last executing test programs: 33.814456045s ago: executing program 2 (id=328): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 33.122427881s ago: executing program 2 (id=333): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'macromanian'}}, {}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@keep_last_dots}, {}, {@dmask={'dmask', 0x3d, 0x10000}}, {@keep_last_dots}, {@namecase}, {@discard}, {@utf8}, {@sys_tz}, {@sys_tz}]}, 0x1, 0x1539, &(0x7f00000049c0)="$eJzs3AucTtX6OPDnWWvtMTTxNsllWGs9mzeJZZIklyS5JEklSXJLSExyJCExhCQNSUguQxJDSC4Tk9zv91tCkjRJEpJbsv6fCT+nU+ff75z65XzOPN/PZ3+sx9pr7We/z/vOXnsz7zedB9doWLNqfSKCPwTP/5EMALEA0B8A8gBAAABl48vGZ/XnlJj8xw7C/lwPpl3uDNjlxPXP3rj+2RvXP3vj+mdvXP/sjeufvXH9szeuP2PZ2cYpBa/iLftu/Pw/O+Pr/3+RzFKjv1hd6pouADG/7oz7zSFc/+yN6//f6Eq4cOH9XVz/7I3rn13FXu4E2H8A/vxnBzn+aQ/XP3vj+jOWnV3u58+Xe4PIn/AaKPjzcjqc83xh/qrzZ4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/gKn/CUKAC62L3dejDHGGGOMMcYY+/P4HJc7A8YYY4wxxhhjjP3fQxAgQUEAMZADYiEn5AIBAFdCbsgDEbgK4uFqyAvXQD7IDwWgICRAISgMGgxYIAihCBSFKFwLxeC6n58mlICS4KAUJMINUBpuhDJwE5SFm6Ec3ALloQJUhEpwK1SG26AK3A5V4Q6oBtWhBtSEO6EW3AW14W6oA/dAXbgX7oP7oR48APXhQWgAD0FDeBgawSPQGJpAU2gGzf+t8c9Bd3geekBPSIZe0BtegD7QF/rBi9AfXoIB8DIMhFcgBQbBYHgVhsBrMBReh2EwHEbAGzAS3oRRMBrGwFhIhXEwHt6CCfA2TIR3YBJMhjSYAlPhXZgG02EGvAcz4X2YBbNhDsyFdPgA5sF8yIAPYQF8BAthESyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXb4GHbAJ7ATdsFu+BT2wGf/4viT/zC+CwICChSoUGEMxmAsxmIuzIVxGIe5MTdGMILxGI95MS/mw3xYAAtgAiZgYSyMBg0SEhbBIhjFKBbDYlgci2MJLIEOHSZiIpbGG7EMlsGyWBbLYTksjxWwAlbCSlgZK2MVrIJVsSpWw2pYA2vgnXgn9sLaWBvrYB2si3UvPp7C+lgfG2ADbIgNsRE2wsbYGJtiU2yOzbEFtsCW2BJbY2tsg22wLbbFJEzC9tgeO2AH7IgdsRN2ws7YGbtgV+ya+VwOwOfxeeyJ1UQv7I29sQ+m5OiHL+KL+BIOwJfxZXwFU3AQDsZX8VV8DYfiCRyGw3EEjsDK4k0chaORxFhMxVQcj+NxAk7ArETfwcmYhlNwKk7FaTgdp+N7OBPfx/dxNs7GuZiO6TgP52MGZuACPIkLcREuxiW4FJfhUlyBK3EFrsY1uBrX4TrcgBtwE27CLbgFt+E2/BgVAH6Cu3AXpuAe3IN7cS/uw324H/djJmbiATyAB/EgHsJDeBgP4xE8isfwKB7H43gCT+IpPIVn8AyexWcSvmrw8fWrUkBkUUKJGBEjYkWsyCVyiTgRJ3KL3CIiIiJexIu8Iq/IJ/KJAqKASBAJorAoLIwwgkQYAwAiKqKimCgmioviooQoIZxwIlEkitKitCgjyoiy4mZRTtwiyosKopWrJCqJyqK1qyJuF1VFVVFNVBc1RE1RU9QStURtUVvUEXVEXVFX3CfuF/VEL+yHD4qsyjQUg7CRGIyNRRMhL/wEayGGYkvRSrQWj4vhOAzbihYuSTwp2otR2EH8TYzGp0UnMRY7i2dFF9FVdBPPie6ipesheoqJ2Ev0FpOxj+gr+okXxTSsLt7DmTlriFdEihgkBotXxVx8TQwVr4thYrgYId4QI8WbYpQYLcaIsSJVjBPjxVtignhbTBTviEliskgTU8RU8a6YJqaLGeI9MVO8L2aJ2WKOmCvSxQdinpgvMsSHYoH4SCwUi8RisUQsFcvEcrFCrBSrxGqxRqwV68R6sUFsFJvEZhELW8U2sV18LHaIT8ROsUvsFp+KPeIzsVd8LvaJL8R+8aXIFF+JA+JrcVB8Iw6Jb8Vh8Z04Io6KY+J7cVz8IE6Ik+KUOC3OiB/FWfGTOCe8AIlSSCmVDGSMzCFjZU6ZS14h42Rw4dW9SsbLq2VeeY3MJ/PLArKgTJCFZGGppZFWkgxlEVlURuW1spi8ThaX18sSsqR0spRMlDfI0vJGWUbeJMvKm2U5eYssLyvIirKSvFVWlrdJiJw/RjVZXdaQNeWdMhnukrXl3bKOvEfWlffK++T9sp58QNaXD8oG8iHZUD4sG8lHZGPZRDaVzWRz+ahsIR+TLWUr2Vo+LtvIJ2Rb2U4mySdle+kvvEWelp3kM7KzfFZ2kV1lN/mTPCe97CF7SugFsrd8QfaRfWW/WACQL8kB8mU5UL4iU+QgOVi+KofI1+RQ+bocJofLEfINOVK+KUfJ0XKMHCtT5Tg5Xr4lJ8i35UT5jpwkJ8s0OUX2k/1/nmmGlL87/q3fGD/w56NvkBvlJrlZbpFb5Ta5XX4sd8gdcqfcKXfL3XKP3CP3yr1yn9wn98v9MlNmygPygDwoD8pD8pA8LA/LI/KoPC2/l8flD/KEPClPytPyjDwjz154DUChEkoqpQIVo3KoWJVT5VJXqDh1pcqt8qiIukrFq6tVXnWNyqfyqwKqoEpQhVRhpZVRVpEKVRFVVEXVtXjhDaNKqJLKqVIqUd3wr4xXxdR1qri6/hfjL+aX/E/ya66aqxaqhWqpWqrWqrVqo9qotqqtSlJJqr1qrzqoDqqj6qg6qU6qs+qc9X5Q3VQ31V11Vz1UD5WsklVv9YLqo/qqfupF1V+9pAaoAWqgGqhSVIoarAarIWqIGqqGqmFqmBqhRqiRaqQapUapMWqMSlWparwaryaoCWqimqgmqUkqTaWpqWqqmqamqRlqhpqpZqpZapaao+aodJWu5ql5KkNlqAVqgVqoFqlFaolaopapZWqFWqFWqVVqjVqj1ql1aqHaqDaqzWqz2qq2qu1qu9qhdqidYqfarXarPWqP2qv2qn1qn9qv9qtMlakOqAPqoDqoDqlD6rA6rI6oI+qYOqaOq+PqhDqhTqlT6ow6o86qs+qcOpe17AtEIAIVqCAmiAlig9ggV5AriAvigtxB7iASRIL4ID7IG1wT5AvyBwWCgkFCUCgoHOjABDYQF4oeDa4NigXXBcWD64MSQcnABaWCxOCGoHRwY1AmuCkoG9wclAtuCcoHFYKKQaXg1qBycFtQJbg9qBrcEVQLqgc1gprBnUGt4K6gdnB3UCe4J6gb3BvcF9wf1AseCOoHDwYNgoeChsHDQaPgkaBx0CRoGjQLmv+p83t/Iv9jrofuqZN1L91bv6D76L66n35R99cv6QH6ZT1Qv6JT9CA9WL+qh+jX9FD9uh6mh+s88IYeqd/Uo/RoPUaP1al6nB6v39IT9Nt6on5HT9KTdZqeoqfqd/U0PV3PwPf0TP2+nqVn6zl6rk7XH+h5er7O0B/qBfojvVAv0ov1Er1UL9PL9Qq9Uq/Sq/UavVav0+v1Br1Rb9Kb9Ra9VW/T2/XHeof+RO/Uu/Ru/aneoz/Te/Xnep/+Qu/XX+pM/ZU+oL/WB/U3+pD+Vh/W3+kj+qg+pr/Xx/UP+oQ+qU/p0/qM/lGf1T/pc9pnLe6zLu9GGWViTIyJNbEml8ll4kycyW1ym4iJmHgTb/KavCafyWcKmAImwSSYwqawyUKGTBFTxERN1BQzxUxxU9yUMCWMM84kmkRT2pQ2ZUwZU9aUNeVMOVPelDcVTUVzq7nV3GZuM7eb280d5g5T3VQ3NU1NU8vUMrVNbVPH1DF1TV1zn7nP1DP1TH1T3zQwDUxD09A0Mo1MY9PYNDVNTXPT3LQwLUxL09K0Nq1NG9PGtDVtTZJJMu1Ne9PBdDAdTUfTyXQynU1n08V0Md1MN9PddDc9TA+TbJJNb9Pb9DF9TD/Tz/Q3/c0AM8AMNANNikkxg81gM8QMMUPNUDPMDDcjshaq5k0zyow2Y8xYk2pSzXgz3kwwE8xEM9FMMpNMmkkzU81UM81MMzPMDDPTzDSzzCwzx8wx6SbdzDPzTIbJMAvMArPQLDSLzWKz1Cw1y81ys9KsNKvNarMW1pr1Zr3ZaDaazWaz2Wq2mu1mu9lhdpidZqfZbXabPWaP2Wv2mn1mn9lv9ptMk2kOmAPmoDloDplD5rA5bI6YI+aYOWaOm+PmhDlhTplT5ozJf+F66U2szWlz2StsnL3S5rZ57D/GBWxBm2AL2cJW23w2/y9iY60tbq+3JWxJ62wpm2hv+FVc3lawFW0le6utbG+zVX4V17J32dr2blvH3mNr2jt/Ede199qs1Uk9RADbxDawzWxD+7BtZB+xjW0T29Q2s23sE7atbWeT7JO2vX3qV/E8O9+utKvsarvG7rS77Cl72h6039gz9kfbw/a0/e1LdoB92Q60r9gUO+hX8Qj7hh1p37Sj7Gg7xo79VTzJTrZpdoqdat+10+z0X8Xp9gM702bYWXa2nWPn/hxn5ZRhP7QL7Ed2oQ1gsV1il9pldrldcTFXn8eus+vtBrvDfmI32y12q91mt19cCNtddrf91O6xn9kD9mu7z35h99tDNtN+9XOcdX6H7Lf2sP3OHrFH7TH7vT1uf1AXR2ed+/f2J3vOeguEBCRJUUAxlINiKSfloisojq6k3JSHInQVxdPVlJeuoXyUnwpQQUqgQlSYNBmyRBRSESpKUbqWLqZXgkqSo1KUSDdQabqRytBNVJZupnJ0C5WnClSRKtGtVJluoyp0O1WlO6gaVacaVJPupFp0F9Wmu6kO3UN16V66j+6nevQA1acHqQE9RA3pYWpEj1BjakJNqRk1p0epBT1GLakVtabHqQ09QW2pHSXRk9SenqIO9DfqSE9TJ3qGOtOz1IW6Ujd6jrrT89SDelIy9aLe9AL1ob7Uj16k/vQSDaCXaSC9Qik0iAbTqzSEXqOh9DoNo+E0gt6gkfQmjaLRNIbGUiqNo/H0Fk2gt2kivUOTaDKl0RSaSu/SNJpOM+g9mknv0yyaTXNoLqXTBzSP5lMGfUgL6CNaSItoMS2hpbSMltMKWkmraDWtobW0jtbTBtpIm2gzbaGttI2208e0gz6hnbSLdtOntIc+I6TPaR99QfvpS8qkr+gAfU0H6Rs6RN/6nvQdHaGjdIy+p+P0A52gk3SKTtMZ+pHO0k90jjxBiKEIZajCIIwJc4SxYc4wV3hFGBdeGeYO84SR8KowPrw6zBteE+YL84cFwoJhQlgoLBzq0IQ2pDAMi4RFw2h4bVgsvC4sHl4flghLhi4sFSaGN4SlwxvDMuFNYdnw5rBceEtYPqwQPnxPpfDWsHJ4W1glvD2sGt4RVgurhzXCmuGdYa3wrrB2eHdYJ7wnLBPeG94X3h/WCx8I64cPhg3Ch8KG4cNho/CRsHHYJGwaNgubh4+GLcLHwpZhq7B1+HjYJnwibBu2C5PCJ8P24VM/9987/5/3J4e9wt7hC+ELofd3yznRudH06AfRedH50Yzoh9EF0Y+iC6OLooujS6JLo8uiy6Mroiujq6Kro2uia6ProuujG6Le18wBDp1w0ikXuBiXw8W6nC6Xu8LFuStdbpfHRdxVLt5d7fK6a1w+l98VcAVdgivkCjvtjLOOXOiKuKIu6q51xdx1rri73pVwJZ1zpVyia+aau+auhXvMtXStXGv3uHvcPeGecO1cO/eka++ech3c31xH97Tr5J5xz7hnXRfX1XVzz7nublzu85/JZNfb9XZ9XB/Xz/Vz/V1/N8ANcAPdQJfiUtxgN9gNcUPcUDfUDXPD3Ag3wo10I90oN8qNcWNcqkt14914N8FNcBPdRDfJTXJpLs1NdVPdNDfNVZ5+/iiz3Cw3x81x6S7dzXNZa8YMt8AtcAvdQrfYLXZL3VK33C13K91Kt9qtdmvdWrferXcb3Ua32W12W91Wt91tdzvcDrfT5zk/qdvj9rq9bp/b5/a7L12m+8odcF+7g+4bd8h96w6779wRd9Qdc9+74+4Hd8KddKfcaXfG/ejOup/cOeddamRcZHzkrciEyNuRiZF3smaNpEWmRKZG3o1Mi0yPzIi8F5kZeT8yKzI7MicyN5Ie+SAyLzI/khH5MLIg8lFkYWRRZHFkSWRpZFnE+0KbQ1/EF/VRf60v5q/zxf31voQv6Z0v5RP9Db60v9GX8Tf5sv5mX87f4sv7Cr6if8Q39k18U9/MN/eP+hb+Md/St/Kt/eO+jX/Ct/XtfJJ/0rf3T/kO/m++o3/ad/LP+M7+Wd/Fd/Xd/HO+u3/e9/A9fbLv5Xv7F3wf39f38y/6/v4lP8C/7Af6V3yKH+QH+1f9EP+aH+pf98P8cD8i5g0/8uItMoz1qX6cH+/f8hP8236if8dP8pN9mp/ip/p3/TQ/3c/w7/mZ/n0/y8/2c/xcn+4/8PP8fJ/hP0TAXzxU9sv9Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/cd+h//E7/S7/G7/qd/jP/N7/ed+n//C7/df+kz/lT/gv/YH/Tf+kP/WH/bf+SP+qD/mv/fH/Q/+hD/pT/nT/oz/0Z/1P/lz539nTf3hx+GMMcYYY//lxl1qil/2nF/Q9fqNMeLvdu4NAFduKZj59/1ZK8q1+c63+4qENhEAeLJn5wcvbtWqJScnX9h3oYSg6Oysdfel8TFwKV4EreEJSIJWUPo38+8rup6h35k/ejNArr8bEwuX4kvzfw6Ayb8x/6OPj5hXLjwV//+ZfzZA8aKXxuSES/EiaP3zmrQVlPkn+edv8Tv55/wiFaDl342Jg0vxpfwT4TF4CpJ+sSdjjDHGGGOMMXZeX1Gx48X7z4v/4/O37s8T/udfVuIgB1yKf+/+nDHGGGOMMcYYY5ff0127tXs0KalVx3+9UeX391H/uwljfqurEfy7iXHj32p4D/A/hQOAPzghQFZD/pVnsekvOVbKhY/OP3YtPe0D6NYO/gNK+Wc0LvMPJsYYY4wxxtif7tKi/5d/z79IyRhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM/XX+6He8wf/iW/ou9zkyxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjl9v/CwAA//9zU+4h") syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000000c0)=ANY=[@ANYBLOB='umask=00000000000000000000011,namecase=1,errors=continue,allow_utime=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard,umask=00000000000000000005676,keep_last_dots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp865,dmask=00000000000000000000001,discard,uid=', @ANYRESHEX=0xee00, @ANYBLOB="969043c7ff1774ebb8582e00"], 0x80, 0x1500, &(0x7f0000000580)="$eJzs3AuYzlXXMPC99t5/xjTpbpLDsNdef+402CZJckjIIUmSJMkpITFJkpAYckoakpBzksMQksM0Jo3z+ZBz0uSRJklCcgr7u/T0vp736Xnevvd7+j7f9cz6Xde+Zq/5z1r32rPmmvt/39c1832PkXWa1a3ZhIjEvwT++iFFCBEjhBgqhLhBCBEIISrEV4i/cj2fgpR/7UHYn+vRtGvdAbuWeP65G88/d+P55248/9yN55+78fxzN55/7sbzZyw32z6nyI28cu/i9/9zM37+/zeSU3bS1xvL3tzzf5DC88/deP65G88/d+P55248/9yN5//vr8Z/c43nn7vx/BnLza71+8+8ru261j9/jDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZyh3P+Ki2E+I/9te6LMcYYY4wxxhhjfx6f91p3wBhjjDHGGGOMsf/7QEihhBaByCPyihiRT8SK60ScuF7kFzeIiLhRxIubRAFxsygoConCoohIEEVFMWEECitIhKK4KCGi4hZRUtwqEkUpUVqUEU6UFUniNlFO3C7KiztEBXGnqCjuEpVEZVFFVBV3i2riHlFd1BA1xb2ilqgt6oi64j5RT9wv6osHRAPxoGgoHhKNxMOisXhENBGPiqbiMdFMPC6aiydEC9FStBKtRZv/o/yXRR/xiugr+okU0V8MEK+KgWKQGCyGiKHiNTFMvC6GizdEqhghRoo3xSjxlhgt3hZjxFgxTrwjxosJYqKYJCaLKWKqeFdME++J6eJ9MUPMFLPEbJEm5oi54gMxT8wXC8SHYqH4SCwSi8USsVSki49FhlgmMsUnYrn4VGSJFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2i8/EDrFT7BK7xR6xV+wTn4v94gtxQHwpssVX/8P8s3+X3xMECJAgQYOGPJAHYiAGYiEW4iAO8kN+iEAE4iEeCkABKAgFoTAUhgRIgGJQDBAQCAiKQ3GIQhRKQklIhEQoDaXBgYMkSIJycDuUh/JQASpARagIlaAyVIaqUBWqQTWoDtWhJtSEWlAL6kAduA/ug/uhPtSHBtAAGkJDaASNoDE0hibQBJpCU2gGzaA5NIcW0AJaQStoA22gLbSFdtAOOkAH6AgdoRN0gmRIhi7QBbpCV+gG3aA7dIce0AN6Qi/oBS/Dy/AKvAL9oJbsDwNgAAyEgTAYhsAQeA2GwevwOrwBqTACRsKb8Ca8BaPhDIyBsTAOxkE1OQEmwiQgOQWmwlSYBtNgOkyHGTATZsJsSIM5MBfmwjyYD/PhQ1gIH8FHsBgWw1JIh3TIgGWQCZmwHM5CFqyAlbAKVsMaWA3rYD2sg42wCTbCFtgC22AbfAafwU7YCbthN+yFvfA5fA5fwBeQCtmQDQfhIByCQ3AYDkMO5MAROAJH4Sgcg2NwHI7DCTgJp+AknIbTcAbOwjk4BxfgAlyEFxO+bbq31IZUIa/QUss8Mo+MkTEyVsbKOBkn88v8MiIjMl7GT1FCyIKyoCwsC8sEmSCLyWISJUqSoSwui8cIIWRJWVImykRZWpaWTjqZJJNkOVlOlpflZQV5p6wo75KVZGXZ3lWVVWU12cFVlzVkTVlT1pK1ZR1ZV9aV9WQ9WV/Wlw1kA9lQNpSN5MOysewPg+FReWUyzeQIaC5HQgvZUraSreVb8KRsK0dDO9ledpBPy7EwBjrJti5ZPiu7yInQVT4vJ8ELsrucAj3kS7Kn7CV7y5dlH9nO9ZX95AzoLwfI2TBQDpKD5RA5D2rLKxOrI9+QqXKEHCnflEvhLTlavi3HyLFynHxHjpcT5EQ5SU6WU+RU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5F3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6FaeuV/nVDSqiblTx6iZVQN2sCqpCqrAqohJUUVVMGYXKKlKhKq5KqKi6RZVUt6pEVUqVVmWUU2VVkrpNlVO3q/LqDlVB3akqqrtUJVVZVVFV1d2qmrpHVVc1VE11r6qlaqs6qq66T9VT96v66gHVQD2oGqqHVCP1sGqsHlFN1KOqqXpMNVOPq+bqCdVCtVStVGvVRj2p2qqnVDvVXnVQT6uO6hnVSXVWyepZ1UU9p7qq51U39YLqrl5UPdRLqqfqpXqrS+qy8qqv6qdSVH81QL2qBqpBarAaooaq19Qw9boart5QqWqEGqneVKPUW2q0eluNUWPVOPWOGq8mqIlqkpqspqip6l01Tb2npqv31Qw1U81Ss1WamqMG/1Zpwd/l9//tWfdv89/7B/nDf330bWq7+kztUDvVLrVb7VF71T61T+1X+9UBdUBlq2x1UB1Uh9QhdVgdVjkqRx1RR9RRdVQdU8fUcXVcnVAn1Xn1kzqtflZn1Fl1Vp1XF9QFdfG374HQoKVWWutA59F5dYzOp2P1dTpOX6/z6xt0RN+o4/VNuoC+WRfUhXRhXUQn6KK6mDYatdWkQ11cl9BRfYsuqW/VibqULq3LaKfL6iR927+c/0f9tdFtdFvdVrfT7XQH3UF31B11J91JJ+tk3UV30V11V91Nd9PddXfdQ/fQPXVP3Vv31n10H91X99UpOkUP0K/qgXqQHqyH6KH6NT1MD9PD9XCdqlP1SD1Sj9Kj9Gg9Wo/RY/Q4PU6P1+P1RD1RT9aTX/xtnHq6nq5n6Bl6lp6l03Sanqvn6nl6nl6gF+iFeqFepBfpJXqJTtfpOkNn6EydqZdrobP0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pv0Fr1FZ+nterveoXfoXXqX3qP36H16n96v9+sD+oDO1tn6oD6oD+lD+rA+rHN0jj6ij+ij+qg+po/1P66P6xP6hD6lT+nT+rQ+o8/oc/qcvqAv6Iv6or6sL1+57QtkIAMd6CBPkCeICWKC2CA2iAvigvxB/iASRIL4ID4oENwcFAwKBYWDIkFCUDQoFpgAAxtQEAbFgxJBNLglKBncGiQGpYLSQZnABWWDpOC2oFxwe1A+uCOoENwZVAzuCioFlYMqQdXg7qBacE9QPagR1AzuDWoFtYM6Qd3gvqBecH9QP3ggaBA8GDQMHgoaBQ8HjYNHgibBo0HT4LGgWfB40Dx4ImgRtAxaBa2DNn9qfe/PFHrK9TX9TIrpbwaYV81AM8gMNkPMUPOaGWZeN8PNGybVjDAjzZtmlHnLjDZvmzFmrBln3jHjzQQz0Uwyk80UM9W8a6aZ98x0876ZYWaaWWa2STNzzFzzgZln5psF5kOz0HxkFpnFZolZatLNxybDLDOZ5hOz3HxqsswKs9KsMqvNmvM3CmHWmw1mo9lkNpstZqvZZrabz8wOs9PsMrvNHrPX7DOfm/3mC3PAfGmyzVfmoPmLOWS+NofNNybHfGuOmO/MUfO9OWZ+MMfNj+aEOWlOmZ/MafOzOWPOmnPmvLlgfjEXzSVz2fgrN/dXnt5Ro8Y8mAdjMAZjMRbjMA7zY36MYATjMR4LYAEsiAWxMBbGBEzAYlgMryAkLI7FMYpRLIklMRETsTSWRocOkzAJy2E5LI/lsQJWwIpYESthJayCVfBuvBvvwXuwBtbAe/FerI21sS7WxXpYD+tjfWyADbAhNsRG2AgbY2Nsgk2wKTbFZtgMm2NzbIEtsBW2wjbYBttiW2yH7bADdsCO2BE7YSdMxmTsgl2wK3bFbtgNu2N37IE9sCf2xN7YG/tgH+yLfTEFU3AADsCBOBAH42AcikNxGA7D4TgcUzEVR+JIHIWjcDSOxjE4FsfhOzgeJ+BEnISTcQpOxak4DafhdJyOM3AGzsJZmIZpOBfn4jychwtwAS7EhbgIF+ESXILpmI4ZmIGZmInLcTlmYRauxJW4GlfjWlyL63E9bsSNuBk341bcittxO+7AHbgLd+Ee3IP7cB/ux/14AA9gNmbjQTyIh/AQHsbDmIM5eASP4FE8isfwGB7H43gCT+ApPIWn8TSewTN4Ds/hBfwFL+IlvIweY6wUsfY6G2evt/ntDTbG5rN/Gxe2RWyCLWqLWWML2kL/JUZrbaItZUvbMtbZsjbJ3va7uJKtbKvYqvZuW83eY6v/Lq5n77f17QO2gX3Q1rX3/Rbn/TVuaB+yjezjtrF9wjaxLW1T29o2s4/b5vYJ28K2tK1sa9vRPmM72c422T5ru9jnfhdn2GV2vd1gN9pNdr/9wp6z5+1R+729YH+xfW0/O9S+ZofZ1+1w+4ZNtSN+F4+z79jxdoKdaCfZyXbK7+JZdrZNs3PsXPuBnWfn/y5Otx/bhTbTLrKL7RK79Nf4Sk+Z9hO73H5qs+wKu9KusqvtGrvWrvvPXlfZLXar3Wb32c/tDrvT7rK77R6799f4yjkO2C9ttv3KHrHf2UP2a3vYHrM59ttf4yvnO2Z/sMftj/aEPWlP2Z/safuzPWPP/nr+K2f/yV6yl623goAkKdIUUB7KSzGUj2LpOoqj6yk/3UARupHi6SYqQDdTQSpEhakIJVBRKkaGkCwRhVScSlCUbqGSdCslUikqTWXIUVlKotuoHN1O5ekOqkB3UkW6iypRZapCVeluqkb3UHWqQTXpXqpFtakO1aX7qB7dT/XpAWpAD1JDeoga0cPUmB6hJvQoNaXHqBk9Ts3pCWpBLakVtaY29CS1paeoHbWnDvQ0daRnqBN1pmR6lrrQc9SVnqdu9AJ1pxepB71EPakX9aaXqQ+9Qn2pH6VQfxpAr9JAGkSDaQgNpddoGL1Ow+kNSqURNJLepFH0Fo2mt2kMjaVx9A6Npwk0kSbRZJpCU+ldOpveufCVm4MZNJNm0WxKozk0lz6geTSfFtCHtJA+okW0mJbQUkqnjymDllEmfULL6VPKohW0klbRalpDa2kdracNtJE20WbaQltpG22nz2gH7aRdtJv20F7aR5/TfvqCDtCXlE1f0UH6Cx2ir+kwfUM59C0doe/oKH1Px+gHOk4/0gk6SafoJzpNP9MZOkvn6DxdoF/oIl2iy+RJhBDKUIU6DMI8Yd4wJswXxobXhXHh9WH+8IYwEt4Yxoc3hQXCm8OCYaGwcFgkTAiLhsVCE2JoQwrDsHhYIoyGt4Qlw1vDxLBUWDosE7qwbJgU3haWC28Py4d3hBXCO8OK4V1hpbBy+PiDVcO7w2rhPWH1sEZYM7w3rBXWDuuEdcP7wnrh/WH98IGwQfhgWD58KGwUPhw2Dh8Jm4SPhk3Dx8Jm4eNh8/CJsEXYMmwVtg7bhE+GbcOnwnZh+7BD+HTYMXwm7BR2DpPDZ8Mu4XN/eD0l7B8OCF8NXw29f0AtiS6Npkc/jmZEl0Uzo59El0c/jWZFV0RXRldFV0fXRNdG10XXRzdEN0Y3RTdHt0S3RrdFva+bVzhw0imnXeDyuLwuxuVzse46F+eud/ndDS7ibnTx7iZXwN3sCrpCrrAr4hJcUVfMGYfOOnKhK+5KuKi7xZV0t7pEV8qVdmWcc2Vdkmvt2rg2rq17yrVz7V0H97R72j3jnnGdXWf3rOvinnNd3fOum3vBdXcvuhfdS66n6+V6u5ddH/eK6+v6uRSX4ga4AW6gG+gGu8FuqBvqhrlhbrgb7lJdqhvpRrpRbpQb7Ua7MW6MG+fGufFuvJvoJrrJbrKb6qa6aW6am+6muxluhpvlZrk0l+bmurlunpvnFrgFbmHiQrfILXJL3BKX7tJdhstwmS7TLXfLXZbLcivdSrfarXZr3Vq33q13G91Gt9ltdlvdVrfdbXc73A63y+1ye9wet8/tc/vdfnfAHXDZLtsddAfdIXfIHXbfuBz3rTvivnNH3ffumPvBHXc/uhPupDvlfnKn3c/ujDvrzrnz7oL7xV10l9xl593UyLuRaZH3ItMj70dmRGZGZkVmR9IicyJzIx9E5kXmRxZEPowsjHwUWRRZHFkSWRpJj3wcyYgsi2RGPoksj3wayYqsiKyMrIqsjqyJeF90R+iL+xI+6m/xJf2tPtGX8qV9Ge98WZ/kb/Pl/O2+vL/DV/B3+or+Ll/JV/ZV/BO+hW/pW/nWvo1/0rf1T/l2vr3v4J/2Hf0zvpPv7JP9s76Lf8539c/7bv4F392/6Hv4l3xP38v39i/7Pv4V39f38ym+vx/gX/UD/SA/2A/xQ/1rfph/3Q/3b/hUP8KP9G/6Uf4tP9q/7cf4sX6cf8eP9xP8RD/JT/ZT/FT/rp/m3/PT/ft+hp/pZ/nZPs3P8XP9B36en+8X+A/9Qv+RX+QX+yV+qU/3H/sMv8xn+k/8cv+pz/Ir/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3n/kdfqff5Xf7PX6v3+c/9/v9F/6A/9Jn+6/8Qf8Xf8h/7Q/7b3yO/9Yf8d/5o/57f8z/4I/7H/0Jf9Kf8j/50/5nf8af9ef8eX/B/+Iv+kv+Mv/NGmOMMcbY/xb1B9f7/4PPyd/WFQOEENfvLJLz9zU3F/zrfpBM6BgRQjzbr8ej/7Fq1UpJSfnr5Rr/mRS5mp/nb+IVooN4RiSL9qLcP+xvkOx1gf55fZGlRBC9U4jYq5V/FSv+vv7t/6T+k0+Py6gYnov/b+ovFiKxxNWcfOJqfLV++X9Sv1DbP+g/39dThWj3Nzlx4mp8tX6SeEo8J5L/y1cyxhhjjDHGGGN/NUhW6fZHr59LLBYiQV/NySuuxn/0+pwxxhhjjDHGGGPX3gu9end+Mjm5fTfe/Aub6v9/tMEb3vxpm2v9m4kxxhhjjDH2Z7t603+tO2GMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxnKv/xf/Tuxan5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi71v5XAAAA//8V2TSa") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x24, 0x2) 32.798686068s ago: executing program 2 (id=334): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x42}, 0x0, 0x18, 0x0, 0x12345}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x13, r4, 0x0) io_uring_enter(r0, 0x1, 0x21, 0x1, 0x0, 0x0) 31.762926011s ago: executing program 2 (id=342): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0) 31.566927831s ago: executing program 2 (id=344): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1a4) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100030000000000040001000000000020"], 0x1c, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x80, 0x3) 30.325559625s ago: executing program 2 (id=350): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x80}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) 29.906576287s