last executing test programs: 7m7.770317502s ago: executing program 32 (id=309): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 4m15.277933706s ago: executing program 1 (id=1873): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000040)={r2, 0x2, 0x8, 0x0, &(0x7f0000000100)}) 4m15.047893662s ago: executing program 1 (id=1876): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) 4m14.837395286s ago: executing program 1 (id=1878): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x8340, 0x101) 4m14.521545508s ago: executing program 1 (id=1882): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x8000, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x104d886, 0x0) 4m12.812486655s ago: executing program 1 (id=1895): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x380, 0x260, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 4m11.41943382s ago: executing program 1 (id=1907): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000780)={[{@rodir}, {@fat=@errors_remount}, {@shortname_winnt}, {@fat=@sys_immutable}, {@shortname_win95}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_win95}, {@shortname_win95}, {@numtail}, {@shortname_lower}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1ff}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}]}, 0x1, 0x34c, &(0x7f0000000980)="$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") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x209, &(0x7f0000000200)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) 4m11.123448941s ago: executing program 33 (id=1907): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000780)={[{@rodir}, {@fat=@errors_remount}, {@shortname_winnt}, {@fat=@sys_immutable}, {@shortname_win95}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_win95}, {@shortname_win95}, {@numtail}, {@shortname_lower}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1ff}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}]}, 0x1, 0x34c, &(0x7f0000000980)="$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") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x209, &(0x7f0000000200)="$eJzs3c9uEmEQAPChpfwxHnozMTFZ40FPjfoENaYmRhKTGg56a2JP5QQX4NI+hq/ge/kApicu5jO4bEGgiERA9Pe7dLrzze4OG5a9MKTIfbn3KWq1Uuwdx3EMSnEYe1G4imnlmS0AwO4YpBRfU+73qz0HAMAuWuLz/9uGTwkAWLN37z+8edFonJxmWS3i+qrb7Dbzv3n+1evGydPsh8Nx1XW329y/yT/Lpp8dhvmDuDPKP8/rs5t0JSKalXjyKM8Pcy/fNrKf66vxcc29AwAAAAAAAAAAAAAAAAAAAADAtjyIrDB3vs/R0XS+Psrn/03MB5qa31OO+8V44PF4oHS5iaYAAAAAAAAAAAAAAAAAAABgx3R6/YuzVuu8PQ6qETG5pTxnze1BabTjpRZvP9iL1crrozZXOGhp9BKtt8H6/Iu7TBDlv+XqrBpkf2qH1eIyz6bqUVpQntIwmP8uKMZi3FpeiYjFJ/b4dNW+Biml1ueH7U4v0sLF43tEdWN3IwAAAAAAAAAAAAAAAAAA+L9NfOt7Rm1/G2cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJvX6fWLX/nvX5y1WuftTm/p4DIi7sYvFxfHOoja9hoFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgn/Y9AAD//ybtHK4=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) 3m12.733039437s ago: executing program 4 (id=2362): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card0/oss_mixer\x00', 0x101001, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) write$proc_mixer(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\"'], 0x33) close(r0) 3m12.374034562s ago: executing program 4 (id=2368): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x7f) 3m12.054793493s ago: executing program 4 (id=2370): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x0, 0x4, 0x22, 0x1, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 3m11.857938707s ago: executing program 4 (id=2372): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x8000, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x104d886, 0x0) 3m10.366321619s ago: executing program 4 (id=2383): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000080)='\x00\x00', 0xfdef, 0x8080, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="a4e80a0f0cb7221a55fa11a7774edce647d4ce55e54a4a1f702e2529442db1df2bb4861b7a046daebd2e285783bba51cbb5a0b440a367a481dd299e22e6166500a3ef315b39217084c", 0x49}, {&(0x7f0000000380)="9a9dc1421462c27098d2444c3e2eeff649e942f43c9df768395a66284830aeefb11a79fb155fad2c55f808010cd0f04899e97059a0642a124686f461bc65c3597eea51a8ac832ad81639b5bc123c84eedaaa62290deae53b961d528544bc6cdd9770f12575358e22989a93ade7b6d659e90f6516de53674df3a68959be5018b5c30c7b85ecde35149d25ddef2e3aa97581915a6cf84416a1db90c18a8f3102e7bf585a3cb6615ff3d715e2d42943428e6ab0f690ff33fb73432b", 0xba}, {&(0x7f00000001c0)="11d754ff8c", 0x5}, {&(0x7f00000007c0)="39e4002f666948eb7a4c25bcc1bf120531dacc287df0a7956bf34adfd0bd0370dc5fb47800f1b9f3b8c48bf7ff5d9af8d201782eef205a5caff7cad3c3b44b383700e5cdc1751add33d0ae69491bafceaa6dc7fa997720c6e7f638d828a86ab68909264b5e117b25d1623c179cf55be2ad5d7a82cec8e8cc11584d8c11c841d9206afdbc6a6bbff6c97b9e082eba70c0c09650", 0x93}, {&(0x7f0000000580)="3daea5b8894265737bd53a6ec5c93e011772dd5f39ebbc43d6a81d511d1a8261fe08b75b67e9410faa7025396bf564a191051578cb83e66b81d97d066173968254227aa7a40618b7206bef03304c5e5bb6ff6a99ab401e661744", 0x5a}], 0x5}}], 0x1, 0x40000) 3m9.114041546s ago: executing program 4 (id=2391): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 3m8.682819725s ago: executing program 34 (id=2391): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 2m45.020989438s ago: executing program 0 (id=2556): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$packet(0x11, 0xa, 0x300) 2m43.813290391s ago: executing program 0 (id=2565): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) wait4(r0, 0x0, 0x8, 0x0) 2m43.468057415s ago: executing program 0 (id=2571): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/107, 0x6b}], 0x1, &(0x7f0000001640)=""/106, 0x6a}, 0x100}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x12300, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) close(r0) 2m43.186367384s ago: executing program 0 (id=2577): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./mnt\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES32=0x0], 0x1, 0xc58, &(0x7f00000000c0)="$eJzs3UFsHNd9B+D/G+2KSxutmDhRnTQuNm2RyorlypJiKlbhrmqabQBZFkIxtwBciZS6NUUSJNXIRtoyvfTQQ4Ci6CEnAq1RIEUDowmCHpnWBZKLD0WAAj0RLWwERQ9sESCngMHMvqWWNGnToihR0vfZ1G939r2Z9+atZ2RBb14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG/9/L5k8+l+90KAOBeujj25ZOn3P8B4JFy2f//AwAAAAAAAAAAAADAQZeiiCcixdzFtTRRve9qXOjUb94aHxndvtpgqmoeqsqXP43nTp0+84Xnh8/28kJn5gPq322fjlfHLp9vvjR7Y25+amFharI5PtO5Ojs5tes97LX+VserE9C88drNyWvXFpqnnj296eNbQ+8NPH506Nzw0yee6pUdHxkdHbtdpNFfvnbHDenaaYbH4SjiRKR45js/Se2IKGLv56Jxb8d+q8GqE8erToyPjFYdme60ZxbLDy/1TkQR0eyr1Oqdo+3HImr1e9qHnbUilsrmlw0+XnZvbK49374yPdW81J5f7Cx2ZmcupW5ry/40o4izKWI5IlYH3r+7ehRRixTfOrKWrkTEod55+Hw1MXjndhT72MddKNvZrEcsFw/AmB1gA1HEK5Hip28fi6v5OlNdaz4X8UqZ3494s8wXI1L5xTgT8e423yMeTLUo4i/L8T+3liar60HvunLhK80vzVyb7Svbu658xPvD+64U9+n+MLgl740Dfm1qRBHt6oq/lu78NzsAAAAAAAAAAAAAAAAA3G2DUcSnIsXL//7H1bziqOalHzk3/PtDv9Q/Z/zJD9lPWfbZiFgqdjcn93CeGHgpXUrpPs8lfpQ1oog/yfP/vnG/GwMAAAAAAAAAAAAAAAAAAPBIK+LHkeKFd46l5ehfU7wzc715uX1lursqbG/t396a6evr6+vN1M1WzomcSzmXc67kXO1mNe+/ql/k+jknci7lXM65knM1ZxzK9XO2ck7kXMq5nHMl52rOqOX6OVs5J3Iu5VzOuZJzNWcckLV7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeJkUU8fNI8c2vraVIEdGKmIhurgzc79YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKWBVMR3I0XzD1ob22oRkap/u46Vv5yJ1uEyPx6t4TJfjNb5nO0qa61v3If2szf1VMSPIsVA462NAc/jX+++2/gaxJtfv/3u07VuHup9OPTewONHj5wbHv21J3d6nbZrwPELnZmbt5rjI6OjY32ba/noH+/bNpSPW9ydrhMRC6+/8Vp7enpq/s5flF+BHT5aX1//s/Ioez3EAXmRajv29JF8UQ7tAWjGPnawtqvC9QPQ1H0ZXB525f3/3Ujx2+/8Z++GX93/axslNu7w8bM/vX3/f2HrjnZ5/69trZfv/+U9fbv7/xN9217Ivxup1yIaizfm6kcjGguvv3Gic6N9fer61MyZkye/ODz8xdMn64cjGtc601N9r/Z+rgAAAAAAAAAAAAAAAADuqVTE70aK9o/WUjMiblXztYbODT994qlDcaiab7Vp3varY5fPN1+avTE3P7WwMDXZHJ/pXJ2dnNrt4RrVdK/xkdF96cyHGtzn9g82Xpqde32+c/0PF7f9/LHG+SsLi/Ptq9t/HINRRLT6txyvGjw+Mlo1errTnqmqXtp2Mv1HV09F/FekuHqmmT6bt+X5/1tn+G+a/7+0dUf7NP//Y33bymOmVMTPIsVv/dWT8dmqnY/F+85ZLvd3keL42c/kcnG4LNdrQ/e5At2ZgWXZ/4sU//TzzWV78yGfuF32uV2f2AdEOf5HIsV3/+Lb8et52+bnP2w//o9t3dE+jf8n+rY9tul5BXvuOnn8T0SKF594K34jb/ug53/0nr1xLBfeeD7HPo3/J/u2DeXj/ubd6ToAAAAAAAAAAMADrZ6K+PtI8YPRWno+b9vN3/+b3Lqjffr7X7/St23y7qxX9KEv9nxSAQAAAOCAqKcifhwpri++tTGHevP87775n79ze/7nSNryafXnfL9cPTfgbv75X7+hfNyJvXcbAAAAAAAAAAAAAAAAAAAADpSUing+r6c+Uc3nn9xxPfWVSPHy/zyTy6WjZbneOvBD1a+Ni7MzJ85PT89ebS+2r0xPNcfm2lenyrqfiBRrf/uZXLeo1lfvrTffXeO9UYuIai32+Ugx+g+9st212Htrk3fXA++uxV6W/Vik+O9/3Fy2t471J2+XPVWW/ZtI8dV/3r7s0dtlT5dlvx0pfvjVZq/sY2XZ3vNRu88kbfxRRDx7dbbYh1EBAAAAAAAAAAAAAAAAAADgUVNPRfx5pPjfG8sbc/nz+v/1vreVN7/et97/Freqdf6HqvX/d3p9J+v/V88VWNrpqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HBKUcQbkWLu4lpaGSjfdzUudGZu3hofGd2+2mCqah6qypc/jedOnT7zheeHz/byg+vfbZ+KV8cun2++NHtjbn5qYWFqsjk+07k6Ozm16z3sXL9xRy06Xp2A5o3Xbk5eu7bQPPXs6U0f3xp6b+Dxo0Pnhp8+8VSv7PjI6OhYX5la/Y6OvK20w/bDUcRfR4pnvvOT9IOBiCI+8Fzsyod8d/bbYNWJ41UnxkdGq45Md9ozi+WHl3onooho9lVq9c7RPRiLPWlFLJXNLxt8vOze2Fx7vn1leqp5qT2/2FnszM5cSt3Wlv1pRhFnU8RyRKwOvH939SjitUjxrSNr6V8GIg71zsPnL459+eSpndtR7GMfd6FsZ7MesVw8AGN2gA1EEd+LFD99+1j860BELbo/8bmIV8r8fsSb0R3vVH4xzkS8u833iAdTLYr4/3L8z62ltwfK60HvunLhK80vzVyb7Svbu64cqPvD9/7jo9YYvBuH3bUDfm1qRBE/rK74a+nf/HcNAAAAAAAAAAAAAAAAcIAU8auR4oV3jqVqfvDGnOLOzPXm5faV6e60vt7cv96c6fX19fVm6mYr50TOpZzLOVdyruaMItfP2Sqzsb4+kd8v5VzOuZJzNWccyvVztnJO5FzKuZxzJedqzqjl+jlbOSdyLuVczrmSczVnHJC5ewAAAAAAAAAAAAAAAAAAwMOlqP5J8c2vraX1ge760hPRzRXrgT70fhEAAP//cjv0Pg==") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m42.548239018s ago: executing program 0 (id=2596): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x300, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) 2m42.399470598s ago: executing program 6 (id=2588): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/107, 0x6b}], 0x1, &(0x7f0000001640)=""/106, 0x6a}, 0x100}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x12300, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) close(r0) 2m42.075574271s ago: executing program 6 (id=2591): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64000101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x9}, 0xc) 2m41.894026173s ago: executing program 0 (id=2593): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) 2m41.883552943s ago: executing program 6 (id=2594): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008084) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000580)=0x8000, 0x4) recvmmsg(r0, &(0x7f0000007440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0xd62943cc78d89c32, 0x0) 2m41.384176627s ago: executing program 35 (id=2593): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) 2m41.356513249s ago: executing program 6 (id=2597): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./mnt\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES32=0x0], 0x1, 0xc58, &(0x7f00000000c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m40.704556444s ago: executing program 6 (id=2600): unshare(0x6a040000) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0x4, 0x2b, 0x20, 0x1f71, 0x3306, 0x1b23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfd, 0xe0}}]}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) 2m39.397999594s ago: executing program 6 (id=2608): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x3, 0x25, &(0x7f0000000000)="f6dd652d368a182e22d6558a92630076ca321205cdb64e5f4a89e679ded1a87256680925fe", 0x9, 0xae, 0x15c2, 0x7fff, 0xc336, 0x3, 0xb, 'syz0\x00'}) 2m39.033530349s ago: executing program 36 (id=2608): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x3, 0x25, &(0x7f0000000000)="f6dd652d368a182e22d6558a92630076ca321205cdb64e5f4a89e679ded1a87256680925fe", 0x9, 0xae, 0x15c2, 0x7fff, 0xc336, 0x3, 0xb, 'syz0\x00'}) 1m58.900943823s ago: executing program 9 (id=2872): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m58.535321127s ago: executing program 9 (id=2876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1m56.337592918s ago: executing program 9 (id=2896): socket$igmp6(0xa, 0x3, 0x2) socket(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') pread64(r0, &(0x7f0000000080)=""/237, 0xed, 0x5) 1m56.120810713s ago: executing program 9 (id=2899): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@noauto_da_alloc}, {@quota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 1m55.483891937s ago: executing program 9 (id=2904): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) unshare(0x400) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000011c0)={0xa, 0x4e24, 0x0, @mcast2, 0x7}, 0x1c) 1m54.618175296s ago: executing program 9 (id=2909): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chmod(0x0, 0x3c8) 1m54.237075342s ago: executing program 37 (id=2909): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chmod(0x0, 0x3c8) 4.36323992s ago: executing program 5 (id=3861): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@noblock_validity}, {@auto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000080)='.\x00', 0x10000, 0x5b) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.677325307s ago: executing program 5 (id=3868): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, r0, 0x8de13c6b70ae92c3, 0x70bd26, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x7b, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbb}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.560734265s ago: executing program 7 (id=3869): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@barrier}, {@journal_dev={'journal_dev', 0x3d, 0x80}}, {@noquota}, {@errors_remount}, {@auto_da_alloc}, {@discard}]}, 0x1, 0x5b3, &(0x7f0000000a40)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) write$tcp_mem(r0, &(0x7f0000000140)={0x200000, 0x20, 0x7, 0x20, 0x7f}, 0x48) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="85", 0x1}], 0x1, 0x2, 0x0, 0xb) 3.303980883s ago: executing program 5 (id=3871): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x30, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}]]}, 0x30}, 0x1, 0x0, 0x0, 0x7040}, 0x20004800) 3.227820628s ago: executing program 5 (id=3872): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r0, &(0x7f0000000340)='~', 0x1, 0x24008015, &(0x7f0000000140)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x7ff, 0x9fa6, 0xf, 0x8000, 0xaf9}, 0x14) 3.186968431s ago: executing program 2 (id=3873): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x20, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x94}}, 0x0) 2.938940548s ago: executing program 2 (id=3875): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000206c0)={[{@volume={'volume', 0x3d, 0xffff}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@umask={'umask', 0x3d, 0x7}}, {@noadinicb}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@uid_ignore}, {@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@rootdir={'rootdir', 0x3d, 0x5}}, {@undelete}, {@uid_forget}, {@unhide}]}, 0x1, 0xc80, &(0x7f000001fa40)="$eJzs3UFsHNd9P/DfG5LiSv7/KyZOFSeNg01bpLJiubKkmLJVuKuaZhtAloVQzC0AVyKlLkyRBEk1suG2TC899BCgKHrIiUArFEjRwGiKoEemdYHk4kORU09ECxtB0QNbBAjQIt1iZt+KK4q0aFEUKfnzscnv7sx7M+/NLGdsgm9eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARv/XquRPPp01W9O1BYwCAh+LC2FdPnNzs/g8APLYubfX//wAAAAAAAAAAAAAAwH6RoognI8XchbU0Ub3vqJ1vDdy4OT4yunm1g6mq2VeVL79qz588dfrLLwyf6eb51syH1H/QPhuvj106V39l9vrc/NTCwtRkfXymdWV2cmrbW9hp/Y2OVQegfv2NG5NXry7UTz536o7VN4c+GHziyNDZ4WeOP90tOz4yOjq2XqTWW77/vhvSsdUIjwNRxPFI8ex3f5KaEVHEzo9F7eGe+40OVp04VnVifGS06sh0qzmzWK682D0QRUS9p1Kje4w2PxfRP/BQ+7C1RsRS2fyywcfK7o3NNeebl6en6heb84utxdbszMXUaW3Zn3oUcSZFLEfE6uDdmxuIIvojxbcPr6XL+akf1XH4UjUweOt2FLvYx20o21kfiFguHoFzto8NRhGvRYqfvns0ruTrTHWt+WLEa2V+P+JWmS9HpPKDcTri/U0+Rzya+qOIPynP/9m1NFldD7rXlfNfq39l5upsT9nudeUj3h/uulLs0f3h4IZ8OPb5takWRTSrK/5a6j2BB/awTQAAAAAAAAAAAAAAAAB0Bkt/JlK8+s+/V40rjmpc+uGzw7899P97x4w/dY/tlGWfi4ilYntjcg/kgYEX08WU9ngs8cdZLYr4/Tz+75t73RgAAAAAAAAAAAAAAAAAAICPtSJ+HCleeu9oWo7eOcVbM9fql5qXpzuzwnbn/u3Omd5ut9v11MlGzomcSzmXc67kXM0ZRa6fs5FzIudSzuWcKzlXc0Zfrp+zkXMi51LO5ZwrOVdzRn+un7ORcyLnUs7lnCs5V3PGPpm7FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgcVJEET+PFN/6xlqKFBGNiIno5MrgXrcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNpiK+Fynqv9O4vaw/IlL1b8fR8tvpaBwo85PRGC7z5Wicy9mssr/xzT1oPzszkIr4UaQYrL1z+4Tn8z/QeXf7YxC33l5/99n+TvZ1Vw59MPjEkcNnh0c//9RWr9NmDTh2vjVz42Z9fGR0dKxncX/e+yd7lg3l/RYPputExMKbb73RnJ6emr//F+VH4D6rd8/kDvb+MF+k/m02tYjdacb/7oOD8HF6Ef27v6/DW/wM7vXPxZ3XidoeXJvYfeX9//1I8evv/Uv3ht+5/9fi/3Xe3b7Dx8/+YP3+/9LGDW3z/t+/sV6+/5d3grED64u79/8ne4q+lP9rZKA/orZ4fW7gSERt4c23jreuN69NXZuaOX3ixIvDwy+eOjFwIKJ2tTU91fPqwRwvAAAAAAAAAAAAAAAAgIcmFfGbkaL5o7VUj4ib1XitobPDzxx/ui/6qvFWd4zbfn3s0rn6K7PX5+anFhamJuvjM60rs5NT291drRruNT4yuiuduaeDu9z+g7VXZufenG9d+93FTdcfqp27vLA437yy+eo4GEVEo3fJsarB4yOjVaOnW82ZqurFTQfTf3QDqYh/jRRXTtfTF/KyPP5/4wj/uPX2i7c/C0sbN/QAx/9//tD6+L9P9BQt95lSET+LFL/2p0/FF6p2Hoq7jlku95eR4tiZz+VycaAs121D57kCnZGBZdn/jBR/+/M7y3bHQz65Xvb5j3RwHwHl+T8cKb73x9+JX87L7nz+Q+/5Xz9+hzZuaJee//CpnmWH7nhewY67Tj7/xyPFy0++E79SLfnvD33+R/eJDUc7hdefz7FL5/8Xe5YN5f3+6oPqPAAAAAAAAAAAwCNsIBXxV5HiB6P96YW8bDt//ze5cUO79Pdfn+5ZNvlg5iu654sdH1QAAAAA2CcGUhE/jhTXFt+5PYb6zvHfPeM/f2N9/OdI2rC2+j3fL1TPDXiQv//rNZT3O7HzbgMAAAAAAAAAAAAAAAAAAMC+klIRL+T51Ceq8fyTW86nvhIpXv33Z3O5dKQs150Hfqj6XrswO3P83PT0bC0Wm5enp+pjc80rU2XdT0WKtb/4XK5bVPOrd+eb78zxvj4X+3ykGP3rbtnOXOzduck784HX2u2I58uyn4gU//Y3d5bNU1PnuaOr7Z4sy/55pPj6329e9sh62VNl2e9Eih9+vd4te6gs230+6qfXyz53ZbbYhbMCAAAAAAAAAAAAAAAAAADAx81AKuKPIsV/XF++PZY/z/8/0PO2cuvtnvn+N7hZzfM/VM3/v9Xr+5n/v3quwNJWewUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMdTiiLeihRzF9bSymD5vqN2vjVz4+b4yOjm1Q6mqmZfVb78qj1/8tTpL78wfKabH17/QftMvD526Vz9ldnrc/NTCwtTk/XxmdaV2cmpbW9hp/U3OlYdgPr1N25MXr26UD/53Kk7Vt8c+mDwiSNDZ4efOf50t+z4yOjoWE+Z/oH73vtd0hbLD0QRfxYpnv3uT9IPBiOK2PmxuMdnZ7cdrDpxrOrE+Mho1ZHpVnNmsVx5sXsgioh6T6VG9xjd81z8T7vdflhd2UQjYqlsftngY2X3xuaa883L01P1i835xdZia3bmYuq0tuxPPYo4kyKWI2J18O7NDUQRb0SKbx9eS/8wGNHXPQ5fujD21RMnt25HsYt93IaynfWBiOViO+eMrQxGEX8XKX767tH4x8GI/uh8xRcjXivz+xG3onO+U/nBOB3x/iafIx5N/VHEf5Xn/+xaenewvB50ryvnv1b/yszV2Z6y3evKDu8P7Xb7D8vck/tDUd4fHqZ9fm2qRRE/rK74a+mf/FwDAAAAAAAAAAAAAAAA7CNF/FKkeOm9o6kaH3x7THFr5lr9UvPydGdYX3fsX3fMdLvdbtdTJxs5J3Iu5VzOuZJzNWcUuX7ORpm1dnsiv1/KuZxzJedqzujL9fuq4YrtRn4/kXMp53LOlZyrOaM/18/ZyDmRcynncs6VnKs5Y5+M3QMAAAAAAAAAAAAAAAAAAB4vRfVPim99Yy21BzvzS09EJ1fMB/rY+78AAAD//x5L9aw=") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x4004032, 