unknown parameter 'fsmagic' [ 136.673483][ T5902] loop3: detected capacity change from 0 to 4096 [ 136.687875][ T5902] EXT4-fs: inline encryption not supported [ 136.699403][ T5902] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 136.710685][ T5902] EXT4-fs (loop3): Test dummy encryption mode enabled [ 136.739120][ T5902] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 136.755376][ T5902] System zones: 0-5 [ 136.770260][ T5902] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 136.949150][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 137.282140][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.544'. [ 137.340582][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.545'. [ 137.362455][ T5931] loop1: detected capacity change from 0 to 128 [ 137.391206][ T5924] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.400470][ T5924] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.409395][ T5924] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.418165][ T5924] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.446868][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.545'. [ 137.756071][ T5946] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid' [ 137.756071][ T5946] [ 137.958611][ T5953] device macvlan0 entered promiscuous mode [ 137.981144][ T5953] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 138.030332][ T5953] netlink: 'syz.4.555': attribute type 2 has an invalid length. [ 138.275570][ T5967] loop0: detected capacity change from 0 to 8 [ 138.291317][ T5966] loop4: detected capacity change from 0 to 2048 [ 138.372927][ T5966] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 138.417914][ T5970] SQUASHFS error: Failed to read block 0x2d7: -5 [ 138.437920][ T5970] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 138.453385][ T5966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.705879][ T5978] loop3: detected capacity change from 0 to 22 [ 138.745672][ T5978] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 138.772260][ T5978] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 139.152460][ T5993] netlink: 'syz.0.572': attribute type 11 has an invalid length. [ 139.752601][ T6012] loop4: detected capacity change from 0 to 256 [ 139.762096][ T6012] exfat: Deprecated parameter 'utf8' [ 139.794509][ T6012] exfat: Deprecated parameter 'utf8' [ 139.811772][ T6012] exfat: Deprecated parameter 'utf8' [ 139.817253][ T3599] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.858248][ T6012] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 140.014330][ T3599] usb 2-1: Using ep0 maxpacket: 32 [ 140.029984][ T3599] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 140.060078][ T3599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.068515][ T4316] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.091650][ T3599] usb 2-1: config 0 descriptor?? [ 140.131040][ T3599] gspca_main: sq930x-2.14.0 probing 041e:403c [ 140.263826][ T6024] loop4: detected capacity change from 0 to 1024 [ 140.286661][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.307272][ T6024] hfsplus: invalid attributes max_key_len 0 [ 140.311277][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.323124][ T6024] hfsplus: failed to load attributes file [ 140.384133][ T4316] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.413943][ T4316] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.423086][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.456526][ T4316] usb 1-1: config 0 descriptor?? [ 140.463945][ T4315] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.666558][ T4315] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 140.683897][ T4315] usb 3-1: config 0 has no interface number 0 [ 140.705964][ T4315] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.739951][ T4315] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 140.752417][ T6018] loop3: detected capacity change from 0 to 40427 [ 140.762331][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.789579][ T6018] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 140.808486][ T6028] loop4: detected capacity change from 0 to 32768 [ 140.810406][ T4315] usb 3-1: Product: syz [ 140.828557][ T6028] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.588 (6028) [ 140.838342][ T6018] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 140.854984][ T6018] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 140.856235][ T4315] usb 3-1: Manufacturer: syz [ 140.886305][ T4315] usb 3-1: SerialNumber: syz [ 140.888297][ T6018] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.903363][ T6028] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.913642][ T6028] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 140.922465][ T6028] BTRFS info (device loop4): use zlib compression, level 3 [ 140.929970][ T6028] BTRFS info (device loop4): metadata ratio 0 [ 140.936176][ T6028] BTRFS info (device loop4): turning on sync discard [ 140.938087][ T4315] usb 3-1: config 0 descriptor?? [ 140.942912][ T6028] BTRFS info (device loop4): using free space tree [ 140.990447][ T6028] BTRFS info (device loop4): enabling ssd optimizations [ 141.020757][ T26] audit: type=1800 audit(1785211534.167:12): pid=6028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.588" name="file0" dev="loop4" ino=258 res=0 errno=0 [ 141.083109][ T6018] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 141.092379][ T4316] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 141.100825][ T4315] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 141.132977][ T6018] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 141.146588][ T4316] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 141.230536][ T6018] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 141.230763][ T6018] F2FS-fs (loop3): Found FS corruption, run fsck to fix. [ 141.248070][ T3599] gspca_sq930x: ucbus_write failed -71 [ 141.253748][ T3599] sq930x: probe of 2-1:0.0 failed with error -71 [ 141.261956][ T3599] usb 2-1: USB disconnect, device number 6 [ 141.266294][ T4315] usb 1-1: USB disconnect, device number 8 [ 141.284849][ T4273] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.575842][ T6051] fido_id[6051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 141.850930][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 141.881026][ T127] usb 3-1: USB disconnect, device number 8 [ 141.911121][ T127] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 141.990433][ T6063] gadgetfs: bound to dummy_udc driver [ 142.108107][ T6068] loop0: detected capacity change from 0 to 8192 [ 142.141608][ T6068] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 142.155919][ T6068] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 142.165362][ T6068] REISERFS (device loop0): using ordered data mode [ 142.172014][ T6068] reiserfs: using flush barriers [ 142.179136][ T6068] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.204422][ T6068] REISERFS (device loop0): checking transaction log (loop0) [ 142.283925][ T4321] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 142.291821][ C0] gadgetfs: connected [ 142.298263][ T6062] gadgetfs: suspended from state 3 [ 142.303926][ T6062] gadgetfs: disconnected [ 142.342330][ T6068] REISERFS (device loop0): Using tea hash to sort names [ 142.366490][ T6068] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 142.801920][ T6085] device syzkaller1 entered promiscuous mode [ 144.053164][ T6115] loop1: detected capacity change from 0 to 64 [ 144.193231][ T6095] loop3: detected capacity change from 0 to 40427 [ 144.275477][ T6095] F2FS-fs (loop3): Found nat_bits in checkpoint [ 144.384013][ T4321] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 144.446785][ T6095] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.491962][ T6118] f2fs_ckpt-7:3: attempt to access beyond end of device [ 144.491962][ T6118] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.512408][ T6129] netlink: 'syz.1.617': attribute type 4 has an invalid length. [ 144.574059][ T4321] usb 3-1: Using ep0 maxpacket: 32 [ 144.591567][ T4321] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 144.596896][ T6126] loop4: detected capacity change from 0 to 8192 [ 144.636905][ T4321] usb 3-1: config 0 has no interface number 0 [ 144.643095][ T4321] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.664427][ T6126] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 144.684611][ T4321] usb 3-1: config 0 interface 85 has no altsetting 0 [ 144.698032][ T4321] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 144.708003][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.718778][ T4321] usb 3-1: Product: syz [ 144.724780][ T4321] usb 3-1: Manufacturer: syz [ 144.728582][ T6126] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 144.729385][ T4321] usb 3-1: SerialNumber: syz [ 144.747461][ T4321] usb 3-1: config 0 descriptor?? [ 144.774060][ T6126] REISERFS (device loop4): using ordered data mode [ 144.804003][ T6126] reiserfs: using flush barriers [ 144.827358][ T6126] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.958859][ T6126] REISERFS (device loop4): checking transaction log (loop4) [ 144.975359][ T6138] loop1: detected capacity change from 0 to 8 [ 145.209454][ T6126] REISERFS (device loop4): Using tea hash to sort names [ 145.224153][ T6126] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 145.359663][ T4321] appletouch 3-1:0.85: Geyser mode initialized. [ 145.373171][ T4321] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input18 [ 145.566885][ T3599] usb 3-1: USB disconnect, device number 9 [ 145.566916][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 145.596300][ T3599] appletouch 3-1:0.85: input: appletouch disconnected [ 145.768645][ T6156] loop3: detected capacity change from 0 to 2048 [ 145.868200][ T6156] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 145.952111][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 145.965840][ T6161] loop0: detected capacity change from 0 to 8192 [ 146.065817][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 146.162025][ T5319] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.266607][ T5319] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.397952][ T5319] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.543256][ T5319] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.651170][ T6168] team0: Port device gretap1 added [ 146.671244][ T6172] bridge0: port 3(team0) entered blocking state [ 146.693258][ T6172] bridge0: port 3(team0) entered disabled state [ 146.712036][ T6172] device team0 entered promiscuous mode [ 146.721801][ T6172] device team_slave_0 entered promiscuous mode [ 146.731445][ T6172] device team_slave_1 entered promiscuous mode [ 146.743117][ T6172] device gretap1 entered promiscuous mode [ 146.752714][ T6172] bridge0: port 3(team0) entered blocking state [ 146.759543][ T6172] bridge0: port 3(team0) entered forwarding state [ 147.180083][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.192064][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.202597][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.213196][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.221737][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.229137][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.573918][ T3599] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 147.736820][ T6201] loop0: detected capacity change from 0 to 256 [ 147.822914][ T3599] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.840588][ T6201] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 147.845633][ T3599] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 147.900299][ T6201] exFAT-fs (loop0): hint_cluster is invalid (17) [ 147.923172][ T3599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.966209][ T3599] usb 3-1: config 0 descriptor?? [ 148.159100][ T4321] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 148.366952][ T6185] chnl_net:caif_netlink_parms(): no params data found [ 148.371482][ T4321] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 148.391065][ T3599] hid-led 0003:0FC5:B080.000A: unknown main item tag 0x1 [ 148.402798][ T4321] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 148.411750][ T3599] hid-led 0003:0FC5:B080.000A: unknown main item tag 0x5 [ 148.439020][ T3599] hid-led 0003:0FC5:B080.000A: unknown main item tag 0x6 [ 148.446072][ T4321] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 148.446369][ T4321] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 148.483938][ T3599] hid-led 0003:0FC5:B080.000A: unknown main item tag 0x0 [ 148.506701][ T3599] hid-led 0003:0FC5:B080.000A: unknown main item tag 0x0 [ 148.508918][ T4321] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 148.523970][ T3599] hid-led 0003:0FC5:B080.000A: unknown main item tag 0x0 [ 148.545899][ T3599] hid-led 0003:0FC5:B080.000A: unknown main item tag 0x0 [ 148.555683][ T4321] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 148.566967][ T3599] hid-led 0003:0FC5:B080.000A: unknown main item tag 0x0 [ 148.583987][ T3599] hid-led 0003:0FC5:B080.000A: unknown main item tag 0x0 [ 148.592389][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.601317][ T3599] hid-led 0003:0FC5:B080.000A: unknown main item tag 0x0 [ 148.621101][ T4321] usb 4-1: Product: syz [ 148.630461][ T4321] usb 4-1: Manufacturer: syz [ 148.657898][ T4321] cdc_wdm 4-1:1.0: skipping garbage [ 148.672114][ T4321] cdc_wdm 4-1:1.0: skipping garbage [ 148.691121][ T4321] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 148.699919][ T4321] cdc_wdm 4-1:1.0: Unknown control protocol [ 148.702499][ T6225] loop1: detected capacity change from 0 