ago: executing program 32 (id=350): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x80}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) 4.157796685s ago: executing program 1 (id=495): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r1, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r1, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) 3.970251385s ago: executing program 0 (id=497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbb, &(0x7f0000000400)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00', 0x1}]) 3.689626689s ago: executing program 0 (id=499): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 3.540143167s ago: executing program 0 (id=500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004000}, 0x4) 3.398662054s ago: executing program 0 (id=501): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r1, r2, r3, 0x5, 0x2, 0x401, 0xffff, 0x4, 0x2, 0x0, 0x1, 0xa097}) 3.246061952s ago: executing program 0 (id=503): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f000000540b4550182195f56584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0x6, 0x10000000, 0xa02}) 3.134402178s ago: executing program 1 (id=504): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x18}}], 0x2, 0x40500f0) 3.005174385s ago: executing program 1 (id=505): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x1, 0x0, &(0x7f0000000040)) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) lseek(r0, 0x0, 0x1) 1.755065259s ago: executing program 4 (id=514): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 1.329870371s ago: executing program 4 (id=517): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route(r1, &(0x7f0000005ac0)={0x0, 0x0, &(0x7f0000005a80)={&(0x7f0000005a40)=@ipv4_delrule={0x1c, 0x21, 0x10, 0x70bd29, 0x25dfdbfd, {0x2, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0xbbb8ce7167d227df, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x40c0}, 0x8000) 1.075127084s ago: executing program 4 (id=519): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="33eedd982748fcbb96b66be12ff2458eba27fcaf409aec984c9ca4d5178de9da51b67c43415a98", 0x27}, {&(0x7f0000000140)="e24718d515874dbe17581dcf2b76b71141ef76704133450905cae4f123148519843553f164ed478cfe4d6c9ce8b8ee11c69322676eee001f41", 0xf4}, {&(0x7f0000000380)="8cff8450a8294970d6820eb72ad492dc08fe9abe1c33baa2e3bee59eee2c569ca6e33f9433dd0165b9738810881992edecd43ab186d56f116e85fea9bf858cc2dc26ca0b52c7314d3dc7136776e216145fd6adbd3a95aa8d9ba37acd1942db339a4d556a70b100ea4fbfdd7f61f510fccba3636c476a619d19da549392f216fc989cd5d40085e4cfd56399ce4aa33aedd67ae21aae03960fded593f1c4c2c1e98c76b26c28539477548fea180f204c56f7a2135779977b0db91828daa5080be7da1b1b9089252172d8da5f8a95060dac0215e68f8dc710", 0xd7}, {&(0x7f0000000180)="52fdf623d88b43c66f03bd053dea81fdaf540174b3d04f5acfb71d5769d3f9d66c579a732ca9e2754ab85ada69e9cce5a4ec56ee4e9cf72e6df9ff6422325e1daddcc88e24c9a1882fd6b79d552423", 0x4f}, {&(0x7f0000000480)="36e23fece2db26c81f5ad0a779e87a6af45f6dfb69517d830642e84a89d8754e7274d981c3192d5f1dc8ad2d18a2f41ea4fc3f45c51685ee01bf5ce546a49d6b43570bb66f89a78a63f14fd058bb9a482d6c937c9ce0eab373534dc7a1ffcd74f6cadbc91a7850d29a97ba9ed2c60b70aa7545163df2004561d8437d30de5ccbc50a3accefe511e1a2fb3941eb63471f4c84ab93d9e8dc78e2a2830509147a053f4eebb677b702f7361304230412f67027b5373c7bcb029e9a16cfe438f884c62a992b45c4fea81e29d4d07c12b5eb8dec28bdaf8be6103a984d49af61b4fd6907db0d19422e12ef", 0xe8}, {&(0x7f0000000580)="52c41e9b212f9748e6095c684f41173938baacdbc434e55d503f599a70c62e0e975769bbd3b21ad3620168f4aafd724c3495c07479b761fc56b45862431629aa57388af7b632db4c66804869d688673883af26591ff336d9484360d5a121bc613fa32b438b989a", 0x67}], 0x6}, 0x20000004) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a80)=""/241, 0xf1}], 0x1, &(0x7f0000001d00)=""/4067, 0xfe3}, 0x0) close(r0) 889.386394ms ago: executing program 1 (id=521): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000340)=""/170, 0xaa) epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0x7, 0x0, 0x0) 889.287164ms ago: executing program 3 (id=522): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x40084146, &(0x7f0000000300)) 814.525357ms ago: executing program 4 (id=523): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x44, 0xb, 0x0, 0x8b, 0xff, 0x5, 0x0, 0x0, 0x0, 0x6, 0x9, 0x4, 0x7c, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r1, 0x5}, &(0x7f0000000080)=0x8) 645.260037ms ago: executing program 3 (id=524): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x1, 0xd, 0x4, 0x4, 0x8, 0x28, 0x9, 0x31, 0x2, 0x8, 0x7, 0x1, 0x0, 0x1}, 0xe) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0xb9dc}, 0x1c) 488.710574ms ago: executing program 3 (id=525): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0xec, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xd, 0x4}, {}, {0x8, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @filter_kind_options=@f_u32={{0x8}, {0xb8, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0x7, 0xfff1}}, @TCA_U32_SEL={0xa4, 0x5, {0xc, 0x80, 0x4, 0x401, 0x1f, 0x3, 0x9, 0x0, [{0x4396, 0xd, 0xec, 0x8e4a}, {0x5, 0x2000, 0x10001, 0xc}, {0x9, 0x2, 0x6, 0xcc}, {0x0, 0x429, 0x0, 0x940}, {0x6, 0x45bc, 0x9, 0x5}, {0x8, 0xff, 0x5}, {0xfff, 0x401, 0x3871, 0x5}, {0x2, 0x7, 0x9, 0x5}, {0x4, 0x7, 0xb2be, 0x7}]}}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20044090}, 0x20000000) 484.768065ms ago: executing program 4 (id=533): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xa) setuid(0xee01) mincore(&(0x7f0000185000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/68) 357.395751ms ago: executing program 4 (id=526): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={r2}, &(0x7f0000000240)=0x8) 309.958663ms ago: executing program 3 (id=527): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8", 0x2}], 0x1}}], 0x1, 0x2090) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 261.966866ms ago: executing program 1 (id=528): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x3000008, 0x13, r2, 0x3d000) 122.468893ms ago: executing program 3 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket(0xa, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10) 104.220404ms ago: executing program 0 (id=530): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x4080011, r0, 0xd8b90000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 38.176587ms ago: executing program 3 (id=531): write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd20"], 0xffe) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40095505, &(0x7f0000000000)=0x10) 0s ago: executing program 1 (id=532): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @local, 0x4e21, 0x3, 'ovf\x00', 0x0, 0xa7e, 0x10002b}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x40000c, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): k [ 73.913755][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.924805][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.931847][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.957787][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.982111][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.004602][ T5769] team0: Port device team_slave_0 added [ 74.014444][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.021612][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.047998][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.068071][ T5768] team0: Port device team_slave_0 added [ 74.086717][ T5769] team0: Port device team_slave_1 added [ 74.094928][ T5775] team0: Port device team_slave_0 added [ 74.112789][ T5768] team0: Port device team_slave_1 added [ 74.120876][ T5775] team0: Port device team_slave_1 added [ 74.158990][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.166214][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.192861][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.245857][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.252855][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.279291][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.302660][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.309789][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.338586][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.354327][ T5765] hsr_slave_0: entered promiscuous mode [ 74.361928][ T5765] hsr_slave_1: entered promiscuous mode [ 74.376882][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.383888][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.410336][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.422347][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.429792][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.456251][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.501080][ T5769] hsr_slave_0: entered promiscuous mode [ 74.507692][ T5769] hsr_slave_1: entered promiscuous mode [ 74.514053][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.522984][ T5769] Cannot create hsr debugfs directory [ 74.529338][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.538327][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.546673][ T5767] Bluetooth: hci0: command tx timeout [ 74.568839][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.615767][ T5767] Bluetooth: hci1: command tx timeout [ 74.657732][ T5775] hsr_slave_0: entered promiscuous mode [ 74.664040][ T5775] hsr_slave_1: entered promiscuous mode [ 74.670333][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.677970][ T5775] Cannot create hsr debugfs directory [ 74.741233][ T5768] hsr_slave_0: entered promiscuous mode [ 74.748112][ T5768] hsr_slave_1: entered promiscuous mode [ 74.754303][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.764212][ T5768] Cannot create hsr debugfs directory [ 74.785931][ T5767] Bluetooth: hci2: command tx timeout [ 74.791703][ T5767] Bluetooth: hci3: command tx timeout [ 75.116366][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.151047][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.160841][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.200557][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.233667][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.244907][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.274614][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.300681][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.359688][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.401529][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.411648][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.423380][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.477605][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.492617][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.503933][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.534554][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.633332][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.715400][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.731862][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.749064][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.756515][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.786872][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.794048][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.824138][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.848171][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.861626][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.871636][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.902789][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.909998][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.938312][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.946070][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.959520][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.966677][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.990641][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.997825][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.050323][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.099401][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.106651][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.166386][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.173605][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.253787][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.501081][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.615858][ T5767] Bluetooth: hci0: command tx timeout [ 76.657963][ T5765] veth0_vlan: entered promiscuous mode [ 76.695999][ T5767] Bluetooth: hci1: command tx timeout [ 76.700621][ T5765] veth1_vlan: entered promiscuous mode [ 76.791986][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.823910][ T5765] veth0_macvtap: entered promiscuous mode [ 76.837771][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.856106][ T5771] Bluetooth: hci2: command tx timeout [ 76.859779][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.861674][ T5767] Bluetooth: hci3: command tx timeout [ 76.877159][ T5765] veth1_macvtap: entered promiscuous mode [ 76.913579][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.949774][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.962459][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.973109][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.983843][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.993132][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.028158][ T5769] veth0_vlan: entered promiscuous mode [ 77.061800][ T5769] veth1_vlan: entered promiscuous mode [ 77.073627][ T5775] veth0_vlan: entered promiscuous mode [ 77.145028][ T5775] veth1_vlan: entered promiscuous mode [ 77.164823][ T5768] veth0_vlan: entered promiscuous mode [ 77.225449][ T5769] veth0_macvtap: entered promiscuous mode [ 77.252788][ T5768] veth1_vlan: entered promiscuous mode [ 77.259464][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.268115][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.272577][ T5769] veth1_macvtap: entered promiscuous mode [ 77.319667][ T5775] veth0_macvtap: entered promiscuous mode [ 77.353792][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.365645][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.378096][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.388708][ T5775] veth1_macvtap: entered promiscuous mode [ 77.420419][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.433662][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.434929][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.441827][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.467490][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.486219][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.495194][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.505447][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.514851][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.533159][ T5768] veth0_macvtap: entered promiscuous mode [ 77.544043][ T5768] veth1_macvtap: entered promiscuous mode [ 77.609418][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.621507][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.631676][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.642807][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.654786][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.687553][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.705673][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.720738][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.731567][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.749866][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.762311][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.780065][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.791668][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.811321][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.822045][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.832865][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.844128][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.878836][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.887807][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.897004][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.906848][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.927661][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.940246][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.950180][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.961438][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.971502][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.984551][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.996627][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.022690][ T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.028907][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.040536][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.049104][ T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.049866][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.067873][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.230950][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.242455][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.423370][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.443422][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.510029][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.552742][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.585701][ T28] audit: type=1326 audit(1776863116.549:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.0.6" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f488e19c819 code=0x0 [ 78.638023][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.643032][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.649940][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.673581][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.696758][ T5767] Bluetooth: hci0: command tx timeout [ 78.777500][ T5767] Bluetooth: hci1: command tx timeout [ 78.867368][ T5828] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.937123][ T5771] Bluetooth: hci2: command tx timeout [ 78.943049][ T5767] Bluetooth: hci3: command tx timeout [ 79.090223][ T5828] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 79.099859][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.113234][ T5828] usb 4-1: config 0 descriptor?? [ 79.133262][ T5828] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 79.286329][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.439686][ T5849] syz.0.9[5849]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.008436][ T5828] gspca_stv06xx: I2C: Read error writing address: -71 [ 80.085647][ T5828] usb 4-1: USB disconnect, device number 2 [ 80.415544][ C1] sched: RT throttling activated [ 80.549165][ T5849] loop0: detected capacity change from 0 to 131072 [ 80.563923][ T5849] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 80.572458][ T5849] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 80.584175][ T5849] F2FS-fs (loop0): invalid crc value [ 80.595262][ T27] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 80.608335][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.620426][ T27] usb 2-1: Product: syz [ 80.624663][ T27] usb 2-1: Manufacturer: syz [ 80.630182][ T27] usb 2-1: SerialNumber: syz [ 80.639444][ T5849] F2FS-fs (loop0): Found nat_bits in checkpoint [ 80.680766][ T27] usb 2-1: config 0 descriptor?? [ 80.709203][ T27] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 80.721853][ T5849] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 80.729385][ T5849] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 80.776532][ T5767] Bluetooth: hci0: command tx timeout [ 80.856190][ T5767] Bluetooth: hci1: command tx timeout [ 81.026369][ T5771] Bluetooth: hci2: command tx timeout [ 81.032046][ T5767] Bluetooth: hci3: command tx timeout [ 81.164720][ T5862] loop3: detected capacity change from 0 to 4096 [ 81.251514][ T5862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.452905][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.684821][ T5868] loop3: detected capacity change from 0 to 128 [ 81.731048][ T5868] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.754525][ T27] gspca_sunplus: reg_w_riv err -71 [ 81.766103][ T27] sunplus: probe of 2-1:0.0 failed with error -71 [ 81.790168][ T27] usb 2-1: USB disconnect, device number 2 [ 81.807213][ T5868] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.888326][ T5769] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.021825][ T5871] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.258109][ T5874] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 82.708627][ T5888] loop1: detected capacity change from 0 to 64 [ 82.923534][ T28] audit: type=1800 audit(1776863120.889:3): pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.21" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 82.977870][ T5888] hfs: request for non-existent node -16318464 in B*Tree [ 82.995662][ T5888] hfs: request for non-existent node -16318464 in B*Tree [ 83.038636][ T5888] hfs: request for non-existent node -16318464 in B*Tree [ 83.069502][ T5888] hfs: request for non-existent node -16318464 in B*Tree [ 83.090365][ T5891] hfs: request for non-existent node -16318464 in B*Tree [ 83.155191][ T5891] hfs: request for non-existent node -16318464 in B*Tree [ 83.241493][ T5893] loop0: detected capacity change from 0 to 4096 [ 83.270874][ T38] hfs: request for non-existent node -16318464 in B*Tree [ 83.325666][ T38] hfs: request for non-existent node -16318464 in B*Tree [ 83.338381][ T5894] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.457988][ T28] audit: type=1800 audit(1776863121.429:4): pid=5893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.23" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 83.496835][ T5883] loop3: detected capacity change from 0 to 32768 [ 83.516770][ T5883] ======================================================= [ 83.516770][ T5883] WARNING: The mand mount option has been deprecated and [ 83.516770][ T5883] and is ignored by this kernel. Remove the mand [ 83.516770][ T5883] option from the mount to silence this warning. [ 83.516770][ T5883] ======================================================= [ 83.638211][ T5883] JBD2: Ignoring recovery information on journal [ 83.780828][ T5883] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 83.962029][ T5905] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 84.021314][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 84.616468][ T5917] sctp: [Deprecated]: syz.3.31 (pid 5917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.616468][ T5917] Use struct sctp_sack_info instead [ 84.698893][ T5919] loop3: detected capacity change from 0 to 256 [ 84.708571][ T5919] exfat: Deprecated parameter 'namecase' [ 84.740950][ T5919] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 84.934389][ T5923] ALSA: mixer_oss: invalid OSS volume '' [ 85.176094][ T5929] loop3: detected capacity change from 0 to 4096 [ 85.186996][ T5929] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 85.249153][ T5929] ntfs: volume version 3.1. [ 85.411366][ T5929] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 85.443234][ T5929] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 85.469719][ T5929] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 86.235791][ T5801] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.329632][ T5945] loop1: detected capacity change from 0 to 40427 [ 86.350896][ T5945] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 86.358836][ T5945] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 86.368728][ T5945] F2FS-fs (loop1): invalid crc value [ 86.381605][ T5945] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.422241][ T5801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.444014][ T5945] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 86.445691][ T5801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.452534][ T5945] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 86.489717][ T5801] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 86.510019][ T5801] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 86.523364][ T5801] usb 4-1: Manufacturer: syz [ 86.531397][ T5801] usb 4-1: config 0 descriptor?? [ 86.564863][ T5945] syz.1.43: attempt to access beyond end of device [ 86.564863][ T5945] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.581989][ T5945] syz.1.43: attempt to access beyond end of device [ 86.581989][ T5945] loop1: rw=2057, sector=45096, nr_sectors = 8 limit=40427 [ 86.600474][ T5945] syz.1.43: attempt to access beyond end of device [ 86.600474][ T5945] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.642273][ T3484] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 86.652884][ T3484] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 86.875385][ T5952] loop0: detected capacity change from 0 to 1024 [ 86.902711][ T5952] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.982269][ T5952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.021049][ T5952] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.130451][ T5952] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.45: lblock 0 mapped to illegal pblock 0 (length 5) [ 87.165210][ T5952] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 87.188647][ T966] cfg80211: failed to load regulatory.db [ 87.206727][ T5952] EXT4-fs (loop0): This should not happen!! Data will be lost [ 87.206727][ T5952] [ 87.349487][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 87.415803][ T5801] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input5 [ 87.511451][ T5968] netlink: 104 bytes leftover after parsing attributes in process `syz.1.50'. [ 87.565167][ T5801] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input6 [ 87.593257][ T5801] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input7 [ 87.623895][ T5801] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input8 [ 87.657637][ T5801] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 87.677037][ T5801] usb 4-1: USB disconnect, device number 3 [ 88.002762][ T5973] fido_id[5973]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 88.070977][ T5978] loop1: detected capacity change from 0 to 1024 [ 88.112795][ T5978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.284293][ T5983] loop2: detected capacity change from 0 to 2048 [ 88.326580][ T5983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.414014][ T38] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 88.479430][ T38] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 88.517914][ T38] EXT4-fs (loop2): This should not happen!! Data will be lost [ 88.517914][ T38] [ 88.528552][ T38] EXT4-fs (loop2): Total free blocks count 0 [ 88.534597][ T38] EXT4-fs (loop2): Free/Dirty block details [ 88.542655][ T38] EXT4-fs (loop2): free_blocks=2415919504 [ 88.549965][ T38] EXT4-fs (loop2): dirty_blocks=32 [ 88.555437][ T38] EXT4-fs (loop2): Block reservation details [ 88.562138][ T38] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 88.570228][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.570755][ T38] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 89.055163][ T6001] loop1: detected capacity change from 0 to 2048 [ 89.093225][ T6001] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.255846][ T5828] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.315652][ T5801] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.457802][ T5828] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.469559][ T5828] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 89.485748][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.507234][ T5828] usb 4-1: config 0 descriptor?? [ 89.527615][ T5801] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.545710][ T5801] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.569084][ T5801] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.582408][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.593400][ T5801] usb 1-1: Product: syz [ 89.602980][ T5801] usb 1-1: Manufacturer: syz [ 89.607964][ T5801] usb 1-1: SerialNumber: syz [ 90.064250][ T6007] loop1: detected capacity change from 0 to 32768 [ 90.145843][ T6007] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 90.240455][ T6007] XFS (loop1): Ending clean mount [ 90.425262][ T6007] XFS (loop1): User initiated shutdown received. [ 90.432864][ T6007] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 90.463333][ T6007] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 90.538967][ T5828] video4linux radio48: keene_cmd_set failed (-71) [ 90.561061][ T5828] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 90.590980][ T5828] usb 4-1: USB disconnect, device number 4 [ 90.613313][ T5775] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 90.700395][ T5801] cdc_ncm 1-1:1.0: bind() failure [ 90.797250][ T5801] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 90.807551][ T28] audit: type=1326 audit(1776863128.779:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f6f53db99 code=0x7ffc0000 [ 90.842426][ T5801] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 90.854668][ T28] audit: type=1326 audit(1776863128.779:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6f59c819 code=0x7ffc0000 [ 90.863000][ T5801] usbtest: probe of 1-1:1.1 failed with error -71 [ 90.920721][ T5801] usb 1-1: USB disconnect, device number 2 [ 90.928341][ T28] audit: type=1326 audit(1776863128.779:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6f59c819 code=0x7ffc0000 [ 91.014953][ T28] audit: type=1326 audit(1776863128.779:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6f59c819 code=0x7ffc0000 [ 91.065649][ T28] audit: type=1326 audit(1776863128.799:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f6f53db99 code=0x7ffc0000 [ 91.135805][ T28] audit: type=1326 audit(1776863128.799:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6f59c819 code=0x7ffc0000 [ 91.164698][ T28] audit: type=1326 audit(1776863128.799:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6f59c819 code=0x7ffc0000 [ 91.189371][ T28] audit: type=1326 audit(1776863128.799:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6f59c819 code=0x7ffc0000 [ 91.208656][ T6029] loop1: detected capacity change from 0 to 512 [ 91.241137][ T28] audit: type=1326 audit(1776863128.799:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f6f53db99 code=0x7ffc0000 [ 91.257728][ T6029] EXT4-fs: inline encryption not supported [ 91.268552][ T28] audit: type=1326 audit(1776863128.799:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f6f53db99 code=0x7ffc0000 [ 91.330423][ T6029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.376299][ T6029] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.565704][ T5770] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 91.579202][ T6044] input: syz0 as /devices/virtual/input/input9 [ 91.792498][ T5770] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.806548][ T5770] usb 4-1: not running at top speed; connect to a high speed hub [ 91.827183][ T5770] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.851266][ T5770] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.886327][ T5770] usb 4-1: string descriptor 0 read error: -22 [ 91.895948][ T5770] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.923855][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.978399][ T5770] usb 4-1: 0:2 : does not exist [ 92.176937][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.510841][ T6050] loop0: detected capacity change from 0 to 32768 [ 92.531499][ T6050] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.75 (6050) [ 92.620071][ T6050] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.641428][ T6050] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 92.669743][ T6060] loop1: detected capacity change from 0 to 128 [ 92.675704][ T6050] BTRFS info (device loop0): enabling auto defrag [ 92.693084][ T6050] BTRFS info (device loop0): use no compression [ 92.710612][ T6050] BTRFS info (device loop0): max_inline at 4096 [ 92.725018][ T6050] BTRFS info (device loop0): using free space tree [ 92.945736][ T6050] BTRFS info (device loop0): enabling ssd optimizations [ 92.965608][ T6050] BTRFS info (device loop0): auto enabling async discard [ 93.052698][ T5770] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 93.082522][ T5770] usb 4-1: Warning! Unlikely big volume range (=4294967290), cval->res is probably wrong. [ 93.118171][ T5770] usb 4-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/31136/-4451 [ 93.152645][ T5770] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 93.216053][ T5770] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 93.408077][ T5770] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 93.447793][ T5770] usb 4-1: USB disconnect, device number 5 [ 93.447956][ T6081] loop1: detected capacity change from 0 to 2048 [ 93.631886][ T6081] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 93.667702][ T6081] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 93.714248][ T6081] UDF-fs: Scanning with blocksize 512 failed [ 93.735128][ T5765] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.960414][ T6081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.576039][ T6090] process 'syz.3.87' launched './file0' with NULL argv: empty string added [ 94.621933][ T6090] Invalid argument reading file caps for ./file0 [ 95.057367][ T6084] loop2: detected capacity change from 0 to 131072 [ 95.126870][ T6084] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 95.314256][ T6084] XFS (loop2): Starting recovery (logdev: internal) [ 95.371051][ T6084] XFS (loop2): Ending recovery (logdev: internal) [ 95.420426][ T6084] XFS (loop2): EXPERIMENTAL online shrink feature in use. Use at your own risk! [ 95.508397][ T5768] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 96.194355][ T6115] loop1: detected capacity change from 0 to 4096 [ 96.215205][ T6115] __ntfs_warning: 21 callbacks suppressed [ 96.215221][ T6115] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 96.318240][ T6115] ntfs: volume version 3.1. [ 96.326022][ T6111] loop0: detected capacity change from 0 to 32768 [ 96.383912][ T6111] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 96.411627][ T6113] loop3: detected capacity change from 0 to 32768 [ 96.505679][ T6115] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 96.548883][ T6111] XFS (loop0): Ending clean mount [ 96.619292][ T6115] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 96.631195][ T6111] XFS (loop0): Quotacheck needed: Please wait. [ 96.652838][ T6115] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 96.717866][ T6113] syz.3.92: attempt to access beyond end of device [ 96.717866][ T6113] loop3: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 96.764994][ T6113] metapage_write_end_io: I/O error [ 96.774650][ T6111] XFS (loop0): Quotacheck: Done. [ 96.817203][ T112] blkno = 8ed2c, nblocks = 1 [ 96.821872][ T112] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 96.821872][ T112] [ 96.838580][ T6113] blkno = 8ed2c, nblocks = 1 [ 96.850007][ T6113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 96.850007][ T6113] [ 96.895878][ T112] ERROR: (device loop3): remounting filesystem as read-only [ 96.918789][ T6113] ERROR: (device loop3): dtSearch: DT_GETPAGE: dtree page corrupt [ 96.918789][ T6113] [ 96.954588][ T6113] jfs_mkdir: dtSearch returned -5 [ 97.066035][ T6113] ERROR: (device loop3): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 97.066035][ T6113] [ 97.104716][ T6113] jfs_readdir: unexpected rc = -5 from dtReadNext [ 97.200797][ T6129] warning: `syz.2.91' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.233283][ T5769] syz-executor: attempt to access beyond end of device [ 97.233283][ T5769] loop3: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 97.255936][ T5769] metapage_write_end_io: I/O error [ 97.266956][ T5769] JFS: metapage_get_blocks failed [ 97.272075][ T5769] JFS: metapage_get_blocks failed [ 97.292093][ T5769] JFS: metapage_get_blocks failed [ 97.349844][ T5769] JFS: metapage_get_blocks failed [ 97.373965][ T5765] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 97.558804][ T6135] syz.1.99 uses obsolete (PF_INET,SOCK_PACKET) [ 97.580924][ T6135] syzkaller1: entered promiscuous mode [ 97.595811][ T6135] syzkaller1: entered allmulticast mode [ 98.094911][ T6144] netlink: 'syz.3.96': attribute type 4 has an invalid length. [ 98.107811][ T6145] loop1: detected capacity change from 0 to 256 [ 98.275379][ T6144] netlink: 'syz.3.96': attribute type 17 has an invalid length. [ 98.453098][ T6151] netlink: 36 bytes leftover after parsing attributes in process `syz.1.104'. [ 98.503165][ T6151] netlink: 36 bytes leftover after parsing attributes in process `syz.1.104'. [ 98.551600][ T6137] loop2: detected capacity change from 0 to 32768 [ 98.561501][ T6137] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.100 (6137) [ 98.577062][ T966] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.600885][ T6137] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.615052][ T6137] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 98.633287][ T6137] BTRFS info (device loop2): turning on sync discard [ 98.641752][ T6137] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 98.657917][ T6137] BTRFS info (device loop2): use zstd compression, level 3 [ 98.665401][ T6137] BTRFS info (device loop2): turning on async discard [ 98.679452][ T6137] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 98.711533][ T6137] BTRFS info (device loop2): trying to use backup root at mount time [ 98.725325][ T6137] BTRFS info (device loop2): enabling auto defrag [ 98.728693][ T6157] loop1: detected capacity change from 0 to 164 [ 98.732263][ T6137] BTRFS info (device loop2): using free space tree [ 98.780251][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.784848][ T6157] Unable to read rock-ridge attributes [ 98.816666][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.840367][ T6166] loop3: detected capacity change from 0 to 512 [ 98.855851][ T966] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.870724][ T11] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 98.885295][ T966] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.895974][ T6137] BTRFS error (device loop2): failed to load root extent [ 98.903119][ T6137] BTRFS warning (device loop2): try to load backup roots slot 1 [ 98.911074][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.922448][ T11] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 98.923213][ T966] usb 1-1: config 0 descriptor?? [ 99.006695][ T6137] BTRFS warning (device loop2): couldn't read tree root [ 99.048846][ T6137] BTRFS warning (device loop2): try to load backup roots slot 2 [ 99.084098][ T11] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 99.155755][ T6137] BTRFS warning (device loop2): couldn't read tree root [ 99.162833][ T6137] BTRFS warning (device loop2): try to load backup roots slot 3 [ 99.264678][ T6176] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.312238][ T6178] loop3: detected capacity change from 0 to 512 [ 99.331269][ T6137] BTRFS info (device loop2): enabling ssd optimizations [ 99.366979][ T6137] BTRFS info (device loop2): rebuilding free space tree [ 99.382712][ T6178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.426769][ T966] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x4 [ 99.446442][ T966] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 99.471025][ T966] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 99.503058][ T6178] EXT4-fs (loop3): shut down requested (0) [ 99.513636][ T6137] BTRFS info (device loop2): checking UUID tree [ 99.694812][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.134801][ T5768] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.645690][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.675866][ T966] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.845760][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 100.853501][ T23] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 100.864900][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.877145][ T966] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 100.877856][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.895615][ T966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.909145][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.909177][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.938204][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.945626][ T966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.951095][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.965600][ T966] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 100.985450][ T966] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 101.000631][ T966] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 101.009392][ T966] usb 3-1: Manufacturer: syz [ 101.028974][ T966] usb 3-1: config 0 descriptor?? [ 101.121945][ T6206] loop3: detected capacity change from 0 to 40427 [ 101.142758][ T6206] F2FS-fs (loop3): heap/no_heap options were deprecated [ 101.154711][ T6206] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x7ffff [ 101.163465][ T6206] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x77e8c [ 101.185499][ T6206] F2FS-fs (loop3): invalid crc value [ 101.194137][ T23] usb 2-1: usb_control_msg returned -32 [ 101.201851][ T23] usbtmc 2-1:16.0: can't read capabilities [ 101.209965][ T6206] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 101.237162][ T6206] F2FS-fs (loop3): Found nat_bits in checkpoint [ 101.299765][ T6206] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 101.314306][ C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 101.338203][ T6206] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 101.417977][ T6206] F2FS-fs (loop3): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 101.491196][ T966] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 101.521567][ T6206] syz.3.117: attempt to access beyond end of device [ 101.521567][ T6206] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 101.526428][ T6212] loop0: detected capacity change from 0 to 4096 [ 101.538275][ T966] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 101.554777][ T6212] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 101.558023][ T6206] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of f2fs_mpage_readpages+0x1cf6/0x1ea0 [ 101.593501][ T6206] syz.3.117: attempt to access beyond end of device [ 101.593501][ T6206] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 101.621351][ T966] appleir 0003:05AC:8243.0003: hiddev2,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 101.642876][ T5852] usb 1-1: USB disconnect, device number 3 [ 101.679987][ T6212] ntfs: volume version 3.1. [ 101.797394][ T5769] syz-executor: attempt to access beyond end of device [ 101.797394][ T5769] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.816526][ T6212] openvswitch: netlink: Missing valid actions attribute. [ 101.860003][ T6212] openvswitch: netlink: Actions may not be safe on all matching packets [ 101.873409][ T27] usb 3-1: USB disconnect, device number 2 [ 101.945167][ T5769] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 102.134739][ T6217] use of bytesused == 0 is deprecated and will be removed in the future, [ 102.150895][ T6217] use the actual size instead. [ 102.697077][ T6229] loop3: detected capacity change from 0 to 1024 [ 103.049588][ T6221] loop0: detected capacity change from 0 to 40427 [ 103.076330][ T6221] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 103.087643][ T6221] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 103.103712][ T6221] F2FS-fs (loop0): invalid crc value [ 103.261809][ T6221] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 103.274772][ T6221] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.300512][ T6236] loop3: detected capacity change from 0 to 1024 [ 103.366565][ T5828] usb 2-1: USB disconnect, device number 3 [ 103.479520][ T28] audit: type=1800 audit(1776863141.449:36): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.122" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 103.538092][ T6221] syz.0.122: attempt to access beyond end of device [ 103.538092][ T6221] loop0: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 103.583192][ T6239] loop1: detected capacity change from 0 to 1024 [ 103.641647][ T6239] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.717463][ T5765] syz-executor: attempt to access beyond end of device [ 103.717463][ T5765] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.733627][ T59] hfsplus: bad catalog file entry [ 103.740490][ T59] hfsplus: b-tree write err: -5, ino 3 [ 103.747091][ T5765] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 103.878770][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.914586][ T6244] loop3: detected capacity change from 0 to 2048 [ 103.931968][ T6244] EXT4-fs: Ignoring removed nobh option [ 104.009314][ T6244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.056791][ T6244] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.095793][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 104.130645][ T23] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 104.162683][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.195570][ T23] usb 3-1: Product: syz [ 104.199914][ T28] audit: type=1800 audit(1776863142.169:37): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.130" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 104.213176][ T6244] fs-verity: sha512 using implementation "sha512-avx2" [ 104.221738][ T23] usb 3-1: Manufacturer: syz [ 104.245890][ T23] usb 3-1: SerialNumber: syz [ 104.266649][ T23] usb 3-1: config 0 descriptor?? [ 104.491539][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.691142][ T6254] loop0: detected capacity change from 0 to 8192 [ 104.698107][ T23] airspy 3-1:0.0: Board ID: 00 [ 104.725721][ T23] airspy 3-1:0.0: Firmware version: [ 104.748043][ T6254] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 104.829379][ T6254] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 104.869058][ T6260] loop3: detected capacity change from 0 to 4096 [ 104.869978][ T6254] REISERFS (device loop0): using ordered data mode [ 104.905714][ T6254] reiserfs: using flush barriers [ 104.920617][ T6260] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 104.930050][ T6260] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 104.944726][ T6260] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 104.946289][ T6254] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.974555][ T6260] ntfs: volume version 3.1. [ 105.032205][ T6254] REISERFS (device loop0): checking transaction log (loop0) [ 105.103336][ T6254] REISERFS (device loop0): Using r5 hash to sort names [ 105.151906][ T6254] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 105.217435][ T6260] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 105.252641][ T6260] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 105.290502][ T23] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 105.326534][ T23] airspy 3-1:0.0: Registered as swradio24 [ 105.343934][ T23] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 105.376977][ T23] usb 3-1: USB disconnect, device number 3 [ 105.442773][ T6254] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3257, free_space(entry_count) 2 [ 105.468266][ T6254] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 540. Fsck? [ 105.481913][ T6254] REISERFS (device loop0): Remounting filesystem read-only [ 105.492545][ T6254] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 105.529226][ T5769] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 105.707037][ T6268] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 105.974420][ T6276] syzkaller1: entered promiscuous mode [ 105.984140][ T6276] syzkaller1: entered allmulticast mode [ 106.334506][ T6284] loop2: detected capacity change from 0 to 512 [ 106.409337][ T6284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.457166][ T6284] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.898377][ T6297] loop1: detected capacity change from 0 to 1024 [ 106.962245][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.050311][ T38] hfsplus: b-tree write err: -5, ino 25 [ 107.059634][ T38] hfsplus: b-tree write err: -5, ino 4 [ 107.069918][ T38] hfsplus: b-tree write err: -5, ino 2 [ 107.091756][ T38] hfsplus: b-tree write err: -5, ino 26 [ 107.234632][ T6302] loop2: detected capacity change from 0 to 7 [ 107.276010][ T6302] Dev loop2: unable to read RDB block 7 [ 107.295811][ T6302] loop2: AHDI p2 [ 107.308190][ T6302] loop2: partition table partially beyond EOD, truncated [ 107.323961][ T6306] Bluetooth: MGMT ver 1.22 [ 107.451191][ T6308] input: syz1 as /devices/virtual/input/input10 [ 107.724657][ T6316] loop0: detected capacity change from 0 to 2048 [ 107.758476][ T6320] loop1: detected capacity change from 0 to 1024 [ 107.792997][ T6320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 107.821317][ T6320] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.837872][ T6316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.908629][ T6316] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 107.948603][ T6320] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.156: lblock 3 mapped to illegal pblock 3 (length 3) [ 107.960629][ T6316] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 107.974393][ T6325] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 107.992614][ T6325] EXT4-fs (loop0): This should not happen!! Data will be lost [ 107.992614][ T6325] [ 108.003471][ T6325] EXT4-fs (loop0): Total free blocks count 0 [ 108.010252][ T6325] EXT4-fs (loop0): Free/Dirty block details [ 108.012557][ T6320] EXT4-fs (loop1): Remounting filesystem read-only [ 108.016581][ T6325] EXT4-fs (loop0): free_blocks=66060288 [ 108.029040][ T6325] EXT4-fs (loop0): dirty_blocks=16 [ 108.034207][ T6325] EXT4-fs (loop0): Block reservation details [ 108.037906][ T6316] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.037906][ T6316] [ 108.083934][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 108.753374][ T6346] cgroup: fork rejected by pids controller in /syz3 [ 109.094592][ T6333] loop1: detected capacity change from 0 to 32768 [ 109.129341][ T6333] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.159 (6333) [ 109.173711][ T6333] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.199473][ T6333] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 109.217918][ T6333] BTRFS info (device loop1): turning on sync discard [ 109.224695][ T6333] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 109.255892][ T6333] BTRFS info (device loop1): use zstd compression, level 3 [ 109.265583][ T6333] BTRFS info (device loop1): turning on async discard [ 109.306027][ T6333] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 109.336932][ T6333] BTRFS info (device loop1): trying to use backup root at mount time [ 109.367314][ T6333] BTRFS info (device loop1): enabling auto defrag [ 109.377286][ T6333] BTRFS info (device loop1): using free space tree [ 109.486532][ T11] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 109.498368][ T6342] loop2: detected capacity change from 0 to 32768 [ 109.533190][ T6333] BTRFS error (device loop1): failed to load root extent [ 109.560297][ T6333] BTRFS warning (device loop1): try to load backup roots slot 1 [ 109.590883][ T993] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 109.619652][ T6369] loop0: detected capacity change from 0 to 2048 [ 109.632204][ T6342] syz.2.163: attempt to access beyond end of device [ 109.632204][ T6342] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 109.655973][ T6333] BTRFS warning (device loop1): couldn't read tree root [ 109.663348][ T6369] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 109.673341][ T6333] BTRFS warning (device loop1): try to load backup roots slot 2 [ 109.701361][ T11] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 109.729966][ T6369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.736027][ T6333] BTRFS warning (device loop1): couldn't read tree root [ 109.745564][ T6342] metapage_write_end_io: I/O error [ 109.759180][ T111] blkno = 8ed2c, nblocks = 1 [ 109.763847][ T111] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 109.763847][ T111] [ 109.786086][ T6342] blkno = 8ed2c, nblocks = 1 [ 109.790777][ T6342] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 109.790777][ T6342] [ 109.799259][ T6333] BTRFS warning (device loop1): try to load backup roots slot 3 [ 109.813667][ T111] ERROR: (device loop2): remounting filesystem as read-only [ 109.846779][ T6342] ERROR: (device loop2): remounting filesystem as read-only [ 109.870341][ T28] audit: type=1800 audit(1776863147.839:38): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.169" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 109.918720][ T6342] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt [ 109.918720][ T6342] [ 109.968825][ T6333] BTRFS info (device loop1): enabling ssd optimizations [ 110.004618][ T6342] jfs_mkdir: dtSearch returned -5 [ 110.014655][ T6333] BTRFS info (device loop1): rebuilding free space tree [ 110.063224][ T6342] ERROR: (device loop2): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 110.063224][ T6342] [ 110.074921][ T6333] BTRFS info (device loop1): checking UUID tree [ 110.108507][ T6342] jfs_readdir: unexpected rc = -5 from dtReadNext [ 110.245072][ T5768] syz-executor: attempt to access beyond end of device [ 110.245072][ T5768] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 110.286919][ T5768] metapage_write_end_io: I/O error [ 110.292404][ T5768] JFS: metapage_get_blocks failed [ 110.325858][ T5768] JFS: metapage_get_blocks failed [ 110.331098][ T5768] JFS: metapage_get_blocks failed [ 110.345605][ T5768] JFS: metapage_get_blocks failed [ 110.517058][ T5775] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.173101][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.186605][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.195604][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.204185][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.210371][ T6387] loop2: detected capacity change from 0 to 1024 [ 111.220573][ T5771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 111.229249][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.912574][ T6384] chnl_net:caif_netlink_parms(): no params data found [ 112.085896][ T6379] loop0: detected capacity change from 0 to 40427 [ 112.168851][ T6379] F2FS-fs (loop0): build fault injection attr: rate: 684, type: 0x7ffff [ 112.205741][ T6379] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 112.244495][ T6379] F2FS-fs (loop0): Image doesn't support compression [ 112.257351][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.277607][ T6379] F2FS-fs (loop0): invalid crc value [ 112.285731][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.299312][ T6379] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.316764][ T6384] bridge_slave_0: entered allmulticast mode [ 112.334732][ T6384] bridge_slave_0: entered promiscuous mode [ 112.362218][ T6395] loop1: detected capacity change from 0 to 32768 [ 112.364409][ T6384] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.414338][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.440644][ T6384] bridge_slave_1: entered allmulticast mode [ 112.456838][ T6384] bridge_slave_1: entered promiscuous mode [ 112.472319][ T6379] F2FS-fs (loop0): Start checkpoint disabled! [ 112.482697][ T6395] syz.1.179: attempt to access beyond end of device [ 112.482697][ T6395] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 112.524210][ T6379] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 112.551971][ T6395] metapage_write_end_io: I/O error [ 112.572934][ T112] blkno = 8ed2c, nblocks = 1 [ 112.578634][ T112] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 112.578634][ T112] [ 112.590095][ T6384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.594395][ T6395] blkno = 8ed2c, nblocks = 1 [ 112.615655][ T6395] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 112.615655][ T6395] [ 112.622783][ T6384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.638084][ T112] ERROR: (device loop1): remounting filesystem as read-only [ 112.682147][ T6395] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt [ 112.682147][ T6395] [ 112.691636][ T6384] team0: Port device team_slave_0 added [ 112.710370][ T6384] team0: Port device team_slave_1 added [ 112.725694][ T6395] jfs_mkdir: dtSearch returned -5 [ 112.767007][ T6395] ERROR: (device loop1): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 112.767007][ T6395] [ 112.787822][ T6395] jfs_readdir: unexpected rc = -5 from dtReadNext [ 112.800768][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.838887][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.916524][ T5775] syz-executor: attempt to access beyond end of device [ 112.916524][ T5775] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 112.961163][ T6384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.972683][ T5775] metapage_write_end_io: I/O error [ 112.989349][ T5775] JFS: metapage_get_blocks failed [ 112.994462][ T5775] JFS: metapage_get_blocks failed [ 113.002283][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.025564][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.045698][ T5775] JFS: metapage_get_blocks failed [ 113.067541][ T6398] loop2: detected capacity change from 0 to 32768 [ 113.068225][ T6384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.074149][ T5775] JFS: metapage_get_blocks failed [ 113.087876][ T38] kworker/u4:2: attempt to access beyond end of device [ 113.087876][ T38] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 113.113599][ T38] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 113.127128][ T38] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 113.138380][ T38] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 113.143275][ T6398] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 113.302729][ T6398] XFS (loop2): Ending clean mount [ 113.337161][ T5771] Bluetooth: hci2: command tx timeout [ 113.362774][ T6398] XFS (loop2): Quotacheck needed: Please wait. [ 113.425368][ T6384] hsr_slave_0: entered promiscuous mode [ 113.481801][ T6384] hsr_slave_1: entered promiscuous mode [ 113.515874][ T6398] XFS (loop2): Quotacheck: Done. [ 113.521487][ T6384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.549824][ T6384] Cannot create hsr debugfs directory [ 113.689725][ T6419] loop1: detected capacity change from 0 to 1024 [ 113.873174][ T1317] hfsplus: b-tree write err: -5, ino 25 [ 113.893579][ T1317] hfsplus: b-tree write err: -5, ino 4 [ 113.913796][ T1317] hfsplus: b-tree write err: -5, ino 2 [ 113.945914][ T1317] hfsplus: b-tree write err: -5, ino 26 [ 114.141608][ T6384] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.254009][ T5768] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 114.393227][ T6384] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.608651][ T6384] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.820505][ T6422] loop0: detected capacity change from 0 to 32768 [ 114.836807][ T6384] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.892794][ T6422] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 115.093328][ T6422] XFS (loop0): Ending clean mount [ 115.126329][ T6422] XFS (loop0): Quotacheck needed: Please wait. [ 115.269316][ T6384] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.290508][ T6422] XFS (loop0): Quotacheck: Done. [ 115.328313][ T6448] loop1: detected capacity change from 0 to 512 [ 115.339577][ T6384] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.370568][ T6384] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.415714][ T5771] Bluetooth: hci2: command tx timeout [ 115.428191][ T6448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.447026][ T6384] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.535818][ T6448] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.628630][ T5765] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 115.723983][ T6384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.842720][ T6384] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.939034][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.946246][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.975184][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.038231][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.045432][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.207911][ T6384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.791707][ T6384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.915357][ T6384] veth0_vlan: entered promiscuous mode [ 116.941749][ T6384] veth1_vlan: entered promiscuous mode [ 116.994693][ T6458] loop0: detected capacity change from 0 to 32768 [ 117.019798][ T6384] veth0_macvtap: entered promiscuous mode [ 117.052832][ T6384] veth1_macvtap: entered promiscuous mode [ 117.118439][ T6458] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 117.151653][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.234894][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.281490][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.328711][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.349019][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.358932][ T28] audit: type=1804 audit(1776863155.329:39): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.190" name="/newroot/44/file1/file1" dev="loop0" ino=17058 res=1 errno=0 [ 117.370037][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.403554][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.417700][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.467519][ T6384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.495815][ T5771] Bluetooth: hci2: command tx timeout [ 117.537625][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.585271][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.601754][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.612532][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.622553][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.651311][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.669420][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.681924][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.695651][ T5765] ocfs2: Unmounting device (7,0) on (node local) [ 117.696527][ T6384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.724945][ T6484] netlink: 'syz.1.200': attribute type 3 has an invalid length. [ 117.779959][ T6384] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.799941][ T6384] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.810150][ T6384] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.820052][ T6384] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.011378][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.043395][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.138851][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.164821][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.189124][ T6490] loop0: detected capacity change from 0 to 512 [ 118.212450][ T6490] EXT4-fs: inline encryption not supported [ 118.294013][ T6490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.311426][ T6490] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.808287][ T6507] team_slave_0: entered promiscuous mode [ 118.814436][ T6507] team_slave_1: entered promiscuous mode [ 118.846697][ T6507] macvtap1: entered promiscuous mode [ 118.864045][ T6507] team0: entered promiscuous mode [ 118.885111][ T6507] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 118.907127][ T6507] team0: left promiscuous mode [ 118.925188][ T6507] team_slave_0: left promiscuous mode [ 118.930776][ T6507] team_slave_1: left promiscuous mode [ 119.025989][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.099653][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.260020][ T23] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.278854][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.306858][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.333677][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.363973][ T23] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.385458][ T23] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.403717][ T23] usb 4-1: Product: syz [ 119.412621][ T23] usb 4-1: Manufacturer: syz [ 119.446283][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 119.451616][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 119.460511][ T23] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 119.468560][ T23] cdc_wdm 4-1:1.0: Unknown control protocol [ 119.533185][ T6524] loop2: detected capacity change from 0 to 4096 [ 119.557928][ T6524] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 119.576145][ T5771] Bluetooth: hci2: command tx timeout [ 119.685717][ T786] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.718816][ T6524] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 119.778187][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 119.778433][ T5801] usb 4-1: USB disconnect, device number 6 [ 119.785033][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 119.785055][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 119.888463][ T6527] netlink: 260 bytes leftover after parsing attributes in process `syz.2.215'. [ 119.900330][ T786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.911484][ T786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.936443][ T786] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 119.955707][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 119.970941][ T786] usb 1-1: SerialNumber: syz [ 120.059830][ T28] audit: type=1326 audit(1776863158.029:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6f59c819 code=0x7ffc0000 [ 120.123020][ T28] audit: type=1326 audit(1776863158.059:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6f59c819 code=0x7ffc0000 [ 120.211849][ T28] audit: type=1326 audit(1776863158.059:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f6f6f59c819 code=0x7ffc0000 [ 120.218305][ T786] usb 1-1: 0:2 : does not exist [ 120.264796][ T28] audit: type=1326 audit(1776863158.059:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6f59c819 code=0x7ffc0000 [ 120.288726][ T6535] loop2: detected capacity change from 0 to 512 [ 120.290514][ T786] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 120.299417][ T6535] EXT4-fs: inline encryption not supported [ 120.345797][ T786] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 120.356441][ T28] audit: type=1326 audit(1776863158.059:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f6f6f59c819 code=0x7ffc0000 [ 120.383991][ T28] audit: type=1326 audit(1776863158.059:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6f59c819 code=0x7ffc0000 [ 120.416156][ T28] audit: type=1326 audit(1776863158.059:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6f59c819 code=0x7ffc0000 [ 120.423033][ T786] usb 1-1: 5:0: failed to get current value for ch 15 (-22) [ 120.488135][ T6535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.520447][ T6535] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.524988][ T28] audit: type=1326 audit(1776863158.069:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f6f6f59c819 code=0x7ffc0000 [ 120.538815][ T786] usb 1-1: USB disconnect, device number 4 [ 120.553373][ T28] audit: type=1326 audit(1776863158.069:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6f59c819 code=0x7ffc0000 [ 120.728600][ T6543] loop3: detected capacity change from 0 to 1024 [ 120.736629][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.764625][ T6543] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.856107][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.369372][ T6556] loop0: detected capacity change from 0 to 32768 [ 122.433067][ T6556] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.485381][ T6572] mmap: syz.1.230 (6572) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.600127][ T6556] XFS (loop0): Ending clean mount [ 122.613254][ T6556] XFS (loop0): Quotacheck needed: Please wait. [ 122.712668][ T6575] loop3: detected capacity change from 0 to 1024 [ 122.720229][ T6556] XFS (loop0): Quotacheck: Done. [ 122.746977][ T6575] EXT4-fs: inline encryption not supported [ 122.783513][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 122.783529][ T28] audit: type=1800 audit(1776863160.749:52): pid=6556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.226" name="file2" dev="loop0" ino=9287 res=0 errno=0 [ 122.835737][ T6575] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.844008][ T6577] loop2: detected capacity change from 0 to 2048 [ 122.920087][ T6577] EXT4-fs: Ignoring removed nobh option [ 122.940140][ T6575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 122.972905][ T6575] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.038536][ T6575] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.231: Freeing blocks not in datazone - block = 0, count = 16 [ 123.084931][ T5765] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.086375][ T6577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.122880][ T6577] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.169688][ T28] audit: type=1800 audit(1776863161.139:53): pid=6577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.232" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 123.174190][ T6384] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 123.399090][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.483320][ T6587] input: syz1 as /devices/virtual/input/input11 [ 123.745452][ T6591] loop2: detected capacity change from 0 to 512 [ 123.830801][ T5975] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.115723][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.286007][ T23] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 124.335700][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 124.357280][ T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 51, changing to 9 [ 124.387134][ T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33540, setting to 1024 [ 124.407591][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.414515][ T27] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 124.435992][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.448997][ T27] usb 3-1: config 0 descriptor?? [ 124.488155][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.505648][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.529509][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.545565][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.553685][ T23] usb 2-1: Product: syz [ 124.558569][ T23] usb 2-1: Manufacturer: syz [ 124.563358][ T23] usb 2-1: SerialNumber: syz [ 124.805595][ T23] usb 2-1: 0:2 : does not exist [ 124.829478][ T23] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 124.866826][ T27] hid (null): unknown global tag 0xe [ 124.886797][ T27] hid (null): unknown global tag 0xe [ 124.906087][ T27] hid (null): unknown global tag 0x63 [ 124.913935][ T23] usb 2-1: USB disconnect, device number 4 [ 124.923622][ T27] hid (null): unknown global tag 0xe [ 124.937027][ T6609] loop3: detected capacity change from 0 to 32768 [ 124.939912][ T27] hid (null): global environment stack underflow [ 124.959947][ T6609] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.243 (6609) [ 124.977656][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.988920][ T27] hid (null): unknown global tag 0xc [ 125.025373][ T27] hid (null): bogus close delimiter [ 125.041764][ T6609] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.046590][ T27] hid (null): invalid report_size 43024 [ 125.088694][ T27] hid (null): unknown global tag 0xd [ 125.089259][ T6609] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 125.094170][ T27] hid (null): unknown global tag 0x52 [ 125.135778][ T27] hid (null): unknown global tag 0xe [ 125.145706][ T27] hid (null): invalid report_size 222345300 [ 125.156356][ T6609] BTRFS info (device loop3): force clearing of disk cache [ 125.163648][ T6609] BTRFS info (device loop3): metadata ratio 0 [ 125.178264][ T27] usb 3-1: USB disconnect, device number 4 [ 125.236325][ T6609] BTRFS info (device loop3): enabling ssd optimizations [ 125.255258][ T6609] BTRFS info (device loop3): using spread ssd allocation scheme [ 125.264381][ T6609] BTRFS info (device loop3): using free space tree [ 125.359287][ T6609] BTRFS info (device loop3): auto enabling async discard [ 125.378071][ T6609] BTRFS info (device loop3): rebuilding free space tree [ 125.709140][ T6384] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.895173][ T6611] loop0: detected capacity change from 0 to 40427 [ 125.923320][ T6611] F2FS-fs (loop0): invalid crc value [ 125.935636][ T5801] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.991891][ T6611] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.142262][ T5801] usb 2-1: Using ep0 maxpacket: 16 [ 126.169246][ T6611] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.184088][ T5801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 150, changing to 11 [ 126.235614][ T5801] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 126.258888][ T5801] usb 2-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 126.286580][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.307712][ T5801] usb 2-1: config 0 descriptor?? [ 126.448615][ T5765] syz-executor: attempt to access beyond end of device [ 126.448615][ T5765] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.479646][ T5765] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 126.739575][ T5801] apple 0003:05AC:021C.0005: unknown main item tag 0x0 [ 126.766915][ T5801] apple 0003:05AC:021C.0005: unknown main item tag 0x0 [ 126.782423][ T5801] apple 0003:05AC:021C.0005: unknown main item tag 0x0 [ 126.795672][ T5801] apple 0003:05AC:021C.0005: unknown main item tag 0x0 [ 126.813160][ T5801] apple 0003:05AC:021C.0005: unknown main item tag 0x0 [ 126.835842][ T5801] apple 0003:05AC:021C.0005: unknown main item tag 0x0 [ 126.842810][ T5801] apple 0003:05AC:021C.0005: unknown main item tag 0x0 [ 126.871603][ T5801] apple 0003:05AC:021C.0005: unexpected long global item [ 126.916049][ T5801] apple 0003:05AC:021C.0005: parse failed [ 126.921956][ T5801] apple: probe of 0003:05AC:021C.0005 failed with error -22 [ 126.964969][ T5801] usb 2-1: USB disconnect, device number 5 [ 127.233357][ T6651] loop2: detected capacity change from 0 to 512 [ 127.306611][ T6651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.387846][ T6651] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.420911][ T6656] netlink: 'syz.0.255': attribute type 10 has an invalid length. [ 127.464742][ T6656] bond0: (slave bond_slave_0): Releasing backup interface [ 127.493407][ T6651] EXT4-fs error (device loop2): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.2.253: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 127.545289][ T6651] EXT4-fs (loop2): Remounting filesystem read-only [ 127.657481][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.800161][ T6647] loop3: detected capacity change from 0 to 32768 [ 127.930148][ T6647] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 128.071894][ T28] audit: type=1804 audit(1776863166.039:54): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.252" name="/newroot/13/file1/file1" dev="loop3" ino=17058 res=1 errno=0 [ 128.224803][ T6384] ocfs2: Unmounting device (7,3) on (node local) [ 128.616381][ T6669] loop2: detected capacity change from 0 to 32768 [ 128.650534][ T6669] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.751812][ T6669] XFS (loop2): Ending clean mount [ 128.769695][ T6669] XFS (loop2): Quotacheck needed: Please wait. [ 128.849741][ T6669] XFS (loop2): Quotacheck: Done. [ 128.905729][ T5801] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 128.953885][ T28] audit: type=1804 audit(1776863166.919:55): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.260" name="/newroot/55/file1/file1" dev="loop2" ino=6150 res=1 errno=0 [ 128.983427][ T5768] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.075944][ T5852] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 129.111064][ T5801] usb 4-1: Using ep0 maxpacket: 32 [ 129.129072][ T5801] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 129.159479][ T5801] usb 4-1: config 0 interface 0 has no altsetting 0 [ 129.176335][ T5801] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 129.217956][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.239645][ T5801] usb 4-1: config 0 descriptor?? [ 129.297796][ T5852] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 129.317298][ T5852] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 129.325450][ T5852] usb 2-1: config 0 has no interface number 0 [ 129.334272][ T5852] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 129.362271][ T5852] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 129.378082][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.410264][ T5852] usb 2-1: config 0 descriptor?? [ 129.418658][ T6688] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 129.785728][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.929551][ T6693] loop2: detected capacity change from 0 to 32768 [ 129.961016][ T6693] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.994398][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.006126][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.016645][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.030738][ T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.040886][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.043101][ T6693] XFS (loop2): Ending clean mount [ 130.054892][ T5852] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input12 [ 130.088617][ T23] usb 1-1: config 0 descriptor?? [ 130.180897][ T5801] corsair-cpro 0003:1B1C:0C10.0006: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 130.320592][ T5852] usb 2-1: USB disconnect, device number 6 [ 130.320688][ C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 130.509990][ T5768] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 130.561761][ T23] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 130.601517][ T23] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 130.618877][ T5801] corsair-cpro: probe of 0003:1B1C:0C10.0006 failed with error -110 [ 130.685708][ T5801] usb 4-1: USB disconnect, device number 7 [ 131.168658][ T6717] loop3: detected capacity change from 0 to 8 [ 131.786666][ T6724] Invalid argument reading file caps for ./file0 [ 131.898705][ T6715] loop1: detected capacity change from 0 to 32768 [ 131.908498][ T6715] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.271 (6715) [ 131.932941][ T6715] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.946656][ C1] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -1 [ 131.963904][ T6715] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 132.016671][ T6715] BTRFS info (device loop1): force clearing of disk cache [ 132.025205][ T6715] BTRFS info (device loop1): force zlib compression, level 3 [ 132.049947][ T6715] BTRFS info (device loop1): setting nodatacow [ 132.057803][ T6726] loop2: detected capacity change from 