0xffffffffffffffff, 0xb06cb000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.928377489s ago: executing program 7 (id=3876): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x52, &(0x7f0000000840)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x1c, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x5, "8bf8ca"}]}}}}}}}}, 0x0) 2.693092045s ago: executing program 7 (id=3878): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setregid(0x0, 0x0) 2.577337753s ago: executing program 2 (id=3879): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) 2.314056471s ago: executing program 2 (id=3881): pipe2(&(0x7f0000000000), 0x800) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.222202747s ago: executing program 5 (id=3882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x38, r1, 0x101, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_KEYS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044015}, 0x48000) 2.107645745s ago: executing program 5 (id=3884): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f0000001a80)={0xfffffffffffffd1d, 0x0, &(0x7f00000019c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000cc0)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2a, @string={0x2a, 0x3, "8c8d230e200cc6e014538f05c5f12a4ddaf5197e0ae2cfd1b0f19713b9d571ec90338eba587469df"}}, 0x0, 0x0, 0x0}, &(0x7f0000001280)={0x84, &(0x7f0000000d00)={0x20, 0xa}, 0x0, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x120, 0x40}}, &(0x7f0000000f80)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0x59}, &(0x7f0000001000)={0x40, 0xb, 0x2, "b21b"}, &(0x7f0000001040)={0x40, 0xf, 0x2}, 0x0, &(0x7f0000001100)={0x40, 0x17, 0x6, @local}, &(0x7f0000001140)={0x40, 0x19, 0x2, "ab2b"}, 0x0, 0x0, 0x0, 0x0}) 1.791633637s ago: executing program 8 (id=3887): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x98, &(0x7f00000004c0)=ANY=[], 0xff, 0xa4, &(0x7f0000000180)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) 1.708393412s ago: executing program 7 (id=3889): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$affs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x14000, &(0x7f0000002780)={[{@notruncate}, {@bs={'bs', 0x3d, 0x800}}, {@notruncate}, {@verbose}, {@mode={'mode', 0x3d, 0xf}}, {@verbose}, {@mode={'mode', 0x3d, 0x4}}, {@bs={'bs', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x6}}, {@mufs}, {@verbose}]}, 0x4, 0x9deb, &(0x7f0000013c80)="$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") 1.518173285s ago: executing program 8 (id=3890): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) 1.409959162s ago: executing program 2 (id=3891): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x0, &(0x7f0000001180), 0x1, 0x10ec, &(0x7f00000011c0)="$eJzs2D2LE0EcBvBnNukjc/0iaGEhxx3xC1yhkMbC2kaOq7wqqZR8HD+OpLIP6U0RsFfWZOMLAZGES/P7wTCzD/ufl3ImAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0BkmX0ty0SS1z5okJWnbxWSVpO3zR58HTUre3E1mL6fjV7Mkg5+/l651VV1Z6vWTWsd1XK/ri4ubp3X24eP7d/f3d9PdNCVtlpv5bV6vT3qUstsPAAAA8KfvRxudeX0AAADgX072kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwArUfNElK0raLySpJe95tAQAAAEcqafJ2dCjfPgP88jxfRmWfd/230o2v8ulAPQAAAPB/ym/38WcZ7u/lXfY4w1xebr93XdY3ySDJ1V/zLDfz276VhzwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCDHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAABMFQAA//8ptdS5") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/246, 0xf6) 1.201587817s ago: executing program 3 (id=3892): writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318", 0x8}], 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) 1.183028089s ago: executing program 8 (id=3893): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x1b, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0xc0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 1.01401054s ago: executing program 8 (id=3894): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x181242, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 878.538869ms ago: executing program 3 (id=3895): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 779.906946ms ago: executing program 8 (id=3896): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x5, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 612.390868ms ago: executing program 3 (id=3897): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffc6}, 0x0) 417.319661ms ago: executing program 3 (id=3898): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e34, 0x4, 0x10, 0xffffffa6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 357.826115ms ago: executing program 2 (id=3899): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000001f40)='./file1\x00', 0x0, &(0x7f0000001040)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="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"], 0x21, 0x1537, &(0x7f00000037c0)="$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") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea6", 0x1a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) utime(&(0x7f00000001c0)='./bus\x00', 0x0) 334.117067ms ago: executing program 7 (id=3900): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22060600) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) 216.771225ms ago: executing program 3 (id=3901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000100)={0xffff, 0x1, 0x2, 0xc, 0x4}) 145.38381ms ago: executing program 8 (id=3902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000004c00)={0x4}) 75.529265ms ago: executing program 7 (id=3903): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf253700000008000300", @ANYRES32=r1, @ANYBLOB="080026006c0900000800a0000900000008005700881300000800a10000100000080027"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x90) 0s ago: executing program 3 (id=3904): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0xc}, @hyper, 0x0, 0xfffffffffffffffc, 0x5e, 0x200000000000, 0x100000000000006, 0x400}) kernel console output (not intermixed with test programs): d with checkpoint version = 48b305e5 [ 408.658595][T12785] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 408.668502][ T27] audit: type=1800 audit(2000002633.354:863): pid=12763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2757" name="file0" dev="loop7" ino=14 res=0 errno=0 [ 408.694706][T12803] loop8: detected capacity change from 0 to 1024 [ 408.821425][T11494] syz-executor: attempt to access beyond end of device [ 408.821425][T11494] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 408.862210][T12803] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 408.916546][T12809] loop3: detected capacity change from 0 to 512 [ 409.080571][T12809] EXT4-fs: Ignoring removed i_version option [ 409.114101][T12809] EXT4-fs: Mount option(s) incompatible with ext3 [ 409.291852][T12398] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 409.322640][T12169] EXT4-fs (loop8): unmounting filesystem. [ 409.329956][T12398] asix: probe of 6-1:0.188 failed with error -71 [ 409.372635][T12398] usb 6-1: USB disconnect, device number 15 [ 409.501607][T12820] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2770'. [ 409.526296][T12822] loop3: detected capacity change from 0 to 128 [ 409.549994][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2770'. [ 409.822995][T12825] loop7: detected capacity change from 0 to 4096 [ 409.888652][T12831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2774'. [ 409.899071][T12832] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 409.929188][T12831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2774'. [ 409.982732][T12834] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2774'. [ 410.077631][T12837] pimreg: tun_chr_ioctl cmd 2147767520 [ 410.091337][T12831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2774'. [ 411.120942][ T4913] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 411.307697][T12878] loop5: detected capacity change from 0 to 64 [ 411.330926][ T4913] usb 10-1: Using ep0 maxpacket: 32 [ 411.339996][ T4913] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 411.380964][ T4913] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.394585][T12855] loop8: detected capacity change from 0 to 32768 [ 411.419910][ T4913] usb 10-1: Product: syz [ 411.444833][T12847] loop3: detected capacity change from 0 to 40427 [ 411.471731][ T4913] usb 10-1: Manufacturer: syz [ 411.476469][ T4913] usb 10-1: SerialNumber: syz [ 411.489778][ T27] audit: type=1800 audit(2000002636.173:864): pid=12855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2784" name="file1" dev="loop8" ino=4 res=0 errno=0 [ 411.556450][ T4913] usb 10-1: config 0 descriptor?? [ 411.612663][T12847] F2FS-fs (loop3): Found nat_bits in checkpoint [ 411.779830][ T27] audit: type=1326 audit(2000002636.463:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0563b9c819 code=0x7ffc0000 [ 411.854399][T12847] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 411.892459][T12847] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 411.913828][ T27] audit: type=1326 audit(2000002636.463:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0563b9c819 code=0x7ffc0000 [ 412.016458][ T27] audit: type=1326 audit(2000002636.463:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0563b9c819 code=0x7ffc0000 [ 412.080585][T12896] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2797'. [ 412.093274][T12847] syz.3.2780: attempt to access beyond end of device [ 412.093274][T12847] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 412.164374][ T27] audit: type=1326 audit(2000002636.463:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm=98D9E98622158B30828785925E45C2 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0563b9c819 code=0x7ffc0000 [ 412.243592][ T27] audit: type=1326 audit(2000002636.463:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm=98D9E98622158B30828785925E45C2 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0563b9c819 code=0x7ffc0000 [ 412.272432][ T4913] peak_usb 10-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 412.301571][ T4913] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 412.319126][ T4913] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 412.340027][ T27] audit: type=1326 audit(2000002636.463:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm=98D9E98622158B30828785925E45C2 exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f0563b9c819 code=0x7ffc0000 [ 412.381476][T12902] sg_read: process 1100 (syz.5.2799) changed security contexts after opening file descriptor, this is not allowed. [ 412.413591][ T4913] peak_usb: probe of 10-1:0.0 failed with error -22 [ 412.470037][ T27] audit: type=1326 audit(2000002636.463:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm=98D9E98622158B30828785925E45C2 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0563b9c819 code=0x7ffc0000 [ 412.517394][ T4913] usb 10-1: USB disconnect, device number 3 [ 412.575701][ T27] audit: type=1326 audit(2000002636.463:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm=98D9E98622158B30828785925E45C2 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0563b9c819 code=0x7ffc0000 [ 412.758922][T12907] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input25 [ 412.996936][T12899] loop7: detected capacity change from 0 to 32768 [ 413.025751][T12899] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.2798 (12899) [ 413.054239][T12899] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 413.148223][T12899] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 413.174617][T12899] BTRFS info (device loop7): enabling disk space caching [ 413.206079][T12899] BTRFS info (device loop7): force clearing of disk cache [ 413.226595][T12899] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 413.246190][T12899] BTRFS info (device loop7): use zstd compression, level 3 [ 413.278945][T12899] BTRFS info (device loop7): disk space caching is enabled [ 413.411567][T12924] loop8: detected capacity change from 0 to 4096 [ 413.483919][T12942] loop5: detected capacity change from 0 to 256 [ 413.505957][T12944] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 413.517440][T12924] NILFS error (device loop8): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 413.604765][T12899] BTRFS info (device loop7): enabling ssd optimizations [ 413.649645][T12899] BTRFS info (device loop7): rebuilding free space tree [ 413.739176][T12924] NILFS (loop8): mounting fs with errors [ 413.753177][T12899] BTRFS info (device loop7): disabling free space tree [ 413.799886][T12899] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 413.850724][T12924] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 413.857726][T12899] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 414.403344][T11494] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 414.897049][T12977] loop5: detected capacity change from 0 to 1024 [ 415.244526][T12958] loop9: detected capacity change from 0 to 32768 [ 415.316913][T12958] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 scanned by syz.9.2811 (12958) [ 415.395998][T12958] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 415.473549][T12958] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 415.532953][T12958] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 415.542389][T12958] BTRFS info (device loop9): use zstd compression, level 3 [ 415.585004][T12958] BTRFS info (device loop9): using free space tree [ 415.752655][T13009] loop7: detected capacity change from 0 to 128 [ 415.941365][T12958] BTRFS info (device loop9): enabling ssd optimizations [ 416.449961][T12226] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 416.803130][ T5268] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop9 scanned by udevd (5268) [ 416.944259][ T4451] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 417.145417][ T4451] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 417.189074][ T4451] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 417.229550][ T4451] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 417.266724][ T4451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.334268][T13038] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 417.740188][T13041] loop8: detected capacity change from 0 to 32768 [ 417.891681][ T4311] usb 4-1: USB disconnect, device number 24 [ 417.900644][T13041] ERROR: (device loop8): dbAllocNext: Corrupt dmap page [ 417.900644][T13041] [ 417.989443][T13041] ERROR: (device loop8): remounting filesystem as read-only [ 418.047213][T13060] ERROR: (device loop8): dbAllocAG: unable to allocate blocks [ 418.047213][T13060] [ 418.079058][T13063] loop7: detected capacity change from 0 to 1024 [ 418.101337][T13041] ialloc: diAlloc returned -5! [ 418.154353][T13060] ERROR: (device loop8): dbDiscardAG: -EIO [ 418.154353][T13060] [ 418.224199][T13063] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 418.467530][T11494] EXT4-fs (loop7): unmounting filesystem. [ 418.473952][T13053] loop9: detected capacity change from 0 to 40427 [ 418.609808][T13053] F2FS-fs (loop9): Found nat_bits in checkpoint [ 418.818611][T13053] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 418.923317][ T27] audit: type=1804 audit(2000002643.609:873): pid=13053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2836" name="/newroot/23/file0/file1" dev="loop9" ino=10 res=1 errno=0 [ 419.021074][T12226] syz-executor: attempt to access beyond end of device [ 419.021074][T12226] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 419.630723][ T4311] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 419.845334][ T4311] usb 4-1: Using ep0 maxpacket: 32 [ 419.863510][ T4311] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 419.918646][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.966777][ T4311] usb 4-1: Product: syz [ 419.990414][ T4311] usb 4-1: Manufacturer: syz [ 419.995079][ T4311] usb 4-1: SerialNumber: syz [ 420.056597][ T4311] usb 4-1: config 0 descriptor?? [ 420.462729][T13118] loop5: detected capacity change from 0 to 64 [ 420.778212][ T4269] Bluetooth: hci0: command 0x0405 tx timeout [ 420.841526][ T4311] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 420.869722][ T4311] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 420.894738][ T4311] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 420.924849][T13128] loop7: detected capacity change from 0 to 512 [ 421.026882][T13128] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 421.046423][ T4311] peak_usb: probe of 4-1:0.0 failed with error -22 [ 421.128969][ T4311] usb 4-1: USB disconnect, device number 25 [ 421.156180][T13128] EXT4-fs (loop7): shut down requested (2) [ 421.343498][T11494] EXT4-fs (loop7): unmounting filesystem. [ 421.454473][T13139] loop9: detected capacity change from 0 to 4096 [ 421.607876][T13139] ntfs3: loop9: ino=5, "/" attr_set_size [ 421.614553][T13139] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 422.079663][T13158] loop3: detected capacity change from 0 to 64 [ 422.995826][T13182] loop7: detected capacity change from 0 to 64 [ 423.699345][T13200] loop7: detected capacity change from 0 