to 512 [ 148.730126][ T6225] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.775990][ T6225] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.814159][ T6225] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.652: invalid block [ 148.824318][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.849745][ T6225] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.652: invalid indirect mapped block 4294967295 (level 1) [ 148.854053][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.882367][ T6225] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.652: invalid indirect mapped block 4294967295 (level 1) [ 148.883229][ T6185] device bridge_slave_0 entered promiscuous mode [ 148.913995][ T4521] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 148.921572][ T6225] EXT4-fs (loop1): 2 truncates cleaned up [ 148.921605][ T6225] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 148.992262][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.993705][ T6225] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.652: bg 0: block 5: invalid block bitmap [ 149.012119][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.013155][ T6185] device bridge_slave_1 entered promiscuous mode [ 149.043308][ T14] usb 3-1: USB disconnect, device number 10 [ 149.132633][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 149.189585][ T4521] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 149.209740][ T4521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.229483][ T4521] usb 1-1: Product: syz [ 149.233698][ T4521] usb 1-1: Manufacturer: syz [ 149.248975][ T4521] usb 1-1: SerialNumber: syz [ 149.260214][ T4521] usb 1-1: config 0 descriptor?? [ 149.293999][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 149.439468][ T6185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.451613][ T6185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.497590][ T3599] usb 1-1: USB disconnect, device number 10 [ 149.564055][ T6185] team0: Port device team_slave_0 added [ 149.583628][ T6185] team0: Port device team_slave_1 added [ 149.681715][ T4316] usb 4-1: USB disconnect, device number 6 [ 149.810443][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.817744][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.838170][ T6248] loop2: detected capacity change from 0 to 2048 [ 149.846467][ T6185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.862974][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.870385][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.953446][ T6185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.956789][ T6248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.012340][ T6253] netlink: 104 bytes leftover after parsing attributes in process `syz.1.657'. [ 150.023974][ T5319] device hsr_slave_0 left promiscuous mode [ 150.032305][ T5319] device hsr_slave_1 left promiscuous mode [ 150.056794][ T5319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.067473][ T5319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.112070][ T5319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.139726][ T5319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.165343][ T5319] device bridge_slave_1 left promiscuous mode [ 150.184466][ T5319] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.290857][ T5319] device bridge_slave_0 left promiscuous mode [ 150.314357][ T5319] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.452907][ T5319] device veth1_macvtap left promiscuous mode [ 150.477036][ T5319] device veth0_macvtap left promiscuous mode [ 150.496024][ T5319] device veth1_vlan left promiscuous mode [ 150.628051][ T6274] overlayfs: maximum fs stacking depth exceeded [ 150.938932][ T6282] loop1: detected capacity change from 0 to 512 [ 151.000587][ T6282] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 151.024746][ T6282] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.666: corrupted in-inode xattr [ 151.083555][ T6282] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.666: couldn't read orphan inode 15 (err -117) [ 151.118561][ T6282] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 151.200985][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 151.381192][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 151.683049][ T6300] loop1: detected capacity change from 0 to 512 [ 151.752143][ T6300] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 151.785137][ T6300] ext4 filesystem being mounted at /140/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.038512][ T4272] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 152.059874][ T4272] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 152.070156][ T4272] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz-executor: Failed to acquire dquot type 0 [ 152.138395][ T5319] team0 (unregistering): Port device team_slave_1 removed [ 152.152145][ T5392] EXT4-fs (loop1): unmounting filesystem. [ 152.206695][ T5319] team0 (unregistering): Port device team_slave_0 removed [ 152.270733][ T5319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.322695][ T5319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.644211][ T5319] bond0 (unregistering): Released all slaves [ 152.997795][ T6185] device hsr_slave_0 entered promiscuous mode [ 153.074312][ T6185] device hsr_slave_1 entered promiscuous mode [ 153.453956][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 154.409013][ T4316] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 154.430861][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.441764][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.450623][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.458502][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.466110][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.473394][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.525629][ T6185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.547872][ T6185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.567006][ T6185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 154.589400][ T6185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 154.612469][ T4316] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 154.625628][ T4316] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 154.652526][ T4316] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 154.694210][ T4316] usb 4-1: config 220 has no interface number 2 [ 154.700553][ T4316] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 154.737434][ T4316] usb 4-1: config 220 interface 0 has no altsetting 0 [ 154.745717][ T4316] usb 4-1: config 220 interface 76 has no altsetting 0 [ 154.752612][ T4316] usb 4-1: config 220 interface 1 has no altsetting 0 [ 154.795452][ T4316] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 154.824421][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.832606][ T4316] usb 4-1: Product: syz [ 154.841287][ T4316] usb 4-1: Manufacturer: syz [ 154.854327][ T4316] usb 4-1: SerialNumber: syz [ 155.016443][ T6185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.059125][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.080051][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.123002][ T6185] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.132603][ T4316] usb 4-1: selecting invalid altsetting 0 [ 155.150700][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.171031][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.183100][ T4316] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 155.208668][ T5308] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.215856][ T5308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.229787][ T4316] usb 4-1: No valid video chain found. [ 155.259157][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.276196][ T4316] usb 4-1: selecting invalid altsetting 0 [ 155.281986][ T4316] usbtest: probe of 4-1:220.1 failed with error -22 [ 155.312629][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.325805][ T4316] usb 4-1: USB disconnect, device number 7 [ 155.332916][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.355222][ T5308] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.362359][ T5308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.362851][ T6355] loop0: detected capacity change from 0 to 40427 [ 155.379032][ T6350] chnl_net:caif_netlink_parms(): no params data found [ 155.414132][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.503539][ T6355] F2FS-fs (loop0): Found nat_bits in checkpoint [ 155.534102][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 155.548960][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.578993][ T6355] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 155.587135][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.599859][ T6355] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 155.619125][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.630993][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.676678][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.693450][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.702189][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.762092][ T6380] loop2: detected capacity change from 0 to 128 [ 155.777787][ T6185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.830703][ T6185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.861125][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.875675][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.925098][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.950023][ T6380] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 155.962033][ T6380] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.982710][ T6380] fscrypt (loop2, inode 12): Unsupported encryption flags (0x0b) [ 156.026261][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.033390][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.062533][ T6350] device bridge_slave_0 entered promiscuous mode [ 156.078805][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.107505][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 156.113022][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.145435][ T6350] device bridge_slave_1 entered promiscuous mode [ 156.262390][ T6350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.303332][ T6350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.448020][ T6350] team0: Port device team_slave_0 added [ 156.476984][ T6350] team0: Port device team_slave_1 added [ 156.559622][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.580572][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 156.584056][ T6399] loop2: detected capacity change from 0 to 2048 [ 156.594281][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.657689][ T6383] loop3: detected capacity change from 0 to 32768 [ 156.736820][ T6383] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 156.817528][ T6350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.832521][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.847405][ T6383] (syz.3.697,6383,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 156.861538][ T6399] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 156.884724][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.922469][ T6399] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.950095][ T6350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.041156][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 157.059648][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.082858][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.145743][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 157.148674][ T6185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.205769][ T6415] loop0: detected capacity change from 0 to 128 [ 157.209135][ T6350] device hsr_slave_0 entered promiscuous mode [ 157.280374][ T6415] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 157.305817][ T6350] device hsr_slave_1 entered promiscuous mode [ 157.321057][ T6415] hpfs: filesystem error: improperly stopped [ 157.344170][ T6415] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 157.350944][ T6350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.356967][ T6415] hpfs: You really don't want any checks? You are crazy... [ 157.387464][ T6350] Cannot create hsr debugfs directory [ 157.462219][ T6415] hpfs: hpfs_map_sector(): read error [ 157.466434][ T6420] loop3: detected capacity change from 0 to 128 [ 157.500891][ T6415] hpfs: code page support is disabled [ 157.515685][ T6415] hpfs: hpfs_map_4sectors(): unaligned read [ 157.544559][ T6415] hpfs: hpfs_map_4sectors(): unaligned read [ 157.550511][ T6415] hpfs: filesystem error: unable to find root dir [ 157.594724][ T6420] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 157.677981][ T6420] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.771021][ T26] audit: type=1804 audit(1785211550.917:13): pid=6420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.704" name="/newroot/129/file1/file1" dev="loop3" ino=12 res=1 errno=0 [ 157.852653][ T6350] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 157.868919][ T26] audit: type=1800 audit(1785211550.917:14): pid=6420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.704" name="file2" dev="loop3" ino=13 res=0 errno=0 [ 157.891468][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 157.927414][ T6350] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 157.987887][ T6350] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 158.078477][ T6350] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 158.340713][ T6350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.387013][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.404984][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.428044][ T6350] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.441476][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.460820][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.481238][ T5315] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.488412][ T5315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.550888][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.582943][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.612928][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.641696][ T5315] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.648908][ T5315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.656501][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 158.665049][ T6422] loop2: detected capacity change from 0 to 32768 [ 158.708487][ T6449] loop0: detected capacity change from 0 to 256 [ 158.742436][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.771003][ T6422] XFS (loop2): Mounting V5 Filesystem [ 158.787841][ T6449] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 158.832087][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.881274][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.892973][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.941080][ T6422] XFS (loop2): Ending clean mount [ 158.975263][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.015378][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.044785][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.065944][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.086798][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.097370][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.108466][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.143633][ T4279] XFS (loop2): Unmounting Filesystem [ 159.156058][ T6350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.221942][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.257450][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.294594][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.340153][ T6185] device veth0_vlan entered promiscuous mode [ 159.360140][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.374843][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.395251][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.414263][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.460864][ T6185] device veth1_vlan entered promiscuous mode [ 159.541617][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 159.557325][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 159.576016][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.594440][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.656048][ T6185] device veth0_macvtap entered promiscuous mode [ 159.712566][ T6185] device veth1_macvtap entered promiscuous mode [ 159.791021][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.811111][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.838640][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.877714][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.908355][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.947063][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.967856][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.983102][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.000964][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.014405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.022671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.069161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.120381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.175752][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.219942][ T6490] CIFS mount error: No usable UNC path provided in device string! [ 160.219942][ T6490] [ 160.232296][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.233121][ T6490] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 160.289550][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.326269][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.364213][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.385127][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.408366][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.443531][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.478246][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.507177][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.534759][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.582949][ T6185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.607569][ T6185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.633630][ T6185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.664054][ T6185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.684993][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.692485][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.734009][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 160.865270][ T6350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.035069][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.043415][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.103574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.164940][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.178526][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.214430][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.428888][ T6531] loop4: detected capacity change from 0 to 512 [ 161.545225][ T6531] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 161.570184][ T6531] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.645100][ T6541] loop3: detected capacity change from 0 to 1024 [ 161.991386][ T6548] loop0: detected capacity change from 0 to 4096 [ 162.017405][ T6185] EXT4-fs (loop4): unmounting filesystem. [ 162.193551][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.212673][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.226557][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.234441][ T4321] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 162.234553][ T6548] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 162.280189][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.324355][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.360526][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.405907][ T6350] device veth0_vlan entered promiscuous mode [ 162.415660][ T4321] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 162.445616][ T4321] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.461640][ T6350] device veth1_vlan entered promiscuous mode [ 162.473205][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 162.474409][ T4321] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 162.511468][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 162.531905][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 162.539653][ T4321] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.545598][ T4321] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.562285][ T4321] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 162.574431][ T4321] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.582893][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.610243][ T4321] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.626592][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.643943][ T4321] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 162.661162][ T6350] device veth0_macvtap entered promiscuous mode [ 162.665502][ T4321] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.686790][ T6350] device veth1_macvtap entered promiscuous mode [ 162.700196][ T4321] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.716119][ T6568] netlink: 104 bytes leftover after parsing attributes in process `syz.0.736'. [ 162.725418][ T4321] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 162.735908][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.743990][ T4321] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.770859][ T4321] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.790099][ T4321] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 162.791427][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.814002][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 162.829070][ T4321] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.843299][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.843717][ T4321] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.863462][ T4321] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 162.869209][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.874474][ T4321] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.877799][ T4321] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.896149][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.903311][ T4321] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 162.921926][ T4321] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.929159][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.934665][ T4321] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.944542][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.962849][ T4321] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 162.964787][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.986115][ T4321] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.994106][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.004670][ T4321] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 163.012609][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.022896][ T4321] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 163.025500][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.036688][ T4321] usb 3-1: Product: syz [ 163.043476][ T4321] usb 3-1: Manufacturer: syz [ 163.052589][ T4321] usb 3-1: SerialNumber: syz [ 163.075802][ T4321] usb 3-1: config 0 descriptor?? [ 163.120150][ T4321] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 163.165271][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.185095][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.214847][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.232386][ T6577] loop4: detected capacity change from 0 to 2048 [ 163.238876][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.266065][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.277628][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.308919][ T6577] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.333945][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.353088][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.376838][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.388069][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 163.393068][ T4515] usb 3-1: USB disconnect, device number 11 [ 163.417191][ T4515] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 163.440273][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.479511][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.510729][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.544033][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.556843][ T6586] loop3: detected capacity change from 0 to 64 [ 163.574234][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.603467][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.631293][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.660976][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.687993][ T6350] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.709595][ T6350] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.762022][ T6350] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.799719][ T6350] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.875259][ T4271] hfs: node 4:3 still has 1 user(s)! [ 163.897434][ T6592] fuse: Invalid user_id [ 163.987027][ T5321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.039169][ T6596] loop3: detected capacity change from 0 to 512 [ 164.041718][ T5321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.077034][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.130378][ T5321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.150781][ T5321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.178901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.204229][ T6596] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 164.219485][ T6596] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.748: invalid block [ 164.240846][ T6596] EXT4-fs (loop3): 1 truncate cleaned up [ 164.263454][ T6596] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 164.480076][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 165.723700][ T6654] netlink: 'syz.5.771': attribute type 27 has an invalid length. [ 165.867569][ T6656] loop2: detected capacity change from 0 to 512 [ 165.877975][ T6654] bond0: (slave bond_slave_0): Releasing backup interface [ 165.957195][ T6658] netlink: 44 bytes leftover after parsing attributes in process `syz.3.773'. [ 165.970394][ T6656] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 166.067154][ T6666] loop3: detected capacity change from 0 to 128 [ 166.215921][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 166.391905][ T6675] loop4: detected capacity change from 0 to 512 [ 166.423254][ T6673] loop3: detected capacity change from 0 to 2048 [ 166.477481][ T6675] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 166.490486][ T6673] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.522528][ T6675] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.778052][ T6185] EXT4-fs (loop4): unmounting filesystem. [ 167.197397][ T6697] sctp: [Deprecated]: syz.3.785 (pid 6697) Use of int in max_burst socket option. [ 167.197397][ T6697] Use struct sctp_assoc_value instead [ 167.649141][ T6685] loop2: detected capacity change from 0 to 40427 [ 167.666216][ T6685] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 167.815680][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.792'. [ 168.054488][ T6717] loop0: detected capacity change from 0 to 256 [ 168.061662][ T6717] exfat: Deprecated parameter 'namecase' [ 168.147566][ T6717] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 168.382403][ T6724] loop2: detected capacity change from 0 to 1024 [ 168.544726][ T6724] hfsplus: can't free extent [ 168.803382][ T6736] loop5: detected capacity change from 0 to 128 [ 168.879745][ T6736] FAT-fs (loop5): error, invalid access to FAT (entry 0x0f1000ff) [ 168.924223][ T6736] FAT-fs (loop5): Filesystem has been set read-only [ 169.124119][ T6746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.808'. [ 169.373020][ T6758] overlayfs: missing 'lowerdir' [ 169.419739][ T6760] loop5: detected capacity change from 0 to 1024 [ 169.480629][ T6763] netlink: 56 bytes leftover after parsing attributes in process `syz.3.816'. [ 169.500086][ T4321] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 169.509586][ T6760] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 169.621328][ T6769] Invalid argument reading file caps for ./file0 [ 169.650000][ T6350] EXT4-fs (loop5): unmounting filesystem. [ 169.733795][ T6773] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 169.765098][ T4321] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.789199][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.831520][ T4321] usb 1-1: Product: syz [ 169.838305][ T4321] usb 1-1: Manufacturer: syz [ 169.842944][ T4321] usb 1-1: SerialNumber: syz [ 169.990696][ T6780] overlayfs: failed to verify origin (newroot/162, ino=868, err=-116) [ 170.030655][ T6780] overlayfs: failed to verify upper root origin [ 170.776164][ T6807] netlink: 36 bytes leftover after parsing attributes in process `syz.5.833'. [ 170.843933][ T6810] loop5: detected capacity change from 0 to 128 [ 170.876724][ T6810] capability: warning: `syz.5.834' uses 32-bit capabilities (legacy support in use) [ 170.887733][ T4321] cdc_ncm 1-1:1.0: bind() failure [ 170.898575][ T4321] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 170.901371][ T4515] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 170.905662][ T4321] cdc_ncm 1-1:1.1: bind() failure [ 170.938924][ T4321] usb 1-1: USB disconnect, device number 11 [ 171.110451][ T4515] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 171.130753][ T4515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.160598][ T4515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.176684][ T4515] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 171.211706][ T4515] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 171.229509][ T4515] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 171.239361][ T4515] usb 3-1: Manufacturer: syz [ 171.252576][ T4515] usb 3-1: config 0 descriptor?? [ 171.550902][ T6829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.842'. [ 171.668119][ T4515] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 171.695234][ T3599] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 171.711238][ T4515] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 171.727458][ T4515] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 171.892798][ T3599] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.937711][ T3599] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.973973][ T3599] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.000647][ T3599] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.037743][ T3599] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.058568][ T3599] usb 6-1: config 0 descriptor?? [ 172.089102][ T4515] usb 3-1: USB disconnect, device number 12 [ 172.337628][ T6851] using random self ethernet address [ 172.364207][ T6851] using random host ethernet address [ 172.430639][ T6835] loop0: detected capacity change from 0 to 40427 [ 172.436533][ T6856] loop4: detected capacity change from 0 to 64 [ 172.483657][ T6835] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 172.506066][ T3599] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 172.517017][ T6835] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 172.545812][ T3599] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 172.564515][ T6835] F2FS-fs (loop0): invalid crc value [ 172.569866][ T6835] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 172.673920][ T6835] F2FS-fs (loop0): Found nat_bits in checkpoint [ 173.020371][ T6835] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 173.066899][ T6866] loop4: detected capacity change from 0 to 32768 [ 173.073247][ T6835] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 173.129094][ T6866] XFS (loop4): Mounting V5 Filesystem [ 173.184527][ T6878] loop3: detected capacity change from 0 to 512 [ 173.188271][ T6866] XFS (loop4): Torn write (CRC failure) detected at log block 0x20. Truncating head block from 0x51. [ 173.240750][ T6835] syz.0.845: attempt to access beyond end of device [ 173.240750][ T6835] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 173.274027][ T6878] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 173.284421][ T6866] XFS (loop4): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:32). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 173.299895][ T6866] XFS (loop4): log mount/recovery failed: error -22 [ 173.305160][ T6835] syz.0.845: attempt to access beyond end of device [ 173.305160][ T6835] loop0: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 173.355325][ T6878] ext4 filesystem being mounted at /172/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.381987][ T6866] XFS (loop4): log mount failed [ 173.602522][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 173.836646][ C1] plantronics 0003:047F:FFFF.000C: usb_submit_urb(ctrl) failed: -1 [ 173.892134][ T6890] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 173.933272][ T6890] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 174.160376][ T6890] siw: device registration error -19 [ 174.536420][ T6907] loop0: detected capacity change from 0 to 256 [ 174.570020][ T6889] loop3: detected capacity change from 0 to 40427 [ 174.600553][ T6889] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 174.601243][ T3599] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 174.684072][ T6889] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 174.702528][ T14] usb 6-1: USB disconnect, device number 2 [ 174.716364][ T6889] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 174.756386][ T6889] F2FS-fs (loop3): Found nat_bits in checkpoint [ 174.806656][ T3599] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 174.834091][ T3599] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 174.883419][ T3599] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 174.914881][ T6889] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 174.930695][ T3599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.945198][ T6889] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 174.970562][ T3599] usb 5-1: Product: syz [ 174.983914][ T3599] usb 5-1: Manufacturer: syz [ 175.000517][ T3599] usb 5-1: SerialNumber: syz [ 175.023381][ T3599] usb 5-1: config 0 descriptor?? [ 175.038077][ T6920] loop0: detected capacity change from 0 to 1764 [ 175.039574][ T6899] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.075061][ T6899] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.325216][ T6899] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.332503][ T6899] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.605327][ T6933] netlink: 48 bytes leftover after parsing attributes in process `syz.3.874'. [ 175.825035][ T3599] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 176.226758][ T3599] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 176.294328][ T3599] usb 5-1: USB disconnect, device number 8 [ 176.423635][ T6965] loop2: detected capacity change from 0 to 2048 [ 176.491974][ T6965] EXT4-fs: Ignoring removed nobh option [ 176.604526][ T6965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 176.631270][ T6965] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.695230][ T4316] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 176.708032][ T26] audit: type=1800 audit(1785211569.857:15): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.877" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 176.822647][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 176.906011][ T4316] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 176.930442][ T4316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.951978][ T4316] usb 6-1: config 0 descriptor?? [ 176.963241][ T4316] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 177.033972][ T14] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 177.225126][ T14] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 177.240585][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.249043][ T14] usb 4-1: Product: syz [ 177.272834][ T14] usb 4-1: Manufacturer: syz [ 177.277949][ T14] usb 4-1: SerialNumber: syz [ 177.287361][ T14] usb 4-1: config 0 descriptor?? [ 177.394164][ T3599] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 177.438631][ T4321] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 177.505955][ T4521] usb 4-1: USB disconnect, device number 8 [ 177.592272][ T3599] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.603420][ T3599] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.617634][ T3599] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 177.633910][ T4321] usb 5-1: Using ep0 maxpacket: 8 [ 177.635381][ T3599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 177.665579][ T3599] usb 3-1: SerialNumber: syz [ 177.666954][ T4321] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.693340][ T4321] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.709433][ T4321] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.719879][ T4321] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.744376][ T4321] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.753463][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.777322][ T4316] gspca_stv06xx: I2C: Read error writing address: -71 [ 177.797580][ T4316] usb 6-1: USB disconnect, device number 3 [ 177.895438][ T3599] usb 3-1: 0:2 : does not exist [ 177.918033][ T3599] usb 3-1: USB disconnect, device number 13 [ 177.986745][ T4321] usb 5-1: GET_CAPABILITIES returned 0 [ 177.992464][ T4321] usbtmc 5-1:16.0: can't read capabilities [ 178.145867][ T4428] udevd[4428]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.198917][ T4321] usb 5-1: USB disconnect, device number 9 [ 178.817403][ T127] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 178.899008][ T7010] loop3: detected capacity change from 0 to 32768 [ 179.034016][ T127] usb 6-1: Using ep0 maxpacket: 8 [ 179.049952][ T127] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 179.088324][ T127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.113087][ T127] usb 6-1: Product: syz [ 179.130587][ T127] usb 6-1: Manufacturer: syz [ 179.150251][ T127] usb 6-1: SerialNumber: syz [ 179.583988][ T4321] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 179.607639][ T7017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.637883][ T7017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.806170][ T4321] usb 4-1: unable to get BOS descriptor or descriptor too short [ 179.824531][ T4321] usb 4-1: not running at top speed; connect to a high speed hub [ 179.873852][ T127] usb 6-1: clock source 0 is not valid, cannot use [ 179.897342][ T4321] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 179.940062][ T4321] usb 4-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 179.969995][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.024494][ T4321] usb 4-1: Product: syz [ 180.028735][ T4321] usb 4-1: Manufacturer: syz [ 180.033387][ T4321] usb 4-1: SerialNumber: syz [ 180.085382][ T127] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 180.100535][ T127] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 180.119693][ T127] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 180.147909][ T127] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 180.311399][ T127] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 180.324847][ T7048] bridge0: port 3(vlan2) entered blocking state [ 180.331280][ T7048] bridge0: port 3(vlan2) entered disabled state [ 180.363011][ T7048] device vlan2 entered promiscuous mode [ 180.383363][ T127] usb 6-1: USB disconnect, device number 4 [ 180.398415][ T4425] udevd[4425]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.403364][ T7048] device netdevsim0 entered promiscuous mode [ 180.472629][ T4321] usb 4-1: MIDIStreaming interface descriptor not found [ 180.604247][ T4321] usb 4-1: USB disconnect, device number 9 [ 180.716405][ T7058] input: syz1 as /devices/virtual/input/input19 [ 180.784030][ T7060] Context (ID=0x0) not attached to queue pair (handle=0x4db:0x0) [ 180.896496][ T4425] udevd[4425]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.371940][ T7070] loop4: detected capacity change from 0 to 4096 [ 181.490894][ T7070] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 181.788383][ T6185] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 181.949900][ T7089] device veth0 entered promiscuous mode [ 181.975559][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.926'. [ 181.997405][ T7089] device veth0 left promiscuous mode [ 