0 to 1024 [ 132.065828][ T6715] BTRFS info (device loop1): enabling auto defrag [ 132.086065][ T6726] EXT4-fs: Ignoring removed orlov option [ 132.104555][ T6715] BTRFS info (device loop1): turning off barriers [ 132.111544][ T6715] BTRFS info (device loop1): enabling disk space caching [ 132.120189][ T6726] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 132.129337][ T6715] BTRFS info (device loop1): disk space caching is enabled [ 132.217873][ T6726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.319214][ T6715] BTRFS info (device loop1): enabling ssd optimizations [ 132.321452][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.335583][ T6715] BTRFS info (device loop1): auto enabling async discard [ 132.346595][ T6715] BTRFS info (device loop1): rebuilding free space tree [ 132.396258][ T6715] BTRFS info (device loop1): disabling free space tree [ 132.404247][ T6715] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 132.421928][ T6715] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 132.580326][ T6750] loop2: detected capacity change from 0 to 64 [ 132.827536][ T5852] usb 1-1: USB disconnect, device number 5 [ 132.902854][ T59] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 133.146486][ T5775] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.157686][ T6766] loop2: detected capacity change from 0 to 512 [ 133.229361][ T6766] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.284: invalid indirect mapped block 256 (level 2) [ 133.261342][ T6766] EXT4-fs (loop2): 2 truncates cleaned up [ 133.268697][ T6766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.289907][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.315890][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.614226][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.841199][ T6783] loop2: detected capacity change from 0 to 256 [ 133.867017][ T6783] exfat: Deprecated parameter 'utf8' [ 133.995637][ T6783] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 134.479693][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 134.529297][ T6790] loop2: detected capacity change from 0 to 4096 [ 135.693265][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 135.712733][ T6818] netlink: 'syz.1.307': attribute type 18 has an invalid length. [ 135.725285][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 135.984994][ T6820] loop0: detected capacity change from 0 to 4096 [ 136.011116][ T6805] loop2: detected capacity change from 0 to 32768 [ 136.245836][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.461485][ T8] usb 2-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 136.496040][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 136.518096][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.549571][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.558605][ T8] usb 2-1: Product: syz [ 136.562819][ T8] usb 2-1: Manufacturer: syz [ 136.567969][ T8] usb 2-1: SerialNumber: syz [ 136.638380][ T6831] capability: warning: `syz.3.314' uses deprecated v2 capabilities in a way that may be insecure [ 136.795443][ T6822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.810359][ T6822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.822586][ T6836] overlayfs: upper fs does not support file handles, falling back to index=off. [ 136.836523][ T8] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 136.862829][ T8] usb 2-1: USB disconnect, device number 7 [ 136.915692][ T5852] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 137.125696][ T5852] usb 3-1: Using ep0 maxpacket: 16 [ 137.137366][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 150, changing to 11 [ 137.154254][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 137.173815][ T5852] usb 3-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 137.203919][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.224382][ T5852] usb 3-1: config 0 descriptor?? [ 137.415703][ T8] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 137.622232][ T8] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 137.630566][ T8] usb 2-1: config 16 has an invalid descriptor of length 114, skipping remainder of the config [ 137.645653][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.661641][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 137.667560][ T5852] apple 0003:05AC:021C.0008: unknown main item tag 0x0 [ 137.688989][ T5852] apple 0003:05AC:021C.0008: unknown main item tag 0x0 [ 137.690230][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24939, setting to 64 [ 137.697337][ T5852] apple 0003:05AC:021C.0008: unknown main item tag 0x0 [ 137.716749][ T5852] apple 0003:05AC:021C.0008: unknown main item tag 0x0 [ 137.723179][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.726831][ T5852] apple 0003:05AC:021C.0008: unknown main item tag 0x0 [ 137.735156][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.747026][ T5852] apple 0003:05AC:021C.0008: unknown main item tag 0x0 [ 137.760685][ T5852] apple 0003:05AC:021C.0008: unknown main item tag 0x0 [ 137.768072][ T5852] apple 0003:05AC:021C.0008: unexpected long global item [ 137.776467][ T6822] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.785418][ T5852] apple 0003:05AC:021C.0008: parse failed [ 137.791811][ T5852] apple: probe of 0003:05AC:021C.0008 failed with error -22 [ 137.973256][ T6854] loop0: detected capacity change from 0 to 512 [ 137.985829][ T8] usb 2-1: usb_control_msg returned -71 [ 137.993040][ T8] usbtmc 2-1:16.0: can't read capabilities [ 138.000291][ T6854] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.323: invalid indirect mapped block 256 (level 2) [ 138.020255][ T8] usb 2-1: USB disconnect, device number 8 [ 138.035915][ T6854] EXT4-fs (loop0): 2 truncates cleaned up [ 138.083100][ T5852] usb 3-1: USB disconnect, device number 5 [ 138.132406][ T6854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.270730][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.650205][ T6864] loop1: detected capacity change from 0 to 64 [ 138.904410][ T6868] loop0: detected capacity change from 0 to 2048 [ 138.959718][ T6868] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.042224][ T6868] overlayfs: upper fs needs to support d_type. [ 139.087492][ T6868] overlayfs: cleanup of 'work/#5' failed (-2) [ 139.126284][ T6868] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 139.155689][ T6868] overlayfs: failed to set xattr on upper [ 139.176043][ T6868] overlayfs: ...falling back to redirect_dir=nofollow. [ 139.205780][ T6868] overlayfs: ...falling back to index=off. [ 139.218230][ T6868] overlayfs: ...falling back to uuid=null. [ 139.365700][ T786] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 139.437822][ T6877] loop2: detected capacity change from 0 to 256 [ 139.446358][ T6877] exfat: Deprecated parameter 'namecase' [ 139.448092][ T6876] loop1: detected capacity change from 0 to 2048 [ 139.470680][ T6877] exfat: Deprecated parameter 'utf8' [ 139.511972][ T6877] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe5fd08b, utbl_chksum : 0xe619d30d) [ 139.531695][ T6879] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.576463][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 139.603330][ T786] usb 1-1: config 0 has no interfaces? [ 139.630966][ T786] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 139.650933][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.680426][ T786] usb 1-1: Product: syz [ 139.694998][ T786] usb 1-1: Manufacturer: syz [ 139.711717][ T786] usb 1-1: SerialNumber: syz [ 139.729787][ T786] usb 1-1: config 0 descriptor?? [ 139.993891][ T8] usb 1-1: USB disconnect, device number 6 [ 140.661320][ T6883] loop1: detected capacity change from 0 to 32768 [ 140.702151][ T6883] [ 140.702151][ T6883] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.702151][ T6883] [ 140.796029][ T6883] ERROR: (device loop1): diWrite: ixpxd invalid [ 140.796029][ T6883] [ 140.837607][ T6883] ERROR: (device loop1): txCommit: [ 140.837607][ T6883] [ 140.873268][ T6883] [ 140.873268][ T6883] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.873268][ T6883] [ 140.893989][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.343'. [ 140.915198][ T6883] [ 140.915198][ T6883] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.915198][ T6883] [ 140.994089][ T6883] ERROR: (device loop1): dtSearch: stack overrun! [ 140.994089][ T6883] [ 141.005237][ T6883] btstack dump: [ 141.014029][ T6883] bn = 0, index = 0 [ 141.019628][ T6883] bn = 30, index = 0 [ 141.023757][ T6883] bn = 0, index = 0 [ 141.041193][ T6883] bn = 30, index = 0 [ 141.055398][ T6883] bn = 0, index = 0 [ 141.065053][ T6883] bn = 30, index = 0 [ 141.083321][ T6883] bn = 0, index = 0 [ 141.095652][ T6883] bn = 0, index = 0 [ 141.113421][ T6883] jfs_lookup: dtSearch returned -5 [ 141.140380][ T6903] netlink: 'syz.3.345': attribute type 10 has an invalid length. [ 141.162519][ T6903] netlink: 55 bytes leftover after parsing attributes in process `syz.3.345'. [ 141.823082][ T5828] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 141.883932][ T6908] loop1: detected capacity change from 0 to 32768 [ 141.924874][ T6908] syz.1.346: attempt to access beyond end of device [ 141.924874][ T6908] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 141.944304][ T6908] lbmIODone: I/O error in JFS log [ 141.951035][ T6908] *** Log Format Error ! *** [ 141.962562][ T6908] lmLogInit: exit(-22) [ 141.967717][ T6908] lmLogOpen: exit(-22) [ 142.016531][ T5828] usb 1-1: Using ep0 maxpacket: 16 [ 142.027044][ T5828] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.041221][ T5828] usb 1-1: config 0 has no interface number 0 [ 142.048826][ T5828] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.067352][ T5828] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.087357][ T5828] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 142.125548][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.178191][ T5828] usb 1-1: config 0 descriptor?? [ 142.682606][ T6917] netlink: 36 bytes leftover after parsing attributes in process `syz.3.353'. [ 142.819142][ T5828] uclogic 0003:28BD:0071.0009: pen parameters not found [ 142.845756][ T5828] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring [ 142.914357][ T5828] usb 1-1: USB disconnect, device number 7 [ 143.066966][ T6919] loop1: detected capacity change from 0 to 8192 [ 143.101217][ T6919] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 143.183567][ T6919] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 143.234223][ T6919] REISERFS (device loop1): using ordered data mode [ 143.284883][ T6919] reiserfs: using flush barriers [ 143.305152][ T6919] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 143.366228][ T6919] REISERFS (device loop1): checking transaction log (loop1) [ 143.935426][ T6919] REISERFS (device loop1): Using tea hash to sort names [ 143.957766][ T6919] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 144.078005][ T5767] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.089830][ T5767] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.107405][ T5767] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.117252][ T5767] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.125361][ T5767] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.133296][ T5767] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.032534][ T6934] netlink: 'syz.3.360': attribute type 3 has an invalid length. [ 145.041391][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.360'. [ 145.227083][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.360'. [ 145.383162][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.542247][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.679498][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.715381][ T6925] chnl_net:caif_netlink_parms(): no params data found [ 145.842841][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.903683][ T6925] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.911396][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.926006][ T6925] bridge_slave_0: entered allmulticast mode [ 145.936308][ T6925] bridge_slave_0: entered promiscuous mode [ 145.953882][ T6925] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.992000][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.017038][ T6925] bridge_slave_1: entered allmulticast mode [ 146.024852][ T6925] bridge_slave_1: entered promiscuous mode [ 146.079322][ T6957] loop0: detected capacity change from 0 to 8192 [ 146.108467][ T6925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.125790][ T6957] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.147581][ T6925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.168504][ T6957] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 146.178021][ T6957] REISERFS (device loop0): using ordered data mode [ 146.184703][ T6957] reiserfs: using flush barriers [ 146.192068][ T6957] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.210166][ T6957] REISERFS (device loop0): checking transaction log (loop0) [ 146.217807][ T5771] Bluetooth: hci1: command tx timeout [ 146.297693][ T6925] team0: Port device team_slave_0 added [ 146.324558][ T6925] team0: Port device team_slave_1 added [ 146.471414][ T6957] REISERFS (device loop0): Using tea hash to sort names [ 146.489308][ T6957] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 146.540871][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.555596][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.617712][ T6925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.663174][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.686956][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.742101][ T6925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.301528][ T6925] hsr_slave_0: entered promiscuous mode [ 147.328907][ T6925] hsr_slave_1: entered promiscuous mode [ 147.366285][ T6925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.373933][ T6925] Cannot create hsr debugfs directory [ 148.232564][ T993] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 148.306559][ T5771] Bluetooth: hci1: command tx timeout [ 148.451583][ T6925] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 148.472106][ T6925] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 148.687397][ T7002] process '/newroot/58/file0' started with executable stack [ 148.699313][ T6925] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 148.731276][ T6925] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 149.036807][ T49] hsr_slave_0: left promiscuous mode [ 149.043475][ T49] hsr_slave_1: left promiscuous mode [ 149.073627][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.085690][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.094540][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.116838][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.125188][ T49] bridge_slave_1: left allmulticast mode [ 149.142529][ T49] bridge_slave_1: left promiscuous mode [ 149.157974][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.178961][ T49] bridge_slave_0: left allmulticast mode [ 149.184773][ T49] bridge_slave_0: left promiscuous mode [ 149.191604][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.278607][ T49] veth1_macvtap: left promiscuous mode [ 149.284904][ T49] veth0_macvtap: left promiscuous mode [ 149.306020][ T49] veth1_vlan: left promiscuous mode [ 149.311841][ T49] veth0_vlan: left promiscuous mode [ 149.492415][ T7011] loop0: detected capacity change from 0 to 32768 [ 149.519998][ T7011] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.381 (7011) [ 149.618277][ T7011] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.681592][ T7011] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 149.702591][ T7011] BTRFS info (device loop0): force clearing of disk cache [ 149.713224][ T7011] BTRFS info (device loop0): force zlib compression, level 3 [ 149.726679][ T7011] BTRFS info (device loop0): setting nodatacow [ 149.755762][ T7011] BTRFS info (device loop0): enabling auto defrag [ 149.765554][ T7011] BTRFS info (device loop0): turning off barriers [ 149.772062][ T7011] BTRFS info (device loop0): enabling disk space caching [ 149.795640][ T7011] BTRFS info (device loop0): disk space caching is enabled [ 149.980205][ T7011] BTRFS info (device loop0): enabling ssd optimizations [ 149.987607][ T7011] BTRFS info (device loop0): auto enabling async discard [ 149.998153][ T7011] BTRFS info (device loop0): rebuilding free space tree [ 150.073241][ T7011] BTRFS info (device loop0): disabling free space tree [ 150.117026][ T7011] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.145654][ T7011] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 150.379763][ T5771] Bluetooth: hci1: command tx timeout [ 150.458090][ T38] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 150.652958][ T5765] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.441046][ T49] team0 (unregistering): Port device team_slave_1 removed [ 151.500516][ T49] team0 (unregistering): Port device team_slave_0 removed [ 151.552205][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.612775][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.051381][ T49] bond0 (unregistering): Released all slaves [ 152.397064][ T6925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.452077][ T6925] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.473548][ T5771] Bluetooth: hci1: command tx timeout [ 152.490340][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.497634][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.510034][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.517292][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.616183][ T7066] Illegal XDP return value 2236842436 on prog (id 25) dev syz_tun, expect packet loss! [ 153.494019][ T6925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.066722][ T966] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 154.098763][ T7111] netlink: 14 bytes leftover after parsing attributes in process `syz.0.401'. [ 154.277059][ T966] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.308287][ T966] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.337079][ T966] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.355598][ T966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.370777][ T966] usb 2-1: SerialNumber: syz [ 154.414917][ T6925] veth0_vlan: entered promiscuous mode [ 154.484749][ T6925] veth1_vlan: entered promiscuous mode [ 154.586508][ T6925] veth0_macvtap: entered promiscuous mode [ 154.610768][ T6925] veth1_macvtap: entered promiscuous mode [ 154.627297][ T966] usb 2-1: 0:2 : does not exist [ 154.682159][ T966] usb 2-1: USB disconnect, device number 9 [ 154.737522][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.771622][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.825662][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.848919][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.896017][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.945636][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.018289][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.067195][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.110931][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.173749][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.258182][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.335125][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.370829][ T7136] loop0: detected capacity change from 0 to 128 [ 155.395572][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.480382][ T7136] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 155.495854][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.535737][ T7136] System zones: 1-3, 19-19, 35-36 [ 155.561464][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.594477][ T7136] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 155.635594][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.689152][ T7136] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.723899][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.785918][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.828226][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.028675][ T6925] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.054063][ T7136] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full [ 156.085617][ T6925] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.155426][ T6925] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.199905][ T6925] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.327424][ T5765] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.700506][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.735626][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.824933][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.851263][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.246322][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 158.451057][ T23] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 158.471002][ T23] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 158.493742][ T23] usb 5-1: Product: syz [ 158.538318][ T23] usb 5-1: config 0 descriptor?? [ 158.559396][ T23] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 158.578672][ T23] usb 5-1: Detected FT232H [ 158.585839][ T5852] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 158.785645][ T5852] usb 2-1: Using ep0 maxpacket: 16 [ 158.791037][ T23] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 158.812188][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.834693][ T5852] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 158.884592][ T5852] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 158.914968][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.937177][ T5852] usb 2-1: config 0 descriptor?? [ 159.032609][ T7252] loop0: detected capacity change from 0 to 128 [ 159.255046][ T23] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 159.976426][ T7267] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 160.044720][ T7267] loop0: detected capacity change from 0 to 256 [ 160.234616][ T7267] FAT-fs (loop0): Directory bread(block 64) failed [ 160.250917][ T7267] FAT-fs (loop0): Directory bread(block 65) failed [ 160.289013][ T7267] FAT-fs (loop0): Directory bread(block 66) failed [ 160.340890][ T7267] FAT-fs (loop0): Directory bread(block 67) failed [ 160.385898][ T7267] FAT-fs (loop0): Directory bread(block 68) failed [ 160.447122][ T7267] FAT-fs (loop0): Directory bread(block 69) failed [ 160.496977][ T7267] FAT-fs (loop0): Directory bread(block 70) failed [ 160.504037][ T7267] FAT-fs (loop0): Directory bread(block 71) failed [ 160.617978][ T7267] FAT-fs (loop0): Directory bread(block 72) failed [ 160.624596][ T7267] FAT-fs (loop0): Directory bread(block 73) failed [ 161.121211][ T5852] usbhid 2-1:0.0: can't add hid device: -71 [ 161.128854][ T5852] usbhid: probe of 2-1:0.0 failed with error -71 [ 161.141983][ T23] usb 5-1: USB disconnect, device number 2 [ 161.148231][ T5852] usb 2-1: USB disconnect, device number 10 [ 161.227481][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 161.252840][ T23] ftdi_sio 5-1:0.0: device disconnected [ 162.002592][ T7304] veth1_to_bond: entered allmulticast mode [ 162.029797][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 162.181138][ T7304] veth1_to_bond (unregistering): left allmulticast mode [ 162.229387][ T7304] bond0: (slave bond_slave_1): Releasing backup interface [ 162.344223][ T7283] loop4: detected capacity change from 0 to 40427 [ 162.366351][ T7283] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 162.403757][ T7283] F2FS-fs (loop4): heap/no_heap options were deprecated [ 162.425978][ T7283] F2FS-fs (loop4): LFS is not compatible with ATGC [ 162.573688][ T7309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.442'. [ 163.554950][ T7343] overlayfs: failed to clone upperpath [ 163.741775][ T7350] loop1: detected capacity change from 0 to 512 [ 163.770928][ T7350] EXT4-fs: Ignoring removed orlov option [ 163.814555][ T7350] EXT4-fs (loop1): Test dummy encryption mode enabled [ 163.842199][ T7350] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 163.874328][ T7350] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 163.914698][ T7350] EXT4-fs (loop1): 1 truncate cleaned up [ 163.923304][ T7350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.928428][ T7312] loop0: detected capacity change from 0 to 32768 [ 164.247814][ T111] blkno = 8ed2c, nblocks = 1 [ 164.252524][ T111] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 164.252524][ T111] [ 164.265663][ T7350] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 164.436453][ T111] ERROR: (device loop0): remounting filesystem as read-only [ 164.528459][ T7386] netlink: 64 bytes leftover after parsing attributes in process `syz.4.456'. [ 164.628163][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.736037][ T5765] JFS: metapage_get_blocks failed [ 165.565130][ T7408] loop0: detected capacity change from 0 to 8192 [ 165.594221][ T7408] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 165.628846][ T7408] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 165.657697][ T7408] REISERFS (device loop0): using ordered data mode [ 165.697797][ T7408] reiserfs: using flush barriers [ 165.761685][ T7408] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 165.799815][ T7408] REISERFS (device loop0): checking transaction log (loop0) [ 166.110496][ T7408] REISERFS (device loop0): Using tea hash to sort names [ 166.150679][ T7408] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 166.242716][ T7408] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 167.089449][ T7451] syzkaller1: entered promiscuous mode [ 167.097714][ T7451] syzkaller1: entered allmulticast mode [ 167.985218][ T7482] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 168.028337][ T7482] overlayfs: maximum fs stacking depth exceeded [ 169.576999][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 169.797936][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.828326][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.860670][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.924854][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.946478][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.978164][ T8] usb 1-1: config 0 descriptor?? [ 170.478427][ T8] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 170.487356][ T5771] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 170.519820][ T8] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 170.687172][ T7553] netlink: 48 bytes leftover after parsing attributes in process `syz.3.512'. [ 170.730879][ T7553] netlink: 48 bytes leftover after parsing attributes in process `syz.3.512'. [ 170.831607][ T7527] loop1: detected capacity change from 0 to 32768 [ 170.911197][ T7527] (syz.1.505,7527,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 170.965948][ T7527] (syz.1.505,7527,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 171.064461][ T7527] JBD2: Ignoring recovery information on journal [ 171.221388][ T7527] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 171.745001][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 172.395458][ T7599] fuse: Bad value for 'fd' [ 172.522185][ T7604] loop0: detected capacity change from 0 to 64 [ 172.605966][ T8] IPVS: starting estimator thread 0... [ 172.647111][ T7197] ------------[ cut here ]------------ [ 172.652650][ T7197] kernel BUG at fs/hfs/inode.c:449! [ 172.660064][ T7197] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 172.666190][ T7197] CPU: 0 PID: 7197 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 172.666403][ T5770] usb 1-1: USB disconnect, device number 8 [ 172.673837][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 172.673855][ T7197] Workqueue: writeback wb_workfn (flush-7:0) [ 172.696051][ T7197] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 172.701627][ T7197] Code: c7 c1 00 f3 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 f3 30 97 e8 20 fa 83 ff e9 62 fe ff ff e8 a6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 172.721259][ T7197] RSP: 0018:ffffc900037b7340 EFLAGS: 00010293 [ 172.727370][ T7197] RAX: ffffffff825b5f5a RBX: ffff888079ca2f28 RCX: ffff88802a31da00 [ 172.735385][ T7197] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000 [ 172.743398][ T7197] RBP: ffffc900037b74d0 R08: ffff88802a31da00 R09: 0000000000000003 [ 172.751405][ T7197] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 172.759426][ T7197] R13: 1ffff920006f6e6c R14: ffff888079ca2ed8 R15: 0000000000000000 [ 172.765718][ T7607] IPVS: using max 38 ests per chain, 91200 per kthread [ 172.767422][ T7197] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 172.767442][ T7197] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.790126][ T7197] CR2: 0000001b2d41dff8 CR3: 00000000681b5000 CR4: 00000000003506f0 [ 172.798121][ T7197] Call Trace: [ 172.801436][ T7197] [ 172.804404][ T7197] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 172.809828][ T7197] ? __rwlock_init+0x150/0x150 [ 172.814645][ T7197] __writeback_single_inode+0x705/0xec0 [ 172.820232][ T7197] writeback_sb_inodes+0x7cd/0xf50 [ 172.825452][ T7197] ? queue_io+0x550/0x550 [ 172.829829][ T7197] ? rcu_is_watching+0x15/0xb0 [ 172.834702][ T7197] wb_writeback+0x46a/0xbf0 [ 172.839237][ T7197] ? queue_io+0x351/0x550 [ 172.843588][ T7197] ? percpu_ref_tryget+0x250/0x250 [ 172.848711][ T7197] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 172.854717][ T7197] ? _raw_spin_unlock_irq+0x23/0x50 [ 172.860027][ T7197] wb_workfn+0x400/0xe60 [ 172.864292][ T7197] ? try_to_wake_up+0x70a/0x1190 [ 172.869251][ T7197] ? inode_wait_for_writeback+0x230/0x230 [ 172.874991][ T7197] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 172.880980][ T7197] ? read_lock_is_recursive+0x20/0x20 [ 172.886463][ T7197] ? _raw_spin_unlock_irq+0x23/0x50 [ 172.891678][ T7197] ? process_scheduled_works+0x96f/0x15d0 [ 172.897415][ T7197] ? process_scheduled_works+0x96f/0x15d0 [ 172.903143][ T7197] process_scheduled_works+0xa5d/0x15d0 [ 172.908713][ T7197] ? worker_attach_to_pool+0x380/0x380 [ 172.914187][ T7197] ? assign_work+0x3d2/0x5d0 [ 172.918799][ T7197] worker_thread+0xa55/0xfc0 [ 172.923418][ T7197] kthread+0x2fa/0x390 [ 172.927504][ T7197] ? pr_cont_work+0x560/0x560 [ 172.932278][ T7197] ? kthread_blkcg+0xd0/0xd0 [ 172.936875][ T7197] ret_from_fork+0x48/0x80 [ 172.941308][ T7197] ? kthread_blkcg+0xd0/0xd0 [ 172.945906][ T7197] ret_from_fork_asm+0x11/0x20 [ 172.950771][ T7197] [ 172.953797][ T7197] Modules linked in: [ 172.980501][ T7197] ---[ end trace 0000000000000000 ]--- [ 172.987660][ T7197] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 172.993570][ T7197] Code: c7 c1 00 f3 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 f3 30 97 e8 20 fa 83 ff e9 62 fe ff ff e8 a6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 173.016715][ T7197] RSP: 0018:ffffc900037b7340 EFLAGS: 00010293 [ 173.022856][ T7197] RAX: ffffffff825b5f5a RBX: ffff888079ca2f28 RCX: ffff88802a31da00 [ 173.043173][ T7197] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000 [ 173.063266][ T7197] RBP: ffffc900037b74d0 R08: ffff88802a31da00 R09: 0000000000000003 [ 173.071526][ T7197] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 173.080616][ T7197] R13: 1ffff920006f6e6c R14: ffff888079ca2ed8 R15: 0000000000000000 [ 173.088685][ T7197] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 173.097697][ T7197] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.104312][ T7197] CR2: 0000555c6203a168 CR3: 000000007947d000 CR4: 00000000003506f0 [ 173.112455][ T7197] Kernel panic - not syncing: Fatal exception [ 173.118792][ T7197] Kernel Offset: disabled [ 173.123152][ T7197] Rebooting in 86400 seconds..