to 1024 [ 423.795960][T13200] hfsplus: bad catalog folder thread [ 424.334470][T13216] loop5: detected capacity change from 0 to 2048 [ 424.389252][T13216] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 424.513344][T13216] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 424.539381][T13223] loop7: detected capacity change from 0 to 512 [ 424.548927][T13216] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 424.556602][T13216] UDF-fs: Scanning with blocksize 512 failed [ 424.595153][T13223] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 424.625540][T13223] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 424.656283][T13216] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.706676][T13223] EXT4-fs (loop7): orphan cleanup on readonly fs [ 424.805965][T13223] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.2891: bad orphan inode 267 [ 424.848252][T13223] EXT4-fs (loop7): Remounting filesystem read-only [ 424.854992][T13223] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 424.926417][T13223] EXT4-fs warning (device loop7): dx_probe:893: inode #2: comm syz.7.2891: dx entry: limit 0 != root limit 125 [ 425.000545][T13223] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.2891: Corrupt directory, running e2fsck is recommended [ 425.138040][ T4451] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 425.179668][T11494] EXT4-fs (loop7): unmounting filesystem. [ 425.337854][ T4451] usb 9-1: Using ep0 maxpacket: 8 [ 425.346656][ T4451] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 425.363744][T13250] loop5: detected capacity change from 0 to 256 [ 425.375983][T13249] loop9: detected capacity change from 0 to 512 [ 425.384303][ T4451] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.400106][T13249] EXT4-fs: Ignoring removed oldalloc option [ 425.406241][ T4451] usb 9-1: Product: syz [ 425.416367][ T4451] usb 9-1: Manufacturer: syz [ 425.427199][ T4451] usb 9-1: SerialNumber: syz [ 425.435087][T13250] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 425.462436][ T4451] usb 9-1: config 0 descriptor?? [ 425.524277][T13249] EXT4-fs error (device loop9): ext4_xattr_inode_iget:397: comm syz.9.2899: Parent and EA inode have the same ino 15 [ 425.638949][T13249] EXT4-fs (loop9): 1 orphan inode deleted [ 425.644969][T13249] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 425.675089][ T4451] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 425.694914][T13259] loop3: detected capacity change from 0 to 256 [ 425.745697][T13259] exfat: Bad value for 'gid' [ 425.843756][T12226] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 425.936740][T12226] EXT4-fs error (device loop9): ext4_lookup:1858: inode #15: comm syz-executor: iget: bad extra_isize 34 (inode size 256) [ 426.002216][T12226] EXT4-fs error (device loop9): ext4_lookup:1858: inode #15: comm syz-executor: iget: bad extra_isize 34 (inode size 256) [ 426.004639][T13266] loop3: detected capacity change from 0 to 1024 [ 426.263727][T13273] hfsplus: catalog searching failed [ 426.287217][ T4451] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 426.303833][ T4451] usb 9-1: USB disconnect, device number 3 [ 426.543343][T12226] EXT4-fs (loop9): unmounting filesystem. [ 426.692855][ T1207] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.830387][ T1207] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.090829][ T1207] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.285014][ T1207] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.877542][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 427.890522][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 427.900198][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 427.945268][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 427.952880][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 427.960722][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 428.518576][T13319] loop8: detected capacity change from 0 to 512 [ 428.613899][T13319] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.2918: inode has both inline data and extents flags [ 428.639639][T13319] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2918: couldn't read orphan inode 15 (err -117) [ 428.675811][T13325] loop5: detected capacity change from 0 to 64 [ 428.741217][T13319] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 428.745233][T13325] syz.5.2919: attempt to access beyond end of device [ 428.745233][T13325] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 428.780650][T13325] Buffer I/O error on dev loop5, logical block 512, async page read [ 428.837302][T13325] syz.5.2919: attempt to access beyond end of device [ 428.837302][T13325] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 428.899380][T13325] Buffer I/O error on dev loop5, logical block 56576, async page read [ 429.200818][T12169] EXT4-fs (loop8): unmounting filesystem. [ 429.325790][T13304] chnl_net:caif_netlink_parms(): no params data found [ 429.980442][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 430.099642][T13304] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.124015][T13335] loop7: detected capacity change from 0 to 32768 [ 430.138988][T13304] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.149874][T13335] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 430.202150][T13304] device bridge_slave_0 entered promiscuous mode [ 430.234772][ T5268] I/O error, dev loop7, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 430.252402][T13304] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.259678][T13304] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.322400][T13304] device bridge_slave_1 entered promiscuous mode [ 430.757365][ T1207] device hsr_slave_0 left promiscuous mode [ 430.809726][ T1207] device hsr_slave_1 left promiscuous mode [ 430.829800][ T1207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.863552][ T1207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.875557][ T1207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.883590][ T1207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.908033][ T1207] device bridge_slave_1 left promiscuous mode [ 430.926826][ T1207] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.953480][ T1207] device bridge_slave_0 left promiscuous mode [ 431.013572][ T1207] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.158390][ T1207] device veth1_macvtap left promiscuous mode [ 431.185102][ T1207] device veth0_macvtap left promiscuous mode [ 431.209762][ T1207] device veth1_vlan left promiscuous mode [ 431.237280][ T1207] device veth0_vlan left promiscuous mode [ 431.529757][T13370] loop5: detected capacity change from 0 to 40427 [ 431.618151][T13370] F2FS-fs (loop5): Found nat_bits in checkpoint [ 431.758911][T13370] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 431.778691][T13370] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 432.031706][T13370] syz.5.2935: attempt to access beyond end of device [ 432.031706][T13370] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 432.071504][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 433.076448][ T1207] team0 (unregistering): Port device team_slave_1 removed [ 433.148916][ T1207] team0 (unregistering): Port device team_slave_0 removed [ 433.211509][ T1207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.283776][ T1207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.434350][T13432] loop8: detected capacity change from 0 to 128 [ 433.520903][T13432] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 433.530650][T13432] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 433.725714][T12169] EXT4-fs (loop8): unmounting filesystem. [ 433.993586][T13440] loop8: detected capacity change from 0 to 512 [ 434.068840][T13440] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 434.069172][ T1207] bond0 (unregistering): Released all slaves [ 434.078669][T13440] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.142844][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 434.247339][T12169] EXT4-fs (loop8): unmounting filesystem. [ 434.273668][T13304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.376928][T13304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.527720][T13304] team0: Port device team_slave_0 added [ 434.557331][T13304] team0: Port device team_slave_1 added [ 434.647312][T13304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.676317][T13304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.733756][T13304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.791458][T13304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.812399][T13304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.833112][T13459] loop3: detected capacity change from 0 to 512 [ 434.925601][T13304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.121479][T13304] device hsr_slave_0 entered promiscuous mode [ 435.141795][T13467] loop5: detected capacity change from 0 to 64 [ 435.146100][T13468] loop3: detected capacity change from 0 to 512 [ 435.164255][T13468] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 435.175952][T13304] device hsr_slave_1 entered promiscuous mode [ 435.194795][T13304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.243706][T13304] Cannot create hsr debugfs directory [ 435.263910][T13468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 435.289465][T13468] EXT4-fs (loop3): orphan cleanup on readonly fs [ 435.322376][T13468] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.2964: bad orphan inode 267 [ 435.364353][T13468] EXT4-fs (loop3): Remounting filesystem read-only [ 435.492405][T13468] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 435.572016][T13468] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.2964: dx entry: limit 0 != root limit 125 [ 435.596756][T13468] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2964: Corrupt directory, running e2fsck is recommended [ 435.816228][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 436.234176][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 436.291392][T13495] netlink: 228 bytes leftover after parsing attributes in process `syz.8.2974'. [ 436.661866][T13511] loop7: detected capacity change from 0 to 16 [ 436.679816][T13511] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 437.260654][T13525] loop3: detected capacity change from 0 to 512 [ 437.289542][T13527] program syz.5.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.308888][T13304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 437.343162][T13304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 437.368541][T13304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 437.445074][T13304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 437.455869][T13525] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2988: inode has both inline data and extents flags [ 437.551634][T13525] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2988: couldn't read orphan inode 15 (err -117) [ 437.569323][T13304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.590412][T13304] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.598921][T13538] vivid-007: disconnect [ 437.609400][T13532] vivid-007: reconnect [ 437.619437][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 437.641913][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 437.682532][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 437.688237][T13525] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 437.774708][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 437.804257][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.811482][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.859889][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 437.885482][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 437.904821][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 437.913456][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.920634][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.959437][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 437.986460][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 437.997270][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 438.186757][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 438.233735][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 438.270050][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 438.305021][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 438.321578][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 438.332111][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 438.355765][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 438.392066][T13304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 438.405680][T13304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 438.425714][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 438.435516][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 438.524731][ T9580] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 438.572033][T13567] device dummy0 entered promiscuous mode [ 438.578624][T13567] device macvlan2 entered promiscuous mode [ 438.684725][ T4257] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 438.716218][ T9580] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 438.730481][ T9580] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.756540][ T9580] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 438.770862][ T9580] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 438.789813][ T9580] usb 4-1: Manufacturer: syz [ 438.805945][ T9580] usb 4-1: config 0 descriptor?? [ 438.885236][ T4257] usb 9-1: Using ep0 maxpacket: 16 [ 438.913903][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 438.916045][ T4257] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 438.926894][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 438.965196][T13304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.974953][ T4257] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.989715][ T4257] usb 9-1: config 0 descriptor?? [ 439.010777][ T4257] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 439.015554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 439.017223][ T9580] rc_core: IR keymap rc-hauppauge not found [ 439.032150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 439.037781][ T9580] Registered IR keymap rc-empty [ 439.050267][ T9580] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 439.063456][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 439.074182][ T9580] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input26 [ 439.077559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 439.101742][T13304] device veth0_vlan entered promiscuous mode [ 439.113415][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 439.122294][T13304] device veth1_vlan entered promiscuous mode [ 439.132978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 439.145857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 439.164903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 439.208892][ T4456] usb 4-1: USB disconnect, device number 26 [ 439.307050][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 439.317868][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 439.347243][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 439.362577][T13304] device veth0_macvtap entered promiscuous mode [ 439.374045][T13577] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3007'. [ 439.436581][T13304] device veth1_macvtap entered promiscuous mode [ 439.484534][T13304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.496833][T13304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.507778][T13304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.566182][T13304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.606948][T13304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.621102][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 439.636486][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 439.661529][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 439.695627][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 439.728355][T13304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.765517][T13304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.795125][T13304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.824133][ T4257] gspca_sonixj: reg_r err -71 [ 439.829200][ T4257] sonixj: probe of 9-1:0.0 failed with error -71 [ 439.854625][T13304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.875728][T13304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.884193][ T4257] usb 9-1: USB disconnect, device number 4 [ 439.900836][T13304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.945309][T13304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.965135][T13304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.986912][T13304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.999936][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 440.016857][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 440.042286][T13304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.052706][T13304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.075512][T13304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.085416][T13304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.308377][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.314820][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.345880][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.371853][T13595] loop5: detected capacity