182.149855][ T7066] loop2: detected capacity change from 0 to 32768 [ 182.324644][ T7066] XFS (loop2): Mounting V5 Filesystem [ 182.567013][ T7066] XFS (loop2): Ending clean mount [ 182.583951][ T4521] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 182.652291][ T7066] XFS (loop2): Quotacheck needed: Please wait. [ 182.774935][ T4521] usb 5-1: Using ep0 maxpacket: 8 [ 182.791711][ T4521] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 182.834405][ T4521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.842559][ T7066] XFS (loop2): Quotacheck: Done. [ 182.883968][ T4521] usb 5-1: Product: syz [ 182.888181][ T4521] usb 5-1: Manufacturer: syz [ 182.892852][ T4521] usb 5-1: SerialNumber: syz [ 182.916624][ T7066] XFS (loop2): User initiated shutdown received. [ 182.944417][ T7066] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 182.996864][ T7123] loop0: detected capacity change from 0 to 128 [ 183.000493][ T7066] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 183.105566][ T7123] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 183.208376][ T7123] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 183.271761][ T4279] XFS (loop2): Unmounting Filesystem [ 183.353277][ T7123] EXT4-fs (loop0): shut down requested (2) [ 183.387481][ T7105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.414145][ T7105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.535343][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 183.648002][ T4521] usb 5-1: clock source 0 is not valid, cannot use [ 183.850141][ T4521] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 183.873991][ T4521] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 183.905181][ T4521] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 183.935829][ T7133] loop0: detected capacity change from 0 to 128 [ 183.945872][ T4521] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 184.115700][ T4521] snd-usb-audio: probe of 5-1:1.2 failed with error -22 [ 184.193937][ T4521] usb 5-1: USB disconnect, device number 10 [ 184.205178][ T4425] udevd[4425]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.339580][ T7127] loop3: detected capacity change from 0 to 32768 [ 184.520542][ T7127] XFS (loop3): Mounting V5 Filesystem [ 184.563776][ T7127] XFS (loop3): Ending clean mount [ 184.833345][ T4271] XFS (loop3): Unmounting Filesystem [ 185.165259][ T7161] Core dump to core aborted: cannot preserve file permissions [ 185.442001][ T7163] loop0: detected capacity change from 0 to 512 [ 185.458801][ T7165] loop4: detected capacity change from 0 to 256 [ 185.505756][ T7165] exfat: Deprecated parameter 'namecase' [ 185.572261][ T7165] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 185.585904][ T7167] loop3: detected capacity change from 0 to 2048 [ 185.682016][ T7163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 185.714182][ T7163] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.730807][ T7167] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.835216][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 185.854954][ T26] audit: type=1804 audit(1785211578.997:16): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.944" name="/newroot/186/file1/file1" dev="loop3" ino=1415 res=1 errno=0 [ 185.983951][ T4316] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 186.328803][ T7179] loop3: detected capacity change from 0 to 512 [ 186.448862][ T7179] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 186.661912][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 186.894706][ T7177] loop4: detected capacity change from 0 to 131072 [ 186.919825][ T7177] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 186.928050][ T7177] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 186.938381][ T7177] F2FS-fs (loop4): invalid crc value [ 186.951679][ T7177] F2FS-fs (loop4): Found nat_bits in checkpoint [ 186.998384][ T7177] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 187.005554][ T7177] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 187.015707][ T4316] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.025965][ T4316] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.036186][ T4316] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 187.045511][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 187.054680][ T4316] usb 3-1: SerialNumber: syz [ 187.242497][ T7197] loop0: detected capacity change from 0 to 1024 [ 187.269147][ T4316] usb 3-1: 0:2 : does not exist [ 187.294161][ T7197] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 187.326941][ T4316] usb 3-1: USB disconnect, device number 14 [ 187.378981][ T7197] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 187.447037][ T7197] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz.0.957: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 187.548169][ T7197] EXT4-fs (loop0): no journal found [ 187.556260][ T7197] EXT4-fs (loop0): can't get journal size [ 187.577763][ T7197] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 187.585093][ T4429] udevd[4429]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.734117][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 188.070187][ T7209] device veth0 entered promiscuous mode [ 188.105161][ T7207] device veth0 left promiscuous mode [ 188.290065][ T7215] loop2: detected capacity change from 0 to 128 [ 188.362552][ T7215] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 188.445145][ T7218] loop0: detected capacity change from 0 to 1024 [ 188.464603][ T7218] EXT4-fs: Ignoring removed oldalloc option [ 188.470578][ T7218] EXT4-fs: Ignoring removed bh option [ 188.511406][ T7215] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.576600][ T7218] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 188.644349][ T7218] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.822548][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 188.898609][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 189.132813][ T7225] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 189.184096][ T7227] sctp: [Deprecated]: syz.5.969 (pid 7227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.184096][ T7227] Use struct sctp_sack_info instead [ 189.279401][ T7228] sctp: [Deprecated]: syz.5.969 (pid 7228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.279401][ T7228] Use struct sctp_sack_info instead [ 189.470731][ T7211] loop3: detected capacity change from 0 to 40427 [ 189.531345][ T7211] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value [ 189.595306][ T7211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.963'. [ 189.623891][ T7211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.963'. [ 189.674924][ T7239] loop2: detected capacity change from 0 to 1024 [ 189.722796][ T7239] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 189.804540][ T7239] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.835247][ T7237] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.975: lblock 0 mapped to illegal pblock 0 (length 1) [ 189.849469][ T7237] EXT4-fs (loop2): Remounting filesystem read-only [ 189.856562][ T7239] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.975: Freeing blocks not in datazone - block = 0, count = 1 [ 189.891752][ T7239] EXT4-fs (loop2): Remounting filesystem read-only [ 189.914852][ T4316] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 189.963432][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 190.124972][ T4316] usb 1-1: Using ep0 maxpacket: 32 [ 190.132227][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.161697][ T7246] loop3: detected capacity change from 0 to 8192 [ 190.178537][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.221231][ T4316] usb 1-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 190.235659][ T7246] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 190.275847][ T4316] usb 1-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 190.293294][ T7246] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 190.302733][ T4316] usb 1-1: Product: syz [ 190.314159][ T7246] REISERFS (device loop3): using ordered data mode [ 190.320733][ T7246] reiserfs: using flush barriers [ 190.347748][ T4316] usb 1-1: Manufacturer: syz [ 190.365315][ T7246] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.414329][ T4316] usb 1-1: config 0 descriptor?? [ 190.421601][ T7246] REISERFS (device loop3): checking transaction log (loop3) [ 190.577078][ T4321] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 190.609830][ T7236] loop5: detected capacity change from 0 to 40427 [ 190.619386][ T7254] __sock_release: fasync list not empty! [ 190.658654][ T7236] F2FS-fs (loop5): invalid crc value [ 190.699455][ T7236] F2FS-fs (loop5): Found nat_bits in checkpoint [ 190.758942][ T7246] REISERFS (device loop3): Using tea hash to sort names [ 190.777858][ T7246] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 190.790764][ T4321] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 190.820029][ T4321] usb 3-1: config 0 has no interface number 0 [ 190.847341][ T4321] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 190.856750][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.863356][ T4316] hid-generic 0003:25DD:F3D2.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 190.876807][ T4321] usb 3-1: Product: syz [ 190.876827][ T4321] usb 3-1: Manufacturer: syz [ 190.876843][ T4321] usb 3-1: SerialNumber: syz [ 190.911038][ T7236] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 190.930319][ T4321] usb 3-1: config 0 descriptor?? [ 191.010594][ T7236] syz.5.973: attempt to access beyond end of device [ 191.010594][ T7236] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 191.026095][ T7236] syz.5.973: attempt to access beyond end of device [ 191.026095][ T7236] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 191.110818][ T7264] syz.5.973: attempt to access beyond end of device [ 191.110818][ T7264] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 191.186694][ T127] usb 1-1: USB disconnect, device number 12 [ 191.273158][ T6350] syz-executor: attempt to access beyond end of device [ 191.273158][ T6350] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.284554][ T7262] fido_id[7262]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 191.381612][ T7267] IPv6: addrconf: prefix option has invalid lifetime [ 191.792008][ T4321] asix 3-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 91 [ 192.002629][ T4321] usb 3-1: USB disconnect, device number 15 [ 192.103956][ T4316] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 192.114497][ T4317] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 192.233955][ T4521] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 192.295513][ T4316] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.309536][ T4316] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 192.320283][ T4317] usb 5-1: Using ep0 maxpacket: 16 [ 192.326104][ T4316] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 192.337065][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.346831][ T4317] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.357062][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.373448][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 192.383682][ T7273] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 192.398011][ T4317] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 192.410187][ T4317] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.432969][ T4317] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 192.445080][ T4521] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 192.458184][ T4521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.466482][ T4317] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 192.475398][ T4317] usb 5-1: Manufacturer: syz [ 192.503608][ T4521] usb 4-1: config 0 descriptor?? [ 192.511438][ T4521] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 192.525143][ T4317] usb 5-1: config 0 descriptor?? [ 192.662705][ T4351] usb 1-1: USB disconnect, device number 13 [ 192.834032][ T4317] rc_core: IR keymap rc-hauppauge not found [ 192.840590][ T4317] Registered IR keymap rc-empty [ 192.847191][ T4317] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.854050][ T4321] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 192.900086][ T4317] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.917313][ T4521] cpia1 4-1:0.0: unexpected state after lo power cmd: 01 [ 192.954683][ T4317] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 192.992313][ T4317] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 193.015473][ T4317] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.028270][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.995'. [ 193.038843][ T4321] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 193.050181][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.056320][ T4317] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.061462][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.079066][ T7292] device dummy0 entered promiscuous mode [ 193.084839][ T7292] device macsec1 entered promiscuous mode [ 193.090708][ T4321] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 193.104488][ T4317] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.121186][ T7292] device dummy0 left promiscuous mode [ 193.122423][ T4321] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 193.143934][ T4321] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 193.152178][ T4321] usb 3-1: Manufacturer: syz [ 193.154616][ T4317] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.163421][ T4321] usb 3-1: config 0 descriptor?? [ 193.194057][ T4317] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.234134][ T4317] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.284002][ T4317] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.324514][ T4317] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.356516][ T4317] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.402029][ T4317] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.435083][ T4317] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 193.461030][ T4317] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 193.476870][ T4317] usb 5-1: USB disconnect, device number 11 [ 193.533379][ T4521] gspca_cpia1: usb_control_msg 05, error -71 [ 193.545742][ T4521] cpia1 4-1:0.0: unexpected systemstate: 01 [ 193.581984][ T4521] usb 4-1: USB disconnect, device number 10 [ 193.582512][ T4321] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 193.607763][ T4321] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 193.627936][ T4321] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 193.977751][ T4321] usb 3-1: USB disconnect, device number 16 [ 194.107965][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.114406][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.273993][ T4317] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 194.304122][ T7315] loop4: detected capacity change from 0 to 1024 [ 194.372297][ T7315] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 194.429868][ T7322] loop3: detected capacity change from 0 to 1024 [ 194.444636][ T7322] EXT4-fs: inline encryption not supported [ 194.473999][ T4317] usb 1-1: Using ep0 maxpacket: 16 [ 194.480793][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.503078][ T7322] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.514672][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.531167][ T4317] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.544783][ T4317] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 194.554215][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.557110][ T7322] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 194.578038][ T4317] usb 1-1: config 0 descriptor?? [ 194.655094][ T7322] EXT4-fs (loop3): shut down requested (2) [ 194.758599][ T7322] EXT4-fs (loop3): unmounting filesystem. [ 194.802237][ T6185] EXT4-fs (loop4): unmounting filesystem. [ 194.945249][ T7326] loop2: detected capacity change from 0 to 4096 [ 195.054434][ T4317] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000F/input/input21 [ 195.149902][ T4317] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 195.348014][ T14] usb 1-1: USB disconnect, device number 14 [ 195.372001][ T7341] loop5: detected capacity change from 0 to 1024 [ 195.431702][ T7341] EXT4-fs: Ignoring removed orlov option [ 195.513627][ T7343] loop3: detected capacity change from 0 to 512 [ 195.515430][ T7339] fido_id[7339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 195.553376][ T7343] EXT4-fs: Ignoring removed orlov option [ 195.584522][ T7341] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 195.605727][ T7348] loop4: detected capacity change from 0 to 64 [ 195.651678][ T7343] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 195.718142][ T7343] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #16: comm syz.3.1014: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 195.787895][ T7352] loop2: detected capacity change from 0 to 8 [ 195.820770][ T7352] SQUASHFS error: xz decompression failed, data probably corrupt [ 195.828800][ T7352] SQUASHFS error: Failed to read block 0x108: -5 [ 195.836193][ T7352] SQUASHFS error: Unable to read metadata cache entry [106] [ 195.843692][ T7352] SQUASHFS error: Unable to read inode 0x11f [ 195.872955][ T6350] EXT4-fs (loop5): unmounting filesystem. [ 195.905234][ T7343] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1014: couldn't read orphan inode 16 (err -117) [ 195.990769][ T7343] EXT4-fs (loop3): 1 orphan inode deleted [ 196.000672][ T7343] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 196.173947][ T4280] Bluetooth: hci2: command 0x0406 tx timeout [ 196.180038][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 196.234647][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 196.354137][ T4317] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 196.376265][ T7367] Invalid argument reading file caps for ./file0 [ 196.528940][ T7373] loop2: detected capacity change from 0 to 1024 [ 196.553086][ T7373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.564242][ T4317] usb 1-1: Using ep0 maxpacket: 32 [ 196.571020][ T4317] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 196.585691][ T4317] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 196.594573][ T4317] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 196.609201][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.638455][ T4317] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 196.679371][ T4317] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 196.730453][ T4317] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 196.748357][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.770426][ T7379] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1030'. [ 196.780378][ T4317] usb 1-1: config 0 descriptor?? [ 196.797636][ T7379] device gretap0 entered promiscuous mode [ 196.851698][ T7379] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1030'. [ 196.861519][ T7379] 0ªî{X¹¦: renamed from gretap0 [ 196.889596][ T7379] device 30ªî{X¹¦ left promiscuous mode [ 196.905734][ T7379] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 196.919714][ T7385] loop3: detected capacity change from 0 to 128 [ 196.934330][ T4515] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 196.967673][ T7385] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 196.986363][ T7385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.999168][ T4317] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 197.156156][ T4515] usb 5-1: Using ep0 maxpacket: 32 [ 197.163039][ T4515] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 197.172854][ T7389] pimreg: tun_chr_ioctl cmd 1077974060 [ 197.200854][ T4515] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.217584][ T7389] pimreg: tun_chr_ioctl cmd 1074812117 [ 197.241479][ T4515] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 197.258562][ T4515] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.276233][ T4317] usb 1-1: USB disconnect, device number 15 [ 197.297599][ T4515] usb 5-1: config 0 descriptor?? [ 197.308279][ T4317] usblp0: removed [ 197.894089][ T4317] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 198.084459][ T4515] corsair-cpro 0003:1B1C:0C10.0010: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 198.119406][ T4317] usb 4-1: not running at top speed; connect to a high speed hub [ 198.134237][ T4317] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 198.186599][ T4317] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 198.224537][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.236016][ T4317] usb 4-1: Product: syz [ 198.240614][ T4317] usb 4-1: Manufacturer: syz [ 198.246725][ T4317] usb 4-1: SerialNumber: syz [ 198.270805][ T4317] oti6858 4-1:1.0: oti6858 converter detected [ 198.277813][ T4515] corsair-cpro: probe of 0003:1B1C:0C10.0010 failed with error -71 [ 198.299639][ T4317] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 198.299974][ T7413] loop5: detected capacity change from 0 to 4096 [ 198.442642][ T7413] ntfs3: loop5: ino=5, "/" directory corrupted [ 198.511117][ T4317] usb 5-1: USB disconnect, device number 12 [ 198.629425][ T7419] fido_id[7419]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 198.915996][ T4317] usb 4-1: USB disconnect, device number 11 [ 198.953245][ T4317] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 198.962292][ T4317] oti6858 4-1:1.0: device disconnected [ 198.964228][ T4351] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 198.995961][ T7435] CIFS mount error: No usable UNC path provided in device string! [ 198.995961][ T7435] [ 199.016517][ T7435] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 199.155660][ T4351] usb 6-1: config 0 has no interfaces? [ 199.159534][ T7439] loop2: detected capacity change from 0 to 512 [ 199.161170][ T4351] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.176954][ T4351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.195271][ T4351] usb 6-1: config 0 descriptor?? [ 199.267197][ T7439] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1053: invalid indirect mapped block 4294967295 (level 1) [ 199.285051][ T7439] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1053: invalid indirect mapped block 4294967295 (level 1) [ 199.300057][ T7439] EXT4-fs (loop2): 2 truncates cleaned up [ 199.306009][ T7439] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 199.433185][ T4351] usb 6-1: USB disconnect, device number 5 [ 200.202955][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 200.552579][ T7463] loop3: detected capacity change from 0 to 256 [ 200.583641][ T7463] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 200.635411][ T7448] loop5: detected capacity change from 0 to 32768 [ 200.667082][ T7463] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.714219][ T14] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 200.723176][ T7448] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 200.935409][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 200.953643][ T14] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 200.972706][ T14] usb 3-1: config 0 has no interface number 0 [ 200.974471][ T6350] ocfs2: Unmounting device (7,5) on (node local) [ 200.986302][ T14] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.017222][ T14] usb 3-1: config 0 interface 85 has no altsetting 0 [ 201.039792][ T14] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 201.052579][ T7476] loop0: detected capacity change from 0 to 512 [ 201.066804][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.095601][ T7476] EXT4-fs: Ignoring removed i_version option [ 201.117294][ T14] usb 3-1: Product: syz [ 201.136791][ T7476] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 201.145613][ T14] usb 3-1: Manufacturer: syz [ 201.165831][ T14] usb 3-1: SerialNumber: syz [ 201.167113][ T7479] loop5: detected capacity change from 0 to 1024 [ 201.192307][ T14] usb 3-1: config 0 descriptor?? [ 201.237179][ T7479] EXT4-fs: Ignoring removed orlov option [ 201.243655][ T7476] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 201.271142][ T7476] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.298340][ T7479] EXT4-fs: Ignoring removed nobh option [ 201.341144][ T7479] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 201.429226][ T7484] loop4: detected capacity change from 0 to 1024 [ 201.608560][ T6350] EXT4-fs (loop5): unmounting filesystem. [ 201.663577][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 201.820949][ T14] appletouch 3-1:0.85: Geyser mode initialized. [ 201.835070][ T14] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input22 [ 201.906863][ T7510] loop5: detected capacity change from 0 to 128 [ 202.027284][ T7512] loop4: detected capacity change from 0 to 512 [ 202.129624][ T4321] usb 3-1: USB disconnect, device number 17 [ 202.135692][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 202.185498][ T7512] EXT4-fs: Ignoring removed bh option [ 202.298989][ T7512] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 202.308177][ T7512] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.308679][ T7514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1074'. [ 202.542041][ T4321] appletouch 3-1:0.85: input: appletouch disconnected [ 202.647960][ T6185] EXT4-fs (loop4): unmounting filesystem. [ 202.812301][ T7526] input: syz0 as /devices/virtual/input/input23 [ 203.040630][ T7535] loop4: detected capacity change from 0 to 256 [ 203.081615][ T7538] loop3: detected capacity change from 0 to 512 [ 203.095285][ T7538] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.169863][ T7535] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 203.176131][ T7538] EXT4-fs (loop3): 1 truncate cleaned up [ 203.214122][ T7538] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 203.304193][ T7538] EXT4-fs (loop3): shut down requested (2) [ 203.382084][ T26] audit: type=1800 audit(1785211596.527:17): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1084" name="file2" dev="loop4" ino=1048627 res=0 errno=0 [ 203.415645][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 203.427233][ T7535] exFAT-fs (loop4): hint_cluster is invalid (17) [ 203.474319][ T7535] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff) [ 203.512461][ T7535] exFAT-fs (loop4): Filesystem has been set read-only [ 203.536291][ T7535] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff) [ 203.559217][ T7547] loop0: detected capacity change from 0 to 2048 [ 203.677474][ T7547] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 203.716821][ T26] audit: type=1800 audit(1785211596.867:18): pid=7547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1091" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 203.814947][ T7553] EXT4-fs: Ignoring removed i_version option [ 203.867448][ T7553] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 203.888813][ T7553] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.890782][ T7537] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1085 (7537) [ 203.918178][ T7537] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 203.928558][ T7537] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 203.937322][ T7537] BTRFS info (device loop5): using free space tree [ 203.966481][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 