change from 0 to 1024 [ 440.380025][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.408926][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 440.436314][ T51] hfsplus: b-tree write err: -5, ino 25 [ 440.442490][ T51] hfsplus: b-tree write err: -5, ino 4 [ 440.457860][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.474132][ T51] hfsplus: b-tree write err: -5, ino 2 [ 440.482765][ T51] hfsplus: b-tree write err: -5, ino 26 [ 440.503004][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.550973][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 440.733220][ T51] hfsplus: b-tree write err: -5, ino 4 [ 440.780212][ T51] hfsplus: b-tree write err: -5, ino 2 [ 441.171240][T13615] loop2: detected capacity change from 0 to 16 [ 441.214793][T13615] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 441.266128][ T4310] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 441.457995][ T4310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 46, changing to 9 [ 441.484637][ T4310] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 441.514828][ T4310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.556225][ T4310] usb 6-1: Product: syz [ 441.568483][ T4310] usb 6-1: Manufacturer: syz [ 441.589640][ T4310] usb 6-1: SerialNumber: syz [ 441.614976][ T4310] usb 6-1: config 0 descriptor?? [ 441.639271][ T4310] usb 6-1: Found UVC 0.00 device syz (18ec:3288) [ 441.647548][ T4310] usb 6-1: No valid video chain found. [ 441.742519][T13607] loop7: detected capacity change from 0 to 32768 [ 441.770520][T13607] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.3018 (13607) [ 441.823519][T13607] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 441.855513][T13607] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 441.867569][ T4310] usb 6-1: USB disconnect, device number 16 [ 441.901004][T13607] BTRFS info (device loop7): enabling auto defrag [ 441.945891][T13607] BTRFS info (device loop7): use no compression [ 441.982997][T13607] BTRFS info (device loop7): max_inline at 4096 [ 442.003215][T13607] BTRFS info (device loop7): using free space tree [ 442.056867][T13641] vivid-000: disconnect [ 442.061873][T13640] vivid-000: reconnect [ 442.299378][T13607] BTRFS info (device loop7): enabling ssd optimizations [ 442.555343][T11494] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 442.611821][T13674] loop5: detected capacity change from 0 to 256 [ 442.678935][T13674] FAT-fs (loop5): Directory bread(block 64) failed [ 442.685676][T13674] FAT-fs (loop5): Directory bread(block 65) failed [ 442.716708][T13674] FAT-fs (loop5): Directory bread(block 66) failed [ 442.742864][T13674] FAT-fs (loop5): Directory bread(block 67) failed [ 442.749912][T13674] FAT-fs (loop5): Directory bread(block 68) failed [ 442.786935][T13674] FAT-fs (loop5): Directory bread(block 69) failed [ 442.814228][T13674] FAT-fs (loop5): Directory bread(block 70) failed [ 442.840267][T13674] FAT-fs (loop5): Directory bread(block 71) failed [ 442.911067][T13674] FAT-fs (loop5): Directory bread(block 72) failed [ 442.919396][T13674] FAT-fs (loop5): Directory bread(block 73) failed [ 443.124167][ T5268] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop7 scanned by udevd (5268) [ 443.715817][T13705] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 443.727625][T13709] program syz.7.3044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 444.266580][T13717] loop3: detected capacity change from 0 to 8192 [ 444.507059][T13717] loop3: p1 p2 p4[EZD] [ 444.528755][T13717] loop3: p4 start 201326592 is beyond EOD, truncated [ 445.037128][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 445.062081][ T5268] udevd[5268]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 445.530770][T13754] loop2: detected capacity change from 0 to 256 [ 445.566554][T13757] loop8: detected capacity change from 0 to 256 [ 445.610171][T13754] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 445.684962][ T27] audit: type=1800 audit(2000002670.356:874): pid=13754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3059" name="file1" dev="loop2" ino=1048763 res=0 errno=0 [ 445.927751][T13760] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3061'. [ 446.127238][T13767] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3063'. [ 446.252199][T13763] loop2: detected capacity change from 0 to 4096 [ 446.636943][T13304] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 446.653957][T13304] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 446.674008][T13781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3069'. [ 446.988958][ T4312] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 447.179059][ T4312] usb 9-1: Using ep0 maxpacket: 32 [ 447.186370][ T4312] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.211445][ T4312] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.257762][ T4312] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 447.289472][ T4312] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 447.310604][ T4312] usb 9-1: Product: syz [ 447.314933][ T4312] usb 9-1: Manufacturer: syz [ 447.350387][ T4312] hub 9-1:4.0: USB hub found [ 447.554699][ T4312] hub 9-1:4.0: 2 ports detected [ 447.762461][ T4312] hub 9-1:4.0: hub_hub_status failed (err = -71) [ 447.783255][ T4312] hub 9-1:4.0: config failed, can't get hub status (err -71) [ 447.863099][ T4312] usb 9-1: USB disconnect, device number 5 [ 448.496690][T13844] device netdevsim0 entered promiscuous mode [ 449.235933][T13873] device dummy0 entered promiscuous mode [ 449.266719][T13873] device macvlan2 entered promiscuous mode [ 449.745715][T13883] loop7: detected capacity change from 0 to 4096 [ 450.860860][ T7] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 450.937851][T13925] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 451.060765][ T7] usb 9-1: Using ep0 maxpacket: 16 [ 451.072119][ T7] usb 9-1: config 0 has no interfaces? [ 451.099087][ T7] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.117129][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 451.161412][ T7] usb 9-1: SerialNumber: syz [ 451.179509][ T7] usb 9-1: config 0 descriptor?? [ 451.323315][T13937] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3120'. [ 451.404479][ T7] usb 9-1: USB disconnect, device number 6 [ 451.520185][T13943] loop2: detected capacity change from 0 to 1024 [ 451.608037][T13943] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 451.631460][T13943] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.694983][T13946] loop5: detected capacity change from 0 to 4096 [ 451.729229][T13946] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 451.742314][T13943] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.3122: Freeing blocks not in datazone - block = 0, count = 16 [ 452.088349][T13960] loop3: detected capacity change from 0 to 4096 [ 452.122120][ T4713] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:7: bg 0: block 112: padding at end of block bitmap is not set [ 452.126647][T13962] loop8: detected capacity change from 0 to 256 [ 452.192003][T13962] exfat: Deprecated parameter 'utf8' [ 452.219480][T13960] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 452.228691][ T4713] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 452.273597][T13962] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 452.304176][ T4713] EXT4-fs (loop2): This should not happen!! Data will be lost [ 452.304176][ T4713] [ 452.317742][T13968] vivid-007: disconnect [ 452.329430][T13965] vivid-007: reconnect [ 452.350621][ T4713] EXT4-fs (loop2): Total free blocks count 0 [ 452.392002][ T4713] EXT4-fs (loop2): Free/Dirty block details [ 452.397965][ T4713] EXT4-fs (loop2): free_blocks=16 [ 452.434012][ T4713] EXT4-fs (loop2): dirty_blocks=16 [ 452.458312][ T4713] EXT4-fs (loop2): Block reservation details [ 452.511855][ T4713] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 452.530046][T13304] EXT4-fs (loop2): unmounting filesystem. [ 452.833987][T13984] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3135'. [ 452.915790][T13989] loop7: detected capacity change from 0 to 64 [ 452.991816][ T4913] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 453.051890][ T4314] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 453.201847][ T4913] usb 3-1: Using ep0 maxpacket: 32 [ 453.209167][ T4913] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 453.244184][ T4913] usb 3-1: config 0 has no interface number 0 [ 453.259205][ T4913] usb 3-1: config 0 interface 12 has no altsetting 0 [ 453.276399][ T4913] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 453.279772][ T4314] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 453.305534][ T4913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.328229][ T4913] usb 3-1: Product: syz [ 453.340324][ T4913] usb 3-1: Manufacturer: syz [ 453.345244][ T4314] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.350641][ T4913] usb 3-1: SerialNumber: syz [ 453.380417][ T4913] usb 3-1: config 0 descriptor?? [ 453.393165][ T4314] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 453.428227][ T4314] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 453.446772][ T4314] usb 9-1: Manufacturer: syz [ 453.465656][ T4314] usb 9-1: config 0 descriptor?? [ 453.480229][T13998] loop7: detected capacity change from 0 to 8192 [ 453.512032][ T4269] Bluetooth: hci0: command 0x0405 tx timeout [ 453.640621][T13998] loop7: p1 p2 p4[EZD] [ 453.652322][ T4314] rc_core: IR keymap rc-hauppauge not found [ 453.658090][T13998] loop7: p4 start 201326592 is beyond EOD, truncated [ 453.660591][ T4314] Registered IR keymap rc-empty [ 453.690175][T14008] loop3: detected capacity change from 0 to 128 [ 453.699508][ T4314] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 453.760612][ T4314] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input27 [ 453.793296][T14008] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 453.853521][ C1] igorplugusb 9-1:0.0: Error: urb status = -32 [ 453.923181][T14008] hpfs: filesystem error: improperly stopped [ 453.929293][T14008] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 453.962352][T14008] hpfs: You really don't want any checks? You are crazy... [ 453.980254][T14008] hpfs: hpfs_map_sector(): read error [ 453.993792][ T4314] usb 9-1: USB disconnect, device number 7 [ 454.016344][T14008] hpfs: code page support is disabled [ 454.073301][T14008] hpfs: hpfs_map_4sectors(): unaligned read [ 454.082417][T14008] hpfs: hpfs_map_4sectors(): unaligned read [ 454.088398][T14008] hpfs: filesystem error: unable to find root dir [ 454.177230][T14017] comedi comedi3: comedi_test: 38 microvolt, 2047 microsecond waveform attached [ 454.210615][ T4913] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 454.218000][ T4260] udevd[4260]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 454.234718][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 454.236385][ T4913] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 454.288286][ T4913] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 454.311650][ T4913] f81534: probe of 3-1:0.12 failed with error -71 [ 454.346134][ T4913] usb 3-1: USB disconnect, device number 4 [ 454.650863][T14032] loop8: detected capacity change from 0 to 256 [ 454.681707][T14032] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 455.170158][T14046] loop2: detected capacity change from 0 to 256 [ 455.249411][T14046] exfat: Deprecated parameter 'utf8' [ 455.295718][T14046] exfat: Deprecated parameter 'utf8' [ 455.301121][T14046] exfat: Deprecated parameter 'utf8' [ 455.398577][T14046] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 455.429812][T14025] loop3: detected capacity change from 0 to 32768 [ 455.468535][T14025] XFS: attr2 mount option is deprecated. [ 455.664083][T14025] XFS (loop3): Mounting V5 Filesystem [ 455.736563][T14025] XFS (loop3): Ending clean mount [ 455.749781][T14025] XFS (loop3): Quotacheck needed: Please wait. [ 455.808152][T14069] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 455.881814][T14025] XFS (loop3): Quotacheck: Done. [ 455.887272][T14069] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 455.929808][T14074] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3162'. [ 455.958495][T14069] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.3160: Invalid block bitmap block 0 in block_group 0 [ 456.011579][T14069] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 456.022190][T14069] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.3160: attempt to clear invalid blocks 983261 len 1 [ 456.039449][T14069] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.3160: Invalid inode table block 0 in block_group 0 [ 456.060805][T14069] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 456.070884][ T4276] XFS (loop3): Unmounting Filesystem [ 456.156273][T14069] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 456.193792][T14069] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.3160: Invalid inode table block 0 in block_group 0 [ 456.277556][T14069] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 456.314121][T14069] EXT4-fs error (device loop2): ext4_truncate:4314: inode #11: comm syz.2.3160: mark_inode_dirty error [ 456.360515][T14069] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 456.404418][T14069] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.3160: Invalid inode table block 0 in block_group 0 [ 456.463951][T14069] EXT4-fs (loop2): 1 truncate cleaned up [ 456.469843][T14069] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 456.654270][T13304] EXT4-fs (loop2): unmounting filesystem. [ 456.962692][T14107] set_capacity_and_notify: 1 callbacks suppressed [ 456.962709][T14107] loop5: detected capacity change from 0 to 256 [ 457.029528][T14107] exfat: Deprecated parameter 'namecase' [ 457.059109][T14107] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 457.074034][ T4310] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 457.282384][ T4310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 457.302399][ T4310] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 457.341703][ T4310] usb 3-1: string descriptor 0 read error: -22 [ 457.368764][ T4310] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 457.399523][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.564745][T14103] loop3: detected capacity change from 0 to 32768 [ 457.619024][ T4310] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 457.624958][T14105] loop8: detected capacity change from 0 to 32768 [ 457.626730][T14103] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.3164 (14103) [ 457.694811][T14105] XFS (loop8): Mounting V5 Filesystem [ 457.713549][T14103] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 457.730991][T14103] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 457.754858][T14103] BTRFS info (device loop3): enabling disk space caching [ 457.762006][T14103] BTRFS info (device loop3): force clearing of disk cache [ 457.780520][T14103] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 457.781221][T14105] XFS (loop8): Ending clean mount [ 457.798209][T14103] BTRFS info (device loop3): use zstd compression, level 3 [ 457.805996][T14103] BTRFS info (device loop3): disk space caching is enabled [ 457.843109][ T4310] snd-usb-audio: probe of 3-1:1.1 failed with error -2 [ 457.945417][T14103] BTRFS info (device loop3): enabling ssd optimizations [ 457.969717][T14103] BTRFS info (device loop3): rebuilding free space tree [ 458.021158][T14103] BTRFS info (device loop3): disabling free space tree [ 458.030864][T14103] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 458.041204][T14103] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 458.069200][ T4310] snd-usb-audio: probe of 3-1:1.2 failed with error -2 [ 458.080058][ T4310] usb 3-1: USB disconnect, device number 5 [ 458.132826][T12169] XFS (loop8): Unmounting Filesystem [ 458.230669][ T4276] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 458.325337][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.520182][T14182] raw_sendmsg: syz.3.3187 forgot to set AF_INET. Fix it! [ 459.541927][T14183] __sock_release: fasync list not empty! [ 459.760604][T14192] loop3: detected capacity change from 0 to 512 [ 459.827176][T14192] EXT4-fs (loop3): 1 truncate cleaned up [ 459.858244][T14192] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 460.135725][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 460.499651][T14215] loop3: detected capacity change from 0 to 4096 [ 461.001284][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3204'. [ 461.064332][T14236] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3204'. [ 461.074772][T14232] loop2: detected capacity change from 0 to 4096 [ 461.110700][T14232] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 461.125840][ T8522] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 461.157528][T14236] netlink: 'syz.8.3204': attribute type 19 has an invalid length. [ 461.209861][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3204'. [ 461.261790][T14236] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.271800][T14236] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.280592][T14236] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.289355][T14236] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.315466][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3204'. [ 461.345896][ T8522] usb 6-1: Using ep0 maxpacket: 32 [ 461.353062][ T8522] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 461.371984][ T8522] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 