203.993278][ T5317] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 204.166402][ T5317] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 204.217413][ T5317] EXT4-fs (loop0): This should not happen!! Data will be lost [ 204.217413][ T5317] [ 204.239549][ T7575] program syz.4.1095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.249551][ T7537] BTRFS info (device loop5): enabling ssd optimizations [ 204.253895][ T5317] EXT4-fs (loop0): Total free blocks count 0 [ 204.273715][ T5317] EXT4-fs (loop0): Free/Dirty block details [ 204.313904][ T5317] EXT4-fs (loop0): free_blocks=4096 [ 204.324140][ T5317] EXT4-fs (loop0): dirty_blocks=48 [ 204.374461][ T5317] EXT4-fs (loop0): Block reservation details [ 204.380498][ T5317] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 204.457517][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 204.574627][ T6350] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 204.726593][ T7545] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 204.803900][ T7545] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 204.812230][ T7545] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 204.885338][ T7545] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 204.970975][ T7545] F2FS-fs (loop2): invalid crc value [ 205.013266][ T7545] F2FS-fs (loop2): Found nat_bits in checkpoint [ 205.134427][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 205.149233][ T7584] EXT4-fs: inline encryption not supported [ 205.182410][ T7545] F2FS-fs (loop2): Start checkpoint disabled! [ 205.243252][ T7584] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 205.276174][ T7584] EXT4-fs (loop4): Test dummy encryption mode enabled [ 205.298381][ T7545] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 205.334332][ T7545] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 205.388134][ T7584] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 205.440503][ T7584] System zones: 0-5 [ 205.466274][ T7584] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 205.478964][ T7545] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x12a/0x910 [ 205.747000][ T6185] EXT4-fs (loop4): unmounting filesystem. [ 205.846042][ T7609] set_capacity_and_notify: 4 callbacks suppressed [ 205.846059][ T7609] loop5: detected capacity change from 0 to 1024 [ 205.954400][ T7609] hfsplus: can't free extent [ 205.987949][ T5281] kworker/u4:8: attempt to access beyond end of device [ 205.987949][ T5281] loop2: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 206.087371][ T7615] loop3: detected capacity change from 0 to 512 [ 206.631827][ T7627] loop3: detected capacity change from 0 to 128 [ 206.977486][ T7642] Invalid ELF header len 8 [ 207.058670][ T7646] loop3: detected capacity change from 0 to 64 [ 207.269660][ T7654] loop2: detected capacity change from 0 to 2048 [ 207.364009][ T7654] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 207.475742][ T11] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 207.490510][ T7589] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 207.501566][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 207.519212][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 207.519212][ T11] [ 207.536000][ T11] EXT4-fs (loop2): Total free blocks count 0 [ 207.542014][ T11] EXT4-fs (loop2): Free/Dirty block details [ 207.571966][ T11] EXT4-fs (loop2): free_blocks=4096 [ 207.588836][ T11] EXT4-fs (loop2): dirty_blocks=16 [ 207.594145][ T11] EXT4-fs (loop2): Block reservation details [ 207.633932][ T11] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 207.651853][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 207.674026][ T7589] usb 5-1: Using ep0 maxpacket: 32 [ 207.690864][ T7589] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.734007][ T7589] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.779006][ T7666] loop2: detected capacity change from 0 to 512 [ 207.794001][ T7589] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 207.803086][ T7589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.855806][ T7589] usb 5-1: config 0 descriptor?? [ 207.871822][ T7666] EXT4-fs (loop2): 1 truncate cleaned up [ 207.877875][ T7666] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 207.940971][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 208.126647][ T7675] loop2: detected capacity change from 0 to 1024 [ 208.233948][ T4351] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 208.282612][ T7589] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 208.436059][ T4351] usb 6-1: Using ep0 maxpacket: 8 [ 208.449479][ T4351] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 208.499812][ T4351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.510860][ T4351] usb 6-1: Product: syz [ 208.520022][ T4351] usb 6-1: Manufacturer: syz [ 208.558535][ T4317] usb 5-1: USB disconnect, device number 13 [ 208.558579][ T4351] usb 6-1: SerialNumber: syz [ 208.591735][ T7683] fido_id[7683]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 208.620895][ T4351] usb 6-1: config 0 descriptor?? [ 208.851086][ T4351] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 209.431929][ T7705] netlink: 'syz.0.1154': attribute type 4 has an invalid length. [ 209.473964][ T4351] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 209.502327][ T4351] usb 6-1: USB disconnect, device number 6 [ 209.635113][ T7711] loop3: detected capacity change from 0 to 1024 [ 209.868978][ T7711] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 209.923554][ T7715] loop2: detected capacity change from 0 to 32768 [ 209.955504][ T7715] XFS (loop2): Mounting V5 Filesystem [ 210.095790][ T7715] XFS (loop2): Torn write (CRC failure) detected at log block 0x20. Truncating head block from 0x51. [ 210.127357][ T7715] XFS (loop2): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:32). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 210.142030][ T7715] XFS (loop2): log mount/recovery failed: error -22 [ 210.173078][ T7715] XFS (loop2): log mount failed [ 210.216429][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 210.354707][ T7713] loop4: detected capacity change from 0 to 40427 [ 210.383134][ T7713] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 210.439874][ T7713] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 210.463337][ T7713] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 210.529759][ T7713] F2FS-fs (loop4): Found nat_bits in checkpoint [ 210.660703][ T7713] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 210.680379][ T7713] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 210.704002][ T4351] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 210.714062][ T4515] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 210.903962][ T4515] usb 4-1: Using ep0 maxpacket: 8 [ 210.909333][ T4351] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.914931][ T4515] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 210.940361][ T4351] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.946876][ T4515] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.968546][ T4515] usb 4-1: Product: syz [ 210.972756][ T4515] usb 4-1: Manufacturer: syz [ 210.975362][ T4351] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 210.981128][ T4515] usb 4-1: SerialNumber: syz [ 211.017736][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 211.050142][ T4351] usb 1-1: SerialNumber: syz [ 211.123311][ T7729] set_capacity_and_notify: 1 callbacks suppressed [ 211.123328][ T7729] loop5: detected capacity change from 0 to 40427 [ 211.163265][ T7729] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 211.185911][ T7729] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 211.229541][ T7729] F2FS-fs (loop5): invalid crc value [ 211.238990][ T7729] F2FS-fs (loop5): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 211.270902][ T7729] F2FS-fs (loop5): Found nat_bits in checkpoint [ 211.344460][ T7729] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 211.359401][ T7729] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 211.442576][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.445772][ T7729] syz.5.1148: attempt to access beyond end of device [ 211.445772][ T7729] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 211.460712][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.469207][ T7729] syz.5.1148: attempt to access beyond end of device [ 211.469207][ T7729] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 211.776254][ T4515] usb 4-1: clock source 0 is not valid, cannot use [ 211.778838][ T7751] loop4: detected capacity change from 0 to 16 [ 211.824363][ T7751] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 211.832307][ T7751] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 211.894992][ T7751] erofs: (device loop4): erofs_init_device: empty device tag @ pos 0 [ 211.977540][ T4515] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 212.004532][ T4515] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 212.035535][ T4515] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 212.038526][ T4351] usb 1-1: 0:2 : does not exist [ 212.105632][ T4515] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 212.131239][ T4351] usb 1-1: USB disconnect, device number 16 [ 212.189595][ T4515] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 212.212012][ T4515] usb 4-1: USB disconnect, device number 12 [ 212.239686][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 212.403918][ T4316] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 212.516392][ T7767] loop2: detected capacity change from 0 to 2048 [ 212.538673][ T7767] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 212.555336][ T7767] UDF-fs: Scanning with blocksize 512 failed [ 212.569879][ T7767] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.612359][ T7751] orangefs_mount: mount request failed with -4 [ 212.620511][ T4316] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 212.659131][ T4316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.693996][ T4316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.719759][ T4316] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.756944][ T4351] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 212.764530][ T4316] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.764562][ T4316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.782128][ T4316] usb 6-1: config 0 descriptor?? [ 212.951740][ T7775] loop2: detected capacity change from 0 to 128 [ 213.051179][ T4351] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 213.073986][ T4351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.082248][ T4351] usb 1-1: Product: syz [ 213.100419][ T4351] usb 1-1: Manufacturer: syz [ 213.105332][ T4351] usb 1-1: SerialNumber: syz [ 213.136187][ T4351] usb 1-1: config 0 descriptor?? [ 213.202412][ T4428] udevd[4428]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.203626][ T4316] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd [ 213.243625][ T4316] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 213.298971][ T4316] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 213.417644][ T4351] usb 1-1: USB disconnect, device number 17 [ 213.491011][ T4316] usb 6-1: USB disconnect, device number 7 [ 213.638945][ T7785] fido_id[7785]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 213.743729][ T7789] loop2: detected capacity change from 0 to 4096 [ 213.786395][ T7789] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 213.905783][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 213.931932][ T7797] loop3: detected capacity change from 0 to 128 [ 213.985380][ T7797] EXT4-fs (loop3): Test dummy encryption mode enabled [ 214.058901][ T7797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 214.097390][ T7797] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 214.320328][ T7807] loop4: detected capacity change from 0 to 512 [ 214.334228][ T4515] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 214.403343][ T4428] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 214.524089][ T4515] usb 3-1: Using ep0 maxpacket: 8 [ 214.544499][ T7814] loop6: detected capacity change from 0 to 6 [ 214.551270][ T4515] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 214.587854][ T4515] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.610258][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.619705][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.637803][ T4515] usb 3-1: Product: syz [ 214.642006][ T4515] usb 3-1: Manufacturer: syz [ 214.654178][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.663363][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.674805][ T5321] loop: Write error at byte offset 3, length 1024. [ 214.693859][ T4515] usb 3-1: SerialNumber: syz [ 214.712289][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 2 prio class 2 [ 214.721831][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 2 prio class 2 [ 214.732203][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.741367][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.750084][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.759318][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.790124][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.799365][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.809798][ T7814] ldm_validate_partition_table(): Disk read failed. [ 214.826512][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.835761][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.848176][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.857400][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.865703][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.905909][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.909777][ T7797] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 214.918260][ T7814] Dev loop6: unable to read RDB block 0 [ 214.943881][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 214.954380][ T7814] loop6: unable to read partition table [ 214.960217][ T7814] loop6: partition table beyond EOD, truncated [ 215.003987][ T7814] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 215.071021][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 215.215245][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.237892][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.474967][ T4515] usb 3-1: clock source 0 is not valid, cannot use [ 215.500801][ T7846] loop3: detected capacity change from 0 to 128 [ 215.679888][ T4515] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 215.692508][ T4515] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 215.703654][ T4515] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 215.716614][ T4515] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 215.861877][ T4515] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 215.905823][ T4515] usb 3-1: USB disconnect, device number 18 [ 215.908168][ T4425] udevd[4425]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.274930][ T26] audit: type=1326 audit(1785211609.417:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.5.1210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8bb9de99 code=0x7ffc0000 [ 216.330465][ T26] audit: type=1326 audit(1785211609.457:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.5.1210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8bb9de99 code=0x7ffc0000 [ 216.418332][ T7874] device veth0 entered promiscuous mode [ 216.435202][ T7873] device veth0 left promiscuous mode [ 216.453272][ T26] audit: type=1326 audit(1785211609.457:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.5.1210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8bb9de99 code=0x7ffc0000 [ 216.577432][ T26] audit: type=1326 audit(1785211609.457:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.5.1210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fdf8bb9de99 code=0x7ffc0000 [ 216.659683][ T7880] loop0: detected capacity change from 0 to 128 [ 216.662540][ T26] audit: type=1326 audit(1785211609.457:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.5.1210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8bb9de99 code=0x7ffc0000 [ 216.724253][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'. [ 216.730210][ T7884] loop5: detected capacity change from 0 to 1764 [ 216.771955][ T26] audit: type=1326 audit(1785211609.457:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.5.1210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8bb9de99 code=0x7ffc0000 [ 216.878427][ T26] audit: type=1326 audit(1785211609.457:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.5.1210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8bb9de99 code=0x7ffc0000 [ 216.955407][ T26] audit: type=1326 audit(1785211609.457:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.5.1210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fdf8bb9de99 code=0x7ffc0000 [ 217.070481][ T26] audit: type=1326 audit(1785211609.457:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.5.1210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8bb9de99 code=0x7ffc0000 [ 217.160126][ T7870] loop3: detected capacity change from 0 to 32768 [ 217.169550][ T26] audit: type=1326 audit(1785211609.457:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.5.1210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8bb9de99 code=0x7ffc0000 [ 217.235833][ T7894] block nbd5: shutting down sockets [ 217.336937][ T7899] loop0: detected capacity change from 0 to 256 [ 217.571507][ T7903] loop2: detected capacity change from 0 to 1024 [ 217.622280][ T7907] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 217.630374][ T7903] EXT4-fs: Ignoring removed bh option [ 217.790552][ T7903] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 217.932321][ T7915] loop3: detected capacity change from 0 to 512 [ 217.966486][ T7915] EXT4-fs: inline encryption not supported [ 217.999558][ T7917] loop4: detected capacity change from 0 to 128 [ 218.009481][ T7915] EXT4-fs: Ignoring removed oldalloc option [ 218.052030][ T7915] EXT4-fs (loop3): Test dummy encryption mode enabled [ 218.067411][ T7915] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.108797][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 218.124849][ T7915] EXT4-fs (loop3): 1 truncate cleaned up [ 218.146746][ T7915] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 218.240675][ T7920] Core dump to core aborted: cannot preserve file permissions [ 218.306420][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 218.608988][ T7931] overlayfs: failed to verify origin (newroot/97, ino=536, err=-116) [ 218.634571][ T7931] overlayfs: failed to verify upper root origin [ 218.649319][ T7930] [ 218.651681][ T7930] ====================================================== [ 218.658706][ T7930] WARNING: possible circular locking dependency detected [ 218.665741][ T7930] syzkaller #0 Not tainted [ 218.670158][ T7930] ------------------------------------------------------ [ 218.677176][ T7930] syz.5.1233/7930 is trying to acquire lock: [ 218.683141][ T7930] ffff888024b9e2d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 218.692797][ T7930] [ 218.692797][ T7930] but task is already holding lock: [ 218.700155][ T7930] ffff8880278d88e0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 218.711040][ T7930] [ 218.711040][ T7930] which lock already depends on the new lock. [ 218.711040][ T7930] [ 218.721430][ T7930] [ 218.721430][ T7930] the existing dependency chain (in reverse order) is: [ 218.730430][ T7930] [ 218.730430][ T7930] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 218.739111][ T7930] down_write+0x36/0x60 [ 218.743812][ T7930] process_measurement+0x3af/0x1c40 [ 218.749539][ T7930] ima_file_mmap+0xe9/0x140 [ 218.754559][ T7930] __se_sys_remap_file_pages+0x55a/0x7b0 [ 218.760710][ T7930] do_syscall_64+0x4c/0xa0 [ 218.765643][ T7930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.772051][ T7930] [ 218.772051][ T7930] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 218.779598][ T7930] __lock_acquire+0x2d18/0x7c40 [ 218.784967][ T7930] lock_acquire+0x1bb/0x4a0 [ 218.789986][ T7930] down_read_killable+0x4c/0x340 [ 218.795434][ T7930] mmap_read_lock_killable+0x1d/0x60 [ 218.801227][ T7930] lock_mm_and_find_vma+0x2b1/0x2f0 [ 218.806937][ T7930] do_user_addr_fault+0x2e8/0xb20 [ 218.812482][ T7930] exc_page_fault+0x60/0x100 [ 218.817581][ T7930] asm_exc_page_fault+0x22/0x30 [ 218.822946][ T7930] fault_in_readable+0x13e/0x1f0 [ 218.828397][ T7930] fault_in_iov_iter_readable+0xbf/0x2f0 [ 218.834545][ T7930] generic_perform_write+0x1f1/0x5c0 [ 218.840348][ T7930] __generic_file_write_iter+0x148/0x2a0 [ 218.846496][ T7930] generic_file_write_iter+0xab/0x2e0 [ 218.852382][ T7930] vfs_write+0x482/0x9a0 [ 218.857139][ T7930] ksys_write+0x14d/0x260 [ 218.861985][ T7930] do_syscall_64+0x4c/0xa0 [ 218.866923][ T7930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.873337][ T7930] [ 218.873337][ T7930] other info that might help us debug this: [ 218.873337][ T7930] [ 218.883562][ T7930] Possible unsafe locking scenario: [ 218.883562][ T7930] [ 218.891001][ T7930] CPU0 CPU1 [ 218.896351][ T7930] ---- ---- [ 218.901700][ T7930] lock(&sb->s_type->i_mutex_key#13); [ 218.907157][ T7930] lock(&mm->mmap_lock); [ 218.913999][ T7930] lock(&sb->s_type->i_mutex_key#13); [ 218.921969][ T7930] lock(&mm->mmap_lock); [ 218.926290][ T7930] [ 218.926290][ T7930] *** DEADLOCK *** [ 218.926290][ T7930] [ 218.934416][ T7930] 3 locks held by syz.5.1233/7930: [ 218.939513][ T7930] #0: ffff888028325268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 218.948742][ T7930] #1: ffff88801ef9c460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 218.957625][ T7930] #2: ffff8880278d88e0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 218.968940][ T7930] [ 218.968940][ T7930] stack backtrace: [ 218.974823][ T7930] CPU: 1 PID: 7930 Comm: syz.5.1233 Not tainted syzkaller #0 [ 218.982199][ T7930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 218.992254][ T7930] Call Trace: [ 218.995520][ T7930] [ 218.998443][ T7930] dump_stack_lvl+0x188/0x24e [ 219.003117][ T7930] ? load_image+0x410/0x410 [ 219.007615][ T7930] ? show_regs_print_info+0x12/0x12 [ 219.012819][ T7930] ? print_circular_bug+0x12b/0x1a0 [ 219.018015][ T7930] check_noncircular+0x296/0x330 [ 219.022949][ T7930] ? add_chain_block+0x9b0/0x9b0 [ 219.027885][ T7930] ? lockdep_lock+0xf1/0x1f0 [ 219.032475][ T7930] ? _find_first_zero_bit+0xd2/0x100 [ 219.037773][ T7930] __lock_acquire+0x2d18/0x7c40 [ 219.042634][ T7930] ? verify_lock_unused+0x140/0x140 [ 219.047839][ T7930] ? verify_lock_unused+0x140/0x140 [ 219.053050][ T7930] ? verify_lock_unused+0x140/0x140 [ 219.058330][ T7930] lock_acquire+0x1bb/0x4a0 [ 219.062832][ T7930] ? mmap_read_lock_killable+0x1d/0x60 [ 219.068291][ T7930] ? read_lock_is_recursive+0x10/0x10 [ 219.073660][ T7930] ? cmp_ex_search+0x1a/0x70 [ 219.078248][ T7930] ? bsearch+0x86/0xb0 [ 219.082312][ T7930] ? fault_in_readable+0x13e/0x1f0 [ 219.087420][ T7930] ? search_extable+0x8c/0xd0 [ 219.092109][ T7930] ? trim_init_extable+0x3b0/0x3b0 [ 219.097232][ T7930] ? mmap_read_lock_killable+0x1d/0x60 [ 219.102694][ T7930] down_read_killable+0x4c/0x340 [ 219.107633][ T7930] ? mmap_read_lock_killable+0x1d/0x60 [ 219.113096][ T7930] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 219.119100][ T7930] mmap_read_lock_killable+0x1d/0x60 [ 219.124393][ T7930] lock_mm_and_find_vma+0x2b1/0x2f0 [ 219.129591][ T7930] do_user_addr_fault+0x2e8/0xb20 [ 219.134612][ T7930] ? _raw_spin_unlock_irq+0x1f/0x40 [ 219.139809][ T7930] ? lockdep_hardirqs_on+0x94/0x140 [ 219.145004][ T7930] exc_page_fault+0x60/0x100 [ 219.149596][ T7930] asm_exc_page_fault+0x22/0x30 [ 219.154461][ T7930] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 219.160266][ T7930] Code: a8 53 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 87 53 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 6a 53 [ 219.179877][ T7930] RSP: 0018:ffffc9000c5a7ab0 EFLAGS: 00050287 [ 219.185936][ T7930] RAX: ffffffff81bde069 RBX: 0000000000001000 RCX: 0000000000080000 [ 219.193899][ T7930] RDX: ffffc9000ea01000 RSI: 0000000000028972 RDI: 0000000000028973 [ 219.201857][ T7930] RBP: 0000000000000000 R08: ffff88802ccf1e00 R09: 0000000000000002 [ 219.209819][ T7930] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000152000 [ 219.217779][ T7930] R13: dffffc0000000000 R14: 0000200000150100 R15: 0000200000151000 [ 219.225744][ T7930] ? fault_in_readable+0x139/0x1f0 [ 219.230857][ T7930] fault_in_iov_iter_readable+0xbf/0x2f0 [ 219.236484][ T7930] generic_perform_write+0x1f1/0x5c0 [ 219.241769][ T7930] ? generic_file_direct_write+0x330/0x330 [ 219.247578][ T7930] ? __file_remove_privs+0x5f0/0x5f0 [ 219.252859][ T7930] ? rwsem_write_trylock+0x135/0x1c0 [ 219.258141][ T7930] ? clear_nonspinnable+0x60/0x60 [ 219.263157][ T7930] ? generic_write_checks_count+0x363/0x440 [ 219.269045][ T7930] __generic_file_write_iter+0x148/0x2a0 [ 219.274676][ T7930] generic_file_write_iter+0xab/0x2e0 [ 219.280043][ T7930] vfs_write+0x482/0x9a0 [ 219.284288][ T7930] ? file_end_write+0x250/0x250 [ 219.289137][ T7930] ? __fget_files+0x3fc/0x460 [ 219.293813][ T7930] ? __fdget_pos+0x2ae/0x360 [ 219.298397][ T7930] ? ksys_write+0x70/0x260 [ 219.302818][ T7930] ksys_write+0x14d/0x260 [ 219.307149][ T7930] ? __ia32_sys_read+0x80/0x80 [ 219.311927][ T7930] ? lockdep_hardirqs_on+0x94/0x140 [ 219.317138][ T7930] do_syscall_64+0x4c/0xa0 [ 219.321563][ T7930] ? clear_bhb_loop+0x60/0xb0 [ 219.326245][ T7930] ? clear_bhb_loop+0x60/0xb0 [ 219.330936][ T7930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.336843][ T7930] RIP: 0033:0x7fdf8bb9de99 [ 219.341299][ T7930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.360903][ T7930] RSP: 002b:00007fdf8c9af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.369316][ T7930] RAX: ffffffffffffffda RBX: 00007fdf8be25fa0 RCX: 00007fdf8bb9de99 [ 219.377284][ T7930] RDX: 00000000fffffd9d RSI: 0000200000000100 RDI: 0000000000000003 [ 219.385249][ T7930] RBP: 00007fdf8bc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 219.393216][ T7930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.401182][ T7930] R13: 00007fdf8be26038 R14: 00007fdf8be25fa0 R15: 00007fff08cc9ce8 [ 219.409154][ T7930] [ 219.504723][ T4515] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 219.696234][ T4515] usb 4-1: Using ep0 maxpacket: 8 [ 219.704449][ T4515] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 219.713515][ T4515] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.722042][ T4515] usb 4-1: Product: syz [ 219.726258][ T4515] usb 4-1: Manufacturer: syz [ 219.730843][ T4515] usb 4-1: SerialNumber: syz [ 219.736649][ T4515] usb 4-1: config 0 descriptor?? [ 219.944744][ T4515] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 220.747494][ T4515] usb write operation failed. (-71) [ 220.754246][ T4515] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 220.765360][ T4515] dvbdev: DVB: registering new adapter (Terratec H7) [ 220.772422][ T4515] usb 4-1: media controller created [ 220.778018][ T4515] usb read operation failed. (-71) [ 220.783353][ T4515] usb write operation failed. (-71) [ 220.790874][ T4515] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 220.801943][ T4515] usb 4-1: USB disconnect, device number 13