461.383293][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3204'. [ 461.383321][T14238] netlink: 'syz.8.3204': attribute type 19 has an invalid length. [ 461.383334][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3204'. [ 461.454639][ T8522] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 461.490898][ T8522] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 461.521704][ T8522] usb 6-1: config 0 interface 0 has no altsetting 0 [ 461.542205][ T8522] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 461.600754][ T8522] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 461.638463][ T8522] usb 6-1: Product: syz [ 461.642776][ T8522] usb 6-1: Manufacturer: syz [ 461.686418][ T8522] usb 6-1: SerialNumber: syz [ 461.737587][ T8522] usb 6-1: config 0 descriptor?? [ 461.751496][ T8522] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 461.772866][ T8522] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 461.927133][T14262] loop3: detected capacity change from 0 to 2048 [ 462.027094][T14267] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 462.070625][T14262] NILFS (loop3): unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿš@­LqE:†‹ á艞Õt}²0ü$‰" [ 462.233360][ T4451] usb 6-1: USB disconnect, device number 17 [ 462.255678][ T4451] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 462.920340][T14299] loop5: detected capacity change from 0 to 256 [ 462.982627][T14299] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 463.094415][T14303] loop7: detected capacity change from 0 to 512 [ 463.126091][T14303] EXT4-fs: Invalid gid value -1 [ 463.725669][T14320] loop3: detected capacity change from 0 to 128 [ 463.760824][T14320] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 463.934244][T14320] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 464.139842][T14331] loop8: detected capacity change from 0 to 512 [ 464.168130][T14331] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 464.306564][T14331] EXT4-fs (loop8): 1 truncate cleaned up [ 464.324933][T14331] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 464.372282][T14310] loop7: detected capacity change from 0 to 32768 [ 464.428172][T14310] (syz.7.3226,14310,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 464.445873][T14341] loop2: detected capacity change from 0 to 512 [ 464.512201][T14310] (syz.7.3226,14310,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 464.541333][T14341] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3237: inode has both inline data and extents flags [ 464.602744][T12169] EXT4-fs (loop8): unmounting filesystem. [ 464.609128][T14341] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3237: couldn't read orphan inode 15 (err -117) [ 464.658759][T14310] JBD2: Ignoring recovery information on journal [ 464.677604][T14341] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 464.762793][T14310] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 465.012492][T13304] EXT4-fs (loop2): unmounting filesystem. [ 465.029451][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3243'. [ 465.068386][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3243'. [ 465.149732][T11494] ocfs2: Unmounting device (7,7) on (node local) [ 465.642459][T14369] loop5: detected capacity change from 0 to 4096 [ 465.793051][T14382] loop8: detected capacity change from 0 to 512 [ 465.897317][T14382] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3251: inode has both inline data and extents flags [ 466.037419][T14382] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3251: couldn't read orphan inode 15 (err -117) [ 466.118845][T14382] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 466.333498][T12169] EXT4-fs (loop8): unmounting filesystem. [ 466.386522][T14399] loop7: detected capacity change from 0 to 2048 [ 466.492784][T14399] loop7: p1 < > p4 [ 466.511398][T14399] loop7: p4 size 722688 extends beyond EOD, truncated [ 466.959677][T14422] netlink: 'syz.5.3263': attribute type 6 has an invalid length. [ 467.005230][ T5268] udevd[5268]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 467.025886][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 467.224908][T14427] loop5: detected capacity change from 0 to 512 [ 467.307591][ T5268] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 467.455064][T14435] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 467.479360][T14435] System zones: 0-2, 18-18, 34-34 [ 467.571226][T14435] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 467.623354][T14435] EXT4-fs (loop3): Remounting filesystem read-only [ 467.715057][T14435] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.3267: corrupted inode contents [ 467.808923][T14435] EXT4-fs (loop3): Remounting filesystem read-only [ 467.825775][T14435] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #16: comm syz.3.3267: mark_inode_dirty error [ 467.893779][T14435] EXT4-fs (loop3): Remounting filesystem read-only [ 467.921813][T14435] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.3267: corrupted inode contents [ 467.984893][T14435] EXT4-fs (loop3): Remounting filesystem read-only [ 468.003004][T14435] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3267: mark_inode_dirty error [ 468.076247][T14435] EXT4-fs (loop3): Remounting filesystem read-only [ 468.122106][T14435] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.3267: corrupted inode contents [ 468.193906][T14435] EXT4-fs (loop3): Remounting filesystem read-only [ 468.241019][T14435] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3267: mark_inode_dirty error [ 468.328176][T14435] EXT4-fs (loop3): Remounting filesystem read-only [ 468.348160][T14435] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.3267: corrupted inode contents [ 468.380099][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3277'. [ 468.458576][T14435] EXT4-fs (loop3): Remounting filesystem read-only [ 468.529444][T14435] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 468.540400][T14468] set_capacity_and_notify: 3 callbacks suppressed [ 468.540415][T14468] loop5: detected capacity change from 0 to 512 [ 468.565444][T14435] EXT4-fs (loop3): Remounting filesystem read-only [ 468.589759][T14435] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.3267: corrupted inode contents [ 468.629638][T14435] EXT4-fs (loop3): Remounting filesystem read-only [ 468.653989][T14468] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 468.658279][T14435] EXT4-fs error (device loop3): ext4_truncate:4314: inode #16: comm syz.3.3267: mark_inode_dirty error [ 468.699402][T14477] loop2: detected capacity change from 0 to 512 [ 468.707268][T14468] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.3279: bad orphan inode 131083 [ 468.815312][T14435] EXT4-fs (loop3): Remounting filesystem read-only [ 468.823131][T14468] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 468.869874][T14435] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 468.913632][T14435] EXT4-fs (loop3): Remounting filesystem read-only [ 468.935988][T14477] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 468.947251][T14435] EXT4-fs (loop3): 1 truncate cleaned up [ 468.961391][ T65] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 468.969317][T14435] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 469.005897][ T65] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 1 [ 469.032855][T14435] ext4 filesystem being mounted at /713/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.101628][ T65] EXT4-fs (loop3): Remounting filesystem read-only [ 469.163330][ T5445] EXT4-fs (loop5): unmounting filesystem. [ 469.229940][T14435] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz.3.3267: directory missing '.' [ 469.359330][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 469.398075][ T11] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 469.428944][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 1 [ 469.491812][ T11] EXT4-fs (loop3): Remounting filesystem read-only [ 470.253801][T14489] loop8: detected capacity change from 0 to 40427 [ 470.286433][T14489] F2FS-fs (loop8): Invalid log_blocksize (64), supports only 12 [ 470.310080][T14489] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 470.346338][T14489] F2FS-fs (loop8): invalid crc value [ 470.379791][T14514] sp0: Synchronizing with TNC [ 470.384895][T14489] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 470.564699][T14489] F2FS-fs (loop8): Cannot turn on quotas: -2 on 1 [ 470.582385][ T4310] kernel read not supported for file /dsp1 (pid: 4310 comm: kworker/0:4) [ 470.617905][T14489] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 470.668176][T14489] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 471.008869][T12169] syz-executor: attempt to access beyond end of device [ 471.008869][T12169] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 471.273059][T14541] loop2: detected capacity change from 0 to 2048 [ 471.352734][T14541] loop2: p1 < > p4 [ 471.358624][T14541] loop2: p4 size 722688 extends beyond EOD, truncated [ 471.662302][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 471.682966][ T5268] udevd[5268]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 471.764578][T14551] netlink: 'syz.8.3298': attribute type 10 has an invalid length. [ 472.014439][T14551] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 472.101691][T14537] loop5: detected capacity change from 0 to 32768 [ 472.110882][T14550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.146495][T14537] [ 472.146495][T14537] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 472.146495][T14537] [ 472.171502][T14537] ERROR: (device loop5): diWrite: ixpxd invalid [ 472.171502][T14537] [ 472.180449][T14537] ERROR: (device loop5): txCommit: [ 472.180449][T14537] [ 472.208617][T14537] [ 472.208617][T14537] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 472.208617][T14537] [ 472.226823][T14537] [ 472.226823][T14537] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 472.226823][T14537] [ 472.446329][T14568] loop2: detected capacity change from 0 to 2048 [ 472.528587][T14568] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 472.559391][T14572] loop5: detected capacity change from 0 to 1024 [ 472.591051][T14572] EXT4-fs: Ignoring removed nobh option [ 472.598152][T14573] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 472.661533][T14572] EXT4-fs: Ignoring removed bh option [ 472.687111][T14572] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 472.718840][T14576] loop3: detected capacity change from 0 to 512 [ 472.756630][T14576] EXT4-fs: inline encryption not supported [ 472.802447][T14576] EXT4-fs: Ignoring removed i_version option [ 472.824265][T14572] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 472.902501][T14576] EXT4-fs (loop3): 1 orphan inode deleted [ 472.912359][T14576] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 473.091179][T14576] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.3311: Directory hole found for htree leaf block 0 [ 473.198195][ T5445] EXT4-fs (loop5): unmounting filesystem. [ 473.303886][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 473.391655][T14591] loop5: detected capacity change from 0 to 2048 [ 473.458245][T14591] loop5: p1 < > p4 [ 473.476305][T14591] loop5: p4 size 722688 extends beyond EOD, truncated [ 473.542257][ T4314] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 473.752198][ T4314] usb 9-1: Using ep0 maxpacket: 8 [ 473.760366][ T4314] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 473.800223][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 473.819286][ T4314] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 473.832283][ T5268] udevd[5268]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 474.266101][T14620] loop3: detected capacity change from 0 to 256 [ 474.353263][T14620] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 474.467999][T14620] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 474.710609][T14609] loop2: detected capacity change from 0 to 131072 [ 474.718961][ T4314] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.727287][ T4314] usb 9-1: Product: syz [ 474.731496][T14609] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 474.739880][T14609] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 474.748559][ T4314] usb 9-1: Manufacturer: syz [ 474.753705][T14609] F2FS-fs (loop2): invalid crc value [ 474.759857][ T4314] usb 9-1: SerialNumber: syz [ 474.767618][ T4314] usb 9-1: config 0 descriptor?? [ 474.775019][ T4314] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 474.784411][ T4314] usb 9-1: setting power ON [ 474.789802][ T4314] dvb-usb: bulk message failed: -22 (2/0) [ 474.798810][ T4314] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 474.810321][T14609] F2FS-fs (loop2): Found nat_bits in checkpoint [ 474.843455][ T4314] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 474.856376][ T4314] usb 9-1: media controller created [ 474.873128][T14609] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 474.880295][T14609] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 474.891792][ T4314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 474.908571][ T4314] usb 9-1: selecting invalid altsetting 6 [ 474.932644][ T4314] usb 9-1: digital interface selection failed (-22) [ 474.961966][ T4314] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 475.004992][ T4314] usb 9-1: setting power OFF [ 475.073127][ T4314] dvb-usb: bulk message failed: -22 (2/0) [ 475.083881][ T4314] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 475.148491][ T4314] (NULL device *): no alternate interface [ 475.238024][ T4314] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 475.303114][ T4314] usb 9-1: USB disconnect, device number 8 [ 475.318402][T14639] input input28: cannot allocate more than FF_MAX_EFFECTS effects [ 475.688322][T14648] Bluetooth: MGMT ver 1.22 [ 476.111596][T14633] loop5: detected capacity change from 0 to 32768 [ 476.267693][T14633] XFS (loop5): Mounting V5 Filesystem [ 476.314689][T14667] loop8: detected capacity change from 0 to 4096 [ 476.328335][T14667] ntfs: (device loop8): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 476.421880][T14633] XFS (loop5): Ending clean mount [ 476.483658][ T4314] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 476.503764][T14667] ntfs: volume version 3.1. [ 476.616522][ T5445] XFS (loop5): Unmounting Filesystem [ 476.706406][ T4314] usb 3-1: Using ep0 maxpacket: 8 [ 476.713392][ T4314] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 476.733312][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.827221][ T4314] pvrusb2: Hardware description: Terratec Grabster AV400 [ 476.865473][ T4314] pvrusb2: ********** [ 476.869508][ T4314] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 476.917384][ T4314] pvrusb2: Important functionality might not be entirely working. [ 476.953800][ T4314] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 476.988289][ T4314] pvrusb2: ********** [ 477.026119][ T2306] pvrusb2: Invalid write control endpoint [ 477.232968][ T8522] usb 3-1: USB disconnect, device number 6 [ 477.332403][ T2306] pvrusb2: Invalid write control endpoint [ 477.351967][ T2306] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 477.374203][ T2306] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 477.413861][ T2306] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 477.433278][ T2306] pvrusb2: Device being rendered inoperable [ 477.446266][T14705] serio: Serial port pty36 [ 477.455765][ T2306] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 477.472907][ T2306] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 477.508453][T14707] loop3: detected capacity change from 0 to 4096 [ 477.511218][ T2306] pvrusb2: Attached sub-driver cx25840 [ 477.556471][ T2306] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 477.611373][ T2306] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 477.941342][ T4276] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 477.967309][ T4276] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 479.139438][T14762] netlink: 'syz.2.3367': attribute type 10 has an invalid length. [ 479.345827][T14762] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 479.409226][T14761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.417313][T14739] loop3: detected capacity change from 0 to 32768 [ 479.442342][T14739] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3359 (14739) [ 479.490722][T14739] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 479.520353][T14739] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 479.545111][ T4310] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 479.549702][T14739] BTRFS info (device loop3): using free space tree [ 479.732153][T14739] BTRFS info (device loop3): enabling ssd optimizations [ 479.739409][ T4310] usb 9-1: Using ep0 maxpacket: 32 [ 479.746656][ T4310] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 479.815226][ T4310] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 479.834344][T14795] loop5: detected capacity change from 0 to 512 [ 479.851194][T14795] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 479.861733][T14795] EXT4-fs (loop5): orphan cleanup on readonly fs [ 479.878142][T14795] EXT4-fs warning (device loop5): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 479.890279][ T4310] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 479.916429][T14795] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 479.934837][ T4310] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 479.957276][T14795] EXT4-fs error (device loop5): ext4_ext_check_inode:530: inode #13: comm syz.5.3370: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 479.999186][ T4310] usb 9-1: config 0 interface 0 has no altsetting 0 [ 480.000426][T14795] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.3370: couldn't read orphan inode 13 (err -117) [ 480.037476][ T4310] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 480.091429][T14795] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 480.094095][ T4310] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 480.155264][ T4310] usb 9-1: Product: syz [ 480.169945][ T4310] usb 9-1: Manufacturer: syz [ 480.174672][ T4310] usb 9-1: SerialNumber: syz [ 480.204627][T14795] EXT4-fs (loop5): shut down requested (1) [ 480.224966][ T4310] usb 9-1: config 0 descriptor?? [ 480.247658][ T4310] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 480.288454][ T4276] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 480.309420][ T4310] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 480.396707][ T5445] EXT4-fs (loop5): unmounting filesystem. [ 480.679250][T14809] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3372'. [ 480.736160][T14809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3372'. [ 480.976505][ T4454] usb 9-1: USB disconnect, device number 9 [ 480.994151][ T4454] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 481.265426][T14766] loop7: detected capacity change from 0 to 40427 [ 481.378794][T14766] F2FS-fs (loop7): Invalid log_blocksize (64), supports only 12 [ 481.436879][T14766] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 481.546096][T14766] F2FS-fs (loop7): invalid crc value [ 481.672833][T14766] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 481.942349][T14843] loop3: detected capacity change from 0 to 2048 [ 481.971020][T14843] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 481.981163][ T4311] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 482.018000][T14766] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 482.045605][T14846] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 482.170146][ T4311] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 482.186384][ T4311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.225350][ T4311] usb 6-1: config 0 descriptor?? [ 482.262177][ T4311] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 482.375342][T14833] loop8: detected capacity change from 0 to 32768 [ 482.401376][T14833] XFS (loop8): Mounting V5 Filesystem [ 482.453452][T14833] XFS (loop8): Ending clean mount [ 482.459962][ T4311] gp8psk: usb in 128 operation failed. [ 482.607447][T12169] XFS (loop8): Unmounting Filesystem [ 482.683006][ T4311] gp8psk: FW Version = 168.172.30 (0xa8ac1e) Build 2166/109/231 [ 482.883761][ T4311] gp8psk: usb in 149 operation failed. [ 482.889537][ T4311] gp8psk: failed to get FPGA version [ 482.907184][ T4311] gp8psk: usb in 138 operation failed. [ 482.912786][ T4311] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 482.923962][ T4311] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 482.967767][ T4311] usb 6-1: USB disconnect, device number 18 [ 484.657933][ T7] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 484.869407][ T7] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 484.904063][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.953922][ T7] usb 9-1: config 0 descriptor?? [ 484.991109][ T7] cp210x 9-1:0.0: cp210x converter detected [ 485.382530][ T7] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 485.405257][ T7] usb 9-1: cp210x converter now attached to ttyUSB0 [ 485.621814][ T4456] usb 9-1: USB disconnect, device number 10 [ 485.647195][ T4456] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 485.687802][ T4456] cp210x 9-1:0.0: device disconnected [ 485.731418][T14944] loop2: detected capacity change from 0 to 1024 [ 485.773173][T14889] loop7: detected capacity change from 0 to 32768 [ 485.831585][T14944] hfsplus: bad catalog entry type [ 486.027776][T14954] loop3: detected capacity change from 0 to 2048 [ 486.070805][ T4713] hfsplus: b-tree write err: -5, ino 25 [ 486.113116][T14955] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 486.127143][ T4713] hfsplus: b-tree write err: -5, ino 4 [ 486.138489][T14889] XFS (loop7): Mounting V5 Filesystem [ 486.168690][ T4713] hfsplus: b-tree write err: -5, ino 2 [ 486.188369][ T4713] hfsplus: b-tree write err: -5, ino 26 [ 486.606608][T14889] XFS (loop7): Ending clean mount [ 486.658836][ T4454] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 486.858685][ T4454] usb 3-1: Using ep0 maxpacket: 32 [ 486.866541][ T4454] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 486.904248][T11494] XFS (loop7): Unmounting Filesystem [ 486.921638][ T4454] usb 3-1: config 0 interface 0 has no altsetting 0 [ 486.928315][ T4454] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 486.982818][T14978] loop8: detected capacity change from 0 to 1024 [ 487.029518][ T4454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.088886][T14978] hfsplus: bad catalog entry type [ 487.089434][ T4454] usb 3-1: config 0 descriptor?? [ 487.243294][ T11] hfsplus: b-tree write err: -5, ino 25 [ 487.255437][ T11] hfsplus: b-tree write err: -5, ino 4 [ 487.275514][ T11] hfsplus: b-tree write err: -5, ino 2 [ 487.341285][ T11] hfsplus: b-tree write err: -5, ino 26 [ 487.797662][T14971] loop3: detected capacity change from 0 to 40427 [ 487.858825][T14971] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 487.886328][ T4454] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 487.898535][T14971] F2FS-fs (loop3): invalid crc value [ 487.925890][ T4454] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 487.952225][ T4454] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 487.972649][T14992] loop7: detected capacity change from 0 to 64 [ 487.978914][ T4454] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 487.987342][T14971] F2FS-fs (loop3): Found nat_bits in checkpoint [ 488.009439][T14992] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing [ 488.030326][ T4454] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 488.079503][ T4454] corsair-cpro 0003:1B1C:0C10.0018: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 488.229952][T14971] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 488.235265][T14996] loop5: detected capacity change from 0 to 4096 [ 488.328327][T15000] input: syz0 as /devices/virtual/input/input30 [ 488.361999][T15001] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 488.489854][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 488.500086][ T4276] syz-executor: attempt to access beyond end of device [ 488.500086][ T4276] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 488.515888][ T4454] corsair-cpro: probe of 0003:1B1C:0C10.0018 failed with error -110 [ 488.533167][ T4454] usb 3-1: USB disconnect, device number 7 [ 488.650718][T14985] loop8: detected capacity change from 0 to 32768 [ 488.714875][T15011] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3427'. [ 488.768090][T14985] XFS (loop8): Mounting V5 Filesystem [ 488.888975][T15005] fido_id[15005]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 489.018714][T14985] XFS (loop8): Ending clean mount [ 489.276120][T12169] XFS (loop8): Unmounting Filesystem [ 489.283717][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3432'. [ 489.568304][T15037] loop7: detected capacity change from 0 to 128 [ 489.592231][ T27] audit: type=1800 audit(2000002714.244:875): pid=15037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3435" name="file1" dev="loop7" ino=1048772 res=0 errno=0 [ 489.951631][T15024] loop2: detected capacity change from 0 to 32768 [ 490.112092][T15024] XFS (loop2): Mounting V5 Filesystem [ 490.297954][T15024] XFS (loop2): Ending clean mount [ 490.323203][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3441'. [ 490.401138][T15065] device netdevsim0 entered promiscuous mode [ 490.441637][T15065] device netdevsim0 left promiscuous mode [ 490.460719][T13304] XFS (loop2): Unmounting Filesystem [ 490.806408][T15057] loop8: detected capacity change from 0 to 40427 [ 490.839678][T15057] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 490.855678][T15057] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 490.889233][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3445'. [ 490.906440][T15057] F2FS-fs (loop8): invalid crc value [ 490.927723][T15079] loop5: detected capacity change from 0 to 128 [ 490.967218][T15057] F2FS-fs (loop8): Found nat_bits in checkpoint [ 490.997416][T15079] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 491.012982][T15081] netlink: 'syz.7.3446': attribute type 11 has an invalid length. [ 491.048328][T15081] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.3446'. [ 491.076384][T15079] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 491.209602][T15057] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 491.230692][T15057] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 491.294385][ T9] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 491.668479][T15096] loop7: detected capacity change from 0 to 1024 [ 491.745102][T15096] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 491.920472][T11494] EXT4-fs (loop7): unmounting filesystem. [ 492.057134][T15109] netlink: 'syz.7.3454': attribute type 15 has an invalid length. [ 492.101479][ T4913] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 492.324790][ T4913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.351491][ T4913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.361649][ T4913] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 492.389681][T15120] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3459'. [ 492.401457][ T4913] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 492.430954][ T4913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.463207][ T4913] usb 4-1: config 0 descriptor?? [ 492.539763][T15117] loop2: detected capacity change from 0 to 8192 [ 492.622182][T15117] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 492.761888][T15117] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 492.771427][T15117] REISERFS (device loop2): using ordered data mode [ 492.814468][T15117] reiserfs: using flush barriers [ 492.828418][T15117] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 492.879625][ T4913] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x4 [ 492.886997][T15117] REISERFS (device loop2): checking transaction log (loop2) [ 492.922454][ T4913] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 492.930492][T15117] REISERFS (device loop2): Using r5 hash to sort names [ 492.959483][T15117] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 492.981793][ T4913] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 493.092417][T15140] loop7: detected capacity change from 0 to 4096 [ 493.157243][ T4913] usb 4-1: USB disconnect, device number 27 [ 493.220450][T15140] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 493.250958][T15140] ntfs3: loop7: Failed to load $Extend. [ 493.436786][T15144] fido_id[15144]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 493.441982][ T27] audit: type=1800 audit(2000002718.082:876): pid=15140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3463" name="file1" dev="loop7" ino=30 res=0 errno=0 [ 493.516032][T15153] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3466'. [ 493.889600][T15162] loop2: detected capacity change from 0 to 512 [ 494.002350][T15166] loop8: detected capacity change from 0 to 256 [ 494.182627][T15166] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 494.194201][T15169] program syz.7.3474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 494.301124][T15165] loop5: detected capacity change from 0 to 8192 [ 494.355867][T15165] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 494.409105][T15165] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 494.460707][T15165] REISERFS (device loop5): using ordered data mode [ 494.468722][T15165] reiserfs: using flush barriers [ 494.514869][T15181] loop7: detected capacity change from 0 to 256 [ 494.544846][T15165] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 494.653245][T15165] REISERFS (device loop5): checking transaction log (loop5) [ 494.960674][T15195] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3481'. [ 494.979004][T15165] REISERFS (device loop5): Using tea hash to sort names [ 495.023017][T15165] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 495.921692][T15226] netlink: 'syz.2.3494': attribute type 2 has an invalid length. [ 496.153532][ T7] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 496.363477][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 496.370908][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.413467][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.454409][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 496.463910][ T7] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 496.479110][T15243] loop2: detected capacity change from 0 to 512 [ 496.493556][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.525476][ T7] usb 6-1: config 0 descriptor?? [ 496.827111][T15252] loop2: detected capacity change from 0 to 1024 [ 496.938914][T15252] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 496.954460][ T7] hid (null): report_id 4846 is invalid [ 496.960115][ T7] hid (null): invalid report_count -251170499 [ 496.982943][ T7] hid (null): global environment stack underflow [ 497.003160][ T7] hid (null): global environment stack underflow [ 497.023975][ T7] hid (null): unknown global tag 0xc [ 497.050362][ T7] hid (null): usage index exceeded [ 497.140269][T13304] EXT4-fs (loop2): unmounting filesystem. [ 497.218116][ T7] usb 6-1: USB disconnect, device number 19 [ 497.951688][T15255] loop7: detected capacity change from 0 to 32768 [ 497.979805][T15296] futex_wake_op: syz.5.3516 tries to shift op by -1; fix this program [ 498.092497][T15255] XFS (loop7): Mounting V5 Filesystem [ 498.186152][T15255] XFS (loop7): Ending clean mount [ 498.357224][T11494] XFS (loop7): Unmounting Filesystem [ 498.555398][T15320] loop8: detected capacity change from 0 to 512 [ 498.711008][T15320] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3524: inode has both inline data and extents flags [ 498.783110][T15320] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3524: couldn't read orphan inode 15 (err -117) [ 498.842630][T15320] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 498.965492][T15320] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 499.191407][T12169] EXT4-fs (loop8): unmounting filesystem. [ 499.649336][T15358] loop7: detected capacity change from 0 to 1024 [ 499.740514][T15358] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 500.249390][T11494] EXT4-fs (loop7): unmounting filesystem. [ 500.917050][T15360] loop2: detected capacity change from 0 to 32768 [ 501.029882][T15400] loop5: detected capacity change from 0 to 4096 [ 501.050779][T15400] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 501.070128][T15360] XFS (loop2): Mounting V5 Filesystem [ 501.200215][T15414] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 501.238480][T15376] loop3: detected capacity change from 0 to 40427 [ 501.271549][T15376] F2FS-fs (loop3): invalid crc value [ 501.303490][T15376] F2FS-fs (loop3): Found nat_bits in checkpoint [ 501.324688][T15360] XFS (loop2): Ending clean mount [ 501.334115][T15414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 501.378390][T15360] XFS (loop2): Quotacheck needed: Please wait. [ 501.492494][T15376] F2FS-fs (loop3): Start checkpoint disabled! [ 501.523015][T15376] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 501.535367][T15360] XFS (loop2): Quotacheck: Done. [ 501.584754][T15415] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 501.638937][T15415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 501.779919][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.786625][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.977302][T13304] XFS (loop2): Unmounting Filesystem [ 502.132719][ T4713] kworker/u4:7: attempt to access beyond end of device [ 502.132719][ T4713] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 502.269414][T15439] loop5: detected capacity change from 0 to 1024 [ 502.292986][T15439] EXT4-fs: Ignoring removed orlov option [ 502.369020][T15439] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 502.590546][ T5445] EXT4-fs (loop5): unmounting filesystem. [ 502.640756][T15457] loop7: detected capacity change from 0 to 256 [ 502.706330][T15457] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 502.768406][T15460] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3558'. [ 503.685950][T15458] loop8: detected capacity change from 0 to 32768 [ 503.831857][T15458] XFS (loop8): Mounting V5 Filesystem [ 503.859021][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 503.867391][ T4913] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 503.928820][T15458] XFS (loop8): Ending clean mount [ 503.974660][T15458] XFS (loop8): Quotacheck needed: Please wait. [ 504.097387][ T4913] usb 6-1: Using ep0 maxpacket: 32 [ 504.111128][ T4913] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 504.132946][T15458] XFS (loop8): Quotacheck: Done. [ 504.157426][ T4913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.187003][ T4913] usb 6-1: config 0 descriptor?? [ 504.284250][T15509] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3571'. [ 504.435155][ T4913] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 504.444578][T12169] XFS (loop8): Unmounting Filesystem [ 504.457277][ T4913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 504.545147][ T4913] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 504.590907][ T4913] usb 6-1: media controller created [ 504.643072][T15519] loop2: detected capacity change from 0 to 1024 [ 504.678555][ T4913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 504.767917][ T4913] az6027: usb out operation failed. (-71) [ 504.795119][ T4913] az6027: usb out operation failed. (-71) [ 504.805202][ T4913] stb0899_attach: Driver disabled by Kconfig [ 504.832530][ T4913] az6027: no front-end attached [ 504.832530][ T4913] [ 504.843192][ T4913] az6027: usb out operation failed. (-71) [ 504.849352][ T4913] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 504.861848][ T4913] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input31 [ 504.872616][T15519] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.3575: lblock 2 mapped to illegal pblock 2 (length 1) [ 504.874751][ T4913] dvb-usb: schedule remote query interval to 400 msecs. [ 504.895623][ T4913] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 504.911131][ T4913] usb 6-1: USB disconnect, device number 20 [ 505.010506][T15519] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 505.057908][T15519] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.3575: lblock 0 mapped to illegal pblock 48 (length 1) [ 505.144903][ T4913] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 505.155159][T15519] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 505.168917][T15519] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.3575: Failed to acquire dquot type 0 [ 505.190813][T15519] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 505.261458][T15519] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.3575: mark_inode_dirty error [ 505.315189][T15519] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 505.351855][T15519] EXT4-fs (loop2): 1 orphan inode deleted [ 505.372046][ T4713] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 505.377898][T15519] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 505.436699][T15535] loop8: detected capacity change from 0 to 128 [ 505.467502][ T4713] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 505.496626][ T4713] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:7: Failed to release dquot type 0 [ 505.512252][T15535] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 505.532900][T15535] ext4 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 505.575636][T15535] fscrypt (loop8, inode 12): Mutually exclusive encryption flags (0x18) [ 505.681007][T13304] EXT4-fs (loop2): unmounting filesystem. [ 505.720226][ T11] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 505.782649][ T11] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 505.798172][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 0 [ 505.833171][T13304] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 505.833597][T12169] EXT4-fs (loop8): unmounting filesystem. [ 505.940003][T13304] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 505.984843][T13304] EXT4-fs error (device loop2): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 506.377676][T15566] loop2: detected capacity change from 0 to 512 [ 506.465230][T15566] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 506.484412][T15566] EXT4-fs (loop2): orphan cleanup on readonly fs [ 506.552707][T15566] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 506.630855][T15566] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 506.648128][T15566] EXT4-fs error (device loop2): ext4_ext_check_inode:530: inode #13: comm syz.2.3590: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 506.688853][T15566] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3590: couldn't read orphan inode 13 (err -117) [ 506.737898][T15552] loop8: detected capacity change from 0 to 32768 [ 506.758036][T15566] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 506.836654][T15566] EXT4-fs (loop2): shut down requested (1) [ 506.931638][T15552] XFS (loop8): Mounting V5 Filesystem [ 506.981065][T13304] EXT4-fs (loop2): unmounting filesystem. [ 507.182764][T15552] XFS (loop8): Ending clean mount [ 507.416655][T12169] XFS (loop8): Unmounting Filesystem [ 507.576987][T15622] program syz.2.3598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 507.920750][T15629] loop2: detected capacity change from 0 to 8 [ 507.971672][T15629] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 508.035949][ T5268] udevd[5268]: incorrect cramfs checksum on /dev/loop2 [ 508.552039][T15650] ALSA: mixer_oss: invalid OSS volume 'ÝÝ' [ 508.819842][ T9580] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 509.011824][ T9580] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 509.027609][ T9580] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 509.037061][ T9580] usb 3-1: config 0 has no interface number 0 [ 509.043521][ T9580] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 509.057441][ T9580] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 509.100543][ T9580] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.124556][ T9580] usb 3-1: config 0 descriptor?? [ 509.134960][ T27] audit: type=1326 audit(2000002733.774:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15674 comm="syz.8.3617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f074699c819 code=0x0 [ 509.164789][T15652] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 509.528172][T15668] loop5: detected capacity change from 0 to 32768 [ 509.641048][T15668] XFS (loop5): Mounting V5 Filesystem [ 509.677270][T15668] XFS (loop5): Ending clean mount [ 509.704341][T15668] XFS (loop5): Quotacheck needed: Please wait. [ 509.801617][T15668] XFS (loop5): Quotacheck: Done. [ 509.825595][ T9580] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input32 [ 509.987642][ T5445] XFS (loop5): Unmounting Filesystem [ 510.082705][ T5762] usb 3-1: USB disconnect, device number 8 [ 510.082792][ C0] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 510.215381][T15706] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3622'. [ 510.226351][T15706] netem: unknown loss type 13 [ 510.238246][T15706] netem: change failed [ 510.983101][T15733] loop2: detected capacity change from 0 to 64 [ 511.089470][T15736] loop8: detected capacity change from 0 to 256 [ 511.094777][T15733] Trying to free block not in datazone [ 511.123756][T15736] exfat: Deprecated parameter 'utf8' [ 511.196740][T15736] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 511.449371][T15742] loop8: detected capacity change from 0 to 512 [ 511.473843][T15742] EXT4-fs: Ignoring removed bh option [ 511.584890][T15742] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 511.742326][T15742] EXT4-fs (loop8): 1 truncate cleaned up [ 511.748126][T15742] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 511.868539][T15756] loop7: detected capacity change from 0 to 256 [ 511.876681][T15742] EXT4-fs (loop8): shut down requested (2) [ 511.939425][T15756] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 512.127865][T12169] EXT4-fs (loop8): unmounting filesystem. [ 512.487732][T15777] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 512.701607][ T5760] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 512.906528][T15790] loop8: detected capacity change from 0 to 4096 [ 512.921946][ T5760] usb 6-1: Using ep0 maxpacket: 32 [ 512.929083][ T5760] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 512.951520][ T5760] usb 6-1: config 0 has no interface number 0 [ 512.989461][ T5760] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 513.029554][ T5760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.058630][ T5760] usb 6-1: Product: syz [ 513.065091][ T5760] usb 6-1: Manufacturer: syz [ 513.087467][ T5760] usb 6-1: SerialNumber: syz [ 513.111146][T15790] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 513.126941][ T5760] usb 6-1: config 0 descriptor?? [ 513.150830][ T5760] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 513.208134][T15790] ntfs3: loop8: Failed to load $Extend. [ 513.356421][ T5760] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 513.388809][ T5760] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 513.808399][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 513.809061][ T4311] usb 6-1: USB disconnect, device number 21 [ 513.852321][T15815] could not allocate digest TFM handle -¿ÆqøêÊâ4¿OÃ(0&qú´f·=¯*΀¯òøj„¸$€ŒÆª­ü€«;º}'üj°O [ 513.862837][ T4311] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 513.945192][ T4311] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 513.997774][ T4311] quatech2 6-1:0.51: device disconnected [ 515.643107][ T5760] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 515.844934][ T5760] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 515.862708][ T5760] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 515.909843][ T5760] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 515.948155][ T5760] usb 9-1: config 0 interface 0 has no altsetting 0 [ 515.967152][ T5760] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 515.989099][ T5760] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 516.031019][ T5760] usb 9-1: config 0 interface 0 has no altsetting 0 [ 516.052226][ T5760] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 516.078247][ T5760] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 516.110512][ T5760] usb 9-1: config 0 interface 0 has no altsetting 0 [ 516.151834][ T5760] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 516.191070][ T5760] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 516.231448][ T5760] usb 9-1: config 0 interface 0 has no altsetting 0 [ 516.259805][ T5760] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 516.289195][ T5760] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 516.317869][ T5760] usb 9-1: config 0 interface 0 has no altsetting 0 [ 516.336224][T15901] loop3: detected capacity change from 0 to 1024 [ 516.338007][ T5760] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 516.383151][ T5760] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 516.431116][T15901] hfsplus: request for non-existent node 3 in B*Tree [ 516.444251][ T5760] usb 9-1: config 0 interface 0 has no altsetting 0 [ 516.456646][T15901] hfsplus: request for non-existent node 3 in B*Tree [ 516.465641][ T5760] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 516.492814][ T5760] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 516.531851][ T5760] usb 9-1: config 0 interface 0 has no altsetting 0 [ 516.554376][ T5760] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 516.555103][T15901] hfsplus: request for non-existent node 4 in B*Tree [ 516.589503][ T5760] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 516.633646][T15901] hfsplus: request for non-existent node 4 in B*Tree [ 516.648481][ T5760] usb 9-1: config 0 interface 0 has no altsetting 0 [ 516.671684][ T5760] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 516.700183][ T5760] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 516.746494][ T5760] usb 9-1: Product: syz [ 516.763177][ T5760] usb 9-1: Manufacturer: syz [ 516.777517][ T5760] usb 9-1: SerialNumber: syz [ 516.804052][ T5760] usb 9-1: config 0 descriptor?? [ 516.864751][ T5760] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 516.913177][T15914] ax25_connect(): syz.3.3690 uses autobind, please contact jreuter@yaina.de [ 516.939675][T15914] ax25_connect(): syz.3.3690 uses autobind, please contact jreuter@yaina.de [ 517.223619][ C1] usb 9-1: yurex_control_callback - control failed: -71 [ 517.259580][ T5768] usb 9-1: USB disconnect, device number 11 [ 517.277018][ T5768] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 517.298058][T15927] dvmrp1: tun_chr_ioctl cmd 2147767519 [ 517.951525][T15925] loop5: detected capacity change from 0 to 32768 [ 518.787572][T15941] loop2: detected capacity change from 0 to 32768 [ 518.958841][T15961] loop8: detected capacity change from 0 to 4096 [ 519.028342][T15961] ntfs3: loop8: Different NTFS' sector size (2048) and media sector size (512) [ 520.337283][T16011] loop2: detected capacity change from 0 to 512 [ 520.564078][T16018] loop8: detected capacity change from 0 to 64 [ 520.687630][T15984] loop3: detected capacity change from 0 to 40427 [ 520.723957][T15984] F2FS-fs (loop3): invalid crc value [ 520.799019][T15984] F2FS-fs (loop3): Found nat_bits in checkpoint [ 520.949547][T15984] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 520.990328][T15984] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 521.144752][T15984] syz.3.3714: attempt to access beyond end of device [ 521.144752][T15984] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 521.345377][T16042] 9p: Unknown Cache mode readahead [ 521.539648][T16050] __vm_enough_memory: pid: 16050, comm: syz.2.3733, no enough memory for the allocation [ 521.979090][T16059] loop2: detected capacity change from 0 to 4096 [ 522.821354][T16089] 9pnet_fd: Insufficient options for proto=fd [ 523.344486][T16106] loop2: detected capacity change from 0 to 256 [ 523.462148][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3754'. [ 523.493002][T16080] loop5: detected capacity change from 0 to 32768 [ 524.000307][T16120] loop7: detected capacity change from 0 to 4096 [ 524.017247][ T5768] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 524.051790][T16120] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 524.220235][ T5768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.262573][ T5768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.333564][ T5768] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 524.416219][ T5768] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.459685][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.501180][ T5768] usb 3-1: config 0 descriptor?? [ 524.826100][T16139] loop8: detected capacity change from 0 to 1024 [ 524.910037][T16139] hfsplus: unable to parse mount options [ 524.953881][ T5768] plantronics 0003:047F:FFFF.001B: unbalanced delimiter at end of report description [ 525.008399][ T5768] plantronics 0003:047F:FFFF.001B: parse failed [ 525.054031][ T5768] plantronics: probe of 0003:047F:FFFF.001B failed with error -22 [ 525.202084][ T5768] usb 3-1: USB disconnect, device number 9 [ 525.418306][T16135] loop3: detected capacity change from 0 to 131072 [ 525.426125][T16135] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 525.434842][T16135] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 525.444012][T16135] F2FS-fs (loop3): invalid crc value [ 525.511815][T16135] F2FS-fs (loop3): Found nat_bits in checkpoint [ 525.516729][T16151] loop7: detected capacity change from 0 to 16 [ 525.552414][T16135] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 525.559980][T16135] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 525.597653][T16151] erofs: (device loop7): mounted with root inode @ nid 36. [ 525.622738][T16151] erofs: (device loop7): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 525.646896][T16151] syz.7.3764: attempt to access beyond end of device [ 525.646896][T16151] loop7: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 525.716602][T16151] erofs: (device loop7): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 525.768570][T16151] syz.7.3764: attempt to access beyond end of device [ 525.768570][T16151] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 525.874161][T16151] syz.7.3764: attempt to access beyond end of device [ 525.874161][T16151] loop7: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 525.882151][T16157] tap0: tun_chr_ioctl cmd 1074025677 [ 525.938723][T16157] tap0: linktype set to 823 [ 525.943735][T16159] netlink: 'syz.5.3768': attribute type 8 has an invalid length. [ 525.952022][ T27] audit: type=1800 audit(2000002750.575:878): pid=16151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3764" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 525.999015][T16159] sch_fq: defrate 0 ignored. [ 526.037516][T16151] syz.7.3764 (16151) used greatest stack depth: 19664 bytes left [ 527.214742][T16161] loop2: detected capacity change from 0 to 40427 [ 527.292424][T16161] F2FS-fs (loop2): invalid crc value [ 527.346004][T16161] F2FS-fs (loop2): Found nat_bits in checkpoint [ 527.429310][T16208] 9pnet_fd: p9_fd_create_unix (16208): problem connecting socket: ./file0: -111 [ 527.529940][T16161] F2FS-fs (loop2): Start checkpoint disabled! [ 527.597012][T16161] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 527.737586][T16161] F2FS-fs (loop2): Unexpected flush for atomic writes: ino=10, npages=16 [ 527.792674][T16161] syz.2.3767: attempt to access beyond end of device [ 527.792674][T16161] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 527.901049][T16220] netlink: 'syz.8.3788': attribute type 5 has an invalid length. [ 527.961996][T16183] loop7: detected capacity change from 0 to 40427 [ 528.004349][T16183] F2FS-fs (loop7): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 528.059619][T16183] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 528.070309][ T9] kworker/u4:0: attempt to access beyond end of device [ 528.070309][ T9] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 528.083575][T16183] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x35f7 [ 528.093474][T16183] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x3ffff [ 528.155135][T16183] F2FS-fs (loop7): invalid crc value [ 528.188962][T16183] F2FS-fs (loop7): Found nat_bits in checkpoint [ 528.420079][T16183] F2FS-fs (loop7): Start checkpoint disabled! [ 528.469571][T16183] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 528.476661][T16183] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 528.778744][T16244] loop8: detected capacity change from 0 to 512 [ 528.831600][T16244] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 529.222793][T16253] loop5: detected capacity change from 0 to 512 [ 529.262408][T16253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 529.381268][T16253] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3798: invalid indirect mapped block 4294967295 (level 1) [ 529.445395][ T4326] kworker/u4:6: attempt to access beyond end of device [ 529.445395][ T4326] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 529.490723][T16253] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3798: invalid indirect mapped block 4294967295 (level 1) [ 529.496694][T16263] loop2: detected capacity change from 0 to 256 [ 529.538615][T16253] EXT4-fs (loop5): 2 truncates cleaned up [ 529.557912][T16253] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 529.584770][T16263] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 529.692852][T16253] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3798'. [ 529.831777][ T5445] EXT4-fs (loop5): unmounting filesystem. [ 530.294604][T16276] loop3: detected capacity change from 0 to 4096 [ 530.881011][T16270] loop2: detected capacity change from 0 to 32768 [ 531.231380][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3811'. [ 531.877599][ T4275] Bluetooth: hci0: command 0x040e tx timeout [ 532.292090][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3822'. [ 532.411482][ T4310] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 532.470055][T16308] loop8: detected capacity change from 0 to 32768 [ 532.631661][ T4310] usb 4-1: Using ep0 maxpacket: 8 [ 532.640939][ T4310] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 532.700259][ T4310] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 532.748116][ T4310] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 532.750879][T16343] loop7: detected capacity change from 0 to 64 [ 532.781603][ T4310] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.828664][ T4310] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 532.859293][ T27] audit: type=1800 audit(2000002757.482:879): pid=16343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3826" name="file1" dev="loop7" ino=8 res=0 errno=0 [ 532.869442][ T4310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.193399][ T4310] usb 4-1: GET_CAPABILITIES returned 0 [ 533.199702][ T4310] usbtmc 4-1:16.0: can't read capabilities [ 533.279979][T16350] loop2: detected capacity change from 0 to 4096 [ 533.327068][T16350] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 533.472318][ T4310] usb 4-1: USB disconnect, device number 28 [ 534.574391][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3843'. [ 534.725439][ T7] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 534.919113][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.937864][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 534.952311][ T7] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 534.967136][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 534.975953][ T7] usb 4-1: SerialNumber: syz [ 535.198925][ T7] usb 4-1: 0:2 : does not exist [ 535.230086][ T7] usb 4-1: USB disconnect, device number 29 [ 535.464379][ T5268] udevd[5268]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.964189][T16436] loop2: detected capacity change from 0 to 4096 [ 536.100311][T16436] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 536.107504][T16448] loop7: detected capacity change from 0 to 256 [ 536.142012][T16444] loop3: detected capacity change from 0 to 4096 [ 536.180111][T16448] exfat: Deprecated parameter 'utf8' [ 536.198533][T16444] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 536.209771][T16453] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 536.211406][T16448] exfat: Deprecated parameter 'utf8' [ 536.347722][T16448] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 536.439192][T13304] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 536.530664][T16461] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3852'. [ 537.091759][T16478] loop8: detected capacity change from 0 to 256 [ 537.098436][T16480] loop5: detected capacity change from 0 to 1024 [ 537.183565][T16478] FAT-fs (loop8): Directory bread(block 64) failed [ 537.257528][T16478] FAT-fs (loop8): Directory bread(block 65) failed [ 537.287747][T16478] FAT-fs (loop8): Directory bread(block 66) failed [ 537.297048][T16480] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 537.358006][T16478] FAT-fs (loop8): Directory bread(block 67) failed [ 537.377051][T16480] ext4 filesystem being mounted at /734/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.417374][T16478] FAT-fs (loop8): Directory bread(block 68) failed [ 537.470664][T16478] FAT-fs (loop8): Directory bread(block 69) failed [ 537.559432][T16478] FAT-fs (loop8): Directory bread(block 70) failed [ 537.610191][ T5760] kernel write not supported for file /adsp1 (pid: 5760 comm: kworker/1:13) [ 537.614072][T16478] FAT-fs (loop8): Directory bread(block 71) failed [ 537.654155][ T4310] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 537.683508][ T5445] EXT4-fs (loop5): unmounting filesystem. [ 537.712535][T16478] FAT-fs (loop8): Directory bread(block 72) failed [ 537.742831][T16478] FAT-fs (loop8): Directory bread(block 73) failed [ 537.846920][ T4310] usb 4-1: config 1 has an invalid interface number: 234 but max is 1 [ 537.885843][ T4310] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 537.940401][ T4310] usb 4-1: config 1 has no interface number 2 [ 537.964240][ T4310] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 537.991514][ T4310] usb 4-1: config 1 interface 234 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 538.012269][ T4310] usb 4-1: config 1 interface 234 has no altsetting 0 [ 538.033060][T16516] loop7: detected capacity change from 0 to 1024 [ 538.065759][T16516] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 538.085949][ T4310] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 538.124616][T16516] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.154352][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.172293][ T27] audit: type=1800 audit(2000002762.799:880): pid=16516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3869" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 538.205503][ T4310] usb 4-1: Product: syz [ 538.209725][ T4310] usb 4-1: Manufacturer: syz [ 538.220051][T16516] EXT4-fs error (device loop7): ext4_map_blocks:745: inode #15: comm syz.7.3869: lblock 0 mapped to illegal pblock 0 (length 1) [ 538.236175][ T4310] usb 4-1: SerialNumber: syz [ 538.269530][ T4310] usb 4-1: selecting invalid altsetting 1 [ 538.281092][T16516] EXT4-fs (loop7): Remounting filesystem read-only [ 538.302330][T16516] EXT4-fs error (device loop7): ext4_ext_remove_space:2941: inode #15: comm syz.7.3869: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 538.332924][T16516] EXT4-fs (loop7): Remounting filesystem read-only [ 538.407295][T11494] EXT4-fs (loop7): unmounting filesystem. [ 538.508823][T16532] loop2: detected capacity change from 0 to 2048 [ 538.560079][T16532] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 538.670525][ T4310] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 538.694399][ T4310] cdc_ncm 4-1:1.0: bind() failure [ 538.707585][ T4310] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 538.714451][ T4310] cdc_ncm 4-1:1.1: bind() failure [ 538.725042][T16491] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 538.979663][ T7] usb 4-1: USB disconnect, device number 30 [ 539.277695][T16558] loop8: detected capacity change from 0 to 64 [ 539.421193][T16560] program syz.8.3886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 539.514948][ T4454] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 539.529563][T16562] loop8: detected capacity change from 0 to 64 [ 539.572094][T16562] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing [ 539.680835][ T7] kernel read not supported for file /dsp1 (pid: 7 comm: kworker/0:0) [ 539.707585][ T4454] usb 6-1: unable to get BOS descriptor or descriptor too short [ 539.730671][T16566] loop3: detected capacity change from 0 to 2048 [ 539.739228][ T4454] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 539.764003][T16566] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 539.765046][ T4454] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.817154][T16566] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 539.835460][ T4454] usb 6-1: Product: syz [ 539.839867][ T4454] usb 6-1: Manufacturer: syz [ 539.844780][ T4454] usb 6-1: SerialNumber: syz [ 539.850934][T16566] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 539.861630][T16566] UDF-fs: Scanning with blocksize 512 failed [ 539.932136][T16566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 540.154290][T16568] loop2: detected capacity change from 0 to 8192 [ 540.202289][T16568] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 540.215780][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3893'. [ 540.307205][T16568] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 540.316693][T16568] REISERFS (device loop2): using ordered data mode [ 540.333266][T16568] reiserfs: using flush barriers [ 540.341257][T16568] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 540.366404][T16568] REISERFS (device loop2): checking transaction log (loop2) [ 540.590238][T16568] REISERFS (device loop2): Using r5 hash to sort names [ 540.603291][T16568] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 540.702423][ T4454] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1 [ 540.775818][ T4454] usb 6-1: USB disconnect, device number 22 [ 541.067386][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.181548][T16597] loop2: detected capacity change from 0 to 256 [ 541.207614][T16599] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 541.241813][ T9] wlan1: Trigger new scan to find an IBSS to join [ 541.243620][T16597] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x3fea7030, utbl_chksum : 0xe619d30d) [ 541.296040][ T9] ------------[ cut here ]------------ [ 541.302823][ T9] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40 [ 541.314077][ T9] WARNING: CPU: 0 PID: 9 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 541.323941][ T9] Modules linked in: [ 541.327915][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 541.335230][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 541.345519][ T9] Workqueue: events_unbound cfg80211_wiphy_work [ 541.351846][ T9] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 541.358165][ T9] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 20 a9 a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 fb ef a4 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 541.377867][ T9] RSP: 0018:ffffc900000e7400 EFLAGS: 00010246 [ 541.383967][ T9] RAX: c4e208aa4809f800 RBX: 000000000000000c RCX: ffff88813fec0000 [ 541.392029][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 541.400080][ T9] RBP: 0000000000000084 R08: ffffc900000e7087 R09: 1ffff9200001ce10 [ 541.408138][ T9] R10: dffffc0000000000 R11: fffff5200001ce11 R12: 0000000000000040 [ 541.416180][ T9] R13: dffffc0000000000 R14: ffff888027e13358 R15: ffff88802ed02de8 [ 541.424195][ T9] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 541.433224][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.440080][ T9] CR2: 00007fff9a607938 CR3: 00000000297ea000 CR4: 00000000003526f0 [ 541.448137][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 541.456184][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 541.464185][ T9] Call Trace: [ 541.467545][ T9] [ 541.470513][ T9] rate_control_send_low+0x194/0x790 [ 541.476065][ T9] rate_control_get_rate+0x207/0x5c0 [ 541.481393][ T9] ieee80211_tx_h_rate_ctrl+0xb1a/0x1750 [ 541.487133][ T9] ? ieee80211_tx_h_select_key+0x17b0/0x17b0 [ 541.493161][ T9] ? ieee80211_queue_skb+0xc2/0x21c0 [ 541.498542][ T9] invoke_tx_handlers_late+0xb6/0x1810 [ 541.504034][ T9] ? ieee80211_tx_h_select_key+0x126d/0x17b0 [ 541.510130][ T9] ? sta_info_get+0x289/0x2a0 [ 541.514844][ T9] ? invoke_tx_handlers_early+0xa11/0x1d40 [ 541.520749][ T9] ieee80211_tx+0x2d4/0x460 [ 541.525281][ T9] ? ieee80211_skb_resize+0x630/0x630 [ 541.530787][ T9] ? ieee80211_set_qos_hdr+0x1c6/0x510 [ 541.536368][ T9] ? __bpf_trace_tasklet+0x10/0x10 [ 541.541883][ T9] ? ieee80211_xmit+0x30c/0x3f0 [ 541.546838][ T9] ? __ieee80211_tx_skb_tid_band+0x48c/0x610 [ 541.552855][ T9] __ieee80211_tx_skb_tid_band+0x4d1/0x610 [ 541.558751][ T9] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 541.565107][ T9] ieee80211_scan_state_send_probe+0x560/0x930 [ 541.571362][ T9] ieee80211_scan_work+0x4d3/0x1bc0 [ 541.576658][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 541.581715][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 541.587381][ T9] cfg80211_wiphy_work+0x221/0x260 [ 541.592536][ T9] ? process_one_work+0x7b0/0x1160 [ 541.597734][ T9] process_one_work+0x8a2/0x1160 [ 541.602724][ T9] ? worker_detach_from_pool+0x240/0x240 [ 541.608444][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 541.613508][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 541.619141][ T9] ? kthread_data+0x4b/0xc0 [ 541.623678][ T9] worker_thread+0xaa2/0x1270 [ 541.628468][ T9] kthread+0x29d/0x330 [ 541.632749][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 541.637996][ T9] ? kthread_blkcg+0xd0/0xd0 [ 541.642632][ T9] ret_from_fork+0x1f/0x30 [ 541.647158][ T9] [ 541.650202][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 541.657504][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 541.664820][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 541.674910][ T9] Workqueue: events_unbound cfg80211_wiphy_work [ 541.681187][ T9] Call Trace: [ 541.684543][ T9] [ 541.687498][ T9] dump_stack_lvl+0x188/0x24e [ 541.692227][ T9] ? memcpy+0x3c/0x60 [ 541.696232][ T9] ? show_regs_print_info+0x12/0x12 [ 541.701469][ T9] ? load_image+0x400/0x400 [ 541.706005][ T9] panic+0x2e5/0x730 [ 541.709927][ T9] ? bpf_jit_dump+0xd0/0xd0 [ 541.714462][ T9] ? ret_from_fork+0x1f/0x30 [ 541.719087][ T9] __warn+0x2f8/0x4f0 [ 541.723090][ T9] ? __rate_control_send_low+0x635/0x880 [ 541.728802][ T9] ? __rate_control_send_low+0x635/0x880 [ 541.734471][ T9] report_bug+0x2ba/0x4f0 [ 541.738844][ T9] ? __rate_control_send_low+0x635/0x880 [ 541.744600][ T9] handle_bug+0x3a/0x70 [ 541.748892][ T9] exc_invalid_op+0x16/0x40 [ 541.753442][ T9] asm_exc_invalid_op+0x16/0x20 [ 541.758320][ T9] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 541.764584][ T9] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 20 a9 a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 fb ef a4 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 541.784385][ T9] RSP: 0018:ffffc900000e7400 EFLAGS: 00010246 [ 541.790467][ T9] RAX: c4e208aa4809f800 RBX: 000000000000000c RCX: ffff88813fec0000 [ 541.798434][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 541.806401][ T9] RBP: 0000000000000084 R08: ffffc900000e7087 R09: 1ffff9200001ce10 [ 541.814376][ T9] R10: dffffc0000000000 R11: fffff5200001ce11 R12: 0000000000000040 [ 541.822341][ T9] R13: dffffc0000000000 R14: ffff888027e13358 R15: ffff88802ed02de8 [ 541.830330][ T9] rate_control_send_low+0x194/0x790 [ 541.835636][ T9] rate_control_get_rate+0x207/0x5c0 [ 541.840959][ T9] ieee80211_tx_h_rate_ctrl+0xb1a/0x1750 [ 541.846610][ T9] ? ieee80211_tx_h_select_key+0x17b0/0x17b0 [ 541.852592][ T9] ? ieee80211_queue_skb+0xc2/0x21c0 [ 541.857883][ T9] invoke_tx_handlers_late+0xb6/0x1810 [ 541.863336][ T9] ? ieee80211_tx_h_select_key+0x126d/0x17b0 [ 541.869307][ T9] ? sta_info_get+0x289/0x2a0 [ 541.873980][ T9] ? invoke_tx_handlers_early+0xa11/0x1d40 [ 541.879787][ T9] ieee80211_tx+0x2d4/0x460 [ 541.884387][ T9] ? ieee80211_skb_resize+0x630/0x630 [ 541.889762][ T9] ? ieee80211_set_qos_hdr+0x1c6/0x510 [ 541.895223][ T9] ? __bpf_trace_tasklet+0x10/0x10 [ 541.900435][ T9] ? ieee80211_xmit+0x30c/0x3f0 [ 541.905340][ T9] ? __ieee80211_tx_skb_tid_band+0x48c/0x610 [ 541.911333][ T9] __ieee80211_tx_skb_tid_band+0x4d1/0x610 [ 541.917153][ T9] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 541.923590][ T9] ieee80211_scan_state_send_probe+0x560/0x930 [ 541.929860][ T9] ieee80211_scan_work+0x4d3/0x1bc0 [ 541.935171][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 541.940295][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 541.946032][ T9] cfg80211_wiphy_work+0x221/0x260 [ 541.951167][ T9] ? process_one_work+0x7b0/0x1160 [ 541.956364][ T9] process_one_work+0x8a2/0x1160 [ 541.961398][ T9] ? worker_detach_from_pool+0x240/0x240 [ 541.967034][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 541.972053][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 541.977597][ T9] ? kthread_data+0x4b/0xc0 [ 541.982119][ T9] worker_thread+0xaa2/0x1270 [ 541.987005][ T9] kthread+0x29d/0x330 [ 541.991121][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 541.996262][ T9] ? kthread_blkcg+0xd0/0xd0 [ 542.000873][ T9] ret_from_fork+0x1f/0x30 [ 542.005350][ T9] [ 542.008860][ T9] Kernel Offset: disabled [ 542.013334][ T9] Rebooting in 86400 seconds..